summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* gstreamer1.0-plugins-bad: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug fix release: av1parse: Fix several issues about the colorimetry. av1parse: fix up various possible logic errors dashsink: fix missing mutex unlock in error code path when failing to get content d3d11videosink: Fix for unhandled mouse double click events interlace: Also handle a missing "interlace-mode" field as progressive msdk: fix build with MSVC mxfdemux: Fix issues at EOS mxfdemux: Handle empty VANC packets nvh264dec, nvh265dec: Fix broken key-unit trick and reverse playback nvvp9sldec: Increase DPB size to cover render delay rvsg: fix cairo include tsdemux: Fix AC-4 detection in MPEG-TS tsdemux: Handle "empty" PMT gracefully va: pool: don't advertise the GST_BUFFER_POOL_OPTION_VIDEO_ALIGNMENT option any more v4l2codecs: Fix memory leak v4l2videodec: set frame duration according to framerate webrtcbin: Update documentation of 'get-stats' action signal webrtcbin: Check data channel transport for notifying 'ice-gathering-state' webrtcbin: Avoid access of freed memory wpe: Reintroduce persistent WebContext Build: use CMake to find some openssl and exr deps Fix multiple "unused-but-set variable" compiler warnings (From OE-Core rev: 8dca7bae0b16c7db820f0d7d60592a7d1d868a8d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 70ff1c8f54bfb47307cce4d2cb731cc775cd7e21) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-omx: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | No changes in omx from 1.20.1 -> 1.20.2 (From OE-Core rev: 2f8bf9e800e5fa893c89cd4d8b9a63f02db842b1) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2f9b5b0d8274b5a4990c93edb30c3170de3f87a4) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-libav: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | | | | Bug fix only release: video decoders: fix frame leak on negotiation error Fix build on systems without C++ compiler avviddec: Remove vc1/wmv3 override (fixing crash with FFmpeg 5 Segfaults on ASF/WMV files with FFMPEG 5.0+ (From OE-Core rev: b796e337ac4ce189525b5af942226c0b4ab42ca3) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 208ddca121bb213a9e79d21b448547df58b9a511) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-devtools: upgrade 1.20.1 -> 1.20.2Alexander Kanavin2022-05-281-1/+1
| | | | | | | | | | | | | | | The second 1.20 bug-fix release (1.20.2) was released on 2 May 2022. This release only contains bugfixes and it should be safe to update from 1.20.x. (From OE-Core rev: a16fd1683d5518096c5b0aa651fcb4b2afe0f2ff) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b4c976ea07ff276ae705110769c8e9741827615b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: upgrade 1.17.8 -> 1.17.10Steve Sakoman2022-05-288-3/+3
| | | | | | | | | | | | | | go1.17.9 (released 2022-04-12) includes security fixes to the crypto/elliptic and encoding/pem packages, as well as bug fixes to the linker and runtime. go1.17.10 (released 2022-05-10) includes security fixes to the syscall package, as well as bug fixes to the compiler, runtime, and the crypto/x509 and net/http/httptest packages. (From OE-Core rev: bcbfff47e212627b355c54ab782f38708ed12d4c) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest/cve_check: add tests for recipe and image reportsRoss Burton2022-05-281-1/+76
| | | | | | | | | | | | | | | | Add a test to verify that the JSON reports are generated correctly for both single recipe builds and image builds. More tests are needed, but this is better than nothing. (From OE-Core rev: 61e8e3c7f0b7161ff678a0ef4992261c7a1b96b0) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit df0f35555b09c4bc75470eb45ec9c74e6587d460) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pcre2: CVE-2022-1586 Out-of-bounds readHitendra Prajapati2022-05-282-2/+61
| | | | | | | | | | | | | | Backport from https://github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a CVE-2022-1586: pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c. (From OE-Core rev: fb6c980105ffd0262517299ab366218c61cc0665) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> (cherry picked from commit 7519eb1cb624bb576cfe60f7470d40c566818ac3) Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* selftest/imagefeatures/overlayfs: Always append to DISTRO_FEATURESRichard Purdie2022-05-252-9/+9
