* [OE-core][dunfell 00/12] Patch review
@ 2020-08-03 14:26 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2020-08-03 14:26 UTC (permalink / raw)
To: openembedded-core
Please review this next set of patches for dunfell and have comments back
by end of day Wednesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/1224
The following changes since commit 7ce425fa1295a9dca48f8474be58db3ac8aa540d:
glibc: Secruity fix for CVE-2020-6096 (2020-07-27 12:15:56 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Alexander Kanavin (1):
gnutls: upgrade 3.6.13 -> 3.6.14
Andrei Gherzan (2):
initscripts: Fix various shellcheck warnings in populate-volatile.sh
initscripts: Fix populate-volatile.sh bug when file/dir exists
Changqing Li (2):
layer.conf: fix adwaita-icon-theme signature change problem
gtk-icon-cache.bbclass: add features_check
Konrad Weihmann (1):
cve-update: handle baseMetricV2 as optional
Lee Chee Yang (1):
checklayer: check layer in BBLAYERS before test
Matt Madison (1):
cogl-1.0: correct X11 dependencies
Steve Sakoman (1):
glib-networking: upgrade 2.62.3 to 2.62.4
Viktor Rosendahl (1):
boost: backport fix to make async_pipes work with asio
Yi Zhao (1):
bind: upgrade 9.11.19 -> 9.11.21
zhengruoqin (1):
gnutls: Fix krb5 code license to GPLv2.1+ to match the LICENSE file.
meta/classes/gtk-icon-cache.bbclass | 5 ++
meta/conf/layer.conf | 2 +
.../bind/{bind_9.11.19.bb => bind_9.11.21.bb} | 2 +-
...ng_2.62.3.bb => glib-networking_2.62.4.bb} | 4 +-
.../initscripts-1.0/populate-volatile.sh | 80 ++++++++---------
.../recipes-core/meta/cve-update-db-native.bb | 13 ++-
meta/recipes-graphics/cogl/cogl-1.0.inc | 2 +-
.../0001-added-typedef-executor_type.patch | 54 +++++++++++
meta/recipes-support/boost/boost_1.72.0.bb | 1 +
...se-to-GPLv2.1-to-keep-with-LICENSE-f.patch | 90 +++++++++++++++++++
.../{gnutls_3.6.13.bb => gnutls_3.6.14.bb} | 4 +-
scripts/lib/checklayer/__init__.py | 14 +++
scripts/yocto-check-layer | 9 +-
13 files changed, 229 insertions(+), 51 deletions(-)
rename meta/recipes-connectivity/bind/{bind_9.11.19.bb => bind_9.11.21.bb} (98%)
rename meta/recipes-core/glib-networking/{glib-networking_2.62.3.bb => glib-networking_2.62.4.bb} (88%)
create mode 100644 meta/recipes-support/boost/boost/0001-added-typedef-executor_type.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/0001-Modied-the-license-to-GPLv2.1-to-keep-with-LICENSE-f.patch
rename meta/recipes-support/gnutls/{gnutls_3.6.13.bb => gnutls_3.6.14.bb} (92%)
--
2.17.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2020-08-24 15:14 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2020-08-24 15:14 UTC (permalink / raw)
To: openembedded-core
Please review this next set of patches for dunfell and have comments back
by end of day Wednesday.
The following changes since commit 553a96644957ca6ad0f13b75a6e3a596357d1d52:
linux-yocto/5.4: update to v5.4.57 (2020-08-13 04:47:52 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Adrian Bunk (1):
librsvg: Upgrade 2.40.20 -> 2.40.21
Bruce Ashfield (2):
linux-yocto/5.4: update to v5.4.58
linux-yocto/5.4: perf cs-etm: Move definition of 'traceid_list' global
variable from header file
Changqing Li (1):
libffi: fix multilib header conflict
Chen Qi (1):
fribidi: extend CVE_PRODUCT to include fribidi
Lee Chee Yang (2):
ghostscript: update to 9.52
perl: fix CVE-2020-12723
Mikko Rapeli (2):
alsa-topology-conf: use ${datadir} in do_install()
alsa-ucm-conf: use ${datadir} in do_install()
Richard Purdie (1):
selftest/tinfoil: Increase wait event timeout
Vasyl Vavrychuk (1):
runqemu: Check gtk or sdl option is passed together with gl or gl-es
options.
Wang Mingyu (1):
xserver-xorg: upgrade 1.20.7 -> 1.20.8
meta/lib/oeqa/selftest/cases/tinfoil.py | 5 +-
.../perl/files/CVE-2020-12723.patch | 302 ++++++++++++++++++
meta/recipes-devtools/perl/perl_5.30.1.bb | 1 +
.../do-not-check-local-libpng-source.patch | 37 +--
.../ghostscript/CVE-2019-14869-0001.patch | 70 ----
.../ghostscript/ghostscript/aarch64/objarch.h | 40 ---
.../ghostscript/ghostscript/arm/objarch.h | 40 ---
.../ghostscript/ghostscript/armeb/objarch.h | 40 ---
.../ghostscript-9.02-genarch.patch | 38 ---
.../ghostscript/ghostscript/i586/objarch.h | 41 ---
.../ghostscript/ghostscript/i686 | 1 -
.../ghostscript/microblaze/objarch.h | 40 ---
.../ghostscript/microblazeel/objarch.h | 40 ---
.../ghostscript/mipsarchn32eb/objarch.h | 40 ---
.../ghostscript/mipsarchn32el/objarch.h | 40 ---
.../ghostscript/mipsarchn64eb/objarch.h | 40 ---
.../ghostscript/mipsarchn64el/objarch.h | 40 ---
.../ghostscript/mipsarcho32eb/objarch.h | 40 ---
.../ghostscript/mipsarcho32el/objarch.h | 40 ---
.../ghostscript/ghostscript/nios2/objarch.h | 40 ---
.../ghostscript/ghostscript/powerpc/objarch.h | 40 ---
.../ghostscript/powerpc64/objarch.h | 40 ---
.../ghostscript/powerpc64le/objarch.h | 40 ---
.../ghostscript/ghostscript/x86-64/objarch.h | 40 ---
...hostscript_9.50.bb => ghostscript_9.52.bb} | 27 +-
...{librsvg_2.40.20.bb => librsvg_2.40.21.bb} | 3 +-
...-xorg_1.20.7.bb => xserver-xorg_1.20.8.bb} | 4 +-
.../linux/linux-yocto-rt_5.4.bb | 6 +-
.../linux/linux-yocto-tiny_5.4.bb | 8 +-
meta/recipes-kernel/linux/linux-yocto_5.4.bb | 22 +-
.../alsa/alsa-topology-conf_1.2.1.bb | 4 +-
.../alsa/alsa-ucm-conf_1.2.1.2.bb | 6 +-
meta/recipes-support/fribidi/fribidi_1.0.9.bb | 2 +-
meta/recipes-support/libffi/libffi_3.3.bb | 2 +-
scripts/runqemu | 3 +-
35 files changed, 361 insertions(+), 861 deletions(-)
create mode 100644 meta/recipes-devtools/perl/files/CVE-2020-12723.patch
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/CVE-2019-14869-0001.patch
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/aarch64/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/arm/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/armeb/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/ghostscript-9.02-genarch.patch
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/i586/objarch.h
delete mode 120000 meta/recipes-extended/ghostscript/ghostscript/i686
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/microblaze/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/microblazeel/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/mipsarchn32eb/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/mipsarchn32el/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/mipsarchn64eb/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/mipsarchn64el/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/mipsarcho32eb/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/mipsarcho32el/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/nios2/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/powerpc/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/powerpc64/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/powerpc64le/objarch.h
delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/x86-64/objarch.h
rename meta/recipes-extended/ghostscript/{ghostscript_9.50.bb => ghostscript_9.52.bb} (87%)
rename meta/recipes-gnome/librsvg/{librsvg_2.40.20.bb => librsvg_2.40.21.bb} (92%)
rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_1.20.7.bb => xserver-xorg_1.20.8.bb} (89%)
--
2.17.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2020-11-09 2:56 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2020-11-09 2:56 UTC (permalink / raw)
To: openembedded-core
Please review this next set of patches for dunfell and have comments back
by end of day Tuesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/1560
The following changes since commit 8d54034bb8e522f9827ec6422b32cbd4e5bf1346:
sqlite3: fix CVE-2020-13632 (2020-11-05 04:07:15 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Alexander Kanavin (1):
linux-firmware: upgrade 20200817 -> 20201022
Chee Yang Lee (1):
ruby: fix CVE-2020-25613
Khem Raj (1):
qemuboot.bbclass: Fix a typo
Max Krummenacher (2):
linux-firmware: package marvel sdio 8997 firmware
linux-firmware: package nvidia firmware
Maxime Roussin-Bélanger (1):
meta: fix some unresponsive homepages and bugtracker links
Mingli Yu (1):
update_udev_hwdb: clean hwdb.bin
Neil Armstrong (1):
linux-firmware: add Amlogic VDEC firmware package
Steve Sakoman (2):
netbase: update SRC_URI to reflect new file name
netbase: bump PE to purge bogus hash equivalence from autobuilder
Yongxin Liu (2):
grub: fix several CVEs in grub 2.04
grub: clean up CVE patches
meta/classes/qemuboot.bbclass | 2 +-
...308-calloc-Use-calloc-at-most-places.patch | 1863 +++++++++++++++++
...low-checking-primitives-where-we-do-.patch | 1330 ++++++++++++
...se-after-free-when-redefining-a-func.patch | 117 ++
...er-overflows-in-initrd-size-handling.patch | 177 ++
...-we-always-have-an-overflow-checking.patch | 246 +++
...dd-LVM-cache-logical-volume-handling.patch | 287 +++
...e-arithmetic-primitives-that-check-f.patch | 94 +
...used-fields-from-grub_script_functio.patch | 37 +
meta/recipes-bsp/grub/grub2.inc | 8 +
