Re: [OE-core] [PATCH v2] wic: bootimg-pcbios.py: optionally pass 'initrd' from .wks(.in) via sourceparams

2024-12-08 Thread Mathieu Dubois-Briand via lists.openembedded.org
On Fri Dec 6, 2024 at 5:48 PM CET, Robert Berger via lists.openembedded.org wrote: > optionally allow to pass 'initrd' from .wks(.in) via sourceparams > > Signed-off-by: Robert Berger > --- Hi, I believe this patch is the source of the following error on the autobuilder: File "/srv/pokybuil

Re: [OE-core] [PATCH] go-vendor.bbclass: avoid QA errors with absolute paths

2024-12-08 Thread Robert Berger via lists.openembedded.org
Hi, On 12/8/24 23:27, Richard Purdie wrote: On Fri, 2024-12-06 at 18:31 +0100, Robert Berger via lists.openembedded.org wrote: avoid QA errors with absolute paths from go-vendor.bbclass Signed-off-by: Robert Berger ---  meta/classes/go-vendor.bbclass | 2 +-  1 file changed, 1 insertion(+),

Re: [OE-core] [PATCH] go-vendor.bbclass: avoid QA errors with absolute paths

2024-12-08 Thread Robert Berger via lists.openembedded.org
On 12/8/24 23:27, Richard Purdie wrote: Can you provide a little more information in the commit message such as the kind of symlink and whether go-vendor always creates these or what the trigger is for the issue? Which tool is creating the symlinks? Was this a change in behaviour of the tool? Co

Re: [OE-core] [PATCH] vim: fix xxd-native RPROVIDES

2024-12-08 Thread Richard Purdie via lists.openembedded.org
On Wed, 2024-12-04 at 18:09 -0500, Denys Dmytriyenko via lists.openembedded.org wrote: > From: Denys Dmytriyenko > > BBCLASSEXTEND doesn't handle overrides with suffixed ${PN} for > native class, e.g.: > > RPROVIDES:${PN}-xxd = "xxd" > > becomes: > > RPROVIDES:vim-native-xxd = "xxd-native" >

Re: [OE-core] [PATCH] go-vendor.bbclass: avoid QA errors with absolute paths

2024-12-08 Thread Richard Purdie via lists.openembedded.org
On Fri, 2024-12-06 at 18:31 +0100, Robert Berger via lists.openembedded.org wrote: > avoid QA errors with absolute paths from go-vendor.bbclass > > Signed-off-by: Robert Berger > > --- >  meta/classes/go-vendor.bbclass | 2 +- >  1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/meta

Re: [OE-core][PATCH] Revert "uboot-sign: fix U-Boot binary with public key"

2024-12-08 Thread Richard Purdie via lists.openembedded.org
On Fri, 2024-12-06 at 15:09 -0600, Ryan Eatmon via lists.openembedded.org wrote: > This reverts commit 0d14e99aa18ee38293df63d585fafc270a4538be. > > The patch removed logic required for correct handling of > UBOOT_SUFFIX=img or UBOOT_SUFFIX=rom.  We need to find a better way to > handle the fix fo

[OE-core][scarthgap][PATCH v2] qemu: set CVE-2024-6505 to fixed

2024-12-08 Thread Peter Marko via lists.openembedded.org
From: Peter Marko CVE patch was removed on last upgrade as fixing commit was backported to stable 8.2.x branch. NVD DB has this CVE as version-less (with "-"). So explicit status set is needed to mark it as fixed. (From OE-Core rev: 64359ec3b60ae68d39c2e6444f903fd20e397cff) Signed-off-by: Pete

[OE-core] Patchtest results for [meta-something][scarthgap][PATCH] qemu: set CVE-2024-6505 to fixed

2024-12-08 Thread Patchtest via lists.openembedded.org
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/meta-something-scarthgap-qemu-set-CVE-2024-6505-to-fixed.patch FAIL: test target mailing list: Series sent to the w

[OE-core] [meta-something][scarthgap][PATCH] qemu: set CVE-2024-6505 to fixed

2024-12-08 Thread Peter Marko via lists.openembedded.org
From: Peter Marko CVE patch was removed on last upgrade as fixing commit was backported to stable 8.2.x branch. NVD DB has this CVE as version-less (with "-"). So explicit status set is needed to mark it as fixed. (From OE-Core rev: 64359ec3b60ae68d39c2e6444f903fd20e397cff) Signed-off-by: Pete