| | | | | | | | | | | | | Using += unintentionally removes all other entries from DISTRO_FEATURES if DISTRO_FEATURES was set by ?= such as by poky.conf. This reduces sstate reusage on the autobuilder. Fix this to speed up builds. (From OE-Core rev: d3beac233558242ab6895e9ba8536a6df9df8eb3) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 124b82c32c4545bb216a8249954817f692f9795a) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* staging: Fix rare sysroot corruption issueRichard Purdie2022-05-251-0/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We've seen failures on the autobuilder in oe-selftest where things which should be in the sysroot aren't. The exact steps to reproduce the exact failure are elusive and probably hash equivalance dependency but this set of steps does reproduce corruption which is probably of the same origin: Add DISTRO_FEATURES += "systemd" bitbake dbus Remove DISTRO_FEATURES += "systemd" bitbake dbus bitbake dbus -c clean bitbake dbus -c configure Add DISTRO_FEATURES += "systemd" bitbake quilt-native bitbake dbus -c populate_sysroot Remove DISTRO_FEATURES += "systemd" bitbake dbus -c compile Where dbus will now fail as the compiler was no longer in the sysroot. This works by clearing x11 and other values out of DISTRO_FEATURES so the x11 dependencies are removed from the sysroot. The configure stamp remains valid so when the original configuration is restored, it becomes valid again but a load of the sysroot disappeared and build failures result. Fix this by removing stamps when we remove things from the sysroot. Depends on a change to bitbake build.py to add the clean_stamp API. [YOCTO #14790] (From OE-Core rev: 927837e29a1e79e8eeecaacc6de6b8f9e6aa6f70) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f4b1cecc82435b71135d7b65f6ea67be0e4f8c66) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* classes: rootfs-postcommands: add skip option to overlayfs_qa_checkClaudius Heine2022-05-252-3/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The overlayfs_qa_check checks if the current root file system has a mount configured for each overlayfs, when the overlayfs class is used. However there are certain instances where this mount point is created at runtime and not static in a fstab entry or systemd mount unit. One such case would be if overlayfs-etc is used, where the device is mounted in the preinit script and not via a mount unit or fstab entry. However there are other possibilities for this as well, like startup scripts that support a dynamic partition layout. For instance when systemd-repart is used. This adds the `OVERLAYFS_QA_SKIP` variable, which allows to define QA skips via its flags. In principle it supports multiple QA skip flags separated by whitespace, but only one (`mount-configured`) is implemented here. To skip this QA check simply add `mount-configured` to the flag of `OVERLAYFS_QA_SKIP` with the same name. For instance if a overlayfs is configured as: OVERLAYFS_MOUNT_POINT[data] = "/data" Skipping this QA check can be done by setting: OVERLAYFS_QA_SKIP[data] = "mount-configured" Also add a testcase and fix a typo (fstat -> fstab). (From OE-Core rev: 34b6d6b5f078c6948e53815af3c7b61de43d851c) Signed-off-by: Claudius Heine <ch@denx.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2ce9173169a2a86392c4a85fe9be7fbbd7353b7f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: Bump to latest 2.38 release branchSamuli Piippo2022-05-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes Qt build with GCC 12.1. Brings following fixes * 3d549e5ccc0 PR29142, segv in ar with empty archive and libdeps specified * c473aa1b9d8 M68K: avoid quadratic slowdlow in label alignment check * 8d1187516e3 Adjust ld ctf test for 32-bit targets * 9c67f6382ac x86: Properly handle function pointer reference * 9a01457e02e s390: Add DT_JMPREL pointing to .rela.[i]plt with static-pie * 82a5bb730a1 s390: Avoid dynamic TLS relocs in PIE * d54081c642a LoongArch: Update ABI eflag in elf header. * fb4d148004f IBM zSystems: Add support for z16 as CPU name. * 975b5540232 libctf, ld: diagnose corrupted CTF header cth_strlen * 99852365513 dlltool: Use the output name as basis for deterministic temp prefixes * 210bf1d6225 Updated Serbian (for binutils/) and Russian (for gprof/) translations * fcf60fe8482 PR28959, obdump doesn't disassemble mftb instruction * e4a35c73196 PowerPC64 DT_RELR relative reloc addresses * 7183434818e Work around gcc-4 warnings in elf64-ppc.c (From OE-Core rev: cefc45625535972d20b252ed0a2f497dff7d5fe5) Signed-off-by: Samuli Piippo <samuli.piippo@qt.io> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c007a7251e697836a29bd1aebe49d4f2433a5e6e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* librepo: upgrade 1.14.2 -> 1.14.3wangmy2022-05-251-1/+1
| | | | | | | | | | | | | | | | | | Minor bug fix release with a single commit: Make error messages about repodata and rpm mismatch more user friendly This should help users to recognize the error is not on dnf side but instead on the server (in the repository). (From OE-Core rev: cd16ecd4412708731968b25585d85217fa83858b) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2b41ae2900dc308e005d3f0e8a4d3912be35bc01) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mmc-utils: upgrade to latest revisionAlexander Kanavin2022-05-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | Fixes build error: when using Linux 5.4 kernel: In function read_extcsd: mmc_cmds.c:72:18: error: MMC_BLOCK_MAJOR undeclared (first use in this function) This SRCREV bump includes two commits: b7e4d5a mmc-utils: Add General command CMD56 read support 0d493fb mmc-utils: Fix build error MMC_BLOCK_MAJOR undeclared (From OE-Core rev: a0f25374ea938bcc82396357bd029abc12a6ef0c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d98b06c9c6f480de1e5167bfe8392e39300fc02c) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: fix reproducibility issue with python3-coreSteve Sakoman2022-05-251-0/+5
