]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
11 months agopiglit: upgrade 22eaf6a91c -> c11c9374c1
Trevor Gamblin [Thu, 22 Aug 2024 15:18:04 +0000 (11:18 -0400)] 
piglit: upgrade 22eaf6a91c -> c11c9374c1

Commit 766669895d fixes builds with numpy 2.x.

Patch '0001-utils-Include-libgen.h-on-musl-linux-systems.patch' dropped
because it is now upstream in commit 9c941dfc36.

Add wayland-native and wayland-protocols to DEPENDS to avoid errors
during build.

There's a reproducibility issue being seen on the autobuilder. It
appears that it's a host contamination issue, based on what Richard
replied with in the v3. See: https://lists.openembedded.org/g/openembedded-core/message/203651

Does anyone with more CMake familiarity know how to patch CMakeLists.txt
or the recipe in a way that will fix these errors? I'm not able to see
any of them locally. It's also possible that what I've added to
PACKAGECONFIG is not the right approach for x11 support.

Changelog:

c11c9374c (HEAD -> main, origin/main, origin/HEAD) arb_bindless_texture: test image/sampler constructors
f11abb664 Revert "arb_bindless_texture: add another function param bindless test"
045343687 arb_gpu_shader5: add linker version of function overloads test
4b1116f3a arb_bindless_texture: add another function param bindless test
4a62c2672 glsl: test function linking with implicit param conversions
9f280db77 arb_bindless_texture: add basic function param bindless tests
766669895 generated_tests: fix numpy overflow warnings that are errors in numpy 2.0
5214915dc generated_tests: print mako exceptions
41bd119f2 arb_texture_buffer_object: don't leak src strings
582f5490a gl-1.0: Add a test for glPushAttrib/glPopAttrib
647d07250 ext_texture_format_bgra8888: test GL_BGRA8_EXT as well
dee2a233f perf: port glsl-compile-time perf-test from mesa demos
18333c568 perf: port vertexrate perf-test from mesa demos
e932fa2f5 perf: port vbo perf-test from mesa demos
f9cf4788a perf: port teximage perf-test from mesa demos
20ccc1c10 perf: port readpixels perf-test from mesa demos
556a9c96d perf: port genmipmap perf-test from mesa demos
225b6bfb6 perf: port fill perf-test from mesa demos
dae4a13f9 perf: port fbobind perf-test from mesa demos
cd0f812b3 perf: port copytex perf-test from mesa demos
fdf3fc09d cl: add missing errors
01b64dd06 glsl-1.10: test a complex partial unroll scenario
cf8daaf5b glsl-bug-110796: detect missing ES 3.2 support using EGL_BAD_MATCH
30d34daf7 glsl-bug-110796: distinguish which context creation failed
3ea14414a Sync .mailmap from Mesa
7accec34a glsl-bug-110796: check for GL ES 3.2 support
12ebd71c7 egl-terminate-then-unbind-context: simplify
69bc38a77 egl_khr_create_context: improve skip reporting
209becf6d arb_blend_func_extended: simplify MAX_DUAL_SOURCE_DRAW_BUFFERS detection
800abe232 arb_blend_func_extended: gles: follow the specification requirements
1cad6ee20 arb_texture_multisample: require geometry shaders
59bdc8c4e egl: missing EGLconfig isn't stderr material
cee2190b5 ext_external_objects: avoid stderr when we skip the test
8cbefab52 util: remove handwritten defines and drop FIXME
11e7aa044 texsubimage: fix low bpp formats by expecting less than 8 bits of precision
e180f9623 Use GBM_LDFLAGS to get all options
3bddb36e8 fix vk_vert_buf_reuse cleanup
8f6e71975 arb_texture_view: test for NaN in more cases
446c20f3e ext_direct_state_access: Fix deprecated-non-prototype warnings
8a6ce9c6f arb_fragment_layer_viewport: don't test out-of-range gl_Layer values
8d5af6c51 glsl-1.30: Test uint to float conversion of sign extended value
7aa7bc1b0 arb_draw_buffers_blend: Fix deprecated-non-prototype warnings
3d3a20a2b arb_sample_shading: do not actually run mask_in_one if it's not supported
759cc6454 clear-stencil: new test to check for problems clearing stencils
2c64a91bb read_depth_offset: new test to check depth offset calculation
869a1b6e8 replayer: create bin/ everytime
9be2db198 Reduce precision in depth clear precision check
7f40f35a3 Add float from half function
f7ece74a1 tests/gbm: Add gbm_device_get_fd() test
fd4a6c521 wayland: Add Wayland dmabuf driver-name test
df0d0ae79 conversion-explicit: use a different value for normalized +/- min
a482803ac cmake: if we specify PIGLIT_BUILD_GL_TESTS OPENGL_FOUND is always true
67b89b3e3 README: recommend Ninja by default and switch to cmake --build
efd111853 cmake: build is compatible up to 3.28
e84aca9b5 cmake: add workaround for CMP0148
2e70ca91e README: ccmake is not that common, regular cmake is enough to build
e39ba99e5 README: update requirements
d945707b9 cmake: WGL doesn't need Waffle, pass the definition without it
938a9dc9f cmake: remove this 12 years old workaround taking too many lines
7e5ca052d cmake: implement switch for the EGL tests and simplify test conditions
cd9d15364 cmake: make PIGLIT_BUILD_DMA_BUF_TESTS aligned with GBM dependency
4af47af27 cmake: depend on WGL_TESTS being enabled to build WGL
a222d50bb cmake: implement GBM and Wayland controls
4230c7e9f cmake: fix unusually formated statement
d958b70d1 cmake: implement X11 option (required for GLX)
4319b9fc8 cmake: move GLX and WGL option to the beggining of the file
44e1c29bf cmake: move first batch of option() at the beggining of the file
96241ea22 cmake: rename default values with prefix DEFAULT_
21374d8d3 cmake: move defaults into the per-platform section
86d3f1132 cmake: predefine defaults depending on the system
381221a81 cmake: drop unused CMP0042 policy
99eade7cd cmake: respect indentation
dd6f7eaf8 texturing: add a test for GPU/CPU sync when creating textures
025e462ae util: fix multisample_texture_fs_template
f9e26b98b tests: add a test for GL_APPLE_sync
b24c834d9 ci: codespell ignore list is lowercase
0a842edd0 more spelling fixes accross the whole codebase
2c473ea73 ci: bump distribution tag
7cd28b970 arb_multisample: Fix bitwise-instead-of-logical warning
19e58247e ext_texture_storage: Fix memory leak on error path
d0b5d0c1f arb_internalformat_query2: fix internalformat selection for max_layers subtest
74064b1d4 arb_clear_texture: only test float depth textures when supported
9c941dfc3 properly check for libgen.h
c55e22a5c arb_copy_image-formats: avoid undefined behavior
537831d48 intel/ppgtt: Use getpagesize fallback with MinGW
b32186ee5 README: add Vulkan into the generic description
1e631479c fix arb_query_buffer_object-qbo to warn on invalid GS results instead of fail
62938a9bc tests: Fix cl test program@execute@builtin@builtin-float-degrees-1.0.generated issue about tolerance.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agometa/lib/oe/sstatesig.py: do not error out if sstate files fail on os.stat()
Alexander Kanavin [Tue, 27 Feb 2024 11:16:11 +0000 (12:16 +0100)] 
meta/lib/oe/sstatesig.py: do not error out if sstate files fail on os.stat()

There's an ongoing issue with the autobuilder NFS:
https://autobuilder.yoctoproject.org/typhoon/#/builders/87/builds/6463/steps/14/logs/stdio

The file entry exists, but os.stat returns a 'file not found; error. It's not
clear how and why such entries appear, but they do produce printdiff test failures
and should not be relevant in context of the printdiff.

[RP: Move wrapping to get_time() function to cover all cases and add comment]
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agocronie: add inotify PACKAGECONFIG option
Jonathan GUILLOT [Thu, 22 Aug 2024 15:24:49 +0000 (17:24 +0200)] 
cronie: add inotify PACKAGECONFIG option

By default, cronie inspects crontab modtimes every minute to check for
modications avoiding server restart for them to be taken in account. The
inotify option allows the server to use this mechanism to be directly
notified when a crontab is modified.

Signed-off-by: Jonathan GUILLOT <jonathan@joggee.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agowpa-supplicant: Upgrade 2.10 -> 2.11
Siddharth Doshi [Thu, 22 Aug 2024 16:17:21 +0000 (21:47 +0530)] 
wpa-supplicant: Upgrade 2.10 -> 2.11

License-Update:
===============
- README: Change in copyright years as per https://w1.fi/cgit/hostap/commit/README?id=d945ddd368085f255e68328f2d3b020ceea359af
- wpa_supplicant/wpa_supplicant.c: Change in copyright years as per https://w1.fi/cgit/hostap/commit/wpa_supplicant/wpa_supplicant.c?id=d945ddd368085f255e68328f2d3b020ceea359af

CVE's Fixed:
===========
- CVE-2024-5290 wpa_supplicant: wpa_supplicant loading arbitrary shared objects allowing privilege escalation
- CVE-2023-52160 wpa_supplicant: potential authorization bypass

Changes between 2.10 -> 2.11:
============================
https://w1.fi/cgit/hostap/commit/wpa_supplicant/ChangeLog?id=d945ddd368085f255e68328f2d3b020ceea359af

Note:
=====
Patches
0001-build-Re-enable-options-for-libwpa_client.so-and-wpa.patch,
0002-Fix-removal-of-wpa_passphrase-on-make-clean.patch,
0001-Install-wpa_passphrase-when-not-disabled.patch,
0001-PEAP-client-Update-Phase-2-authentication-requiremen.patch (CVE-2023-52160)
are already fixed and hence removing them.

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agognupg: 2.4.5 -> 2.5.0
hongxu [Fri, 23 Aug 2024 01:48:06 +0000 (09:48 +0800)] 
gnupg: 2.4.5 -> 2.5.0

Fix compile failure with musl

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoxmlto: 0.0.28 -> 0.0.29
hongxu [Fri, 23 Aug 2024 01:48:05 +0000 (09:48 +0800)] 
xmlto: 0.0.28 -> 0.0.29

* Do not tweak var-PV in recipe
* Rename variable BASH to XMLTO_BASH_PATH [1]

[1] https://pagure.io/xmlto/c/5030f081b0e2d94d791b62ee6da0831026cf57e0?branch=master

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibxslt: 1.1.39 -> 1.1.42
hongxu [Fri, 23 Aug 2024 01:48:04 +0000 (09:48 +0800)] 
libxslt: 1.1.39 -> 1.1.42

Remove mem-debug option [1]

[1] https://gitlab.gnome.org/GNOME/libxslt/-/commit/c65a7c05f98ea4e9fae1247510b45db9dd3ec907

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoreadline: 8.2 -> 8.2.13
hongxu [Fri, 23 Aug 2024 01:48:01 +0000 (09:48 +0800)] 
readline: 8.2 -> 8.2.13

Drop backport patches:
- readline82-001.patch ~ readline82-010.patch

Rebase norpath.patch to 8.2.13

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibxml2: 2.12.8 -> 2.13.3
hongxu [Fri, 23 Aug 2024 01:48:00 +0000 (09:48 +0800)] 
libxml2: 2.12.8 -> 2.13.3

* Remove Trio and updated Copyright to remove Trio [1]
* Remove --with-fexceptions configuration option [2]

[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/7d6969d95509a94347d6f96167ac5420abafa291
[2] https://gitlab.gnome.org/GNOME/libxml2/-/commit/e349709ae7e07a2183304ccc9352b6ac86f62a18

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoman-pages: 6.8 -> 6.9.1
hongxu [Fri, 23 Aug 2024 01:47:59 +0000 (09:47 +0800)] 
man-pages: 6.8 -> 6.9.1

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibgpg-error: 1.49 -> 1.50
hongxu [Fri, 23 Aug 2024 01:47:58 +0000 (09:47 +0800)] 
libgpg-error: 1.49 -> 1.50

* Rebase pkgconfig.patch
* No license change, just update copyright years:
  2001-2023 -> 2001-2024

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agorecipetool: create_npm: reuse license utils
Enguerrand de Ribaucourt [Mon, 12 Aug 2024 12:28:29 +0000 (14:28 +0200)] 
recipetool: create_npm: reuse license utils

create_npm.py duplicated the logic for matching licenses from files and
also finding them. This patch refactors the code to reuse the license
utils. This will make the code more maintainable and also align both
behaviors. For instance, some licenses weren't matched properly because
the duplicate logic did not support the difference in format in the md5
tables for COMMON_LICENSE_DIR and licenses.csv.

This is also faster since the license files were being read twice.
The result is slightly more accurate since the utils have better
implementations, and I was able to reuse the logic for the root PN
package, as well as the base LICENSE variable.

I chose to extract generate_common_licenses_chksums into create.py
since it can be considered a general utility function to allow
other recipetool creators to refer to COMMON_LICENSE_DIR files.

I updated the wording in the code when appropriate.

v3:
 - added commit
 - this replaces the commit that added all the COMMON_LICENSE_DIR md5
   to licenses.csv

Signed-off-by: Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@savoirfairelinux.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agorecipetool: create: split guess_license function
Enguerrand de Ribaucourt [Mon, 12 Aug 2024 12:28:28 +0000 (14:28 +0200)] 
recipetool: create: split guess_license function

The npm recipetool handler redefines the license code the could be
unified. In order to do this refactoring, extract the bits we'll
need into separate functions.

guess_license() is renamed to find_licenses() and is split into
find_license_files() and match_licenses().

Signed-off-by: Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@savoirfairelinux.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agorecipetool: create_npm: resolve licenses defined in package.json
Enguerrand de Ribaucourt [Mon, 12 Aug 2024 12:28:27 +0000 (14:28 +0200)] 
recipetool: create_npm: resolve licenses defined in package.json

Some npm packages do not copy the LICENSE or COPY file into their
git repository. They'll instead simply use SPDX identifiers in their
package.json. A fallback for those repositories attempted to match
the README file to a license file instead, which had a very low
probability of success.

This commit replaces this fallback with parsing the package.json and
looking for the license in COMMON_LICENSE_DIR. If the license is not
found, "Unknown" will still be produced.

This also generates "Unknown" for packages which had no README file,
which could silently not appear in the generated recipe. The user was
more likely to miss them.

Co-authored-by: Tanguy Raufflet <tanguy.raufflet@savoirfairelinux.com>
Signed-off-by: Tanguy Raufflet <tanguy.raufflet@savoirfairelinux.com>
Signed-off-by: Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@savoirfairelinux.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agonpm: accept unspecified versions in package.json
Enguerrand de Ribaucourt [Mon, 12 Aug 2024 12:28:26 +0000 (14:28 +0200)] 
npm: accept unspecified versions in package.json

Our current emulation mandates that the package.json contains a version
field. Some packages may not provide it when they are not published to
the registry. The actual `npm pack` would allow such packages, so
should we.

This patch adds a default value to allow building such packages.

This applies for instance to this package which doesn't declare a
version:
 - https://github.com/cockpit-project/cockpit/blob/23701a555a5af13f998ee4c7526d27fdb5669d63/package.json#L2

v3:
 - Split bitbake npmsw.py modification in another commit

Co-authored-by: Tanguy Raufflet <tanguy.raufflet@savoirfairelinux.com>
Signed-off-by: Tanguy Raufflet <tanguy.raufflet@savoirfairelinux.com>
Signed-off-by: Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@savoirfairelinux.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoshadow: upgrade from 4.15.1 to 4.16.0
Chen Qi [Thu, 22 Aug 2024 09:26:42 +0000 (02:26 -0700)] 
shadow: upgrade from 4.15.1 to 4.16.0

Upgrade shadow from 4.15.1 to 4.16.0.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoutil-linux/util-linux-libuuid: upgrade from 2.40.1 to 2.40.2
Chen Qi [Thu, 22 Aug 2024 09:26:41 +0000 (02:26 -0700)] 
util-linux/util-linux-libuuid: upgrade from 2.40.1 to 2.40.2

Upgrade util-linux from 2.40.1 to 2.40.2.

0001-Revert-autotools-make-pam-install-path-configurable.patch
is added to solve a problem of lastlog2 pam module not installed
in the expected location.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoscons.bbclass: Add scons class prefix to do_configure
Ola x Nilsson [Thu, 22 Aug 2024 08:18:16 +0000 (10:18 +0200)] 
scons.bbclass: Add scons class prefix to do_configure

While do_compile and do_install already have the scons_ prefix,
do_configure did not.  This was most likely an oversight from when it
was converted from do_configure[noexec] = "1".

Signed-off-by: Ola x Nilsson <olani@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agomesa: set PV from the .inc file and not via filenames
Alexander Kanavin [Thu, 22 Aug 2024 09:34:50 +0000 (11:34 +0200)] 
mesa: set PV from the .inc file and not via filenames

This allows automated updates of the recipe together with mesa-gl
variant, and avoids having to check that update submissions
do include mesa-gl file rename.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoxz: upgrade 5.4.6 -> 5.6.2
Alexander Kanavin [Thu, 22 Aug 2024 09:35:21 +0000 (11:35 +0200)] 
xz: upgrade 5.4.6 -> 5.6.2

This is the first post-backdoor release.

These are the release notes:
https://github.com/tukaani-project/xz/releases/

There are also backdoor notes:
https://tukaani.org/xz-backdoor/
"I plan to write an article how the backdoor got into the releases and
what can be learned from this." - that'd be most welcome, as it would
be first hand information that sets the record straight.

And there's a commit by commit review of Jia Tan's contributions:
https://tukaani.org/xz-backdoor/review.html

Add an option for landlock sandbox (off by default as it clashes with running under pseudo).

License-Update: public domain bits were relicensed under 0BSD license

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoxkeyboard-config: upgrade 2.41 -> 2.42
Alexander Kanavin [Thu, 22 Aug 2024 09:35:20 +0000 (11:35 +0200)] 
xkeyboard-config: upgrade 2.41 -> 2.42

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoweston: upgrade 13.0.1 -> 13.0.3
Alexander Kanavin [Thu, 22 Aug 2024 09:35:19 +0000 (11:35 +0200)] 
weston: upgrade 13.0.1 -> 13.0.3

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agowebkitgtk: upgrade 2.44.1 -> 2.44.3
Alexander Kanavin [Thu, 22 Aug 2024 09:35:18 +0000 (11:35 +0200)] 
webkitgtk: upgrade 2.44.1 -> 2.44.3

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agostress-ng: upgrade 0.17.08 -> 0.18.02
Alexander Kanavin [Thu, 22 Aug 2024 09:35:17 +0000 (11:35 +0200)] 
stress-ng: upgrade 0.17.08 -> 0.18.02

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agosqlite3: upgrade 3.45.3 -> 3.46.1
Alexander Kanavin [Thu, 22 Aug 2024 09:35:16 +0000 (11:35 +0200)] 
sqlite3: upgrade 3.45.3 -> 3.46.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-webcolors: upgrade 1.13 -> 24.8.0
Alexander Kanavin [Thu, 22 Aug 2024 09:35:15 +0000 (11:35 +0200)] 
python3-webcolors: upgrade 1.13 -> 24.8.0

License-Update: copyright years

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-uritools: upgrade 4.0.2 -> 4.0.3
Alexander Kanavin [Thu, 22 Aug 2024 09:35:14 +0000 (11:35 +0200)] 
python3-uritools: upgrade 4.0.2 -> 4.0.3

License-Update: copyright years

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-dtschema: upgrade 2024.4 -> 2024.5
Alexander Kanavin [Thu, 22 Aug 2024 09:35:13 +0000 (11:35 +0200)] 
python3-dtschema: upgrade 2024.4 -> 2024.5

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopuzzles: upgrade to latest revision
Alexander Kanavin [Thu, 22 Aug 2024 09:35:12 +0000 (11:35 +0200)] 
puzzles: upgrade to latest revision

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agonghttp2: upgrade 1.62.0 -> 1.62.1
Alexander Kanavin [Thu, 22 Aug 2024 09:35:11 +0000 (11:35 +0200)] 
nghttp2: upgrade 1.62.0 -> 1.62.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agomtools: upgrade 4.0.43 -> 4.0.44
Alexander Kanavin [Thu, 22 Aug 2024 09:35:10 +0000 (11:35 +0200)] 
mtools: upgrade 4.0.43 -> 4.0.44

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agompg123: upgrade 1.32.6 -> 1.32.7
Alexander Kanavin [Thu, 22 Aug 2024 09:35:09 +0000 (11:35 +0200)] 
mpg123: upgrade 1.32.6 -> 1.32.7

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolua: upgrade 5.4.6 -> 5.4.7
Alexander Kanavin [Thu, 22 Aug 2024 09:35:08 +0000 (11:35 +0200)] 
lua: upgrade 5.4.6 -> 5.4.7

License-Update: copyright years, formatting

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolinux-firmware: upgrade 20240513 -> 20240811
Alexander Kanavin [Thu, 22 Aug 2024 09:35:07 +0000 (11:35 +0200)] 
linux-firmware: upgrade 20240513 -> 20240811

License-Update: additional firmwares, new versions

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibva: upgrade 2.20.0 -> 2.22.0
Alexander Kanavin [Thu, 22 Aug 2024 09:35:06 +0000 (11:35 +0200)] 
libva: upgrade 2.20.0 -> 2.22.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibrepo: upgrade 1.17.0 -> 1.18.1
Alexander Kanavin [Thu, 22 Aug 2024 09:35:05 +0000 (11:35 +0200)] 
librepo: upgrade 1.17.0 -> 1.18.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibnl: upgrade 3.9.0 -> 3.10.0
Alexander Kanavin [Thu, 22 Aug 2024 09:35:04 +0000 (11:35 +0200)] 
libnl: upgrade 3.9.0 -> 3.10.0

Add a patch to disable a failing test that is proving difficult
to investigate.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibedit: upgrade 20240517-3.1 -> 20240808-3.1
Alexander Kanavin [Thu, 22 Aug 2024 09:35:03 +0000 (11:35 +0200)] 
libedit: upgrade 20240517-3.1 -> 20240808-3.1

history.3 manpage is no longer installed.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibadwaita: upgrade 1.5.2 -> 1.5.3
Alexander Kanavin [Thu, 22 Aug 2024 09:35:02 +0000 (11:35 +0200)] 
libadwaita: upgrade 1.5.2 -> 1.5.3

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agokmscube: upgrade to latest revision
Alexander Kanavin [Thu, 22 Aug 2024 09:35:01 +0000 (11:35 +0200)] 
kmscube: upgrade to latest revision

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agokmod: upgrade 32 -> 33
Alexander Kanavin [Thu, 22 Aug 2024 09:35:00 +0000 (11:35 +0200)] 
kmod: upgrade 32 -> 33

Disable manpages, as they require scdoc, which is not currently
available in core (and adjust a related selftest).

Drop 0001-Use-portable-implementation-for-basename-API.patch
as upstream fixed the issue differently.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agogstreamer1.0: upgrade 1.24.5 -> 1.24.6
Alexander Kanavin [Thu, 22 Aug 2024 09:34:59 +0000 (11:34 +0200)] 
gstreamer1.0: upgrade 1.24.5 -> 1.24.6

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoepiphany: upgrade 46.0 -> 46.3
Alexander Kanavin [Thu, 22 Aug 2024 09:34:58 +0000 (11:34 +0200)] 
epiphany: upgrade 46.0 -> 46.3

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoe2fsprogs: upgrade 1.47.0 -> 1.47.1
Alexander Kanavin [Thu, 22 Aug 2024 09:34:57 +0000 (11:34 +0200)] 
e2fsprogs: upgrade 1.47.0 -> 1.47.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agodpkg: upgrade 1.22.10 -> 1.22.11
Alexander Kanavin [Thu, 22 Aug 2024 09:34:56 +0000 (11:34 +0200)] 
dpkg: upgrade 1.22.10 -> 1.22.11

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agocmake: upgrade 3.30.1 -> 3.30.2
Alexander Kanavin [Thu, 22 Aug 2024 09:34:55 +0000 (11:34 +0200)] 
cmake: upgrade 3.30.1 -> 3.30.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoccache: upgrade 4.10.1 -> 4.10.2
Alexander Kanavin [Thu, 22 Aug 2024 09:34:54 +0000 (11:34 +0200)] 
ccache: upgrade 4.10.1 -> 4.10.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoboost: upgrade 1.85.0 -> 1.86.0
Alexander Kanavin [Thu, 22 Aug 2024 09:34:53 +0000 (11:34 +0200)] 
boost: upgrade 1.85.0 -> 1.86.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agobash: upgrade 5.2.21 -> 5.2.32
Alexander Kanavin [Thu, 22 Aug 2024 09:34:52 +0000 (11:34 +0200)] 
bash: upgrade 5.2.21 -> 5.2.32

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agosysvinit: take release tarballs from github
Alexander Kanavin [Thu, 22 Aug 2024 09:34:51 +0000 (11:34 +0200)] 
sysvinit: take release tarballs from github

Upstream no longer publishes them on savannah, e.g.
release announcement for 3.10:
https://lists.gnu.org/archive/html/sysvinit-devel/2024-07/msg00016.html

There's been several new versions since:
https://github.com/slicer69/sysvinit/releases

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoweston-init: fix weston not starting when xwayland is enabled
Quentin Schulz [Wed, 21 Aug 2024 09:15:56 +0000 (11:15 +0200)] 
weston-init: fix weston not starting when xwayland is enabled

When xwayland PACKAGECONFIG option is set, xwayland is enabled in
weston.ini. However, if the xwayland module isn't installed, weston will
refuse to start with the following error message:
Failed to load module: /usr/lib/libweston-13/xwayland.so: cannot open shared object file: No such file or directory

Therefore, whenever the xwayland PACKAGECONFIG is set, weston-init
should depend on weston-xwayland to bring this module in.

Fixes: fdbe559c66c9 ("weston.init: enabled xwayland")
Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agomesa: Fix build with etnaviv gallium driver
Esben Haabendal [Wed, 21 Aug 2024 11:42:24 +0000 (13:42 +0200)] 
mesa: Fix build with etnaviv gallium driver

As of mesa version 24.1.0, the etnaviv gallium driver requires the Python
pycparser module when building.

Without it, build fails with something like:

../mesa-24.1.4/src/etnaviv/hwdb/meson.build:17:2: ERROR: Problem encountered: Python (3.x) pycparser module >= 2.20 required to build mesa.

Signed-off-by: Esben Haabendal <esben@geanix.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoptest-runner: Update 2.4.4 -> 2.4.5
Jörg Sommer [Wed, 21 Aug 2024 12:13:54 +0000 (14:13 +0200)] 
ptest-runner: Update 2.4.4 -> 2.4.5

Changelog:

aea9f42 ptest_list_remove: Fix pointer adjustment of prev and next

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoutil-linux: Add PACKAGECONFIG option to mitigate rootfs remount error
Niko Mauno [Wed, 21 Aug 2024 14:07:46 +0000 (14:07 +0000)] 
util-linux: Add PACKAGECONFIG option to mitigate rootfs remount error

The 2.39 version of util-linux took new file descriptors based mount
kernel API into use. In relation to this change, the upstream release
notes in
https://github.com/util-linux/util-linux/blob/v2.39/Documentation/releases/v2.39-ReleaseNotes#L14-L21
mention that

  This change is very aggressive to libmount code, but hopefully, it does not introduce regressions in traditional mount(8) behavior.

After observing following failure when booting a board using a bit
older 6.1 series kernel together with initramfs rootfs based boot flow

  [FAILED] Failed to start Remount Root and Kernel File Systems.
  See 'systemctl status systemd-remount-fs.service' for details.

closer inspection revealed:

  demoboard ~ # systemctl status -l systemd-remount-fs.service
  x systemd-remount-fs.service - Remount Root and Kernel File Systems
       Loaded: loaded (/usr/lib/systemd/system/systemd-remount-fs.service; enabled-runtime; preset: disabled)
       Active: failed (Result: exit-code) since Wed 2024-08-14 14:53:48 UTC; 1min 22s ago
         Docs: man:systemd-remount-fs.service(8)
               https://www.freedesktop.org/wiki/Software/systemd/APIFileSystems
      Process: 76 ExecStart=/usr/lib/systemd/systemd-remount-fs (code=exited, status=1/FAILURE)
     Main PID: 76 (code=exited, status=1/FAILURE)

  Aug 14 14:53:48 demoboard systemd-remount-fs[76]: /usr/bin/mount for / exited with exit status 32.
  Aug 14 14:53:48 demoboard systemd-remount-fs[81]: mount: /: mount point not mounted or bad option.
  Aug 14 14:53:48 demoboard systemd-remount-fs[81]:        dmesg(1) may have more information after failed mount system call.
  Aug 14 14:53:48 demoboard systemd[1]: systemd-remount-fs.service: Main process exited, code=exited, status=1/FAILURE
  Aug 14 14:53:48 demoboard systemd[1]: systemd-remount-fs.service: Failed with result 'exit-code'.
  Aug 14 14:53:48 demoboard systemd[1]: Failed to start Remount Root and Kernel File Systems.

also consequentially, 'systemctl status' reported:

  State: degraded

When issuing 'strace -ff mount -o remount /' the failure occurred at

  mount_setattr(3, "", AT_EMPTY_PATH, {attr_set=MOUNT_ATTR_RDONLY|MOUNT_ATTR_NOATIME|MOUNT_ATTR_NODIRATIME, attr_clr=MOUNT_ATTR_NOSUID|MOUNT_ATTR_NODEV|MOUNT_ATTR_NOEXEC|MOUNT_ATTR_NOATIME|MOUNT_ATTR_STRICTATIME|MOUNT_ATTR_NOSYMFOLLOW|0x40, propagation=0 /* MS_??? */, userns_fd=0}, 32) = -1 EINVAL (Invalid argument)

After further investigation, The issue was pinpointed to lack of Linux
kernel commit
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=95de4ad173ca0e61034f3145d66917970961c210
("fs: relax mount_setattr() permission checks") in the kernel version
that was being used. Above mitigation was discussed in email related to
then-rejected CVE-2024-26821:
https://lore.kernel.org/linux-cve-announce/2024051606-imaging-entrench-b327@gregkh/T/

After testing with qemuarm64 machine different linux-yocto versions,
it was observed that the issue impacts following versions of currently
supported LTS kernels:
 - 6.6.17 (fixed since 6.6.18 i.e. mount_setattr() returns 0)
 - 6.1.78 (fixed since 6.1.79 i.e. mount_setattr() returns 0)
 - 5.15.164 which is currently the newest of 5.15.y series (i.e. no
   known working version)

Taking the above findings into consideration, add a new PACKAGECONFIG
option removing which enables users to opt-out from using the feature
which can cause issues with a bit older kernels. The option is enabled
only for class-target here, since it otherwise causes following error
during util-linux-native's do_configure task on Debian 11 build host
(mountfd_api requirement fails):

   | configure: error: libmount_mountfd_support selected, but required mount FDs based API not available

Versions 5.10.223, 5.4.279 and 4.10.317 were also tested with qemuarm64
but the issue was not reproduced with those versions - using strace
showed that the mount_setattr call associated with the new mount API
problem was not issued with these LTS kernel versions, which seemed to
be confirmed also by following libmount debug message in these cases:

  415: libmount:     HOOK: [0x7fa115e818]: failed to init new API

Note: In addition to the aforementioned, this change was tested also
briefly using the current latest kernel versions 6.1.104, 6.6.45 and
6.10.3 that using the old mount API with newest kernels did not
introduce any observable regression to the boot flow.

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agooeqa/runtime/ssh: increase the number of attempts
Jon Mason [Thu, 22 Aug 2024 15:09:55 +0000 (11:09 -0400)] 
oeqa/runtime/ssh: increase the number of attempts

Under high load, the ssh test is hitting the amount of retries.
Increase it to 20 to avoid this issue.  This would increase the maximum
failure time from 50 seconds (5 * 10) to 100 seconds.

Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agovim: Upgrade 9.1.0114 -> 9.1.0682
Siddharth Doshi [Tue, 20 Aug 2024 09:21:42 +0000 (14:51 +0530)] 
vim: Upgrade 9.1.0114 -> 9.1.0682

This includes CVE-fix for CVE-2024-41957, CVE-2024-41965 and CVE-2024-43374

Changes between 9.1.0114 -> 9.1.0682
====================================
https://github.com/vim/vim/compare/v9.1.0114...v9.1.0682

Note:
====
Removed patch "vim-add-knob-whether-elf.h-are-checked.patch" as libelf checks are removed from configure.ac as per
commit https://github.com/vim/vim/commit/1acc67ac4412aa9a75d1c58ebf93f2b29585a960

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agosystemd: upgrade 256.4 -> 256.5
Wang Mingyu [Tue, 20 Aug 2024 08:30:44 +0000 (16:30 +0800)] 
systemd: upgrade 256.4 -> 256.5

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoxwayland: upgrade 24.1.1 -> 24.1.2
Wang Mingyu [Tue, 20 Aug 2024 06:51:43 +0000 (14:51 +0800)] 
xwayland: upgrade 24.1.1 -> 24.1.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agottyrun: upgrade 2.33.1 -> 2.34.0
Wang Mingyu [Tue, 20 Aug 2024 06:51:42 +0000 (14:51 +0800)] 
ttyrun: upgrade 2.33.1 -> 2.34.0

Changes of existing tools:
- ap_tools/ap-check: Add support for vfio-ap dynamic configuration
- dbginfo.sh: Update/Add additional DASD data collection
- dumpconf: Add new parameter 'SCP_DATA' for SCSI/NVMe/ECKD dump
  devices
- libutil: Make formatted meta-data configurable
- s390-tools: Replace 'which' with built-in 'command -v'
- zdump/dfi_elf: Support core dumps of vr-kernels

Bug Fixes:
- chzdev: Fix warning about failed ATTR writes by udev
- rust/pv: Try again if first CRL-URI is invalid
- rust/pvattest: Add short option for --arpk
- zdump: Fix 'zgetdump -i' ioctl error on s390 formatted dump file

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agosysklogd: upgrade 2.6.0 -> 2.6.1
Wang Mingyu [Tue, 20 Aug 2024 06:51:40 +0000 (14:51 +0800)] 
sysklogd: upgrade 2.6.0 -> 2.6.1

Changelog:
===========
- Read '.conf' files from include directories sorted alphabetically
- Add extra linefeed to wall messages to ensure they are seen
- Issue #87: segfault on 'SIGTERM', regression from v2.6.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agorpcbind: upgrade 1.2.6 -> 1.2.7
Wang Mingyu [Tue, 20 Aug 2024 06:51:39 +0000 (14:51 +0800)] 
rpcbind: upgrade 1.2.6 -> 1.2.7

0001-systemd-use-EnvironmentFile.patch
refreshed for 1.2.7

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-setuptools: upgrade 72.1.0 -> 72.2.0
Wang Mingyu [Tue, 20 Aug 2024 06:51:38 +0000 (14:51 +0800)] 
python3-setuptools: upgrade 72.1.0 -> 72.2.0

Changelog:
- Support for Pathlike objects in data files and extensions
- native support for C++ compilers
- removed unused get_msvcr()

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-lxml: upgrade 5.2.2 -> 5.3.0
Wang Mingyu [Tue, 20 Aug 2024 06:51:37 +0000 (14:51 +0800)] 
python3-lxml: upgrade 5.2.2 -> 5.3.0

Changelog:
===========
* GH#421: Nested "CDATA" sections are no longer rejected but split on
  output to represent "]]>" correctly.
* LP#2060160: Attribute values serialised differently in "xmlfile.element()"
  and "xmlfile.write()".
* LP#2058177: The ISO-Schematron implementation could fail on unknown prefixes.
* LP#2067707: The "strip_cdata" option in "HTMLParser()" turned out
  to be useless and is now deprecated.
* Binary wheels use the library versions libxml2 2.12.9 and libxslt 1.1.42.
* Windows binary wheels use the library versions libxml2 2.11.8 and libxslt 1.1.39.
* Built with Cython 3.0.11.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-hypothesis: upgrade 6.110.1 -> 6.111.1
Wang Mingyu [Tue, 20 Aug 2024 06:51:36 +0000 (14:51 +0800)] 
python3-hypothesis: upgrade 6.110.1 -> 6.111.1

Changelog:
==========
-improves shrinking in cases involving 'slips' from one strategy to another.
-reduces the range of :class:'python:datetime.datetime' generated by :
 func:'~hypothesis.extra.django.from_model' in order to avoid
 https://code.djangoproject.com/ticket/35683.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-babel: upgrade 2.15.0 -> 2.16.0
Wang Mingyu [Tue, 20 Aug 2024 06:51:35 +0000 (14:51 +0800)] 
python3-babel: upgrade 2.15.0 -> 2.16.0

Changelog:
=========
- CLDR: Upgrade to CLDR 45
- Lists: Support list format fallbacks
- Messages: Initial support for reading mapping configuration as TOML
- CLDR: Do not allow substituting alternates or drafts in derived locales
- Core: Allow falling back to modifier-less locale data
- Core: Allow use of importlib.metadata for finding entrypoints
- Dates: Avoid crashing on importing localtime when TZ is malformed
- Messages: Allow parsing .po files that have an extant but empty Language
  header
- Messages: Fix --ignore-dirs being incorrectly read
- Messages: Make pgettext search plurals when translation is not found
- Replace deprecated ast.Str with ast.Constant
- Test on Python 3.13 beta releases
- Normalize package name to lower-case in setup.py
- Add a mention to the docs that format_skeleton(..., fuzzy=True) may
  raise
- Two hyperlinks (to CLDR) and some typos

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopkgconf: upgrade 2.2.0 -> 2.3.0
Wang Mingyu [Tue, 20 Aug 2024 06:51:34 +0000 (14:51 +0800)] 
pkgconf: upgrade 2.2.0 -> 2.3.0

Changelog:
==========
* Fix compile with Meson on Solaris by defining __EXTENSIONS__.
* Add support for the PKG_CONFIG_RELOCATE_PATHS environmental variable.
  When set, the program will act as if --define-prefix is always
  enabled.
* Color solution nodes that were part of the original query, and use
  that coloring to skip over dependencies when generating DocumentNames
  in bomtool.
* Enhance --env option to support variables with both --variable=varname
  and --print-variables.
* Add --exists-cflags option which creates synthetic preprocessor
  definition flags for every queried dependency when found.
* Document that Requires.private is always used for header paths.
* Fix minor documentation typos.
* Ensure string comparisons using <ctype.h> functions are done with
  unsigned bytes to avoid undefined behavior.
* Fix parsing edge-case bugs with dependency versions.
* Change PKG_PROG_PKG_CONFIG autoconf macro to add a customizable
  failure handler if pkg-config is not found.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibxtst: upgrade 1.2.4 -> 1.2.5
Wang Mingyu [Tue, 20 Aug 2024 06:51:33 +0000 (14:51 +0800)] 
libxtst: upgrade 1.2.4 -> 1.2.5

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibxfont2: upgrade 2.0.6 -> 2.0.7
Wang Mingyu [Tue, 20 Aug 2024 06:51:32 +0000 (14:51 +0800)] 
libxfont2: upgrade 2.0.6 -> 2.0.7

License-Update: Copyright year updated to 2019.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibx11: upgrade 1.8.9 -> 1.8.10
Wang Mingyu [Tue, 20 Aug 2024 06:51:31 +0000 (14:51 +0800)] 
libx11: upgrade 1.8.9 -> 1.8.10

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agofreetype: upgrade 2.13.2 -> 2.13.3
Wang Mingyu [Tue, 20 Aug 2024 06:51:28 +0000 (14:51 +0800)] 
freetype: upgrade 2.13.2 -> 2.13.3

Changelog:
==========
- Some  fields  in  the  'FT_Outline' structure  have been   changed
  from signed  to unsigned type,  which  better reflects  the actual
  usage.
- Rare double-free crashes in the cache subsystem have been fixed.
- Excessive stack allocation in the autohinter has been fixed.
- The B/W  rasterizer has  received a major  upkeep that  results in
  large performance improvements.
- If the new configuration option 'TT_CONFIG_OPTION_GPOS_KERNING' is
  defined,  'FT_Get_Kerning'  understands rudimentary  GPOS  kerning
  (for TrueType fonts  only).
- The internal structures  'PS_DesignMap' and 'PS_Blend' related  to
  parsing of old Multiple Masters fonts  have been removed  from the
  public header file 't1tables.h'.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoethtool: upgrade 6.9 -> 6.10
Wang Mingyu [Tue, 20 Aug 2024 06:51:27 +0000 (14:51 +0800)] 
ethtool: upgrade 6.9 -> 6.10

avoid_parallel_tests.patch
refreshed for 6.10

Changelog:
==========
* Feature: suport for PoE in PSE (--show-pse and --set-pse)
* Feature: add statistics support to tsinfo (-T)
* Feature: add JSON output to base command (no option)
* Feature: add JSON output to EEE info (--show-eee)
* Fix: qsfp: better handling on page 03h read failure (-m)
* Fix: handle zero arguments for module eeprom dump (-m)
* Fix: check for missing arguments in do_srxfh() (-X)
* Misc: compiler warnings in "make check"
* Misc: more descriptive error when JSON output is not available

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoerofs-utils: upgrade 1.7.1 -> 1.8.1
Wang Mingyu [Tue, 20 Aug 2024 06:51:26 +0000 (14:51 +0800)] 
erofs-utils: upgrade 1.7.1 -> 1.8.1

Changelog:
==========
- fix unexpected data truncation of large uncompressed files;
- fix decompression errors when using libdeflate compressor;
- fix an out-of-bound memory read issue with kite-deflate.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoenchant2: upgrade 2.8.1 -> 2.8.2
Wang Mingyu [Tue, 20 Aug 2024 06:51:25 +0000 (14:51 +0800)] 
enchant2: upgrade 2.8.1 -> 2.8.2

Changelog:
- fixes a crash when using Hspell to check Hebrew, when the
  application passes characters that cannot be mapped to ISO-8859-8.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agodnf: upgrade 4.21.0 -> 4.21.1
Wang Mingyu [Tue, 20 Aug 2024 06:51:24 +0000 (14:51 +0800)] 
dnf: upgrade 4.21.0 -> 4.21.1

0005-Do-not-prepend-installroot-to-logdir.patch
refreshed for 4.21.1

Changelog:
==========
- doc: minor formatting and consistency fixes
- Allow local downloads to same downloaddir
- Fix "console" width on non real terminals (pipe)
- Adds checks for container and bootc hosts
- Update bootc hosts message to point to bootc --help
- tests: Use PGP keys without SHA-

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agodiffoscope: upgrade 272 -> 276
Wang Mingyu [Tue, 20 Aug 2024 06:51:23 +0000 (14:51 +0800)] 
diffoscope: upgrade 272 -> 276

Changelog:
=========
* Also catch RuntimeError when importing PyPDF so that PyPDF or,
  crucially, its transitive dependencies do not cause diffoscope to traceback at
  runtime and build time.
* Factor out a method for stripping ANSI escapes.
* Strip ANSI escapes from the output of Procyon.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agocreaterepo-c: upgrade 1.1.3 -> 1.1.4
Wang Mingyu [Tue, 20 Aug 2024 06:51:22 +0000 (14:51 +0800)] 
createrepo-c: upgrade 1.1.3 -> 1.1.4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agobtrfs-tools: upgrade 6.9.2 -> 6.10.1
Wang Mingyu [Tue, 20 Aug 2024 06:51:21 +0000 (14:51 +0800)] 
btrfs-tools: upgrade 6.9.2 -> 6.10.1

0001-Add-a-possibility-to-specify-where-python-modules-ar.patch
refreshed for 6.10.1

Changelog:
==========
* mkfs: rework --rootdir traversal, skip hardlinks and create new
  inodes instead, also warn about them, this did not work as expected and will be
  fixed in the future
* receive: search in older trees for UUIDs when detecting clone sources
* libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
* libbtrfs:
  * patchlevel version update 0.1.4
  * cleanup in headers, removed unused definitions, no functional changes
  * don't ship list.h and rbtree.h
* other:
  * documentation updates

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agobinutils: upgrade 2.43 -> 2.43.1
Wang Mingyu [Tue, 20 Aug 2024 06:51:20 +0000 (14:51 +0800)] 
binutils: upgrade 2.43 -> 2.43.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolicense_image.bbclass: Rename license-incompatible to license-exception
Peter Kjellerstedt [Mon, 12 Aug 2024 20:15:39 +0000 (22:15 +0200)] 
license_image.bbclass: Rename license-incompatible to license-exception

There is currently both an incompatible-license and a
license-incompatible QA message. This is very confusing.
However, license-incompatible is only used to output a message when a
package is included in an image despite it having a license that is
normally incompatible (by using the INCOMPATIBLE_LICENSE_EXCEPTIONS
variable). To better match how it is used and to distinguish it from
incompatible-license, rename it to license-exception.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoselftest: add test_product_match
Marta Rybczynska [Wed, 14 Aug 2024 05:30:41 +0000 (07:30 +0200)] 
selftest: add test_product_match

CVECheck.test_product_match tests has_cve_product_match()

Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agocve-check-map: add new statuses
Marta Rybczynska [Wed, 14 Aug 2024 05:30:40 +0000 (07:30 +0200)] 
cve-check-map: add new statuses

Add 'fix-file-included', 'version-not-in-range' and 'version-in-range' generated
by the cve-check.

'fix-file-included' means that a fix file for the CVE has been located.

'version-not-in-range' means that the product version has been found outside of
the vulnerable range.

'version-in-range' means that the product version has been found inside of the
vulnerable range.

Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agovex.bbclass: add a new class
Marta Rybczynska [Wed, 14 Aug 2024 05:30:39 +0000 (07:30 +0200)] 
vex.bbclass: add a new class

The "vex" class generates the minimum information that is necessary
for VEX generation by an external CVE checking tool. It is a drop-in
replacement of "cve-check". It uses the same variables from recipes
to make the migration and backporting easier.

The goal of this class is to allow generation of the CVE list of
an image or distribution on-demand, including the latest information
from vulnerability databases. Vulnerability data changes every day,
so a status generated at build becomes out-of-date very soon.

Research done for this work shows that the current VEX formats (CSAF
and OpenVEX) do not provide enough information to generate such
rolling information. Instead, we extract the needed data from recipe
annotations (package names, CPEs, versions, CVE patches applied...)
and store for later use in the format that is an extension of the
CVE-check JSON output format.

This output can be then used (separately or with SPDX of the same
build) by an external tool to generate the vulnerability annotation
and VEX statements in standard formats.

Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agocve_check: Update selftest with new status detail
Samantha Jalabert [Wed, 14 Aug 2024 05:30:38 +0000 (07:30 +0200)] 
cve_check: Update selftest with new status detail

Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com>
Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agocve-check: annotate CVEs during analysis
Marta Rybczynska [Wed, 14 Aug 2024 05:30:37 +0000 (07:30 +0200)] 
cve-check: annotate CVEs during analysis

Add status information for each CVE under analysis.

Previously the information passed between different function of the
cve-check class included only tables of patched, unpatched, ignored
vulnerabilities and the general status of the recipe.

The VEX work requires more information, and we need to pass them
between different functions, so that it can be enriched as the
analysis progresses. Instead of multiple tables, use a single one
with annotations for each CVE encountered. For example, a patched
CVE will have:

{"abbrev-status": "Patched", "status": "version-not-in-range"}

abbrev-status contains the general status (Patched, Unpatched,
Ignored and Unknown that will be added in the VEX code)
status contains more detailed information that can come from
CVE_STATUS and the analysis.

Additional fields of the annotation include for example the name
of the patch file fixing a given CVE.

We also use the annotation in CVE_STATUS to filter out entries
that do not apply to the given recipe

Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agocve-extra-inclusions: encode CPEs of affected packages
Marta Rybczynska [Wed, 14 Aug 2024 05:30:36 +0000 (07:30 +0200)] 
cve-extra-inclusions: encode CPEs of affected packages

Add the new cpe:vendor:product tagging to entries in cve-extra-inclusions, using
product/vendor combinations that are already present in OE-core (usually there
is no specific vendor).

Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agocve-check: encode affected product/vendor in CVE_STATUS
Marta Rybczynska [Wed, 14 Aug 2024 05:30:35 +0000 (07:30 +0200)] 
cve-check: encode affected product/vendor in CVE_STATUS

CVE_STATUS contains assesment of a given CVE, but until now it didn't have
include the affected vendor/product. In the case of a global system include,
that CVE_STATUS was visible in all recipes.

This patch allows encoding of affected product/vendor to each CVE_STATUS
assessment, also for groups. We can then filter them later and use only
CVEs that correspond to the recipe.

This is going to be used in meta/conf/distro/include/cve-extra-exclusions.inc
and similar places.

Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agolibsdl2: upgrade 2.30.5 -> 2.30.6
Yi Zhao [Fri, 16 Aug 2024 12:34:29 +0000 (20:34 +0800)] 
libsdl2: upgrade 2.30.5 -> 2.30.6

ChangeLog:
* Improved detection of Nintendo Switch Pro controller report mode
* Fixed a rare crash when a controller is disconnected
* Fixed creating a framebuffer with KMSDRM on some systems

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopopulate_sdk_base: inherit nopackages
Martin Jansa [Fri, 16 Aug 2024 19:37:52 +0000 (21:37 +0200)] 
populate_sdk_base: inherit nopackages

Since this bbclass sets PACKAGES = "", inherit the nopackages
class to skip the various packaging functions which wouldn't
do anything anyway.

This fixes errors from buildhistory changes where packages-split would be empty.

e.g. meta-toolchain build now fails with:
| DEBUG: Executing shell function buildhistory_list_pkg_files
| find: ".../meta-toolchain/1.0/packages-split/*": No such file or directory
| WARNING: exit code 1 from a shell command.
| DEBUG: Python function buildhistory_emit_pkghistory finished

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agorust: Upgrade 1.77.2->1.78.0
Yash Shinde [Fri, 16 Aug 2024 15:54:11 +0000 (08:54 -0700)] 
rust: Upgrade 1.77.2->1.78.0

* Drop the following backported patches which are merged
with rust v1.78 upgrade.

- 0001-Revert-Map-source-absolute-paths-to-OUT_DIR-as-relat.patch
- repro-issue-fix-with-v175.patch
- deadcode-backport.patch

https://blog.rust-lang.org/2024/05/02/Rust-1.78.0.html

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agorust: Oe-selftest changes for rust v1.78
Yash Shinde [Fri, 16 Aug 2024 15:54:10 +0000 (08:54 -0700)] 
rust: Oe-selftest changes for rust v1.78

Add some of the upsupported/failing tests to the exclude list
and ignore the failing unit tests.

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agometa-world-pkgdata: Inherit nopackages
Martin Jansa [Thu, 15 Aug 2024 13:36:43 +0000 (15:36 +0200)] 
meta-world-pkgdata: Inherit nopackages

Since this is a recipe with PACKAGES = "", inherit the nopackages
class to skip the various packaging functions which wouldn't do anything anyway.

This fixes errors from buildhistory changes where packages-split would be empty.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3: skip readline limited history tests
Trevor Gamblin [Wed, 14 Aug 2024 18:27:20 +0000 (14:27 -0400)] 
python3: skip readline limited history tests

Python 3.12.5 is failing a newer ptest for reading/writing limited
history when editline (default) is set in PACKAGECONFIG. Skip it for now
until a proper fix (if any) is determined.

A bug has been opened upstream: https://github.com/python/cpython/issues/123018

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3: upgrade 3.12.4 -> 3.12.5
Trevor Gamblin [Fri, 9 Aug 2024 12:22:15 +0000 (08:22 -0400)] 
python3: upgrade 3.12.4 -> 3.12.5

Changelog: https://docs.python.org/release/3.12.5/whatsnew/changelog.html

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agokernel.bbclass: remove unused CMDLINE_CONSOLE
Jon Mason [Wed, 14 Aug 2024 19:59:18 +0000 (15:59 -0400)] 
kernel.bbclass: remove unused CMDLINE_CONSOLE

CMDLINE_CONSOLE appears to be a legacy variable that is unused anywhere,
and has not been modified the creation of the git tree.  Remove it and
make life simpler.

Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython_flit_core: remove python3 dependency
Konrad Weihmann [Tue, 13 Aug 2024 10:53:57 +0000 (10:53 +0000)] 
python_flit_core: remove python3 dependency

as this is correctly set by setuptools3-base already

Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-setuptools-rust: upgrade 1.9.0 -> 1.10.1
Tim Orling [Tue, 13 Aug 2024 16:33:02 +0000 (09:33 -0700)] 
python3-setuptools-rust: upgrade 1.9.0 -> 1.10.1

* Set PYPI_PACKAGE = "setuptools_rust"
* Cleanup SRC_URI as we do not need old tarball link anymore
  and PYPI_SRCURI should be the default.

https://github.com/PyO3/setuptools-rust/compare/v1.9.0...v1.10.1

1.10.1 (2024-08-04)
  * Fixed
    - Fix regression in 1.10.0 where editable builds would be built in
  release mode

1.10.0 (2024-08-03)
  * Packaging
    - Extend macOS build flags to iOS, tvOS and watchOS. #436
    - Support Python 3.13. #446
  * Changed
    - Add SETUPTOOLS_RUST_PEP517_USE_BASE_PYTHON environment variable to use
  the base interpreter path when running inside a virtual environment to
  avoid recompilation when switching between virtual environments. #429
    - Delay import of dependencies until use to avoid import errors during a
  partially complete install when multiple packages are installing at
  once. #437
    - Deprecate --build-temp argument to build_rust command (it does
  nothing). #457

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-attrs: upgrade 23.2.0 -> 24.2.0
Tim Orling [Tue, 13 Aug 2024 16:01:44 +0000 (09:01 -0700)] 
python3-attrs: upgrade 23.2.0 -> 24.2.0

* Drop 0001-test_funcs-skip-test_unknown-for-pytest-8.patch
  fixed upstream in https://github.com/python-attrs/attrs/pull/1249
* Drop 0001-conftest.py-disable-deadline.patch upstream wanted to try
  doubling the deadline time https://github.com/python-attrs/attrs/pull/1252
  from 200 ms default to 400 ms (we saw some times a bit greater than 200 ms)

https://www.attrs.org/en/stable/changelog.html

24.2.0 - 2024-08-06
  * Deprecations
    - Given the amount of warnings raised in the broader ecosystem, we’ve
  decided to only soft-deprecate the hash argument to @define / @attr.s.
  Please don’t use it in new code, but we don’t intend to remove it
  anymore. #1330

  * Changes
    - attrs.converters.pipe() (and its syntactic sugar of passing a list
  for attrs.field()’s / attr.ib()’s converter argument) works again when
  passing attrs.setters.convert to on_setattr (which is default for
  attrs.define). #1328
    - Restored support for PEP 649 / 749-implementing Pythons â€“ currently
  3.14-dev. #1329

24.1.0 - 2024-08-03
  * Backwards-incompatible Changes
    - attrs.evolve() doesn’t accept the inst argument as a keyword argument
  anymore. Pass it as the first positional argument instead. #1264
    - attrs.validators.provides() has been removed. The removed code is
  available as a gist for convenient copy and pasting. #1265
    - All packaging metadata except from __version__ and __version_info__
  has been removed from the attr and attrs modules (for example,
  attrs.__url__).
    - Please use importlib.metadata or importlib-metadata instead. #1268
    - The generated __eq__ methods have been sped up significantly by
  generating a chain of attribute comparisons instead of constructing and
  comparing tuples. This change arguably makes the behavior more correct,
  but changes it if an attribute compares equal by identity but not value,
  like float('nan'). #1310

  * Deprecations
    - The repr_ns argument to attr.s is now deprecated. It was a workaround
  for nested classes in Python 2 and is pointless in Python 3. #1263
    - The hash argument to @attr.s, @attrs.define, and make_class() is now
  deprecated in favor of unsafe_hash, as defined by PEP 681. #1323

  * Changes
    - Allow original slotted functools.cached_property classes to be cleaned
  by garbage collection. Allow super() calls in slotted cached properties.
  #1221
    - Our type stubs now use modern type notation and are organized such that
  VS Code’s quick-fix prefers the attrs namespace. #1234
    - Preserve AttributeError raised by properties of slotted classes with
  functools.cached_properties. #1253
    - It is now possible to wrap a converter into an attrs.Converter and get
  the current instance and/or the current field definition passed into the
  converter callable.
    - Note that this is not supported by any type checker, yet. #1267
    - attrs.make_class() now populates the __annotations__ dict of the
  generated class, so that attrs.resolve_types() can resolve them. #1285
    - Added the attrs.validators.or_() validator. #1303
    - The combination of a __attrs_pre_init__ that takes arguments, a kw-only
  field, and a default on that field does not crash anymore. #1319
    - attrs.validators.in_() now transforms certain unhashable options to
  tuples to keep the field hashable.
    - This allows fields that use this validator to be used with, for example,
  attrs.filters.include(). #1320
    - If a class has an inherited method called __attrs_init_subclass__, it
  is now called once the class is done assembling.
    - This is a replacement for Python’s __init_subclass__ and useful for
  registering classes, and similar. #1321

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agosystemd: update from 256 to 256.4
Mikko Rapeli [Tue, 13 Aug 2024 13:19:13 +0000 (16:19 +0300)] 
systemd: update from 256 to 256.4

Changes:

566210c272 meson: Bump version to 256.4
16de138427 mkosi: update debian commit reference
b731debea9 hwdb: update to main@{2024-07-24}
a78a524652 add udev rules for trezor hw wallet devices
b825a8be0b core: reliably check if varlink socket has been deserialized
83c9043727 mkosi: Bump device timeout even more
e60d01bdbf man/systemd-repart: extend description and reword some sentences
766af3f782 Document that MemorySwapMax supports % configuration
1922d49fd6 Make vcs-tag do something useful for non-developer mode as well
5b9ad0bbb8 tools/fetch-distro: switch to the target branch
8334be48a3 tools/fetch-distro: only fetch the configured branch
92890d56e8 tools/update-distro-hash: rename, fetch the repository if appropriate
1f079607f8 Merge pull request #33803 from bluca/v256-stable
e05f93b5c4 mkosi: update arch commit reference
c9d39eea98 mkosi: update fedora commit reference
dbeed95d76 mkosi: Use the Fedora Rawhide spec for CentOS
6108f13fc0 mkosi: Switch back to PKG_SUBDIR instead of symlinks
fd2a6ea0a8 zsh/_networkctl: remove duplicated argument for completion (#31926)
995c702a34 import-creds: when we hit ENOENT on SMBIOS 11 do not even debug log
6a3cb4cd11 core/unit: ignore dropins for masked units completely when checking need_reload
f81659f5f3 test: add a reproducer for #33672
7fcfb73d71 shared: log error when execve fail
7da84cc154 test-execute: ExecStop= and friends should not get credentials
8f58652f5e test: override blocking localed policy in TEST-73-LOCALE
d6f8575f1e meson: fix missing failure if bpf-framework was enabled
e274de4b74 zsh: add varlinkctl completions
cae58967a5 docs: Document how to do stable releases
468b064634 man: Mention Type=oneshot timeout directive
d870f2335b l10n: fix credits for the French translation
8aa9e60f89 sd-device: remove debug log message when dirs are missing
86ec58a55c id128: refuse --app-specific= if we're listing GPT types
b60d5bc1b7 gpt: add more architecture aliases
b786185406 kernel-install: Remove existing loader entries and UKIs
e63ae80a89 bootspec: correct log level for fatal errors
3736e21341 bootspec: implement sorting by tries left/done, to match what sd-boot does
18143edf3e boot: compare filename suffixes without case
78fcf31f08 man: some fixes
bcda6d4637 man: fix typo in unit options section
1747350ffd fsck: do not pull down mount units on soft-reboot
a68188e985 man: fix typo in the alias symlink name
15c236806c vmspawn: define default machines for mips targets
fa2b2da146 path: drop IN_ATTRIB from parent directory watches
35e2f62967 Remove extra period at the end of systemd-bsod's unit description. (#33632)
a40eb432cb test: Set priority for TEST-73-LOCALE
172ffeb813 TEST-06-SELINUX: Disable RuntimeBuildSources=
2fd3514456 test: Add missing --no-rebuild to doc
69c9044525 meson: Bump version to 256.3
16b12506a6 core/cgroup: check root cgroup earlier for unit_get_memory_accounting
06c2ee3979 core/cgroup: make unit_has_host_root_cgroup take const Unit*
15732ee31f core: unify reset_accounting handling
50a0a55066 core: do not drop CGroupRuntime when unit stops, but only on GC
b08b5996d3 core/cgroup: use > 0 comparison rather than == 1
ffd90200b2 core/cgroup: actually make use of the cached accounting values
7684f52839 test-install-root: introduce test case for #33411
a42db16a1c shared/install: correctly report changes in install_info_symlink_alias()
bb83650f96 shared/install: propagate all errors in install_info_apply()
908edce5b6 shared/install: drop unneeded initialization
f414ca0ee3 systemctl: do not try to acquire triggering units for template units
67e0d09368 systemctl: skip triggering unit warning if unit vanished
bb71d5dfb4 man/systemctl: --no-reload is honored by mask/unmask/preset too
7122e226c3 logind-dbus: set gc_mode to USER_GC_BY_PIN when disable linger
5d6bf58cf2 logind-user: take gc_mode into account when reporting user state
bcb13a3fa2 test_ukify: do not use files from /boot
88264411b6 test_ukify: use sha384 in the signing tests
8b3bedd821 test_ukify: add instructions
168b788104 terminal-util: don't issue "ESC c" sequence on reset, but only when erasing the screen
5e4464bb64 mkosi: Bump default device timeout a little
0009ed8ee1 meson: Drop version from 256.3 to v256.2
1354f6194c meson: Drop ~devel suffix from systemd-stable version
fe37213c55 Merge pull request #33774 from DaanDeMeyer/mkosi-backport
677126d300 mkosi: Fix indentation
4c25e572a9 mkosi: Fix typo
400222fa1c mkosi: Drop util-linux from centos/fedora packages
dc3543a391 mkosi: Drop udev from Packages= list
82e2a5f47f mkosi: Fix formatting
11f065d3ee mkosi: Build CentOS Stream 10 images by default
c54eab5dd0 mkosi: Streamline running the integration tests without building systemd
3bde2db7a4 meson: Drop genkey target
baad1c0d0e mkosi: Skip sync script if NO_BUILD is enabled
102ed56c61 mkosi: Remove enforcing=0 from default kernel command line
611e82e660 mkosi: Stop setting apparmor=0
fa7892a690 docs: update mkosi version mentioned in HACKING.md (#33723)
ad444842e0 Merge pull request #33735 from DaanDeMeyer/backport-mkosi
a63e82ca4a repart: Allow overriding fstype per partition designator
9d05f2d559 mkosi: List library packages explicitly in VolatilePackages=
4a55046779 mkosi: Build initrd as a subimage
81bafc8dd9 mkosi: Drop CacheOnly=always from two subimages
1be0b1f54b TEST-13-NSPAWN: make sure we don't load libnss_systemd
0b9df91ce2 mkosi: Disable unique debug source names
89904fc10c systemd-networkd-tests: Skip tests requiring dhcpd if it is not available
c3342c3dc7 TEST-55-OOMD: Remove the opensuse user@ dropin
127f8362c1 mkosi: Install binutils
1a995b9d66 TEST-64-UDEV-STORAGE: Use max_ioqpairs instead of num_queues
367ad876a6 mkosi: Use clang --print-runtime-dir
8b859fa29d mkosi: Extend arch build script comment about symlinks
a8a7a6716e test: do not attempt to set xattr on tmpfs
3fc259ae25 mkosi: Add CI for CentOS Stream 10
945013a092 mkosi: Use squashfs for sysext if mkfs.erofs is not available
480f8fa839 mkosi: Make epel repositories optional for CentOS Stream 9
76e14148f6 mkosi: Introduce build image
abc3a61e59 mkosi: update fedora commit reference
748cd5a703 mkosi: Update to latest
6d07d59237 Merge pull request #33691 from DaanDeMeyer/backport-mkosi
180814f22f mkosi: Switch back to code.opensuse.org for opensuse
976a0d998e test: install split-out sshd-session binary if present
ca97b9a7e6 mkosi: update opensuse commit reference
fef4746218 tools/update-distro-hash: Fix path
54eb9b9301 TEST-06-SELINUX: Various fixes
de6c473b40 mkosi: Don't fail if /var/log/journal does not exist
74475a5169 test: Switch to ncat instead of nc
0c51e28088 TEST-55-OOMD: Switch to stress-ng
0c7d634157 docs: Simplify update commands in HACKING.md
5685a59371 mkosi: Update to latest
370bf11ec4 mkosi: Build a sysext if SYSEXT=1 is specified
0bdb879b3c mkosi: Check for configured build directory if WIPE=1
880c32b7e3 mkosi: Install erofs-utils
cd357eb029 Merge pull request #33674 from DaanDeMeyer/backport-mkosi
c350e02631 mkosi: Fix git commit
00bcc619db mkosi: Adapt configuration to take into account configuration rework
3cf12f4f9a mkosi: use apt pinning for locally built debian/ubuntu packages
7ab51fef1f mkosi: Make .autorelabel file empty
0123dbee1b mkosi: Update to latest
32981c454c build(deps): bump actions/checkout from 4.1.6 to 4.1.7
ab11d7e177 mkosi: policykit-1 was renamed to polkitd
8dd54e5adc mkosi: Use the "default" root filesystem for each distribution
d28aa922fd meson: add option to build systemd-executor "statically"
c3b4032fc3 meson: build libsystemd-core via an intermediate static library
9be2fe707e meson: rename libbasic to libbasic_static
fcbafc3ffe Bump meson version to 256.3~devel
c7e144eb4a Finalize v256.2
709655ea0d mkosi: switch debian to ci/v256-stable branch
e8bbe635cd workflows/labeler: do not set labels on stable backport PRs
aa1eb0b066 labeler: match all mkosi files
32f2b9bba6 labeler: remove matches for dropped files (Makefile)
9a2f16e4ed vmm: make sure we can handle smbios objects without variable part
c32f71aa14 README: update requirements for signed dm-verity
abba1e6bc2 sysusers: handle NSS errors gracefully
df1ed3fbe2 man: fully adopt ~/.local/state/
9d40e5c9c6 man: mention that distinction between /usr/lib/ and /usr/share/ is really about shared *ownership*
8dbb7e2a72 man: drop version info from file hiearchy man page
160b539a9d os-util: avoid matching on the wrong extension-release file
0ff6d2cf47 load-fragment: allow MountImages= with paths starting with /dev
cc4472c31e zsh: add run0 completions
d0a9cf084d docs: Update HACKING
a50e6c5709 README: add missing CONFIG_MEMCG kernel config option for oomd
71de25f2df boot: cover for hardware keys on phones/tablets
243276f008 core/manager: invoke special targets on signal only for system manager
efc44e0c3e core/dbus-manager: refuse SoftReboot() for user managers
399e788553 meson: Define __TARGET_ARCH macros required by bpf
a946258e9d coredump: correctly take tmpfs size into account for compression
05dcd242dc docs: update RELEASE.md to use same repository for stable branches
0a97db8789 docs: Add section to HACKING.md on distribution packages
3c91ea49d2 docs/CODING_STYLE: document that we nowadays prefer (const char*) for func ret type
ea92f16422 test: fix TEST-74-AUX-UTILS.ssh.sh on SUSE
f52475dcf3 test: preserve symlink in inst_recursive()
10b7e0a0af test: fix TEST-24-CRYPTSETUP on SUSE
4f7d6885a1 test: install /etc/hosts
e94e33b566 test: split the resolved test suite into separate test cases
4d561a0e08 mkosi: update debian commit reference
05c9bc547b units: add dep on systemd-logind.service by user@.service
d1cd66ca97 repart: add sections to --help text
c2f74defaa     Conditional PSI check to reflect changes done in 5.13
df990be913 core: try again bind mounting if the destination was already created
24987eb3cc mkfs-util: Set sector size for btrfs as well
e34f436433 repart: Don't set filesystem sector size to 512
3c88c94432 repart: Log more about filesystem sector size
86d47d63b0 core/unit: follow merged units before updating SourcePath= timestamp too
9dec66fc5f meson: use less verbose quoting
6c8e99dedd TEST-54-CREDS: Use UEFI firmware if available
78631dcafd TEST-18-FAILUREACTION: Set auto firmware
71fb49d02c TEST-09-REBOOT: Set auto firmware
938f7b6f29 TEST-06-SELINUX: Explicitly pull in autorelabel.service
37412c952d TEST-70-TPM2: Use UEFI firmware if available
7ee60a8614 resolved: correct parsing of OPT extended RCODEs
711f843e3a TEST-45-TIMEDATE: Use syslog identifier journalctl match
6ead24fcac resolved: allow the full TTL to be used by OPT records
dc0167b674 TEST-64-UDEV-STORAGE: Make nvme_subsystem expected pci symlinks more generic
fb747bd8cd LICENSES/README: expand text to summarize state for binaries and libs
ffc8126cc6 test: pull in multi-user.target explicitly
b908f492bc TEST-64-UDEV-STORAGE: Fix python 3.9 compatibility
1c4f25c296 TEST-64-UDEV-STORAGE: Use bus pci slot 1 instead of 0
9663bb7410 TEST-58-REPART: reverse order of diff args
2f455914f7 man/tmpfiles: remove outdated behavior regarding symlink ownership
24dd273402 test-mountpoint-util: add a test for bind mounted symlinks
99cb4bdbbb mountpoint-util: do not assume symlinks are not mountpoints
4437967cab hostnamed: if polkit authentication fails for Varlink Describe() call, don't reply to client with an error
fb7ec285c9 core/exec-invoke: use sched_setattr instead of sched_setscheduler
5911f1ec25 cryptsetup: improve TPM2 blob display
57661f4ea9 util: make file_read() 64bit offset safe
e2fb3dda24 man/capsule@.service: the capsule user is prefixed with "c-" rather than "p_"
2547de4629 man/capsule@.service.xml: fix typo
98928cf0a7 nspawn, vmspawn: honor the new window title switch
9cbb3aadd5 run: add environment variable to prevent the setting of terminal title
81acc5b39a test-execute: add a test case for issue #33299
d008b3fb26 core: do not filter out write() if required in the very late stage
d580b1f850 core: use write() to send handoff timestamp
52eeeb7d3d seccomp-util: split out seccomp_filter_set_add_by_name()
8e775590f1 Fix typo in CAP_BPF description (#33464)
54910267ba test-network: check if static routes not overridden by NDisc routes
4fda6e8f34 network/ndisc: do not remove static routes when received RA with zero lifetime
34bef8dfac network/ndisc: do not override conflicting static routes
0b909bf685 core/exec-invoke: reopen OpenFile= fds with O_NOCTTY
52371fe526 core: verify WorkingDirectory= is outside of API VFS only under mount namespacing
ec5ac3ea53 terminal-util: use colon as separator for specifying color
421ccd7094 man: fix double is typo in systemd-tmpfiles
778034f42e test: skip test-cgroup-id on ENOSYS from cg_cgroupid_open
3174fae67b meson: bpf: propagate 'sysroot' for cross compilation
a6906475be kernel-install: correct the place where it works in man and help text
3e435e970d man/systemd.exec: list inaccessible files for ProtectKernelTunables
90b5cb35e9 Use consistent spelling of systemd.condition_first_boot argument
b6316b8fac login/user-runtime-dir: free ignored sd_bus_error, avoid triggering assertion
71546deef5 login/user-runtime-dir: use STRLEN where appropriate
fbfc88af5e pretty-print: take console glyph width into account when drawing progress bar
058fca7e6c mkosi: add support for TEST_SAVE_JOURNAL to integration test wrapper
50ae476efd semaphore: pin packaging to ci/v256/stable branch
771bb489bf test: skip TEST-69-SHUTDOWN on Debian
69c51768ef meson: Bump version to 256.2~devel
273b5622ac meson: Fix various versions
9150ffc98a src/boot/efi/meson.build: ensure VERSION_TAG exists in case of cross build
1eb122033f mkosi: Build a disk image by default again
84d6fec8f9 meson: Deal with potential stable versions
851f991b1c mkosi: bump to latest commit
3d3bc1d999 mkosi: Switch back to btrfs
ce41fdbfdc mkosi: Install btrfs-progs on CentOS as well
1566c15fe4 mkosi: Enable hyperscale-packages-experimental for CentOS
33ad0ea834 mkosi: Drop leftover systemd-coredump-debuginfo package for opensuse
2286ae91f4 mkosi: Drop s390x console patch from opensuse spec
7404ba69cf mkosi: use new standalone-shutdown package for debian's exitrd
3f0763b5a6 mkosi: update debian commit reference
9d0259e5bc mkosi: bump Debian Salsa commit to latest
87fc64db36 mkosi: install new split-out systemd packages
245d17d8dd mkosi: update arch commit reference
8717dc0dd4 mkosi: switch opensuse to devel branch
6f720b609a mkosi: update fedora commit reference
a09800cd16 mkosi: update fedora commit reference
e3703f4327 mkosi: Install zypper in opensuse images
a7da351f39 mkosi: Fix sync script git command
a39473aac7 mkosi: Clean up old packages from the build directory
2e0af5f6fe mkosi: remove conflicting deb packages from builddir
6a898c35da mkosi: Copy packages to the build directory as well
16ea64e2be mkosi: Make sure we don't hide errors from git merge-base
3f42d88faa mkosi: Install perf
f2c782c043 mkosi: Install pciutils
054fc83a23 mkosi: move variable to the right scope
8abb2e0f55 mkosi: Don't touch the packaging checkout if work is being done
59ab01d32f vmspawn: define QEMU_MACHINE_TYPE for loongarch64
ba28889c65 vmspawn: define QEMU_MACHINE_TYPE for riscv
715d146a3a docs: fix dead link to GNOME documentation
34ba18b012 logs-show: do not use _SOURCE_MONOTONIC_TIMESTAMP field
f8f669fd69 repart: fix memory leak
7b18adadde mkosi: restrict noble-backports to noble builds
08b8237303 tmpfiles: move --purge to command section in --help text where it belongs
e760157389 tmpfiles: insist on at least one configuration file being specified on --purge
90ec026570 tmpfiles: honour --dry-run when removing directories
c26e56d08f install: allow removing symlinks even for units that are gone
a776dcf7af NEWS: fix typo
d89c99c7ad mkosi: bump to latest
b455006ae1 CI: disable secure boot in mkosi GHA runs
4cc6da9a5d test-network: mention that the captive portal option is supported since v2.20
f7d55cc801 core/service: fix accept-socket deserialization
7d65709901 test: use 'auto' instead of 'uefi' for automated fallback
6178aa4bbc test: support TEST_NO_QEMU in mkosi integration wrapper
a36cb5660e test: support TEST_NO_KVM
df1e7d9572 test: drop obsolete comment
51a2e7be5e test: drop unneeded firmware: uefi setting
50b53b8221 test: check the skip condition before installing additional files
9802a28b36 mkosi: install EFI packages only on EFI architectures
21feae324e mkosi: use ports.ubuntu.com for non-x86 backports
9f5f3c2f8b mkosi: enable unprivileged user ns for integration tests
1a0e6961cf man,units: drop "temporary" from description of systemd-tmpfiles
aedeaf7450 man: add a bit of a warning to systemd-tmpfiles --purge
3706b5e8e9 fundamental: declare flex array updated for gcc15 and clang 19
51390a1f41 analyze: show pcrs also in sha384 bank
a61a83a22b CODING_STYLE: document "reterr_" return parameters
2034de6157 shell-completion: only offer devices for completion
4ebcdcb136 NEWS: note that new stable releases will be in the main repo
d316aed5d8 repart: Use CRYPT_ACTIVATE_PRIVATE
4a468387ac test: dump a simple summary at the end of TEST-02-UNITTEST
70f5fb2f7a repart: Use crypt_reencrypt_run() if available
ba031f1fe8 resolved: permit dnssec rrtype questions when we aren't validating
30df42a927 tpm2-setup: Don't fail if we can't access the TPM due to authorization failure
514ef0f93b strbuf: use GREEDY_REALLOC to grow the buffer
a3d94332a2 rules: Limit the number of device units generated for serial ttys
0d573787ea sd-dhcp-server: clear buffer before receive
f2b5c1ff51 hostnamed: don't allow hostnamed to exit on idle if varlink connections are still ongoing
d918804408 man/systemd: reorder content a bit
1c27c902ad Create CNAME

Dropped merged patches:

0001-src-boot-efi-meson.build-ensure-VERSION_TAG-exists-i.patch
0003-meson-bpf-propagate-sysroot-for-cross-compilation.patch

Changed git repo back to systemd main one since that is going to
be used for v256-stable branch and newer releases instead of the
systemd-stable git repo.

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agoTiff: Security fix for CVE-2024-7006
Siddharth Doshi [Wed, 14 Aug 2024 18:19:23 +0000 (23:49 +0530)] 
Tiff: Security fix for CVE-2024-7006

Upstream-Status: Backport from [https://gitlab.com/libtiff/libtiff/-/commit/818fb8ce881cf839fbc710f6690aadb992aa0f9e]

CVE's Fixed:
CVE-2024-7006 libtiff: NULL pointer dereference in tif_dirinfo.c

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
11 months agopython3-cython: fix upstream check again
Alexander Kanavin [Tue, 13 Aug 2024 08:58:17 +0000 (10:58 +0200)] 
python3-cython: fix upstream check again

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>