]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/log
thirdparty/openembedded/openembedded-core.git
20 months agoglib-2.0: upgrade 2.78.0 -> 2.78.1
Wang Mingyu [Fri, 3 Nov 2023 07:20:44 +0000 (15:20 +0800)] 
glib-2.0: upgrade 2.78.0 -> 2.78.1

Changelog:
=========
* Fix truncating files when "g_file_set_contents_full()" is called without
  "G_FILE_SET_CONTENTS_CONSISTENT"

* Fix "-Dlibelf=disabled" on Linux

* Bugs fixed:
  - #3105 NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - #3111 gsubprocess-testprog.c: build error with cygwin (sys/ptrace.h: No such
    file or directory)
  - #3116 gio clears modification time in microseconds when setting with
    "set_modification_date_time"
  - #3120 Build of glib 2.78.0 ignores -Dlibelf=disabled
  - #3128 glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - #3130 Segfault when creating GIO GPropertyAction without properties
  - #3144 "g_file_set_contents_full()" doesn't truncate the file (without
    "G_FILE_SET_CONTENTS_CONSISTENT")
  - !3576 guniprop.c: Avoid creating (temporarily) out-of-bounds pointers
  - !3579 Fixes for integer cast warnings when targeting CHERI
  - !3580 Fix test_find_program on FreeBSD
  - !3589 gconstructor.h: Ensure [c|d]tor prototypes are present for MSVC
  - !3594 Fix gutils-user-database test on macOS
  - !3596 Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - !3601 meson: Fix Windows build with PCRE2 as sibling subproject
  - !3604 Backport !3589 "gconstructor.h: Ensure [c|d]tor prototypes are present
    for MSVC" to glib-2-78
  - !3608 Backport !3587 "glocalfileinfo: Preserve microseconds for
    access/modify times" to glib-2-78
  - !3609 Backport !3607 "Make sure the "GTask" is freed on a graceful
    disconnect" to glib-2-78
  - !3614 Backport !3582 "Buffer needs to be aligned correctly to receive
    linux_dirent64." to glib-2-78
  - !3616 Backport !3590 "gtestutils.h: Fix warning with -Wsign-conversion
    caused by g_assert_cmpint" to glib-2-78
  - !3619 Backport !3617 "tests: Drop unnecessary include from gsubprocess-
    testprog.c" to glib-2-78
  - !3622 Backport !3621 "wakeup: do single read when using eventfd()" to
    glib-2-78
  - !3625 Backport !3624 "wakeup: Fix g_wakeup_acknowledge if signal comes in"
    to glib-2-78
  - !3644 Backport !3633 "Use g_task_return in task threads" to glib-2-78
  - !3649 Backport !3648 "build: Fix -Dlibelf=disabled on Linux" to glib-2-78
  - !3659 Backport !3650 "gfileutils: Add a missing ftruncate() call when
    writing files" to glib-2-78

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 2a2df44ef1b413f1ae268a69e36ca796fc8c9d0b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agomsmtp: upgrade 1.8.24 -> 1.8.25
Wang Mingyu [Fri, 3 Nov 2023 07:17:55 +0000 (15:17 +0800)] 
msmtp: upgrade 1.8.24 -> 1.8.25

This is a bug fix release:

Generation of Message-ID headers was improved to avoid problems with rspamd assigning SPAM points
Documentation of ignored options was fixed
The combination of envelope from addresses with wildcards and automatic account selection was fixed (thanks to Jonathan Wakely)
Translations were updated, including a new Romanian translation (thanks again to everyone at translationproject.org)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 58fe8184f7ea475ad1be754e0de9a76cd4cd7c2e)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolibnsl2: upgrade 2.0.0 -> 2.0.1
Wang Mingyu [Fri, 3 Nov 2023 07:14:15 +0000 (15:14 +0800)] 
libnsl2: upgrade 2.0.0 -> 2.0.1

Changelog:
===========
* Remove unused internal symbols from libnsl.map
* Remove NIS+ from documentation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 1c85811d3a31cd290c7cbc939663cd68d69d9146)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolibnewt: upgrade 0.52.23 -> 0.52.24
Wang Mingyu [Fri, 3 Nov 2023 07:12:55 +0000 (15:12 +0800)] 
libnewt: upgrade 0.52.23 -> 0.52.24

Changelog:
===========
- add support for python3.13
- fix compiler warnings

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 3d97fe3848d68159c4b7119b0906c8388ce54a9a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agovim: upgrade 9.0.2068 -> 9.0.2130
Tim Orling [Mon, 27 Nov 2023 17:19:33 +0000 (09:19 -0800)] 
vim: upgrade 9.0.2068 -> 9.0.2130

https://github.com/vim/vim/compare/v9.0.2068...v9.0.2130

CVE: CVE-2023-48231
CVE: CVE-2023-48232
CVE: CVE-2023-48233
CVE: CVE-2023-48234
CVE: CVE-2023-48235
CVE: CVE-2023-48236
CVE: CVE-2023-48237

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 5978d565a9e700485fc563dfe2e3c0045dd74b59)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolib/oe/path: Deploy files can start only with a dot
Vyacheslav Yurkov [Thu, 2 Nov 2023 10:47:34 +0000 (11:47 +0100)] 
lib/oe/path: Deploy files can start only with a dot

There might be only hidden files deployed. In that case we don't need a
generic wildcard present in copy command, otherwise it fails with:

Exception: subprocess.CalledProcessError: Command 'cp -afl --preserve=xattr ./.??* ./* <BUILDDIR>/tmp/deploy/images/qemux86-64' returned non-zero exit status 1.

Subprocess output:
cp: cannot stat './*': No such file or directory

Signed-off-by: Vyacheslav Yurkov <Vyacheslav.Yurkov@wika.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit f92c751281609ea6bd6b838307de4bc70bf26ab9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolib/oe/buildcfg.py: Remove unused parameter
Jermain Horsman [Thu, 2 Nov 2023 12:11:32 +0000 (13:11 +0100)] 
lib/oe/buildcfg.py: Remove unused parameter

Several functions included the 'd' parameter but never used it,
additionally the value passed is always None.

Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 9e03ce0426576ebef3739dc1dfec4f7cd73ae094)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolib/oe/buildcfg.py: Include missing import
Jermain Horsman [Thu, 2 Nov 2023 12:11:31 +0000 (13:11 +0100)] 
lib/oe/buildcfg.py: Include missing import

get_layer_revisions() uses the os.path module but it is not included
in the imports.

Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 4339ef5b46c39cce402d1cc3526b39702837b839)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agosystemd: fix DynamicUser issue
Chen Qi [Thu, 2 Nov 2023 01:42:20 +0000 (18:42 -0700)] 
systemd: fix DynamicUser issue

The DynamicUser needs libnss-systemd to be installed to function
well. The tweaks to nsswitch.conf should be conditional on PACKAGECONFIG
values.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit ba3a78c08cb0ce08afde049610d3172b9e3b0695)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agoopenssl: improve handshake test error reporting
William Lyu [Wed, 1 Nov 2023 13:37:41 +0000 (09:37 -0400)] 
openssl: improve handshake test error reporting

Fixes [YOCTO #15225]

Yocto Bug #15255 is not reproducible. To obtain more useful information
for debugging, the OpenSSL test code is improved so that more detailed
state information in the handshake loop is printed when an error occurs.

Signed-off-by: William Lyu <William.Lyu@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 5bf9a70f580357badd01f39822998985654b0bfc)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agostrace: backport fix for so_peerpidfd-test
Randy MacLeod [Tue, 31 Oct 2023 23:47:08 +0000 (19:47 -0400)] 
strace: backport fix for so_peerpidfd-test

Backport the fix for the so_peerpidfd-test:
   44cf51a38 tests: fix so_peerpidfd test
and drop the patch that skipped that test.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 0a52da6530ebba08f9a3b30d5098b0c3ef1730d7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolsb-release: use https for UPSTREAM_CHECK_URI
Tim Orling [Tue, 31 Oct 2023 21:17:57 +0000 (14:17 -0700)] 
lsb-release: use https for UPSTREAM_CHECK_URI

http:// results in 301 Moved Permanently and redirects to https://

Also drop SRC_URI[md5sum].

