]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
16 months agoptest-runner: Bump to 2.4.4 (95f528c)
Changqing Li [Mon, 13 May 2024 07:32:33 +0000 (15:32 +0800)] 
ptest-runner: Bump to 2.4.4 (95f528c)

Changes in 2.4.4:
95f528c utils.c: run_ptests improve error handling on ptests iteration
c48e5fc utils.c: run-ptests improve pseudo-terminal handling

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agollvm: Switch to using release tarballs
Khem Raj [Sat, 25 May 2024 10:48:35 +0000 (12:48 +0200)] 
llvm: Switch to using release tarballs

From: Khem Raj <raj.khem@gmail.com>

git checkouts are in excess of 3G, which is not
ideal for everyone to download/clone, instead switch to
fetching release tarball which is ~126M as of 18.1.5 release

(From OE-Core rev: 800e6576e4f3af10846af13c2f217f986c1afdb4)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agollvm: Upgrade to 18.1.5
Khem Raj [Sat, 25 May 2024 10:48:34 +0000 (12:48 +0200)] 
llvm: Upgrade to 18.1.5

From: Khem Raj <raj.khem@gmail.com>

Brings

617a15a9eac9 [clang codegen] Fix MS ABI detection of user-provided constructors. (#90151)
20b9ed64ea07 [RISCV][ISel] Fix types in tryFoldSelectIntoOp (#90659)
ece9d35f1a70 [GlobalISel] Fix store merging incorrectly classifying an unknown index expr as 0. (#90375)
a7b8b890600a [X86] Enable EVEX512 when host CPU has AVX512 (#90479)
4da5b1417493 [GlobalISel] Don't form anyextending atomic loads.
a96b04442c9f [AArch64] Remove invalid uabdl patterns. (#89272)
aea091b70eda [clang][CoverageMapping] do not emit a gap region when either end doesn't have valid source locations (#89564)
58648f334d62 [X86][EVEX512] Check hasEVEX512 for canExtendTo512DQ (#90390)
6350acdb134d [CGP] Drop poison-generating flags after hoisting (#90382)
f341c76b9461 [Clang] Handle structs with inner structs and no fields (#89126)
abf6b13085fb [IRCE] Skip icmp ptr in InductiveRangeCheck::parseRangeCheckICmp (#89967)
ee5bb0c95667 Fix Objective-C++ Sret of non-trivial data types on Windows ARM64 (#88671)
6dbaa89433f7 [clang-format] Fix a regression in ContinuationIndenter (#88414)
51ff7f38b633 [clang-format] Fix a regression in annotating TrailingReturnArrow (#86624)
b544217fb31f [AMDGPU] Fix setting nontemporal in memory legalizer (#83815)
78b99c73ee4b [DAGCombiner] Fix miscompile bug in combineShiftOfShiftedLogic (#89616)
1aa91720cc4f [DAGCombiner] Pre-commit test case for miscompile bug in combineShiftOfShiftedLogic
35fea1032741 release/18.x: [clang-format] Correctly annotate braces in macros (#87953)
b9b73814ad8a [libcxx] [modules] Add _LIBCPP_USING_IF_EXISTS on aligned_alloc (#89827)
c0b48372d82a release/18.x: [clang-format] Revert breaking stream operators to previous default (#89016)
3b4ba7277bd7 [analyzer] Fix performance of getTaintedSymbolsImpl() (#89606)
7699b341b763 release/18.x: [clang-format] Fix a regression in annotating BK_BracedInit (#87450)
fb865928c8e0 [GlobalISel] Fix fewerElementsVectorPhi to insert after G_PHIs (#87927)
111ae4509c96 [X86] Fix miscompile in combineShiftRightArithmetic
76cbd417af50 [X86] Pre-commit tests (NFC)
e7c816b3cd3e [InstCombine] Fix unexpected overwriting in foldSelectWithSRem (#89539)
3685a599c866 ReleaseNote: Mention SpecialCaseList change (#89141)
a981a4f7653c [X86] Always use 64-bit relocations in no-PIC large code model (#89101)
4ddac856c55f [analyzer] Fix a security.cert.env.InvalidPtr crash
c6d63d4fc555 Bump version to 18.1.5 (#89291)

(From OE-Core rev: 02df2fc6241ac8fb0e78f2fdff97a04e5c561d54)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agollvm: Upgrade to 18.1.4
Khem Raj [Sat, 25 May 2024 10:48:33 +0000 (12:48 +0200)] 
llvm: Upgrade to 18.1.4

From: Khem Raj <raj.khem@gmail.com>

Brings following fixes

e6c3289804a6 [CMake][Release] Disable PGO (#88465) (#89000)
028e425f86cc [MIPS] Fix the opcode of max.fmt and mina.fmt (#85609)
e3c832b37b0a Fix override keyword being print to the left side
1deeee3f5da4 Revert "[Mips] Fix missing sign extension in expansion of sub-word atomic max (#77072)"
995539ce05ba [LLD] [COFF] Don't add pseudo relocs for dangling references (#88487)
db67e6fb9ad1 [libc++] Fix -Wgnu-include-next in stddef.h (#88214)
647fbc710840 [SelectionDAG] Prevent combination on inconsistent type in `combineCarryDiamond` (#84888)
eaae766a20fd [RISCV] Support rv{32, 64}e in the compiler builtins (#88252)
c24b41d71f2e github-upload-release.py: Fix bug preventing release creation (#84571)
c837970dd7e9 [Codegen][X86] Fix /HOTPATCH with clang-cl and inline asm (#87639)
d0ddcce21d91 [InstSimplify] Make sure the simplified value doesn't generate poison in threadBinOpOverSelect (#87075)
4056cc29dfd3 Prepend all library intrinsics with `#` when building for Arm64EC (#87542)
6e071cf30599 [SLP]Fix a crash if the argument of call was affected by minbitwidth analysis.
d89da2ac8839 [libcxx] coerce formatter precision to int (#87738)
b6ebea7972cd [SPARC] Implement L and H inline asm argument modifiers (#87259)
bffecba7ce4c [libc++] Simplify the implementation of <stddef.h> (#86843)
9899a2d76c8f [lit][ci] Publish lit wheels (#88072)
3ceccbdb1995 [clang-format] Correctly annotate braces of empty ctors/dtors (#82097)
429d62872525 [Headers] Don't declare unreachable() from stddef.h in C++ (#86748)
feba8727f805 [ConstantRange] Fix off by 1 bugs in UIToFP and SIToFP handling. (#86041)
e4259b583c92 [Float2Int] Pre-commit test for SIToFP/UIToFP ConstantRange bug. NFC
daca56d8e162 Bump version to 18.1.4 (#87715)

(From OE-Core rev: adc2651a8e902af24fee6ff30a72f4b7c63bef6f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agoxserver-xorg: upgrade 21.1.11 -> 21.1.12
Archana Polampalli [Wed, 8 May 2024 12:23:28 +0000 (12:23 +0000)] 
xserver-xorg: upgrade 21.1.11 -> 21.1.12

This release contains security fixes for

* CVE-2024-31080
* CVE-2024-31081
* CVE-2024-31082
* CVE-2024-31083

Changelog:
===========
101caa1b0 (tag: xorg-server-21.1.12) xserver 21.1.12
117315640 render: fix refcounting of glyphs during ProcRenderAddGlyphs
0e34d8ebc Xquartz: ProcAppleDRICreatePixmap needs to use unswapped length to send reply
cea92ca78 Xi: ProcXIPassiveGrabDevice needs to use unswapped length to send reply
8a7cd0e3e Xi: ProcXIGetSelectedEvents needs to use unswapped length to send reply
5ca3a9513 Xext: SProcSyncCreateFence needs to swap drawable id too
5d7272f05 Allow disabling byte-swapped clients
8a46a463f Initialize Mode->name in xf86CVTMode()
f653d9a0a hw/xfree86: fix NULL pointer refrence to mode name
8b75ec34d dix: Fix use after free in input device shutdown

https://lists.x.org/archives/xorg-announce/2024-April/003497.html

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 12dfa6889a1c322d0e20fd9b7638dcb861e032f2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agogcc: Fix for CVE-2024-0151
Mark Hatle [Fri, 24 May 2024 20:12:14 +0000 (14:12 -0600)] 
gcc: Fix for CVE-2024-0151

Fix for insufficient argument checking in Secure state Entry functions
in software using Cortex-M Security Extensions (CMSE), that has been
compiled using toolchains that implement 'Arm v8-M Security Extensions
Requirements on Development Tools' prior to version 1.4, allows an
attacker to pass values to Secure state that are out of range for types
smaller than 32-bits. Out of range values might lead to incorrect
operations in secure state.