[OE-core] [PATCH] libpam: add packageconfig for selinux

2024-12-08 Thread Yi Zhao via lists.openembedded.org
Add PACKAGECONFIG[selinux] to support build with selinux. Signed-off-by: Yi Zhao --- meta/recipes-extended/pam/libpam_1.7.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-extended/pam/libpam_1.7.0.bb b/meta/recipes-extended/pam/libpam_1.7.0.bb index ec1c868d21..53839e8cd3

[OE-core] [styhead][PATCH 4/4] dnf: drop python3-iniparse from DEPENDS and RDEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
python3-iniparse dependency was dropped 2019, see the following commit as reference: https://github.com/rpm-software-management/dnf/pull/1329/commits/d7d0e0e2f9d8c7d021c794821ad0b56a39ebc01f When looking at the Git history, this happened around tag 4.2.1 Signed-off-by: Guðni Már Gilbert Signed-o

[OE-core] [styhead][PATCH 2/4] systemd-boot: drop intltool-native from DEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
intltool was dropped as a dependency in v236 See commit for reference: https://github.com/systemd/systemd/pull/7313/commits/c81217920effddc93fb780cf8f9eb699d6fe1319 Signed-off-by: Guðni Már Gilbert Signed-off-by: Richard Purdie --- meta/recipes-core/systemd/systemd-boot_256.5.bb | 2 +- 1 file

[OE-core] [scarthgap][PATCH 4/4] dnf: drop python3-iniparse from DEPENDS and RDEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
python3-iniparse dependency was dropped 2019, see the following commit as reference: https://github.com/rpm-software-management/dnf/pull/1329/commits/d7d0e0e2f9d8c7d021c794821ad0b56a39ebc01f When looking at the Git history, this happened around tag 4.2.1 Signed-off-by: Guðni Már Gilbert Signed-o

[OE-core] [styhead][PATCH 3/4] python3-poetry-core: drop python3-six from RDEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
Looking at the history, python3-six was removed as a dependency in the poetry.lock file in v1.5.2 Even before v1.5.2 and until now (v1.9.1) there is no code in the package which imports the six module. So it can be safely dropped from the recipe. Signed-off-by: Guðni Már Gilbert Signed-off-by: M

[OE-core] [styhead][PATCH 1/4] systemd: drop intltool-native from DEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
intltool was dropped as a dependency in v236 See commit for reference: https://github.com/systemd/systemd/pull/7313/commits/c81217920effddc93fb780cf8f9eb699d6fe1319 Signed-off-by: Guðni Már Gilbert Signed-off-by: Richard Purdie --- meta/recipes-core/systemd/systemd_256.5.bb | 2 +- 1 file chang

[OE-core] [styhead][PATCH 0/4] Backport a few dependency clean ups from master

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
Guðni Már Gilbert (4): systemd: drop intltool-native from DEPENDS systemd-boot: drop intltool-native from DEPENDS python3-poetry-core: drop python3-six from RDEPENDS dnf: drop python3-iniparse from DEPENDS and RDEPENDS meta/recipes-core/systemd/systemd-boot_256.5.bb | 2 +- met

[OE-core] [PATCH 0/4] Backport a few dependency clean ups from master

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
Guðni Már Gilbert (4): systemd: drop intltool-native from DEPENDS systemd-boot: drop intltool-native from DEPENDS python3-poetry-core: drop python3-six from RDEPENDS dnf: drop python3-iniparse from DEPENDS and RDEPENDS meta/recipes-core/systemd/systemd-boot_255.13.bb | 2 +- met

Re: [OE-core] [PATCH 0/4] Backport a few dependency clean ups from master

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
I forgot to add 'scarthgap' prefix. So I sent this series again, apologies for the spam. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#208459): https://lists.openembedded.org/g/openembedded-core/message/208459 Mute This Topic: https://lists.opene

[OE-core] [scarthgap][PATCH 2/4] systemd-boot: drop intltool-native from DEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
intltool was dropped as a dependency in v236 See commit for reference: https://github.com/systemd/systemd/pull/7313/commits/c81217920effddc93fb780cf8f9eb699d6fe1319 Signed-off-by: Guðni Már Gilbert Signed-off-by: Richard Purdie --- meta/recipes-core/systemd/systemd-boot_255.13.bb | 2 +- 1 file

[OE-core] [scarthgap][PATCH 3/4] python3-poetry-core: drop python3-six from RDEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
Looking at the history, python3-six was removed as a dependency in the poetry.lock file in v1.5.2 Even before v1.5.2 and until now (v1.9.1) there is no code in the package which imports the six module. So it can be safely dropped from the recipe. Signed-off-by: Guðni Már Gilbert Signed-off-by: M