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 4bb3e1dd642802a16ac9526df4098d6dcb97a795)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: package Robotics RB5 sensors DSP firmware
Dmitry Baryshkov [Fri, 24 Nov 2023 12:31:51 +0000 (15:31 +0300)] 
linux-firmware: package Robotics RB5 sensors DSP firmware

Add package with sensors DSP firmware for Qualcomm Robotics RB5
platform.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 195df10fcbfa1ef7e073d3332943458064519ae0)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: package Qualcomm Venus 6.0 firmware
Dmitry Baryshkov [Fri, 24 Nov 2023 12:31:50 +0000 (15:31 +0300)] 
linux-firmware: package Qualcomm Venus 6.0 firmware

Package firmware for the Qualcomm video encoder / decoder (venus) core,
version 6.0

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 51a64bd01adf3a81086e6368af01abaf4081a515)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: package firmware for Qualcomm QCM2290 / QRB4210
Dmitry Baryshkov [Fri, 24 Nov 2023 12:31:49 +0000 (15:31 +0300)] 
linux-firmware: package firmware for Qualcomm QCM2290 / QRB4210

Package firmware files for the Qualcomm QCM2290 and QRB4210 platforms.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit bc4170ca691df3eefa39fffd31c280b3ead111a9)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: package firmware for Qualcomm Adreno a702
Dmitry Baryshkov [Fri, 24 Nov 2023 12:31:48 +0000 (15:31 +0300)] 
linux-firmware: package firmware for Qualcomm Adreno a702

Separate firmware for the Quacomm Adreno A702 GPU, found on Qualcomm
QCM2290 / QRB2210 platforms.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit ad24c24dc534b2da7dbd858e1436f8c0d1e86809)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: add audio topology symlink to the X13's audio package
Dmitry Baryshkov [Fri, 24 Nov 2023 12:31:47 +0000 (15:31 +0300)] 
linux-firmware: add audio topology symlink to the X13's audio package

Add new symlink required for the sound driver to find the audio topology
to the linux-firmware--qcom-sc8280xp-lenovo-x13s-audio package.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 313135eaa236872e4aa5f698515a3363eb75601f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: add notice file to sdm845 modem firmware
Dmitry Baryshkov [Fri, 24 Nov 2023 12:31:46 +0000 (15:31 +0300)] 
linux-firmware: add notice file to sdm845 modem firmware

Follow the upstream change (which moved wlanmdsp and notice files from
ath10k to sdm845 dir) and include notice file into the sdm845 modem
firmware package.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit e03d1b9cc06ae23a8abc8a30b1c09bd997465400)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: add missing depenencies on license packages
Dmitry Baryshkov [Fri, 24 Nov 2023 12:31:45 +0000 (15:31 +0300)] 
linux-firmware: add missing depenencies on license packages

Several Adreno packages lack dependency on the package with the license
file. Add corresponding RDEPENDS.

Fixes: bf00a042d2fa ("linux-firmware: split platform-specific Adreno shaders to separate packages")
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 9b9f7fef59cca72c3cd0aedd040a15e77ad5a2b2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: upgrade 20230804 -> 20231030
Dmitry Baryshkov [Fri, 24 Nov 2023 12:31:44 +0000 (15:31 +0300)] 
linux-firmware: upgrade 20230804 -> 20231030

License-Update: additional firmwares

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 7c725d1f2ed9a271d39d899ac2534558c2d103fc)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: add new fw file to ${PN}-rtl8821
Bastian Krause [Fri, 24 Nov 2023 12:31:43 +0000 (15:31 +0300)] 
linux-firmware: add new fw file to ${PN}-rtl8821

Extend the linux-firmware-rtl8821 package with rtw8821 firmware files for
Realtek RTL8821 variants.

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 23c945938f8d8bcf5fbd6d9b840ec319aaa40c62)
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-firmware: create separate packages
Fahad Arslan [Fri, 24 Nov 2023 12:31:42 +0000 (15:31 +0300)] 
linux-firmware: create separate packages

This is in continuation of earlier commit:
3ddddfc14f805fe7572bba129605869fb848fed4
linux-firmware: create separate package for cirrus and cnm firmwares

And creates separate sub packages for firmwares corresponding to following list of
licenses:
LICENSE.amphion_vpu
LICENCE.cw1200
LICENSE.ice_enhanced
LICENCE.mediatek
LICENCE.microchip
LICENCE.moxa
LICENSE.nxp_mc_firmware
LICENCE.OLPC
LICENCE.phanfw
LICENCE.qla2xxx
LICENCE.ti-keystone
LICENCE.wl1251
LICENCE.xc4000
LICENCE.xc5000
LICENCE.xc5000c

Signed-off-by: Fahad Arslan <fahad.arslan@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit c110e5708465a6becc611acf97f166302a17ebdf)
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agoxwayland: upgrade to 23.2.2
Ross Burton [Thu, 30 Nov 2023 09:22:15 +0000 (17:22 +0800)] 
xwayland: upgrade to 23.2.2

e4487cae1 Bump version to 23.2.2
1e8478455 Xi/randr: fix handling of PropModeAppend/Prepend (CVE-2023-5367)
829a99117 Switch to libbsd-overlay
4f8a851b6 xwayland: Cancel the EI disconnect timer when freed
cc79b2a83 glamor: xv: Fix invalid accessing of plane attributes for NV12
07c18c90e xwayland: Give up on EI on setup failure
10353a01a xwayland: Add an option to enable EI portal support
4f8e209d2 xwayland/glamor/gbm: Set GBM_BO_USE_LINEAR if only LINEAR modifier is supported
c9a842e60 xwayland/present: Handle NULL window_priv in xwl_present_cleanup
2bd43be92 glamor: fixes GL_INVALID_ENUM errors on ES if there is no quads

( cherry-pick from commit 7d0fc94d09db76d4c4d6ca9d2da1b30768f68c9e )

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agoqemu: Upgrade 8.1.0 -> 8.1.2
Richard Purdie [Thu, 30 Nov 2023 09:22:14 +0000 (17:22 +0800)] 
qemu: Upgrade 8.1.0 -> 8.1.2

Drop three backport patches as they're applied upstream.

( cherry-pick from commit 7480ff9064a74858e83e0ae275dbdb78dd6fc2a4 )

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopython3-urllib3: Upgrade to 2.0.7
Khem Raj [Thu, 30 Nov 2023 09:22:13 +0000 (17:22 +0800)] 
python3-urllib3: Upgrade to 2.0.7

Addresses CVE-2023-45803 [1]

[1] https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9

( cherry-pick from commit befec4d3591bb0dce0e256cf338eb541b2a56b98 )

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolibjpeg-turbo: upgrade 3.0.0 -> 3.0.1
Wang Mingyu [Fri, 3 Nov 2023 07:12:14 +0000 (15:12 +0800)] 
libjpeg-turbo: upgrade 3.0.0 -> 3.0.1

Changelog:
=============
1. The x86-64 SIMD functions now use a standard stack frame, prologue, and
epilogue so that debuggers and profilers can reliably capture backtraces from
within the functions.

2. Fixed two minor issues in the interblock smoothing algorithm that caused
mathematical (but not necessarily perceptible) edge block errors when
decompressing progressive JPEG images exactly two MCU blocks in width or that
use vertical chrominance subsampling.