meta/recipes-bsp/v86d/v86d_0.1.10.bb | 2 +-
.../recipes-connectivity/bind/bind_9.11.22.bb | 2 +-
meta/recipes-connectivity/iw/iw_5.4.bb | 2 +-
meta/recipes-core/netbase/netbase_6.1.bb | 9 +-
meta/recipes-core/readline/readline.inc | 2 +-
meta/recipes-core/util-linux/util-linux.inc | 4 +-
meta/recipes-devtools/chrpath/chrpath_0.16.bb | 3 +-
meta/recipes-devtools/ninja/ninja_1.10.0.bb | 2 +-
.../ruby/ruby/CVE-2020-25613.patch | 40 +
meta/recipes-devtools/ruby/ruby_2.7.1.bb | 1 +
meta/recipes-extended/lsb/lsb-release_1.4.bb | 2 +-
.../recipes-extended/minicom/minicom_2.7.1.bb | 2 +-
meta/recipes-extended/pbzip2/pbzip2_1.1.13.bb | 2 +-
meta/recipes-extended/which/which_2.21.bb | 2 +-
meta/recipes-gnome/gnome/gconf_3.2.6.bb | 2 +-
meta/recipes-gnome/gtk-doc/gtk-doc_1.32.bb | 3 +-
meta/recipes-kernel/kmod/kmod.inc | 2 +-
...20200817.bb => linux-firmware_20201022.bb} | 51 +-
.../wireless-regdb_2020.04.29.bb | 2 +-
.../libvorbis/libvorbis_1.3.6.bb | 4 +-
.../settings-daemon/settings-daemon_0.0.2.bb | 2 +-
meta/recipes-support/atk/atk_2.34.1.bb | 5 +-
.../bash-completion/bash-completion_2.10.bb | 4 +-
meta/recipes-support/npth/npth_1.6.bb | 4 +-
scripts/postinst-intercepts/update_udev_hwdb | 1 +
35 files changed, 4279 insertions(+), 37 deletions(-)
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-14308-calloc-Use-calloc-at-most-places.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-14309-CVE-2020-14310-CVE-2020-14311-malloc-Use-overflow-checking-primitives-where-we-do-.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-15706-script-Avoid-a-use-after-free-when-redefining-a-func.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-15707-linux-Fix-integer-overflows-in-initrd-size-handling.patch
create mode 100644 meta/recipes-bsp/grub/files/calloc-Make-sure-we-always-have-an-overflow-checking.patch
create mode 100644 meta/recipes-bsp/grub/files/lvm-Add-LVM-cache-logical-volume-handling.patch
create mode 100644 meta/recipes-bsp/grub/files/safemath-Add-some-arithmetic-primitives-that-check-f.patch
create mode 100644 meta/recipes-bsp/grub/files/script-Remove-unused-fields-from-grub_script_functio.patch
create mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2020-25613.patch
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20200817.bb => linux-firmware_20201022.bb} (95%)
--
2.17.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2021-01-11 0:45 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2021-01-11 0:45 UTC (permalink / raw)
To: openembedded-core
Please review this next set of patches for dunfell and have comments back by
end of day Tuesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/1739
The following changes since commit af4fbea9a1656bdf95d85831cae13cae3a60d5ee:
patch: fix CVE-2019-20633 (2021-01-04 04:50:23 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Bruce Ashfield (1):
linux-yocto/5.4: update to v5.4.85
Daniel Ammann (1):
wic: fix typo
Mikko Rapeli (3):
glibc: update to 2.31 stable tree head
glib-2.0: add patch for CVE-2020-35457
systemd: update from 244.3 to 244.5 stable release
Milan Shah (1):
oe-pkgdata-util: Added a test to verify oe-pkgdata-util without
parameters
Ovidiu Panait (1):
timezone: upgrade to 2020f
Paul Barker (1):
selftest: Add argument to keep build dir
Richard Purdie (1):
gcc: Fix mangled patch
Ross Burton (2):
diffstat: point the license checksum at the license
ruby: remove tcl DEPENDS
Wang Mingyu (1):
mobile-broadband-provider-info: upgrade 20190618 ->20201225
meta/lib/oeqa/selftest/cases/pkgdata.py | 6 ++
meta/lib/oeqa/selftest/context.py | 17 +++-
.../mobile-broadband-provider-info_git.bb | 4 +-
...econdition-to-avoid-GOptionEntry-lis.patch | 41 ++++++++
meta/recipes-core/glib-2.0/glib-2.0_2.62.6.bb | 1 +
meta/recipes-core/glibc/glibc-version.inc | 2 +-
...md-boot_244.3.bb => systemd-boot_244.5.bb} | 0
meta/recipes-core/systemd/systemd.inc | 2 +-
.../systemd/systemd/CVE-2020-13776.patch | 96 -------------------
...temd-udev-seclabel-options-crash-fix.patch | 30 ------
.../{systemd_244.3.bb => systemd_244.5.bb} | 5 +-
.../diffstat/diffstat_1.63.bb | 4 +-
...gcc-Fix-argument-list-too-long-error.patch | 6 +-
meta/recipes-devtools/ruby/ruby.inc | 2 +-
meta/recipes-extended/timezone/timezone.inc | 6 +-
.../linux/linux-yocto-rt_5.4.bb | 6 +-
.../linux/linux-yocto-tiny_5.4.bb | 8 +-
meta/recipes-kernel/linux/linux-yocto_5.4.bb | 22 ++---
.../wic/plugins/source/bootimg-partition.py | 2 +-
19 files changed, 97 insertions(+), 163 deletions(-)
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/0001-goption-Add-a-precondition-to-avoid-GOptionEntry-lis.patch
rename meta/recipes-core/systemd/{systemd-boot_244.3.bb => systemd-boot_244.5.bb} (100%)
delete mode 100644 meta/recipes-core/systemd/systemd/CVE-2020-13776.patch
delete mode 100644 meta/recipes-core/systemd/systemd/systemd-udev-seclabel-options-crash-fix.patch
rename meta/recipes-core/systemd/{systemd_244.3.bb => systemd_244.5.bb} (99%)
--
2.17.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2021-04-30 15:33 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2021-04-30 15:33 UTC (permalink / raw)
To: openembedded-core
Please review this next set of patches for dunfell and have comments back by
end of day Tuesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2087
The following changes since commit 2cc9e06807026b86038db88c2175c626feadc0be:
linux-yocto/5.4: fix arm defconfig warnings (2021-04-22 06:23:22 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Alexander Kanavin (2):
oeqa: tear down oeqa decorators if one of them raises an exception in
setup
meta/lib/oeqa/core/tests/cases/timeout.py: add a testcase for the
previous fix
Diego Sueiro (1):
oeqa/selftest/bblayers: Add test case for bitbake-layers
layerindex-show-depends
Khem Raj (1):
go: Use dl.google.com for SRC_URI
Konrad Weihmann (1):
cve-update-db-native: skip on empty cpe23Uri
Marek Vasut (1):
linux-firmware: Package RSI 911x WiFi firmware
Reto Schneider (2):
license_image.bbclass: Detect broken symlinks
license_image.bbclass: Fix symlink to generic license files
Richard Purdie (1):
yocto-check-layer: Avoid bug when iterating and autoadding
dependencies
Vinay Kumar (1):
Binutils: Fix CVE-2021-20197
Zhang Qiang (1):
kernel.bbclass: Configuration for environment with HOSTCXX
wangmy (1):
go: update SRC_URI to use https protocol
meta/classes/kernel.bbclass | 2 +
meta/classes/license_image.bbclass | 20 +-
meta/lib/oeqa/core/case.py | 9 +-
meta/lib/oeqa/core/decorator/oetimeout.py | 5 +-
meta/lib/oeqa/core/tests/cases/timeout.py | 13 +
meta/lib/oeqa/core/tests/test_decorators.py | 6 +
meta/lib/oeqa/selftest/cases/bblayers.py | 5 +
.../recipes-core/meta/cve-update-db-native.bb | 7 +-
.../binutils/binutils-2.34.inc | 1 +
.../binutils/binutils/CVE-2021-20197.patch | 572 ++++++++++++++++++
meta/recipes-devtools/go/go-common.inc | 2 +-
.../linux-firmware/linux-firmware_20210208.bb | 11 +
scripts/yocto-check-layer | 3 +
13 files changed, 646 insertions(+), 10 deletions(-)
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2021-20197.patch
--
2.25.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2021-07-12 15:31 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2021-07-12 15:31 UTC (permalink / raw)
To: openembedded-core
Please review this next set of patches for dunfell and have comments back by
end of day Wednesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2338
The following changes since commit c96bcf97272f243df14598c84a41097746884b65:
oeqa/selftest/archiver: Allow tests to ignore empty directories (2021-07-06 04:37:02 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Alexander Kanavin (1):
bootchart2: update 0.14.8 -> 0.14.9
Chen Qi (1):
busybox: fix CVE-2021-28831
Khem Raj (1):
webkitgtk: Upgrade to 2.28.4
Marek Vasut (1):
update-rc.d: update SRCREV to pull in fix for non-bash shell support
Minjae Kim (1):
dhcp: fix CVE-2021-25217
Richard Purdie (4):
webkitgtk: upgrade 2.28.2 -> 2.28.3
dwarfsrcfiles: Avoid races over debug-link files
oeqa/selftest/multiprocesslauch: Fix test race
report-error: Drop pointless inherit
Steve Sakoman (1):
glibc: update to lastest 2.31 release HEAD
Tim Orling (1):
python3: upgrade 3.8.10 -> 3.8.11
Zoltán Böszörményi (1):
tzdata: Allow controlling zoneinfo binary format
meta/classes/report-error.bbclass | 2 -
meta/lib/oeqa/selftest/cases/oelib/utils.py | 3 +-
.../dhcp/dhcp/CVE-2021-25217.patch | 66 ++++
meta/recipes-connectivity/dhcp/dhcp_4.4.2.bb | 1 +
...ss_gunzip-Fix-DoS-if-gzip-is-corrupt.patch | 51 +++
meta/recipes-core/busybox/busybox_1.31.1.bb | 3 +-
meta/recipes-core/glibc/glibc-version.inc | 2 +-
.../update-rc.d/update-rc.d_0.8.bb | 2 +-
...tchart2_0.14.8.bb => bootchart2_0.14.9.bb} | 3 +-
.../dwarfsrcfiles/files/dwarfsrcfiles.c | 13 +-
.../recipes-devtools/python/python3_3.8.11.bb | 362 ++++++++++++++++++
meta/recipes-extended/timezone/tzdata.bb | 10 +-
...build-errors-due-to-WWc-11-narrowing.patch | 66 ++++
