summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
...
* tcl: update 8.6.15 -> 9.0.0Alexander Kanavin2024-11-121-0/+1
| | | | | | | | | | | | Make adjustments needed for ptests: among others, the binary.test needs 4G of RAM. Apply all patches unconditionally for ease of future upgrades. (From OE-Core rev: 372cfdd3f9355081942514c7db44119fa55ff58e) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: fix glib-2.0 ptest failure when upgrading tzdata2024bJinfeng Wang2024-11-054-0/+203
| | | | | | | | | | | | | Backport 3 patches [1][2][3] for gdatetime test to fix the ptest failure. [1] https://github.com/GNOME/glib/commit/c0619f08e6c608fd6464d2f0c6970ef0bbfb9ecf [2] https://github.com/GNOME/glib/commit/30e9cfa5733003cd1079e0e9e8a4bff1a191171a [3] https://github.com/GNOME/glib/commit/fe2699369f79981dcf913af4cfd98b342b84a9c1 (From OE-Core rev: 0c8f87d5d4ec9f286b1e85d114cb9a728c1ff64b) Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kexec-tools: update COMPATIBLE_HOST because of makedumpfileKai Kang2024-11-011-0/+1
| | | | | | | | | | | | makedumpfile is not compatible with mipsarcho32 and riscv32, so set for kexec-tools accordingly. And update packagegroup-core-tools-testapps too. (From OE-Core rev: 9107d9c09c7dab385c6034778cefadca3613be9c) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: disable defconfig options from mount-via-label.cfgEnrico Jörns2024-11-012-14/+11
| | | | | | | | | | | | | | | Accidentally enabled in 6a6c6442 ("busybox: refresh the defconfig from 1.33.0"). With this, also CONFIG_FEATURE_VOLUMEID_EROFS was enabled accidentally. To not break possible existing use cases, we add it to the existing fragment manually. (From OE-Core rev: 166c255b9294edc878977d7b214929d6e83b4d67) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: disable long options in defconfigEnrico Jörns2024-11-011-4/+4
| | | | | | | | | | | | | | | | | These are activated by the longopts.cfg fragment, thus there should be no need to set them in the defconfig. The individual long options where enabled without mentioning a specific need, mostly while adding the corresponding command, thus it should be safe to disable them. Note that we cannot disable the general 'LONG_OPTS' feature in the defconfig since this is e.g. required by CONFIG_HWCLOCK (since v1.37). (From OE-Core rev: 8cf9c7bd40e58fd363bfbeaf448de399e2e16c71) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: disable defconfig options from getopts.cfg and move long optsEnrico Jörns2024-11-013-4/+3
| | | | | | | | | | | | | | | | | | | | This disables getopts.cfg fragment options in the defconfig which were accidentally enabled in 4335cd24 ("busybox: refresh the defconfig from 1.33.0"). Since there is longopts.cfg for long options, move CONFIG_FEATURE_GETOPT_LONG there. It was probably not placed there originally since it does not match the naming scheme of the other long options. Note that CONFIG_LONG_OPTS will just be dropped since it is enabled in defconfig anyway. (From OE-Core rev: 9022cff09c78fa1e0ac8e2b94c1992caa40074c4) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: disable defconfig options from unicode.cfgEnrico Jörns2024-11-011-6/+6
| | | | | | | | | | | Accidentally enabled in 4335cd24 ("busybox: refresh the defconfig from 1.33.0"). (From OE-Core rev: fc843212c23c04dd177039d8b0529d241e013326) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: disable defconfig options from login-utilities.cfgEnrico Jörns2024-11-012-14/+17
| | | | | | | | | | | | | | | Accidentally enabled in 4335cd24 ("busybox: refresh the defconfig from 1.33.0"). Since this would also enforce wrong ID ranges due to busbox kconfig's bad handling of 'inactive' options, manually add them to the login-utilities.cfg fragment. (From OE-Core rev: 4f58193b8ecad12945e8b06d270b04d89ecbf2cd) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: mdev.cfg: remove CONFIG_SETSIDEnrico Jörns2024-11-011-1/+0
| | | | | | | | | | | Was explicitly enabled in defconfig in 456010a0 ("busybox: Enable mountpoint and setsid applets"). (From OE-Core rev: 64a05e47e454f1adf3954f48de7ce98a7bff14c7) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: disable defconfig options from syslog.cfgEnrico Jörns2024-11-011-15/+11
| | | | | | | | | | | Accidentally enabled in 4335cd24 ("busybox: refresh the defconfig from 1.33.0"). (From OE-Core rev: 9a54f36a5a82d861536e42cc844641455b4c3738) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: disable defconfig options from simpler fragmentsEnrico Jörns2024-11-011-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | This disables options from the defconfig file that are enabled by explicit config fragments. Having them enabled in the defconfig renders the fragments useless and takes away the ability to disable options with SRC_URI:remove = "<fragment>.cfg". The respective options were all deactivated once but got accidentally enabled in 4335cd24 ("busybox: refresh the defconfig from 1.33.0"). This commit disables the features for: - sha1sum.cfg - sha256sum.cfg - resize.cfg - pgrep.cfg - rev.cfg (From OE-Core rev: ad4bd190836d2de4bda6a7e59b55bcf8d118fd14) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: sync config for busybox 1.37Enrico Jörns2024-11-011-0/+7
| | | | | | | | | | | | | | | | | | | Done by disabling all current cfg fragments in SRC_URI, running bitbake -c configure busybox and copying the generated .config back to the defconfig file. Changes to CONFIG_EXTRA_CFLAGS were omitted. CONFIG_SHA1_HWACCEL and CONFIG_SHA256_HWACCEL are disabled explicitly in the respective fragments (sha1sum.cfg, sha256sum.cfg), thus it makes sense they've been enabled by default. (From OE-Core rev: e68e47722514f550c27d877959f16b2e5a1f475e) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-docs-tarball: Add rsvg so we can handle svg files in docsRichard Purdie2024-10-301-0/+1
| | | | | | | | | We need to convert svg into png in the docs build so add rsvg tools to handle this. (From OE-Core rev: 0681707ba82e661d1d92ff90180d286dc28f7c2b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: fix broken links for sysvinit-compatible commandsYi Zhao2024-10-291-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | Since commit[1], PACKAGECONFIG[sysvinit] is not enabled by default when sysvinit is not in DISTRO_FEATURES, which causes the following sysvinit-compatible commands/services to not be built and installed: runlevel telinit rc-local.service systemd-initctl systemd-initctl.service systemd-rc-local-generator systemd-sysv-generator systemd-update-utmp-runlevel.service Therefore, links to these commands/services should only be created when PACKAGECONFIG[sysvinit] is enabled. [1] https://git.openembedded.org/openembedded-core/commit/?id=3668235fd60a9027608f37251c4b453ed21b3687 (From OE-Core rev: a20b698f1acdee972cf1ff570b09a2e2c36bef1a) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: upgrade 256.6 -> 256.7Wang Mingyu2024-10-294-1/+1
| | | | | | | | (From OE-Core rev: e54b11c36cd140674ad4eca4eacd34b863706518) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: add support for cvss v4.0Peter Marko2024-10-251-4/+10
| | | | | | | | | | | | | | | | | | | | | https://nvd.nist.gov/general/news/cvss-v4-0-official-support CVSS v4.0 was released in November 2023 NVD announced support for it in June 2024 Current stats are: * cvss v4 provided, but also v3, so cve-check showed a value sqlite> select count(*) from nvd where scorev4 != 0.0 and scorev3 != 0.0; 2069 * only cvss v4 provided, so cve-check did not show any sqlite> select count(*) from nvd where scorev4 != 0.0 and scorev3 = 0.0; 260 (From OE-Core rev: 358dbfcd80ae1fa414d294c865dd293670c287f0) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: 1.36.1 -> 1.37.0Andrej Valek2024-10-2415-610/+121
| | | | | | | | | | | | | | | | | | - update to next stable version 1.37.0 - refresh defconfig - disable new applets (ip_link_can) - enable new applets (time64, find_exec_ok, getfattr, udhcpd_bootp) - disable sha acceleration by default - enable it just for x86-64, other possible option (x86) is broken - submitted to mailing list - fix problem with syslogd when nothing was logged - fix problem with start-stop-daemon tests - remove and refresh already merged patches (From OE-Core rev: 21753f16a364e32050cf8d79bfa7e0f89be52ce7) Signed-off-by: Andrej Valek <andrej.v@skyrain.eu> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* udev-extraconf: fix network.sh script did not configure hotplugged interfacesRegis Dargent2024-10-221-32/+0
