summaryrefslogtreecommitdiffstats
path: root/meta/conf
Commit message (Collapse)AuthorAgeFilesLines
...
* cve-exclusion: review the last of the historical kernel CVEsRoss Burton2023-09-071-14/+7
| | | | | | | | | | | | | | Review the last of the historical kernel CVEs. Issues which are specific to other platforms or distributions are ignored in the kernel recipe itself, whereas general security concerns like "ICMP leaks information" and "USB has flaws" are ignored with more details in the extra-exclusions file as before. (From OE-Core rev: fe1c0b9725f88d15ba48b02b5fef01f2cf2e9d78) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemuloongarch.inc:Change to use virtio-serial-pciZang Ruochen2023-09-071-2/+2
| | | | | | | | | | If virtio-serial-device is used, the following error occurs on loongarch64: qemu-system-loongarch64: -device virtio-serial-device: No "virtio-bus" bus found for device "virtio-serial-device" (From OE-Core rev: 08734ec0c2083e90207559ecc659809b86b8779d) Signed-off-by: Zang Ruochen <zangruochen@loongson.cn> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: Upgrade 8.0.4 -> 8.1.0Richard Purdie2023-09-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | This upgrade isn't straighforward as upstream made changes. A pyenv is now needed containing meson. This doesn't work for us for reasons as yet unclear however it does mean we need python3native inherited for that to stand a chance of working as otherwise host system dependencies may be missing. For now, allow meson to work from our sysroot via a patch. Our meson is always deterministic anyway so we don't need their help for that. The submodules approach used previously has changed, switch the options for new ones to disable downloads and docs. Some of the images binaries shipped for s390 show QA warnings for relocations in code sections. Drop those binaries to avoid the QA warnings since we don't need them anyway. Drop a backported patch and refresh another. (From OE-Core rev: a7176c3b2a7e2041b9be5dabb6b0f1e62f235f76) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux: review some historic CVE_STATUSRoss Burton2023-09-061-3/+1
| | | | | | | | | | Do manual review and disposition these CVEs as appropriate. (From OE-Core rev: a8db0735e228465715cf885d3b889fddfd68efc6) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-extra-exclusions: remove BlueZ issuesRoss Burton2023-09-051-5/+0
| | | | | | | | | | These BlueZ issues were mislabelled as Linux issues, but now that the CPE data is accurate this ignore can be removed. (From OE-Core rev: 7f354aed364b17259a642cc97e30a0a2b8218134) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-extra-exclusions: remove historic kernel CVEs which are handled nowRoss Burton2023-09-051-38/+9
| | | | | | | | | | | | | | The bulk of the historic kernel CVEs in this file are now handled by the include files generated by linux/generate-cve-exclusions.py, so remove them. Those that remain date from 2017 or earlier, so rename the group to 'historic' and update the comment. (From OE-Core rev: b46930641b9b5b38997b41ba8036e99387ed4225) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* yocto-uninative: Update to 4.3Michael Halstead2023-09-021-4/+4
| | | | | | | | | Add in stable updates to glibc 2.38 to fix malloc bugs (From OE-Core rev: 39f987fcb20ad7c0e45425b9f508d463c50ce0c1) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Add glibc 2.38 stable updatesRichard Purdie2023-09-011-1/+1
| | | | | | | | | | | | | | | | | | | | Pull in the following stable branch updates: 1aed90c9c8f8be9f68b58e96b6e4cd0fc08eb2b1 sysdeps: tst-bz21269: fix -Wreturn-type ad9b8399537670a990572c4b0c4da5411e3b68cf sysdeps: tst-bz21269: handle ENOSYS & skip appropriately c8ecda6251dd4a0dfe074e0a6011211cadeef742 sysdeps: tst-bz21269: fix test parameter 2af141bda3cd407abd4bedf615f9e45fe79518e2 malloc: Remove bin scanning from memalign (bug 30723) 98c293c61f770b6b7a22f89a6ea81b711ecb1952 malloc: Enable merging of remainders in memalign (bug 30723) 7ac405a74c6069b0627dc2d8449a82a621f8ff06 i686: Fix build with --disable-multiarch 6135d50e44233d8c89ca788f78c669941ad09fb9 x86_64: Fix build with --disable-multiarch (BZ 30721) 5ea70cc02626d9b85f1570153873d8648a47bf95 x86: Fix incorrect scope of setting `shared_per_thread` [BZ# 30745] 6b99458d197ab779ebb6ff632c168e2cbfa4f543 nscd: Do not rebuild getaddrinfo (bug 