.../webkit/webkitgtk/CVE-2020-13753.patch | 15 -
...ebkitgtk_2.28.2.bb => webkitgtk_2.28.4.bb} | 5 +-
15 files changed, 571 insertions(+), 33 deletions(-)
create mode 100644 meta/recipes-connectivity/dhcp/dhcp/CVE-2021-25217.patch
create mode 100644 meta/recipes-core/busybox/busybox/0001-decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch
rename meta/recipes-devtools/bootchart2/{bootchart2_0.14.8.bb => bootchart2_0.14.9.bb} (99%)
create mode 100644 meta/recipes-devtools/python/python3_3.8.11.bb
create mode 100644 meta/recipes-sato/webkit/webkitgtk/0001-clang-11-fix-build-errors-due-to-WWc-11-narrowing.patch
delete mode 100644 meta/recipes-sato/webkit/webkitgtk/CVE-2020-13753.patch
rename meta/recipes-sato/webkit/{webkitgtk_2.28.2.bb => webkitgtk_2.28.4.bb} (97%)
--
2.25.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2021-08-19 19:07 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2021-08-19 19:07 UTC (permalink / raw)
To: openembedded-core
Please review this next set of patches for dunfell and have comments back by
end of day Monday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2469
The following changes since commit ce78c16409363741d59a2f787aca66077bec93cd:
sstate.bbclass: fix error handling when sstate mirrors is ro (2021-08-16 04:41:07 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Alexandre Belloni (1):
oeqa/runtime/cases: make date.DateTest.test_date more reliable
Bruce Ashfield (3):
linux-yocto/5.4: update to v5.4.137
linux-yocto/5.4: update to v5.4.139
linux-yocto/5.4: update to v5.4.141
Dmitry Baryshkov (1):
linux-firmware: add more Qualcomm firmware packages
Dragos-Marian Panait (1):
util-linux: fix CVE-2021-37600
Khem Raj (1):
sdk: Enable do_populate_sdk with multilibs
Purushottam Choudhary (1):
python3: Remove unused python3 recipe
Richard Purdie (1):
oeqa/selftest/glibc: Handle incorrect encoding issuesin glibc test
results
Ross Burton (2):
tar: ignore node-tar CVEs
ovmf: build natively everywhere
hongxu (1):
sdk: fix relocate symlink failed
meta/classes/multilib.bbclass | 1 -
meta/classes/populate_sdk_base.bbclass | 2 +-
meta/files/toolchain-shar-relocate.sh | 2 +-
meta/lib/oeqa/runtime/cases/date.py | 9 +-
meta/lib/oeqa/selftest/cases/glibc.py | 2 +-
meta/recipes-core/ovmf/ovmf_git.bb | 2 +-
.../util-linux/CVE-2021-37600.patch | 33 ++
.../util-linux/util-linux_2.35.1.bb | 1 +
.../recipes-devtools/python/python3_3.8.10.bb | 363 ------------------
meta/recipes-extended/tar/tar_1.32.bb | 3 +
.../linux-firmware/linux-firmware_20210511.bb | 17 +-
.../linux/linux-yocto-rt_5.4.bb | 6 +-
.../linux/linux-yocto-tiny_5.4.bb | 8 +-
meta/recipes-kernel/linux/linux-yocto_5.4.bb | 22 +-
14 files changed, 79 insertions(+), 392 deletions(-)
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2021-37600.patch
delete mode 100644 meta/recipes-devtools/python/python3_3.8.10.bb
--
2.25.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2022-01-09 22:04 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2022-01-09 22:04 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for dunfell and have comments back by end
of day Tuesday.
Passed a-full on auto builder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3096
with the exception of a known intermmitent autobuilder issue on oe-selftest-fedora,
which passed on subsequent retest:
https://autobuilder.yoctoproject.org/typhoon/#/builders/86/builds/3004
The following changes since commit 1ab7aee542589f6b6c76f8515b4230ce870a8678:
selftest: skip virgl test on fedora 34 entirely (2021-12-23 06:21:37 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Alexander Kanavin (1):
lib/oe/reproducible: correctly set .git location when recursively
looking for git repos
Marek Vasut (1):
weston: Backport patches to always activate the top-level surface
Marta Rybczynska (1):
grub: fix CVE-2020-14372 and CVE-2020-27779
Richard Purdie (4):
openssl: Add reproducibility fix
oeqa/selftest/bbtests: Use YP sources mirror instead of GNU
oeqa/selftest/tinfoil: Update to use test command
scripts: Update to use exec_module() instead of load_module()
Steve Sakoman (3):
libpcre2: update SRC_URI
selftest: skip virgl test on fedora 35
asciidoc: properly detect and compare Python versions >= 3.10
Tim Orling (1):
scripts/buildhistory-diff: drop use of distutils
wangmy (1):
linux-firmware: upgrade 20211027 -> 20211216
meta/lib/oe/reproducible.py | 2 +-
meta/lib/oeqa/selftest/cases/bbtests.py | 2 +-
meta/lib/oeqa/selftest/cases/runtime_test.py | 2 +
meta/lib/oeqa/selftest/cases/tinfoil.py | 6 +-
.../grub/files/CVE-2020-14372.patch | 76 +++
.../grub/files/CVE-2020-14372_1.patch | 130 ++++++
.../grub/files/CVE-2020-14372_2.patch | 431 ++++++++++++++++++
.../grub/files/CVE-2020-14372_3.patch | 57 +++
.../grub/files/CVE-2020-14372_4.patch | 52 +++
.../grub/files/CVE-2020-14372_5.patch | 158 +++++++
.../grub/files/CVE-2020-27779.patch | 70 +++
.../grub/files/CVE-2020-27779_2.patch | 105 +++++
.../grub/files/CVE-2020-27779_3.patch | 37 ++
.../grub/files/CVE-2020-27779_4.patch | 35 ++
.../grub/files/CVE-2020-27779_5.patch | 62 +++
.../grub/files/CVE-2020-27779_6.patch | 61 +++
.../grub/files/CVE-2020-27779_7.patch | 65 +++
.../grub/files/no-insmod-on-sb.patch | 107 +++++
meta/recipes-bsp/grub/grub2.inc | 14 +
.../openssl/openssl/reproducibility.patch | 22 +
.../openssl/openssl_1.1.1l.bb | 1 +
.../asciidoc/detect-python-version.patch | 42 ++
.../asciidoc/asciidoc_8.6.9.bb | 3 +-
...move-no-op-de-activation-of-the-xdg-.patch | 32 ++
...name-gain-lose-keyboard-focus-to-act.patch | 57 +++
...bed-keyboard-focus-handle-code-when-.patch | 99 ++++
meta/recipes-graphics/wayland/weston_8.0.0.bb | 3 +
...20211027.bb => linux-firmware_20211216.bb} | 4 +-
.../recipes-support/libpcre/libpcre2_10.34.bb | 2 +-
scripts/buildhistory-diff | 5 -
scripts/lib/scriptutils.py | 7 +-
scripts/lib/wic/pluginbase.py | 8 +-
32 files changed, 1739 insertions(+), 18 deletions(-)
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-14372.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-14372_1.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-14372_2.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-14372_3.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-14372_4.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-14372_5.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-27779.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-27779_2.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-27779_3.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-27779_4.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-27779_5.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-27779_6.patch
create mode 100644 meta/recipes-bsp/grub/files/CVE-2020-27779_7.patch
create mode 100644 meta/recipes-bsp/grub/files/no-insmod-on-sb.patch
create mode 100644 meta/recipes-connectivity/openssl/openssl/reproducibility.patch
create mode 100644 meta/recipes-extended/asciidoc/asciidoc/detect-python-version.patch
create mode 100644 meta/recipes-graphics/wayland/weston/0002-desktop-shell-Remove-no-op-de-activation-of-the-xdg-.patch
create mode 100644 meta/recipes-graphics/wayland/weston/0003-desktop-shell-Rename-gain-lose-keyboard-focus-to-act.patch
create mode 100644 meta/recipes-graphics/wayland/weston/0004-desktop-shell-Embed-keyboard-focus-handle-code-when-.patch
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20211027.bb => linux-firmware_20211216.bb} (99%)
--
2.25.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2022-06-19 19:34 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2022-06-19 19:34 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for dunfell and have comments back by end
of day Tuesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3790
The following changes since commit 7e056e79a5acce8261cb5124c172cc40ad608b82:
linux-yocto/5.4: update to v5.4.196 (2022-06-07 08:56:30 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Jose Quaresma (2):
archiver: use bb.note instead of echo
archiver: don't use machine variables in shared recipes
Marcel Ziswiler (1):
alsa-plugins: fix libavtp vs. avtp packageconfig
Martin Jansa (1):
rootfs.py: close kernel_abi_ver_file
Mingli Yu (1):
oescripts: change compare logic in OEListPackageconfigTests
Pawan Badganchi (1):
openssh: Whitelist CVE-2021-36368
Peter Kjellerstedt (1):
license.bbclass: Bound beginline and endline in copy_license_files()
Rasmus Villemoes (1):
e2fsprogs: add alternatives handling of lsattr as well
Richard Purdie (2):
vim: Upgrade 8.2.5034 -> 8.2.5083
gcc-source: Fix incorrect task dependencies from ${B}
Stefan Wiehler (1):
kernel-yocto.bbclass: Reset to exiting on non-zero return code at end
of task
Steve Sakoman (1):
cups: fix CVE-2022-26691
meta/classes/archiver.bbclass | 11 +++++--
meta/classes/kernel-yocto.bbclass | 8 +++++
meta/classes/license.bbclass | 8 ++---
meta/lib/oe/rootfs.py | 4 ++-
meta/lib/oeqa/selftest/cases/oescripts.py | 3 +-
