Commit Graph

5246 Commits

Author SHA1 Message Date
Ross Burton
3044b4e3f8 busybox-inittab: fix console handling
A testing failure meant that the inittab changes made in 6c65544 didn't
actually work.

A copy-paste problems meant that start_getty was being invoked instead
of getty, but start_getty is sysvinit-inittab-specific. Revert this
inittab to calling getty directly.

Remove the terminal type, this wasn't specified in the original inittab.

Busybox's init has non-standard behaviour for the inittab's ID field.
With SysV this is a four-character identifier and nothing more, but with
busybox init this is the controlling terminal (minus /dev).  If the
terminal doesn't exist then busybox doesn't gracefully handle the
failure but instead repeatedly fails to spawn.

As getty will immediately issue a setsid() this isn't needed for getty
entries, so the ID can be empty and ttyrun does the terminal detection.

(From OE-Core rev: 71202782a06ed1f0a17e00072b74b21195f2f5f9)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-11 09:43:45 +01:00
Ross Burton
cedd01f57e busybox: use ttyrun to run getty only if the terminal exists
Wrap calls to start_getty with ttyrun, so that getty isn't started if
the device doesn't exist.  As we know start_getty is only called when
the device exists we can remove the partial workaround for this problem
in that scripts too.

This neatly obsoletes SERIAL_CONSOLES_CHECK, whose sole purpose was to
check what terminals are present at boot and rewrite inittab.  Notably,
this meant that SERIAL_CONSOLES_CHECK made using a read-only rootfs
impossible.

(From OE-Core rev: 950ecaabc04836efc346be0ac7e0331e2378872b)

(From OE-Core rev: 6c655441ff5cd0d8877891ff37f8cfa983363a2a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-09 15:51:13 +01:00
Ross Burton
42d35e89a3 sysvinit-inittab: use ttyrun to run getty only if the terminal exists
Wrap calls to start_getty with ttyrun, so that getty isn't started if
the device doesn't exist.  As we know start_getty is only called when
the device exists we can remove the partial workaround for this problem
in that scripts too.

This neatly obsoletes SERIAL_CONSOLES_CHECK, whose sole purpose was to
check what terminals are present at boot and rewrite inittab.  Notably,
this meant that SERIAL_CONSOLES_CHECK made using a read-only rootfs
impossible.

(From OE-Core rev: f4fd17d5a5e4eaa31995d3ca52c871cfbdc0df68)

(From OE-Core rev: 8e48297621311116d3edd7e3aa0de1b8ef2431b1)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-09 15:51:13 +01:00
Ross Burton
b3fa551d64 ttyrun: add new recipe
ttyrun is a small tool from IBM's s390-tools package to run a command
if the specified TTY is present, and hang if not.

This is useful so that you can list all of the potential terminals in
inittab and not have getty quiting instantly when a device isn't
present, resulting in the "respawning too fast" errors.

Note that DISTRELEASE has to be set as otherwise "build$(DATE)" is used,
which is non-reproducible.

(From OE-Core rev: 41a8a2e0817c7f73d3a4514fd158141ee5627ad8)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-09 15:51:13 +01:00
Ross Burton
18a8d773c5 sysvinit-initab: rewrite loop to generate inittab
Instead of one-letter variables and arcane sed expressions, use English
words and 'cut'.

(From OE-Core rev: de9833792dd0cfac6f17d5c733c263b976e89cf6)

(From OE-Core rev: c79f6e66283e506453d1643259d18e2d13eb10ea)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-09 15:51:13 +01:00
Martijn de Gouw
0fb1ff0ffb busybox: Set PATH in syslog initscript
This script is not always called with /sbin and /usr/sbin in the PATH
already, for example when called via ssh. Explicitly set PATH to make
sure it includes /sbin and /usr/sbin since that's where start-stop-daemon
is located.

(From OE-Core rev: fa53f898eaba15dff030f9eadf86e5bca7d954fa)

Signed-off-by: Martijn de Gouw <martijn.de.gouw@prodrive-technologies.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-06 11:51:11 +01:00
Richard Purdie
e444d2bed0 glibc: Pull in stable branch fixes
Pull in stable branch fixes including:

* tunables: Terminate if end of input is reached (CVE-2023-4911)
* Propagate GLIBC_TUNABLES in setxid binaries
* Document CVE-2023-4806 and CVE-2023-5156 in NEWS
* Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 [BZ #30843]

Also set CVE_STATUS accordingly for the fixes pulled in.

