]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
3 years agopython3-cryptography-vectors: upgrade 37.0.1 -> 37.0.2
Alexander Kanavin [Wed, 18 May 2022 10:58:32 +0000 (12:58 +0200)] 
python3-cryptography-vectors: upgrade 37.0.1 -> 37.0.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopython3-cryptography: upgrade 37.0.1 -> 37.0.2
Alexander Kanavin [Wed, 18 May 2022 10:58:31 +0000 (12:58 +0200)] 
python3-cryptography: upgrade 37.0.1 -> 37.0.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopython3-bcrypt: upgrade 3.2.0 -> 3.2.2
Alexander Kanavin [Wed, 18 May 2022 10:58:30 +0000 (12:58 +0200)] 
python3-bcrypt: upgrade 3.2.0 -> 3.2.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopsmisc: upgrade 23.4 -> 23.5
Alexander Kanavin [Wed, 18 May 2022 10:58:29 +0000 (12:58 +0200)] 
psmisc: upgrade 23.4 -> 23.5

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopiglit: upgrade to latest revision
Alexander Kanavin [Wed, 18 May 2022 10:58:28 +0000 (12:58 +0200)] 
piglit: upgrade to latest revision

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agomobile-broadband-provider-info: upgrade 20220315 -> 20220511
Alexander Kanavin [Wed, 18 May 2022 10:58:27 +0000 (12:58 +0200)] 
mobile-broadband-provider-info: upgrade 20220315 -> 20220511

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agomesa: upgrade 22.0.2 -> 22.0.3
Alexander Kanavin [Wed, 18 May 2022 10:58:26 +0000 (12:58 +0200)] 
mesa: upgrade 22.0.2 -> 22.0.3

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibrsvg: upgrade 2.54.1 -> 2.54.3
Alexander Kanavin [Wed, 18 May 2022 10:58:25 +0000 (12:58 +0200)] 
librsvg: upgrade 2.54.1 -> 2.54.3

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibnotify: upgrade 0.7.11 -> 0.7.12
Alexander Kanavin [Wed, 18 May 2022 10:58:23 +0000 (12:58 +0200)] 
libnotify: upgrade 0.7.11 -> 0.7.12

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibcgroup: upgrade 2.0.1 -> 2.0.2
Alexander Kanavin [Wed, 18 May 2022 10:58:22 +0000 (12:58 +0200)] 
libcgroup: upgrade 2.0.1 -> 2.0.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-vaapi: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:21 +0000 (12:58 +0200)] 
gstreamer1.0-vaapi: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:20 +0000 (12:58 +0200)] 
gstreamer1.0: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-rtsp-server: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:19 +0000 (12:58 +0200)] 
gstreamer1.0-rtsp-server: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-python: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:18 +0000 (12:58 +0200)] 
gstreamer1.0-python: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-plugins-ugly: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:17 +0000 (12:58 +0200)] 
gstreamer1.0-plugins-ugly: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-plugins-good: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:16 +0000 (12:58 +0200)] 
gstreamer1.0-plugins-good: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-plugins-base: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:15 +0000 (12:58 +0200)] 
gstreamer1.0-plugins-base: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-plugins-bad: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:14 +0000 (12:58 +0200)] 
gstreamer1.0-plugins-bad: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-omx: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:13 +0000 (12:58 +0200)] 
gstreamer1.0-omx: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogstreamer1.0-libav: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:12 +0000 (12:58 +0200)] 
gstreamer1.0-libav: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogst-devtools: upgrade 1.20.1 -> 1.20.2
Alexander Kanavin [Wed, 18 May 2022 10:58:11 +0000 (12:58 +0200)] 
gst-devtools: upgrade 1.20.1 -> 1.20.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agognutls: upgrade 3.7.4 -> 3.7.5
Alexander Kanavin [Wed, 18 May 2022 10:58:10 +0000 (12:58 +0200)] 
gnutls: upgrade 3.7.4 -> 3.7.5

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogit: upgrade 2.36.0 -> 2.36.1
Alexander Kanavin [Wed, 18 May 2022 10:58:09 +0000 (12:58 +0200)] 
git: upgrade 2.36.0 -> 2.36.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agodiffoscope: upgrade 211 -> 212
Alexander Kanavin [Wed, 18 May 2022 10:58:08 +0000 (12:58 +0200)] 
diffoscope: upgrade 211 -> 212

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agocurl: upgrade 7.83.0 -> 7.83.1
Alexander Kanavin [Wed, 18 May 2022 10:58:07 +0000 (12:58 +0200)] 
curl: upgrade 7.83.0 -> 7.83.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agovulkan-samples: update to latest revision
Alexander Kanavin [Wed, 18 May 2022 10:58:06 +0000 (12:58 +0200)] 
vulkan-samples: update to latest revision

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agosystemtap: update 4.6 -> 4.7
Alexander Kanavin [Wed, 18 May 2022 10:58:05 +0000 (12:58 +0200)] 
systemtap: update 4.6 -> 4.7

Drop backports.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoxcb-proto: upgrade 1.14.1 -> 1.15
Alexander Kanavin [Wed, 18 May 2022 10:58:04 +0000 (12:58 +0200)] 
xcb-proto: upgrade 1.14.1 -> 1.15

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibxcb: update 1.14 -> 1.15
Alexander Kanavin [Wed, 18 May 2022 10:58:03 +0000 (12:58 +0200)] 
libxcb: update 1.14 -> 1.15

Drop disable-check.patch, with recipe-specific sysroots
it is no longer necessary.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopython3-pip: update 22.0.4 -> 22.1
Alexander Kanavin [Wed, 18 May 2022 10:58:02 +0000 (12:58 +0200)] 
python3-pip: update 22.0.4 -> 22.1

progress removed from vendored libraries:
https://github.com/pypa/pip/commit/2c8e78cb9caa169870744c315724680162b6f36c

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agou-boot: upgrade 2022.01 -> 2022.04
Alexander Kanavin [Wed, 18 May 2022 10:58:01 +0000 (12:58 +0200)] 
u-boot: upgrade 2022.01 -> 2022.04

Change to a tools-only defconfig.

Add gnutls/util-linux dependency for mkeficapsule.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agognu-config: update to latest version
Alexander Kanavin [Wed, 18 May 2022 10:58:00 +0000 (12:58 +0200)] 
gnu-config: update to latest version

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoiptables: upgrade 1.8.7 -> 1.8.8
Alexander Kanavin [Wed, 18 May 2022 10:57:59 +0000 (12:57 +0200)] 
iptables: upgrade 1.8.7 -> 1.8.8

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogo: upgrade 1.18.1 -> 1.18.2
Alexander Kanavin [Wed, 18 May 2022 10:57:58 +0000 (12:57 +0200)] 
go: upgrade 1.18.1 -> 1.18.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopython3-setuptools: upgrade 59.5.0 -> 62.3.1
Alexander Kanavin [Wed, 18 May 2022 10:57:57 +0000 (12:57 +0200)] 
python3-setuptools: upgrade 59.5.0 -> 62.3.1

This was held by numpy rejecting setuptools >= 60.x,
however it got a workaround in recent point releases
and so the upgrade can proceed.

Drop 0001-_distutils-sysconfig-append-STAGING_LIBDIR-python-sy.patch
as changed code completely removed upstream.

Replicate another distutils/sysconfig.py fix from python recipe via
0001-_distutils-sysconfig.py-make-it-possible-to-substite.patch

Add a tomli build dependency to python3-setuptools-scm as new
setuptools exposes:

|   File "/srv/work/alex/poky/build-64-alt/tmp/work/x86_64-linux/python3-setuptools-scm-native/6.4.2-r0/setuptools_scm-6.4.2/src/setuptools_scm/config.py", line 59, in _lazy_tomli_load
|     from tomli import loads
| ModuleNotFoundError: No module named 'tomli'

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agobase-passwd: Update the status for two patches
Peter Kjellerstedt [Wed, 18 May 2022 03:13:21 +0000 (05:13 +0200)] 
base-passwd: Update the status for two patches

The two patches to disable use of debconf and generation of
documentation have been merged upstream.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopython3: fix reproducibility issue with python3-core
Steve Sakoman [Tue, 17 May 2022 17:34:07 +0000 (07:34 -1000)] 
python3: fix reproducibility issue with python3-core

traceback.cpython-310.pyc is non-deterministic due to 'frozenset'
being written without strict ordering.  For now let's just not
install the problematic file.

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolayer.conf: Don't use indirect help2man-native dependencies
Richard Purdie [Tue, 17 May 2022 12:13:46 +0000 (13:13 +0100)] 
layer.conf: Don't use indirect help2man-native dependencies

Similarly to other tools such as pkgconfig and quilt, don't pull in
help2man-native unless there is a direct DEPENDS. This is generally good
for keeping the recipe sysroots leaner and cleaner and should fix some
issues with squashf-tools in particular.

This will mean any recipe with an indirect dependency will break so
missing recipe dependencies will need to be fixed.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoudev-extraconf/initrdscripts/parted: Rename mount.blacklist -> mount.ignorelist
Richard Purdie [Tue, 17 May 2022 11:50:12 +0000 (12:50 +0100)] 
udev-extraconf/initrdscripts/parted: Rename mount.blacklist -> mount.ignorelist

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopython3-cryptography: remove --benchmark-disable option
Mingli Yu [Tue, 17 May 2022 10:22:14 +0000 (18:22 +0800)] 
python3-cryptography: remove --benchmark-disable option

The new version introduced below change, so remove the option
to avoid python3-pytest-benchmark rdepends to fix the gap.
496703c8 Refs #7079 -- added basic scaffholding for benchmarks (#7087)

Fixes:
  # ./run-ptest
  Free memory: 31.283 GB
  ERROR: usage: pytest [options] [file_or_dir] [file_or_dir] [...]
  pytest: error: unrecognized arguments: --benchmark-disable
  inifile: /usr/lib/python3-cryptography/ptest/pyproject.toml
  rootdir: /usr/lib/python3-cryptography/ptest

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agomusl-locales: Switch SRC_URI to new location
Khem Raj [Mon, 16 May 2022 22:49:21 +0000 (15:49 -0700)] 
musl-locales: Switch SRC_URI to new location

Original repository has been less maintained and thusly adelie linux
community has picked up the package and started to maintain it also
applied long standing bug fixes.

Now we use new fork by Adélie Linux, which includes more supported
locales.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agobinutils: Bump to latest 2.38 release branch
Samuli Piippo [Mon, 16 May 2022 07:11:18 +0000 (07:11 +0000)] 
binutils: Bump to latest 2.38 release branch

Fixes Qt build with GCC 12.1.

Brings following fixes

 * 3d549e5ccc0 PR29142, segv in ar with empty archive and libdeps specified
 * c473aa1b9d8 M68K: avoid quadratic slowdlow in label alignment check
 * 8d1187516e3 Adjust ld ctf test for 32-bit targets
 * 9c67f6382ac x86: Properly handle function pointer reference
 * 9a01457e02e s390: Add DT_JMPREL pointing to .rela.[i]plt with static-pie
 * 82a5bb730a1 s390: Avoid dynamic TLS relocs in PIE
 * d54081c642a LoongArch: Update ABI eflag in elf header.
 * fb4d148004f IBM zSystems: Add support for z16 as CPU name.
 * 975b5540232 libctf, ld: diagnose corrupted CTF header cth_strlen
 * 99852365513 dlltool: Use the output name as basis for deterministic temp prefixes
 * 210bf1d6225 Updated Serbian (for binutils/) and Russian (for gprof/) translations
 * fcf60fe8482 PR28959, obdump doesn't disassemble mftb instruction
 * e4a35c73196 PowerPC64 DT_RELR relative reloc addresses
 * 7183434818e Work around gcc-4 warnings in elf64-ppc.c

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibrepo: upgrade 1.14.2 -> 1.14.3
wangmy [Sat, 7 May 2022 02:37:00 +0000 (10:37 +0800)] 
librepo: upgrade 1.14.2 -> 1.14.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agocve-check: Fix report generation
Marta Rybczynska [Tue, 17 May 2022 06:01:15 +0000 (08:01 +0200)] 
cve-check: Fix report generation

The addition of summary output caused two issues: error when building
an image and the fact that JSON output was generated even when
CVE_CHECK_FORMAT_JSON.

When generating an image it caused an error like:
ERROR: core-image-minimal-1.0-r0 do_rootfs: Error executing a python function in exec_func_python() autogenerated:

  The stack trace of python calls that resulted in this exception/failure was:
  File: 'exec_func_python() autogenerated', lineno: 2, function: <module>
       0001:
   *** 0002:cve_check_write_rootfs_manifest(d)
       0003:
  File: '/home/alexk/poky/meta/classes/cve-check.bbclass', lineno: 213, function: cve_check_write_rootfs_manifest
       0209:
       0210:        link_path = os.path.join(deploy_dir, "%s.json" % link_name)
       0211:        manifest_path = d.getVar("CVE_CHECK_MANIFEST_JSON")
       0212:        bb.note("Generating JSON CVE manifest")
   *** 0213:        generate_json_report(json_summary_name, json_summary_link_name)
       0214:        bb.plain("Image CVE JSON report stored in: %s" % link_path)
       0215:}
       0216:
       0217:ROOTFS_POSTPROCESS_COMMAND:prepend = "${@'cve_check_write_rootfs_manifest; ' if d.getVar('CVE_CHECK_CREATE_MANIFEST') == '1' else ''}"
  Exception: NameError: name 'json_summary_name' is not defined

The fix is to pass the d variable to the pure python function generate_json_report
to get correct values of variables and add conditions for the JSON
output where needed.

In addition clarify the message presenting the summary JSON file,
which isn't related to an image.

Uses partial fixes from Alex Kiernan, Ernst Sjöstrand (ernstp),
and Davide Gardenal.

Fixes: f2987891d315 ("cve-check: add JSON format to summary output")
Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agobase-passwd: Update to 3.5.52
Peter Kjellerstedt [Sat, 14 May 2022 21:14:50 +0000 (23:14 +0200)] 
base-passwd: Update to 3.5.52

* Add a patch to allow the use of debconf to be disabled.
* Replace 0007-Disable-generation-of-the-documentation.patch with a new
  patch to disable the generation of the documentation using a
  configuration option.
* Replace 0006-Disable-shell-for-default-users.patch with a sed
  expression that uses a variable, NOLOGIN, to specify what command to
  use for users that are not expected to login. This allows to use some
  other command than "nologin", e.g., "false". Also, by using
  ${base_sbindir}, it adheres to usrmerge being configured.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agobase-passwd: Regenerate the patches
Peter Kjellerstedt [Sat, 14 May 2022 21:14:49 +0000 (23:14 +0200)] 
base-passwd: Regenerate the patches

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agowic: added fspassno parameter to partition
Claudius Heine [Sun, 15 May 2022 06:36:00 +0000 (12:06 +0530)] 
wic: added fspassno parameter to partition

The `fspassno` parameter allows to overwrite the value of the last
column (`fs_passno`) in the /etc/fstab of the target root file system.
This allows to have periodic file system checks.

Signed-off-by: Claudius Heine <ch@denx.de>
Signed-off-by: Vijai Kumar K <Vijaikumar_Kanagarajan@mentor.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoselftest/imagefeatures/overlayfs: Always append to DISTRO_FEATURES
Richard Purdie [Mon, 16 May 2022 11:26:05 +0000 (12:26 +0100)] 
selftest/imagefeatures/overlayfs: Always append to DISTRO_FEATURES

Using += unintentionally removes all other entries from DISTRO_FEATURES
if DISTRO_FEATURES was set by ?= such as by poky.conf. This reduces
sstate reusage on the autobuilder. Fix this to speed up builds.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agostaging: Fix rare sysroot corruption issue
Richard Purdie [Mon, 16 May 2022 10:12:18 +0000 (11:12 +0100)] 
staging: Fix rare sysroot corruption issue

We've seen failures on the autobuilder in oe-selftest where things which should
be in the sysroot aren't. The exact steps to reproduce the exact failure are
elusive and probably hash equivalance dependency but this set of steps does
reproduce corruption which is probably of the same origin:

Add DISTRO_FEATURES += "systemd"

  bitbake dbus

Remove DISTRO_FEATURES += "systemd"

  bitbake dbus
  bitbake dbus -c clean
  bitbake dbus -c configure

Add DISTRO_FEATURES += "systemd"

  bitbake quilt-native
  bitbake dbus -c populate_sysroot

Remove DISTRO_FEATURES += "systemd"

  bitbake dbus -c compile

Where dbus will now fail as the compiler was no longer in the sysroot.

This works by clearing x11 and other values out of DISTRO_FEATURES so the x11
dependencies are removed from the sysroot. The configure stamp remains valid so
when the original configuration is restored, it becomes valid again but a load
of the sysroot disappeared and build failures result.

Fix this by removing stamps when we remove things from the sysroot.

Depends on a change to bitbake build.py to add the clean_stamp API.

[YOCTO #14790]

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoopenssl: minor security upgrade 3.0.2 -> 3.0.3
Davide Gardenal [Fri, 13 May 2022 13:35:21 +0000 (15:35 +0200)] 
openssl: minor security upgrade 3.0.2 -> 3.0.3

This minor version include fixes for several CVEs

CVE: CVE-2022-1292
CVE: CVE-2022-1343
CVE: CVE-2022-1434
CVE: CVE-2022-1473

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoelfutils: Disable stringop-overflow warning for build host
Khem Raj [Sat, 14 May 2022 15:15:50 +0000 (08:15 -0700)] 
elfutils: Disable stringop-overflow warning for build host

Some distributions shipping gcc12 end up with stringop-overflow warnings
e.g.
/usr/include/bits/unistd.h:74:10: error: â€˜__pread_alias’ specified size between 9223372036854775813 and 18446744073709551615 exceeds maximum object size 9223372036854775807 [-Werror=stringop-overflow=]
   74 |   return __glibc_fortify (pread, __nbytes, sizeof (char),
      |          ^~~~~~~~~~~~~~~

Until fixed, lets not treat this warning as hard error

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoovmf: Fix native build with gcc-12
Khem Raj [Fri, 13 May 2022 16:22:44 +0000 (09:22 -0700)] 
ovmf: Fix native build with gcc-12

Host distros have started deploying gcc12 as well e.g. archlinux
this build failure shows up which has been fixed upstream

In function â€˜GetAlignmentFromFile’,
    inlined from â€˜main’ at GenFfs.c:816:20:
GenFfs.c:545:5: error: pointer â€˜InFileHandle’ used after â€˜fclose’ [-Werror=use-after-free]
  545 |     Error(NULL, 0, 4001, "Resource", "memory cannot be allocated  of %s", InFileHandle);
      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agobash: build with bash_cv_getcwd_malloc=yes on musl too
Khem Raj [Sat, 14 May 2022 01:07:50 +0000 (18:07 -0700)] 
bash: build with bash_cv_getcwd_malloc=yes on musl too

This fixes bash using its own broken getcwd() during cross compiling
The configure script assumes that your getcwd() function is broken.
Which then makes bash use it's own getcwd() implementation, which
doesn't work if the path to the current directory
contains bind mounts in its paths. This shows up as:

Fixes errors on musl images like
shell-init: error retrieving current directory: getcwd: cannot access parent directories: Bad file descriptor

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agonpm.bbclass: Don't create /usr/lib/node symlink
Zoltán Böszörményi [Fri, 13 May 2022 15:30:30 +0000 (17:30 +0200)] 
npm.bbclass: Don't create /usr/lib/node symlink

When a recipe DEPENDS on multiple other npm based recipes,
the symlink will create a conflict.

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agonpm.bbclass: Fix file permissions before opening it for writing
Zoltán Böszörményi [Fri, 13 May 2022 15:30:29 +0000 (17:30 +0200)] 
npm.bbclass: Fix file permissions before opening it for writing

Some node module archives in npmjs.org contain wrong permissions.
I found a case with package.json in the archive being r-xr-xr-x
for which open(..., "w") fails. Modify the manifest file permissions
to add the write bit for the owner.

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoimage_types/runqemu-addptable2image: Fix a minor typo
Leon Anavi [Fri, 13 May 2022 17:19:07 +0000 (20:19 +0300)] 
image_types/runqemu-addptable2image: Fix a minor typo

Fix a minor typo and replace "partion" with "partition".

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agokernel-yocto.bbclass: say what SRC_URI entry is being dropped
Ross Burton [Fri, 13 May 2022 18:42:01 +0000 (19:42 +0100)] 
kernel-yocto.bbclass: say what SRC_URI entry is being dropped

If there is a defconfig set by KBUILD_DEFCONFIG and something that looks
like a defconfig in SRC_URI, the SRC_URI is dropped. This happens even
if the entry in SRC_URI is called my_defconfig_frag.cfg.

Arguably, this is a bug and the behaviour should be changed, but for now
if we're going to remove entries from SRC_URI we should make it clear
what entry is being removed.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agokernel: add missing path to search for debug files
Andrej Valek [Wed, 19 Jan 2022 11:57:59 +0000 (12:57 +0100)] 
kernel: add missing path to search for debug files

Since explicit debug package creation via ${KERNEL_PACKAGE_NAME}-dbg has
been added to kernel, it has to cover all PACKAGE_DEBUG_SPLIT_STYLE
options. For ex. when the variable "debug-file-directory" package search
path has to be set explicitly, otherwise it will not find any files.

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agovirgl: skip headless test on alma 8.6
Steve Sakoman [Sat, 14 May 2022 21:21:27 +0000 (11:21 -1000)] 
virgl: skip headless test on alma 8.6

As a centos 8 spinoff, it lacks the same vgem kernel module.

(From OE-Core rev: 451605aa40482516c18cd1534feacb796516a785)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogdb: Upgrade to 12.1
Khem Raj [Thu, 12 May 2022 19:28:54 +0000 (12:28 -0700)] 
gdb: Upgrade to 12.1

Release Announcement [1] and Notes [2]

[1] https://lists.gnu.org/archive/html/info-gnu/2022-05/msg00000.html
[2] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=gdb/NEWS;hb=gdb-12.1-release

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibstd-rs: Forward port rust libc patches
Khem Raj [Wed, 11 May 2022 17:39:55 +0000 (10:39 -0700)] 
libstd-rs: Forward port rust libc patches

libstd-rs update also updated the vendored libc to 0.2.116, the rv64
musl patches were applied to 0.2.112 and hence needed forward porting
done with this changeset.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoscripts/autobuilder-worker-prereq-tests: add additional limit testing
Michael Halstead [Wed, 11 May 2022 18:52:53 +0000 (11:52 -0700)] 
scripts/autobuilder-worker-prereq-tests: add additional limit testing

Check that open file and user process limits are greater than or equal to what
the autobuilder uses.

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoscripts/autobuilder-worker-prereq-tests: update to use yocto 4.0
Michael Halstead [Wed, 11 May 2022 18:52:52 +0000 (11:52 -0700)] 
scripts/autobuilder-worker-prereq-tests: update to use yocto 4.0

Use files from the current release to avoid the depreciated -show-cursor
option.

Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agosanity: Don't warn about make 4.2.1 for mint
Richard Purdie [Tue, 10 May 2022 22:00:37 +0000 (23:00 +0100)] 
sanity: Don't warn about make 4.2.1 for mint

Whilst not a supported distro, we can exclude this from the warning as it
is debian derived and doesn't have the issue.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoimage.bbclass: allow overriding dependency on virtual/kernel:do_deploy
Dmitry Baryshkov [Tue, 10 May 2022 15:43:27 +0000 (18:43 +0300)] 
image.bbclass: allow overriding dependency on virtual/kernel:do_deploy

Since the commit fe26b2379ecd ("image.bbclass: Depend on
virtual/kernel:do_deploy"), the image.bbclass made building images
depend on virtual/kernel. For some images, including small initramfs,
this is not the case. Allow overriding this dependency in case
developers knows what they are doing.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolinux-firmware: package new Qualcomm firmware
Dmitry Baryshkov [Tue, 10 May 2022 15:39:42 +0000 (18:39 +0300)] 
linux-firmware: package new Qualcomm firmware

Create separate packages with firmware files for APQ8096 SoC and for
Adreno 2xx/4xx. Include A330 firmware into the 3xx package.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolinux-firmware: upgrade 20220411 -> 20220509
Dmitry Baryshkov [Tue, 10 May 2022 15:39:41 +0000 (18:39 +0300)] 
linux-firmware: upgrade 20220411 -> 20220509

License-Update: additional files
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agooverlayfs: add docs about skipping QA check & service dependencies
Claudius Heine [Tue, 10 May 2022 07:48:51 +0000 (09:48 +0200)] 
overlayfs: add docs about skipping QA check & service dependencies

Add some documentation about skipping the QA check related to missing
fstab entries or mount units for base mount points where the overlayfs
is mounted from.

Also add a short paragraph about adding a systemd unit dependency to
services in recipes, so that they are started only after the overlayfs
is mounted and ready.

No functional change.

Signed-off-by: Claudius Heine <ch@denx.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agogcc: upgrade 11.3 -> 12.1
Khem Raj [Fri, 22 Apr 2022 02:08:30 +0000 (19:08 -0700)] 
gcc: upgrade 11.3 -> 12.1

Major gcc release with lot of changes [2]

- Add patch to re-shuffle include of sched.h to fix build on musl
- porting guide to gcc 12 [1]
- Fix version in maintainers entry

[1] https://gcc.gnu.org/gcc-12/porting_to.html
[2] https://gcc.gnu.org/gcc-12/changes.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolinux-firmware: replace mkdir by install
Konrad Weihmann [Mon, 9 May 2022 10:59:57 +0000 (12:59 +0200)] 
linux-firmware: replace mkdir by install

if a setup is using RPM for packaging and there are multiple
recipes that install to ${nonarch_base_libdir}/firmware by using
install -d ${nonarch_base_libdir}/firmware, it will create installation
clashes on image install, as linux-firmware in before this patch
used mkdir -p, which creates different file mode bits (depending
on the current user's settings).

In a particular example
linux-fimware created /lib/firmware with 0600
while other-firmware-package created it with 0644
making the combination not installable by rpm backend

Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoRevert "image.bbclass: allow overriding dependency on virtual/kernel:do_deploy"
Jacob Kroon [Mon, 9 May 2022 10:32:51 +0000 (12:32 +0200)] 
Revert "image.bbclass: allow overriding dependency on virtual/kernel:do_deploy"

As pointed out in
https://lists.openembedded.org/g/openembedded-core/message/165058
https://lists.openembedded.org/g/openembedded-core/message/165216
this patch sets KERNELDEPLOYDEPEND but then uses KERNELDEPMODDEPEND.

Revert the changes since no one seems interested enough to fix it.
If someone wants this then make the variable name readable by
adding underscores where appropriate, for example by calling it
KERNEL_DEPLOY_DEPEND.

This reverts commit dcf9dfa4e6305786cd713aa28deda94a50bd6635.

Signed-off-by: Jacob Kroon <jacob.kroon@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopciutils: Add make-native dependency
Richard Purdie [Mon, 9 May 2022 10:39:00 +0000 (11:39 +0100)] 
pciutils: Add make-native dependency

A change in behaviour in make between 4.2.1 and 4.3 on how whitespace
and appends are handled[1] causes changes in lib/libpci.pc and leads
to non-reproducible builds.

Add a dependency on make-native to resovle this as a least invasive
and least worse solution for now.

[1] https://git.savannah.gnu.org/cgit/make.git/commit/?id=b90fabc8d6f34fb37d428dc0fb1b8b1951a9fbed

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agofreetype: Upgrade 2.12.0 -> 2.12.1
Richard Purdie [Sun, 8 May 2022 12:30:43 +0000 (13:30 +0100)] 
freetype: Upgrade 2.12.0 -> 2.12.1

Includes a fix for CVE-2022-27404.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoliberror-perl: Update sstate/equiv versions to clean cache
Richard Purdie [Sun, 8 May 2022 18:25:17 +0000 (19:25 +0100)] 
liberror-perl: Update sstate/equiv versions to clean cache

There are cached reproducibility issues on the autobuilder due to the PRServ
sstate checksum issues, flush the bad data out the system by bumping the
versions.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibgcrypt: Fix reproducibility issues in ptest
Richard Purdie [Sat, 7 May 2022 20:10:06 +0000 (21:10 +0100)] 
libgcrypt: Fix reproducibility issues in ptest

The recent ptest addition was causing reproducibility tests to fail.
Remove the problematic files as they clearly aren't needed on target
to run the ptests. Hack the Makefile so that it doesn't try to rerun
configure and similar.

Also add a missing dependency on make.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopackage: Ensure we track whether PRSERV was active or not
Richard Purdie [Sun, 8 May 2022 11:26:33 +0000 (12:26 +0100)] 
package: Ensure we track whether PRSERV was active or not

Currently the signatures for do_packagedata don't reflect whether PRServ
was active or not. This means that if you have mxiing of PRServ usage and
non PRServ usage against the same sstate cache it can rarely become
corrupted with one referencing the other.

This likely doesn't happen in general but does on the autobuilder as PRServ
is tested. Add in some variables to ensure the binary state of PRServ being
enabled or disabled is tracked (but not the server value). We continue to
assume one PRServ is used per sstate cache.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agovim: Upgrade 8.2.4681 -> 8.2.4912
Richard Purdie [Sun, 8 May 2022 12:29:55 +0000 (13:29 +0100)] 
vim: Upgrade 8.2.4681 -> 8.2.4912

Includes fixes for CVE-2022-1381, CVE-2022-1420.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoe2fsprogs: update upstream status
Aryaman Gupta [Fri, 6 May 2022 13:22:22 +0000 (09:22 -0400)] 
e2fsprogs: update upstream status

Status updated but using the existing patch since it is functionally identical.

Signed-off-by: Aryaman Gupta <aryaman.gupta@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agowic/plugins/rootfs: Fix permissions when splitting rootfs folders across partitions
Felix Moessbauer [Fri, 6 May 2022 08:59:41 +0000 (10:59 +0200)] 
wic/plugins/rootfs: Fix permissions when splitting rootfs folders across partitions

This patches makes locating the file database containing the file and
folder usernames and permissions more reliable.
In addition to locating it relative to the partition directory, we also
try to locate it relative to the IMAGE_ROOTFS.

Prior to this patch, the database was not found when using
--rootfs-dir=${IMAGE_ROOTFS}/<x> in the WIC script, leading to erronous file
permissions and ownership.

Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoopenssh: Add openssh-sftp-server to openssh RDEPENDS
Alex Kiernan [Sat, 7 May 2022 11:22:12 +0000 (12:22 +0100)] 
openssh: Add openssh-sftp-server to openssh RDEPENDS

OpenSSH 9.0 uses sftp by default as the transport for scp, add in
sftp-server so that this works as expected for users, rather than being
left with a confusing "scp: Connection closed" message.

Signed-off-by: Alex Kiernan <alexk@zuma.ai>
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agopypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE
Alex Kiernan [Sat, 7 May 2022 11:22:11 +0000 (12:22 +0100)] 
pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE

The CVE product name for PyPI packages is (usually) the same as the PyPI
package name (and not our recipe name), so use that as the default.

Signed-off-by: Alex Kiernan <alexk@zuma.ai>
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoeudev: Add PACKAGECONFIG for manpages & selinux
Alex Kiernan [Sat, 7 May 2022 11:22:10 +0000 (12:22 +0100)] 
eudev: Add PACKAGECONFIG for manpages & selinux

Drop DEPENDS on libxslt-native which is unused as the tarball includes
the manpages and the build process never invokes the script which
regenerates them (make.sh)

Signed-off-by: Alex Kiernan <alexk@zuma.ai>
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoeudev: Upgrade 3.2.10 -> 3.2.11
Alex Kiernan [Sat, 7 May 2022 11:22:09 +0000 (12:22 +0100)] 
eudev: Upgrade 3.2.10 -> 3.2.11

The upstream has moved from Gentoo to GitHub and is now maintained by a
new collection of cross-distribution contributors.

Drop the revert of the userspace firmware loading removal patch as these
are only required to support kernels older than 3.7, do not apply
cleanly and will never be merged upstream.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Alex Kiernan <alexk@zuma.ai>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoabi_version/sstate: Bump hashequiv and sstate versions due to git changes
Richard Purdie [Wed, 4 May 2022 08:35:59 +0000 (09:35 +0100)] 
abi_version/sstate: Bump hashequiv and sstate versions due to git changes

The autobuilder sstate was corrupted via incorrect equiavlences caused by
the security fix to git and the poor interaction that had with SCM version
checks under fakeroot/pseudo. Bump the versions to enable a clean slate
to work off.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoRevert "bitbake.conf: mark all directories as safe for git to read"
Ross Burton [Fri, 6 May 2022 15:56:04 +0000 (16:56 +0100)] 
Revert "bitbake.conf: mark all directories as safe for git to read"

Turns out this doesn't actually work, as git doesn't respect the environment
when reading the safe.directory configuration variable.

This reverts commit d4a5862ce8db97d26a3c32c4cffea3197c1defec.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoscripts/git: Ensure we don't have circular references
Richard Purdie [Fri, 6 May 2022 15:56:03 +0000 (16:56 +0100)] 
scripts/git: Ensure we don't have circular references

This is horrible but I'm running out of better ideas. We hit circular reference
issues which we were trying to avoid in the core HOSTTOOLS code. When building
the eSDK, there can be two copies of the script.

Therefore assume git will never be in a directory called scripts. This
fixes eSDK build failures.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoscripts: Make git intercept global
Richard Purdie [Fri, 6 May 2022 15:56:02 +0000 (16:56 +0100)] 
scripts: Make git intercept global

The previous minimially invasive git intercept simply isn't enough. For example,
meson used in the igt-gpu-tools recipe hardcodes the path to git in the configure
step so at install time, changing PATH has no effect.

There are lots of interesting things we could do to try and avoid problems but
making the git intercept and dropping fakeroot privs for git global is probably
the least worst solution at this point. It will add slight overhead to git calls
but we don't make many so the overall impact is likely minimal.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agobase: Avoid circular references to our own scripts
Richard Purdie [Fri, 6 May 2022 15:56:01 +0000 (16:56 +0100)] 
base: Avoid circular references to our own scripts

We'd like to intercept git calls but we don't want circular references
and HOSTTOOLS currently sets them up. Tweak to avoid them.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agooeqa/selftest: add test for git working correctly inside pseudo
Ross Burton [Fri, 6 May 2022 15:56:00 +0000 (16:56 +0100)] 
oeqa/selftest: add test for git working correctly inside pseudo

The fix for CVE-2022-24765 in git[1] breaks any use of git inside
pseudo. Add a simple test case to oe-selftest to verify that at least
basic uses of git work fine under pseudo.

[1] https://github.com/git/git/commit/8959555cee7ec045958f9b6dd62e541affb7e7d9

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agocoreutils: update 9.0 -> 9.1
Alexander Kanavin [Fri, 6 May 2022 06:41:53 +0000 (08:41 +0200)] 
coreutils: update 9.0 -> 9.1

Drop patches:
fix-selinux-flask.patch
(upstream fixed the issue)

e8b56ebd536e82b15542a00c888109471936bfda.patch
(backport)

0001-uname-report-processor-and-hardware-correctly.patch
(upstream explicitly marks the options as non-portable and unreliable[1];
the patch is difficult to rebase, use case for oe unclear)

[1] https://git.savannah.gnu.org/gitweb/?p=coreutils.git;a=commitdiff;h=v8.24-7-g6d67649

License-Update: copyright years
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agosystemd: Fix build regression with latest update
Khem Raj [Fri, 6 May 2022 03:33:40 +0000 (20:33 -0700)] 
systemd: Fix build regression with latest update

This happens when ptest is enabled with clang compiler

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibgcrypt: Drop GPLv3 license after upstream changes
Richard Purdie [Thu, 5 May 2022 16:52:47 +0000 (17:52 +0100)] 
libgcrypt: Drop GPLv3 license after upstream changes

Upstream removed the GPLv3 component to the license here:

https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=fbb26c3ac514189f50a31f72dde2a02ef7b41f9f

Update our metadata accordingly as there are now no GPLv3 components.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agocairo: Add missing GPLv3 license checksum entry
Richard Purdie [Thu, 5 May 2022 19:39:02 +0000 (20:39 +0100)] 
cairo: Add missing GPLv3 license checksum entry

The trace tools are licensed under GPL-3.0-or-later but this wasn't
listed in LIC_FILES_CHKSUM. Fix that.

Ultimately we could disable that license if the trace PACKAGECONFIG is
disabled but I'll leave that to someone else if they're keen.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agostress-ng: disable apparmor from the correct spot
Alexander Kanavin [Thu, 5 May 2022 15:17:57 +0000 (17:17 +0200)] 
stress-ng: disable apparmor from the correct spot

do_configure uses the base.bbclass version, which can
call 'make clean', negating the disabling.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoMAINTAINERS.md: no more need for a prelink-cross maintainer
Michael Opdenacker [Thu, 5 May 2022 14:42:51 +0000 (16:42 +0200)] 
MAINTAINERS.md: no more need for a prelink-cross maintainer

Since prelink has been dropped

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibxml2: Upgrade 2.9.13 -> 2.9.14
Jiaqing Zhao [Thu, 5 May 2022 08:15:06 +0000 (16:15 +0800)] 
libxml2: Upgrade 2.9.13 -> 2.9.14

Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoqemu: update 6.2.0 -> 7.0.0
Alexander Kanavin [Thu, 5 May 2022 05:05:44 +0000 (07:05 +0200)] 
qemu: update 6.2.0 -> 7.0.0

Drop xfs/libxml2 options no longer offered upstream.

Dropped patches all found their way upstream, particularly
0001-qemu-Add-missing-wacom-HID-descriptor.patch as well.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agognupg: update 2.3.4 -> 2.3.6
Alexander Kanavin [Thu, 5 May 2022 05:05:43 +0000 (07:05 +0200)] 
gnupg: update 2.3.4 -> 2.3.6

Remove 0003-dirmngr-uses-libgpg-error.patch
(upstream addressed the issue).

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agoxauth: update 1.1.1 -> 1.1.2
Alexander Kanavin [Thu, 5 May 2022 05:05:42 +0000 (07:05 +0200)] 
xauth: update 1.1.1 -> 1.1.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 years agolibrsvg: update 2.54.0 -> 2.54.1
Alexander Kanavin [Thu, 5 May 2022 05:05:41 +0000 (07:05 +0200)] 
librsvg: update 2.54.0 -> 2.54.1

Drop patch as issue addressed upstream.

Restore doc generation, as it is now possible to disable/enable.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>