[OE-core] [scarthgap][PATCH 2/2] setuptools3-base.bbclass: override default subprocess timeout

2025-02-16 Thread hongxu via lists.openembedded.org
The environment variable SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT allows to override the subprocess timeout. The default is 40 seconds and should work for most needs.[1] However, it was not enough while using git shallow tarball and starting multiple Yocto world builds in one host. |   File "tmp/work/x8

[OE-core] [scarthgap][PATCH 1/2] python3-setuptools-scm: add subprocess timeout control env var

2025-02-16 Thread hongxu via lists.openembedded.org
Backport patch from upstream to add subprocess timeout control env var Signed-off-by: Hongxu Jia --- .../0001-fix-957-add-subprocess-timeout.patch | 78 +++ .../python/python3-setuptools-scm_8.0.4.bb| 1 + 2 files changed, 79 insertions(+) create mode 100644 meta/recipes-d

[OE-core] [PATCH V2 2/3] gpgme: upgrade 1.24.1 -> 1.24.2

2025-02-16 Thread hongxu via lists.openembedded.org
Signed-off-by: Hongxu Jia --- ...vert-build-Make-gpgme.m4-use-gpgrt-config-with-.pc.patch | 2 +- .../gpgme/0001-autogen.sh-remove-unknown-in-version.patch | 2 +- meta/recipes-support/gpgme/gpgme/0001-pkgconfig.patch | 6 +++--- .../0001-posix-io.c-Use-off_t-instead-of-off64_t.patch

[OE-core] [PATCH V2 1/3] gnupg: upgrade 2.5.3 -> 2.5.4

2025-02-16 Thread hongxu via lists.openembedded.org
Signed-off-by: Hongxu Jia --- .../0001-Woverride-init-is-not-needed-with-gcc-9.patch | 2 +- ...nfigure.ac-use-a-custom-value-for-the-location-of-.patch | 6 +++--- .../gnupg/0002-use-pkgconfig-instead-of-npth-config.patch | 2 +- ...0004-autogen.sh-fix-find-version-for-beta-checking.patch

[OE-core] [PATCH V3] setuptools3-base.bbclass: override default subprocess timeout

2025-02-16 Thread hongxu via lists.openembedded.org
The environment variable SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT allows to override the subprocess timeout. The default is 40 seconds and should work for most needs.[1] However, it was not enough while using git shallow tarball and starting multiple Yocto world builds in one host. |   File "tmp/work/x8

[OE-core] Patchtest results for [PATCH 1/3] gnupg: upgrade 2.5.3 -> 2.5.4

2025-02-16 Thread Patchtest via lists.openembedded.org
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/1-3-gnupg-upgrade-2.5.3---2.5.4.patch FAIL: test Signed-off-by presence: Mbox is missing Signed-off-by. Add it manu

[OE-core] Patchtest results for [PATCH 2/3] gpgme: upgrade 1.24.1 -> 1.24.2

2025-02-16 Thread Patchtest via lists.openembedded.org
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/2-3-gpgme-upgrade-1.24.1---1.24.2.patch FAIL: test Signed-off-by presence: Mbox is missing Signed-off-by. Add it m

[OE-core][scarthgap][PATCH] icu: remove host references in nativesdk to fix reproducibility

2025-02-16 Thread aszh07 via lists.openembedded.org
From: Oleksandr Hnatiuk Fix is only done for target. Use same code for nativesdk. Backport from poky master: https://git.yoctoproject.org/poky/commit/?id=c63b8f28ac52047fad689b78d605aa792baf1ad8 (From OE-Core rev: dc6306883cc2c7d4d98d595442e5bf4037a160c5) Signed-off-by: Oleksiy Obitotskyy Si

[OE-core] [PATCH 3/3] man-pages: upgrade 6.9.1 -> 6.11

2025-02-16 Thread hongxu via lists.openembedded.org
1. Due to upstream commit [GNUmakefile: Require the user to specify '-R' if their make(1) is too old][1], add option -R to make 2. Due to upstream commit [src/bin/pdfman, scripts/bash_aliases, pdfman.1: Make pdfman a standalone program, and add a manual page][2], inherit bbclass lib_package to use