| | | | | | | | | | | | | | | traceback.cpython-310.pyc is non-deterministic due to 'frozenset' being written without strict ordering. For now let's just not install the problematic file. (From OE-Core rev: 00b62965bd4c9eb6fd8c016f83126da2a107a5c5) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4b1f0f7542abcb8606688c974695a6c8a142e7a2) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: Fix report generationMarta Rybczynska2022-05-251-8/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The addition of summary output caused two issues: error when building an image and the fact that JSON output was generated even when CVE_CHECK_FORMAT_JSON. When generating an image it caused an error like: ERROR: core-image-minimal-1.0-r0 do_rootfs: Error executing a python function in exec_func_python() autogenerated: The stack trace of python calls that resulted in this exception/failure was: File: 'exec_func_python() autogenerated', lineno: 2, function: <module> 0001: *** 0002:cve_check_write_rootfs_manifest(d) 0003: File: '/home/alexk/poky/meta/classes/cve-check.bbclass', lineno: 213, function: cve_check_write_rootfs_manifest 0209: 0210: link_path = os.path.join(deploy_dir, "%s.json" % link_name) 0211: manifest_path = d.getVar("CVE_CHECK_MANIFEST_JSON") 0212: bb.note("Generating JSON CVE manifest") *** 0213: generate_json_report(json_summary_name, json_summary_link_name) 0214: bb.plain("Image CVE JSON report stored in: %s" % link_path) 0215:} 0216: 0217:ROOTFS_POSTPROCESS_COMMAND:prepend = "${@'cve_check_write_rootfs_manifest; ' if d.getVar('CVE_CHECK_CREATE_MANIFEST') == '1' else ''}" Exception: NameError: name 'json_summary_name' is not defined The fix is to pass the d variable to the pure python function generate_json_report to get correct values of variables and add conditions for the JSON output where needed. In addition clarify the message presenting the summary JSON file, which isn't related to an image. Uses partial fixes from Alex Kiernan, Ernst Sjöstrand (ernstp), and Davide Gardenal. Fixes: f2987891d315 ("cve-check: add JSON format to summary output") (From OE-Core rev: 2fcc696e27d7f8c70ba60f5c7de8c48030a938d3) Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9015dec93233c7d45fd0c9885ff5d4ec23ad377d) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Backport CVE fixesRobert Joslyn2022-05-2514-1/+1284
| | | | | | | | | | | | | | | | | | | Backport patches to address the following CVEs: * https://curl.se/docs/CVE-2022-22576.html * https://curl.se/docs/CVE-2022-27775.html * https://curl.se/docs/CVE-2022-27776.html * https://curl.se/docs/CVE-2022-27774.html * https://curl.se/docs/CVE-2022-30115.html * https://curl.se/docs/CVE-2022-27780.html * https://curl.se/docs/CVE-2022-27781.html * https://curl.se/docs/CVE-2022-27779.html * https://curl.se/docs/CVE-2022-27782.html (From OE-Core rev: b83c7ae43c372c1870d13ae25ebfad9c68a0928d) Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: build: Add clean_stamp API function to allow removal of task stampsRichard Purdie2022-05-251-5/+9
| | | | | | | | | | | | | | | | | | We currently have no API to be able to remove all the potential stamps of a task. It is unusual to need to do this, particularly as you could race against other things happening in the system but we do have a use case for this in cleaning up sysroots in OE-Core. The alternative is to mess with CLEANMASK in OE-Core but that is just going to add potential for errors. We need the first part of the make_stamp() function so separate that out so it can be called seperately. (Bitbake rev: 494fcfcb7c4469915c67f544997104d81c417266) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4d671504a25863018ac51c21c005cef0a4d8f05c) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: data: Do not depend on vardepvalueexclude flagTomasz Dziendzielski2022-05-251-0/+2
| | | | | | | | | | | | | | | | | If SRC_URI contains python function that extends vardepvalueexclude its value is being tracked by sstate-cache, which can lead to rebuilds if value is set dynamically (for example gerrit replicas). Return empty string if vardepvalueexclude is checked to fix this behaviour. (Bitbake rev: 943701ee8cb55307996545f0237721413edfb168) Signed-off-by: Tomasz Dziendzielski <tomasz.dziendzielski@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f5f9a7b89a7d8321f03184e61ad6d5ed8d0f840e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: fetch2/osc: Small fixes for osc fetcherGunjan Gupta2022-05-251-6/+10