30709) ced101ed9d3b7cfd12d97ef24940cb00b8658c81 x86: Fix for cache computation on AMD legacy cpus. d97cca1e5df812be0e4de1e38091f02bb1e7ec4e stdlib: Improve tst-realpath compatibility with source fortification (From OE-Core rev: f65f0811e32b4fb57536f3331cc2422c4d71e9bf) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake.conf: add bunzip2 in HOSTTOOLSAlberto Planas2023-08-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | rpm2cpio.sh can make calls to bunzip2 to uncompress the RPM payload that conform the cpio file. bzip2 is already part of HOSTTOOLS, as a link to the system installed bzip2. This patch add bunzip2 in HOSTOOLS list as a non-optional binary, so is available to rpm2cpio.sh when it is required. The currect rpm2cpio.sh has other calls to gunzip (present in HOSTOOLS), xzcat (missing), unlzma (missing) and unzstd (present in HOSTTOOLS since bff58d337890e804d33d7decbaa46065a4d3bba4) Adding the missing ones will not add any new host dependency as xz-utils is already listed as a requirement. (From OE-Core rev: fd376a11ed8d1b79633c2572ec0b4341d3ca2f1c) Signed-off-by: Alberto Planas <aplanas@suse.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* less: add ptest supportJulien Stephan2023-08-291-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | add ptest support for less root@qemux86-64:~# ptest-runner less START: ptest-runner 2023-08-21T14:22 BEGIN: /usr/lib/less/ptest TEST chinese1.lt PASS: chinese1 (30 steps) TEST colorbars.lt PASS: colorbars (222 steps) TEST github216.lt PASS: github216 (143 steps) TEST github265.lt PASS: github265 (17 steps) TEST github329.lt PASS: github329 (28 steps) TEST hdr-unicode.lt PASS: hdr-unicode (164 steps) TEST hdr-unicode1.lt PASS: hdr-unicode (107 steps) TEST proc-special.lt PASS: proc-special (107 steps) TEST seq200.lt PASS: seq200 (18 steps) TEST subsearch.lt PASS: subsearch (59 steps) TEST table-50x200.lt PASS: table-50x200 (467 steps) TEST utf8-2.txt.lt PASS: utf8-2.txt (309 steps) TEST version.c.lt PASS: version.c (38 steps) RAN 13 tests with 0 errors DURATION: 184 END: /usr/lib/less/ptest 2023-08-21T14:25 STOP: ptest-runner TOTAL: 1 FAIL: 0 [YOCTO #15073] (From OE-Core rev: 1d20e7990656c2135570640a329c80b7df879675) Signed-off-by: Julien Stephan <jstephan@baylibre.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* arch-armv8,arch-armv9: Add sve based tune optionsKhem Raj2023-08-293-3/+18
| | | | | | | | | | | (From OE-Core rev: 3109a48740546f6defc652fa1a6736dc484e6021) (From OE-Core rev: d388bf00314639f82cd9143e786c482731d2719b) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tunes: Add support for sve instructions on armv8/armv9Khem Raj2023-08-291-0/+5
| | | | | | | | | | | | | | This helps in defining correct compiler options and configure options for glibc and overall ABI for toolchain (From OE-Core rev: 58330ce58719bd82530b1143623db7af7a85e897) (From OE-Core rev: 43c980ad688cc4df5a5e687b0f693cf46778ce64) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes/classes/scripts: Drop SRCPV usage in OE-CoreRichard Purdie2023-08-242-2/+1
| | | | | | | | Now that SRCPV isn't needed we can simplify things in a few places... (From OE-Core rev: 843f82a246a535c353e08072f252d1dc78217872) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base/package: Move source revision information from PV to PKGVRichard Purdie2023-08-241-4/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Source control information being present in PV used to be a hard requirement for bitbake to operate correctly. Now that hashes are a required part of task stamps, this requirement no longer exists. This means we can defer the hash pieces to PKGV and simplify PV. Use new bitbake fetcher API to inject the source revisions directly into the hash allowing removal of some horrible code from base.bbclass and avoiding any hardcoding about how SRCREV may or may not be used. Use that API to object the string to append to PKGV and append that directly. The user visible effect of this change is that PV will no longer have revision information in it and this will now be appended to PV through PKGV when the packages are written. Since PV is used in STAMP and WORKDIR, users will see small directory naming and stamp naming changes. This will mean that sstate reuse through hash equivalence where the source revision changes but the output does not will become possible as the sstate naming will become less specific and no longer contain the revision. The SRCPV variable will no longer be needed in PV and is effectively now just a null operation. Usage can be removed over time. (From OE-Core rev: a8e7b0f932b9ea69b3a218fca18041676c65aba0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust: add cargo-c native recipeFrederic Martinsons2023-08-211-0/+1