3. Fixed a regression introduced by 3.0 beta2[6] that, in rare cases, caused
the C Huffman encoder (which is not used by default on x86 and Arm CPUs) to
generate incorrect results if the Neon SIMD extensions were explicitly disabled
at build time (by setting the 'WITH_SIMD' CMake variable to '0') in an AArch64
build of libjpeg-turbo.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit f1d2ffb6c7282751919a7057ffc445db71866f96)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agoharfbuzz: upgrade 8.2.1 -> 8.2.2
Wang Mingyu [Fri, 3 Nov 2023 07:09:15 +0000 (15:09 +0800)] 
harfbuzz: upgrade 8.2.1 -> 8.2.2

Changelog:
===========
- Fix regression from 8.1.0 in shaping fonts with duplicate feature tags.
- Fix regression from 8.2.0 in parsing CSS-style feature strings.
- Variable fonts instanciation now handles more tables.
- Various CMake build improvements.
- various fixes to build without errors with gcc 4.9.2.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 7380afcb41db7b1a93c716af567d4a30a71dddcd)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agoenchant2: upgrade 2.6.1 -> 2.6.2
Wang Mingyu [Thu, 2 Nov 2023 08:17:54 +0000 (16:17 +0800)] 
enchant2: upgrade 2.6.1 -> 2.6.2

Changelog:
===========
Documents exclude files: each personal word list is paired with
an exclude file that contains words the user considers invalid.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit f0877cebd2c990d9d98fc348032742c2d9fb4254)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agobase-passwd: upgrade 3.6.1 -> 3.6.2
Wang Mingyu [Thu, 2 Nov 2023 08:17:50 +0000 (16:17 +0800)] 
base-passwd: upgrade 3.6.1 -> 3.6.2

base-passwd (3.6.2)

  [ Peter Kjellerstedt ]
  * Make it possible to configure whether to use SELinux or not.

  [ Gioele Barabucci ]
  * d/postinst: Remove code for upgrades from outdated version 3.2.2.
  * d/control: Remove unused w3m build dependency (closes: #1051810).
  * Support <nodoc> build profile (closes: #1051809).

  [ Colin Watson ]
  * Debconf translations:
    - Romanian (thanks, Remus-Gabriel Chelu; closes: #1031149).
    - Swedish (thanks, Peter KvillegÃ¥rd; closes: #1050440).
  * Explicitly build-depend on docbook, since otherwise the build fails if
    docbook-xml happens to be installed before installing build-dependencies
    (closes: #1033422).

  [ Samuel Thibault ]
  * Fix non-Linux builds (closes: #1054098).

0006-Make-it-possible-to-configure-whether-to-use-SELinux.patch
removed since it's included in 3.6.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit f318a13e8b6ce3ded313fa17ab80b35b936205fb)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agoavahi: backport Debian patches to fix multiple CVE's
Vijay Anusuri [Mon, 27 Nov 2023 10:08:13 +0000 (15:38 +0530)] 
avahi: backport Debian patches to fix multiple CVE's

import patches from ubuntu to fix
 CVE-2023-1981
 CVE-2023-38469
 CVE-2023-38470
 CVE-2023-38471
 CVE-2023-38472
 CVE-2023-38473

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/avahi/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
https://github.com/lathiat/avahi/commit/a2696da2f2c50ac43b6c4903f72290d5c3fa9f6f
&
https://github.com/lathiat/avahi/commit/a337a1ba7d15853fb56deef1f464529af6e3a1cf
&
https://github.com/lathiat/avahi/commit/c6cab87df290448a63323c8ca759baa516166237
&
https://github.com/lathiat/avahi/commit/94cb6489114636940ac683515417990b55b5d66c
&
https://github.com/lathiat/avahi/commit/20dec84b2480821704258bc908e7b2bd2e883b24
&
https://github.com/lathiat/avahi/commit/894f085f402e023a98cbb6f5a3d117bd88d93b09
&
https://github.com/lathiat/avahi/commit/b675f70739f404342f7f78635d6e2dcd85a13460
&
https://github.com/lathiat/avahi/commit/b024ae5749f4aeba03478e6391687c3c9c8dee40
&
https://github.com/lathiat/avahi/commit/b448c9f771bada14ae8de175695a9729f8646797]

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agobuild-appliance-image: Update to nanbield head revision 2023-10.1 2023-10.1-nanbield yocto-4.3.1
Steve Sakoman [Fri, 24 Nov 2023 18:27:44 +0000 (08:27 -1000)] 
build-appliance-image: Update to nanbield head revision

Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agooeqa/selftest/debuginfod: improve selftest
Ross Burton [Tue, 21 Nov 2023 13:19:24 +0000 (13:19 +0000)] 
oeqa/selftest/debuginfod: improve selftest

This test was occasionally failing for no obvious reason, so refactor
and improve:

- While waiting for the daemon, check that it is still running and
  explicitly timeout after 10s when making the HTTP call.

- While waiting for the daemon to be ready, log the current state of the
  daemon so we can tell if we're timing out as it is still scanning.

- This was in fact the cause of the intermittant failures, because the
  TMPDIR is reused between tests and may contain a large number of
  packages. Do the tests in an isolated TMPDIR to hopefully mitigate this
  issue and increase the timeout to two minutes.

- Decorate the test using runqemu as such so that can be skipped in
  environments without runqemu

- Add a second test that doesn't use runqemu or images, which is faster
  but less realistic.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 88b660aaae2527736b6eccec4c952eee969e20a2)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agovim: Upgrade 9.0.2048 -> 9.0.2068
Archana Polampalli [Fri, 17 Nov 2023 03:43:15 +0000 (03:43 +0000)] 
vim: Upgrade 9.0.2048 -> 9.0.2068

This includes CVE fix for CVE-2023-46246.
9198c1f2b (tag: v9.0.2068) patch 9.0.2068: [security] overflow in :history

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-46246

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 63bc72ccb63d2f8eb591d7cc481657a538f0fd42)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agovim: use upstream generated .po files
Steve Sakoman [Tue, 21 Nov 2023 13:55:42 +0000 (03:55 -1000)] 
vim: use upstream generated .po files

A previous commit attempted to fix reproducibility errors by forcing
regeneration of .po files. Unfortunately this triggered a different
type of reproducibility issue.

Work around this by adjusting the timestamps of the troublesome .po
files so they are not regenerated and we use the shipped upstream
versions of the files.

The shipped version of ru.cp1251.po doesn't seem to have been created
with the vim tooling and specifies CP1251 instead of cp1251, fix that.

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 13d9551ba626f001c71bf908df16caf1d739cf13)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agovim: Improve locale handling
Richard Purdie [Mon, 13 Nov 2023 16:44:00 +0000 (16:44 +0000)] 
vim: Improve locale handling

When making checkouts from git, the timestamps can vary and occasionally two files
can end up with the same stamp. This triggers make to regenerate ru.cp1251.po from
ru.po for example. If it isn't regenerated, the output isn't quite the same leading
to reproducibility issues (CP1251 vs cp1251).

Since we added all locales to buildtools tarball now, we can drop the locale
restrictions too. We need to generate a native binary for the sjis conversion
tool so also tweak that.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 042c1a501b1dae5ddb31307b461be02c3591c589)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: rework license checksum tests
Trevor Gamblin [Mon, 6 Nov 2023 15:34:12 +0000 (10:34 -0500)] 
patchtest: rework license checksum tests

Remove the pretest_lic_files_chksum_modified_not_mentioned test entirely
and use pyparsing in test_lic_files_chksum_modified_not_mentioned to
scan the patches for lines starting with either "+LIC_FILES_CHKSUM" or
"-LIC_FILES_CHKSUM".  If either is found but no "License-Update" tag is
present in the commit, fail the test.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 8e1bda0eb225ada22fdf5990edfec512be1d6629)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest-send-results: fix sender parsing
Trevor Gamblin [Thu, 2 Nov 2023 17:25:49 +0000 (13:25 -0400)] 
patchtest-send-results: fix sender parsing

Not all mbox 'from' fields will contain angle brackets, so the
re.findall invocation used for getting a reply_address may fail. Use a
simpler reference to the field to get the sender's email address.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 86e9afe09a346586114133f5a7470304d2ed733f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: remove test for CVE tag in mbox
Trevor Gamblin [Wed, 1 Nov 2023 14:20:55 +0000 (10:20 -0400)] 
patchtest: remove test for CVE tag in mbox

After patchtest went live it was determined that testing for a CVE tag
in the mbox commit message is unnecessary, since it will already be in
the shortlog and in any carried patches. Remove the test and the
associated selftest files so that its absence isn't flagged in future
test results.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 54690f18f04a2ab993a85d551ce4f8d0fa56618a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: make pylint tests compatible with 3.x
Trevor Gamblin [Tue, 31 Oct 2023 18:16:13 +0000 (14:16 -0400)] 
patchtest: make pylint tests compatible with 3.x

pylint 3.x has removed epylint, which is now a separate module. To avoid
adding another recipe or using outdated modules, modify the
test_python_pylint tests so that they use the standard pylint API.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 72be3d6a116febf46130cccbe12afe5ad93779b5)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest-send-results: add In-Reply-To
Trevor Gamblin [Wed, 1 Nov 2023 18:08:21 +0000 (14:08 -0400)] 
patchtest-send-results: add In-Reply-To