[OE-core] [scarthgap][PATCH 1/4] systemd: drop intltool-native from DEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
intltool was dropped as a dependency in v236 See commit for reference: https://github.com/systemd/systemd/pull/7313/commits/c81217920effddc93fb780cf8f9eb699d6fe1319 Signed-off-by: Guðni Már Gilbert Signed-off-by: Richard Purdie --- meta/recipes-core/systemd/systemd_255.13.bb | 2 +- 1 file chan

[OE-core] [scarthgap][PATCH 0/4] Backport a few dependency clean ups from master

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
Guðni Már Gilbert (4): systemd: drop intltool-native from DEPENDS systemd-boot: drop intltool-native from DEPENDS python3-poetry-core: drop python3-six from RDEPENDS dnf: drop python3-iniparse from DEPENDS and RDEPENDS meta/recipes-core/systemd/systemd-boot_255.13.bb | 2 +- met

[OE-core] [PATCH 2/4] systemd-boot: drop intltool-native from DEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
intltool was dropped as a dependency in v236 See commit for reference: https://github.com/systemd/systemd/pull/7313/commits/c81217920effddc93fb780cf8f9eb699d6fe1319 Signed-off-by: Guðni Már Gilbert Signed-off-by: Richard Purdie --- meta/recipes-core/systemd/systemd-boot_255.13.bb | 2 +- 1 file

[OE-core] [PATCH 3/4] python3-poetry-core: drop python3-six from RDEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
Looking at the history, python3-six was removed as a dependency in the poetry.lock file in v1.5.2 Even before v1.5.2 and until now (v1.9.1) there is no code in the package which imports the six module. So it can be safely dropped from the recipe. Signed-off-by: Guðni Már Gilbert Signed-off-by: M

[OE-core] [PATCH 4/4] dnf: drop python3-iniparse from DEPENDS and RDEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
python3-iniparse dependency was dropped 2019, see the following commit as reference: https://github.com/rpm-software-management/dnf/pull/1329/commits/d7d0e0e2f9d8c7d021c794821ad0b56a39ebc01f When looking at the Git history, this happened around tag 4.2.1 Signed-off-by: Guðni Már Gilbert Signed-o

[OE-core] [PATCH 1/4] systemd: drop intltool-native from DEPENDS

2024-12-08 Thread Guðni Már Gilbert via lists . openembedded . org
intltool was dropped as a dependency in v236 See commit for reference: https://github.com/systemd/systemd/pull/7313/commits/c81217920effddc93fb780cf8f9eb699d6fe1319 Signed-off-by: Guðni Már Gilbert Signed-off-by: Richard Purdie --- meta/recipes-core/systemd/systemd_255.13.bb | 2 +- 1 file chan

[OE-core] OE-core CVE metrics for styhead on Sun 08 Dec 2024 02:25:06 AM HST

2024-12-08 Thread Steve Sakoman
Branch: styhead New this week: 3 CVEs CVE-2024-50157 (CVSS3: 5.5 MEDIUM): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50157 * CVE-2024-53059 (CVSS3: 7.8 HIGH): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-53059 * CVE-2024-53060 (CVSS3: 5.5 MEDIU

[OE-core] OE-core CVE metrics for scarthgap on Sun 08 Dec 2024 01:51:28 AM HST

2024-12-08 Thread Steve Sakoman
Branch: scarthgap New this week: 3 CVEs CVE-2024-50157 (CVSS3: 5.5 MEDIUM): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-50157 * CVE-2024-53059 (CVSS3: 7.8 HIGH): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-53059 * CVE-2024-53060 (CVSS3: 5.5 MED

[OE-core] OE-core CVE metrics for kirkstone on Sun 08 Dec 2024 01:23:51 AM HST

2024-12-08 Thread Steve Sakoman
Branch: kirkstone New this week: 3 CVEs CVE-2024-23254 (CVSS3: 6.5 MEDIUM): webkitgtk https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-23254 * CVE-2024-23280 (CVSS3: 6.5 MEDIUM): webkitgtk https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-23280 * CVE-2024-53059 (CVSS3: 7.8 HIGH)

[OE-core] OE-core CVE metrics for master on Sun 08 Dec 2024 01:00:01 AM HST

2024-12-08 Thread Steve Sakoman
Branch: master New this week: 6 CVEs CVE-2023-52356 (CVSS3: 7.5 HIGH): tiff https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-52356 * CVE-2023-6228 (CVSS3: 5.5 MEDIUM): tiff https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-6228 * CVE-2023-6277 (CVSS3: 6.5 MEDIUM): tiff https://