| | | | | | | | | | | | | | | This package make it easier to generate C/C++ ABI compatible header, library and also generate package config file. It is built around cbindgen (https://github.com/mozilla/cbindgen) for the header generation, it compiles the library (static or dynamic) through cargo and finally handle the generation of a custom package config file. (From OE-Core rev: dfce5f9ffb5240aadae311c2a2e912a315afc703) Signed-off-by: Frederic Martinsons <frederic.martinsons@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* maintainers.inc: Add self for unmaintained Python recipesTrevor Gamblin2023-08-211-11/+11
| | | | | | | | (From OE-Core rev: 3a7021f5029ad30f5cf9adf02c91029e63ef0ef8) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ccache.bbclass: Add allowed list for native recipesAngelo Ribeiro2023-08-211-0/+1
| | | | | | | | | | | | | | | | | Native recipes are not able to use ccache currently, due to a circular dependency between ccache-native and cmake-native. This affects also other native recipes, but not all, imposing a limitation in build time optimizations. The introduction of CCACHE_NATIVE_RECIPES_ALLOWED allows the user to specify which native recipes should use ccache, keeping it disable by default for all native recipes. (From OE-Core rev: 87cb2be71e0c0c123eaae6a5ae135900c95535db) Signed-off-by: Angelo Ribeiro <Angelo.Ribeiro@criticaltechworks.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* yocto-uninative: Update to 4.2 for glibc 2.38Michael Halstead2023-08-171-5/+5
| | | | | | | | | Uninative 4.2 adds glibc 2.38. (From OE-Core rev: c6654fab00a1b4e4bb05eec8b77c8c60e1f8a709) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Upgrade to 2.38 releaseKhem Raj2023-08-161-1/+1
| | | | | | | | | Announcement - https://mail.gnu.org/archive/html/info-gnu/2023-07/msg00010.html (From OE-Core rev: 16aff29593d7991d7ae953d5fb526a897c5a7268) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* conf/machine: set preferred kernel to be 6.4Bruce Ashfield2023-08-162-2/+2
| | | | | | | | | | (From OE-Core rev: b544e62827d2a3606fbc886ea520256c948e197c) (From OE-Core rev: 505ea7fe653d4c61f348e737c409d43bb490ee4f) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* arch-mips: Ensure TUNE_LDARGS is set correctlyRichard Purdie2023-08-151-0/+2
| | | | | | | | | | Similarly to x86, ensure we have the flags to the linker operating correctly (it defaults to 32 bit). Normally it is driven by gcc so this hasn't shown up but it does lead to hundreds of binutils test failures. (From OE-Core rev: 2cf9013fd8df2bb67f93ffd44ccc23453cedf42a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mips/tune-mips64r2: Set qemu cpu option correctlyRichard Purdie2023-08-151-0/+12
| | | | | | | | Ensure the CPU enabled in QEMU is correct for this architecture. (From OE-Core rev: 6e0d176c4ce2bbbd975b74e41f63e60df7e3a554) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake.conf: Drop PE and PR from WORKDIR and STAMPRichard Purdie2023-08-111-2/+2
| | | | | | | | | | | | | | | | | | Once, we relied upon stamps changing to rebuild. PE and PR are packaging variables and are reflected in the taskhashes when/where they're used so they do not need to be in STAMP. Similarly, once, multiple versions were something which was useful in WORKDIR but this is really just noise causing long pathnames now. Drop PR and PE from these variables to clean up the paths a bit. This may break some tool assumptions about paths but those are probably things we need to fix. (From OE-Core rev: cc83e45484656a6b577ff84817131735023daad4) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* conf/init-mamager-systemd: Add usrmerge to DISTRO_FEATURESRichard Purdie2023-08-111-1/+1
| | | | | | | | | usrmerge is now required by systemd, ensure this is also added to DISTRO_FEATURES when systemd is selected. (From OE-Core rev: fa8c59c49940af4cb03df49f5b6a2a53d50fbefb) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* yocto-uninative: Update hashes for uninative 4.1Michael Halstead2023-08-111-4/+4