Rework the script for sending results to use send_raw_email and specify
the 'In-Reply-To' field so that patchtest replies to the emails, rather
than sending them standalone to the submitter and mailing list.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0c45c92e7f26aea4edf2cfa577b7ba51384e59d3)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest-send-results: send results to submitter
Trevor Gamblin [Mon, 30 Oct 2023 15:44:41 +0000 (11:44 -0400)] 
patchtest-send-results: send results to submitter

Modify patchtest-send-results so that it extracts the submitter's email
address and responds to them with the patch testresults. Also make a
minor adjustment to the suggestions provided with each email and include
a link to the Patchtest wiki page for additional clarification on
specific failures.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 64ed88e32cf9e04772319ff6e66c602d1cff4fd7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: shorten test result outputs
Trevor Gamblin [Sun, 29 Oct 2023 14:54:26 +0000 (10:54 -0400)] 
patchtest: shorten test result outputs

Some test result lines in TestMbox and TestPatch are still too long to
avoid being flagged by the mailer script. Clean them up by removing
redundant information, so that they are all under the length limit of
220 characters.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c10d0bb542b23fbdc14d76dfa8e5885aa4d33083)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: reduce checksum test output length
Trevor Gamblin [Fri, 27 Oct 2023 15:43:38 +0000 (11:43 -0400)] 
patchtest: reduce checksum test output length

The test_lic_files_chksum_modified_not_mentioned test in TestMetadata is
outputting very long lines that fail the maximum length check when
sending email results, preventing the actual errors from being
displayed. Reduce the length of the failure message by rewording and
removing redundant information.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 2e2625735181160e9760a6f3af4955bda2ea6d4d)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: simplify test directory structure
Trevor Gamblin [Thu, 26 Oct 2023 14:07:46 +0000 (10:07 -0400)] 
patchtest: simplify test directory structure

Consolidate the various mbox tests into a new TestMbox class, metadata
tests into TestMetadata, and patch tests into TestPatch. Also update the
selftest filenames to match the changes. The test contents are not
significantly changed (other than to reference the new class names).
While this doesn't improve overall readability, it does result in more
obvious categorization, and more importantly reduces the number of calls
to setup tinfoil in the tests, resulting in a roughly 25% reduction in
runtime.

Before:

[tgamblin@megalith poky]$ time ./meta/lib/patchtest/selftest/selftest
XPASS: PatchSignedOffBy.test_signed_off_by_presence (file: PatchSignedOffBy.test_signed_off_by_presence.pass)
XFAIL: Shortlog.test_shortlog_format (file: Shortlog.test_shortlog_format.fail)
XFAIL: MboxFormat.test_mbox_format (file: MboxFormat.test_mbox_format.1.fail)
XPASS: Shortlog.test_shortlog_length (file: Shortlog.test_shortlog_length.pass)
XFAIL: CommitMessage.test_commit_message_presence (file: CommitMessage.test_commit_message_presence.fail)
XFAIL: SrcUri.test_src_uri_left_files (file: SrcUri.test_src_uri_left_files.fail)
XPASS: Author.test_author_valid (file: Author.test_author_valid.1.pass)
XFAIL: LicFilesChkSum.test_lic_files_chksum_modified_not_mentioned (file: LicFilesChkSum.test_lic_files_chksum_modified_not_mentioned.fail)
XPASS: CVE.test_cve_tag_format (file: CVE.test_cve_tag_format.pass)
XPASS: CVE.test_cve_presence_in_commit_message (file: CVE.test_cve_presence_in_commit_message.pass)
XFAIL: CVE.test_cve_tag_format (file: CVE.test_cve_tag_format.fail)
XFAIL: Author.test_author_valid (file: Author.test_author_valid.1.fail)
XFAIL: LicFilesChkSum.test_lic_files_chksum_presence (file: LicFilesChkSum.test_lic_files_chksum_presence.fail)
XSKIP: Merge.test_series_merge_on_head (file: Merge.test_series_merge_on_head.2.skip)
XPASS: MboxFormat.test_mbox_format (file: MboxFormat.test_mbox_format.pass)
XFAIL: SignedOffBy.test_signed_off_by_presence (file: SignedOffBy.test_signed_off_by_presence.1.fail)
XPASS: Shortlog.test_shortlog_format (file: Shortlog.test_shortlog_format.pass)
XFAIL: SignedOffBy.test_signed_off_by_presence (file: SignedOffBy.test_signed_off_by_presence.2.fail)
XFAIL: MboxFormat.test_mbox_format (file: MboxFormat.test_mbox_format.2.fail)
XFAIL: Summary.test_summary_presence (file: Summary.test_summary_presence.fail)
XPASS: Author.test_author_valid (file: Author.test_author_valid.2.pass)
XSKIP: Merge.test_series_merge_on_head (file: Merge.test_series_merge_on_head.1.skip)
XPASS: Bugzilla.test_bugzilla_entry_format (file: Bugzilla.test_bugzilla_entry_format.pass)
XFAIL: CVE.test_cve_presence_in_commit_message (file: CVE.test_cve_presence_in_commit_message.fail)
XPASS: SignedOffBy.test_signed_off_by_presence (file: SignedOffBy.test_signed_off_by_presence.pass)
XPASS: LicFilesChkSum.test_lic_files_chksum_presence (file: LicFilesChkSum.test_lic_files_chksum_presence.pass)
XPASS: CommitMessage.test_commit_message_presence (file: CommitMessage.test_commit_message_presence.pass)
XPASS: Summary.test_summary_presence (file: Summary.test_summary_presence.pass)
XPASS: LicFilesChkSum.test_lic_files_chksum_modified_not_mentioned (file: LicFilesChkSum.test_lic_files_chksum_modified_not_mentioned.pass)
XFAIL: Shortlog.test_shortlog_length (file: Shortlog.test_shortlog_length.fail)
XFAIL: PatchSignedOffBy.test_signed_off_by_presence (file: PatchSignedOffBy.test_signed_off_by_presence.fail)
XFAIL: Bugzilla.test_bugzilla_entry_format (file: Bugzilla.test_bugzilla_entry_format.fail)
XPASS: SrcUri.test_src_uri_left_files (file: SrcUri.test_src_uri_left_files.pass)
XFAIL: Author.test_author_valid (file: Author.test_author_valid.2.fail)
============================================================================
Testsuite summary for patchtest
============================================================================
============================================================================

real    24m14.386s
user    1m13.599s
sys     0m21.477s

After:

[tgamblin@megalith poky]$ time ./meta/lib/patchtest/selftest/selftest
XFAIL: TestMbox.test_bugzilla_entry_format (file: TestMbox.test_bugzilla_entry_format.fail)
XPASS: TestMetadata.test_summary_presence (file: TestMetadata.test_summary_presence.pass)
XFAIL: TestMbox.test_mbox_format (file: TestMbox.test_mbox_format.1.fail)
XFAIL: TestMetadata.test_src_uri_left_files (file: TestMetadata.test_src_uri_left_files.fail)
XSKIP: TestMbox.test_series_merge_on_head (file: TestMbox.test_series_merge_on_head.2.skip)
XPASS: TestMbox.test_commit_message_presence (file: TestMbox.test_commit_message_presence.pass)
XFAIL: TestMbox.test_commit_message_presence (file: TestMbox.test_commit_message_presence.fail)
XPASS: TestMbox.test_signed_off_by_presence (file: TestMbox.test_signed_off_by_presence.pass)
XFAIL: TestPatch.test_cve_tag_format (file: TestPatch.test_cve_tag_format.fail)
XFAIL: TestMbox.test_author_valid (file: TestMbox.test_author_valid.1.fail)
XFAIL: TestMbox.test_shortlog_length (file: TestMbox.test_shortlog_length.fail)
XPASS: TestMbox.test_mbox_format (file: TestMbox.test_mbox_format.pass)
XFAIL: TestPatch.test_signed_off_by_presence (file: TestPatch.test_signed_off_by_presence.fail)
XFAIL: TestMbox.test_shortlog_format (file: TestMbox.test_shortlog_format.fail)
XFAIL: TestMbox.test_mbox_format (file: TestMbox.test_mbox_format.2.fail)
XPASS: TestPatch.test_cve_tag_format (file: TestPatch.test_cve_tag_format.pass)
XSKIP: TestMbox.test_series_merge_on_head (file: TestMbox.test_series_merge_on_head.1.skip)
XPASS: TestMbox.test_author_valid (file: TestMbox.test_author_valid.2.pass)
XPASS: TestMetadata.test_lic_files_chksum_modified_not_mentioned (file: TestMetadata.test_lic_files_chksum_modified_not_mentioned.pass)
XPASS: TestMbox.test_bugzilla_entry_format (file: TestMbox.test_bugzilla_entry_format.pass)
XPASS: TestMetadata.test_src_uri_left_files (file: TestMetadata.test_src_uri_left_files.pass)
XPASS: TestMetadata.test_lic_files_chksum_presence (file: TestMetadata.test_lic_files_chksum_presence.pass)
XPASS: TestMbox.test_cve_presence_in_commit_message (file: TestMbox.test_cve_presence_in_commit_message.pass)
XFAIL: TestMbox.test_signed_off_by_presence (file: TestMbox.test_signed_off_by_presence.2.fail)
XFAIL: TestMbox.test_author_valid (file: TestMbox.test_author_valid.2.fail)
XFAIL: TestMetadata.test_lic_files_chksum_presence (file: TestMetadata.test_lic_files_chksum_presence.fail)
XPASS: TestMbox.test_shortlog_format (file: TestMbox.test_shortlog_format.pass)
XPASS: TestMbox.test_author_valid (file: TestMbox.test_author_valid.1.pass)
XPASS: TestPatch.test_signed_off_by_presence (file: TestPatch.test_signed_off_by_presence.pass)
XFAIL: TestMetadata.test_lic_files_chksum_modified_not_mentioned (file: TestMetadata.test_lic_files_chksum_modified_not_mentioned.fail)
XPASS: TestMbox.test_shortlog_length (file: TestMbox.test_shortlog_length.pass)
XFAIL: TestMbox.test_signed_off_by_presence (file: TestMbox.test_signed_off_by_presence.1.fail)
XFAIL: TestMbox.test_cve_presence_in_commit_message (file: TestMbox.test_cve_presence_in_commit_message.fail)
XFAIL: TestMetadata.test_summary_presence (file: TestMetadata.test_summary_presence.fail)
============================================================================
Testsuite summary for patchtest
============================================================================
============================================================================
real    18m39.749s
user    0m41.857s
sys     0m14.708s

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f788592da2fd0e21638ce2c3326675a060ba51cf)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest/selftest: add XSKIP, update test files
Trevor Gamblin [Wed, 25 Oct 2023 16:41:33 +0000 (12:41 -0400)] 
patchtest/selftest: add XSKIP, update test files

Since we are skipping the merge test, two of the selftests now report
SKIP instead of XPASS/XFAIL as expected. Adjust the two files to have
the right endings for XSKIP, and add the category so that it can be used
for more extensive testing in the future.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3331f53c0be2575784a042bb2401eeba4f2a5a3e)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest-send-results: check max line length, simplify responses
Trevor Gamblin [Wed, 25 Oct 2023 14:47:39 +0000 (10:47 -0400)] 
patchtest-send-results: check max line length, simplify responses

Check that the maximum line length of the testresult file is less than
220 characters, to help guard against malicious changes being sent in
email responses. If any line exceeds this length, replace the normal
testresults used in the response with a line stating that tests failed,
but the results could not be processed. Also clean up the respone
substrings slightly to go along with the change.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit b0d53cf587dc9afb97f00c1089e45b758e96dd7c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: disable merge test
Trevor Gamblin [Tue, 24 Oct 2023 18:40:08 +0000 (14:40 -0400)] 
patchtest: disable merge test

Disable the merge-on-head test until patchtest properly handles merging
of series subsets and accounts for patches that are rapidly merged (i.e.
before patchtest is run).

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e561c614dc72b7f8bf5e09a09bbe6ebc3cf500bb)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest-send-results: improve subject line
Trevor Gamblin [Tue, 24 Oct 2023 13:14:48 +0000 (09:14 -0400)] 
patchtest-send-results: improve subject line

Pull the actual email's subject line from the .mbox file and use that in
patchtest's test results response, so that it's clearer which patch it
is replying to.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 98ca0b151517b3544454fd5c1656a2de631c4897)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: fix lic_files_chksum test regex
Trevor Gamblin [Fri, 20 Oct 2023 14:42:02 +0000 (10:42 -0400)] 
patchtest: fix lic_files_chksum test regex

the test_lic_files_chksum_modified_not_mentioned test in patchtest
wasn't picking up on 'License-Update:' tags correctly. Use pyparsing's
AtLineStart class to simplify the regex setup and search.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit dc9126e45e74b915faaf296037e7ece41785bf4a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: skip merge test if not targeting master
Trevor Gamblin [Thu, 19 Oct 2023 21:03:32 +0000 (17:03 -0400)] 
patchtest: skip merge test if not targeting master

Avoid testing mergeability of a patch when not targeting master, so that
patches tested via other means (e.g. maintainer branches and AB runs)
don't get unnecessarily reviewed an extra time.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e6cf23e353f48c57249681bd0b12bd8494d4959a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: test regardless of mergeability
Trevor Gamblin [Thu, 19 Oct 2023 20:49:27 +0000 (16:49 -0400)] 
patchtest: test regardless of mergeability

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit dc089073eb120de76c8907e476c341ed3e97c164)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agopatchtest: remove unused imports
Ross Burton [Thu, 19 Oct 2023 13:40:54 +0000 (14:40 +0100)] 
patchtest: remove unused imports

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit be8429d986335aae65c2426862b97836ba46e42a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agobaremetal-helloworld: Pull in fix for race condition on x86-64
Alejandro Hernandez Samaniego [Sat, 4 Nov 2023 06:46:42 +0000 (00:46 -0600)] 
baremetal-helloworld: Pull in fix for race condition on x86-64

It was previously discovered that there was a race condition during the Makefile
execution between the assemble and compile targets, the previous fix attempted
to serialize the build targets, but the fix was missing for x86-64.

Pull in latest commit from upstream to fix this issue on x86-64.

[YOCTO #15146]

Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e7e1631a1efbcf421de801e94734f67f25668540)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agoglib-2.0: Remove unnecessary assignement
Rouven Czerwinski [Fri, 3 Nov 2023 15:45:50 +0000 (16:45 +0100)] 
glib-2.0: Remove unnecessary assignement

FILES:${PN}-utils is += extended and than replaced completely later,
remove the first extension.

Signed-off-by: Rouven Czerwinski <r.czerwinski@pengutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit d9d61c5217938749e3edc5f8a5c987f46bbab3d7)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agobase: Ensure recipes using mercurial-native have certificates
Richard Purdie [Thu, 26 Oct 2023 10:36:10 +0000 (11:36 +0100)] 
base: Ensure recipes using mercurial-native have certificates

If you try and fetch using mercurial-native, you see certificate errors since
it is configured to find ones in the sysroot, not the system. Add the missing
dependency so that mercurial recipes using the native tool work.

Found trying to make mirroring for old meta-oe stable branches work.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fc567e35b374f8b08975602609ee71e64357fb3d)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agolinux-yocto: make sure the pahole-native available before do_kernel_configme
Xiangyu Chen [Thu, 26 Oct 2023 06:38:48 +0000 (14:38 +0800)] 
linux-yocto: make sure the pahole-native available before do_kernel_configme

When using debug-btf.scc in a clean workspace, the CONFIG_MODULE_ALLOW_BTF_MISMATCH cannot
apply to kernel until clean the kernel code(bitbake linux-yocto -c cleanall) and rebuild.

After tracking the code, some options depend on CONFIG_PAHOLE_VERSION, it was generated by
scripts/pahole-version.sh in kernel, but during do_kernel_configme step, the pahole-native
is not available in sysroot-native, so need to wait pahole-native install to sysroot-native
before do_kernel_configme.

