Re: [OE-core] [PATCH] gstreamer1.0-plugins-bad: add PACKAGECONFIG for onevpl

2022-07-27 Thread Naveen Saini
Please ignore this patch. It needs some re-work ! Regards, Naveen > -Original Message- > From: openembedded-core@lists.openembedded.org c...@lists.openembedded.org> On Behalf Of Naveen Saini > Sent: Thursday, July 28, 2022 12:47 PM > To: openembedded-core@lists.openembedded.org > Subject

[OE-core] [dunfell][PATCH] libtirpc: CVE-2021-46828 DoS vulnerability with lots of connections

2022-07-27 Thread Hitendra Prajapati
Source: http://git.linux-nfs.org/?p=steved/libtirpc.git; MR: 120231 Type: Security Fix Disposition: Backport from http://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=86529758570cef4c73fb9b9c4104fdc510f701ed ChangeID: 544120a5f10a4717cd2c7291821a012e26b14b7f Description: CVE-2021-468

[OE-core] [PATCH] gstreamer1.0-plugins-bad: add PACKAGECONFIG for onevpl

2022-07-27 Thread Naveen Saini
Allow user to build this plugin against MFX version 2.2+ (oneVPL) https://github.com/GStreamer/gst-plugins-bad/commit/beda9a73339bef878e95798f629a868c647627ce Signed-off-by: Naveen Saini --- .../gstreamer/gstreamer1.0-plugins-bad_1.20.3.bb | 1 + 1 file changed, 1 insertion(+)

Re: [OE-core] [meta-oe][PATCH v2] classes: rootfs-postcommands: autologin root on serial-getty

2022-07-27 Thread Johannes Schneider via lists.openembedded.org
good question, haven't had a sysvinit system in ages... so no easy "let's test it on this platform" :-s do you happen to have one? should the patch include a warning to sysvinit users like "not supported" "config switch only applies to systemd" ... suggestions? (-: the only sysvinit+getty refe

Re: [OE-core] [PATCHv2]] recipes-support: rng-tools change systemd service name

2022-07-27 Thread Khem Raj
On 7/27/22 10:51 AM, An?bal Lim?n wrote: On Wed, Jul 27, 2022 at 5:44 AM Luca Ceresoli > wrote: Hello Aníbal, On Tue, 26 Jul 2022 14:33:22 -0500 "An?bal Lim?n" mailto:limon.ani...@gmail.com>> wrote: > From: Aníbal Limón mailto:limon.ani..

Re: [OE-core] [kirkstone][master][PATCH] apt: fix do_package_qa failure

2022-07-27 Thread Changqing Li
On 7/27/22 19:51, Alexander Kanavin wrote: [Please note: This e-mail is from an EXTERNAL e-mail address] What is actually being installed in there? Is it really right to remove it? An empty dir apt is installed under /var/log/. It should be ok to remove it since apt could create it when it d

[OE-core] [kirkstone][PATCH] libtirpc: CVE-2021-46828 DoS vulnerability with lots of connections

2022-07-27 Thread Hitendra Prajapati
Source: http://git.linux-nfs.org/?p=steved/libtirpc.git; MR: 120225 Type: Security Fix Disposition: Backport from http://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=86529758570cef4c73fb9b9c4104fdc510f701ed ChangeID: 29c32ee171a6a47e06c788e5c608fac9bb3a64b2 Description: CVE-2021-468

[OE-core][PATCH] grub2: fix several CVEs

2022-07-27 Thread Yongxin Liu
Backport CVE patches from upstream to fix: CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-28733 CVE-2022-28734 CVE-2022-28735 CVE-2022-28736 Backport the following 5 patches to make CVE patches be applied smoothly. video-Remove-trailing-whitespaces.patch video-readers-jpeg-Ab

Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Ross Burton
> The patch sanity check should warn about it as it does for the status header. > I said, RP can add it. Easier said than done when a patch already contains S-o-b and we want to allow people to S-o-b from their corporate accounts whilst posting patches from their personal account. Ross -- Otav

Re: [oe-core][kirkstone][PATCH 1/1] lua: Backport fix for CVE-2022-33099

2022-07-27 Thread Steve Sakoman
This patch is in the set currently out for review: https://lists.openembedded.org/g/openembedded-core/message/168524 So it should hit kirkstone in the next few days. Steve On Wed, Jul 27, 2022 at 7:48 AM Joe Slater wrote: > > From: Khem Raj > > Fixes stack overflow while handling recurring

Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Alexander Kanavin
Adding s-o-b in behalf of others is not allowed, it's akin to a signature - it literally says 'signed off by me'. The only s-o-b you can add is your own. Besides, RP should not be fixing up things for you, and when he does it's a favour and not an entitlement. Alex On Wed, 27 Jul 2022 at 18:56,

[oe-core][kirkstone][PATCH 1/1] lua: Backport fix for CVE-2022-33099

2022-07-27 Thread Joe Slater
From: Khem Raj Fixes stack overflow while handling recurring errors in Lua-stack Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit caad9d5f7184f0fa60fa7770e5d3da3f533647cb) Signed-off-by: Joe Slater --- .../lua/lua/CVE-2022-33099.patch | 61 +++

Re: [OE-core] [PATCH 2/3] oeqa/sdk: Add basic rust cargo test

2022-07-27 Thread Otavio Salvador
Em qua., 27 de jul. de 2022 às 13:48, Luca Ceresoli via lists.openembedded.org escreveu: > On Tue, 26 Jul 2022 15:24:12 +0100 > "Richard Purdie" wrote: > > > From: Otavio Salvador > > > > Add a QA test to the SDK to test that a basic cargo build works. > > > > [RP: Tweaked to work for multilibs

[OE-core] [PATCH] create-spdx: Fix supplier field

2022-07-27 Thread Mihai Lindner
The correct field name is "supplier" according to SPDX schema. The "supplier" field translates to "PackageSupplier", but that's for tag-value format. Signed-off-by: Mihai Lindner --- meta/classes/create-spdx.bbclass | 6 +++--- meta/lib/oe/spdx.py | 2 +- 2 files changed, 4 insertio

Re: [OE-core] [meta-oe][PATCH] wic/direct.py: ignore root mountpoint in fstab updater

2022-07-27 Thread Markus Volk
But looking at the commit that introduced the problem, I see that it completely undoes it. In general, I like the idea of having the fstab_updater create the root entry, but for this to work without duplication, the /dev/root entry would have to be removed from fstab. This would force any wic im

Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Otavio Salvador
Sent :-) Em qua., 27 de jul. de 2022 às 13:45, Khem Raj escreveu: > > > On 7/27/22 12:41 PM, Otavio Salvador wrote: > > > > > > Em qua., 27 de jul. de 2022 às 13:35, Ross Burton > > escreveu: > > > > Whoever adds the patch needs to add their S-o-b. > > > > > > Th

[OE-core] [PATCH v2] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Otavio Salvador
Backport a fix from 1.0.27 so we only link atomic if no atomic builtins are available. Signed-off-by: Otavio Salvador --- Changes in v2: - add signed-off-by ...k-with-latomic-only-if-no-atomic-bui.patch | 53 +++ meta/recipes-support/libusb/libusb1_1.0.26.bb | 1 + 2 files cha

Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Khem Raj
On 7/27/22 12:41 PM, Otavio Salvador wrote: Em qua., 27 de jul. de 2022 às 13:35, Ross Burton > escreveu: Whoever adds the patch needs to add their S-o-b. The patch sanity check should warn about it as it does for the status header. I said, RP can add it.

Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Otavio Salvador
Em qua., 27 de jul. de 2022 às 13:35, Ross Burton escreveu: > Whoever adds the patch needs to add their S-o-b. > The patch sanity check should warn about it as it does for the status header. I said, RP can add it. -- Otavio Salvador O.S. Systems http://www.ossystems

Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Ross Burton
Whoever adds the patch needs to add their S-o-b. Ross From: Otavio Salvador Date: Wednesday, 27 July 2022 at 17:20 To: Ross Burton , Purdie, Richard Cc: ota...@ossystems.com.br , openembedded-core@lists.openembedded.org Subject: Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no a

Re: [OE-core] [meta-oe][PATCH] wic/direct.py: ignore root mountpoint in fstab updater

2022-07-27 Thread Markus Volk
Yes. With the patch the warning disappears from dmesg Am Mi, 27. Jul 2022 um 15:44:48 + schrieb Ross Burton : This looks like a fix for , can you confirm that? Ross On 27 Jul 2022, at 14:45, Markus Volk via lists.openembedded.org

Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Otavio Salvador
Em qua., 27 de jul. de 2022 às 12:28, Ross Burton escreveu: > The patch is missing your S-o-b. > The patch isn't mine but a backport. Richard can add it when adding it to MUT, though. -- Otavio Salvador O.S. Systems http://www.ossystems.com.brhttp://code.oss