[OE-core] [PATCH 2/3] gpgme: upgrade 1.24.1 -> 1.24.2

2025-02-16 Thread hongxu via lists.openembedded.org
From: Upgrade Helper --- ...vert-build-Make-gpgme.m4-use-gpgrt-config-with-.pc.patch | 2 +- .../gpgme/0001-autogen.sh-remove-unknown-in-version.patch | 2 +- meta/recipes-support/gpgme/gpgme/0001-pkgconfig.patch | 6 +++--- .../0001-posix-io.c-Use-off_t-instead-of-off64_t.patch | 2

[OE-core] [PATCH 1/3] gnupg: upgrade 2.5.3 -> 2.5.4

2025-02-16 Thread hongxu via lists.openembedded.org
From: Upgrade Helper --- .../0001-Woverride-init-is-not-needed-with-gcc-9.patch | 2 +- ...nfigure.ac-use-a-custom-value-for-the-location-of-.patch | 6 +++--- .../gnupg/0002-use-pkgconfig-instead-of-npth-config.patch | 2 +- ...0004-autogen.sh-fix-find-version-for-beta-checking.patch | 2

[OE-core][PATCH] systemd/systemd-boot: upgrade from 257.1 to 257.3

2025-02-16 Thread Chen Qi via lists.openembedded.org
From: Chen Qi 0001-ukify-measure-Revert-changes-to-use-SizeOfImage-from.patch is dropped as it is in the new version. Signed-off-by: Chen Qi --- ..._257.1.bb => systemd-boot-native_257.3.bb} | 2 - ...md-boot_257.1.bb => systemd-boot_257.3.bb} | 0 meta/recipes-core/systemd/systemd.inc

Re: [OE-core] [PATCH V2] setuptools3-base.bbclass: override default subprocess timeout

2025-02-16 Thread Yoann Congal via lists.openembedded.org
Hello, Le lun. 17 févr. 2025 à 06:54, hongxu via lists.openembedded.org a écrit : > The environment variable SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT allows to > override > the subprocess timeout. The default is 40 seconds and should work for most > needs.[1] However, it was not enough while using git

[OE-core] [PATCH V2] setuptools3-base.bbclass: override default subprocess timeout

2025-02-16 Thread hongxu via lists.openembedded.org
The environment variable SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT allows to override the subprocess timeout. The default is 40 seconds and should work for most needs.[1] However, it was not enough while using git shallow tarball and starting multiple Yocto world builds in one host. |   File "tmp/work/x8

[OE-core] Patchtest results for [PATCH] setuptools3-base.bbclass: set SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT to override the subprocess timeout

2025-02-16 Thread Patchtest via lists.openembedded.org
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/setuptools3-base.bbclass-set-SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT-to-override-the-subprocess-timeout.patch FAIL: test

Re: [OE-core] [qa-build-notification] QA notification for completed autobuilder build (yocto-4.0.25.rc2)

2025-02-16 Thread Jing Hui Tham via lists.openembedded.org
Hi all, Intel and WR YP QA is planning for QA execution for YP build yocto-4.0.25.rc2. We are planning to execute following tests for this cycle: OEQA-manual tests for following module: 1. OE-Core 2. BSP-hw Runtime auto test for following platforms: 1. MinnowBoard Turbot - 32bit

[OE-core] [PATCH] setuptools3-base.bbclass: set SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT to override the subprocess timeout

2025-02-16 Thread hongxu via lists.openembedded.org
The environment variable SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT allows to override the subprocess timeout. The default is 40 seconds and should work for most needs.[1] However, it was not enough while using git shallow tarball and starting multiple Yocto world builds in one host. |   File "tmp/work

[OE-core] [PATCH] psplash: update to latest rev

2025-02-16 Thread Yi Zhao via lists.openembedded.org
* 5a32cf6 psplash.c: fix crash from length becoming negative Signed-off-by: Yi Zhao --- meta/recipes-core/psplash/psplash_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/psplash/psplash_git.bb b/meta/recipes-core/psplash/psplash_git.bb index 30cf61a2

Re: [OE-core] Broken FIT image signing since "u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled"

2025-02-16 Thread Rogerio Guerra Borin via lists.openembedded.org
As a follow up, I performed some tests by reverting the d7bd9c627661 and I found that without that commit the behavior matches what I got on kirkstone or, in other words, it matches the documented behavior. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply On

[OE-core] Broken FIT image signing since "u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled"