.../openssh/openssh_8.2p1.bb | 7 ++++
.../e2fsprogs/e2fsprogs_1.45.7.bb | 5 ++-
meta/recipes-devtools/gcc/gcc-common.inc | 2 +-
meta/recipes-devtools/gcc/gcc-source.inc | 1 +
meta/recipes-extended/cups/cups.inc | 3 +-
.../cups/cups/CVE-2022-26691.patch | 33 +++++++++++++++++++
.../alsa/alsa-plugins_1.2.1.bb | 2 +-
meta/recipes-support/vim/vim.inc | 4 +--
13 files changed, 76 insertions(+), 15 deletions(-)
create mode 100644 meta/recipes-extended/cups/cups/CVE-2022-26691.patch
--
2.25.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2022-06-30 16:23 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2022-06-30 16:23 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for dunfell and have comments back by end
of day Monday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3844
With the exception of a known autobuilder intermittent issue:
https://bugzilla.yoctoproject.org/show_bug.cgi?id=14788
which passed on subsequent retest:
https://autobuilder.yoctoproject.org/typhoon/#/builders/42/builds/5413
The following changes since commit c6f5fb5e7545636ef7948ad1562548b7b64dac35:
linux-firmware: upgrade 20220509 -> 20220610 (2022-06-20 07:32:00 -1000)
are available in the Git repository at:
git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Ahmed Hossam (1):
insane.bbclass: host-user-contaminated: Correct per package home path
Alexander Kanavin (1):
wireless-regdb: upgrade 2022.04.08 -> 2022.06.06
Hitendra Prajapati (3):
golang: CVE-2022-24675 encoding/pem: fix stack overflow in Decode
golang: CVE-2021-31525 net/http: panic in ReadRequest and ReadResponse
when reading a very large header
grub2: CVE-2021-3981 Incorrect permission in grub.cfg allow
unprivileged user to read the file content
Joe Slater (1):
unzip: fix CVE-2021-4217
Marek Vasut (1):
lttng-modules: Backport Linux 5.18+, 5.15.44+, 5.10.119+ fixes
Marta Rybczynska (2):
cve-check: add support for Ignored CVEs
oeqa/selftest/cve_check: add tests for Ignored and partial reports
Martin Jansa (1):
wic: fix WicError message
Muhammad Hamza (1):
initramfs-framework: move storage mounts to actual rootfs
Richard Purdie (1):
unzip: Port debian fixes for two CVEs
meta/classes/cve-check.bbclass | 41 ++-
meta/classes/insane.bbclass | 2 +-
meta/lib/oeqa/selftest/cases/cve_check.py | 82 ++++++
.../grub/files/CVE-2021-3981.patch | 32 +++
meta/recipes-bsp/grub/grub2.inc | 1 +
.../initrdscripts/initramfs-framework/finish | 9 +
meta/recipes-devtools/go/go-1.14.inc | 2 +
.../go/go-1.14/CVE-2021-31525.patch | 38 +++
.../go/go-1.14/CVE-2022-24675.patch | 271 ++++++++++++++++++
.../unzip/unzip/CVE-2021-4217.patch | 67 +++++
.../unzip/unzip/CVE-2022-0529.patch | 39 +++
.../unzip/unzip/CVE-2022-0530.patch | 33 +++
meta/recipes-extended/unzip/unzip_6.0.bb | 3 +
...ndom-remove-unused-tracepoints-v5.18.patch | 46 +++
...emove-unused-tracepoints-v5.10-v5.15.patch | 45 +++
...racepoints-removed-in-stable-kernels.patch | 51 ++++
.../lttng/lttng-modules_2.11.6.bb | 3 +
....04.08.bb => wireless-regdb_2022.06.06.bb} | 2 +-
scripts/wic | 2 +-
19 files changed, 754 insertions(+), 15 deletions(-)
create mode 100644 meta/recipes-bsp/grub/files/CVE-2021-3981.patch
create mode 100644 meta/recipes-devtools/go/go-1.14/CVE-2021-31525.patch
create mode 100644 meta/recipes-devtools/go/go-1.14/CVE-2022-24675.patch
create mode 100644 meta/recipes-extended/unzip/unzip/CVE-2021-4217.patch
create mode 100644 meta/recipes-extended/unzip/unzip/CVE-2022-0529.patch
create mode 100644 meta/recipes-extended/unzip/unzip/CVE-2022-0530.patch
create mode 100644 meta/recipes-kernel/lttng/lttng-modules/0017-fix-random-remove-unused-tracepoints-v5.18.patch
create mode 100644 meta/recipes-kernel/lttng/lttng-modules/0018-fix-random-remove-unused-tracepoints-v5.10-v5.15.patch
create mode 100644 meta/recipes-kernel/lttng/lttng-modules/0019-fix-random-tracepoints-removed-in-stable-kernels.patch
rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2022.04.08.bb => wireless-regdb_2022.06.06.bb} (94%)
--
2.25.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2023-02-04 21:48 Steve Sakoman
0 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2023-02-04 21:48 UTC (permalink / raw)
To: openembedded-core
Please review this set of patches for dunfell and have comments back by
end of day Tuesday.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/4885
The following changes since commit 4f069121ddb99bb6e2f186724cd60ca07f74f503:
python3: fix packaging of Windows distutils installer stubs (2023-02-04 04:34:20 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Bruce Ashfield (2):
linux-yocto/5.4: update to v5.4.229
linux-yocto/5.4: update to v5.4.230
Khem Raj (1):
libtirpc: Check if file exists before operating on it
Niko Mauno (1):
Fix missing leading whitespace with ':append'
Ranjitsinh Rathod (1):
libsdl2: Add fix for CVE-2022-4743
Steve Sakoman (4):
lttng-modules: update 2.11.6 -> 2.11.7
lttng-modules: update 2.11.7 -> 2.11.8
lttng-modules: update 2.11.8 -> 2.11.9
lttng-modules: fix build with 5.4.229 kernel
Thomas Roos (1):
devtool: fix devtool finish when gitmodules file is empty
Vivek Kumbhar (1):
go: fix CVE-2022-1962 go/parser stack exhaustion in all Parse*
functions
Xiaobing Luo (1):
devtool: Fix _copy_file() TypeError
meta/classes/externalsrc.bbclass | 2 +-
meta/classes/populate_sdk_ext.bbclass | 2 +-
meta/recipes-devtools/go/go-1.14.inc | 1 +
.../go/go-1.14/CVE-2022-1962.patch | 357 ++++++++++++++++++
.../libtirpc/libtirpc_1.2.6.bb | 2 +-
.../libsdl2/libsdl2/CVE-2022-4743.patch | 38 ++
.../libsdl2/libsdl2_2.0.12.bb | 1 +
.../linux/linux-yocto-rt_5.4.bb | 6 +-
.../linux/linux-yocto-tiny_5.4.bb | 8 +-
meta/recipes-kernel/linux/linux-yocto_5.4.bb | 22 +-
...ncpy-equals-destination-size-warning.patch | 42 ---
...jtool-Rename-frame.h-objtool.h-v5.10.patch | 88 -----
...oints-output-proper-root-owner-for-t.patch | 316 ----------------
...rdered-extent-tracepoint-take-btrfs_.patch | 179 ---------
...ext4-fast-commit-recovery-path-v5.10.patch | 91 -----
...intr-vectoring-info-and-error-code-t.patch | 124 ------
...x86-mmu-Add-TDP-MMU-PF-handler-v5.10.patch | 82 ----
...Return-unique-RET_PF_-values-if-the-.patch | 71 ----
...int-Optimize-using-static_call-v5.10.patch | 155 --------
...-fix-include-order-for-older-kernels.patch | 31 --
.../0011-Add-release-maintainer-script.patch | 59 ---
.../0012-Improve-the-release-script.patch | 173 ---------
...fix-ext4-fast-commit-recovery-path-v.patch | 32 --
...-fix-include-order-for-older-kernels.patch | 32 --
...fix-tracepoint-Optimize-using-static.patch | 46 ---
...ion-range-for-trace_find_free_extent.patch | 30 --
...ix-jbd2-use-the-correct-print-format.patch | 147 ++++++++
...ules_2.11.6.bb => lttng-modules_2.11.9.bb} | 21 +-
scripts/lib/devtool/standard.py | 2 +-
29 files changed, 569 insertions(+), 1591 deletions(-)
create mode 100644 meta/recipes-devtools/go/go-1.14/CVE-2022-1962.patch
create mode 100644 meta/recipes-graphics/libsdl2/libsdl2/CVE-2022-4743.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0001-fix-strncpy-equals-destination-size-warning.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0002-fix-objtool-Rename-frame.h-objtool.h-v5.10.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0003-fix-btrfs-tracepoints-output-proper-root-owner-for-t.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0004-fix-btrfs-make-ordered-extent-tracepoint-take-btrfs_.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0005-fix-ext4-fast-commit-recovery-path-v5.10.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0006-fix-KVM-x86-Add-intr-vectoring-info-and-error-code-t.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0007-fix-kvm-x86-mmu-Add-TDP-MMU-PF-handler-v5.10.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0008-fix-KVM-x86-mmu-Return-unique-RET_PF_-values-if-the-.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0009-fix-tracepoint-Optimize-using-static_call-v5.10.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0010-fix-include-order-for-older-kernels.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0011-Add-release-maintainer-script.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0012-Improve-the-release-script.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0013-fix-backport-of-fix-ext4-fast-commit-recovery-path-v.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0014-Revert-fix-include-order-for-older-kernels.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0015-fix-backport-of-fix-tracepoint-Optimize-using-static.patch
delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0016-fix-adjust-version-range-for-trace_find_free_extent.patch
create mode 100644 meta/recipes-kernel/lttng/lttng-modules/fix-jbd2-use-the-correct-print-format.patch
rename meta/recipes-kernel/lttng/{lttng-modules_2.11.6.bb => lttng-modules_2.11.9.bb} (59%)
--
2.25.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 00/12] Patch review
