From: Archana Polampalli
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library
which allows for an integer overflow, potentially resulting in a
denial-of-service (DoS) condition.
Signed-off-by: Archana Polampalli
---
.../ffmpeg/ffmpeg/CVE-2024-36618.patch| 36
From: Archana Polampalli
Incorrect Access Control in GStreamer RTSP server 1.25.0 in
gst-rtsp-server/rtsp-media.c
allows remote attackers to cause a denial of service via a series of specially
crafted
hexstream requests.
Signed-off-by: Archana Polampalli
---
.../CVE-2024-44331.patch
From: Archana Polampalli
FFmpeg git master before commit c08d30 was discovered to contain a NULL pointer
dereference via the component libavformat/mov.c.
Signed-off-by: Archana Polampalli
---
.../ffmpeg/ffmpeg/CVE-2025-25473.patch| 36 +++
.../recipes-multimedia/ffmpeg/
From: Archana Polampalli
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module,
a potential security vulnerability exists due to insufficient validation of
certain parameters when parsing Speex codec extradata. This vulnerability
could lead to integer overflow conditions, po
From: Archana Polampalli
Signed-off-by: Archana Polampalli
---
.../ffmpeg/ffmpeg/CVE-2024-28661.patch| 40 +++
.../recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb | 1 +
2 files changed, 41 insertions(+)
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2024-28661
From: Robert Yang
Fixed:
$ runqemu qemux86-64 core-image-minimal
runqemu - ERROR - IMAGE_LINK_NAME wasn't set to find corresponding
.qemuboot.conf file
Signed-off-by: Robert Yang
---
scripts/runqemu | 3 +++
1 file changed, 3 insertions(+)
diff --git a/scripts/runqemu b/scripts/runqemu
index
From: Robert Yang
The following changes since commit fbafd942e6c78d1298fa64129149ff311b61fcf8:
python3: Skip test_write_read_append (2025-02-20 11:56:44 +)
are available in the Git repository at:
https://github.com/robertlinux/yocto rbt/qemu
https://github.com/robertlinux/yocto/tree/
From: Wang Mingyu
Add python3-docutils-native to provide rst2html5
Changelog:
==
- Avoid criticals when there are no fonts
- fontconfig: Handle lack of FC_FONT_WRAPPER in font cache
- fontconfig: Prefer application fonts even if they are older
- Support setting font features in font desc
On 2/20/25 22:40, Ross Burton wrote:
CAUTION: This email comes from a non Wind River email account!
Do not click links or open attachments unless you recognize the sender and know
the content is safe.
On 20 Feb 2025, at 08:56, Changqing Li wrote:
For autotools.bbclass, how about don't pass
On 2/20/25 22:27, Steve Sakoman wrote:
On Wed, Feb 19, 2025 at 10:03 PM Kai wrote:
On 2/19/25 23:19, Steve Sakoman wrote:
Hi Kai,
Not sure why, but this fails to apply for me:
Applying: Revert "ovmf: Fix CVE-2023-45237"
Using index info to reconstruct a base tree...
error: patch failed: meta
On 2/20/25 3:42 PM, Leonard Anderweit wrote:
Hi,
Hello Leonard,
I've also noticed this bug and sent patch [1] to fix it.
[1] https://lists.openembedded.org/g/openembedded-core/message/211761
Please CC me on the patch so I can review it ?
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messa
On 2/18/25 4:49 AM, Rogerio Guerra Borin wrote:
[...]
>> that is responsible for that access (inside function concat_dtb()).
>> The code is always referencing variable UBOOT_SIGN_IMG_KEYNAME
>> regardless of FIT_SIGN_INDIVIDUAL being set to "1" or "0" even though
>> there's a condition a co
On Mon, 2025-02-10 at 11:12 +0100, Julian Haller via lists.openembedded.org
wrote:
> From: Julian Haller
>
> In case BB_FETCH_PREMIRRORONLY is set, the fetcher.download() function
> sets BB_NO_NETWORK = "1" after downloading the first file. This alters
> the precondition for the second and third
On Thu, 2025-02-20 at 16:11 -0500, Randy MacLeod via lists.openembedded.org
wrote:
>
> Peter, Jose, anyone,
>
> Does anyone already have a go-1.24 in the works for before the end of
> M3 on March 3rd?