| | | | | | | | | This version includes fixes to patchelf. (From OE-Core rev: 1c5c8ff97ba0a7f9adc592d702b865b3d166a24b) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libexif: add ptest supportJulien Stephan2023-08-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | adds ptest support for libexif Ptest was executed on a core-image-minimal: root@qemux86-64:~# ptest-runner libexif START: ptest-runner 2023-07-12T15:45 BEGIN: /usr/lib/libexif/ptest [...] i==================== All 13 tests passed (1 test was not run) ==================== [...] DURATION: 35 END: /usr/lib/libexif/ptest 2023-07-12T15:45 STOP: ptest-runner TOTAL: 1 FAIL: 0 (From OE-Core rev: 4e2340dfecdfbe22b07161e89de4e25d466820bb) Signed-off-by: Julien Stephan <jstephan@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* multilib.conf: explicitly make MULTILIB_VARIANTS vardeps on MULTILIBSChen Qi2023-08-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch is to ensure recipes get rebuilt correctly and avoid incorrect sstate cache reuse when toggling multilib. The following steps show one example of such incorrect sstate cache reuse. 1. enable multilib && bitbake <some_image> -c populate_sdk 2. disable multilib && bitbake <some_image> -c populate_sdk The error message is as below: Error: Problem: conflicting requests - nothing provides binutils-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk - nothing provides gcc-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk - nothing provides gdb-cross-canadian-i686 needed by packagegroup-cross-canadian-intel-x86-64-1.0-r0.x86_64_nativesdk (try to add '--skip-broken' to skip uninstallable packages) We get this error because packagegroup-cross-canadian recipe is not rebuilt when it should be. Current codes have tracked the dependency to MULTILIB_VARIANTS, as shown in the following chain: RDEPENDS:packagegroup-cross-canadian-intel-x86-64 -> all_multilib_tune_values -> MULTILIB_VARIANTS. However, MULTILIB_VARIANTS cannot automatically depend on MULTILIBS. See some results from 'bitbake-dumpsigs' below: List of dependencies for variable MULTILIB_VARIANTS is ['extend_variants'] Variable MULTILIB_VARIANTS value is ${@extend_variants(d,'MULTILIBS','multilib')} It's obvious that the value of MULTILIB_VARIANTS depend on the value of MULTILIBS, so let's set this dependency manually. (From OE-Core rev: 9f47d8eb51816d16078a23c0cef4d697555f913f) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust-hello-world: Drop recipeFrederic Martinsons2023-08-091-1/+0
| | | | | | | | | | we now have more rust/cargo recipes and tests that cover various use cases so this is no longer needed. (From OE-Core rev: 8baaf94d200f5355791ecd980727698b1ab0e539) Signed-off-by: Frederic Martinsons <frederic.martinsons@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: Upgrade to 2.41 releaseKhem Raj2023-08-041-1/+1
| | | | | | | | | | | | | | Fix build on 32bit arches with 64bit off_t defaults Detailed changes [1] [1] https://sourceware.org/pipermail/binutils/2023-July/128719.html (From OE-Core rev: c19fd803220f5b701dee077f7e7bfbb5ba2f22e3) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* maintainers.inc: Modify email addressAndrej Valek2023-07-301-1/+1
| | | | | | | | | andrej.valek@siemens.com -> andrej.v@skyrain.eu (From OE-Core rev: 1af0edaa83934d67ff554be591968fc8cea42e4e) Signed-off-by: Andrej Valek <andrej.v@skyrain.eu> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcr3: remove recipeMarkus Volk2023-07-301-1/+0
| | | | | | | | | | It will be added to meta-gnome (From OE-Core rev: 5216bbf37d5c0c18c1c8921136906bef9c600c03) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libadwaita: add recipe from meta-gnomeAlexander Kanavin2023-07-301-0/+1
| | | | | | | | | | This is a requirement of latest epiphany 44.x. (From OE-Core rev: c25df21f40c15cf087ec14f47ccbc7c3b5c84de2) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc: Upgrade to 13.2 releaseKhem Raj2023-07-301-1/+1
| | | | | | | | | | | | This is a bugfix [1] release on GCC-13 release with 58 [2] bugs fixed [1] https://gcc.gnu.org/pipermail/gcc-announce/2023/000179.html [2] https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&list_id=390723&resolution=FIXED&target_milestone=13.2 (From OE-Core rev: 89175021995db0e7f81a74c6bafcebdce9de8939) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-extra-exclusions: fix syntax errorPeter Marko2023-07-251-2/+2