(From OE-Core rev: 7d77bce6158bf11a2de0944f75589382f153bb91)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-04 13:00:33 +01:00
Deepthi Hemraj
c6ed95a7e4 glibc: stable 2.38 branch updates.
Below commits on glibc-2.38 stable branch are updated.
0e1ef6779a (HEAD -> release/2.38/master, origin/release/2.38/master) manual/jobs.texi: Add missing @item EPERM for getpgid
d94461bb86 string: Fix tester build with fortify enable with gcc < 12
63250e9c57 iconv: restore verbosity with unrecognized encoding names (bug 30694)
00ae4f10b5 getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806)
b25508dd77 CVE-2023-4527: Stack read overflow with large TCP responses in no-aaaa mode
89da8bc588 NEWS: Add the 2.38.1 bug list
d3ba6c1333 elf: Move l_init_called_next to old place of l_text_end in link map
750f19526a elf: Remove unused l_text_end field from struct link_map
a3189f66a5 elf: Always call destructors in reverse constructor order (bug 30785)
7ae211a01b elf: Do not run constructors for proxy objects
92201f16cb libio: Fix oversized __io_vtables
5bdef6f27c io: Fix record locking contants for powerpc64 with __USE_FILE_OFFSET64

0024-CVE-2023-4527.patch is dropped

(From OE-Core rev: eae8634ff7a7dd6f84c4607b5f1b0c6fe5e39f37)

Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-03 22:18:27 +01:00
Ulrich Ölmann
4ff192f9ec packagegroup-base: clean up setting packagegroup-machine-base's SUMMARY
(From OE-Core rev: 6f87d8e92fc3d5229eb0f8c33548dd147c03a0ce)

Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-01 08:12:59 +01:00
Qiu Tingting
085adb197b tar: add ptest support
Add a ptest for tar.
- It is taking around 3m to execute with kvm, so added it to PTEST_SLOW.
- It contains 244 cases.
- Below is parts of the run log:
  START: ptest-runner
  2023-09-26T08:37
  BEGIN: /usr/lib/tar/ptest
  ## ------------------------ ##
  ## GNU tar 1.35 test suite. ##
  ## ------------------------ ##
  PASS: tar version
  PASS: decompressing from stdin
  ...
  200 tests were successful.
  44 tests were skipped.
  DURATION: 190
  END: /usr/lib/tar/ptest
  2023-09-26T08:40
  STOP: ptest-runner
  TOTAL: 1 FAIL: 0

(From OE-Core rev: 12eed1e6c701759321541d2c04eeca3db3c99247)

Signed-off-by: Qiu Tingting <qiutt@fujitsu.com>
Signed-off-by: Yan Xinkuan <yanxk.fnst@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28 12:37:46 +01:00
Wang Mingyu
ccdeae3df9 kbd: upgrade 2.6.2 -> 2.6.3
(From OE-Core rev: 67f367901d32c858bb9f2280f9cd08dcdcb0949d)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28 12:37:46 +01:00
Antoine Lubineau
8e680771d2 cve-check: add CVSS vector string to CVE database and reports
This allows building detailed vulnerability analysis tools without
relying on external resources.

(From OE-Core rev: 048ff0ad927f4d37cc5547ebeba9e0c221687ea6)

Signed-off-by: Antoine Lubineau <antoine.lubineau@easymile.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28 12:37:46 +01:00
Khem Raj
07bf0ce327 glib-2.0: Remove failing ptests on musl
FAIL: glib/convert.test (Child process killed by signal 6)
FAIL: glib/collate.test (Child process killed by signal 6)
FAIL: glib/gdatetime.test (Child process killed by signal 6)
FAIL: glib/date.test (Child process killed by signal 6)
FAIL: glib/converter-stream.test (Child process killed by signal 6)
FAIL: glib/option-context.test (Child process killed by signal 6)

(From OE-Core rev: a28e0d41fbb5027aa6d2537288a8acc7d53964e7)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27 11:50:34 +01:00
Khem Raj
6ba2fcb71f glib-2.0: Enable possible locales with musl for ptests
(From OE-Core rev: ea2849af1c56ff2d26d6a9458323233111051a38)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27 11:50:34 +01:00
Khem Raj
6803810008 systemd: Refresh patches to avoid patch-fuzz
(From OE-Core rev: eb8a86fee9eeae787cc0a58ef2ed087fd48d93eb)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27 11:50:34 +01:00
Khem Raj
b6f5656c62 systemd: Drop two upstreamed musl patches
(From OE-Core rev: 7eea9e63a155c9ed30706cc7926a6728d629bd5e)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27 11:50:34 +01:00
Yash Shinde
82dfa7b8ac glibc: fix CVE-2023-4527
Upstream-Status: Backport[https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=4ea972b7edd7e36610e8cde18bf7a8149d7bac4f]

(From OE-Core rev: 66b6133b5e623f39d9c26dae3097035dafd41f60)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:28 +01:00
Khem Raj
c7fdb5aca5 musl-legacy-error: Add recipe
This adds glibc error() API implementation which is needed by few
packages still.