Re: [OE-core] [meta-oe][PATCH] wic/direct.py: ignore root mountpoint in fstab updater

2022-07-27 Thread Ross Burton
This looks like a fix for https://bugzilla.yoctoproject.org/show_bug.cgi?id=14865, can you confirm that? Ross > On 27 Jul 2022, at 14:45, Markus Volk via lists.openembedded.org > wrote: > > We already have a root entry in fstab. This commit prevents processing root > mountpoint in fstab_updat

Re: [OE-core] [PATCH] debian packaging: set md5sums for conffiles

2022-07-27 Thread Rusty Howell
Will do. On Wed, Jul 27, 2022 at 8:35 AM Alexander Kanavin wrote: > I think Ross is merely helping you to reach the correct solution, but > everyone would appreciate if you write and submit the actual fix :-) > > Alex > > On Wed, 27 Jul 2022 at 16:32, Rusty Howell wrote: > > > > Thanks for the

Re: [OE-core] [meta-oe][PATCH v2] classes: rootfs-postcommands: autologin root on serial-getty

2022-07-27 Thread Ross Burton
> +serial_autologin_root () { > + if [ -e ${IMAGE_ROOTFS}${systemd_system_unitdir}/serial-getty@.service > ]; then > + sed -i '/^\s*ExecStart\b/ s/getty /&--autologin root /' \ > + > "${IMAGE_ROOTFS}${systemd_system_unitdir}/serial-getty@.service" > + fi >

Re: [OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Ross Burton
The patch is missing your S-o-b. Ross > On 27 Jul 2022, at 13:00, Otavio Salvador via lists.openembedded.org > wrote: > > Backport a fix from 1.0.27 so we only link atomic if no atomic builtins > are available. > > Signed-off-by: Otavio Salvador > --- > ...k-with-latomic-only-if-no-atomic-bu

Re: [yocto] [Openembedded-architecture] Let's drop x86-x32 (was Re: [OE-core] [PATCH 05/51] rpm: update 4.17.0 -> 4.17.1)

2022-07-27 Thread Anuj Mittal
On Wed, 2022-07-27 at 16:56 +0200, Alexander Kanavin wrote: > On Wed, 20 Jul 2022 at 17:46, Alexander Kanavin via > lists.yoctoproject.org > > wrote: > > > > On Wed, 20 Jul 2022 at 17:41, Mittal, Anuj > > wrote: > > > I don't know if there are any Yocto users of it who might notice. > > > > > >

Re: [yocto] [Openembedded-architecture] Let's drop x86-x32 (was Re: [OE-core] [PATCH 05/51] rpm: update 4.17.0 -> 4.17.1)

2022-07-27 Thread Alexander Kanavin
On Wed, 20 Jul 2022 at 17:46, Alexander Kanavin via lists.yoctoproject.org wrote: > > On Wed, 20 Jul 2022 at 17:41, Mittal, Anuj wrote: > > I don't know if there are any Yocto users of it who might notice. > > > > Instead of dropping the testing completely, may be we should switch to > > building

Re: [OE-core] [PATCHv2]] recipes-support: rng-tools change systemd service name

2022-07-27 Thread An?bal Lim?n
On Wed, Jul 27, 2022 at 5:44 AM Luca Ceresoli wrote: > Hello Aníbal, > > On Tue, 26 Jul 2022 14:33:22 -0500 > "An?bal Lim?n" wrote: > > > From: Aníbal Limón > > > > Change systemd service name from rngd -> rng-tools to avoid load twice > > the service when sysvinit compatibility is enabled, > >

Re: [OE-core] [PATCH] debian packaging: set md5sums for conffiles

2022-07-27 Thread Alexander Kanavin
I think Ross is merely helping you to reach the correct solution, but everyone would appreciate if you write and submit the actual fix :-) Alex On Wed, 27 Jul 2022 at 16:32, Rusty Howell wrote: > > Thanks for the quick responses. It took us a while to figure out why we > were seeing weird beh

Re: [OE-core] [PATCH] debian packaging: set md5sums for conffiles

2022-07-27 Thread Rusty Howell
Thanks for the quick responses. It took us a while to figure out why we were seeing weird behaviour with our products, and we ultimately figured out the conffiles are being replaced during the update. I am working off of Hardknott currently, so that's my mistake not switching to master. And I

Re: [OE-core] [PATCH] debian packaging: set md5sums for conffiles

2022-07-27 Thread Ross Burton
> So we’re definitely not generating the DEBIAN/md5sums files that dpkg-deb > likes to have. However, this file in proper Debian packages doesn’t contain > hashes for the conffiles, so I can only imagine that dpkg generates them on > install, which leads to the question of where that is meant to

Re: [OE-core] [PATCH] debian packaging: set md5sums for conffiles

2022-07-27 Thread Ross Burton
So we’re definitely not generating the DEBIAN/md5sums files that dpkg-deb likes to have. However, this file in proper Debian packages doesn’t contain hashes for the conffiles, so I can only imagine that dpkg generates them on install, which leads to the question of where that is meant to happen.