2025-02-16 Thread Rogerio Guerra Borin via lists.openembedded.org
Hello, At Toradex we're using class "kernel-fitimage" to produce our signed kernel FIT images and we've found that the recent commit d7bd9c627661 ("u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled") broke our builds. The logs of a failed build show the fol

[OE-core] [PATCH] musl: Upgrade to latest tip of trunk

2025-02-16 Thread Khem Raj via lists.openembedded.org
* c47ad25e iconv: harden UTF-8 output code path against input decoder bugs * 4c4f15da hasmntopt: match only whole options not arbitrary substrings * e5adcd97 iconv: fix erroneous input validation in EUC-KR decoder * 5e594aea iconv: fix erroneous decoding of some invalid ShiftJIS sequences * 6af4f25

[OE-core] [PATCH] scripts/install-buildtools: Update to 5.1.2

2025-02-16 Thread Aleksandar Nikolic via lists.openembedded.org
From: Aleksandar Nikolic Update to the 5.1.2 release of the 5.1 series for buildtools. Signed-off-by: Aleksandar Nikolic --- scripts/install-buildtools | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/install-buildtools b/scripts/install-buildtools index b5691045

[OE-core] [styhead][PATCH] scripts/install-buildtools: Update to 5.1.2

2025-02-16 Thread Aleksandar Nikolic via lists.openembedded.org
From: Aleksandar Nikolic Update to the 5.1.2 release of the 5.1 series for buildtools. Signed-off-by: Aleksandar Nikolic --- scripts/install-buildtools | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/install-buildtools b/scripts/install-buildtools index 6387287a

[OE-core] [scarthgap][PATCH] scripts/install-buildtools: Update to 5.0.7

2025-02-16 Thread Aleksandar Nikolic via lists.openembedded.org
From: Aleksandar Nikolic Update to the 5.0.7 release of the 5.0 series for buildtools. Signed-off-by: Aleksandar Nikolic --- scripts/install-buildtools | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/install-buildtools b/scripts/install-buildtools index 972671d5

[OE-core] [kirkstone][PATCH] scripts/install-buildtools: Update to 4.0.24

2025-02-16 Thread Aleksandar Nikolic via lists.openembedded.org
From: Aleksandar Nikolic Update to the 4.0.24 release of the 4.0 series for buildtools. Signed-off-by: Aleksandar Nikolic --- scripts/install-buildtools | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/install-buildtools b/scripts/install-buildtools index 01253e5

[OE-core] OE-core CVE metrics for styhead on Sun 16 Feb 2025 02:16:21 AM HST

2025-02-16 Thread Steve Sakoman
Branch: styhead New this week: 10 CVEs CVE-2024-45720 (CVSS3: 7.8 HIGH): subversion https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-45720 * CVE-2024-57949 (CVSS3: 5.5 MEDIUM): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-57949 * CVE-2024-57951 (CVSS3: 7.8 HIGH)

[OE-core] OE-core CVE metrics for scarthgap on Sun 16 Feb 2025 01:46:40 AM HST

2025-02-16 Thread Steve Sakoman
Branch: scarthgap New this week: 4 CVEs CVE-2023-52586 (CVSS3: 7.0 HIGH): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-52586 * CVE-2023-52590 (CVSS3: 5.5 MEDIUM): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-52590 * CVE-2024-45720 (CVSS3: 7.8 HIG

[OE-core] OE-core CVE metrics for kirkstone on Sun 16 Feb 2025 01:20:21 AM HST

2025-02-16 Thread Steve Sakoman
Branch: kirkstone New this week: 9 CVEs CVE-2022-1586 (CVSS3: 9.1 CRITICAL): libpcre2:libpcre2-native https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1586 * CVE-2023-52488 (CVSS3: 5.5 MEDIUM): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-52488 * CVE-2023-52586

[OE-core] OE-core CVE metrics for master on Sun 16 Feb 2025 01:00:01 AM HST

2025-02-16 Thread Steve Sakoman
Branch: master New this week: 0 CVEs Removed this week: 0 CVEs Full list: Found 19 unpatched CVEs CVE-2019-14899 (CVSS3: 7.4 HIGH): linux-yocto https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-14899 * CVE-2021-3714 (CVSS3: 5.9 MEDIUM): linux-yocto https://web.nvd.nist.gov/view/vuln/d