@ 2024-03-20 16:43 Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 01/12] libxml2: Backport fix for CVE-2024-25062 Steve Sakoman
` (11 more replies)
0 siblings, 12 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:43 UTC (permalink / raw)
To: openembedded-core
Please review this set of changes for dunfell and have comments back by
end of day Friday, March 22
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6692
The following changes since commit b49b0a3dd74c24f3a011c9c0b5cf8f6530956cfa:
build-appliance-image: Update to dunfell head revision (2024-03-01 03:19:51 -1000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut
Alex Kiernan (1):
wireless-regdb: Upgrade 2023.09.01 -> 2024.01.23
Alexander Kanavin (1):
linux-firmware: upgrade 20231211 -> 20240220
Alexander Sverdlin (1):
linux-firmware: upgrade 20231030 -> 20231211
Michael Halstead (1):
yocto-uninative: Update to 4.4 for glibc 2.39
Vijay Anusuri (1):
libxml2: Backport fix for CVE-2024-25062
Wang Mingyu (1):
wireless-regdb: upgrade 2023.05.03 -> 2023.09.01
Yoann Congal (6):
cve-update-nvd2-native: Fix typo in comment
cve-update-nvd2-native: Add an age threshold for incremental update
cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition
cve-update-nvd2-native: nvd_request_next: Improve comment
cve-update-nvd2-native: Fix CVE configuration update
cve-update-nvd2-native: Remove rejected CVE from database
meta/conf/distro/include/yocto-uninative.inc | 10 ++---
.../libxml/libxml2/CVE-2024-25062-pre1.patch | 38 +++++++++++++++++++
.../libxml/libxml2/CVE-2024-25062.patch | 33 ++++++++++++++++
meta/recipes-core/libxml/libxml2_2.9.10.bb | 2 +
.../meta/cve-update-nvd2-native.bb | 35 +++++++++++++----
...20231030.bb => linux-firmware_20240220.bb} | 7 ++--
....05.03.bb => wireless-regdb_2024.01.23.bb} | 4 +-
7 files changed, 111 insertions(+), 18 deletions(-)
create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2024-25062-pre1.patch
create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2024-25062.patch
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20231030.bb => linux-firmware_20240220.bb} (99%)
rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2023.05.03.bb => wireless-regdb_2024.01.23.bb} (88%)
--
2.34.1
^ permalink raw reply [flat|nested] 26+ messages in thread
* [OE-core][dunfell 01/12] libxml2: Backport fix for CVE-2024-25062
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
@ 2024-03-20 16:43 ` Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 02/12] cve-update-nvd2-native: Fix typo in comment Steve Sakoman
` (10 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:43 UTC (permalink / raw)
To: openembedded-core
From: Vijay Anusuri <vanusuri@mvista.com>
Upstream-Status: Backport
[https://gitlab.gnome.org/GNOME/libxml2/-/commit/31c6ce3b63f8a494ad9e31ca65187a73d8ad3508
&
https://gitlab.gnome.org/GNOME/libxml2/-/commit/2b0aac140d739905c7848a42efc60bfe783a39b7]
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../libxml/libxml2/CVE-2024-25062-pre1.patch | 38 +++++++++++++++++++
.../libxml/libxml2/CVE-2024-25062.patch | 33 ++++++++++++++++
meta/recipes-core/libxml/libxml2_2.9.10.bb | 2 +
3 files changed, 73 insertions(+)
create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2024-25062-pre1.patch
create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2024-25062.patch
diff --git a/meta/recipes-core/libxml/libxml2/CVE-2024-25062-pre1.patch b/meta/recipes-core/libxml/libxml2/CVE-2024-25062-pre1.patch
new file mode 100644
index 0000000000..31183399f8
--- /dev/null
+++ b/meta/recipes-core/libxml/libxml2/CVE-2024-25062-pre1.patch
@@ -0,0 +1,38 @@
+From 31c6ce3b63f8a494ad9e31ca65187a73d8ad3508 Mon Sep 17 00:00:00 2001
+From: Nick Wellnhofer <wellnhofer@aevum.de>
+Date: Mon, 9 Nov 2020 17:55:44 +0100
+Subject: [PATCH] Avoid call stack overflow with XML reader and recursive
+ XIncludes
+
+Don't process XIncludes in the result of another inclusion to avoid
+infinite recursion resulting in a call stack overflow.
+
+This is something the XInclude engine shouldn't allow but correct
+handling of intra-document includes would require major changes.
+
+Found by OSS-Fuzz.
+
+Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/31c6ce3b63f8a494ad9e31ca65187a73d8ad3508]
+CVE: CVE-2024-25062 #Dependency Patch
+Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
+---
+ xmlreader.c | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/xmlreader.c b/xmlreader.c
+index 01adf74f4..72e40b032 100644
+--- a/xmlreader.c
++++ b/xmlreader.c
+@@ -1585,7 +1585,8 @@ node_found:
+ /*
+ * Handle XInclude if asked for
+ */
+- if ((reader->xinclude) && (reader->node != NULL) &&
++ if ((reader->xinclude) && (reader->in_xinclude == 0) &&
++ (reader->node != NULL) &&
+ (reader->node->type == XML_ELEMENT_NODE) &&
+ (reader->node->ns != NULL) &&
+ ((xmlStrEqual(reader->node->ns->href, XINCLUDE_NS)) ||
+--
+GitLab
+
diff --git a/meta/recipes-core/libxml/libxml2/CVE-2024-25062.patch b/meta/recipes-core/libxml/libxml2/CVE-2024-25062.patch
new file mode 100644
index 0000000000..5365d5546a
--- /dev/null
+++ b/meta/recipes-core/libxml/libxml2/CVE-2024-25062.patch
@@ -0,0 +1,33 @@
+From 2b0aac140d739905c7848a42efc60bfe783a39b7 Mon Sep 17 00:00:00 2001
+From: Nick Wellnhofer <wellnhofer@aevum.de>
+Date: Sat, 14 Oct 2023 22:45:54 +0200
+Subject: [PATCH] [CVE-2024-25062] xmlreader: Don't expand XIncludes when
+ backtracking
+
+Fixes a use-after-free if XML Reader if used with DTD validation and
+XInclude expansion.
+
+Fixes #604.
+
+Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libxml2/-/commit/2b0aac140d739905c7848a42efc60bfe783a39b7]
+CVE: CVE-2024-25062
+Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
+---
+ xmlreader.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/xmlreader.c b/xmlreader.c
+index 979385a13..fefd68e0b 100644
+--- a/xmlreader.c
++++ b/xmlreader.c
+@@ -1443,6 +1443,7 @@ node_found:
+ * Handle XInclude if asked for
+ */
+ if ((reader->xinclude) && (reader->in_xinclude == 0) &&
++ (reader->state != XML_TEXTREADER_BACKTRACK) &&
+ (reader->node != NULL) &&
+ (reader->node->type == XML_ELEMENT_NODE) &&
+ (reader->node->ns != NULL) &&
+--
+GitLab
+
diff --git a/meta/recipes-core/libxml/libxml2_2.9.10.bb b/meta/recipes-core/libxml/libxml2_2.9.10.bb
index 90d30f1ea7..72f830b6d3 100644
--- a/meta/recipes-core/libxml/libxml2_2.9.10.bb
+++ b/meta/recipes-core/libxml/libxml2_2.9.10.bb
@@ -44,6 +44,8 @@ SRC_URI += "http://www.w3.org/XML/Test/xmlts20080827.tar.gz;subdir=${BP};name=te
file://CVE-2021-3516.patch \
file://CVE-2023-45322-1.patch \
file://CVE-2023-45322-2.patch \
+ file://CVE-2024-25062-pre1.patch \
+ file://CVE-2024-25062.patch \
"
SRC_URI[archive.sha256sum] = "593b7b751dd18c2d6abcd0c4bcb29efc203d0b4373a6df98e3a455ea74ae2813"
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 02/12] cve-update-nvd2-native: Fix typo in comment
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 01/12] libxml2: Backport fix for CVE-2024-25062 Steve Sakoman
@ 2024-03-20 16:43 ` Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 03/12] cve-update-nvd2-native: Add an age threshold for incremental update Steve Sakoman
` (9 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:43 UTC (permalink / raw)
To: openembedded-core
From: Yoann Congal <yoann.congal@smile.fr>
attmepts -> attempts
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit dc18aaeda8e810f9082a0ceac08e5e4275bbd0f7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-core/meta/cve-update-nvd2-native.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb
index 69ba20a6cb..9b6e746add 100644
--- a/meta/recipes-core/meta/cve-update-nvd2-native.bb
+++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb
@@ -26,7 +26,7 @@ NVDCVE_API_KEY ?= ""
# Use a negative value to skip the update
CVE_DB_UPDATE_INTERVAL ?= "86400"
-# Number of attmepts for each http query to nvd server before giving up
+# Number of attempts for each http query to nvd server before giving up
CVE_DB_UPDATE_ATTEMPTS ?= "5"
CVE_DB_TEMP_FILE ?= "${CVE_CHECK_DB_DIR}/temp_nvdcve_2.db"
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 03/12] cve-update-nvd2-native: Add an age threshold for incremental update
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 01/12] libxml2: Backport fix for CVE-2024-25062 Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 02/12] cve-update-nvd2-native: Fix typo in comment Steve Sakoman
@ 2024-03-20 16:43 ` Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 04/12] cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition Steve Sakoman
` (8 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:43 UTC (permalink / raw)
To: openembedded-core
From: Yoann Congal <yoann.congal@smile.fr>
Add a new variable "CVE_DB_INCR_UPDATE_AGE_THRES", which can be used to
specify the maximum age of the database for doing an incremental update
For older databases, a full re-download is done.