| | | | | | | | | | | | | | | | | | | | | | The current fetcher seemed to have some issues that made it difficult when trying to use the same. This patch fixes the following * Make consistent use of the path that needs to be used as oscdir * The path mentioned in os.access in download function was not same as ud.moddir which would result into invoking of fetch command instead of update command even if directory already existed * Before creating oscrc, make sure oscdir exists and create it if it does not exist * Updated the configuration to use apiurl and added a new parameter to control whether http or https needs to be used to connect to apiurl (Bitbake rev: 8ac6e09447d884e658c556388d6014279c50f202) Signed-off-by: Gunjan Gupta <viraniac@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3ec78686f3c0ea2304097b86a965f9be4b0cb879) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-passwd: Disable shell for default usersDavide Gardenal2022-05-202-0/+58
| | | | | | | | | | | | | | | | Change the shell of all global static users other than root (which retains /bin/sh) and sync (as /bin/sync is rather harmless) to /sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] (From OE-Core rev: ec9e9497730f0a9c8ad3d696c8cdcec06267aacf) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ba3bc4d7a0a39a96f6e8d340e1b2654d47475f07) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* strace: Don't run ptest as "nobody"Jiaqing Zhao2022-05-201-5/+1
| | | | | | | | | | | | | strace ptests can run successfully with root user, there is no need to run as "nobody". The ptest results are the same. (From OE-Core rev: c20a5f83e9f0483f5458513eeaaec60436dd9d68) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5ab213178c011152e29dfb0a80251c5e5ab79900) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sed: Specify shell for "nobody" user in run-ptestJiaqing Zhao2022-05-201-1/+1
| | | | | | | | | | | | | | | ptest testsuite/panic-tests.sh of sed need to be run as a non-root user so that the expected "sed: couldn't open temporary file <filename>: Permission denied" error can be generated. After disabling default shell for "nobody", a shell needs to be specified for running ptest. (From OE-Core rev: 175001feb3b0e5b29cba94a8cdac18b429f84645) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c6d7216772f76af4429fdaaca518858cf014293f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sanity: Don't warn about make 4.2.1 for mintRichard Purdie2022-05-201-1/+1
| | | | | | | | | | | | | | Whilst not a supported distro, we can exclude this from the warning as it is debian derived and doesn't have the issue. (From OE-Core rev: eeba7fdc2878b3c1e90c0babbcaf7711a2e42fc1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b561e40f906737eec81245c6a12e78501311f667) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* image.bbclass: allow overriding dependency on virtual/kernel:do_deployDmitry Baryshkov2022-05-201-1/+6
| | | | | | | | | | | | | | | | | Since the commit fe26b2379ecd ("image.bbclass: Depend on virtual/kernel:do_deploy"), the image.bbclass made building images depend on virtual/kernel. For some images, including small initramfs, this is not the case. Allow overriding this dependency in case developers knows what they are doing. (From OE-Core rev: 4caf244256e150fea19cd4f2ca04c13d95d49fee) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 55875f68212657167ac6dc26f5fd93eac24b098e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overlayfs: add docs about skipping QA check & service dependenciesClaudius Heine2022-05-201-3/+15
| | | | | | | | | | | | | | | | | | | | | Add some documentation about skipping the QA check related to missing fstab entries or mount units for base mount points where the overlayfs is mounted from. Also add a short paragraph about adding a systemd unit dependency to services in recipes, so that they are started only after the overlayfs is mounted and ready. No functional change. (From OE-Core rev: 4611cbab3e9593937b64b6db48ef269de37c74db) Signed-off-by: Claudius Heine <ch@denx.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 7adc49fa6fdbdf118f74e95193e80ae7ef019e27) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* e2fsprogs: update upstream statusAryaman Gupta2022-05-201-1/+1
| | | | | | | | | | | | Status updated but using the existing patch since it is functionally identical. (From OE-Core rev: 9f2d85b383daeca5bbed601e4ff9ff01a8c3403f) Signed-off-by: Aryaman Gupta <aryaman.gupta@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit aab854a94e73e5035eb82fe1aafe970aaa296a54) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wic/plugins/rootfs: Fix permissions when splitting rootfs folders across ↵Felix Moessbauer2022-05-201-1/+4
| | | | | | | | | | | | | | | | | | | | | partitions This patches makes locating the file database containing the file and folder usernames and permissions more reliable. In addition to locating it relative to the partition directory, we also try to locate it relative to the IMAGE_ROOTFS. Prior to this patch, the database was not found when using --rootfs-dir=${IMAGE_ROOTFS}/<x> in the WIC script, leading to erronous file permissions and ownership. (From OE-Core rev: a5406116ef647ff0cabc6b9466aa0e34e6a20750) Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 09e18ee246da8b56f446c4db548fb9c7e895142b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGEAlex Kiernan2022-05-201-0/+2