>
> https://tip.golang.org/doc/go1.24
>
There was a patch which nearly worked to upgr
Hi Randy
The last thing I have is the [RFC 1.23.0] I sent to the list on
https://patchwork.yoctoproject.org/project/oe-core/list/?series=29005.
It was incomplete and I haven't done anything since. We are already very
late on the golang front.
However, I think I'll be able to get back to it next w
Peter, Jose, anyone,
Does anyone already have a go-1.24 in the works for before the end of M3
on March 3rd?
https://tip.golang.org/doc/go1.24
../Randy
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#211777):
https://lists.openembedded.org/g/op
Hi Leonard,
I tested it on a couple of machines on my side and it fixes the regression.
Tested-by: Jose Quaresma
Thanks for working on the solution.
Jose
Rogerio Guerra Borin via lists.openembedded.org escreveu (quinta, 20/02/2025 à(s)
19:22):
> Hi Leonard,
>
> I've tested your patch and I
On 13 Feb 2025, at 15:21, Zoltan Boszormenyi via lists.openembedded.org
wrote:
> +DEPENDS = "coreutils-native openssl-native make-native"
> +
> +inherit allarch python3native
These dependencies seem unexpected, and if they’re needed then they should be
explained.
We assume make on the host, so
Hi Leonard,
I've tested your patch and I wanted to let you know it worked fine for me both
when FIT_SIGN_INDIVIDUAL="1" or "0". I've checked the contents of the u-boot
dtb (for the presence of the required pubkeys) and the fitImage (for the
signatures) and the results match what we had before c
From: Peter Marko
There is no release which is vulnerable to these CVEs.
These vulnerabilities are in new features being developed and were fixed
before release.
NVD most likely does not accept CVE rejection from a non-maintainer and
non-reporter, so ignoring this CVE should be acceptable soluti
From: Peter Marko
This vulnerability was introduced in 5.1, so 5.0.1 is not affected.
Signed-off-by: Peter Marko
---
meta/recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb | 5 +
1 file changed, 5 insertions(+)
diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_5.0.1.bb
b/meta/recipes-multimedia
On 20 Feb 2025, at 15:52, Vyacheslav Yurkov wrote:
>
> From meta/classes-recipe/rootfs-postcommands.bbclass:
>
> # 20:12 < mezcalero> koen: you have three options: a) run
> systemd-machine-id-setup at install time, b) have / read-only and an empty
> file there (for stateless) and c) boot w
Hi Leonard,
I will test on my side and then I'll come back with the results.
Thanks
Jose
Leonard Anderweit escreveu (quinta, 20/02/2025 à(s)
14:42):
> Hi,
>
> I've also noticed this bug and sent patch [1] to fix it.
>
> [1] https://lists.openembedded.org/g/openembedded-core/message/211761
>
>
Hi,
On Thu, Feb 20, 2025 at 09:20:16AM +, Richard Purdie wrote:
> On Thu, 2025-02-20 at 10:35 +0200, Mikko Rapeli wrote:
> > On Wed, Feb 19, 2025 at 03:59:59PM +, Richard Purdie wrote:
> > > On Thu, 2025-02-06 at 16:44 +0200, Mikko Rapeli via
> > > lists.yoctoproject.org wrote:
> > > > ps
On Thu, Feb 20, 2025 at 3:52 PM Vyacheslav Yurkov via
lists.openembedded.org
wrote:
>
> From meta/classes-recipe/rootfs-postcommands.bbclass:
>
> # 20:12 < mezcalero> koen: you have three options: a) run
> systemd-machine-id-setup at install time, b) have / read-only and an
> empty file there
Am 20.02.2025 um 11:00 schrieb Richard Purdie via lists.openembedded.org:
On Thu, 2025-02-20 at 10:48 +0100, Stefan Herbrechtsmeier wrote:
Am 19.02.2025 um 18:33 schrieb Richard Purdie:
On Wed, 2025-02-19 at 17:48 +0100, Stefan Herbrechtsmeier wrote:
I don't change the exception. The exceptions
The variable was mostly removed in oe-core 9d5edd12 but the documentation
remained.