With a value of "0", this forces a full-redownload.
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 74c1765111b6610348eae4b7e41d7045ce58ef86)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
.../meta/cve-update-nvd2-native.bb | 20 +++++++++++++++----
1 file changed, 16 insertions(+), 4 deletions(-)
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb
index 9b6e746add..af21989d58 100644
--- a/meta/recipes-core/meta/cve-update-nvd2-native.bb
+++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb
@@ -26,6 +26,12 @@ NVDCVE_API_KEY ?= ""
# Use a negative value to skip the update
CVE_DB_UPDATE_INTERVAL ?= "86400"
+# CVE database incremental update age threshold, in seconds. If the database is
+# older than this threshold, do a full re-download, else, do an incremental
+# update. By default: the maximum allowed value from NVD: 120 days (120*24*60*60)
+# Use 0 to force a full download.
+CVE_DB_INCR_UPDATE_AGE_THRES ?= "10368000"
+
# Number of attempts for each http query to nvd server before giving up
CVE_DB_UPDATE_ATTEMPTS ?= "5"
@@ -172,18 +178,24 @@ def update_db_file(db_tmp_file, d, database_time):
req_args = {'startIndex' : 0}
- # The maximum range for time is 120 days
- # Force a complete update if our range is longer
- if (database_time != 0):
+ incr_update_threshold = int(d.getVar("CVE_DB_INCR_UPDATE_AGE_THRES"))
+ if database_time != 0:
database_date = datetime.datetime.fromtimestamp(database_time, tz=datetime.timezone.utc)
today_date = datetime.datetime.now(tz=datetime.timezone.utc)
delta = today_date - database_date
- if delta.days < 120:
+ if incr_update_threshold == 0:
+ bb.note("CVE database: forced full update")
+ elif delta < datetime.timedelta(seconds=incr_update_threshold):
bb.note("CVE database: performing partial update")
+ # The maximum range for time is 120 days
+ if delta > datetime.timedelta(days=120):
+ bb.error("CVE database: Trying to do an incremental update on a larger than supported range")
req_args['lastModStartDate'] = database_date.isoformat()
req_args['lastModEndDate'] = today_date.isoformat()
else:
bb.note("CVE database: file too old, forcing a full update")
+ else:
+ bb.note("CVE database: no preexisting database, do a full download")
with bb.progress.ProgressHandler(d) as ph, open(os.path.join(d.getVar("TMPDIR"), 'cve_check'), 'a') as cve_f:
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 04/12] cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (2 preceding siblings ...)
2024-03-20 16:43 ` [OE-core][dunfell 03/12] cve-update-nvd2-native: Add an age threshold for incremental update Steve Sakoman
@ 2024-03-20 16:43 ` Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 05/12] cve-update-nvd2-native: nvd_request_next: Improve comment Steve Sakoman
` (7 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:43 UTC (permalink / raw)
To: openembedded-core
From: Yoann Congal <yoann.congal@smile.fr>
CVE_CHECK_DB_FILE is already defined in cve-check.bbclass which is
always inherited in cve-update-nvd2-native (There is a check line 40).
Remove it to avoid confusion. Otherwise, this should not change
anything.
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e5f3f223885c17b7007c310273fc7c80b90a4105)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-core/meta/cve-update-nvd2-native.bb | 2 --
1 file changed, 2 deletions(-)
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb
index af21989d58..506b4b6bbf 100644
--- a/meta/recipes-core/meta/cve-update-nvd2-native.bb
+++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb
@@ -37,8 +37,6 @@ CVE_DB_UPDATE_ATTEMPTS ?= "5"
CVE_DB_TEMP_FILE ?= "${CVE_CHECK_DB_DIR}/temp_nvdcve_2.db"
-CVE_CHECK_DB_FILE ?= "${CVE_CHECK_DB_DIR}/nvdcve_2.db"
-
python () {
if not bb.data.inherits_class("cve-check", d):
raise bb.parse.SkipRecipe("Skip recipe when cve-check class is not loaded.")
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 05/12] cve-update-nvd2-native: nvd_request_next: Improve comment
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (3 preceding siblings ...)
2024-03-20 16:43 ` [OE-core][dunfell 04/12] cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition Steve Sakoman
@ 2024-03-20 16:43 ` Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 06/12] cve-update-nvd2-native: Fix CVE configuration update Steve Sakoman
` (6 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:43 UTC (permalink / raw)
To: openembedded-core
From: Yoann Congal <yoann.congal@smile.fr>
Add a URL to the doc of the API used in the function.
... and fix a small typo dabase -> database
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e0157b3b81333a24abd31dbb23a6abebca3e7ba7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-core/meta/cve-update-nvd2-native.bb | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb
index 506b4b6bbf..a703b68aac 100644
--- a/meta/recipes-core/meta/cve-update-nvd2-native.bb
+++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb
@@ -123,7 +123,8 @@ def nvd_request_wait(attempt, min_wait):
def nvd_request_next(url, attempts, api_key, args, min_wait):
"""
- Request next part of the NVD dabase
+ Request next part of the NVD database
+ NVD API documentation: https://nvd.nist.gov/developers/vulnerabilities
"""
import urllib.request
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 06/12] cve-update-nvd2-native: Fix CVE configuration update
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (4 preceding siblings ...)
2024-03-20 16:43 ` [OE-core][dunfell 05/12] cve-update-nvd2-native: nvd_request_next: Improve comment Steve Sakoman
@ 2024-03-20 16:44 ` Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 07/12] cve-update-nvd2-native: Remove rejected CVE from database Steve Sakoman
` (5 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:44 UTC (permalink / raw)
To: openembedded-core
From: Yoann Congal <yoann.congal@smile.fr>
When a CVE is created, it often has no precise version information and
this is stored as "-" (matching any version). After an update, version
information is added. The previous "-" must be removed, otherwise, the
CVE is still "Unpatched" for cve-check.
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 641ae3f36e09af9932dc33043a0a5fbfce62122e)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-core/meta/cve-update-nvd2-native.bb | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb
index a703b68aac..0044529b7d 100644
--- a/meta/recipes-core/meta/cve-update-nvd2-native.bb
+++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb
@@ -352,6 +352,10 @@ def update_db(conn, elt):
[cveId, cveDesc, cvssv2, cvssv3, date, accessVector]).close()
try:
+ # Remove any pre-existing CVE configuration. Even for partial database
+ # update, those will be repopulated. This ensures that old
+ # configuration is not kept for an updated CVE.
+ conn.execute("delete from PRODUCTS where ID = ?", [cveId]).close()
for config in elt['cve']['configurations']:
# This is suboptimal as it doesn't handle AND/OR and negate, but is better than nothing
for node in config["nodes"]:
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 07/12] cve-update-nvd2-native: Remove rejected CVE from database
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (5 preceding siblings ...)
2024-03-20 16:44 ` [OE-core][dunfell 06/12] cve-update-nvd2-native: Fix CVE configuration update Steve Sakoman
@ 2024-03-20 16:44 ` Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 08/12] wireless-regdb: upgrade 2023.05.03 -> 2023.09.01 Steve Sakoman
` (4 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:44 UTC (permalink / raw)
To: openembedded-core
From: Yoann Congal <yoann.congal@smile.fr>
When a CVE is updated to be rejected, matching database entries must be
removed. Otherwise:
* an incremental update is not equivalent the to an initial download.
* rejected CVEs might still appear as Unpatched in cve-check.
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f276a980b8930b98e6c8f0e1a865d77dfcfe5085)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/recipes-core/meta/cve-update-nvd2-native.bb | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb
index 0044529b7d..1a3eeba6d0 100644
--- a/meta/recipes-core/meta/cve-update-nvd2-native.bb
+++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb
@@ -323,6 +323,10 @@ def update_db(conn, elt):
accessVector = None
cveId = elt['cve']['id']
if elt['cve']['vulnStatus'] == "Rejected":
+ c = conn.cursor()
+ c.execute("delete from PRODUCTS where ID = ?;", [cveId])
+ c.execute("delete from NVD where ID = ?;", [cveId])
+ c.close()
return
cveDesc = ""
for desc in elt['cve']['descriptions']:
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 08/12] wireless-regdb: upgrade 2023.05.03 -> 2023.09.01
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (6 preceding siblings ...)
2024-03-20 16:44 ` [OE-core][dunfell 07/12] cve-update-nvd2-native: Remove rejected CVE from database Steve Sakoman
@ 2024-03-20 16:44 ` Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 09/12] wireless-regdb: Upgrade 2023.09.01 -> 2024.01.23 Steve Sakoman
` (3 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:44 UTC (permalink / raw)
To: openembedded-core
From: Wang Mingyu <wangmy@fujitsu.com>
Changelog:
==========
wireless-regdb: update regulatory database based on preceding changes
wireless-regdb: Update regulatory rules for Australia (AU) for June 2023
wireless-regdb: Update regulatory info for Türkiye (TR)
wireless-regdb: Update regulatory rules for Egypt (EG) from March 2022 guidel...
wireless-regdb: Update regulatory rules for Philippines (PH)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2f5edb6904bf16a9c52a9b124aeb5297487cd716)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
...ireless-regdb_2023.05.03.bb => wireless-regdb_2023.09.01.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2023.05.03.bb => wireless-regdb_2023.09.01.bb} (94%)
diff --git a/meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.05.03.bb b/meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.09.01.bb
similarity index 94%
rename from meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.05.03.bb
rename to meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.09.01.bb
index f3c3cd78e9..9187d257ca 100644
--- a/meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.05.03.bb
+++ b/meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.09.01.bb
@@ -5,7 +5,7 @@ LICENSE = "ISC"
LIC_FILES_CHKSUM = "file://LICENSE;md5=07c4f6dea3845b02a18dc00c8c87699c"
SRC_URI = "https://www.kernel.org/pub/software/network/${BPN}/${BP}.tar.xz"
-SRC_URI[sha256sum] = "f254d08ab3765aeae2b856222e11a95d44aef519a6663877c71ef68fae4c8c12"
+SRC_URI[sha256sum] = "26d4c2a727cc59239b84735aad856b7c7d0b04e30aa5c235c4f7f47f5f053491"
inherit bin_package allarch
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 09/12] wireless-regdb: Upgrade 2023.09.01 -> 2024.01.23
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (7 preceding siblings ...)