Signed-off-by: Mark Hatle <mark.hatle@amd.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agoghostscript: fix CVE-2024-29510
Archana Polampalli [Wed, 29 May 2024 05:42:25 +0000 (05:42 +0000)] 
ghostscript: fix CVE-2024-29510

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agoghostscript: fix CVE-2024-33871
Archana Polampalli [Wed, 29 May 2024 05:42:24 +0000 (05:42 +0000)] 
ghostscript: fix CVE-2024-33871

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agoghostscript: fix CVE-2024-33869
Archana Polampalli [Wed, 29 May 2024 05:42:23 +0000 (05:42 +0000)] 
ghostscript: fix CVE-2024-33869

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agoghostscript: fix CVE-2024-33870
Archana Polampalli [Wed, 29 May 2024 05:42:22 +0000 (05:42 +0000)] 
ghostscript: fix CVE-2024-33870

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agolibusb1: Set CVE_PRODUCT
Ricardo Simoes [Sat, 25 May 2024 10:48:38 +0000 (12:48 +0200)] 
libusb1: Set CVE_PRODUCT

From: Ricardo Simoes <ricardo.simoes@pt.bosch.com>

This commit sets the CVE_PRODUCT variable to "libusb" to match the
product name used in the NIST CPE database [1].

[1]: https://nvd.nist.gov/products/cpe/search

Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com>
Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agoncurses: Fix CVE-2023-45918
Soumya Sambu [Sat, 25 May 2024 10:48:36 +0000 (12:48 +0200)] 
ncurses: Fix CVE-2023-45918

From: Soumya Sambu <soumya.sambu@windriver.com>

ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-45918

(From OE-Core rev: 6573995adf4cfd48b036f8463b39f3864fcfd85b)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
16 months agottyrun: define CVE_PRODUCT
Peter Marko [Wed, 22 May 2024 21:20:53 +0000 (23:20 +0200)] 
ttyrun: define CVE_PRODUCT

Single executable ttyrun is taken ouf of s390-tools repository
containing ton of other helper tools.
CVEs are not assigned to executables, but to whole components.
Historically there also already exists one CVE for s390-tools.

Most of the CVEs will not be for ttyrun, but this is the way
how to get notified even if most we get will have to be ignored.

(From oe-core rev: df28547387c2c122aef3e5326b216ec3f4d3caa7)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agooeqa/selftest/debuginfod: use localpkgfeed to speed server startup
Ross Burton [Tue, 14 May 2024 16:15:21 +0000 (16:15 +0000)] 
oeqa/selftest/debuginfod: use localpkgfeed to speed server startup

Sometimes the debuginfod selftest fails due to a timeout, because it
spends too long scanning a huge deploy directory that due to what tests
were ran previously can contain 30K packages.

The test only needs a subset of the feed, so use the new localpkgfeed
class to construct a minimal feed before running the test.

[ YOCTO #14937 ]

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 855376f518b28248ccd82ef5b2e89e6a8c970542)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoselftest/classes: add localpkgfeed class
Ross Burton [Tue, 14 May 2024 16:15:20 +0000 (16:15 +0000)] 
selftest/classes: add localpkgfeed class

This class can be used to construct a subset of a deployed package feed
for use in tests which iterate the deploy directory, and as such a huge
feed of 30K+ packages can result in very slow tests.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c5486d6ad32457f09c104d5dd31314bd570912d3)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agolib/oe/package-manager: allow including self in create_packages_dir
Ross Burton [Tue, 14 May 2024 16:15:19 +0000 (16:15 +0000)] 
lib/oe/package-manager: allow including self in create_packages_dir

This function is typically used to construct a limited feed for image
creation, but there are other cases when you might want a limited feed
and include the current recipe's packages in it.

To ensure that existing behaviour is preserved, add a boolean to control
this behaviour and default it to False.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit aada7fda2b118152d82b1ab295d92b8251afe4ac)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agorecipetool: Handle several go-import tags in go resolver
Sven Schwermer [Thu, 11 Apr 2024 10:10:30 +0000 (12:10 +0200)] 
recipetool: Handle several go-import tags in go resolver

When dynamically resolving go modules, the HTML page may contain several
go-import meta tags. We must handle all and pick the correct one based
on the module name. An example for such a behaviour is
gonum.org/v1/gonum:

<meta name="go-import" content="gonum.org/v1/exp git https://github.com/gonum/exp">
<meta name="go-import" content="gonum.org/v1/gonum git https://github.com/gonum/gonum">
<meta name="go-import" content="gonum.org/v1/hdf5 git https://github.com/gonum/hdf5">
<meta name="go-import" content="gonum.org/v1/netlib git https://github.com/gonum/netlib">
<meta name="go-import" content="gonum.org/v1/plot git https://github.com/gonum/plot">
<meta name="go-import" content="gonum.org/v1/tools git https://github.com/gonum/tools">

Signed-off-by: Sven Schwermer <sven.schwermer@disruptive-technologies.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 9c36a61e29359067165bddc7f2accdf2c4c8a761)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agorecipetool: Handle unclean response in go resolver
Sven Schwermer [Thu, 11 Apr 2024 10:10:29 +0000 (12:10 +0200)] 
recipetool: Handle unclean response in go resolver

It appears that some go modules repond with a 404 error when trying to
resolve them dynamically. The response body may still contain the
go-import meta tag. An example for such behaviour is gonum.org/v1/gonum.

Signed-off-by: Sven Schwermer <sven.schwermer@disruptive-technologies.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 8f2e14ab6562a9a68819a960c66a258ea9dbe246)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agobash: Fix file-substitution error-handling bug
Zev Weiss [Thu, 11 Apr 2024 00:46:24 +0000 (17:46 -0700)] 
bash: Fix file-substitution error-handling bug

This is part of a patch that's been upstream for a while but hasn't yet
been released.  The bug is causing some downstream difficulties, so a
local patch to tide us over until the next release makes things a bit
easier.

Signed-off-by: Zev Weiss <zev@bewilderbeest.net>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit bf384d6618780dea2df24adac88ba4364cb65b9b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agopatchtest: test_metadata: fix invalid escape sequences
Trevor Gamblin [Tue, 9 Apr 2024 12:03:03 +0000 (08:03 -0400)] 
patchtest: test_metadata: fix invalid escape sequences

Clear up the following warnings seen during patchtest runs:

|/workspace/yocto/poky/meta/lib/patchtest/tests/test_metadata.py:21: SyntaxWarning: invalid escape sequence '\+'
|  add_mark = pyparsing.Regex('\+ ')
|/workspace/yocto/poky/meta/lib/patchtest/tests/test_metadata.py:26: SyntaxWarning: invalid escape sequence '\:'
|  git_regex = pyparsing.Regex('^git\:\/\/.*')

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 2d64317835a768898aac592b24fcbdfaf6c8357a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agolibcgroup_3.1.0: fix build on non-systemd systems
Adriaan Schmidt [Mon, 6 May 2024 11:48:15 +0000 (13:48 +0200)] 
libcgroup_3.1.0: fix build on non-systemd systems

backport upstream commit 592dcdcf243576bd2517d3da9bc18990de08e37e
to fix packaging when building with --enable-systemd=no

Signed-off-by: Adriaan Schmidt <adriaan.schmidt@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoclasses: image_types: apply EXTRA_IMAGECMD:squashfs* in oe_mksquashfs()
Martin Hundebøll [Mon, 6 May 2024 12:24:13 +0000 (14:24 +0200)] 
classes: image_types: apply EXTRA_IMAGECMD:squashfs* in oe_mksquashfs()

Since commit c991f9d6031 ("image_types: Set SOURCE_DATE_EPOCH for squashfs"),
I assume, the EXTRA_IMAGECMD:squashfs* variable(s) has been ignored.
This is due to the override magic, which isn't applied to functions
called by IMAGE_CMD:<type>, but only to the IMAGE_CMD:<type> itself.

Other image types (e.g. ext*) works around this by passing the
EXTRA_IMAGECMD variable as an argument to the called function.

To do the same for oe_mksquashfs(), the number of mandatory arguments is
fixed to one (with a little logic to handle the zstd filename). This
allows passing ${EXTRA_IMAGECMD} as an argument to oe_mksquashfs(),
which makes the variable functional again.

Signed-off-by: Martin Hundebøll <martin@geanix.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoRevert "goarch: disable dynamic linking globally"
Jose Quaresma [Mon, 6 May 2024 10:20:19 +0000 (11:20 +0100)] 
Revert "goarch: disable dynamic linking globally"

This reverts commit 827c60b79e7fcafd14e68870f6b69dcc48ac9c39.