[ YOCTO #15758 ]
Signed-off-by: Ross Burton
---
meta/conf/documentation.conf | 1 -
1 file changed, 1 deletion(-)
diff --git a/meta/conf/documentation.conf b/meta/conf/documentation.conf
index 2dcf85f7672..3dd7
From meta/classes-recipe/rootfs-postcommands.bbclass:
# 20:12 < mezcalero> koen: you have three options: a) run
systemd-machine-id-setup at install time, b) have / read-only and an
empty file there (for stateless) and c) boot with / writable
touch ${IMAGE_ROOTFS}${sysconfdir}/mach
Isn't is supposed to be created on first boot?
Slava
On 20.02.2025 15:07, Ross Burton wrote:
On 19 Feb 2025, at 10:39, Vyacheslav Yurkov via lists.openembedded.org
wrote:
From: Vyacheslav Yurkov
Instead of the python re-implementation build the actual systemctl from
the systemd source tree
Hi,
I've also noticed this bug and sent patch [1] to fix it.
[1] https://lists.openembedded.org/g/openembedded-core/message/211761
Leonard
Am Donnerstag, dem 20.02.2025 um 10:46 + schrieb Jose Quaresma via
lists.openembedded.org:
> Hi,
>
> Any news about this regression?
> If we don't get
On 20 Feb 2025, at 08:56, Changqing Li wrote:
> For autotools.bbclass, how about don't pass -I $i to acpaths, suppose that
> upstream configure.ac or Makefile.am have set the correct
> AC_CONFIG_MACRO_DIRS, ACLOCAL_AUTOMAKE_DIR, or ACLOCAL_AMFLAGS. if the
> recipe is not correctly set, the
With UBOOT_SIGN_ENABLE enabled commit 3fb215a3af24 (u-boot:
kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV
enabled) always adds the signature of UBOOT_SIGN_IMG_KEYNAME to the
u-boot dtb, independent of FIT_SIGN_INDIVIDUAL. The kernel fitimage
configuration node is signed wi
On Wed, Feb 19, 2025 at 10:03 PM Kai wrote:
>
> On 2/19/25 23:19, Steve Sakoman wrote:
> > Hi Kai,
> >
> > Not sure why, but this fails to apply for me:
> >
> > Applying: Revert "ovmf: Fix CVE-2023-45237"
> > Using index info to reconstruct a base tree...
> > error: patch failed: meta/recipes-core
The dependency on python3-lxml-native was missing, so the generation of
man page indices was skipped (systemd.index and systemd.directives).
Signed-off-by: Alexis Cellier
---
meta/recipes-core/systemd/systemd_257.3.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recip
On 19 Feb 2025, at 10:39, Vyacheslav Yurkov via lists.openembedded.org
wrote:
>
> From: Vyacheslav Yurkov
>
> Instead of the python re-implementation build the actual systemctl from
> the systemd source tree. The python script was used when systemd didn't
> provide an option to build individua
From: Chen Qi
When DEBUG_BUILD is enabled, we use "-Og" gcc options. In such
case, the xxhash functions are considered not inline, yet debugedit.c
defined XXH_INLINE_ALL to force inline, thus causing build failure.
Backport a patch which add "--disable-inlined-xxhash" option and
make debugedit u
Got it. I'll send out V3.
Regards,
Qi
-Original Message-
From: Alexander Kanavin
Sent: Thursday, February 20, 2025 6:28 PM
To: Chen, Qi
Cc: openembedded-core@lists.openembedded.org
Subject: Re: [OE-core][PATCH V2] debugedit: fix build failure when enabling
DEBUG_BUILD
On Thu, 20 Feb
So with this patch applied we would get this CFLAGS on sysconfigdata on the
build directory:
'CFLAGS': '-fno-strict-overflow '
'-Wsign-compare '
'-DNDEBUG '
'-g '
'-O3 '
'-Wall '
'-O2 '
'-g '
'-fcanon-prefix-
Hello,
Thanks for the quick reply. Let me provide some details of my findings:
So the original DEBUG_PREFIX_MAP variable is a list of space separated values:
```
builder@bc2576acfe0e:/build/tmp/work/core2-64-oe-linux/python3/3.13.2$
bitbake-getvar DEBUG_PREFIX_MAP -r python3
#
# $DEBUG_PREFIX_
Hi,
Any news about this regression?