2024-03-20 16:44 ` [OE-core][dunfell 08/12] wireless-regdb: upgrade 2023.05.03 -> 2023.09.01 Steve Sakoman
@ 2024-03-20 16:44 ` Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 10/12] linux-firmware: upgrade 20231030 -> 20231211 Steve Sakoman
` (2 subsequent siblings)
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:44 UTC (permalink / raw)
To: openembedded-core
From: Alex Kiernan <alex.kiernan@gmail.com>
Upstream maintainer has changed to Chen-Yu Tsai <wens@kernel.org>:
https://lore.kernel.org/all/CAGb2v657baNMPKU3QADijx7hZa=GUcSv2LEDdn6N=QQaFX8r-g@mail.gmail.com/
Note that fb768d3b13ff ("wifi: cfg80211: Add my certificate") and
3c2a8ebe3fe6 ("wifi: cfg80211: fix certs build to not depend on file
order") are required if you are using kernel signature verification.
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit abf169fbbf8bab13224adf4c8bfa2e26607f360c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
...eless-regdb_2023.09.01.bb => wireless-regdb_2024.01.23.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2023.09.01.bb => wireless-regdb_2024.01.23.bb} (88%)
diff --git a/meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.09.01.bb b/meta/recipes-kernel/wireless-regdb/wireless-regdb_2024.01.23.bb
similarity index 88%
rename from meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.09.01.bb
rename to meta/recipes-kernel/wireless-regdb/wireless-regdb_2024.01.23.bb
index 9187d257ca..6489bc90d9 100644
--- a/meta/recipes-kernel/wireless-regdb/wireless-regdb_2023.09.01.bb
+++ b/meta/recipes-kernel/wireless-regdb/wireless-regdb_2024.01.23.bb
@@ -5,7 +5,7 @@ LICENSE = "ISC"
LIC_FILES_CHKSUM = "file://LICENSE;md5=07c4f6dea3845b02a18dc00c8c87699c"
SRC_URI = "https://www.kernel.org/pub/software/network/${BPN}/${BP}.tar.xz"
-SRC_URI[sha256sum] = "26d4c2a727cc59239b84735aad856b7c7d0b04e30aa5c235c4f7f47f5f053491"
+SRC_URI[sha256sum] = "c8a61c9acf76fa7eb4239e89f640dee3e87098d9f69b4d3518c9c60fc6d20c55"
inherit bin_package allarch
@@ -13,7 +13,7 @@ do_install() {
install -d -m0755 ${D}${nonarch_libdir}/crda
install -d -m0755 ${D}${sysconfdir}/wireless-regdb/pubkeys
install -m 0644 regulatory.bin ${D}${nonarch_libdir}/crda/regulatory.bin
- install -m 0644 sforshee.key.pub.pem ${D}${sysconfdir}/wireless-regdb/pubkeys/sforshee.key.pub.pem
+ install -m 0644 wens.key.pub.pem ${D}${sysconfdir}/wireless-regdb/pubkeys/wens.key.pub.pem
install -m 0644 -D regulatory.db ${D}${nonarch_base_libdir}/firmware/regulatory.db
install -m 0644 regulatory.db.p7s ${D}${nonarch_base_libdir}/firmware/regulatory.db.p7s
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 10/12] linux-firmware: upgrade 20231030 -> 20231211
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (8 preceding siblings ...)
2024-03-20 16:44 ` [OE-core][dunfell 09/12] wireless-regdb: Upgrade 2023.09.01 -> 2024.01.23 Steve Sakoman
@ 2024-03-20 16:44 ` Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 11/12] linux-firmware: upgrade 20231211 -> 20240220 Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 12/12] yocto-uninative: Update to 4.4 for glibc 2.39 Steve Sakoman
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:44 UTC (permalink / raw)
To: openembedded-core
From: Alexander Sverdlin <alexander.sverdlin@siemens.com>
Signed-off-by: Alexander Sverdlin <alexander.sverdlin@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0caafdbbf4e7dc84b919afe14f7cb8c46a9e4ac2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
...nux-firmware_20231030.bb => linux-firmware_20231211.bb} | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20231030.bb => linux-firmware_20231211.bb} (99%)
diff --git a/meta/recipes-kernel/linux-firmware/linux-firmware_20231030.bb b/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
similarity index 99%
rename from meta/recipes-kernel/linux-firmware/linux-firmware_20231030.bb
rename to meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
index 65cbca798e..3f201d853f 100644
--- a/meta/recipes-kernel/linux-firmware/linux-firmware_20231030.bb
+++ b/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
@@ -134,7 +134,7 @@ LIC_FILES_CHKSUM = "file://LICENCE.Abilis;md5=b5ee3f410780e56711ad48eadc22b8bc \
"
# WHENCE checksum is defined separately to ease overriding it if
# class-devupstream is selected.
-WHENCE_CHKSUM = "ceb5248746d24d165b603e71b288cf75"
+WHENCE_CHKSUM = "3113c4ea08e5171555f3bf49eceb5b07"
# These are not common licenses, set NO_GENERIC_LICENSE for them
# so that the license files will be copied from fetched source
@@ -212,7 +212,7 @@ SRC_URI:class-devupstream = "git://git.kernel.org/pub/scm/linux/kernel/git/firmw
# Pin this to the 20220509 release, override this in local.conf
SRCREV:class-devupstream ?= "b19cbdca78ab2adfd210c91be15a22568e8b8cae"
-SRC_URI[sha256sum] = "c98d200fc4a3120de1a594713ce34e135819dff23e883a4ed387863ba25679c7"
+SRC_URI[sha256sum] = "96af7e4b5eabd37869cdb3dcbb7ab36911106d39b76e799fa1caab16a9dbe8bb"
inherit allarch
@@ -223,7 +223,8 @@ do_compile() {
}
do_install() {
- oe_runmake 'DESTDIR=${D}' 'FIRMWAREDIR=${nonarch_base_libdir}/firmware' install
+ # install-nodedup avoids rdfind dependency
+ oe_runmake 'DESTDIR=${D}' 'FIRMWAREDIR=${nonarch_base_libdir}/firmware' install-nodedup
cp GPL-2 LICEN[CS]E.* WHENCE ${D}${nonarch_base_libdir}/firmware/
}
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 11/12] linux-firmware: upgrade 20231211 -> 20240220
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (9 preceding siblings ...)
2024-03-20 16:44 ` [OE-core][dunfell 10/12] linux-firmware: upgrade 20231030 -> 20231211 Steve Sakoman
@ 2024-03-20 16:44 ` Steve Sakoman
2024-03-26 10:56 ` Bartosz Golaszewski
2024-03-20 16:44 ` [OE-core][dunfell 12/12] yocto-uninative: Update to 4.4 for glibc 2.39 Steve Sakoman
11 siblings, 1 reply; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:44 UTC (permalink / raw)
To: openembedded-core
From: Alexander Kanavin <alex.kanavin@gmail.com>
License-Update: additional files
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit add81ef0299ea5260f9bdc59ffc8f5cc0e74276f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
...{linux-firmware_20231211.bb => linux-firmware_20240220.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta/recipes-kernel/linux-firmware/{linux-firmware_20231211.bb => linux-firmware_20240220.bb} (99%)
diff --git a/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb b/meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
similarity index 99%
rename from meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
rename to meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
index 3f201d853f..873ba9cdf0 100644
--- a/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
+++ b/meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
@@ -134,7 +134,7 @@ LIC_FILES_CHKSUM = "file://LICENCE.Abilis;md5=b5ee3f410780e56711ad48eadc22b8bc \
"
# WHENCE checksum is defined separately to ease overriding it if
# class-devupstream is selected.
-WHENCE_CHKSUM = "3113c4ea08e5171555f3bf49eceb5b07"
+WHENCE_CHKSUM = "a344e6c28970fc7daafa81c10247aeb6"
# These are not common licenses, set NO_GENERIC_LICENSE for them
# so that the license files will be copied from fetched source
@@ -212,7 +212,7 @@ SRC_URI:class-devupstream = "git://git.kernel.org/pub/scm/linux/kernel/git/firmw
# Pin this to the 20220509 release, override this in local.conf
SRCREV:class-devupstream ?= "b19cbdca78ab2adfd210c91be15a22568e8b8cae"
-SRC_URI[sha256sum] = "96af7e4b5eabd37869cdb3dcbb7ab36911106d39b76e799fa1caab16a9dbe8bb"
+SRC_URI[sha256sum] = "bf0f239dc0801e9d6bf5d5fb3e2f549575632cf4688f4348184199cb02c2bcd7"
inherit allarch
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* [OE-core][dunfell 12/12] yocto-uninative: Update to 4.4 for glibc 2.39
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
` (10 preceding siblings ...)