Fixed with the drop of the linkmode

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8f46f60a703defc3e74adad382320c129cef0b06)
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agogo: Drop the linkmode completely
Jose Quaresma [Mon, 6 May 2024 10:20:18 +0000 (11:20 +0100)] 
go: Drop the linkmode completely

This will make possible to restore the default dynamic linking globally
which is what we had before the 1.20.X release.

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6ad90fc2fc49c4199a59dfb1c1d81a7ba184a522)
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agouboot-sign: fix loop in do_uboot_assemble_fitimage
Ralph Siemsen [Thu, 9 May 2024 12:42:04 +0000 (08:42 -0400)] 
uboot-sign: fix loop in do_uboot_assemble_fitimage

When using multiple u-boot configurations in UBOOT_CONFIG, the helper
function uboot_assemble_fitimage_helper() was not called with all
combinations of type & binary, due to a copy-n-paste indexing error.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2d338548a4b745a71eaf6c29231adc93c4165778)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agowebkitgtk: 2.44.0 -> 2.44.1
Kai Kang [Thu, 11 Apr 2024 07:03:36 +0000 (15:03 +0800)] 
webkitgtk: 2.44.0 -> 2.44.1

Update webkitgtk from 2.44.0 to the first bug fix release in the stable
2.44 series 2.44.1.

* remove backported patch

What's new in the WebKitGTK 2.44.1 release?
===========================================

  - Fix handling of lifetime of web view child dialogs in GTK4.
  - Do not schedule layer flushes when drawing area size is empty.
  - Fix videos with alpha when using the DMA-BUF sink.
  - Fix the build with USE_GBM=OFF.
  - Fix the build in 32bit platforms
  - Fix several crashes and rendering issues.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit c129c47cf9fa119005ea6e3946ebdee0da1db7e0)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agollvm: upgrade 18.1.2 -> 18.1.3
Wang Mingyu [Tue, 9 Apr 2024 07:10:05 +0000 (15:10 +0800)] 
llvm: upgrade 18.1.2 -> 18.1.3

0001-AsmMatcherEmitter-sort-ClassInfo-lists-by-name-as-we.patch
refreshed for 18.1.3

Changelog:
============
-DFixes tsan failures for glibc's LoongArch and certain RISC-V ports when
 fstat is used.
-transform.structured.convert_to_loops now properly deletes its target op.
-Fix a llvm.usub.with.overflow.i128 wrong code generation regression that
 was introduced with LLVM 18.1.0.
-MemorySanitizer on Linux can now run even when maximum-entropy address-space
 layout randomization is configured globally
-Fixed a Clang 18.x regression which increased binary size and stack usage with
 -ftrivial-auto-var-init.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit d2159f92ddbb6b999c1d14ac62647b4a35360377)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoglibc: correct license
Peter Marko [Mon, 6 May 2024 07:45:48 +0000 (09:45 +0200)] 
glibc: correct license

The license per [1] is LGPL-2.1-or-later and
[2] converted last LGPL-2.1-only references.

License-Update: corrected from LGPL-2.1-only to LGPL-2.1-or-later based on [1] and [2]

[1] https://www.gnu.org/software/libc/
[2] https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=273a835fe7c685cc54266bb8b502787bad5e9bae

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b7ad15a59d048ca7561a03cb0fc8e2c24680ce5c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoglibc: Update to latest on stable 2.39 branch
Peter Marko [Sat, 4 May 2024 19:03:34 +0000 (21:03 +0200)] 
glibc: Update to latest on stable 2.39 branch

Adresses CVEs: CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602

Changes:
273a835fe7 time: Allow later version licensing.
acc56074b0 nscd: Use time_t for return type of addgetnetgrentX
836d43b989 login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701)
9831f98c26 login: Check default sizes of structs utmp, utmpx, lastlog
fd658f026f elf: Also compile dl-misc.os with $(rtld-early-cflags)
a9a8d3eebb CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
c99f886de5 CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)
5a508e0b50 CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)
1263d583d2 CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677)
2f8f157eb0 x86: Define MINIMUM_X86_ISA_LEVEL in config.h [BZ #31676]
e701c7d761 i386: ulp update for SSE2 --disable-multi-arch configurations
e828914cf9 nptl: Fix tst-cancel30 on kernels without ppoll_time64 support

Since glibc introduced file sysdeps/arm/bits/wordsize.h
our multilib patch needed to be updated.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoglibc: Update to latest on stable 2.39 branch
Peter Marko [Tue, 23 Apr 2024 21:54:45 +0000 (23:54 +0200)] 
glibc: Update to latest on stable 2.39 branch

Adresses CVE-2024-2961

Remove backported patch included in hash update.

Changes:
31da30f23c iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)
423099a032 x86_64: Exclude SSE, AVX and FMA4 variants in libm multiarch
04df8652eb Apply the Makefile sorting fix
edb9a76e30 powerpc: Fix ld.so address determination for PCREL mode (bug 31640)
7b92f46f04 x86-64: Simplify minimum ISA check ifdef conditional with if
9883f4304c x86-64: Don't use SSE resolvers for ISA level 3 or above
9d92452c70 AArch64: Check kernel version for SVE ifuncs
395a89f61e aarch64: fix check for SVE support in assembler
b0e0a07018 aarch64/fpu: Sync libmvec routines from 2.39 and before with AOR
31c7d69af5 i386: Use generic memrchr in libc (bug 31316)
5d070d12b3 x86: Expand the comment on when REP STOSB is used on memset
6484a92698 x86: Do not prefer ERMS for memset on Zen3+
aa4249266e x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
5a461f2949 Add tst-gnu2-tls2mod1 to test-internal-extras
aded2fc004 elf: Enable TLS descriptor tests on aarch64
a8ba52bde5 arm: Update _dl_tlsdesc_dynamic to preserve caller-saved registers (BZ 31372)
15aebdbada Ignore undefined symbols for -mtls-dialect=gnu2
354cabcb26 x86-64: Allocate state buffer space for RDI, RSI and RBX
853e915fdd x86-64: Update _dl_tlsdesc_dynamic to preserve AMX registers
a364304718 x86: Update _dl_tlsdesc_dynamic to preserve caller-saved registers
7fc8242bf8 x86-64: Save APX registers in ld.so trampoline
983f34a125 LoongArch: Correct {__ieee754, _}_scalb -> {__ieee754, _}_scalbf
aad45c8ac3 powerpc: Placeholder and infrastructure/build support to add Power11 related changes.
ee7f4c54e1 powerpc: Add HWCAP3/HWCAP4 data to TCB for Power Architecture.
71fcdba577 linux: Use rseq area unconditionally in sched_getcpu (bug 31479)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8b0124782510389bdc376fab645a0920b3fb94c8)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoglib-2.0: Upgrade 2.78.5 -> 2.78.6
Peter Marko [Thu, 9 May 2024 20:54:30 +0000 (22:54 +0200)] 
glib-2.0: Upgrade 2.78.5 -> 2.78.6

Handle regression of CVE-2024-34397 fix.

News (https://gitlab.gnome.org/GNOME/glib/-/commit/d40f72e98e4734ba826ba9a278814530720ba760):

Overview of changes in GLib 2.78.6, 2024-05-08
==============================================
* Fix a regression with IBus caused by the fix for CVE-2024-34397 (#3353,
  work by Simon McVittie)
* Bugs fixed:
  - #3353 Fixing CVE-2024-34397 caused regressions for ibus (Simon McVittie)
  - !4056 Backport !4053 “gdbusconnection: Allow name owners to have the syntax
    of a well-known name” to glib-2-78

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoglib-2.0: Upgrade 2.78.4 -> 2.78.5
Peter Marko [Wed, 8 May 2024 11:46:36 +0000 (13:46 +0200)] 
glib-2.0: Upgrade 2.78.4 -> 2.78.5

Handle CVE-2024-34397

Remove backported patch included in this release.