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 217a4db53edbd88001f6390bbff39e5dd3d137af)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agooeqa/selftest/devtool: abort if a local workspace already exist
Julien Stephan [Wed, 25 Oct 2023 16:02:44 +0000 (18:02 +0200)] 
oeqa/selftest/devtool: abort if a local workspace already exist

if user run devtool selftests with a local workspacelayer
the tests fail with various error such as:

- devtool.DevtoolAddTests.test_devtool_add just hangs
- devtool.DevtoolModifyTests.* fail with the following error:

 ERROR: Found duplicated BBFILE_COLLECTIONS 'workspacelayer', check bblayers.conf or layer.conf to fix it.
 Found duplicated BBFILE_COLLECTIONS 'workspacelayer', check bblayers.conf or layer.conf to fix it.

Check if a workspacelayer exists, warn the user and abort the tests

Signed-off-by: Julien Stephan <jstephan@baylibre.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a74962cfb0485f6f2b9e2b751c33c8eafca8705a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
20 months agokernel-arch: drop CCACHE from KERNEL_STRIP definition
Dmitry Baryshkov [Thu, 2 Nov 2023 19:49:15 +0000 (22:49 +0300)] 
kernel-arch: drop CCACHE from KERNEL_STRIP definition

Building linux-yocto with ccache enabled results in the 'command not
found' error, because kernel-yocto.bbclass passes the KERNEL_STRIP
as a single value, whic is then interpreted as a command name.

ERROR: Fatal errors occurred in subprocesses:
[Errno 2] No such file or directory: 'ccache aarch64-linaro-linux-strip': Traceback (most recent call last):
  File "/home/lumag/Projects/RPB/build-rpb/conf/../../layers/openembedded-core/meta/lib/oe/utils.py", line 288, in run
    ret = self._target(*self._args, **self._kwargs)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fixes: 03973c8c1c93 ("kernel: Add kernel specific STRIP variable")
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 41f019afc41f800b622c46a6d7cf1beffc97716a)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agokernel.bbclass: Use strip utility used for kernel build in do_package
Khem Raj [Tue, 24 Oct 2023 22:07:35 +0000 (15:07 -0700)] 
kernel.bbclass: Use strip utility used for kernel build in do_package

os.environ does not pass this down to runstrip() function and in
strip_execs() its using STRIP bitbake variable to find the strip utility
to use. Since there might be a trailing whitespace in KERNEL_STRIP
remove that otherwise python is not able to launch it.
e.g.

FileNotFoundError: [Errno 2] No such file or directory: 'riscv64-yoe-linux-strip '

This is more evident when STRIP and KERNEL_STRIP are different utilities
e.g. when using clang as default toolchain but using gcc+binutils only for
kernel build.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 77497dbdca92ab4d6386a071bc281c42a7e8a14b)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agobb-matrix-plot.sh: Show underscores correctly in labels
Peter Kjellerstedt [Thu, 19 Oct 2023 16:04:37 +0000 (18:04 +0200)] 
bb-matrix-plot.sh: Show underscores correctly in labels

Underscores previously caused the next character in the label to be
printed using subscript due to the enhanced string support in gnuplot.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 282b48f90f77e0766993018d22fe03dd303febdc)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agooeqa/ssh: Handle SSHCall timeout error code
luca fancellu [Thu, 9 Nov 2023 14:36:31 +0000 (14:36 +0000)] 
oeqa/ssh: Handle SSHCall timeout error code

The current code in ssh.py is terminating the ssh process that
does not finish its computation in a given timeout (when timeout
is passed), the SSHCall function is returning the process error
code.

The Openssl ssh before version 8.6_p1 is returning 0 when it is
terminated, from commit 8a9520836e71830f4fccca066dba73fea3d16bda
onwards (version >= 8.6_p1) ssh is returning 255 instead.

So for version of ssh older than 8.6_p1 when the SSHCall time out,
the return code will be 0, meaning success, which is wrong.

Fix this issue checking if the process has timeout (hence it's been
terminated) and checking if the returned code is 0, in that case
set it to 255 to advertise that an error occurred.

Add a test case excercising the timeout in the SSHTest, test_ssh
test function.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 948fecca1db4c7a30fcca5fcf5eef95cd12efb00)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agoRevert "bin_package.bbclass: Inhibit the default dependencies"
Max Krummenacher [Sun, 27 Aug 2023 08:09:53 +0000 (10:09 +0200)] 
Revert "bin_package.bbclass: Inhibit the default dependencies"

This reverts commit d1d09bd4d7be88f0e341d5fccbfbefeb98d4b727.

The commit not only removes the dependencies on the cross compiler
but also does not depend on e.g. virtual/${TARGET_PREFIX}compilerlibs
and virtual/libc which in turn makes the file-rdeps qa check fail
if installing binaries linked against e.g. libc or libstdc++.

Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ababf6ceebe360c5f59a57428566c27b7a97a9e6)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agoperl: fix intermittent test failure
William Lyu [Tue, 10 Oct 2023 14:10:07 +0000 (10:10 -0400)] 
perl: fix intermittent test failure

Fixes [YOCTO #15136]

This fix addresses the intermittent failure of the Perl ptest
t/op/sigsystem.t.

Signed-off-by: William Lyu <William.Lyu@windriver.com>
Signed-off-by: Randy MacLeod <randy.macleod@windriver.com>
Reported-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
(cherry picked from commit 8c1ee92efa107ed055f1737640a027fa89077494)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agogoarch: Move Go architecture mapping to a library
Joshua Watt [Tue, 17 Oct 2023 13:59:02 +0000 (07:59 -0600)] 
goarch: Move Go architecture mapping to a library

Other spaces uses the Go architecture definitions as their own (for
example, container arches are defined to be Go arches). To make it
easier for other places to use this mapping, move the code that does the
translation of OpenEmbedded arches to Go arches to a library.

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3e86f72fc2e1cc2e5ea4b4499722d736941167ce)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agoopenssl: Upgrade 3.1.3 -> 3.1.4
Peter Marko [Tue, 24 Oct 2023 18:15:29 +0000 (20:15 +0200)] 
openssl: Upgrade 3.1.3 -> 3.1.4

https://github.com/openssl/openssl/blob/openssl-3.1/NEWS.md#major-changes-between-openssl-313-and-openssl-314-24-oct-2023

Major changes between OpenSSL 3.1.3 and OpenSSL 3.1.4 [24 Oct 2023]
* Mitigate incorrect resize handling for symmetric cipher keys and IVs. (CVE-2023-5363)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 104ba16de434a08b0c8ba4208be187f0ad1a2cf8)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agollvm: Upgrade to 17.0.3
Khem Raj [Thu, 19 Oct 2023 03:58:29 +0000 (20:58 -0700)] 
llvm: Upgrade to 17.0.3

Brings following fixes

888437e1b600 [asan] Ensure __asan_register_elf_globals is called in COMDAT asan.module_ctor (#67745)
2e00f4ca4e91 [clang-format][doc] Update the Linux kernel coding style URL
aeb83c3783a6 [clang-format] Fix a serious bug in git-clang-format (#65723)
268faa377aee [LSan] Mark create_thread_leak.cpp as UNSUPPORTED: darwin.
491a91e8eea2 [PowerPC] Use zext instead of anyext in custom and combine (#68784)
8ce6b65c89ad [PowerPC] Add test for #68783 (NFC)
7a23a5d43c67 [clang-format] Fix a bug in RemoveParentheses: ReturnStatement (#67911)
be4016e52779 [X86] Fix logic for optimizing movmsk(bitcast(shuffle(x))); PR67287
496b174053bd [X86] Add tests for incorrectly optimizing out shuffle used in `movmsk`; PR67287
f50c6382c716 [clang] [MinGW] Explicitly always pass the -fno-use-init-array (#68571)
d10b731adcc8 [LVI][CVP] Treat undef like a full range (#68190)
37b79e779f44 [X86] combineConcatVectorOps - only concatenate single-use subops
5a13ce2d6020 Bump version to 17.0.3
e7b3b94cf500 [clang] Correct behavior of `LLVM_UNREACHABLE_OPTIMIZE=OFF` for `Release` builds (#68284)
f0a687d821c1 [LLD] [COFF] Fix handling of comdat .drectve sections (#68116)
8a8ade49ff49 workflows/release-binaries: Use more cores to avoid the 6 hour timeout (#67874)
1090b91a2840 [AArch64] Disable loop alignment for Windows targets (#67894)
69c8c96691c7 [Sema] Use underlying type of scoped enum for -Wformat diagnostics (#67378)
b2417f51dbbd (tag: llvmorg-17.0.2) Fix release/export.sh to export runtimes tarball, too (#67404)
23988a1d82d5 [libc++] Fix `std::pair`'s  pair-like constructor's incorrect assumption (#66585)
33e14ecd6aac [CodeGen] Don't treat thread local globals as large data (#67764)
03f797b51df6 [workflow] Fix abi checker in llvm-tests. Same fix as in 99fb0af80d16b0ff886f032441392219e1cac452 (#67957)
f6cf58eed973 [clang] [MinGW] Tolerate mingw specific linker options during compilation (#67891)
b338a2830a2c [LLD] [COFF] Restore the current dir as the first entry in the search path (#67857)
6a5be8e95b43 [LLD] [COFF] Clarify -print-search-path for the empty string element (#67856)
71be0aafe357 [NFC] clang-format lld/COFF/Driver.cpp and lld/Common/Filesystem.cpp
0a2d7dae6ef2 [compiler-rt] Reinstate removal of CRT choice flags from CMAKE_*_FLAGS* (#67935)
098e653a5bed [MemCpyOpt] Merge alias metadatas when replacing arguments (#67539)
78d201ebc3e2 [MemCpyOpt] Add test for #67539 (NFC)
e718f3240a57 [DependencyScanningFilesystem] Make sure the local/shared cache filename lookups use only absolute paths (#66122)
45066b9fbc7b [Sema] Fix fixit cast printing inside macros (#66853)
87ec1f460d0e Work around two more instances of __noinline__ conflicts. (#66138)
9da5b7a93bca [lldb] Fix building LLDB standlone without framework
c056d720b534 [lldb][NFCI] Change logic to find clang resource dir in standalone builds
cb23434f9e63 [XCOFF] Do not generate the special .ref for zero-length sections (#66805)
1b55dc9d94c3 Fix buildbot failure caused by D157623
28d81a2bfa0a [lld][COFF] Remove incorrect flag from EHcont table
b7eba056b93c workflows/release-tasks: Setup FileCheck and not for release-lit (#66799)
9678f11b057c [StackColoring] Handle fixed object index
49e9ee190080 [StackColoring] Handle SEH catch object stack slots conservatively
17123a60b87c [X86] Add test for #66984 (NFC)
2839aa915066 [SimpleLoopUnswitch] Fix exponential unswitch
773f136d6faa [SimpleLoopUnswitch] Fix reversed branch during condition injection
4362f3e4cf48 [clang] Include `expected-no-diagnostics` in newly-added test (NFC)
5f1fcc43e592 [clang] Bail out when handling union access with virtual inheritance
178cf5bc8732 [clang][Diagnostics] Fix wrong line number display (#65238)
25a150b830f6 Revert "[InlineCost] Check for conflicting target attributes early"

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 8cfb833b66e514ea911aa4fbdc72592a06233f68)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agolibsdl2: upgrade 2.28.3 -> 2.28.4
Wang Mingyu [Fri, 13 Oct 2023 08:59:20 +0000 (16:59 +0800)] 
libsdl2: upgrade 2.28.3 -> 2.28.4

This is a stable bugfix release, with the following changes:

Enable clipping for zero sized rectangles in the SDL renderer
Notify X11 clipboard managers when the clipboard changes
Fixed sensor timestamps for third-party PS5 controllers
Added detection for Logitech and Simagic racing wheels

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
(cherry picked from commit f47de111cd66c3f9a5a6d5589e1fd034027a0a75)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agoell: upgrade 0.58 -> 0.59
Wang Mingyu [Fri, 13 Oct 2023 08:56:54 +0000 (16:56 +0800)] 
ell: upgrade 0.58 -> 0.59

Changelog:
 Fix issue with symbol visibility.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
(cherry picked from commit 14eba663b56f8f3b9c3aff5661cbe2aa7befe86e)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agolibsndfile1: fix CVE-2022-33065
Alex Stewart [Fri, 20 Oct 2023 17:19:22 +0000 (13:19 -0400)] 
libsndfile1: fix CVE-2022-33065

Signed-off-by: Alex Stewart <alex.stewart@ni.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit f34991c7eeb91702a44ac8b4a190fcb45dac57cb)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
21 months agolayer.conf: Switch layer to nanbield series only
Richard Purdie [Thu, 9 Nov 2023 16:25:47 +0000 (16:25 +0000)] 
layer.conf: Switch layer to nanbield series only

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agocve-check: don't warn if a patch is remote
Ross Burton [Fri, 3 Nov 2023 13:28:11 +0000 (13:28 +0000)] 
cve-check: don't warn if a patch is remote

We don't make do_cve_check depend on do_unpack because that would be a
waste of time 99% of the time.  The compromise here is that we can't
scan remote patches for issues, but this isn't a problem so downgrade
the warning to a note.

Also move the check for CVEs in the filename before the local file check
so that even with remote patches, we still check for CVE references in
the name.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agocve-check: slightly more verbose warning when adding the same package twice
Ross Burton [Fri, 3 Nov 2023 13:28:10 +0000 (13:28 +0000)] 
cve-check: slightly more verbose warning when adding the same package twice

Occasionally the cve-check tool will warn that it is adding the same
package twice.  Knowing what this package is might be the first step
towards understanding where this message comes from.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agocve-check: sort the package list in the JSON report
Ross Burton [Fri, 3 Nov 2023 13:28:09 +0000 (13:28 +0000)] 
cve-check: sort the package list in the JSON report

The JSON report generated by the cve-check class is basically a huge
list of packages.  This list of packages is, however, unsorted.

To make things easier for people comparing the JSON, or more
specifically for git when archiving the JSON over time in a git
repository, we can sort the list by package name.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agopixman: ignore CVE-2023-37769
Ross Burton [Fri, 3 Nov 2023 13:28:08 +0000 (13:28 +0000)] 
pixman: ignore CVE-2023-37769

This issue relates to a floating point exception in stress-test, which
is an unlikely security exploit at the best of times, but the test is
not installed so isn't relevant.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agozlib: ignore CVE-2023-45853
Ross Burton [Fri, 3 Nov 2023 13:28:07 +0000 (13:28 +0000)] 
zlib: ignore CVE-2023-45853

This CVE relates to a bug in the minizip tool, but we don't build that.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agolibxml2: ignore disputed CVE-2023-45322
Ross Burton [Fri, 3 Nov 2023 13:28:06 +0000 (13:28 +0000)] 
libxml2: ignore disputed CVE-2023-45322

This CVE is a use-after-free which theoretically can be an exploit
vector, but this UAF only occurs when malloc() fails.  As it's
unlikely that the user can orchestrate malloc() failures at just the
place to break on _this_ malloc and not others it is disputed that this
is actually a security issue.

The underlying bug has been fixed, and will be incorporated into the
next release.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agolinux-yocto: update CVE exclusions
Ross Burton [Fri, 3 Nov 2023 13:28:05 +0000 (13:28 +0000)] 
linux-yocto: update CVE exclusions

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agodocumentation.conf: drop SERIAL_CONSOLES_CHECK
Lee Chee Yang [Fri, 3 Nov 2023 06:25:54 +0000 (14:25 +0800)] 
documentation.conf: drop SERIAL_CONSOLES_CHECK

remove obsolete SERIAL_CONSOLES_CHECK.

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agobuild-appliance-image: Update to nanbield head revision 2023-10 2023-10-nanbield yocto-4.3
Richard Purdie [Thu, 19 Oct 2023 22:56:32 +0000 (23:56 +0100)] 
build-appliance-image: Update to nanbield head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agobuild-appliance-image: Update to nanbield head revision
Richard Purdie [Thu, 19 Oct 2023 22:14:57 +0000 (23:14 +0100)] 
build-appliance-image: Update to nanbield head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agobuild-appliance-image: Update to nanbield head revision
Richard Purdie [Thu, 19 Oct 2023 16:01:15 +0000 (17:01 +0100)] 
build-appliance-image: Update to nanbield head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agolinux-yocto/6.5: serial: core: integrate upstream fixes
Bruce Ashfield [Thu, 19 Oct 2023 15:08:49 +0000 (11:08 -0400)] 
linux-yocto/6.5: serial: core: integrate upstream fixes

Integrating the following commit(s) to linux-yocto/6.5:

    14f83e409308 serial: core: test for -EINPROGRESS during tx power management validation
    1b5b735f311f serial: core: Fix checks for tx runtime PM state
    dee98a75d75c Revert "serial-core: disable power managment for serial tx"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agolinux-yocto/6.5: config: remove VIDEO_STK1160_COMMON
Bruce Ashfield [Thu, 19 Oct 2023 15:41:57 +0000 (11:41 -0400)] 
linux-yocto/6.5: config: remove VIDEO_STK1160_COMMON

Integrating the following commit(s) to linux-yocto/.:

    4531e74daf0 media/media-usb-tv.cfg: remove VIDEO_STK1160_COMMON

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agopatchtest: sort when reading patches from a directory
Ross Burton [Thu, 19 Oct 2023 13:40:53 +0000 (14:40 +0100)] 
patchtest: sort when reading patches from a directory

When reading patches from a directory it's important to sort the output
of os.listdir(), as that returns the files in an effectively random
order.  We can't test the patches apply if they're applied in the wrong
order, and typically patch filenames are prefixed with a counter to
ensure the order is correct.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agopatchtest: check for untracked changes
Trevor Gamblin [Thu, 19 Oct 2023 13:47:10 +0000 (09:47 -0400)] 
patchtest: check for untracked changes

[YOCTO #15243]

Avoid overwriting local changes when running patchtest by checking for
anything unstaged or uncommitted in the target repo, and logging an
error if something is found. This will provide the user helpful feedback
if (for example) they forgot to commit a change for their patch under
test, and will leave the target repository in a reasonable state (rather
than a temporary branch created by patchtest).

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agopython3-urllib3: Update to 2.0.6
Khem Raj [Sun, 15 Oct 2023 15:28:44 +0000 (08:28 -0700)] 
python3-urllib3: Update to 2.0.6

Only changes in this release [1] fixes CVE-2023-43804 [2] on top of 2.0.5

[1] https://github.com/urllib3/urllib3/commit/644124ecd0b6e417c527191f866daa05a5a2056d
[2] https://github.com/advisories/GHSA-v845-jxx5-vc9f

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agovim: Upgrade 9.0.2009 -> 9.0.2048
Siddharth Doshi [Wed, 18 Oct 2023 15:13:12 +0000 (20:43 +0530)] 
vim: Upgrade 9.0.2009 -> 9.0.2048

This includes CVE fix for CVE-2023-5535.

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
21 months agoSECURITY.md: add file
Marta Rybczynska [Wed, 18 Oct 2023 05:22:41 +0000 (07:22 +0200)] 
SECURITY.md: add file

Add a SECURITY.md file with hints for security researchers and other
parties who might report potential security vulnerabilities.

Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agobuild-appliance-image: Update to master head revision
Richard Purdie [Tue, 17 Oct 2023 21:58:03 +0000 (22:58 +0100)] 
build-appliance-image: Update to master head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agopatchtest/selftest: fix command arguments
Trevor Gamblin [Tue, 17 Oct 2023 15:16:33 +0000 (11:16 -0400)] 
patchtest/selftest: fix command arguments

Changes to patchtest's command-line arguments to work with oe-core by
default do not match the selftest script's argument list. Explicitly use
the --testdir and --repodir flags in selftest so that it is compatible
them.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agopatchtest: update SPDX identifiers
Trevor Gamblin [Tue, 17 Oct 2023 13:25:45 +0000 (09:25 -0400)] 
patchtest: update SPDX identifiers

Replace full license headers with SPDX identifiers and adjust all
patchtest-related code to use GPL-2.0-only.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agostrace: further clean up of ptest folders
Alexandre Belloni [Tue, 17 Oct 2023 16:53:49 +0000 (18:53 +0200)] 
strace: further clean up of ptest folders

Removing the out files removes about 350MB of data which helps staying
in the currently allocated ptest image space as we are hitting disk
space issues after enabling the parallelization of tests.

Fixes [Yocto #15220]

Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agoqemuarmv5: Drop QB_DTB conditional for older kernels
Alejandro Hernandez Samaniego [Mon, 16 Oct 2023 20:45:23 +0000 (14:45 -0600)] 
qemuarmv5: Drop QB_DTB conditional for older kernels

The conditional for the DTB nomenclature hasnt changed
and the 4.7 kernel is old enough at this point, hence
this check has become unnecessary'

Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agopatchtest: set default repo and testdir targets
Trevor Gamblin [Mon, 16 Oct 2023 19:44:58 +0000 (15:44 -0400)] 
patchtest: set default repo and testdir targets

Since patchtest is in oe-core, the Python os module's methods can be
used to retrieve the repository path and tests directory by default.
This reduces the number of mandatory arguments for invocation of
patchtest unless the user wants to use a custom test suite or test
patches against a different repo. The REPO and TESTDIR arguments are
likewise adjusted so that they are optional. Also, make it more obvious
what the --startdir flag is meant for on the command line by renaming it
to --testdir, and update the scripts/patchtest.README file to be
consistent with the new usage.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agopatchtest: add scripts to oe-core
Trevor Gamblin [Mon, 16 Oct 2023 19:44:57 +0000 (15:44 -0400)] 
patchtest: add scripts to oe-core

Add the following from the patchtest repo:

- patchtest: core patch testing tool
- patchtest-get-branch: determine the target branch of a patch
- patchtest-get-series: pull patch series from Patchwork
- patchtest-send-results: send test results to selected mailing list
- patchtest-setup-sharedir: create sharedir for use with patchtest guest
  mode
- patchtest.README: instructions for using patchtest based on the README
  in the original repository

Note that the patchtest script was modified slightly from the repo
version to retain compatibility with the oe-core changes.
patchtest-send-results and patchtest-setup-sharedir are also primarily
intended for automated testing in guest mode, but are added for
consistency.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agopatchtest: add supporting modules
Trevor Gamblin [Mon, 16 Oct 2023 19:44:56 +0000 (15:44 -0400)] 
patchtest: add supporting modules

Add modules that support core patchtest functionality to
meta/lib/patchtest. These include classes and functions for handling
repository and patch objects, parsing the patchtest CLI arguments, and
other utilities.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agopatchtest/requirements.txt: update
Trevor Gamblin [Mon, 16 Oct 2023 19:44:55 +0000 (15:44 -0400)] 
patchtest/requirements.txt: update

Add git-pw and boto3 to the list of requirements for patchtest.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agoinsane: unimplemented-ptest: ignore source file errors
Yoann Congal [Mon, 16 Oct 2023 15:51:13 +0000 (17:51 +0200)] 
insane: unimplemented-ptest: ignore source file errors

In some cases, pathlib.Path.glob() might throw FileNotFoundError when
file/directory disappear while it is iterating over them.

This "warning" is not important enough to crash build in this case so
just take a bb.note of the problem and move on.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reported-by: Mark Hatle <mark.hatle@amd.com>
Closes: https://lists.openembedded.org/g/openembedded-core/message/189254
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agoinsane: skip unimplemented-ptest on S=WORKDIR recipes
Yoann Congal [Mon, 16 Oct 2023 15:51:12 +0000 (17:51 +0200)] 
insane: skip unimplemented-ptest on S=WORKDIR recipes

On S=WORKDIR recipes, the unimplemented-ptest check will scan the whole
WORKDIR and "see" disappearing file and directory.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reported-by: Mark Hatle <mark.hatle@amd.com>
Closes: https://lists.openembedded.org/g/openembedded-core/message/189254
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
22 months agoqemu: ignore RHEL specific CVE-2023-2680
Lee Chee Yang [Mon, 16 Oct 2023 08:51:51 +0000 (16:51 +0800)] 
qemu: ignore RHEL specific CVE-2023-2680

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>