| | | | | | | | | | | CVE_STATUS conversion for CVE-2020-18974 dad a syntax error by not adding continuation backslash. (From OE-Core rev: 64d2f868485c32b459df80c5aafdff14cce70f26) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-dtc: add from meta-virtualizationTrevor Gamblin2023-07-251-0/+1
| | | | | | | | | | | This provides pylibfdt, which is a runtime dependency for the dtschema module that we already carry in oe-core. (From OE-Core rev: 123077ecd9f3c1839da0d7b1474d689e5c6a689c) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-211-68/+81
| | | | | | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version (From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Reviewed-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: add option to add additional patched CVEsAndrej Valek2023-07-192-0/+29
| | | | | | | | | | | | | | | | | | | | | | - Replace CVE_CHECK_IGNORE with CVE_STATUS to be more flexible. The CVE_STATUS should contain an information about status wich is decoded in 3 items: - generic status: "Ignored", "Patched" or "Unpatched" - more detailed status enum - description: free text describing reason for status Examples of usage: CVE_STATUS[CVE-1234-0001] = "not-applicable-platform: Issue only applies on Windows" CVE_STATUS[CVE-1234-0002] = "fixed-version: Fixed externally" CVE_CHECK_STATUSMAP[not-applicable-platform] = "Ignored" CVE_CHECK_STATUSMAP[fixed-version] = "Patched" (From OE-Core rev: 34f682a24b7075b12ec308154b937ad118d69fe5) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake.conf: Add acl distro native features supportPiotr Łobacz2023-07-191-1/+1
| | | | | | | | | Include support for ACLs for native builds by default. (From OE-Core rev: eeb3f8e893e351520f3b8e642027e0dd6ca7c08b) Signed-off-by: Piotr Łobacz <p.lobacz@welotec.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libdmx: remove obsolete libraryRoss Burton2023-07-141-1/+0
| | | | | | | | | | | | | | The Xdmx server was removed from the xorg-server sources in xorg-server 21 (released Oct. 2021), so this is only useful for communicating with Xdmx from the 1.20 and older releases. Also remove the DEPENDS on libdmx in xdpyinfo for the same reason. (From OE-Core rev: 09a1a0473a5ab0fb984121443f5be8f0188e8883) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemuarm: pin kernel to 6.1Ross Burton2023-07-141-0/+4
| | | | | | | | | | | | | | | | | | | | The 6.4 kernel causes parselog failures when Xorg starts: (II) FBDEV(0): checking modes against framebuffer device... (II) FBDEV(0): mode "640x480" test failed (II) FBDEV(0): mode "640x480" test failed (II) FBDEV(0): mode "640x480" test failed (II) FBDEV(0): mode "640x480" test failed (II) FBDEV(0): mode "640x480" not found It appears to be specific to qemuarm without GL. Until this is resolved, pin the qemuarm BSP to 6.1. (From OE-Core rev: 28615ad284243db4465c843c456083c9d4b3a0c4) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* machine/arch-arm64: add -mbranch-protection=standardRoss Burton2023-07-141-0/+5
| | | | | | | | | | | | Enable branch protection (PAC/BTI) for all aarch64 builds. This was previously enabled at a global level in the GCC build, but that breaks the gcc test suite. (From OE-Core rev: 8905639d1cdc5ce809cc5ecd9672f5e86bf8a579) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-libc-headers: bump to 6.4Bruce Ashfield2023-07-121-1/+1
| | | | | | | | | | | | | | | kernel version 6.4 is the reference kernel for the fall release. This brings libc-headers up to date with that tested reference For musl, we drop one patch that has been merged upstream. (From OE-Core rev: 8dce94b89396a99bb20a0a0ba9db0244d95db7e0) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pygments: upgrade 2.14.0 -> 2.15.1Tim Orling2023-07-101-1/+1
| | | | | | | | | | | | | | | | * Upstream has dropped setup.py * Inherit python_setuptools_build_meta instead of setuptools3 * Add self as maintainer, as this is a dependency for python3-sphinx Adds some new lexers, updates a few others. A handful of bug fixes. https://github.com/pygments/pygments/blob/2.15.1/CHANGES#L6 https://github.com/pygments/pygments/blob/2.15.1/CHANGES#L18 (From OE-Core rev: 22e2569ae4843071b2b48d026ca4742351baf6d1) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-yocto/cve-exclusion: move entries from cve-extra-exclusionsRoss Burton2023-07-101-555/+0
| | | | | | | | | | | | | | | | | We've a slew of CVE_CHECK_IGNOREs in cve-extra-exclusions which are to mark a CVE as not valid with the current default kernel. However, this file is kernel agnostic so if someone decides to build a 6.0 kernel then these ignores are no longer valid. Move the ignores which are to simply reflect backports to cve-exclusions_6.1.inc so that they're version-specific. As the kernel is upgraded these exclusions should be made redundant and removed from the file. (From OE-Core rev: 157f7b62e271df5dfd8a3bc4d3821bf806fde51e) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: re-add mdadm-ptest to PTESTS_SLOWOvidiu Panait2023-07-101-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The ptest problems reported in e21021dc00ec ("mdadm: drop from PTESTS_SLOW") should now be fixed, so mdadm can be added back to PTESTS_SLOW (a qemux86-64 test run takes about ~12 minutes to execute with kvm). root@qemux86-64:~# ptest-runner mdadm START: ptest-runner 2023-06-30T08:25 BEGIN: /usr/lib/mdadm/ptest PASS: /usr/lib/mdadm/ptest/tests/00linear PASS: /usr/lib/mdadm/ptest/tests/00multipath ... PASS: /usr/lib/mdadm/ptest/tests/19repair-does-not-destroy PASS: /usr/lib/mdadm/ptest/tests/20raid5journal PASS: /usr/lib/mdadm/ptest/tests/21raid5cache DURATION: 723 END: /usr/lib/mdadm/ptest 2023-06-30T09:16 STOP: ptest-runner TOTAL: 1 FAIL: 0 For the testcases to run correctly, there must be enough rootfs space to create 13 loop devices. Similar to strace and lttng-tools, add a new IMAGE_ROOTFS_EXTRA_SPACE entry for mdadm-ptest. (From OE-Core rev: dfefff63c547adb1add0c8e3a308b2d0bd6cfc8c) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* time64.inc: annotate and clean up recipe-specific Y2038 exceptionsAlexander Kanavin2023-06-281-8/+11
| | | | | | | | | | | | | | | Additionally: - drop pseudo from INSANE_SKIP for 32bit time API check (pseudo passes the check; it's not clear where the issue may have been) - move rust exceptions to the cargo class, as the problem is common across the ecosystem, and needs to be fixed in the libc crate. (From OE-Core rev: d3d406bf636e579c17708b408e11c12d252533ee) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xcb-util-cursor: add a recipe from meta-oeAlexander Kanavin2023-06-271-0/+1
| | | | | | | | | | This is a requirement of weston 12.x when xwayland is enabled. (From OE-Core rev: 4f6a7d77dd0fed8b13883f30a58ff6e0abe5601d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: removeRoss Burton2023-06-271-1/+0
| | | | | | | | | | | The replacement cve-update-nvd2-native is working, so we can remove the old recipe now. (From OE-Core rev: 17eb07885147a06bf7bdd43f7869fe4411be80a0) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* time64: Disable CFLAGS for straceRichard Purdie2023-06-271-0/+2
| | | | | | | | | Until strace can handle the interface with glibc correctly with those flags, disable there for now. (From OE-Core rev: 5235ae1a14b71d42c1effff51e0289654bc7122a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* defaultsetup: Enable largefile and 64bit time_t support systemwide for 32 ↵Richard Purdie2023-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | bit platforms There is a problem with 32 bit time looming for many 32 bit platforms including arm, mip32, powerpc and x86 (but not riscv32) in 2038 when the 32 bit field time_t can no longer store the time value correctly due to overflow. Preparing for this is tricky as the ABI between libraries and binaries will change and it isn't possible to migrate easily as structures and return values change size. As we're a source based system, the project has taken the decision that we should change the compiler flags to switch to both largefile and 64 bit time_t. With OE-Core we've ironed out the issues we could spot apart from some testing issues in strace and lttng-tools for which discussions are ongoing upstream. There is more testing to be done but we wanted to make this switch now in good time before our next LTS release so we can work through any issues arrising. We had already tried to mandate largefile everywhere before this but this gives an opportunity to ensure that at the same time. (From OE-Core rev: b9e0c5e750c3097e176fdc18b3b58b622f716e71) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-08 18:01:50 +0000