If we don't get a fix for this bug asap maybe we should revert and drop
this patch since it broke our scarthgap stable LTS
Jose
Rogerio Guerra Borin via lists.openembedded.org escreveu (terça, 18/02/2025 à(s) 03:49):
> > This message originated from outside
On Thu, 20 Feb 2025 at 05:31, Chen Qi via lists.openembedded.org
wrote:
> +Upstream-Status: Backport [820498e881401a6f4b1715dc6831da965f6e1d69]
This doesn't say where the commit can be found. It's better to point
to the git web ui:
https://sourceware.org/cgit/debugedit/commit/?id=820498e881401a6
On Thu, 20 Feb 2025 at 01:31, wangmy via lists.openembedded.org
wrote:
> Add python3-docutils-native to provide rst2html5
> -DEPENDS = "glib-2.0 glib-2.0-native fontconfig freetype virtual/libiconv
> cairo harfbuzz fribidi"
> +DEPENDS = "glib-2.0 glib-2.0-native fontconfig freetype virtual/libico
On Thu, 2025-02-20 at 10:48 +0100, Stefan Herbrechtsmeier wrote:
>
> Am 19.02.2025 um 18:33 schrieb Richard Purdie:
> >
> > On Wed, 2025-02-19 at 17:48 +0100, Stefan Herbrechtsmeier wrote:
> > >
> > >
> > >
> > > I don't change the exception. The exceptions are the reason for
> > > the sta
Am 19.02.2025 um 18:33 schrieb Richard Purdie:
On Wed, 2025-02-19 at 17:48 +0100, Stefan Herbrechtsmeier wrote:
I don't change the exception. The exceptions are the reason for the
state of the series.
The missing point is that the expectation is related to the end of a
dependency chain and n
On Thu, 20 Feb 2025 at 08:00, Sanjuán García, Jorge
wrote:
> There are still some 'prefix-map' stuff that is not properly being replaced
> because the do_install() task is
> doing this sed expression `-e "s,${B},/build/path/unavailable/,g"`. We could
> probably move that to
> `py_package_prepro
On Thu, 2025-02-20 at 10:35 +0200, Mikko Rapeli wrote:
> Hi,
>
> On Wed, Feb 19, 2025 at 03:59:59PM +, Richard Purdie wrote:
> > On Thu, 2025-02-06 at 16:44 +0200, Mikko Rapeli via lists.yoctoproject.org
> > wrote:
> > > psplash-start.service expected to find /dev/fb0 and failed
> > > if devi
The package linux-firmware-qcom-qcm6490-wifi also provides a symlink
qcom/qcs6490/wpss.mbn. Follow the pattern established by
linux-firmware-qcom-qcm6490-audio and -compute packages and make this
package RPROVIDE the qcs6490 name.
Signed-off-by: Dmitry Baryshkov
---
meta/recipes-kernel/linux-fir
On 1/8/25 23:16, Ross Burton wrote:
CAUTION: This email comes from a non Wind River email account!
Do not click links or open attachments unless you recognize the sender and know
the content is safe.
I have a series in testing that removes acpaths entirely which solves this
problem at the sou
busybox mkswap doesn't support all needed options.
Fixes:
systemd[1]: Activating swap
/dev/disk/by-uuid/38d0b388-9989-4744-8a0a-3e6be1135f5a...
swapon[210]: swapon: /dev/sda3: swap format pagesize does not match.
swapon[210]: swapon: /dev/sda3: reinitializing the swap.
swapon[212]: mkswap: invali
Hi,
On Wed, Feb 19, 2025 at 03:59:59PM +, Richard Purdie wrote:
> On Thu, 2025-02-06 at 16:44 +0200, Mikko Rapeli via lists.yoctoproject.org
> wrote:
> > psplash-start.service expected to find /dev/fb0 and failed
> > if device was not found. This failure breaks systemd
> > oeqa runtime test w
systemd ignores the typo and continues but startup fails later due to
missing fifo file. Fixes:
systemd[1]: /usr/lib/systemd/system/psplash-systemd.service:8: Unknown key
'ConditionFileExists' in section [Unit], ignoring.
Signed-off-by: Mikko Rapeli
---
meta/recipes-core/psplash/files/psplash-
51 matches
Mail list logo