2024-03-20 16:44 ` [OE-core][dunfell 11/12] linux-firmware: upgrade 20231211 -> 20240220 Steve Sakoman
@ 2024-03-20 16:44 ` Steve Sakoman
11 siblings, 0 replies; 26+ messages in thread
From: Steve Sakoman @ 2024-03-20 16:44 UTC (permalink / raw)
To: openembedded-core
From: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 56fdd8b79e2f7ec30d2cdcfa0c399a6553efac1e)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/conf/distro/include/yocto-uninative.inc | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/meta/conf/distro/include/yocto-uninative.inc b/meta/conf/distro/include/yocto-uninative.inc
index eaa3e9b31c..4ac66fd506 100644
--- a/meta/conf/distro/include/yocto-uninative.inc
+++ b/meta/conf/distro/include/yocto-uninative.inc
@@ -6,10 +6,10 @@
# to the distro running on the build machine.
#
-UNINATIVE_MAXGLIBCVERSION = "2.38"
-UNINATIVE_VERSION = "4.3"
+UNINATIVE_MAXGLIBCVERSION = "2.39"
+UNINATIVE_VERSION = "4.4"
UNINATIVE_URL ?= "http://downloads.yoctoproject.org/releases/uninative/${UNINATIVE_VERSION}/"
-UNINATIVE_CHECKSUM[aarch64] ?= "8df05f4a41455018b4303b2e0ea4eac5c960b5a13713f6dbb33dfdb3e32753ec"
-UNINATIVE_CHECKSUM[i686] ?= "bea76b4a97c9ba0077c0dd1295f519cd599dbf71f0ca1c964471c4cdb043addd"
-UNINATIVE_CHECKSUM[x86_64] ?= "1c35f09a75c4096749bbe1e009df4e3968cde151424062cf4aa3ed89db22b030"
+UNINATIVE_CHECKSUM[aarch64] ?= "b61876130f494f75092f21086b4a64ea5fb064045769bf1d32e9cb6af17ea8ec"
+UNINATIVE_CHECKSUM[i686] ?= "9f28627828f0082cc0344eede4d9a861a9a064bfa8f36e072e46212f0fe45fcc"
+UNINATIVE_CHECKSUM[x86_64] ?= "d81c54284be2bb886931fc87281d58177a2cd381cf99d1981f8923039a72a302"
--
2.34.1
^ permalink raw reply related [flat|nested] 26+ messages in thread
* Re: [OE-core][dunfell 11/12] linux-firmware: upgrade 20231211 -> 20240220
2024-03-20 16:44 ` [OE-core][dunfell 11/12] linux-firmware: upgrade 20231211 -> 20240220 Steve Sakoman
@ 2024-03-26 10:56 ` Bartosz Golaszewski
2024-03-26 10:57 ` Bartosz Golaszewski
0 siblings, 1 reply; 26+ messages in thread
From: Bartosz Golaszewski @ 2024-03-26 10:56 UTC (permalink / raw)
To: Steve Sakoman; +Cc: openembedded-core
On Wed, Mar 20, 2024 at 5:44 PM Steve Sakoman <steve@sakoman.com> wrote:
>
> From: Alexander Kanavin <alex.kanavin@gmail.com>
>
> License-Update: additional files
>
> Signed-off-by: Alexander Kanavin <alex@linutronix.de>
> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
> (cherry picked from commit add81ef0299ea5260f9bdc59ffc8f5cc0e74276f)
> Signed-off-by: Steve Sakoman <steve@sakoman.com>
> ---
> ...{linux-firmware_20231211.bb => linux-firmware_20240220.bb} | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
> rename meta/recipes-kernel/linux-firmware/{linux-firmware_20231211.bb => linux-firmware_20240220.bb} (99%)
>
> diff --git a/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb b/meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
> similarity index 99%
> rename from meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
> rename to meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
> index 3f201d853f..873ba9cdf0 100644
> --- a/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
> +++ b/meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
> @@ -134,7 +134,7 @@ LIC_FILES_CHKSUM = "file://LICENCE.Abilis;md5=b5ee3f410780e56711ad48eadc22b8bc \
> "
> # WHENCE checksum is defined separately to ease overriding it if
> # class-devupstream is selected.
> -WHENCE_CHKSUM = "3113c4ea08e5171555f3bf49eceb5b07"
> +WHENCE_CHKSUM = "a344e6c28970fc7daafa81c10247aeb6"
>
> # These are not common licenses, set NO_GENERIC_LICENSE for them
> # so that the license files will be copied from fetched source
> @@ -212,7 +212,7 @@ SRC_URI:class-devupstream = "git://git.kernel.org/pub/scm/linux/kernel/git/firmw
> # Pin this to the 20220509 release, override this in local.conf
> SRCREV:class-devupstream ?= "b19cbdca78ab2adfd210c91be15a22568e8b8cae"
>
> -SRC_URI[sha256sum] = "96af7e4b5eabd37869cdb3dcbb7ab36911106d39b76e799fa1caab16a9dbe8bb"
> +SRC_URI[sha256sum] = "bf0f239dc0801e9d6bf5d5fb3e2f549575632cf4688f4348184199cb02c2bcd7"
>
> inherit allarch
>
> --
> 2.34.1
>
>
I already sent a patch upgrading linux-firmware to the most recent tag[1].
Bart
[1] https://lore.kernel.org/all/20240314100610.21815-1-brgl@bgdev.pl/T/
^ permalink raw reply [flat|nested] 26+ messages in thread
* Re: [OE-core][dunfell 11/12] linux-firmware: upgrade 20231211 -> 20240220
2024-03-26 10:56 ` Bartosz Golaszewski
@ 2024-03-26 10:57 ` Bartosz Golaszewski
0 siblings, 0 replies; 26+ messages in thread
From: Bartosz Golaszewski @ 2024-03-26 10:57 UTC (permalink / raw)
To: Steve Sakoman; +Cc: openembedded-core
On Tue, Mar 26, 2024 at 11:56 AM Bartosz Golaszewski <brgl@bgdev.pl> wrote:
>
> On Wed, Mar 20, 2024 at 5:44 PM Steve Sakoman <steve@sakoman.com> wrote:
> >
> > From: Alexander Kanavin <alex.kanavin@gmail.com>
> >
> > License-Update: additional files
> >
> > Signed-off-by: Alexander Kanavin <alex@linutronix.de>
> > Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
> > (cherry picked from commit add81ef0299ea5260f9bdc59ffc8f5cc0e74276f)
> > Signed-off-by: Steve Sakoman <steve@sakoman.com>
> > ---
> > ...{linux-firmware_20231211.bb => linux-firmware_20240220.bb} | 4 ++--
> > 1 file changed, 2 insertions(+), 2 deletions(-)
> > rename meta/recipes-kernel/linux-firmware/{linux-firmware_20231211.bb => linux-firmware_20240220.bb} (99%)
> >
> > diff --git a/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb b/meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
> > similarity index 99%
> > rename from meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
> > rename to meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
> > index 3f201d853f..873ba9cdf0 100644
> > --- a/meta/recipes-kernel/linux-firmware/linux-firmware_20231211.bb
> > +++ b/meta/recipes-kernel/linux-firmware/linux-firmware_20240220.bb
> > @@ -134,7 +134,7 @@ LIC_FILES_CHKSUM = "file://LICENCE.Abilis;md5=b5ee3f410780e56711ad48eadc22b8bc \
> > "
> > # WHENCE checksum is defined separately to ease overriding it if
> > # class-devupstream is selected.
> > -WHENCE_CHKSUM = "3113c4ea08e5171555f3bf49eceb5b07"
> > +WHENCE_CHKSUM = "a344e6c28970fc7daafa81c10247aeb6"
> >
> > # These are not common licenses, set NO_GENERIC_LICENSE for them
> > # so that the license files will be copied from fetched source
> > @@ -212,7 +212,7 @@ SRC_URI:class-devupstream = "git://git.kernel.org/pub/scm/linux/kernel/git/firmw
> > # Pin this to the 20220509 release, override this in local.conf
> > SRCREV:class-devupstream ?= "b19cbdca78ab2adfd210c91be15a22568e8b8cae"
> >
> > -SRC_URI[sha256sum] = "96af7e4b5eabd37869cdb3dcbb7ab36911106d39b76e799fa1caab16a9dbe8bb"
> > +SRC_URI[sha256sum] = "bf0f239dc0801e9d6bf5d5fb3e2f549575632cf4688f4348184199cb02c2bcd7"
> >
> > inherit allarch
> >
> > --
> > 2.34.1
> >
> >
>
> I already sent a patch upgrading linux-firmware to the most recent tag[1].
>
> Bart
>
> [1] https://lore.kernel.org/all/20240314100610.21815-1-brgl@bgdev.pl/T/
Ah, nevermind, I didn't see this is for dunfell.
Bart
^ permalink raw reply [flat|nested] 26+ messages in thread
end of thread, other threads:[~2024-03-26 10:57 UTC | newest]
Thread overview: 26+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-03-20 16:43 [OE-core][dunfell 00/12] Patch review Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 01/12] libxml2: Backport fix for CVE-2024-25062 Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 02/12] cve-update-nvd2-native: Fix typo in comment Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 03/12] cve-update-nvd2-native: Add an age threshold for incremental update Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 04/12] cve-update-nvd2-native: Remove duplicated CVE_CHECK_DB_FILE definition Steve Sakoman
2024-03-20 16:43 ` [OE-core][dunfell 05/12] cve-update-nvd2-native: nvd_request_next: Improve comment Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 06/12] cve-update-nvd2-native: Fix CVE configuration update Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 07/12] cve-update-nvd2-native: Remove rejected CVE from database Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 08/12] wireless-regdb: upgrade 2023.05.03 -> 2023.09.01 Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 09/12] wireless-regdb: Upgrade 2023.09.01 -> 2024.01.23 Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 10/12] linux-firmware: upgrade 20231030 -> 20231211 Steve Sakoman
2024-03-20 16:44 ` [OE-core][dunfell 11/12] linux-firmware: upgrade 20231211 -> 20240220 Steve Sakoman
2024-03-26 10:56 ` Bartosz Golaszewski
2024-03-26 10:57 ` Bartosz Golaszewski
2024-03-20 16:44 ` [OE-core][dunfell 12/12] yocto-uninative: Update to 4.4 for glibc 2.39 Steve Sakoman
-- strict thread matches above, loose matches on Subject: below --
2023-02-04 21:48 [OE-core][dunfell 00/12] Patch review Steve Sakoman
2022-06-30 16:23 Steve Sakoman
2022-06-19 19:34 Steve Sakoman
2022-01-09 22:04 Steve Sakoman
2021-08-19 19:07 Steve Sakoman
2021-07-12 15:31 Steve Sakoman
2021-04-30 15:33 Steve Sakoman
2021-01-11 0:45 Steve Sakoman
2020-11-09 2:56 Steve Sakoman
2020-08-24 15:14 Steve Sakoman
2020-08-03 14:26 Steve Sakoman
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox