]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
2 years agoexternalsrc: Add trailing slash warnings dankm/vecima/externalsrc
Daniel McGregor [Wed, 14 Sep 2022 20:35:39 +0000 (14:35 -0600)] 
externalsrc: Add trailing slash warnings

When setting EXTERNALSRCBUILD or EXTERNALSRC, adding a trailing /
should be a warning, but overriding B happens after the warning is
checked.
So, also do the trailing slash warnings for EXTERNALSRC and
EXTERNALSRC_BUILD in the externalsrc class.

Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
2 years agoexternalsrc: avoid getting srcrevs
Daniel McGregor [Mon, 20 Mar 2023 15:39:42 +0000 (09:39 -0600)] 
externalsrc: avoid getting srcrevs

Avoid attempting to resolve AUTOREV with externalsrc. The prevents
build time errors with devtool on recipes using AUTOREV.

Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
2 years agogo: backport fix for CVE-2023-24537
Ross Burton [Thu, 20 Apr 2023 12:54:05 +0000 (13:54 +0100)] 
go: backport fix for CVE-2023-24537

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agoscreen: backport fix for CVE-2023-24626
Ross Burton [Wed, 19 Apr 2023 13:41:42 +0000 (14:41 +0100)] 
screen: backport fix for CVE-2023-24626

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agoapt-util: Fix ptest on musl
Khem Raj [Wed, 19 Apr 2023 06:08:22 +0000 (23:08 -0700)] 
apt-util: Fix ptest on musl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agoshadow: backport patch to fix CVE-2023-29383
Xiangyu Chen [Wed, 19 Apr 2023 05:43:35 +0000 (13:43 +0800)] 
shadow: backport patch to fix CVE-2023-29383

The fix of CVE-2023-29383.patch contains a bug that it rejects all
characters that are not control ones, so backup another patch named
"0001-Overhaul-valid_field.patch" from upstream to fix it.

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agoreport-error: make it catch ParseError error
Mingli Yu [Wed, 19 Apr 2023 05:30:09 +0000 (13:30 +0800)] 
report-error: make it catch ParseError error

Make the report-error catch ParseError error as below and then
we can check it directly via error report web.

ParseError at /build/layers/oe-core/meta/recipes-support/curl/curl_7.88.1.bb:32: unparsed line: 'PACKAGECONFIG[ares] = "--enable-ares,--disable-ares,c-ares,,,threaded-resolver'

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agomachine/qemuarm*: don't explicitly set vmalloc
Ross Burton [Tue, 18 Apr 2023 16:41:00 +0000 (17:41 +0100)] 
machine/qemuarm*: don't explicitly set vmalloc

In 5c6064 the qemuarm* machines gained vmalloc=256, because in testing
Bruce was seeing problems when the vmalloc area was too big for the
memory size of the machine (eg 256MB).

The intention was for the area to be very small, but 256 bytes is too
small and the kernel sets a minimal vmalloc area of 16MiB:

[    0.000000] vmalloc area is too small, limiting to 16MiB

However, a 16MiB area is too small and results in pages of messages when
you try and use the system:

[  242.822481] vmap allocation for size 4100096 failed: use vmalloc=<size> to increase size

There have been a number of changes since this commit, remove the
explicit vmalloc argument and use the default.  I've tested that the
system still boots locally.

[1] early_vmalloc(), https://elixir.bootlin.com/linux/latest/source/arch/arm/mm/mmu.c#L1170
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agoscripts/runqemu: Add possibility to disable network
Pavel Zhukov [Tue, 18 Apr 2023 13:33:25 +0000 (15:33 +0200)] 
scripts/runqemu: Add possibility to disable network

Default network configuration requires tun/tap module and while being
usable it conflicts with tap devices created by VPN clients sometimes
and requires root permissions to use . While it's possible to work
this around it's not always feasible if network is not required
Add nonetwork option which can be specified if the network connectivity is
not needed and SDL/serial is enough to communicate with the image.

Signed-off-by: Pavel Zhukov <pazhukov@suse.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agoscripts/rpm2cpio.sh: Use bzip2 instead of bunzip2
Pavel Zhukov [Tue, 18 Apr 2023 10:07:11 +0000 (12:07 +0200)] 
scripts/rpm2cpio.sh: Use bzip2 instead of bunzip2

bzip2 is in HOSTTOOLS already and used in few other places already.
This fixes bin_package class for RPM packages without adding bunzip2 to
HOSTTOOLS.

Signed-off-by: Pavel Zhukov <pavel@zhukoff.net>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agostress-ng: upgrade 0.15.06 -> 0.15.07
Wang Mingyu [Mon, 17 Apr 2023 08:07:57 +0000 (16:07 +0800)] 
stress-ng: upgrade 0.15.06 -> 0.15.07

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-pytest: upgrade 7.2.2 -> 7.3.1
Wang Mingyu [Mon, 17 Apr 2023 08:07:56 +0000 (16:07 +0800)] 
python3-pytest: upgrade 7.2.2 -> 7.3.1

Changelog:
https://docs.pytest.org/en/stable/changelog.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-packaging: upgrade 23.0 -> 23.1
Wang Mingyu [Mon, 17 Apr 2023 08:07:55 +0000 (16:07 +0800)] 
python3-packaging: upgrade 23.0 -> 23.1

Changelog:
===========
 Parse raw metadata
 Import underlying parser functions as an underscored variable
 Improve error for local version label with unsupported operators
 Add dedicated error for specifiers with incorrect .* suffix
 Replace spaces in platform names with underscores
 Relax typing of _key on _BaseVersion
 Handle prefix match with zeros at end of prefix correctly

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-dtschema: upgrade 2023.1 -> 2023.4
Wang Mingyu [Mon, 17 Apr 2023 08:07:54 +0000 (16:07 +0800)] 
python3-dtschema: upgrade 2023.1 -> 2023.4

Changelog:
==========
Schemas:
 - Add missing PCI descriptions and properties
 - Add I2C clock stretching property
 - Add 'firmware-name' property
 - Add UEFI chosen properties
 - Enable cache schema

Meta-schemas:
 - Improve checking non-patterns in patternProperties
 - Allow 'not' at top-level of schemas
 - Relax meta-schema checks on referenced schemas

Tools:
 - Handle examples with 'interrupt-controller' node

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agoofono: upgrade 2.0 -> 2.1
Wang Mingyu [Mon, 17 Apr 2023 08:04:31 +0000 (16:04 +0800)] 
ofono: upgrade 2.0 -> 2.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agoboost: upgrade 1.81.0 -> 1.82.0
Wang Mingyu [Mon, 17 Apr 2023 08:04:30 +0000 (16:04 +0800)] 
boost: upgrade 1.81.0 -> 1.82.0