[OE-core] [meta-oe][PATCH] wic/direct.py: ignore root mountpoint in fstab updater

2022-07-27 Thread Markus Volk
We already have a root entry in fstab. This commit prevents processing root mountpoint in fstab_updater and thus avoids duplicate entries for root in fstab. Signed-off-by: Markus Volk --- scripts/lib/wic/plugins/imager/direct.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git

Re: [OE-core] [PATCH] debian packaging: set md5sums for conffiles

2022-07-27 Thread Ross Burton
> On 27 Jul 2022, at 12:48, Alexander Kanavin via lists.openembedded.org > wrote: > > Also, I'm not sure I understand why this needs to be fixed with custom > code. Isn't this something that dpkg/apt take care of themselves? Yes, I suspect this is a problem with how we’re generating the DEBIAN

[OE-core] [PATCH] libusb1: Link with -latomic only if no atomic builtins

2022-07-27 Thread Otavio Salvador
Backport a fix from 1.0.27 so we only link atomic if no atomic builtins are available. Signed-off-by: Otavio Salvador --- ...k-with-latomic-only-if-no-atomic-bui.patch | 51 +++ meta/recipes-support/libusb/libusb1_1.0.26.bb | 1 + 2 files changed, 52 insertions(+) create mode 1

[OE-core] [RFC][PATCHv2] glibc: revert one upstream change to work around broken DEBUG_BUILD build

2022-07-27 Thread Martin Jansa
* work around for build failure with DEBUG_BUILD: http://errors.yoctoproject.org/Errors/Details/661468/ TOPDIR/tmp-glibc/work/core2-64-oe-linux/glibc/2.35-r0/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/11.3.0/ld.bfd: TOPDIR/tmp-glibc/work

Re: [OE-core] [kirkstone][master][PATCH] apt: fix do_package_qa failure

2022-07-27 Thread Alexander Kanavin
What is actually being installed in there? Is it really right to remove it? Alex On Wed, 27 Jul 2022 at 07:39, Changqing Li wrote: > > From: Changqing Li > > bitbake nativesdk-apt failed with error: > ERROR: nativesdk-apt-2.4.5-r0 do_package_qa: QA Issue: nativesdk-apt installs > files in > /

Re: [OE-core] [PATCH] debian packaging: set md5sums for conffiles

2022-07-27 Thread Alexander Kanavin
Also, I'm not sure I understand why this needs to be fixed with custom code. Isn't this something that dpkg/apt take care of themselves? Alex On Wed, 27 Jul 2022 at 12:53, Luca Ceresoli via lists.openembedded.org wrote: > > Hello Rusty, > > On Tue, 26 Jul 2022 15:13:28 -0600 > "Rusty Howell" wr

[OE-core] [PATCH 1/3] wic: add target tools to PATH when executing native commands

2022-07-27 Thread Ross Burton
We might want to run a cross tool, such as objcopy, in wic. These are in a TARGET_SYS/ subdirectory under /usr/bin, so add that directory to the search path too. Signed-off-by: Ross Burton --- scripts/lib/wic/misc.py | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/scr

[OE-core] [PATCH 2/3] wic/bootimg-efi: use cross objcopy when building unified kernel image

2022-07-27 Thread Ross Burton
We can't rely on the host objcopy knowing how to process target binaries, so use the cross objcopy in the sysroot instead. Also construct the command argument-by-argument as the format expression was getting unwieldy. Signed-off-by: Ross Burton --- scripts/lib/wic/plugins/source/bootimg-efi.py

[OE-core] [PATCH 3/3] wic: depend on cross-binutils

2022-07-27 Thread Ross Burton
Wic can build an unified kernel image, but this needs the cross-objcopy from binutils. Signed-off-by: Ross Burton --- meta/classes/image_types_wic.bbclass | 2 ++ meta/recipes-core/meta/wic-tools.bb | 1 + 2 files changed, 3 insertions(+) diff --git a/meta/classes/image_types_wic.bbclass b/me

Re: [OE-core] [PATCH] debian packaging: set md5sums for conffiles

2022-07-27 Thread Luca Ceresoli via lists.openembedded.org
Hello Rusty, On Tue, 26 Jul 2022 15:13:28 -0600 "Rusty Howell" wrote: > Currently in an image created with debian package management, dpkg is missing > the md5sums in > /var/lib/dpkg/status for files designated as conffiles. They are just listed > as "newconffile", > which is an intermediate

Re: [OE-core] [PATCHv2]] recipes-support: rng-tools change systemd service name

2022-07-27 Thread Luca Ceresoli via lists.openembedded.org
Hello Aníbal, On Tue, 26 Jul 2022 14:33:22 -0500 "An?bal Lim?n" wrote: > From: Aníbal Limón > > Change systemd service name from rngd -> rng-tools to avoid load twice > the service when sysvinit compatibility is enabled, > > ... > root@:~# ps | grep rng >23 root 0 SW [hwrng] >

Re: [OE-core] [meta-oe][PATCH v3] classes: rootfs-postcommands: autologin root on serial-getty

2022-07-27 Thread Luca Ceresoli via lists.openembedded.org
On Wed, 27 Jul 2022 05:37:39 +0200 "Johannes Schneider via lists.openembedded.org" wrote: > when empty-root-password AND serial-autologin-root are part of the > IMAGE_FEATURES, save some of the developers time by not having to type > the (then still sole) 'root' username on the serial consoleafte

Re: [OE-core] [PATCH 1/1] lame: Remove hardcoded rpaths

2022-07-27 Thread Paulo Neves
I thought of that myself, but did not yet investigate. We have hardcode_into_libs disabling in 4 "recipes": git grep hardcode_into_libs -- meta recipes-devtools/binutils/binutils/0009-Use-libtool-2.4.patch: hardcode_into_libs=yes recipes-devtools/binutils/binutils/0009-Use-libtool-2.4.patch: if

[OE-core] [dunfell][PATCH] libTiff: CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 DoS from Divide By Zero Error

2022-07-27 Thread Hitendra Prajapati
Source: https://gitlab.com/libtiff/libtiff MR: 119341 Type: Security Fix Disposition: Backport from https://gitlab.com/libtiff/libtiff/-/commit/dd1bcc7abb26094e93636e85520f0d8f81ab0fab ChangeID: 6cea4937a34a618567a42cef8c41961ade2f3a07 Description: CVE-2022-2056 CVE-2022-2057 CVE-2022-2058

[OE-core] [dunfell][PATCH] qemu: CVE-2022-35414 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash

2022-07-27 Thread Hitendra Prajapati
Source: https://github.com/qemu/qemu MR: 119832 Type: Security Fix Disposition: Backport from https://github.com/qemu/qemu/commit/418ade7849ce7641c0f7333718caf5091a02fd4c ChangeID: 1246afd7bb950d2d5fe2e198961797c0fa14ac00 Description: CVE-2022-35414 qemu: can perform an uninitialized read

Re: [OE-core] [meta-oe][PATCH v3] classes: rootfs-postcommands: autologin root on serial-getty

2022-07-27 Thread Johannes Schneider via lists.openembedded.org
Hi, what & where would you like to see (as) additional documentation? (-: regards From: Marta Rybczynska Sent: Wednesday, July 27, 2022 09:27 To: SCHNEIDER Johannes Cc: OE-core Subject: Re: [OE-core] [meta-oe][PATCH v3] classes: rootfs-postcommands: autologin

[OE-core] [PATCH v2] mesa: fix compile error when debug build enabled

2022-07-27 Thread kai
From: Kai Kang It fails to compile mesa{,-native} when DEBUG_BUILD is enabled: ../mesa-22.1.3/src/compiler/nir/nir_inline_helpers.h: In function ‘nir_opt_move_block’: ../mesa-22.1.3/src/compiler/nir/nir_opt_move.c:55:1: error: inlining failed in call to always_inline ‘src_is_ssa’: indirect f

Re: [OE-core] [meta-oe][PATCH v3] classes: rootfs-postcommands: autologin root on serial-getty

2022-07-27 Thread Marta Rybczynska
On Wed, Jul 27, 2022 at 5:37 AM Johannes Schneider via lists.openembedded.org wrote: > > when empty-root-password AND serial-autologin-root are part of the > IMAGE_FEATURES, save some of the developers time by not having to type > the (then still sole) 'root' username on the serial consoleafter ea