News (https://gitlab.gnome.org/GNOME/glib/-/commit/d18807b5ffc6dedc2db5225b044063f65720bf56):
Overview of changes in GLib 2.78.5, 2024-05-07
==============================================
* Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are
  vulnerable to unicast spoofing (#3268, work by Simon McVittie, reported by
  Alicia Boya García)
* Bugs fixed:
  - #3168 gvfs-udisks2-volume-monitor SIGSEGV in g_content_type_guess_for_tree()
    due to filename with bad encoding (Ondrej Holy)
  - #3268 CVE-2024-34397: GDBus signal subscriptions for well-known names are
    vulnerable to unicast spoofing (Simon McVittie)
  - !3825 glib-2-78: ci: Drop FreeBSD 12 CI runner as it’s EOL
  - !3960 gcontenttype: Make filename valid utf-8 string before processing
  - !4040 Backport !4038 “gdbusconnection: Don't deliver signals if the sender
    doesn't match” to glib-2-78
  - !4043 CI: Ignore MSYS2 CI failures for this older stable-branch
* Translation updates:
  - English (United Kingdom) (Andi Chandler)
  - Georgian (Ekaterine Papava)
  - Portuguese (Brazil) (Juliano de Souza Camargo)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoopenssl: patch CVE-2024-4603
Peter Marko [Sat, 18 May 2024 10:43:56 +0000 (12:43 +0200)] 
openssl: patch CVE-2024-4603

Advisory: https://github.com/advisories/GHSA-85xr-ghj6-6m46

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoncurses: Fix CVE-2023-50495
Mingli Yu [Wed, 10 Apr 2024 05:29:38 +0000 (13:29 +0800)] 
ncurses: Fix CVE-2023-50495

Backport a patch [1] to fix CVE-2023-50495.

[1] http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commitdiff;h=7723dd6799ab10b32047ec73b14df9f107bafe99

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit bdf7b7460a4816e3d447264730a2814209667fb0)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agobuild-appliance-image: Update to scarthgap head revision
Steve Sakoman [Thu, 9 May 2024 11:47:57 +0000 (04:47 -0700)] 
build-appliance-image: Update to scarthgap head revision

Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agopython3: skip test_concurrent_futures/test_shutdown
Trevor Gamblin [Wed, 8 May 2024 17:10:14 +0000 (13:10 -0400)] 
python3: skip test_concurrent_futures/test_shutdown

These tests are causing hangs on the Autobuilder, so disable them for
now.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agobuild-appliance-image: Update to scarthgap head revision
Steve Sakoman [Mon, 6 May 2024 20:38:08 +0000 (13:38 -0700)] 
build-appliance-image: Update to scarthgap head revision

Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agosystemd: sed ROOT_HOME only if sysusers PACKAGECONFIG is set
Christian Bräuner Sørensen [Thu, 2 May 2024 09:42:04 +0000 (11:42 +0200)] 
systemd: sed ROOT_HOME only if sysusers PACKAGECONFIG is set

Fixes a bug introducted in ebafe46379 systemd: upgrade to 255.1.

Besides updating systemd, that commit also made other changes. One of them
being when to perform the replacement in order to fix ROOT_HOME.

Previously, that happened on a configure prefunc and on
${S}/sysusers.d/basic.conf.in.
Now it happens in install and on image/usr/lib/sysusers.d/basic.conf.

However, that file is not present if sysusers is not in PACKAGECONFIG,
since that file in that case is not installed hence resulting in:
sed: can't read <redactedpath>/image/usr/lib/sysusers.d/basic.conf: No such file or directory

Previously, in the case of sysusers not being in PACKAGECONFIG, that was a
"silent error" since the replacement was done but the file was not really
used since the file was not installed.

Signed-off-by: Christian Bräuner Sørensen <yocto@bsorensen.net>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Hundebøll <martin@geanix.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoscripts/oe-setup-build: write a build environment initialization one-liner into the...
Alexander Kanavin [Thu, 2 May 2024 11:44:21 +0000 (13:44 +0200)] 
scripts/oe-setup-build: write a build environment initialization one-liner into the build directory

With this, users no longer have to know where oe-init-build-env is relative to the
build directory; that information is contained in the one liner and then
it's possible to simply use that:

. /path/to/build/init-build-env

This will particularly help with initializing builds in unpacked
build bundles, as users won't have to know where oe-init-build-env
is in the bundle directory tree - similar to esdk initialization.

(From OE-Core rev: 1cabdf287c2739accdab3a766df060f1bc802b63)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agosstate.bbclass: Add _SSTATE_EXCLUDEDEPS_SYSROOT to vardepsexclude
Mark Hatle [Wed, 1 May 2024 21:26:33 +0000 (15:26 -0600)] 
sstate.bbclass: Add _SSTATE_EXCLUDEDEPS_SYSROOT to vardepsexclude

When using tinfoil to control the build, multiple commands (serially) could
trigger an error such as:

  When reparsing ....bb:do_package, the basehash value changed from ... to .... The metadata is not deterministic and this needs to be fixed.
  ERROR: The following commands may help:
  ERROR: $ bitbake esw-conf -cdo_package -Snone
  ERROR: Then:
  ERROR: $ bitbake esw-conf -cdo_package -Sprintdiff

However following these commands it was not able to be reproduced.  Forcing
bitbake to dump the signatures and then running bitbake-diffsigs showed
that the value of _SSTATE_EXCLUDEDEPS_SYSROOT was being set in one run, but
was blank is a different version.

Upon inspecting the code in sstate.bbclass, one usage (without the _) is
already excludes, the leading _ version is used as a cache, only if set but
is not actually required to be defined.  So ignoring the value should work
properly.

Signed-off-by: Mark Hatle <mark.hatle@amd.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4ec704ed6a1cfaf0a6c20f2038e7192e361ef590)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agompg123: upgrade 1.32.5 -> 1.32.6
Wang Mingyu [Tue, 9 Apr 2024 07:10:08 +0000 (15:10 +0800)] 
mpg123: upgrade 1.32.5 -> 1.32.6

Changelog:
- build: Detect forced 64 bit offsets on a dual-mode system that used
  to default to 32 bits and drop ambiguous suffix-less symbols in that
  case.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5e76967536191ac42fdd0c016e92a273dc4908e2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agolttng-tools: upgrade 2.13.11 -> 2.13.13
Wang Mingyu [Tue, 9 Apr 2024 07:10:06 +0000 (15:10 +0800)] 
lttng-tools: upgrade 2.13.11 -> 2.13.13

0001-tests-do-not-strip-a-helper-library.patch
refreshed for 2.13.13

Changelog:
===========
* Fix: consumerd: leak of tracing buffers on relayd connectivity issue
* Fix: consumerd: wrong timer mentioned in error logging
* Fix: consumerd: type confusion in lttng_consumer_send_error
* Fix: baddr-statedump: use $(LIBTOOL) --mode=execute
* Fix: relayd: live client not notified of inactive streams
* Fix: relayd: live: dispose of zombie viewer metadata stream
* tests: Fix typo in tests/regression/kernel/test_ns_contexts
* Fix: sessiond: freeze on channel creation on restart
* common: move utils_create_lock_file to its own file
* tests: tools/clear/test_ust wait for specific test app pid
* Fix: sessiond: crash when sending data_pending to an active session
* Tests: fix: list_triggers_cli: kallsyms contains prefixed symbols
* License: common: error_query: fix typo in SPDX specifier

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5d35200e089f0695cfb19b65dd9b56006aa3d4fc)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agolibx11: upgrade 1.8.7 -> 1.8.9
Wang Mingyu [Tue, 9 Apr 2024 07:10:02 +0000 (15:10 +0800)] 
libx11: upgrade 1.8.7 -> 1.8.9

Changelog:
===========
-xlibi18n: restore parse_line1 for WIN32 builds
-Fix _XkbReadGetDeviceInfoReply for nButtons == dev->buttons
-_XimProtoIMFree:no need to check arg for Xfree()
-_XimEncodeString:no need to check arg for Xfree()
-Fix XCreateIC() memory leak (Part 2)
-_XimLocalDestroyIC:fix possible mem leak
-_XimLocalCreateIC: get rid of bzero
-_XimLocalCreateIC: minor cleanup
-_XimLocalCreateIC:no need to check arg for Xfree()
-_XimLocalDestroyIC: no need to check arg for Xfree()
-fix table width

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit bd8fab6937cddf3b6818e8e333b78813f0524116)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agolibdnf: upgrade 0.73.0 -> 0.73.1
Wang Mingyu [Tue, 9 Apr 2024 07:09:58 +0000 (15:09 +0800)] 
libdnf: upgrade 0.73.0 -> 0.73.1

Changelog:
=========
-Fix https://issues.redhat.com/browse/RHEL-27657
-subject-py: Fix memory leak

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f16b16e1b6c60f0a1c9bc8d5492195fc66f33a19)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoell: upgrade 0.63 -> 0.64
Wang Mingyu [Tue, 9 Apr 2024 07:09:54 +0000 (15:09 +0800)] 
ell: upgrade 0.63 -> 0.64

Changelog:
==========
-Fix issue with casting in C++ environment.
-Fix issue with ASCII string upper and lower helpers.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a28405da8dad7e6222d7badaa3eda175e3df32c9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agobabeltrace2: upgrade 2.0.5 -> 2.0.6
Wang Mingyu [Tue, 9 Apr 2024 07:09:48 +0000 (15:09 +0800)] 
babeltrace2: upgrade 2.0.5 -> 2.0.6

Changelog:
===========
* bt2: disable some warnings for 'native_bt.c'
* bt2: compile 'native_bt.c' with '-Wno-undef'
* Fix: src.ctf.lttng-live: expect NEW_STREAM/METADATA for inactive streams
* Fix: 'babeltrace2 convert': don't consider the '--plugin-path' opt.
* include/babeltrace2/plugin/plugin-dev.h: "define" -> "definition
* Fix: doc: escape double quote in bt_p alias
* Fix: bt2: pass _TraceClassConst to destruction listeners
* fix: 'load_module()' deprecated in Python 3.12
* tests: retry os.rename on PermissionError failure in lttng_live_server.py
* doc: fix uptream -> upstream typos
* fix: test_message_iterator.py hangs on Python 3.12
* plugin-dev: mark symbols meant to be public with __attribute__((visibility("default")))
* Silence -Wunused-but-set-variable error with clang
* Fix: Windows DLL path lookup with Python >= 3.8
* doc/man: make default values of boolean init. params. clearer
* RFC: docs: fix: Match stated automake requirement
* fix: make flake8 6.x happy
* fix: running black on python 3.11
* bt_query_executor_create_with_method_data(): fix docs note
* Fix: ctf-writer: null dereference in bt_ctf_trace_common_add_stream_class
* Update working version to Babeltrace v2.0.6

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a5f05da60ca888456900f9fb0a52ef07db754c06)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agomesa: upgrade 24.0.2 -> 24.0.3
Wang Mingyu [Wed, 27 Mar 2024 03:20:54 +0000 (11:20 +0800)] 
mesa: upgrade 24.0.2 -> 24.0.3

Mesa 24.0.3 is a bug fix release which fixes bugs found since the 24.0.2 release.

New features
None

Bug fixes
v3d: Line rendering broken when smoothing is enabled
DR crashes with mesa 24 and rusticl (radeonsi)
RADV: GPU crash when setting ‘RADV_DEBUG=allbos’
[intel] mesa ftbfs with time_t64
[radv] Crash when VkGraphicsPipelineCreateInfo::flags = ~0u
Gen4 assertion `force_writemask_all’ failed.
[radv] Holographic projection texture glitch in Rage 2
[build failure] [armhf] - error: #error “_TIME_BITS=64 is allowed only with _FILE_OFFSET_BITS=64”
RustiCL: Callbacks are not called upon errors
MTL: regressions in vulkancts due to BO CCS allocations
zink: spec@ext_external_objects@vk-image-overwrite fail

0001-Revert-meson-do-not-pull-in-clc-for-clover.patch
refreshed for 24.0.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 43240c8b2c5507fe6147ba04ec98528602c694e1)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agolibxml2: upgrade 2.12.5 -> 2.12.6
Wang Mingyu [Tue, 26 Mar 2024 00:34:33 +0000 (08:34 +0800)] 
libxml2: upgrade 2.12.5 -> 2.12.6

Changelog:
===========
- parser: Fix detection of duplicate attributes in XML namespace
- xmlreader: Fix xmlTextReaderConstEncoding
- html: Fix htmlCreatePushParserCtxt with encoding
- xmllint: Return error code if XPath returns empty nodeset

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0bc673b0de08e02ff01ec9ad3daf0bb41662da40)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agobind: upgrade 9.18.24 -> 9.18.25
Wang Mingyu [Tue, 26 Mar 2024 00:34:21 +0000 (08:34 +0800)] 
bind: upgrade 9.18.24 -> 9.18.25

Changelog:
============
-Create the pruning task in the dns_cache_flush(), so
 the cache pruning still works after the flush.
-Improve the TTL-based cleaning by removing the expired
 headers from the heap, so they don't block the next
 cleaning round and clean more than a single item for
 each new addition to the RBTDB.
-Revert change 6319 and decrease lock contention during
 RBTDB tree pruning by not cleaning up nodes recursively
 within a single prune_tree() call.
-Address use after free in expire_lru_headers.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 17cecd0d9d0d734d408701d861692ca5987f4ad9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agopango: upgrade 1.52.0 -> 1.52.1
Wang Mingyu [Wed, 13 Mar 2024 07:08:15 +0000 (15:08 +0800)] 
pango: upgrade 1.52.0 -> 1.52.1

Changelog:
 Fix hexbox drawing

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5a296e6c3afb412ee9740fc28963f35dd16e52d9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agolibxcursor: upgrade 1.2.1 -> 1.2.2
Wang Mingyu [Wed, 13 Mar 2024 07:08:11 +0000 (15:08 +0800)] 
libxcursor: upgrade 1.2.1 -> 1.2.2

Changelog:
===========
-Remove superfluous and unguarded config.h include
-XcursorXcFileLoad: plug memory leak in error paths
-Add comment about keeping libxcb-cursor copy of code in sync
-If O_CLOEXEC is defined, add "e" to fopen modes
-configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
-gitlab CI: stop requiring Signed-off-by in commits

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b56224f31ac4df426418ffe9fa48f4d2dea3f148)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agolibsdl2: upgrade 2.30.0 -> 2.30.1
Wang Mingyu [Wed, 13 Mar 2024 07:08:09 +0000 (15:08 +0800)] 
libsdl2: upgrade 2.30.0 -> 2.30.1

Changelog:
===========
-Fixed a regression causing SDL_WaitEvent() to return spurious failures
-Fixed X11 cursors on the latest release of GNOME
-Wayland windows automatically have OpenGL enabled again
-Fixed memory corruption when converting signed 16-bit audio to float
-Fixed audio artifacts when converting signed 8-bit audio to float
-Fixed the clip rectangle not being updated when the viewport changes in the SDL renderer
-Convert mouse wheel coordinates to the rendering view in the SDL renderer
-Fixed a crash handling controllers on macOS
-Fixed a crash setting a window fullscreen with Emscripten
-Fixed the keyboard automatically popping up when resuming an application on Android

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a17c05585a0da0166087ae0cd3cd4331a1fb2615)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agogcr: upgrade 4.2.0 -> 4.2.1
Wang Mingyu [Wed, 13 Mar 2024 07:08:02 +0000 (15:08 +0800)] 
gcr: upgrade 4.2.0 -> 4.2.1

Changelog:
===========
- gcr-ssh-agent: set 'SSH_AUTH_SOCK'
- gcr-ssh-agent: port avoid deadlock fix
- Updated translations

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5b98e250d8c04040df1333506b72575d368e6bdc)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agorootfs-postcommands.bbclass: Only set DROPBEAR_RSAKEY_DIR once
Michael Glembotzki [Mon, 22 Apr 2024 16:39:38 +0000 (18:39 +0200)] 
rootfs-postcommands.bbclass: Only set DROPBEAR_RSAKEY_DIR once

If DROPBEAR_RSAKEY_DIR has already been set before, e.g. by overwriting
the file dropbear.default, the line will still be appended a second time.

DROPBEAR_RSAKEY_DIR="/path/to/dropbear"
DROPBEAR_EXTRA_ARGS="-B"
DROPBEAR_RSAKEY_DIR=/var/lib/dropbear

Signed-off-by: Michael Glembotzki <Michael.Glembotzki@iris-sensing.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agorpm: update 4.19.1 -> 4.19.1.1
Alexander Kanavin [Wed, 13 Mar 2024 17:33:30 +0000 (18:33 +0100)] 
rpm: update 4.19.1 -> 4.19.1.1

Summary of changes from RPM 4.19.1
Fixes
Packaging: Don’t warn about missing user/group on skipped files [Regression] (#2814)
Packaging: Make user/group lookup caching thread-safe [Regression] (#2843)
Lua interface: Fix regression in Lua scriptlet runaway child detection [Regression] (#2818)
Build: CMakeLists.txt: restore readline support as an explicit option [Regression] (#2852)
Build: Fix unconditional uses of Linux-specific extensions [Regression] (#2812)
Build: Add missing include for check_symbol_exists (#2831)
Build: Don’t use _nl_msg_cat_cntr if it’s not available (#2856)

Drop patches:
files/0002-docs-CMakeLists.txt-do-not-install-non-existent-docs.patch
(upstream resolved the issue)

files/0001-CMakeLists.txt-restore-readline-support-as-an-explic.patch
files/0001-Fix-unconditional-dependency-on-non-POSIX-GLOB_ONLYD.patch
(backports)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d233e33a5ca12f95878c3ee9e34d9d9c61e49f68)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
17 months agoicu: update 74-1 -> 74-2
Alexander Kanavin [Wed, 13 Mar 2024 17:33:22 +0000 (18:33 +0100)] 
icu: update 74-1 -> 74-2

ICU 74.2 updates to CLDR 44.1 locale data. These are maintenance releases for ICU 74
and CLDR 44, with limited sets of bug fixes and no API or structural changes.

The CLDR bug fix relevant for ICU is for some formatting patterns that erroneously
had two adjacent space characters. These are coalesced into one. (CLDR-17233)
Important: DateFormat.getInstanceForSkeleton() and the DateTimePatternGenerator
sometimes used the wrong patterns because they failed to use/inherit certain data
(ICU-22575 — CLDR 44 had removed some redundant data that ICU relied on)
For details, please see https://icu.unicode.org/download/74.

Note that upstream has re-spun the release tarball (the initial tarball had a broken symlink
for LICENSE file), so there can be yocto premirror checksum mismatches:
https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6671/steps/13/logs/stdio

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 344f7500e6df31d7c06331aedbac0df4983da958)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
18 months agobuild-appliance-image: Update to scarthgap head revision
Richard Purdie [Thu, 18 Apr 2024 16:08:51 +0000 (17:08 +0100)] 
build-appliance-image: Update to scarthgap head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agocurl: Backport patch to fix buildtools issues
Richard Purdie [Thu, 18 Apr 2024 10:46:02 +0000 (11:46 +0100)] 
curl: Backport patch to fix buildtools issues

bitbake-selftest was failing on a github url on hosts using buildtools.
The issue was tracked down to the curl upgrade 8.6.0 -> 8.7.1. Whilst there
is a fix in upstream git to workaround the issue in this version, backport
the fix from curl upstream to ensure there are no other related issues to
the bug.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agobuild-appliance-image: Update to scarthgap head revision
Richard Purdie [Tue, 16 Apr 2024 14:54:13 +0000 (15:54 +0100)] 
build-appliance-image: Update to scarthgap head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agobuildtools-tarball: Add python3-pip
Richard Purdie [Tue, 16 Apr 2024 13:51:24 +0000 (14:51 +0100)] 
buildtools-tarball: Add python3-pip

Many of the common use cases for buildtools need pip to allow python to be
extended. Add it.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agobuild-appliance-image: Update to master head revision
Richard Purdie [Tue, 16 Apr 2024 06:38:26 +0000 (07:38 +0100)] 
build-appliance-image: Update to master head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoopenssl: openssl: patch CVE-2024-2511
Peter Marko [Sat, 13 Apr 2024 22:49:17 +0000 (00:49 +0200)] 
openssl: openssl: patch CVE-2024-2511

Patch: https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08
News: https://github.com/openssl/openssl/commit/b7acb6731a96b073d6150465bd090e2052a595c2

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoabi_version/sstate: Switch to a new version for the upcoming release
Richard Purdie [Sat, 13 Apr 2024 10:37:04 +0000 (11:37 +0100)] 
abi_version/sstate: Switch to a new version for the upcoming release

In testing websocket hashequivalence, corrupted sstate was injected into the
autobuilder extensively. With the new release/LTS, being able to clearly
differentiate between old and new sstate is probably desireable anyway
so bump the appropriate versions.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoopenssh: add fido2 support
Dan McGregor [Fri, 12 Apr 2024 01:45:01 +0000 (19:45 -0600)] 
openssh: add fido2 support

OpenSSH supports FIDO security keys in both the client
and server.  Add an option to support them in oe.
This change requires a new recipe that I've submitted to
meta-openembedded that has not merged yet.

Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agopython3: upgrade 3.12.2 -> 3.12.3
Trevor Gamblin [Fri, 12 Apr 2024 00:42:02 +0000 (20:42 -0400)] 
python3: upgrade 3.12.2 -> 3.12.3

Remove the following patch:

0001-gh-115133-Fix-tests-for-XMLPullParser-with-Expat-2.6.patch

Which a different fix was submitted for in:

c4fa79b924 [3.12] gh-115133: Fix tests for XMLPullParser with Expat 2.6.0 (GH-115164) (GH-115288)
See: https://github.com/python/cpython/pull/115288
(related to CVE-2023-52425)

Changelog: https://docs.python.org/3/whatsnew/changelog.html#python-3-12-3-final

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agobuildtools-tarball: Add python3-setuptools
Richard Purdie [Sat, 13 Apr 2024 09:34:57 +0000 (10:34 +0100)] 
buildtools-tarball: Add python3-setuptools

After the dependency on setuptools was dropped from python3-testtools, this
exposed eSDK dependencies in devtool and recipetool on python3-setuptools. Add
this to buildtools to fix build failures after the testtools fixes.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agopython3-testtools: Fix build problems from incorrect build backend
Richard Purdie [Sat, 13 Apr 2024 07:16:32 +0000 (08:16 +0100)] 
python3-testtools: Fix build problems from incorrect build backend

testtools uses the hatchling backend so:
  * merge the inc back into the recipe
  * drop setuptools
  * use the hatchling backend
  * add the needed vcs dependency
  * drop the now unneeded python3-pbr dependency

This means the submodules are included in packaging, fixing build failures
and the verison in the wheel is no longer 0.0.0

Prior to this fix, testtools in buildtools tarball was completely
broken.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agokbd: update license
Peter Marko [Fri, 12 Apr 2024 16:57:14 +0000 (18:57 +0200)] 
kbd: update license

GPL-3 is used for keymaps-pine

LGPL2 is used in all C source files under src/libkfont/
which generate binaries included in main kbd package.
This is seen in their SPDX headers.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agokbd: remove non-free Agafari fonts
Peter Marko [Fri, 12 Apr 2024 16:57:13 +0000 (18:57 +0200)] 
kbd: remove non-free Agafari fonts

Its license makes it impossible to distribute kbd in any commercial products.
Backport commit which removes it.

[RP/Khem Raj: Switched binary diff to just delete the files in do_configure]
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agokbd: split gpl-3 keymap to separate package
Peter Marko [Fri, 12 Apr 2024 16:57:12 +0000 (18:57 +0200)] 
kbd: split gpl-3 keymap to separate package

Pine keymap was added with GPL-3 license.
https://github.com/legionus/kbd/commit/1589e9e1019756b5287b41dddcd7285271c5990e

Split this GPL-3 keymap and install it via recommendation
so it is easy to remove it by excluding recommendations.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agosystemd: make predictable name mac policy opt-out
Peter Marko [Fri, 12 Apr 2024 13:43:17 +0000 (15:43 +0200)] 
systemd: make predictable name mac policy opt-out

Even the patch says it's inappropriate for upstream,
and it's also inappropriate for some downstream projects, too.
So make it possible to opt-out on it by replacing
the patch by sed and depend on distro feature pni-names.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agobuildtools-tarball: Add python3-websockets
Richard Purdie [Fri, 12 Apr 2024 09:02:01 +0000 (10:02 +0100)] 
buildtools-tarball: Add python3-websockets

For the newer hash equivlance servers we need websockets. Add it
to buildtools tarball.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agopython3-websockets: Import from meta-python
Richard Purdie [Fri, 12 Apr 2024 09:01:38 +0000 (10:01 +0100)] 
python3-websockets: Import from meta-python

For the newer hash equivlance servers we need websockets. Import it
from meta-oe so we can easily include it in buildtools tarball.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agopython3-referencing: drop ${PYTHON_PN}
Justin Bronder [Thu, 11 Apr 2024 19:46:37 +0000 (15:46 -0400)] 
python3-referencing: drop ${PYTHON_PN}

python 2 is gone and we don't need the abstraction now, drop the
remaining usage of this variable.

Signed-off-by: Justin Bronder <jsbronder@cold-front.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agopython3-jsonschema-specifications: drop ${PYTHON_PN}
Justin Bronder [Thu, 11 Apr 2024 19:46:36 +0000 (15:46 -0400)] 
python3-jsonschema-specifications: drop ${PYTHON_PN}

python 2 is gone and we don't need the abstraction now, drop the
remaining usage of this variable.

Signed-off-by: Justin Bronder <jsbronder@cold-front.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agobitbake.conf: remove comment about oldincludedir
Peter Marko [Fri, 12 Apr 2024 12:52:32 +0000 (14:52 +0200)] 
bitbake.conf: remove comment about oldincludedir

oldincludedir was removed by 506c91cbc6a604a84e37e53ccff430436369802e

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agonativesdk-gzip: fix reproducibility issues
Oleh Matiusha [Thu, 11 Apr 2024 13:32:55 +0000 (13:32 +0000)] 
nativesdk-gzip: fix reproducibility issues

There is absolute path in zgrep binary. It is related to the changes that fix an
issue with zgrep on Solaris and other platforms with 'grep -e'. We don't have people
building on Solaris.

Original change:
git.savannah.gnu.org/cgit/gzip.git/commit?id=60b3f4eb672a85de28ecaad47ed426f8c8fe6c32

[RP: Tweak commit message]
Signed-off-by: Oleh Matiusha <omatiush@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agopackagegroup-core-boot: recommend ifupdown
Joe Slater [Thu, 11 Apr 2024 15:11:54 +0000 (08:11 -0700)] 
packagegroup-core-boot: recommend ifupdown

If the distro features sysvinit and pni-names are
enabled, RRECOMMENDS ifupdown because busybox ifupdown
will not initialize the renamed interfaces.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoinit-ifupdown: modify interfaces for busybox
Joe Slater [Thu, 11 Apr 2024 01:17:44 +0000 (18:17 -0700)] 
init-ifupdown: modify interfaces for busybox

Busybox ifupdown does not recognize /xxx names, so we
use eth0 instead of /eth0.  If we want to find "predictable name"
interfaces starting with en..., we will have to use the
real ifupdown.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agolinux-yocto: Enable nft modules for ptest images
Khem Raj [Wed, 10 Apr 2024 23:12:43 +0000 (16:12 -0700)] 
linux-yocto: Enable nft modules for ptest images

nftables ptests need it

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoeudev: update Upstream-Status on netifnames.patch
Ross Burton [Thu, 11 Apr 2024 14:11:17 +0000 (14:11 +0000)] 
eudev: update Upstream-Status on netifnames.patch

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agodevtool: standard: throws appropriate error if source is in detached HEAD
Julien Stephan [Wed, 10 Apr 2024 07:06:47 +0000 (09:06 +0200)] 
devtool: standard: throws appropriate error if source is in detached HEAD

If source is in detached HEAD, we get the following error when using
detvool finish command:

    [...]
    File "<...>/poky/scripts/lib/devtool/standard.py", line 1938, in _update_recipe
      bb.process.run('git checkout %s' % startbranch, cwd=srctree)
    File "<...>/poky/bitbake/lib/bb/process.py", line 189, in run
      raise ExecutionError(cmd, pipe.returncode, stdout, stderr)
  bb.process.ExecutionError: Execution of 'git checkout (HEAD detached at 9bbf87e)' failed with exit code 2:
  /bin/sh: -c: line 1: syntax error near unexpected token `('
  /bin/sh: -c: line 1: `git checkout (HEAD detached at 9bbf87e)'

Check this and throws an appropriate error in this case

Signed-off-by: Julien Stephan <jstephan@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agolibseccomp: Fix build when python packageconfig is enabled
Khem Raj [Sat, 6 Apr 2024 17:10:47 +0000 (10:10 -0700)] 
libseccomp: Fix build when python packageconfig is enabled

It needs additional tweaks with python enabled

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agosanity: Use diff instead of meld by default
Khem Raj [Sun, 7 Apr 2024 17:09:47 +0000 (10:09 -0700)] 
sanity: Use diff instead of meld by default

meld fallback assumes that user has a gnome desktop
its better to fallback to good old diff tool which
will most distributions on build host will carry

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoxorg-xserver-config: Disable screen blanking for qemu images
K Sanjay Nayak [Tue, 9 Apr 2024 08:39:49 +0000 (14:09 +0530)] 
xorg-xserver-config: Disable screen blanking for qemu images

Disable BlankTime, StandbyTime, SuspendTime and OffTime in X default for QEMU images

This fix addresses the issue of Xserver screensaver blanking being enabled on QEMU images by
disabling BlankTime, StandbyTime, SuspendTime, and OffTime in the Xorg default settings for QEMU images.

Reference : https://www.x.org/archive/X11R6.8.0/doc/xorg.conf.5.html

[YOCTO #15436]

Reported-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: K Sanjay Nayak <nayakksanjay@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agollvm: Upgrade to 18.1.3 bugfix release
Khem Raj [Sat, 6 Apr 2024 17:10:46 +0000 (10:10 -0700)] 
llvm: Upgrade to 18.1.3 bugfix release

Brings following changes
c13b7485b879 [clang] Avoid -Wshadow warning when init-capture named same as class field (#74512)
f249092ef26d [tsan] Refine fstat{,64} interceptors (#86625)
76c721994a11 [clang][Sema] Fix a CTAD regression after 42239d2e9 (#86914)
e0f0c463b539 [mlir][transform] replace original op to loop ops (#83537)
47aac495c895 [OpenMP][AIX] Affinity implementation for AIX (#84984)
a385a917da93 [Support] Fix color handling in formatted_raw_ostream (#86700)
0cd4babe0342 Reapply [libcxx] [modules] Fix relative paths with absolute LIBCXX_INSTALL_MODULES_DIR (#86020)
cfaeee6a8994  release/18.x: [SystemZ] Fix overflow flag for i128 USUBO (#86491)
767b61c159b3 [lld/ELF][X86] Respect outSecOff when checking if GOTPCREL can be relaxed (#86334)
7c7c3d4a3a27 [ODS][NFC] Cast range.size() to int32_t in accumulation (#85629)
0e501dbd932e [Mips] Restore wrong deletion of instruction 'and' in unsigned min/max processing. (#85902)
fbb27d16fa12 [Mips] Fix missing sign extension in expansion of sub-word atomic max (#77072)
e74c1678231a [PowerPC] provide CFI for ELF32 to unwind cr2, cr3, cr4 (#83098)
1c7c16e58240 [NFC][PowerPC] use script to regenerate the CHECK lines
c2a57034eff0 [msan] Re-exec with no ASLR if memory layout is incompatible on Linux (#85142)
b74f6158460c [msan] Add 'MappingDesc::ALLOCATOR' type and check it is available (#85153)
98a15dd2d728 [clang][CodeGen] Allow `memcpy` replace with trivial auto var init
2498e3a07f3d [LoongArch] Assume no-op addrspacecasts by default (#82332)
368dc8553c5a [SROA]: Only defer trying partial sized ptr or ptr vector types
0e16af8e4cf3 [ARM] Update IsRestored for LR based on all returns (#82745)
6f8016fda7d5 Pre-commit test showing bug #80287
ef6d1ec07c69 Bump version to 18.1.3 (#86168)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agou-boot-tools: Package mkeficapsule
Peter Hoyes [Tue, 9 Apr 2024 07:27:25 +0000 (08:27 +0100)] 
u-boot-tools: Package mkeficapsule

mkeficapsule is a tool provided by U-Boot (as part of the tools-only
targets) for generating UEFI capsule update archives.

Install mkeficapsule into a u-boot-tools-mkeficapsule package.

Signed-off-by: Peter Hoyes <peter.hoyes@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agopseudo: Update to pull in fchmodat fix
Richard Purdie [Wed, 10 Apr 2024 11:14:56 +0000 (12:14 +0100)] 
pseudo: Update to pull in fchmodat fix

This is needed to work with coreutils 9.5.

Also contains some README tweaks.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agorust: set CVE_STATUS for CVE-2024-24576
Harish Sadineni [Wed, 10 Apr 2024 11:43:31 +0000 (04:43 -0700)] 
rust: set CVE_STATUS for CVE-2024-24576

CVE-2024-24576 only applies when invoking batch files (with the `bat` and `cmd` extensions) on Windows & No other platform or use is affected.
More details about CVE is here: https://nvd.nist.gov/vuln/detail/CVE-2024-24576

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoperf: make bpf asm include arch conditional
Bruce Ashfield [Fri, 5 Apr 2024 13:15:16 +0000 (09:15 -0400)] 
perf: make bpf asm include arch conditional

To keep the perf source copying as small as possible, we can
further refine the arch/uapi copy to the single file that we
currently need.

To avoid a warning from the general perf source copy routine,
we make the .h conditional based on the architecture.

The supported architectures will not change often, so updating
this arch list is very minimal effort. Alternatively, we could
add a PERF_OPTIONAL_SRC variable and not warn if a file isn't
available for a given architecture.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agonghttp2: Upgrade 1.60.1 -> 1.61.0
Richard Purdie [Mon, 8 Apr 2024 13:18:16 +0000 (14:18 +0100)] 
nghttp2: Upgrade 1.60.1 -> 1.61.0

Includes a fix for CVE-2024-28182.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agocurl: Upgrade 8.6.0 -> 8.7.1
Richard Purdie [Mon, 8 Apr 2024 13:01:24 +0000 (14:01 +0100)] 
curl: Upgrade 8.6.0 -> 8.7.1

This includes 4 security fixes:

CVE-2024-2466 - TLS certificate check bypass with mbedTLS
CVE-2024-2398 - HTTP/2 push headers memory-leak
CVE-2024-2379 - QUIC certificate check bypass with wolfSSL
CVE-2024-2004 - Usage of disabled protocol

Along with many other changes, mostly bugfixes: https://curl.se/changes.html

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoxwayland: Upgrade 23.2.4 -> 23.2.5
Richard Purdie [Mon, 8 Apr 2024 12:58:48 +0000 (13:58 +0100)] 
xwayland: Upgrade 23.2.4 -> 23.2.5

"""
This release contains the 3 security fixes that actually apply to
Xwayland reported in today's security advisory:

  * CVE-2024-31080
  * CVE-2024-31081
  * CVE-2024-31083

Additionally, it also contains a couple of other fixes, a copy/paste
error in the DeviceStateNotify event and a fix to enable buttons with
pointer gestures for backward compatibility with legacy X11 clients.
"""

https://lists.x.org/archives/xorg/2024-April/061614.html

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agolinux-yocto-dev: remove duplicate DEPENDS
Mikko Rapeli [Thu, 4 Apr 2024 13:29:01 +0000 (16:29 +0300)] 
linux-yocto-dev: remove duplicate DEPENDS

They are already set in linux-yocto.inc

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoperf: add asm include required for v6.9+
Max Krummenacher [Thu, 4 Apr 2024 20:47:01 +0000 (16:47 -0400)] 
perf: add asm include required for v6.9+

Kernel commit 9eea8fafe33e ("libbpf: fix __arg_ctx type enforcement for
perf_event programs") added with 6.9-rc1 tools/include/uapi/asm/bpf_perf_event.h
which for arc, arm64, loongarch, riscv and s390 includes headers from
the arch/${ARCH}/... directories.

Which results in:

  ERROR: perf-1.0-r0 do_compile: oe_runmake failed
  | In file included from 1.0/perf-1.0/tools/include/uapi/linux/bpf_perf_event.h:11,
  |                  from libbpf.c:36:
  | perf/1.0/perf-1.0/tools/include/uapi/asm/bpf_perf_event.h:2:10: fatal error: ../../arch/arm64/include/uapi/asm/bpf_perf_event.h: No such file or directory
  |     2 | #include "../../arch/arm64/include/uapi/asm/bpf_perf_event.h"
  |       |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

We copy the uapi/asm directory to make sure the header file is
present.

Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoacpica: update to 20240322 release
Jon Mason [Wed, 3 Apr 2024 16:57:25 +0000 (12:57 -0400)] 
acpica: update to 20240322 release

Update acpica to the latest version, comprised of the following commits:

170fc3076a86 Update changes.txt for new ACPICA release 20240322
718374cd1bc2 Update acpixf.h for new ACPICA release 20240322
d0349632b625 Update osunixxf.c license header from 2023 to 2024
c929bc0d5028 Update osunixmap.c license header from 2023 to 2024
78c34e3738bd Update osunixdir.c license header from 2023 to 2024
193a3dda90e2 Update oslinuxtbl.c license header from 2023 to 2024
edaf61c8a97d Update oszephyr.c license header from 2023 to 2024
1c5331ede7ec Update osgendbg.c license header from 2015 to 2024
ab10380db037 Update osbsdtbl.c license header from 2023 to 2024
815db2de4317 Update osefixf.c license header from 2023 to 2024
a4dab90c90a4 Update osefitbl.c license header from 2023 to 2024
4f9205ae4283 Update oseficlib.c license header from 2023 to 2024
68bc01cec3b9 Update efihello.c license header from 2023 to 2024
f71b9942deeb Update acdragonfly.h license header from 2003 to 2024
74fb08369867 Update acgetline.c license header from 2023 to 2024
c18edfb1abfb Update the copyright year in the license header from 2023 to 2024
d58f24933d2f Get rid of MSVC warnings that arise actually due to GCC's new dangling pointer warning and also tGCC's blindspot to work with nested named structs/unions resulting in breaking of ACPI event-handling
ba8a36b5c734 events/evgpeinit: don't forget to increment registered GPE count
8affc87afd28 events/evxfgpe: correctly clear GPE_AUTO_ENABLED in AcpiSetupGpeForWake
69f81815f830 Fix Capabilities[1024] mess
3e89d40e19fc Update actbl2.h to get rid of the MSVC error C2233
a0ad1ed5105f Fix CXL 3.0 structure (RDPAS) in the CEDT table
9061cd9aa131 ACPICA: debugger: check status of AcpiEvaluateObject in AcpiDbWalkForFields
b9423c1d35b0 SRAT: Add dump and compiler support for RINTC affinity structure
93caddbf2f62 SRAT: Add RISC-V RINTC affinity structure
9788e0dc955b Modify ACPI_OBJECT_COMMON_HEADER
a6a236c44c7d Fix spelling and typos: Clean up the fix for Issue #900
b6b38edb0c18 Clean up the fix for Issue #900
8f789f356fb5 tests/common: use CopyObject instead of Store for NRMT
bce7c55e99a0 acgcc: Fix C++ issue with ACPI_FLEX_ARRAY
e3afd8e17bc8 MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling
453a5f675677 MADT: Add GICC online capable bit handling
6cd47047aca6 Fix various spelling mistakes in text files and code comments
31a16a32e7f3 acpisrc: Add identifiers for the NHLT table
32260f5ce519 NHLT: Reintroduce types the table consists of
6ab5a3bb1608 AdDisassemblerHeader: omit timestamp for deterministic output
471de8b63a98 Fix build indeterminism for asm compiler header.
50aec3ad9364 os_specific: zephyr: update AcpiOsGetTimer with arch specific timer
10ae1038e51e osal: zephyr: Fix write access for mapped memory
3944ce4dd104 osal: zephyr: Fix AcpiOsPrintf implementation
a97db76b5f1c Fix issue #896
f5910dd1ab60 Attempt 1 to fix issue #900
c581606cf49b ACPI 6.5: RAS2: Add support for RAS2 table
673fc21311ff Add port definitions for CDAT SSLBIS
9c5649bd2c65 dmtbdump2: remove redundant failure check on Status
544938c98a7a dmtbdump: remove duplicated code for both paths of an if statement
0c7379eae2a0 NHLT: Drop preliminary support
7b10fafca61f Revert "NHLT: Declare device configuration types"
0333c2af1317 os_specific: zephyr: add generic platform support
2872257aab53 Fix segfault when error-checking mixed table types
c7171588a9f6 actbl1.h: Add EINJ CXL error types
da740d8d27ff Get rid of // style comments
75635cb363c6 NHLT: Declare device configuration types
bbd7aee285ca dmtbinfo2.c: RISC-V: Remove redundant Flags print

License-Update: copyright years

Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoacpica: use github for SRC_URI
Jon Mason [Wed, 3 Apr 2024 16:57:24 +0000 (12:57 -0400)] 
acpica: use github for SRC_URI

Github is now the location of the ACPICA source code, per
https://www.intel.com/content/www/us/en/developer/topic-technology/open/acpica/download.html
Update to this location.  Also, this allows for devtool check for new
versions (in theory), and allows for an easier collection of the
changelog when updating versions.

Using the SRCREV SHA that matches the tarball release.  So, this should
match what is currently being used.

Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoovmf: set CVE_STATUS for a few CVEs
Chen Qi [Mon, 8 Apr 2024 15:00:15 +0000 (23:00 +0800)] 
ovmf: set CVE_STATUS for a few CVEs

For all those CVE-2019-xxxxx CVEs, following the links in NVD, we
can see they have all been fixed.

For CVE-2014-4859 and CVE-2014-4860, there's no useful links in NVD,
but according to the following two links, they have also been fixed.

  https://security-tracker.debian.org/tracker/CVE-2014-4859
  https://security-tracker.debian.org/tracker/CVE-2014-4860

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoovmf: update 202308 -> 202402
Alexander Kanavin [Wed, 13 Mar 2024 17:33:28 +0000 (18:33 +0100)] 
ovmf: update 202308 -> 202402

RP: The upgrade covers these security issues:
CVE-2022-36763
CVE-2022-36764
CVE-2022-36765
CVE-2023-45229
CVE-2023-45230
CVE-2023-45231
CVE-2023-45232
CVE-2023-45233
CVE-2023-45234
CVE-2023-45235
CVE-2023-45236
CVE-2023-45237

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
18 months agoovmf: set CVE_STATUS for CVE-2014-8271
Chen Qi [Sat, 6 Apr 2024 04:41:29 +0000 (12:41 +0800)] 
ovmf: set CVE_STATUS for CVE-2014-8271

CVE-2014-8271 has an unusual versioning, svn_16280, which breaks
the version comparison and gives us warning like below:

  Failed to compare 202308 < svn_16280 for CVE-2014-8271

The fix has been there since 2014, our current version has included
the fix.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>