| | | | | | | | | | | | | | The CVE product name for PyPI packages is (usually) the same as the PyPI package name (and not our recipe name), so use that as the default. (From OE-Core rev: 80a1de36bc86a864d52292ef9770b77480f3c67b) Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 61f6b0ad09bf87cdc2d3f08770b7c44cad1d0e58) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cairo: Add missing GPLv3 license checksum entryRichard Purdie2022-05-201-1/+4
| | | | | | | | | | | | | | | | | The trace tools are licensed under GPL-3.0-or-later but this wasn't listed in LIC_FILES_CHKSUM. Fix that. Ultimately we could disable that license if the trace PACKAGECONFIG is disabled but I'll leave that to someone else if they're keen. (From OE-Core rev: a27a0c3bceedf06de7ff8cae4a8fe4d2f6f514b8) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f763b906ea10705d519c9eebb5ef1ebe87d49d7c) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: upgrade 20220411 -> 20220509Dmitry Baryshkov2022-05-201-2/+2
| | | | | | | | | | | | License-Update: additional files (From OE-Core rev: 9002274362b512142f66ea68ff9837a7dde8f830) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 85b1fef733683be09a1efdb2d8b8ffe543053ace) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: replace mkdir by installKonrad Weihmann2022-05-202-1/+88
| | | | | | | | | | | | | | | | | | | | | | | if a setup is using RPM for packaging and there are multiple recipes that install to ${nonarch_base_libdir}/firmware by using install -d ${nonarch_base_libdir}/firmware, it will create installation clashes on image install, as linux-firmware in before this patch used mkdir -p, which creates different file mode bits (depending on the current user's settings). In a particular example linux-fimware created /lib/firmware with 0600 while other-firmware-package created it with 0644 making the combination not installable by rpm backend (From OE-Core rev: e16b9768a2e3eb931d11558f448149c16afa490b) Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 98bf3f427702687bf81ed759e7cde5d6d15e77eb) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 8.2.4681 -> 8.2.4912Richard Purdie2022-05-201-2/+2
| | | | | | | | | | | Includes fixes for CVE-2022-1381, CVE-2022-1420. (From OE-Core rev: d1c0db32383812531b857729c585b3305e781cd9) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 77d745bd49c979de987c75fd7a3af116e99db82b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: Upgrade 2.9.13 -> 2.9.14Jiaqing Zhao2022-05-203-111/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer Fix potential double-free in xmlXPtrStringRangeFunction Fix memory leak in xmlFindCharEncodingHandler Normalize XPath strings in-place Prevent integer-overflow in htmlSkipBlankChars() and xmlSkipBlankChars() (David Kilzer) Fix leak of xmlElementContent (David Kilzer) Bug fixes Fix parsing of subtracted regex character classes Fix recursion check in xinclude.c Reset last error in xmlCleanupGlobals Fix certain combinations of regex range quantifiers Fix range quantifier on subregex Improvements Fix recovery from invalid HTML start tags Build system, portability Define LFS macros before including system headers Initialize XPath floating-point globals configure: check for icu DEFS (James Hilliard) configure.ac: produce tar.xz only (GNOME policy) (David Seifert) CMakeLists.txt: Fix LIBXML_VERSION_NUMBER Fix build with older Python versions Fix --without-valid build (From OE-Core rev: 393b81058f3b970eb906a7f9daa842d8a0747700) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c4ba21f4012e8859fc793bec7df76e56eb8058ec) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xwayland: upgrade 22.1.0 -> 22.1.1Alexander Kanavin2022-05-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changes in XWayland 22.1.1 include: - Not mapping the composite overlay window by default when running in rootless mode. This is being done since a client trying to get the COW, the X Server will map the window and block all pointer events. - A change to the XWayland present queue code due to some Vulkan games/apps running in windowed mode only running at 58 FPS when in fact at 60 FPS for matching a 60Hz refresh rate. Incorrect calculation handling led to the MSC ticking at ~58Hz. - Fixing use-after-free bugs. (From OE-Core rev: 8b8f53ebf6bc265d495154fea3050fe8d7fbd256) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit aa0028e19651665f6671d7c57646cfc97c7ba763) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* webkitgtk: upgrade 2.36.0 -> 2.36.1Alexander Kanavin2022-05-202-21/+1
| | | | | | | | | | | | | | | | | | | This is the first bug fix release in the stable 2.36 series. What’s new in the WebKitGTK 2.36.1 release? - Fix the build with accessibility disabled. - Fix several crashes and rendering issues. - Translation updates: Croatian. (From OE-Core rev: cf336712afc3899ef45c7f2ef5f6b081223a1269) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4ed608d33fe5f38bc172e0cc6d938ffab184a47a) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade 3.38.2 -> 3.38.3Alexander Kanavin2022-05-201-1/+1
| | | | | | | | | | | | | | | | | | 2022-04-27 - Version 3.38.3 Version 3.38.3 fixes a bug in the automatic-index and Bloom filter construction logic that might cause SQLite to be overly aggressive in the use of ON clause constraints, resulting in a incorret automatic-index or Bloom filter that excludes some valid rows from output. The bug was introduced in version 3.38.0. Other minor changes were tossed in to complete the patch. (From OE-Core rev: c78ac7ef2d14a8b6167922a12e8c7f35c4b11bfb) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1efd89a4572bb2f39728fd53a1d4db944b06ff38) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libinput: upgrade 1.19.3 -> 1.19.4Alexander Kanavin2022-05-201-1/+1
| | | | | | | | | | | | | libinput 1.19.4 fixes CVE-2022-1215 with a format string vulnerability (From OE-Core rev: 25b4ce85da67584e34194335e56bdcb4c8f083fa) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d32d51753aadf6c2747c79927dad0c9a044ad5df) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* fribidi: upgrade 1.0.11 -> 1.0.12Alexander Kanavin2022-05-201-1/+1
| | | | | | | | | | | | | | | Overview of changes between 1.0.11 and 1.0.12 - Various fuzzing fixes. (From OE-Core rev: e42ff3c56228359f4dfa1de2303dfa64fd29f311) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5396115fc726f0a9f8a76d1b3ec27ea73062367b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ffmpeg: upgrade 5.0 -> 5.0.1Alexander Kanavin2022-05-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | version 5.0.1: - avcodec/exr: Avoid signed overflow in displayWindow - avcodec/diracdec: avoid signed integer overflow in global mv - avcodec/takdsp: Fix integer overflow in decorrelate_sf() - avcodec/apedec: fix a integer overflow in long_filter_high_3800() - avdevice/dshow: fix regression - avfilter/vf_subtitles: pass storage size to libass - avcodec/vp9_superframe_split_bsf: Don't read inexistent data - avcodec/vp9_superframe_split_bsf: Discard invalid zero-sized frames - avcodec/vp9_superframe_bsf: Check for existence of data before reading it - avcodec/vp9_raw_reorder_bsf: Check for existence of data before reading it - avformat/imf: fix packet pts, dts and muxing - avformat/imf: open resources only when first needed - avformat/imf: cosmetics - avformat/imf_cpl: do not use filesize when reading XML file - avformat/imfdec: Use proper logcontext - avformat/imfdec: do not use filesize when reading XML file - doc/utils: add missing 22.2 layout entry - avcodec/av1: only set the private context pix_fmt field if get_pixel_format() succeeds - avformat/aqtitledec: Skip unrepresentable durations - avformat/cafdec: Do not store empty keys in read_info_chunk() - avformat/mxfdec: Do not clear array in mxf_read_strong_ref_array() before writing - avformat/mxfdec: Check for avio_read() failure in mxf_read_strong_ref_array() - avformat/mxfdec: Check count in mxf_read_strong_ref_array() - avformat/hls: Check target_duration - avcodec/pixlet: Avoid signed integer overflow in scaling in filterfn() - avformat/matroskadec: Check pre_ns - avcodec/sonic: Use unsigned for predictor_k to avoid undefined behavior - avcodec/libuavs3d: Check ff_set_dimensions() for failure - avcodec/speexdec: Align some comments - avcodec/speexdec: Use correct doxygen comments - avcodec/mjpegbdec: Set buf_size - avformat/matroskadec: Use rounded down duration in get_cue_desc() check - avcodec/argo: Check packet size - avcodec/g729_parser: Check channels - avformat/avidec: Check height - avformat/rmdec: Better duplicate tags check - avformat/mov: Disallow empty sidx - avformat/argo_cvg:: Fix order of operations in error check in argo_cvg_write_trailer() - avformat/argo_asf: Fix order of operations in error check in argo_asf_write_trailer() - avcodec/movtextdec: add () to CMP() macro to avoid unexpected behavior - avformat/matroskadec: Check duration - avformat/mov: Corner case encryption error cleanup in mov_read_senc() - avcodec/jpeglsdec: Fix if( code style - avcodec/jpeglsdec: Check get_ur_golomb_jpegls() for error - avcodec/motion_est: fix indention of ff_get_best_fcode() - avcodec/motion_est: Fix xy indexing on range violation in ff_get_best_fcode() - avformat/hls: Use unsigned for iv computation - avcodec/jpeglsdec: Increase range for N in ls_get_code_runterm() by using unsigned - avformat/matroskadec: Check desc_bytes - avformat/utils: Fix invalid NULL pointer operation in ff_parse_key_value() - avformat/matroskadec: Fix infinite loop with bz decompression - avformat/utils: keep chapter monotonicity on chapter updates - avformat/mov: Check size before subtraction - avcodec/cfhd: Avoid signed integer overflow in coeff - avcodec/libdav1d: free the Dav1dData packet on dav1d_send_data() failure - avcodec/h264_parser: don't alter decoder private data - configure: link to libatomic when it's present - fate/ffmpeg: add missing samples dependency to fate-shortest (From OE-Core rev: ccb87ec2f13b72c1f43a2ad96cd446533da4a666) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 90f35ceb209a51dfe0cd29e1d8646fcc501b7269) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* epiphany: upgrade 42.0 -> 42.2Alexander Kanavin2022-05-201-1/+1
| | | | | | | | | | | | | | | | | 42.2 - April 21, 2022 ===================== * Fix Save As context menu items (#1760) * Fix CVE-2022-29536 (#1766) (From OE-Core rev: 75ade4ee2c1e417f295dde687d8f9c4da9a29eea) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 91b53781ee883f5f40d989e398064c294030fa53) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cronie: upgrade 1.6.0 -> 1.6.1Alexander Kanavin2022-05-201-1/+1
| | | | | | | | | | | | | | | Release 1.6.1 crond: Fix regression of handling ranges (x-y) in crontab (From OE-Core rev: 251a5ec8d9694caa9e35690198604f6ee4bad537) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4bcd528050c01a1e7a3d1a847379833672900ad9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.18.1 -> 9.18.2Alexander Kanavin2022-05-2010-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to latest stable branch release Bug Fixes - Previously, zone maintenance DNS queries retried forever if the destination server was unreachable. These queries included outgoing NOTIFY messages, refresh SOA queries, parental DS checks, and stub zone NS queries. For example, if a zone had any nameservers with IPv6 addresses and a secondary server without IPv6 connectivity, that server would keep trying to send a growing amount of NOTIFY traffic over IPv6. This futile traffic was not logged. This excessive retry behavior has been fixed. [GL #3242] - A number of crashes and hangs which could be triggered in dig were identified and addressed. [GL #3020] [GL #3128] [GL #3145] [GL #3184] [GL #3205] [GL #3244] [GL #3248] - Invalid dnssec-policy definitions, where the defined keys did not cover both KSK and ZSK roles for a given algorithm, were being accepted. These are now checked, and the dnssec-policy is rejected if both roles are not present for all algorithms in use. [GL #3142] - Handling of TCP write timeouts has been improved to track the timeout for each TCP write separately, leading to a faster connection teardown in case the other party is not reading the data. [GL #3200] (From OE-Core rev: 297215735613b1c9512780580da2f84cf013a603) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5398263c8e070110a045a5f8999712ba4be628de) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mesa: upgrade 22.0.0 -> 22.0.2Alexander Kanavin2022-05-203-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Mesa 22.0.1 is a bug fix release which fixes bugs found since the 22.0.0 release: freedreno: crash in PUBG MSVC: Build failure in libmesa_util when targeting x86 32-bit A crash in radeonsi driver freedreno: deqp cts fails Mesa 22.0.2 is a bug fix release which fixes bugs found since the 22.0.1 release: Vulkan::Calling vkWaitForFences Timeout Intel (CHT) - Uplink text rendering bugged out in Mesa 22.0 gen9atom gpu hang on dEQP-VK.spirv_assembly.instruction.graphics.float16.arithmetic_1 bad memory managment on panfrost RK3399 - cannot alocate more ram - fury unleashed Broken rendering in Ryujinx on Tigerlake intel: integer_mad_hi / integer_mad_sat / integer_mul_hi produce invalid results Textures colors distortion in “Black Geyser: Couriers of Darkness” with radeonsi ShaderStorageBlocksWriteAccess not set for spir-v shaders? radeonsi dEQP-GLES3.functional.buffer.map.write.explicit_flush.* flake crashes radv: nir validation error with invalid array access Intel Iris Xe Geometry Flickering/Assets Disappearing Rendering artifacts when playing Outer Wilds [Reproducible with latest ANV driver built from main] Vulkan wsi leaks vk_sync object on every wsi_AcquireNextImageKHR call panfrost(RK3399/T860): Emulationstation: broken, black or missing menus with v22.0.0 Plasma/KDE settings menus disappear on daily build Square Artifacts Dragons Dogma r300: Anmesia the dark descent corruption Error compiling with LLVM-git/15 (From OE-Core rev: 34f6d4763fc3bad1382551fd863f96e556b5f6cc) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f3e9444968fd47b3c8e0b2ee7b1b17f43a6bd56b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Fix build regression with latest updateKhem Raj2022-05-202-0/+47
| | | | | | | | | | | | | This happens when ptest is enabled with clang compiler (From OE-Core rev: 53b7b68a7b84e6feef3d78e25dbdd8d053e921db) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a1f51bae8e4717da2375b9a476c368554a795487) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: upgrade 250.4 -> 250.5Alexander Kanavin2022-05-2030-457/+499
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Latest stable branch update Drop 0029-network-enable-KeepConfiguration-when-running-on-net.patch as patch merged upstream. Changes: 4a31fa2fb0 (tag: v250.5) hwdb: run "update-hwdb-autosuspend" e92e2d0e3b hwdb: run "update-hwdb" e1e4395775 hwdb: make sure "ninja update-hwdb" works on f35 1fe496fc3b hwdb: fix parser to work with newer pyparsing 32e7c65372 manager: prohibit clone3() in seccomp filters 45335a3eed nspawn: fix --ephemeral with --machine 79b86adcbd nspawn: fix locating config files with --ephemeral c202d402d9 resolve: fix typo in dns_class_is_pseudo() 9f689fda54 sd-ipv4acd: actually drop the arp packet from one of the host interface e3d57bc301 sd-event: make inotify event work after the process is forked a5fc32fa34 sd-event: do not kill a child process from another child c36ab05b4f sd-event: do not update signal fd after PID is changed e006b56c18 sd-event: set pid to event source after all setup processes finished d2e3b5a841 sd-event: rebreak comments 6673131917 core: fix dm-verity auto-discovery in MountImageUnit() 10ee46a2ca analyze: Fix verify exit status regression df6253cbda hwdb: fix parsing options 9727b9ee7b core: command argument can be longer than PATH_MAX 12f05b856c network: ignore all errors in loading .network files b5dfdf0301 analyze: fix offline check for syscal filter 8ed1490de6 analyze: fix offline check for 'native' syscall architecture 72d0c6b171 missing-syscall: define MOVE_MOUNT_T_EMPTY_PATH if missing bba396d78c journal-remote: refuse to specify --trust option when gnutls is disabled 8d4c0d2383 calendarspec: fix possibly skips next elapse d9ea8dab6d copy: use FLAGS_SET() in copy_xattr() 077ca08b38 journal: preserve acls when rotating user journals with NOCOW attribute set 25b3c48ec5 macro: account for negative values in DECIMAL_STR_WIDTH() 8f2f6a94d8 network: enable KeepConfiguration= when running on network filesystem 61649fbada stat-util: introduce path_is_network_fs() 3f6e62eccb network-generator: rename DHCP_TYPE_DHCP -> DHCP_TYPE_DHCP4 a7585a3a38 hwdb: Add AV production access to Elgado Stream Deck devices 18c0096ec2 Add AV production controllers to hwdb and add uaccess 2298094b2c packit: drop bfq patch 7cda67d4f4 packit: build on and use Fedora 36 spec file 056bae9f1b Packit: build SRPMs in Copr 6253eb576c journal-file: if we are going down, don't use event loop to schedule post c901bc8680 journald: make sure SIGTERM handling doesn't get starved out ed46ff2bd6 random-seed: hash together old seed and new seed before writing out file 6d3e2f0188 resolved: Allow test-resolved-stream to run concurrently 781b2b2e66 resolved: Read as much as possible per stream EPOLLIN event 03692af607 resolved: Avoid multiple SSL writes per DoT packet 3227f542a7 resolved: Make event flags logic robust for DoT 9c710c66c3 resolve: llmnr: fix never hit condition d65808ef7e resolve: mention that dns_stream_update() needs to be called after dns_stream_take_read_packet() b2f82f643a resolve: call dns_stream_take_read_packet() in on_stream_io() fe4c208c98 resolve: make dns_stream_new() take on_packet and complete callbacks f447648ae4 resolved: Test for DnsStream (plain TCP DNS and DoT) 88b4e8f74e resolved: Fix DoT timeout on multiple answer records d5b871bdfe test: increase image size c3aead5568 random-util: unify RANDOM_ALLOW_INSECURE and !RANDOM_BLOCK and simplify (From OE-Core rev: 43e2cd211230ea32e4903f9891fda2e4b0f63cc4) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e07ba76fc78b44f338e574644a8ae3b6cddc9f08) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: backport patch for CVE-2021-4207Davide Gardenal2022-05-202-0/+44
| | | | | | | | | | | | | CVE: CVE-2021-4207 Upstream fix: https://git.qemu.org/?p=qemu.git;a=commit;h=9569f5cb5b4bffa9d3ebc8ba7da1e03830a9a895 (From OE-Core rev: 4150733448aee4c27340565a4f79c86d160b2b08) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: backport patch for CVE-2021-4206Davide Gardenal2022-05-202-0/+90
| | | | | | | | | | | | | CVE: CVE-2021-4206 Upstream fix: https://git.qemu.org/?p=qemu.git;a=commit;h=fa892e9abb728e76afcf27323ab29c57fb0fe7aa (From OE-Core rev: 0e684c12a762534261fcd7849fdcda0bb8031c0b) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* freetype: backport patch for CVE-2022-27406Davide Gardenal2022-05-202-0/+33
| | | | | | | | | | | | | CVE: CVE-2022-27406 Upstream issue: https://gitlab.freedesktop.org/freetype/freetype/-/issues/1140 (From OE-Core rev: 2c1df19405e2f52b06feec0506ad56cef7d4c6c1) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* freetype: backport patch for CVE-2022-27405Davide Gardenal2022-05-202-0/+42
| | | | | | | | | | | | | CVE: CVE-2022-27405 Upstream issue: https://gitlab.freedesktop.org/freetype/freetype/-/issues/1139 (From OE-Core rev: 6ec1c9237837e9d781647805eb2caabcdbaddb7b) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* freetype: backport patch for CVE-2022-27404Davide Gardenal2022-05-202-1/+51
| | | | | | | | | | | | | CVE: CVE-2022-27404 Upstream issue: https://gitlab.freedesktop.org/freetype/freetype/-/issues/1138 (From OE-Core rev: af45711f0ab36a1b63fa338755f9a51b227393d1) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-15 08:40:02 +0000