| | | | | | | | | | | | | | | | | | | | | | | | | Udev script network.sh is called when a new ethernet interface is plugged (eg. USB). Due to some (old) missing files, this script does nothing, instead of configuring the interfaces with ifup. I just commented the corresponding lines to allow the script to reach the part where it calls ifup. (From OE-Core rev: 160f7139172ffdf510a0d7d4e85f7fbaac7fd000) Signed-off-by: Regis Dargent <regis.dargent@gmail.com> Fixes [YOCTO 15616] network.sh relies on (long) missing files (eg. /etc/network/options, /etc/init.d/network) to decide if it should configure the new network interface (ifup) or put its name in /etc/udev_network_queue for future initialization by /etc/init.d/network service. The actual result was that the new hotplugged interface was never automatically configured. Removing the obsolete tests allows the script to do its intended job. Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: sfdisk sector size improvementsVince Chang2024-10-222-0/+253
| | | | | | | | | | Refer to https://github.com/util-linux/util-linux/pull/3237. (From OE-Core rev: 7e37e0addeae3ade4d1634697cde5c8cc619c46a) Signed-off-by: Vince Chang <vince_chang@aspeedtech.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Update to tip of trunkKhem Raj2024-10-222-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - License-Update: One of COPYRIGHT holders name changed [1] - Brings these changes * 047a1639 sys/stat.h: fix typo in statx member name stx_dio_offset_align * 5be920e9 s390x: don't allow br r0 in CRTJMP asm * 2fc56aaa update contributor name in authorship notices * 43664364 fix compile regression in exit on archs without SYS_pause * 6d8000d3 abstract missing SYS_pause syscall with macros * 23ab04a8 statx: add new struct statx fields and corresponding mask macros * 4ca8c267 statx: fix uninitialized attributes/mask in fallback path * 251cbb63 statx: fix ENOSYS emulation not setting stx_rdev_* * 8c43c562 sysconf: fix _SC_MINSIGSTKSZ computation to match kernel interpretation * 300a1f53 sigaltstack: enforce dynamic MINSIGSTKSZ limit * 572a2e2e printf: drastically reduce stack usage without [long] double args * c94a0c16 isatty: don't collapse all non-EBADF errors to ENOTTY * ee18e584 printf core: replace if(0) blocks around switch cases with explicit gotos * 06a96470 iconv: add cp858 * e1b57ede catan: remove no-op reduction mod pi and unused code * ca4e632d remove incorrect comment regarding powl exceptional cases * c851b268 strerror: add error strings for EUCLEAN and ENAVAIL * 9c78557a use hidden visibility for C entry point function _start_c * 882aedf6 fix lost or delayed wakes in sem_post under certain race conditions * b09e3174 m68k: fix POLLWRNORM and POLLWRBAND * 2de6b426 fix missing make dependency for Scrt1.o due to typo * cde213f9 timer_create: replace pthread barrier with semaphores for thread start * 9ee6f104 atexit: fail rather than deadlocking after last handler is called * 8cca79a7 exit: add back lock to make concurrent calls to exit safe * ef7d0ae2 move __utc string object to its own translation unit [1] https://git.musl-libc.org/cgit/musl/commit/?id=2fc56aaa9f660ebd735d1595c3501b792af42eb8 (From OE-Core rev: 13381184a262f6cc69240a34985646fd0ad44655) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: Add `findmnt` to the bash completion RDEPENDSAlban Bedel2024-10-181-1/+1
| | | | | | | | | | | The bash completion scripts for `umount`, `fstrim` and `fsfreeze` make use of `findmnt` so add it to the bash completion RDEPENDS. (From OE-Core rev: f8703b486a6ccf39225815362acadafb890ca56e) Signed-off-by: Alban Bedel <alban.bedel@aerq.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: upgrade 2.13.3 -> 2.13.4J. S2024-10-181-1/+1
| | | | | | | | | | Changelog: https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.4 (From OE-Core rev: b8e00689bf3ceaa27c015df32a88ada27b1810a7) Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Fix missing randomness in __gen_tempnameOla x Nilsson2024-10-152-0/+30
| | | | | | | | | | | | | | | Backport the fix for glibc bug 32214. The missing randomness in early boot may cause some systemd services to fail when they occasionally try to create tempdirs like /run/systemd/namespace-aaaaaa at the same time. The error messages can contain things like "Failed to set up mount namespacing". (From OE-Core rev: 0bb6aa06db5bf2e89d1c499e84a0a8cedbd8f0a7) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check-update-nvd2-native: Incremement DL_DIR database locationRichard Purdie2024-10-141-1/+1
| | | | | | | | | | | | | | | | | We're seeing a lot of sqlite database corruption issues in our automated testing. It is unclear why this is happening. There were process imrpovements implemented in master and it is unclear if older releases are somehow making those changes ineffective or if the problem is elsewhere. By changing the location in DL_DIR, we split the two sets of accesses to be separate and can isolate whether the master changes really did improve things or not. If successful, we may consider backporting those changes to the stable releases. (From OE-Core rev: bcc624012d676192a722a7694614f3c49c6bc4d2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ovmf-native: remove .pyc files from installMikko Rapeli2024-10-141-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | They break builds which share sstate files on different machines and paths: ERROR: ovmf-edk2-stable202408-r0 do_prepare_recipe_sysroot: Error executing a python function in exec_func_python() autogenerated: The stack trace of python calls that resulted in this exception/failure was: File: 'exec_func_python() autogenerated', lineno: 2, function: <module> 0001: *** 0002:extend_recipe_sysroot(d) 0003: File: '/srv/pokybuild/yocto-worker/oe-selftest-fedora/build/meta/classes-global/staging.bbclass', lineno: 624, function: extend_recipe_sysroot 0620: 0621: # Handle deferred binfiles 0622: for l in binfiles: 0623: (targetdir, dest) = binfiles[l] *** 0624: staging_copyfile(l, targetdir, dest, postinsts, seendirs) 0625: 0626: bb.note("Installed into sysroot: %s" % str(msg_adding)) 0627: bb.note("Skipping as already exists in sysroot: %s" % str(msg_exists)) 0628: File: '/srv/pokybuild/yocto-worker/oe-selftest-fedora/build/meta/classes-global/staging.bbclass', lineno: 165, function: staging_copyfile 0161: os.symlink(linkto, dest) 0162: #bb.warn(c) 0163: else: 0164: try: *** 0165: os.link(c, dest) 0166: except OSError as err: 0167: if err.errno == errno.EXDEV: 0168: bb.utils.copyfile(c, dest) 0169: else: Exception: FileExistsError: [Errno 17] File exists: '/srv/pokybuild/yocto-worker/oe-selftest-fedora/build/build-st-667282/tmp/sysroots-components/x86_64/ovmf-native/usr/bin/edk2_basetools/BaseTools/Source/Python/AutoGen/__pycache__/WorkspaceAutoGen.cpython-312.pyc' -> '/srv/pokybuild/yocto-worker/oe-selftest-fedora/build/build-st-667282/tmp/work/core2-64-poky-linux/ovmf/edk2-stable202408/recipe-sysroot-native/usr/bin/edk2_basetools/BaseTools/Source/Python/AutoGen/__pycache__/WorkspaceAutoGen.cpython-312.pyc' (From OE-Core rev: facd9e17fa53e2fb3a828b3f179cfb659be75d37) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* volatile-binds: mount-copybind: fix typoUlrich Ölmann2024-10-111-1/+1
| | | | | | | | | Amend a small typing error. (From OE-Core rev: 6d3c24cfc269fbcd49acd8be220395500fc7120c) Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ttyrun: upgrade 2.34.0 -> 2.35.0Wang Mingyu2024-10-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============= Changes of existing tools: - cpacfstats: Add support for FULL XTS (MSA 10) and HMAC (MSA 11) PAI counter - cpuplugd: Make cpuplugd compatible with hiperdispatch - dbginfo.sh: Add network sockstat info - pvapconfig: s390x exclusive build - zdev: Add option to select IPL device - zdump/dfo_s390: Support s390 DFO for vr-kernel dumps - zipl: Add support of mirror devices Bug Fixes: - (genprotimg|zipl)/boot: discard .note.package ELF section to save memory - netboot/mk-s390image: Fix size when argument is a symlink - ziorep_config: Fix warning message when multipath device is not there. - zipl: Fix problems when target parameters are specified by user - zipl: Fix segfault when creating device-based dumps with '--dry-run' (From OE-Core rev: ade8b2028b0fe4e56a1f05cdfec90a1ba32eab13) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot-native: add runtime dependency to python3-pefile-nativeMikko Rapeli2024-10-011-0/+2
| | | | | | | | | It's needed to run the ukify script. (From OE-Core rev: 67a248f911626330c20b55de1cd52f83f00a0df1) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: upgrade 256.5 -> 256.6Wang Mingyu2024-09-304-1/+1
| | | | | | | (From OE-Core rev: 5761748a0c98bb05849df71b43609f82f4235e51) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-framework: init: fix typoUlrich Ölmann2024-09-301-1/+1
| | | | | | | | | Amend a small typing error. (From OE-Core rev: c4ca9161d9de1a522a34c9088dedf6c346afbbed) Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* init-system-helpers: upgrade 1.66 -> 1.67Wang Mingyu2024-09-301-1/+1
| | | | | | | (From OE-Core rev: 39453acfb61ed698d03a2472ff1dcc7df5a4bfeb) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ifupdown: upgrade 0.8.43 -> 0.8.44Wang Mingyu2024-09-301-1/+1
| | | | | | | (From OE-Core rev: 89f5d20bd66c075be646b7fc6d5678041ded488a) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ell: upgrade 0.68 -> 0.69Wang Mingyu2024-09-301-1/+1
| | | | | | | | | | | | Changelog: ========== - Add support for getting remaining microseconds left on a timer. - Add support for setting link MTU on a network interface. (From OE-Core rev: 15e775769abd8d3123bba10a46526b94009328a5) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot: Enable on RISCVKhem Raj2024-09-301-1/+1
| | | | | | | | (From OE-Core rev: 68246e1f80a17b12774e2eb77adc9301dbe6385d) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: stable 2.40 branch updatesDeepthi Hemraj2024-09-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Below commits on glibc-2.40 stable branch are updated. 7073164add libio: Attempt wide backup free only for non-legacy code adfb14e71f debug: Fix read error handling in pcprofiledump f4a9b6e97b elf: Fix tst-dlopen-tlsreinit1.out test dependency f496b750f1 elf: Avoid re-initializing already allocated TLS in dlopen (bug 31717) b7edcfa0f4 elf: Clarify and invert second argument of _dl_allocate_tls_init 3414b17e9d nptl: Use <support/check.h> facilities in tst-setuid3 3b3350d7ba posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64 e24902f409 ungetc: Fix backup buffer leak on program exit [BZ #27821] dac7a0694b ungetc: Fix uninitialized read when putting into unused streams [BZ #27821] 2f749d2b15 Make tst-ungetc use libsupport 27fb563bfe stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650] bc240ba7c8 support: Add FAIL test failure helper 709319f9de string: strerror, strsignal cannot use buffer after dlmopen (bug 32026) 586e4cd8c6 Define __libc_initial for the static libc c0af0c2ba0 x86: Fix bug in strchrnul-evex512 [BZ #32078] 898f25e0b1 x32/cet: Support shadow stack during startup for Linux 6.10 e3556937c2 x86-64: Remove sysdeps/x86_64/x32/dl-machine.h 39ee60a719 support: Add options list terminator to the test driver 5641780762 manual/stdio: Further clarify putc, putwc, getc, and getwc 6a97e2ba14 Fix name space violation in fortify wrappers (bug 32052) aa533d58ff x86: Tunables may incorrectly set Prefer_PMINUB_for_stringop (bug 32047) 928769737c resolv: Fix tst-resolv-short-response for older GCC (bug 32042) ca53bc68ab Add mremap tests 2eb2d78ca7 mremap: Update manual entry 3433a35842 linux: Update the mremap C implementation [BZ #31968] 46f19b2342 Enhanced test coverage for strncmp, wcsncmp 509166c9a5 Enhance test coverage for strnlen, wcsnlen 132a72f93c manual: make setrlimit() description less ambiguous 65fbcfe589 manual/stdio: Clarify putc and putwc 5d2a931a81 malloc: add multi-threaded tests for aligned_alloc/calloc/malloc 2aebac5e15 malloc: avoid global locks in tst-aligned_alloc-lib.c 145b588637 Fix version number in NEWS file b6aeba2de1 manual: Do not mention STATIC_TLS in dynamic linker hardening recommendations ef14142663 resolv: Do not wait for non-existing second DNS response after error (bug 30081) 8bbb8d7b16 resolv: Allow short error responses to match any query (bug 31890) (From OE-Core rev: 5335a7b2852ce891a98eda18d59fc32e60f1c722) Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: update 2.80.4 -> 2.82.1Markus Volk2024-09-204-5/+5
| | | | | | | | | - adjust 0010-Do-not-hardcode-python-path-into-various-tools.patch (From OE-Core rev: de2d07df6efb6c4d01f31d3f6d902b630f747400) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* omvf: update from edk2-stable202402 to edk2-stable202408Mikko Rapeli2024-09-205-40/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes patches for CVE-2023-45236, CVE-2023-45237 and CVE-2024-25742. Refreshed patches with devtool. Changes: https://github.com/tianocore/edk2/releases edk2-stable202408 Release Date 2024-08-23 New Features & Bug Fixes CryptoPkg:Add more crypto APIs (AESGCM/PEM/X509/RSA/PKCS5/PKCS7/Authenticode) based on Mbedtls CryptoPkg: Enable Openssl native instruction support for AARCH64 CryptoPkg: Add support for aes128-sha256 and aes256-sha256 cipher UefiCpuPkg: S3 cleanup MdePkg/BaseLib: Add CRC16 CCITT False Implementation DynamicTablesPkg: ACPI TPM2 generator DynamicTablesPkg: Prepare for supporting other archs BaseTools: Add VS2022 support OvmfPkg: Add LoongArchVirt instance to OvmfPkg and enable it edk2-stable202405 Release Date 2024-05-24 New Features & Bug Fixes SecurityPkg:Add EFI Device Authentication Signature Database and SPDM CryptoPkg:add additional RSAES-OAEP crypto functions OvmfPkg:Add 5-level paging support OvmfPkg:SEV-SNP Support for running under an SVSM OvmfPkg:RBP register shall be cleared in TDVMCALL OvmfPkg:Harden #VC instruction emulation (CVE-2024-25742) Add SPI bus driver stack NetworkPkg: Predictable TCP ISNs NetworkPkg: Use of a Weak PseudoRandom Number Generator UefiCpuPkg: Add new SmmRelocationLib library Bugzilla List Update Notes NetworkPkg SECURITY PATCH CVE-2023-45237 requires the platform to provide the right implementation of the EFI_RNG_PROTOCOL (i.e., using a GUID that appears in the allowlist) and EFI_HASH2_PROTOCOL. If it is not implemented, the platform will lose the ability to do network boot. (From OE-Core rev: 50ae1d4afe436498b157f19e085532a6f0525d85) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionyocto-5.1styhead-5.1Richard Purdie2024-09-171-1/+1
| | | | | | (From OE-Core rev: 161c5b311f1aeb8f254dca96331b31d5b67fc92d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2024-09-171-1/+1
| | | | | | (From OE-Core rev: 4d27344f0cd414dee71bded529536616cef277c1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: add missing dependency on libkmod to udevRoss Burton2024-09-131-0/+2
| | | | | | | | | | | | | | | | | | | | | | | As of systemd 256, libsystemd-shared.so doesn't directly link to a number of libraries but instead dlopen()'s them as needed to reduce the size of the attack surface. Instead the .so has a .note.dlopen segment that lists the libraries that may be opened, with the intention that these are transformed into package recommendation fields. We don't yet have support for these (see #15595) so explicit dependencies have been added to the systemd package itself. However, in an initramfs with udev but without systemd and no recommendations you end up without libkmod, so module loading is impossible. Add an explicit hard dependency on libkmod to udev, because modules are critical functionality. (From OE-Core rev: 12fadefe11ed9f09171087608c3c4b83c7302b3f) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: include sysvinit in default PACKAGECONFIG only if in DISTRO_FEATURESRasmus Villemoes2024-09-131-2/+1
| | | | | | | | | | | | | | | | | | The sysvinit PACKAGECONFIG knob enables various legacy/compatibility code that may not be needed or even desired. If DISTRO_FEATURES includes systemd (as it must for this recipe to build) but not sysvinit, there is no point building and installing that legacy support. As most other changes, this can cause breakage, but given that sysvinit not being in DISTRO_FEATURES requires explicit opt-out (due to backfill), I think the risk is low. Moreover, it is generally easier to add to than to remove from PACKAGECONFIG. (From OE-Core rev: 3668235fd60a9027608f37251c4b453ed21b3687) Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta-ide-support: Mark recipe as MACHINE-specificPaul Barker2024-09-121-0/+1
| | | | | | | | | | | | | | | | meta-ide-support:do_write_test_data dumps the bitbake data dictionary to a file using export2json(). As this obviously includes the value of MACHINE, and other MACHINE-specific variables, the recipe needs to be marked as MACHINE-specific. RP: Note that this patch does change the name of the environment script since it is no longer package arch specific but machine arch specific. [RP: Fix selftest to reference new environment file] (From OE-Core rev: 3be2bc8a9b0c9d6a178329c8b451a6bedf255d6c) Signed-off-by: Paul Barker <paul.barker.ct@bp.renesas.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Fix cut with "-s" flagColin McAllister2024-09-102-0/+67
| | | | | | | | | | | | | | | This fixes and issue that allows blank lines to be incorrectly output when the "-s" flag is included. This issue propogates into the populate-volatile.sh script in initscripts. If a volatiles drop file contains blank lines, a blank line will be included in combined users, which will incorrectly result in a difference in the number of combined users versus defined users. If this happens, the volatiles file will not be executed. (From OE-Core rev: dfbcf0581ab3dd47037726a7b8aa06f777792473) Signed-off-by: Colin McAllister <colinmca242@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* udev-extraconf: Add collect flag to mountColin McAllister2024-09-101-1/+1
| | | | | | | | | | | | | | | | | | | | | Adds extra "--collect" flag to the mount command within automount_systemd. This is intended to fix an observed deadlock after rapidly inserting and removing external media. This is because if the mount command fails, the transient mount will enter a failed state. The next time the media is inserted, automount_systemd bails because the first consition finds that the file path for the failed transient mount still exists. This leaves the external media unmounted and cannot be mounted until the mount is fixed via systemctl or the device is rebooted. Adding "--collect" ensures that the transient mount is cleaned up after entering a failed state, which ensures that the media can still be mounted when it's re-inserted. (From OE-Core rev: f0cda74d73eb8c14cd6f695f514108f1e94984a6) Signed-off-by: Colin McAllister <colinmca242@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: make home directory readable by systemd-coredumpEtienne Cordonnier2024-09-092-0/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In https://github.com/systemd/systemd/commit/924453c22599cc246746a0233b2f52a27ade0819 ProtectHome was set to true for systemd-coredump in order to reduce risk, since an attacker could craft a malicious binary in order to compromise systemd-coredump. At that point the object analysis was done in the main systemd-coredump process. Because of this systemd-coredump is unable to product symbolicated call-stacks for binaries running under /home ("n/a" is shown instead of function names). However, later in https://github.com/systemd/systemd/commit/61aea456c12c54f49c4a76259af130e576130ce9 systemd-coredump was changed to do the object analysis in a forked process, covering those security concerns. Let's set ProtectHome to read-only so that systemd-coredump produces symbolicated call-stacks for processes running under /home. Note: it still does not work in /tmp (because of PrivateTmp=yes) and in /root (for unknown reasons). Before the change (with minidebuginfo enabled): root@qemux86-64:~# /home/sleep 1000 & [1] 426 root@qemux86-64:~# kill -11 $(pidof sleep) root@qemux86-64:~# coredumpctl info PID: 426 (sleep) UID: 0 (root) GID: 0 (root) Signal: 11 (SEGV) Timestamp: Fri 2024-09-06 17:25:18 UTC (3s ago) Command Line: /home/sleep 1000 Executable: /home/sleep Control Group: /system.slice/system-serial\x2dgetty.slice/serial-getty@ttyS0.service Unit: serial-getty@ttyS0.service Slice: system-serial\x2dgetty.slice Boot ID: 44ef4ddfaad249ceaa29d1e9f330d3b5 Machine ID: fb279f18f2c849c59768754c7a274ee3 Hostname: qemux86-64 Storage: /var/lib/systemd/coredump/core.sleep.0.44ef4ddfaad249ceaa29d1e9f330d3b5.426.1725643518000000.zst (present) Size on Disk: 16.5K Message: Process 426 (sleep) of user 0 dumped core. Stack trace of thread 426: #0 0x00007f365f3849a7 clock_nanosleep (libc.so.6 + 0xd49a7) #1 0x00007f365f38f667 __nanosleep (libc.so.6 + 0xdf667) #2 0x0000561fee703737 n/a (/home/sleep + 0x7737) #3 0x000000003a6227c5 n/a (n/a + 0x0) ELF object binary architecture: AMD x86-64 [1]+ Segmentation fault (core dumped) /home/sleep 1000 After the change (with minidebuginfo enabled): root@qemux86-64:~# /home/sleep 1000 & [1] 450 root@qemux86-64:~# kill -11 $(pidof sleep) root@qemux86-64:~# coredumpctl info PID: 450 (sleep) UID: 0 (root) GID: 0 (root) Signal: 11 (SEGV) Timestamp: Fri 2024-09-06 17:30:12 UTC (4s ago) Command Line: /home/sleep 1000 Executable: /home/sleep Control Group: /system.slice/system-serial\x2dgetty.slice/serial-getty@ttyS0.service Unit: serial-getty@ttyS0.service Slice: system-serial\x2dgetty.slice Boot ID: 44ef4ddfaad249ceaa29d1e9f330d3b5 Machine ID: fb279f18f2c849c59768754c7a274ee3 Hostname: qemux86-64 Storage: /var/lib/systemd/coredump/core.sleep.0.44ef4ddfaad249ceaa29d1e9f330d3b5.450.1725643812000000.zst (present) Size on Disk: 16.5K Message: Process 450 (sleep) of user 0 dumped core. Stack trace of thread 450: #0 0x00007f795dd689a7 clock_nanosleep (libc.so.6 + 0xd49a7) #1 0x00007f795dd73667 __nanosleep (libc.so.6 + 0xdf667) #2 0x0000561965c9d737 rpl_nanosleep (sleep + 0x7737) #3 0x0000561965c9d0c1 xnanosleep (sleep + 0x70c1) #4 0x0000561965c985c8 main (sleep + 0x25c8) #5 0x00007f795dcba01b __libc_start_call_main (libc.so.6 + 0x2601b) #6 0x00007f795dcba0d9 __libc_start_main (libc.so.6 + 0x260d9) #7 0x0000561965c98685 _start (sleep + 0x2685) ELF object binary architecture: AMD x86-64 [1]+ Segmentation fault (core dumped) /home/sleep 1000 (From OE-Core rev: b8c1f999038b7cd6fc2e80ed215541c8a4d9e19f) Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Remove a leftover reference to ${datadir}/mimePeter Kjellerstedt2024-09-051-1/+0
| | | | | | | | | | | | ${MIMEDIR} (aka ${datadir}/mime) is packaged in ${PN}-mime and the reference to ${datadir}/mime/packages/io.systemd.xml for FILES:${PN} should have been removed in commit 5560243137f772683e53b614f134dd632b62be8b. (From OE-Core rev: 3dba1443ef123714a4b1c77ade1ea3b2d0ad3f21) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* expat: 2.6.2 -> 2.6.3Richard Purdie2024-09-051-1/+1
| | | | | | | | | | Includes fixes for CVE-2024-45490, CVE-2024-45491 and CVE-2024-45492. https://blog.hartwork.org/posts/expat-2-6-3-released/ (From OE-Core rev: cc96903d915db0dfde382a26bb7ec57d0d37e62e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Fix the arm/arm64 worsize.h uniificationb patchKhem Raj2024-09-051-5/+45
| | | | | | | | | | The symlink got mangled during the 2.40 upgrade (From OE-Core rev: f4d9a708e8c61d147e8b06d94f13ae57b6f879e7) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Maohui Lei <leimaohui@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gettext: Drop obsolete ptest conditional in do_installRichard Purdie2024-09-041-2/+0
| | | | | | | | | The PTEST_ENABLED conditional is no longer needed since the task is deleted if ptest isn't enabled. (From OE-Core rev: 6037ad74d88ff23821120422f2f0d0366daa8ec7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ell: upgrade 0.67 -> 0.68Wang Mingyu2024-09-041-1/+1
| | | | | | | | | | | | Changelog: ========== - Fix issue with string allocation growth strategy. - Add support for netlink helper functions. (From OE-Core rev: 5a60e56785e30aba43741daea19e1f742a294c4d) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>