Changelog:
https://www.boost.org/users/history/version_1_82_0.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agolibxml2: upgrade 2.10.3 -> 2.10.4
Wang Mingyu [Mon, 17 Apr 2023 08:04:29 +0000 (16:04 +0800)] 
libxml2: upgrade 2.10.3 -> 2.10.4

Changelog:
==========
### Security

- [CVE-2023-29469] Hashing of empty dict strings isn't deterministic
- [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType
- schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK

### Regressions

- SAX2: Ignore namespaces in HTML documents
- io: Fix "buffer full" error with certain buffer sizes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agolibsolv: upgrade 0.7.23 -> 0.7.24
Wang Mingyu [Mon, 17 Apr 2023 08:04:28 +0000 (16:04 +0800)] 
libsolv: upgrade 0.7.23 -> 0.7.24

Changelog:
==========
- selected bug fixes:
  * handle learnt rules in solver_alternativeinfo()
- new features:
  * support x86_64_v[234] architecture levels
  * implement decision sorting for package decisionlists

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agolibgit2: upgrade 1.6.3 -> 1.6.4
Wang Mingyu [Mon, 17 Apr 2023 08:04:27 +0000 (16:04 +0800)] 
libgit2: upgrade 1.6.3 -> 1.6.4

Bug fixes
=========
    config: return GIT_ENOTFOUND for missing programdata

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agolibxml2: Disable icu tests on musl
Khem Raj [Mon, 17 Apr 2023 06:04:33 +0000 (23:04 -0700)] 
libxml2: Disable icu tests on musl

these tests do not work with musl's iconv implementation and would need
enabling icu support using --with-icu which we do not enable by default

Additionally enable locale with musl too.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agogawk: Add skipped.txt to emit test to ignore
Khem Raj [Fri, 14 Apr 2023 23:42:58 +0000 (16:42 -0700)] 
gawk: Add skipped.txt to emit test to ignore

This file can be processed by run-ptest during runtime and tests
mentioned in skipped.txt will not be run.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agogawk: Remove redundant patch
Khem Raj [Fri, 14 Apr 2023 23:42:57 +0000 (16:42 -0700)] 
gawk: Remove redundant patch

This patch is doing the same things thats already being done in the
do_install_ptest where the problematic tests are being deleted from
final package. run-ptest script runs a find for available tests and runs
each test target found during run therefore its enough to remove
them from final install.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Ross Burton <ross.burton@arm.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agogawk: Disable known ptest fails on musl
Khem Raj [Fri, 14 Apr 2023 23:42:56 +0000 (16:42 -0700)] 
gawk: Disable known ptest fails on musl

Add needed locale rdeps on musl as well.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agokernel: improve initramfs bundle processing time
Bruce Ashfield [Fri, 14 Apr 2023 19:29:19 +0000 (15:29 -0400)] 
kernel: improve initramfs bundle processing time

This is a partial fix for bugzilla 15059 [https://bugzilla.yoctoproject.org/show_bug.cgi?id=15059]

It has been noted by several people that when an initramfs is bundled:

  - a lot of the kernel is rebuilt
  - it takes a really long time

When looking at the logs, the second kernel compilation (that performs
the bundle) is not using the parallel make settings, and builds with
-j1.

We are already explicitly passing PARALLEL_MAKE when building kernel
modules, and by extending that explicit use to the main kernel
compilation, we ensure that we always get a parallel build.

Build times chnaged from more than 30 minutes for the bundle, to
3 minutes in local testing.

The question of whether or not too much is rebuilding during the
bundle step is still an open question, but with this tweak, at least
the build time is back in the realm of acceptable.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agooeqa/utils/metadata.py: Fix running oe-selftest running with no distro set
Thomas Roos [Fri, 14 Apr 2023 14:34:17 +0000 (16:34 +0200)] 
oeqa/utils/metadata.py: Fix running oe-selftest running with no distro set

This will use default values when no distribution is set.

[YOCTO #15086]

Signed-off-by: Thomas Roos <throos@amazon.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agooeqa/selftest: Use SSTATE_DIR of parent build dir
Thomas Roos [Fri, 14 Apr 2023 14:31:40 +0000 (16:31 +0200)] 
oeqa/selftest: Use SSTATE_DIR of parent build dir

This will configure the build-st/conf/local.conf with the SSTATE_DIR
of the parent build dir to speed up the build, test, dev process.

Signed-off-by: Thomas Roos <throos@amazon.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agosystemd: upgrade 253.1 -> 253.3
Wang Mingyu [Fri, 14 Apr 2023 02:18:45 +0000 (10:18 +0800)] 
systemd: upgrade 253.1 -> 253.3

Changelog:
https://github.com/systemd/systemd-stable/blob/v253.3/NEWS

0025-systemctl-explicitly-cast-the-constants-to-uint64_t.patch
removed since it's included in 253.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-build: add missing run-time dependencies
Bartosz Golaszewski [Thu, 13 Apr 2023 09:15:57 +0000 (11:15 +0200)] 
python3-build: add missing run-time dependencies

python3-build has several run-time dependencies that are missing from
the recipe. This makes it impossible to use the module in self-hosted
images. Add missing RDEPENDS.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-manifest: add ensurepip
Bartosz Golaszewski [Thu, 13 Apr 2023 09:15:56 +0000 (11:15 +0200)] 
python3-manifest: add ensurepip

Add the pip bootstrapping module from the standard library to the
manifest. This module is a run-time requirement of python3-build.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-manifest: add tomllib
Bartosz Golaszewski [Thu, 13 Apr 2023 09:15:55 +0000 (11:15 +0200)] 
python3-manifest: add tomllib

Add the TOML parsing module from the standard library to the manifest.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-packaging: add missing run-time dependencies
Bartosz Golaszewski [Thu, 13 Apr 2023 09:15:54 +0000 (11:15 +0200)] 
python3-packaging: add missing run-time dependencies

python3-profile is required by python3-packaging at run-time.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-pyproject-hooks: add missing run-time dependencies
Bartosz Golaszewski [Thu, 13 Apr 2023 09:15:53 +0000 (11:15 +0200)] 
python3-pyproject-hooks: add missing run-time dependencies

JSON module is required at run-time by pyproject-hooks.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopackage: Use shlex instead of deprecated pipe
Ola x Nilsson [Thu, 13 Apr 2023 06:46:32 +0000 (08:46 +0200)] 
package: Use shlex instead of deprecated pipe

The pipe library is deprecated in Python 3.11 and will be removed in
Python 3.13.  pipe.quote is just an import of shlex.quote anyway.

Signed-off-by: Ola x Nilsson <olani@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopatch.py: Use shlex instead of deprecated pipe
Ola x Nilsson [Thu, 13 Apr 2023 06:46:31 +0000 (08:46 +0200)] 
patch.py: Use shlex instead of deprecated pipe

The pipe library is deprecated in Python 3.11 and will be removed in
Python 3.13.  pipe.quote is just an import of shlex.quote anyway.

Clean up imports while we're at it.

Signed-off-by: Ola x Nilsson <olani@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agomusl-locales: Add Canadian French (fr_CA) locale support
Khem Raj [Thu, 13 Apr 2023 05:54:31 +0000 (22:54 -0700)] 
musl-locales: Add Canadian French (fr_CA) locale support

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agocve-update-nvd2-native: added the missing http import
Jan Vermaete [Wed, 12 Apr 2023 10:19:26 +0000 (12:19 +0200)] 
cve-update-nvd2-native: added the missing http import

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agolibpam: Fix the xtests/tst-pam_motd[1|3] failures
Zhixiong Chi [Wed, 12 Apr 2023 09:58:05 +0000 (02:58 -0700)] 
libpam: Fix the xtests/tst-pam_motd[1|3] failures

Reproducer:
1.Enable the ptest of libpam and build the image.
2.Boot the rootfs with nfs, then run the following tests as root:
 cd /usr/share/Linux-PAM/xtests
 /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd1
 /usr/share/Linux-PAM/xtests# ./run-xtests.sh . tst-pam_motd3

After applying this patch, the ptest doesn't be failed.

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopopulate_sdk_ext.bbclass: set METADATA_REVISION with an DISTRO override
Martin Jansa [Tue, 11 Apr 2023 09:03:46 +0000 (11:03 +0200)] 
populate_sdk_ext.bbclass: set METADATA_REVISION with an DISTRO override

* otherwise it ends '<unknown>' inside esdk, because of parsing order:
  # $METADATA_REVISION [3 operations]
  #   set /OE/build/test-D/conf/local.conf:43
  #     "f2da54ef432eac89b0f18eaad68e602b6990b5de"
  #   immediate /OE/build/test-D/layers/poky/meta/classes/metadata_scm.bbclass:9
  #     "${@oe.buildcfg.detect_revision(d)}"
  #   set /OE/build/test-D/layers/poky/meta/classes/metadata_scm.bbclass:10
  #     [vardepvalue] "${METADATA_REVISION}"
  # pre-expansion value:
  #   "<unknown>"
  METADATA_REVISION="<unknown>"

* This causes base-files.do_install and following tasks to have different
  signatures between esdk and the build directory where this esdk was created:

  bitbake-diffsigs {test-D,poky/build-uninative-disabled}/tmp/stamps/qemux86_64-poky-linux/base-files/*do_install*sigdata*
  NOTE: Starting bitbake server...
  basehash changed from 5b6981cf58bfd57d416b0e31611b73a26baae635dd1ac31c08d46f95064c3ffc to dbdce042da4d7813d632b6d1cc87a16f728ad20e55fecbc392830e6acf72babd
  Variable METADATA_REVISION value changed from '<unknown>' to 'f2da54ef432eac89b0f18eaad68e602b6990b5de'

  and an warning from "python3 /OE/build/test-D/ext-sdk-prepare.py" when eSDK is being prepared for use:
  WARNING: The base-files:do_install sig is computed to be 83b9c9a6ef1145baac5a1e0d08814b9156af239c58fc42df95c25a9cd8a7f201,
    but the sig is locked to 3dc22233059075978e5503691e98e79e7cc60db94259dfcd886bca2291c0add7 in SIGGEN_LOCKEDSIGS_t-qemux86-64

[RP: Add commit about why we need the override for future reference]
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agolibarchive: Enable acls, xattr for native as well as target
Piotr Łobacz [Mon, 3 Apr 2023 11:06:10 +0000 (13:06 +0200)] 
libarchive: Enable acls, xattr for native as well as target

Libarchive is being used by OPKG package manager as default
API for extracting tar files. This fix allows us to extract
ipks packages with preserved ACLs and xattrs.

Partially addresses [YOCTO #15091]

[RP: Merge into main PACKAGECONFIG and tweak commit message]
Signed-off-by: Piotr Łobacz <p.lobacz@welotec.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 years agometa/recipes: ensure all recipes have a SUMMARY
Alexander Kanavin [Fri, 31 Mar 2023 05:26:34 +0000 (07:26 +0200)] 
meta/recipes: ensure all recipes have a SUMMARY

DESCRIPTION is optional for now; writing good component descriptions
is not easy (but appreciated).

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agokernel-devsrc: depend on python3-core instead of python3
bkylerussell@gmail.com [Tue, 11 Apr 2023 17:36:16 +0000 (13:36 -0400)] 
kernel-devsrc: depend on python3-core instead of python3

Avoids pulling in potential GPLv3 packages through python3-misc catch-all.

python3-core is the intended minimal RDEPENDS for packages requiring python3
support.  Other python3 module dependencies should be listed explicitly.

Signed-off-by: Kyle Russell <bkylerussell@gmail.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agotiff: Add fix for CVE-2022-4645
Pawan Badganchi [Tue, 11 Apr 2023 14:39:11 +0000 (20:09 +0530)] 
tiff: Add fix for CVE-2022-4645

Below patch fixes the CVE-2022-4645 as well.

0001-Revised-handling-of-TIFFTAG_INKNAMES-and-related-TIF.patch

Link: https://nvd.nist.gov/vuln/detail/CVE-2022-4645
Signed-off-by: Pawan Badganchi <Pawan.Badganchi@kpit.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agokernel-fitimage: Fix the default dtb config check
Arslan Ahmad [Tue, 11 Apr 2023 11:25:09 +0000 (16:25 +0500)] 
kernel-fitimage: Fix the default dtb config check

The current check for default dtb image checks if the file exists and is
not empty but appends a slash to the path due to which the file is never
found. It also doesn't replace slash in filename with _ as done when
populating the DTB variable. A better way to check the existence of the
device tree would be from the list of DTBs since this is used during
compilation.

Signed-off-by: Arslan Ahmad <arslan_ahmad@mentor.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agomesa: upgrade 23.0.0 -> 23.0.2
Wang Mingyu [Tue, 11 Apr 2023 01:01:27 +0000 (09:01 +0800)] 
mesa: upgrade 23.0.0 -> 23.0.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agosystemd: Refresh a musl patch to remove patch-fuzz with 253.3
Khem Raj [Mon, 10 Apr 2023 17:09:43 +0000 (10:09 -0700)] 
systemd: Refresh a musl patch to remove patch-fuzz with 253.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agolinux-firmware: upgrade 20230210 -> 20230404
Dmitry Baryshkov [Mon, 10 Apr 2023 11:29:14 +0000 (14:29 +0300)] 
linux-firmware: upgrade 20230210 -> 20230404

The LICENCE.qat_firmware license file was updated to reflect Intel
licensing (it removed a term regarding patent licenses).

License-Update: additional files

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
2 years agopython3-setuptools: upgrade 67.6.0 -> 67.6.1
Wang Mingyu [Mon, 10 Apr 2023 09:41:32 +0000 (17:41 +0800)] 
python3-setuptools: upgrade 67.6.0 -> 67.6.1

Changelog:
==========
 #3865: Fixed _WouldIgnoreField warnings for scripts and gui_scripts, when entry-points is not listed in dynamic.
 #3875: Update code generated by validate-pyproject to use v0.12.2. This should fix default license patterns when pyproject.toml is used.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-pytz: upgrade 2022.7.1 -> 2023.3
Wang Mingyu [Mon, 10 Apr 2023 09:41:31 +0000 (17:41 +0800)] 
python3-pytz: upgrade 2022.7.1 -> 2023.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agorust: Upgrade 1.68.1 -> 1.68.2
Alex Kiernan [Mon, 10 Apr 2023 09:41:22 +0000 (10:41 +0100)] 
rust: Upgrade 1.68.1 -> 1.68.2

Changes:

* Update the GitHub RSA host key bundled within Cargo. The key was
  rotated by GitHub on 2023-03-24 after the old one leaked.
* Mark the old GitHub RSA host key as revoked. This will prevent Cargo
  from accepting the leaked key even when trusted by the system.
* Add support for @revoked and a better error message for
  @cert-authority in Cargo’s SSH host key verification

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-pyopenssl: upgrade 23.0.0 -> 23.1.1
Wang Mingyu [Mon, 10 Apr 2023 09:39:55 +0000 (17:39 +0800)] 
python3-pyopenssl: upgrade 23.0.0 -> 23.1.1

Changelog:
===========
- Worked around an issue in OpenSSL 3.1.0 which caused X509Extension.get_short_name
  to raise an exception when no short name was known to OpenSSL. #1204.
- cryptography maximum version has been increased to 40.0.x.
- Add OpenSSL.SSL.Connection.DTLSv1_get_timeout and
  OpenSSL.SSL.Connection.DTLSv1_handle_timeout to support DTLS timeouts #1180.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-pygobject: upgrade 3.42.2 -> 3.44.1
Wang Mingyu [Mon, 10 Apr 2023 09:39:54 +0000 (17:39 +0800)] 
python3-pygobject: upgrade 3.42.2 -> 3.44.1

Changelog:
==========
    Fix tests with glib 2.76 !240
    Note: PyGObject is in need of more maintainers, please read https://www.bassi.io/articles/2022/12/02/on-pygobject/
    Note: This is an unstable release.
    Drop support for Python 3.6 !184
    meson: bump minimum version to 0.53.0 and update subprojects !227
    gimodule: fix floating state of python objects created with g_object_new !129
    Gtk.Template: Accept PathLike objects as a filename !195
    info: Show which type/object callables are bound to !194
    IntrospectionModule: handle two threads loading type at same time !149
    Port to Py_TRASHCAN_BEGIN !226
    Other cleanups/improvements: !181 !173
    This release also includes all changes from 3.42.1 and 3.42.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-pathspec: upgrade 0.11.0 -> 0.11.1
Wang Mingyu [Mon, 10 Apr 2023 09:39:53 +0000 (17:39 +0800)] 
python3-pathspec: upgrade 0.11.0 -> 0.11.1

Changelog:
==========
Bug fixes:
----------
    Issue #74: Include directory should override exclude file.

Improvements:
-------------
    Pull #75: Fix partially unknown PathLike type.
    Convert os.PathLike to a string properly using os.fspath.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-markdown: upgrade 3.4.1 -> 3.4.3
Wang Mingyu [Mon, 10 Apr 2023 09:39:52 +0000 (17:39 +0800)] 
python3-markdown: upgrade 3.4.1 -> 3.4.3

Changelog:
=========
 Restore console script (#1327).
 Improve standalone * and _ parsing (#1300).
 Consider <html> HTML tag a block-level element (#1309).
 Officially support Python 3.11.
 Switch from setup.py to pyproject.toml.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-installer: upgrade 0.6.0 -> 0.7.0
Wang Mingyu [Mon, 10 Apr 2023 09:39:51 +0000 (17:39 +0800)] 
python3-installer: upgrade 0.6.0 -> 0.7.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-importlib-metadata: upgrade 6.0.0 -> 6.2.0
Wang Mingyu [Mon, 10 Apr 2023 09:37:19 +0000 (17:37 +0800)] 
python3-importlib-metadata: upgrade 6.0.0 -> 6.2.0

Changelog:
===========
- #384: PackageMetadata now stipulates an additional get method allowing for
  easy querying of metadata keys that may not be present.
- #428: packages_distributions now honors packages and modules with Python
  modules that not .py sources (e.g. .pyc, .so).
- #434: Expand protocol for PackageMetadata.get_all to match the upstream
  implementation of email.message.Message.get_all in python/typeshed#9620.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-hypothesis: upgrade 6.68.2 -> 6.71.0
Wang Mingyu [Mon, 10 Apr 2023 09:37:18 +0000 (17:37 +0800)] 
python3-hypothesis: upgrade 6.68.2 -> 6.71.0

Changelog:
https://hypothesis.readthedocs.io/en/latest/changes.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-cython: upgrade 0.29.33 -> 0.29.34
Wang Mingyu [Mon, 10 Apr 2023 09:37:17 +0000 (17:37 +0800)] 
python3-cython: upgrade 0.29.33 -> 0.29.34

Bugs fixed
==========
- A refence leak of the for-loop list/tuple iterable was resolved if the
  for-loop's else: branch executes a break for an outer loop.
- Some C compile failures in CPython 3.12 were resolved.
- Some old usages of the deprecated Python imp module were replaced with importlib.
- Some issues with depfile generation were resolved.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agovala: upgrade 0.56.4 -> 0.56.6
Wang Mingyu [Mon, 10 Apr 2023 09:34:16 +0000 (17:34 +0800)] 
vala: upgrade 0.56.4 -> 0.56.6

Changelog:
===========
 * Regression fix:
  - vala: Improve initialization of namespace fields with compound
    literal [#1424]

 * Bindings:
  - gio-2.0,glib-2.0,gobject-2.0: Update 2.74 symbols
  - webkit2gtk-4.*: Update to 2.40.0
  - webkitgtk-6.0: Update to 2.40.0
  - gtk4: Update to 4.10.1~40b154bf from 0.58
  - gtk4: Add sealed to all the final types
  - gtk+-3.0: Fix ToolPalette.icon_size get-accessor type
  - webkitgtk-6.0: Update to 2.39.90

 * Various improvements and bug fixes:
  - codegen:
    + Consistently handle GLib.Error as boxed type [#1418]
    + Add cast to accessor calls for generic property implementations
    + Use g_object_class_override_property to implement generic interface
      properties [#1419]
    + Add declaration for register call of dynamic DBus interfaces [#1422]
  - vala:
    + Correctly handle pre/post-increment expression as index of element
      access [#1417]
    + Set proper value-type of unary ref/out expression in initializers [#1421]
    + Allow assignment of namespace fields with inline allocated arrays
  - gtkmodule: Improve error messages

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoxwayland: upgrade 22.1.8 -> 23.1.1
Wang Mingyu [Mon, 10 Apr 2023 09:34:15 +0000 (17:34 +0800)] 
xwayland: upgrade 22.1.8 -> 23.1.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoxserver-xorg: upgrade 21.1.7 -> 21.1.8
Wang Mingyu [Mon, 10 Apr 2023 09:34:14 +0000 (17:34 +0800)] 
xserver-xorg: upgrade 21.1.7 -> 21.1.8

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agowpebackend-fdo: upgrade 1.14.0 -> 1.14.2
Wang Mingyu [Mon, 10 Apr 2023 09:34:13 +0000 (17:34 +0800)] 
wpebackend-fdo: upgrade 1.14.0 -> 1.14.2

Changelog:
==========
- Reverted a change introduced in 1.14.1 which introduced crashes both
  with WebKitGTK and WPE running under Wayland in some configurations.
- Fix a crash caused by wrong assertion, which was typically triggered in
  debug builds when using the NVidia drivers.
- Fix WebKit no longer repainting after provisional navigation with
  PSON enabled.
- Fix graphics buffer leaks by always freeing them in buffer destroy
  listener callbacks.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agowayland: upgrade 1.21.0 -> 1.22.0
Wang Mingyu [Mon, 10 Apr 2023 09:34:12 +0000 (17:34 +0800)] 
wayland: upgrade 1.21.0 -> 1.22.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agotexinfo: upgrade 7.0.2 -> 7.0.3
Wang Mingyu [Mon, 10 Apr 2023 09:04:19 +0000 (17:04 +0800)] 
texinfo: upgrade 7.0.2 -> 7.0.3

Changelog:
==========
* texi2any
  . fix performance regression when Perl binary extension (XS) modules
    are not being used (e.g. with TEXINFO_XS=omit)

* info
  . further fix of recoding of UTF-8 files to ASCII to avoid text
    disappearing from nodes
  . avoid possible freeze at start of a file with '-v nodeline=pointers'

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agosqlite3: upgrade 3.41.0 -> 3.41.2
Wang Mingyu [Mon, 10 Apr 2023 09:04:17 +0000 (17:04 +0800)] 
sqlite3: upgrade 3.41.0 -> 3.41.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agospirv-tools: upgrade 1.3.239.0 -> 1.3.243.0
Wang Mingyu [Mon, 10 Apr 2023 09:04:16 +0000 (17:04 +0800)] 
spirv-tools: upgrade 1.3.239.0 -> 1.3.243.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agospirv-headers: upgrade 1.3.239.0 -> 1.3.243.0
Wang Mingyu [Mon, 10 Apr 2023 09:04:15 +0000 (17:04 +0800)] 
spirv-headers: upgrade 1.3.239.0 -> 1.3.243.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoruby: upgrade 3.2.1 -> 3.2.2
Wang Mingyu [Mon, 10 Apr 2023 09:01:54 +0000 (17:01 +0800)] 
ruby: upgrade 3.2.1 -> 3.2.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopango: upgrade 1.50.13 -> 1.50.14
Wang Mingyu [Mon, 10 Apr 2023 09:01:53 +0000 (17:01 +0800)] 
pango: upgrade 1.50.13 -> 1.50.14

Changelog:
- Fix underline thickness in scaled contexts

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agomtools: upgrade 4.0.42 -> 4.0.43
Wang Mingyu [Mon, 10 Apr 2023 09:01:50 +0000 (17:01 +0800)] 
mtools: upgrade 4.0.42 -> 4.0.43

Changelog:
==========
- Fix root directory test in mattrib
- -b BiosDisk flag for mformat to allow setting physdrive to
  a user-specified value
- Clearer error message in mformat when trying to mformat a
  disk whose total size is not known
- Make recursive copy more consistent
- Trailing slash now always implies target should be a directory
- Code cleanup

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoman-pages: upgrade 6.03 -> 6.04
Wang Mingyu [Mon, 10 Apr 2023 08:59:35 +0000 (16:59 +0800)] 
man-pages: upgrade 6.03 -> 6.04

License-Update:
 tmp/ -> .tmp/

Changelog:
============
-  Sections:
   -  Add HISTORY.
   -  HISTORY: Restore C89 references.
   -  Repurpose VERSIONS.
   -  Simplify STANDARDS.
   -  SYNOPSIS: Mark several functions as deprecated.

-  Build system:
   -  Support installing in different mandirs
      (e.g., man3typedir='/usr/share/man/man3').
   -  Support installing compressed pages (Z='.gz').
   -  Support installing link pages as symlinks (LINK_PAGES='symlink').

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agolibcap: upgrade 2.67 -> 2.68
Wang Mingyu [Mon, 10 Apr 2023 08:59:34 +0000 (16:59 +0800)] 
libcap: upgrade 2.67 -> 2.68

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoccache: upgrade 4.7.4 -> 4.8
Wang Mingyu [Mon, 10 Apr 2023 08:59:33 +0000 (16:59 +0800)] 
ccache: upgrade 4.7.4 -> 4.8

License-Update:
 bump: Upgrade to doctest 2.4.10
 chore: Update copyright years

Changelog:
https://ccache.dev/releasenotes.html#_ccache_4_8

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoacpica: upgrade 20220331 -> 20230331
Wang Mingyu [Mon, 10 Apr 2023 08:59:32 +0000 (16:59 +0800)] 
acpica: upgrade 20220331 -> 20230331

License-Update: Copyright year updated to 2023.

Changelog:
==========
-Update all copyright notices to the year 2023. This effects all source
 modules, as well as utility signons.
-Add OS-specific support for Zephyr RTOS.
-Fix miscellaneous code that accesses various objects.
-Remove some dead code.
-Add C ?Flexible Array? support.
-Add support for 64 bit LoongArch compilation.
-Add first batch of RISC-V related definitions.
-Performed a global automated update to remove tabs, fix indentation
 issues, etc.
-Allow disabling of -Werror. For distro maintainers having '-Werror' can
 delay update of GCC. Since every GCC release might add new warnings that
 were not yet captured, it might break the build of packages. With this
 change, distros can now build with 'NOWERROR=TRUE' instead of patching
 either the errors or the makefiles. The default behavior keeps on using
 '-Werror'.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agompg123: upgrade 1.31.2 -> 1.31.3
Wang Mingyu [Mon, 10 Apr 2023 08:59:31 +0000 (16:59 +0800)] 
mpg123: upgrade 1.31.2 -> 1.31.3

Changelog:
=========
- build:
-- Fix --disable-8bit.
-- Fall back to generic decoder if no yasm for MSVC (bug 346).
-- Fix some pedantic compiler warnings, avoid breaking libtool wrappers.
- mpg123:
-- Fix verbose position printout for new resampling outside libmpg123 (where
   output rate differs from decoding rate).
- libsyn123:
-- Fix reconfiguration of resampler to avoid double free when reducing
   decimator stages to zero (bug 350).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agolibsoup: upgrade 3.2.2 -> 3.4.0
Wang Mingyu [Mon, 10 Apr 2023 08:58:19 +0000 (16:58 +0800)] 
libsoup: upgrade 3.2.2 -> 3.4.0

Changelog:
==========
* Fix possible crash in SoupContentSniffer
* Fix socket leak
* Add missing annotation to soup_header_g_string_append_param_quoted()
* Fix regression in 'SoupCookieJar' not handling valid Secure cookies
* Fix crash when skipping HTTP/1 response stream with chunked enconding
* Change Session to unqueue finished items earlier without an extra MainContext iteration
* Add 'SoupMessage::got-body-data' signal to monitor progress of reads
* Add 'soup_session_send_and_splice()' and 'soup_session_send_and_splice_async()' convenience APIs
* Add 'soup_message_set_force_http1()' and 'soup_message_get_force_http1()' APIs
* Change 'soup_cookie_copy()' to not retain default ports
* Ensure 'SoupServerMessage' socket is available in websocket handler
* Fix 'soup_message_new()' not erroring when URI has an empty host
* Fix thread-saftey issues in 'SoupConnectionAuth'
* Fix various connection leaks
* Fix the possibility of sending invalid empty 'Sec-WebSocket-Protocol' header
* Fix IO errors not being handled on 'CONNECT' messages
* Numerous improvements to cookies:
    * Add support for cookie prefixes ('__Secure-' and '__Host-')
    * Reject cookies with control characters in name or value
    * Reject 'SameSite=None' cookies without 'Secure'
    * Change 'soup_cookie_parse()' to be more strict about what is considered whitespace
    * Change default SameSite value to 'Lax'
    * Fix 'soup_cookie_equal()' with 'NULL' path

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agolibsdl2: upgrade 2.26.3 -> 2.26.5
Wang Mingyu [Mon, 10 Apr 2023 08:58:18 +0000 (16:58 +0800)] 
libsdl2: upgrade 2.26.3 -> 2.26.5

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agolibpcap: upgrade 1.10.3 -> 1.10.4
Wang Mingyu [Mon, 10 Apr 2023 08:58:17 +0000 (16:58 +0800)] 
libpcap: upgrade 1.10.3 -> 1.10.4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agolibhandy: upgrade 1.8.1 -> 1.8.2
Wang Mingyu [Mon, 10 Apr 2023 08:58:16 +0000 (16:58 +0800)] 
libhandy: upgrade 1.8.1 -> 1.8.2

Changelog:
==========
- Demo
  - Correctly use GtkSwitch
  - Fix a GLib deprecation
- Docs
  - Fix dependency names
- HdyTabView
  - Fix set_menu_model() input check
  - Fix a typo in docs
- HdySwipeable
  - Fix get_swipe_area() fallback
- Memory leak fixes
- Translation updates
  - Slovenian

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agocracklib: upgrade 2.9.10 -> 2.9.11
Wang Mingyu [Mon, 10 Apr 2023 08:56:35 +0000 (16:56 +0800)] 
cracklib: upgrade 2.9.10 -> 2.9.11

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agobind: upgrade 9.18.12 -> 9.18.13
Wang Mingyu [Mon, 10 Apr 2023 08:56:34 +0000 (16:56 +0800)] 
bind: upgrade 9.18.12 -> 9.18.13

Changelog:
==========
[bug] Use two pairs of dns_db_t and dns_dbversion_t in a
      catalog zone structure to avoid a race between the
      dns__catz_update_cb() and dns_catz_dbupdate_callback()
      functions. [GL #3907]

[bug] Make sure to revert the reconfigured zones to the
      previous version of the view, when the new view
      reconfiguration fails during the configuration of
      one of the configured zones. [GL #3911]

[bug] Fix error path cleanup issues in dns_catz_new_zones()
      and dns_catz_new_zone() functions. [GL #3900]

[bug] Unregister db update notify callback before detaching
      from the previous db inside the catz update notify
      callback. [GL #3777]

[func Run the catalog zone update process on the offload
      threads. [GL #3881]

[func Add shutdown signaling for catalog zones. [GL !7571]

[func Add reference count tracing for dns_catz_zone_t and
      dns_catz_zones_t. [GL !7570]

[bug] Detach 'rpzs' and 'catzs' from the previous view in
      configure_rpz() and configure_catz(), respectively,
      just after attaching it to the new view. [GL #3880]

[test Don't test HMAC-MD5 when not supported by libcrypto.
      [GL #3871]

[bug] Fix RPZ reference counting error on shutdown in
      dns__rpz_timer_cb(). [GL #3866]

[test Test various 'islands of trust' configurations when
      using managed keys. [GL #3662]

[bug] Building against (or running with) libuv versions
      1.35.0 and 1.36.0 is now a fatal error.  The rules for
      mixing and matching compile-time and run-time libuv
      versions have been tightened for libuv versions between
      1.35.0 and 1.40.0. [GL #3840]

[bug] dnssec-cds failed to cleanup properly. [GL #3831]

[bug] Source ports configured for query-source,
      transfer-source, etc, were being ignored. (This
      feature is deprecated, but it is not yet removed,
      so the bug still needed fixing.) [GL #3790]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoapr: upgrade 1.7.2 -> 1.7.3
Wang Mingyu [Mon, 10 Apr 2023 08:56:33 +0000 (16:56 +0800)] 
apr: upgrade 1.7.2 -> 1.7.3

Changelog:
===========
  *) apr-1-config: Fix crosscompiling detection in apr-1-config. PR 66510
  *) configure: Add --enable-sysv-shm to use SysV shared memory (shmget) if
     available.
  *) apr_socket_sendfile: Use WSAIoctl() to get TransmitFile function
     pointer on Windows.
  *) apr_dir_read: Do not request short file names on Windows 7
     and later.
  *) apr_file_gets: Optimize for buffered files on Windows.
  *) Fix a deadlock when writing to locked files opened with APR_FOPEN_APPEND
     on Windows. PR 50058.
  *) Don't seek to the end when opening files with APR_FOPEN_APPEND on Windows.
  *) apr_file_write: Optimize large writes to buffered files on Windows.
  *) apr_file_write: Optimize large reads from buffered files on Windows.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agomusl: Update to latest trunk
Khem Raj [Sun, 9 Apr 2023 02:39:33 +0000 (19:39 -0700)] 
musl: Update to latest trunk

Brings these changes

1d5750b9 fix swprintf handling of nul character in output
0e523480 in printf, use ferror macro rather than directly inspecting flags bit
868c9643 remove wide printf dependency on ugly hack in vfprintf
3a051769 fix (normal, narrow) printf erroneously processing %n after output errors
0440ed69 fix wide printf continuation after output or encoding errors
d055e6a4 fix wide printf forms ignoring width for %lc format specifier
b6811019 poll: fix misuse of timespec type on 32-bit archs without poll syscall
8949da7a select: fix 64-bit timeout truncation on pre-time64 kernels
3281047c dup3: don't set FD_CLOEXEC on failure on kernels without dup3 syscall
c99b7daa fix dup3 ignoring all flags but O_CLOEXEC on archs with SYS_dup2 syscall
fb7fb5e4 fix pipe2 silently ignoring unknown flags on old kernels
b1dfb734 getservbyport_r: fix wrong result if getnameinfo fails with EAI_OVERFLOW
595416b1 getservbyport_r: fix out-of-bounds buffer read
1a708ece getifaddrs: fix UB via taking address of null pointer union dereference
c499c108 accept4: don't fall back to accept if we got unknown flags
523d9b96 fix potential read past end of buffer in getnameinfo host name lookup
d0b7f976 dns: fix workaround for systems defaulting to ipv6-only sockets
bec42ef3 dns: handle early eof in tcp fallback
9b132e55 prevent CNAME/PTR parsing from reading data past the response end
12590c8b fix out-of-bounds reads in __dns_parse
bc695a5a fix incorrect unit for CPU_SETSIZE macro

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agocargo: Fix build on musl/riscv
Khem Raj [Sat, 8 Apr 2023 20:19:00 +0000 (13:19 -0700)] 
cargo: Fix build on musl/riscv

libc needs fix for defining scope of SOCK_SEQPACKET

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoffmpeg: Disable asm and rvv on riscv32
Khem Raj [Sat, 8 Apr 2023 20:18:59 +0000 (13:18 -0700)] 
ffmpeg: Disable asm and rvv on riscv32

ffmpeg 6.0 has added assembly routines which uses rv64i ISA
unconditionally, ideally it should check for ISA before using those
instructions.

Fixes errors like
<instantiation>:1:1: error: instruction requires the following: RV64I Base Instruction Set
ld t0, (a1)
^
src/libavcodec/riscv/pixblockdsp_rvi.S:24:1: note: while in macro instantiation
.irp row, 0, 1, 2, 3, 4, 5, 6, 7
^
<instantiation>:3:9: error: instruction requires the following: RV64I Base Instruction Set
        sd zero, ((0 * 16) + 0)(a0)
        ^

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoe2fsprogs: Define 64bit off_t on rv32
Khem Raj [Sat, 8 Apr 2023 17:13:01 +0000 (10:13 -0700)] 
e2fsprogs: Define 64bit off_t on rv32

Help configure to build it correctly on rv32 and musl especially, it
shoild not ideally poke at _FILE_OFFSET_BITS, its not a portable define

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agopython3-psutil: fix-up -tests runtime dependencies
Mark Asselstine [Fri, 7 Apr 2023 23:36:01 +0000 (19:36 -0400)] 
python3-psutil: fix-up -tests runtime dependencies

The psutil.tests module makes use of gcc, other tools and a minimal
set of headers and build tools. If these are missing you will see

======================================================================
ERROR: psutil.tests.test_process.TestProcess.test_weird_environ
----------------------------------------------------------------------
Traceback (most recent call last):
 File "./psutil/tests/test_process.py", line 1452, in test_weird_environ
   create_exe(path, c_code=code)
 File "./psutil/tests/__init__.py", line 831, in create_exe
   raise ValueError("gcc is not installed")
ValueError: gcc is not installed

along with other errors related to the missing tools and headers.

Add the missing RDEPENDS for the -tests package such that simply
adding the -tests package to an image will be all that is needed.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agolibnotify: remove dependency dbus
Kai Kang [Fri, 7 Apr 2023 05:15:19 +0000 (13:15 +0800)] 
libnotify: remove dependency dbus

It ported to use GDBus in libnotify 0.7.0 [1]. So remove dbus from
DEPENDS. And GDBus is provided by glib-2.0.

[1]: https://gitlab.gnome.org/GNOME/libnotify/-/commit/f63e8ab

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoselftest: wic: Add test for --part-name argument
Dit Kozmaj [Thu, 6 Apr 2023 08:44:16 +0000 (10:44 +0200)] 
selftest: wic: Add test for --part-name argument

Add test for wic --part-name argument in .wks file.
Test three different cases:
- Set only the --part-name argument.
- Set only the --label argument. In this case the GPT partition label
  is set to the value of --label for compatibility reasons.
- Set both. In this case the code has been changed to set the GPT
  partition label to the --part-name value.

The test uses a test_gpt_partition_name.wks file created for this
purpose.

Signed-off-by: Dit Kozmaj <dit.kozmaj@kynetics.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agowic: use part_name when defined
Dit Kozmaj [Thu, 6 Apr 2023 08:44:15 +0000 (10:44 +0200)] 
wic: use part_name when defined

So far part.label has been used to define GPT partition label even if
part.part_name was defined.
Fix the code to use part.part_name whenever available, as it makes sense
to have a GPT partition label which is different from the contained
filesystem label.

Signed-off-by: Dit Kozmaj <dit.kozmaj@kynetics.com>
Signed-off-by: Diego Rondini <diego.rondini@kynetics.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agologrotate: add ptest support
Frank WOLFF [Wed, 5 Apr 2023 14:36:04 +0000 (16:36 +0200)] 
logrotate: add ptest support

Below is an extract of the test log:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2023-04-05T12:20
BEGIN: /usr/lib/logrotate/ptest
make  check-TESTS
make[1]: Entering directory '/usr/lib/logrotate/ptest'
make[2]: Entering directory '/usr/lib/logrotate/ptest'
PASS: test-0001.sh
PASS: test-0002.sh
...
...
PASS: test-0107.sh
PASS: test-0108.sh
============================================================================
Testsuite summary for logrotate 3.21.0
============================================================================
 # TOTAL: 102
 # PASS:  97
 # SKIP:  5
 # XFAIL: 0
 # FAIL:  0
 # XPASS: 0
 # ERROR: 0
============================================================================
make[2]: Leaving directory '/usr/lib/logrotate/ptest'
make[1]: Leaving directory '/usr/lib/logrotate/ptest'
DURATION: 353
END: /usr/lib/logrotate/ptest
2023-04-05T12:26
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Reviewed-by: Yoann CONGAL <yoann.congal@smile.fr>
Signed-off-by: Frank WOLFF <frank.wolff@smile.fr>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoat-spi2-core: update 2.46.0 -> 2.48.0
Markus Volk [Wed, 5 Apr 2023 05:12:48 +0000 (07:12 +0200)] 
at-spi2-core: update 2.46.0 -> 2.48.0

What's new in at-spi2-core 2.48.0:

* Add a "atk-only" build option. This allows atk to be built without libdbus
  installed, but it does not build libatspi or the atk bridge.

* Fix some typos in the documentation.

What's new in at-spi2-core 2.47.90:

* Downgrade meson requirement to 0.63.

*  at-spi-dbus-bus service: set stop timeout to 5s

* Fix possible crash in screen_reader_signal_watcher.

What's new in at-spi2-core 2.47.1:
* The meson options -Dx11 and -Dintrospection are now implemented with
  meson features - https://mesonbuild.com/Build-options.html#features

  Instead of accepting values of "yes/no/auto", they take
  "enabled/disabled/auto".  Please change your build scripts
  accordingly if you use these options.

* Use gi-docgen to generate documentation.

* Register key grabs using the focused window, rather than the root window.
  This should prevent the window from losing focus when a key grab is used.

* atk-adaptor: Handle sockets in GetChildren.

* Improve documentation of the dbus interfaces.

* Various code clean-ups. Some unused code has been removed.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agogobject-introspection: reduce dependencies
Petr Kubizňák [Mon, 3 Apr 2023 11:06:41 +0000 (13:06 +0200)] 
gobject-introspection: reduce dependencies

When GI_DATA_ENABLED is 'False' (e.g. because
'gobject-introspection-data' is not in DISTRO_FEATURES),
gobject-introspection, gobject-introspection-native and qemu-native
should not be added to DEPENDS. This is to reduce dependency chain
when g-i is disabled.

Signed-off-by: Petr Kubizňák <kubiznak@2n.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agou-boot: Upgrade to 2023.04
Fabio Estevam [Mon, 3 Apr 2023 20:50:00 +0000 (17:50 -0300)] 
u-boot: Upgrade to 2023.04

Upgrade to U-Boot 2023.04.

Remove the patch that is now upstream.

Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agoffmpeg: update 5.1.2 -> 6.0
Alexander Kanavin [Fri, 31 Mar 2023 05:26:30 +0000 (07:26 +0200)] 
ffmpeg: update 5.1.2 -> 6.0

Add a patch to gstreamer1.0-libav to address an API compatibility fail.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2 years agocve-exclusions: Document some further linux-yocto CVE statuses
Richard Purdie [Fri, 7 Apr 2023 14:23:27 +0000 (15:23 +0100)] 
cve-exclusions: Document some further linux-yocto CVE statuses

Add some information about some further kernel CVEs which don't apply for
either linux-yocto or don't apply for linux-yocto 6.1.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 years agocve-extra-exclusion: ignore disputed CVE-2023-23005
Yoann Congal [Thu, 6 Apr 2023 14:19:23 +0000 (16:19 +0200)] 
cve-extra-exclusion: ignore disputed CVE-2023-23005

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Frank WOLFF <frank.wolff@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 years agocve-exclusions_6.1: ignore patched CVE-2022-38457 & CVE-2022-40133
Yoann Congal [Thu, 6 Apr 2023 14:19:22 +0000 (16:19 +0200)] 
cve-exclusions_6.1: ignore patched CVE-2022-38457 & CVE-2022-40133

Ignore CVE-2022-38457 & CVE-2022-40133 as they looks patched in our 6.1
branch.

I've asked the NVD to add the commit as the patch for these CVEs, but in
the meantime, other sources seem to agree that the commit fixes these
CVEs (and I concur).

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 years agobuild-appliance-image: Update to master head revision
Richard Purdie [Thu, 6 Apr 2023 13:35:58 +0000 (14:35 +0100)] 
build-appliance-image: Update to master head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 years agocve-extra-exclusions: ignore inapplicable linux-yocto CVEs
Yoann Congal [Thu, 6 Apr 2023 09:11:08 +0000 (11:11 +0200)] 
cve-extra-exclusions: ignore inapplicable linux-yocto CVEs

CVEs CVE-2023-0179, CVE-2023-1079 and CVE-2023-1513 are patched in our
kernels but appear as active because the NVD database is not up to date.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Frank WOLFF <frank.wolff@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 years agocpio: Fix wrong CRC with ASCII CRC for large files
Marek Vasut [Wed, 5 Apr 2023 21:33:58 +0000 (23:33 +0200)] 
cpio: Fix wrong CRC with ASCII CRC for large files

Due to signedness, the checksum is not computed when filesize is bigger
a 2GB. Pick a fix for this problem from CPIO ML, where the fix has been
posted for 5 years. Since CPIO upstream is effectively unresponsive and
any and all attempts to communicate with the maintainer and get the fix
applied upstream failed, add the fix here instead.

Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>