(From OE-Core rev: c3f0f00a8dcc76ece298cf4debf1ca71f930ec57)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:28 +01:00
Alexander Kanavin
2ad5b03a52 seatd: upgrade 0.7.0 -> 0.8.0
(From OE-Core rev: 6a44e9192ded342e8c9f69a1f661519ae75823ca)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:27 +01:00
Alexander Kanavin
593ed3b765 util-linux: upgrade 2.39.1 -> 2.39.2
(From OE-Core rev: 5d1203e87eac46dee6c0a7cad309a00e63afa6de)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:27 +01:00
Alexander Kanavin
1c05e9b2f8 systemd: upgrade 254 -> 254.4
(From OE-Core rev: d665cd001a1ca69e2c25bebed377b9dd47e0064f)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:27 +01:00
Khem Raj
53809d9b01 bsd-headers: Define __CONCAT and __STRING
Sync with other musl distros

(From OE-Core rev: 0796d65369737ddf530a04ae534e81022c1ba005)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:25:42 +01:00
Khem Raj
9215dc3208 musl: Update to latest
Brings following bug fixes

* 79bdacff glob: fix wrong return code when aborting before any matches
* 7291c6c6 statvfs: allocate spare for f_type
* 39e43f08 math: fix ld80 powl(x,huge) and powl(LDBL_MAX,small)
* 6d101027 math: fix ld80 acoshl(x) for x < 0

Drop MIRRORS and switch to etalabs.net for git fetch URI
original repo is not working correcting with git Fetcher

(From OE-Core rev: bb14f1dee4547726ab66e20d535d58563029d67f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:25:42 +01:00
Richard Purdie
1b94ea8b25 recipes: Drop remaining PR values from recipes
We've been removing PR values from recipes at upgrade time for a while. In general
anyone maintaining a binary distro would end up having to curate these themselves
so the values in OE-Core aren't really that useful anymore. In many ways it makes
sense to clear out the remaining ones (which are mostly for 'config' recipes that
are unlikely to increase in PV) and leave a clean slate for anyone implementing
a binary distro config.

References are left in meta-selftest since the tests there do involve them and
their removal upon upgrade.

(From OE-Core rev: d4c346e8ab8f3cae25d1b01c7331ed9f6d4f96ef)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-22 07:45:17 +01:00
Khem Raj
2d44fd92e8 util-linux: Fix lscpu on musl
(From OE-Core rev: 565b22f4927c76b7bbc3d84198a4d5d3927d8401)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-20 08:57:26 +01:00
Khem Raj
fed1504fa0 Revert "util-linux: scanf_cv_alloc_modifier changed from 'as' -> 'ms'"
This was needed for uclibc, which is long gone in OE

This reverts commit d3ffa39e2e.

(From OE-Core rev: fdf81adb8fc705f3c989244ca93067da7db88311)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-20 08:57:26 +01:00
Khem Raj
2f190c7a8c util-linux: Disable failing tests on musl
These tests need strptime with %s which is glibc specific extention

(From OE-Core rev: 0190b3eb67d02ecf42531a7c087a5a6f75ee7a5e)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-20 08:57:26 +01:00
Alexander Kanavin
efddfa97a2 ovmf: update edk2-stable202305 -> edk2-stable202308
(From OE-Core rev: 48878248d39d7e0bf66f33051f7ecef49c14e1e1)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-18 08:53:10 +01:00
Alexander Kanavin
d8ad963a22 glib-2.0: update 2.76.4 -> 2.78.0
Add a patch so that native glib executables do not error out
on systems with kernels less than 5.4.

(From OE-Core rev: 404d9187f2be1f99be740e10b3d4cc23e482027d)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-18 08:53:10 +01:00
Alexander Kanavin
0be8df3e58 glibc-tests: rename to glibc-y2038-tests
The recipe originates from meta-y2038 where the name was not
confusing, but in oe-core it is.

(From OE-Core rev: 90bc7a66b08580207839fc6aafe1ac86c12981c5)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-18 08:53:10 +01:00
Alexander Kanavin
dbe3319897 busybox: enable 64 bit shell arithmetic (via long long type)
This matters on 32 bit systems where otherwise timestamp manipulation
in shell scripts would overflow after 2038. One of the scripts in
strace test suite exposed the issue.

(From OE-Core rev: 8165c980338d4719004bf62644e0fe24ef309fe0)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-18 08:53:10 +01:00
Khem Raj
693ffa9310 gettext: Add missing dependency on gawk autoconf
Needed for additional tests e.g. autopoint-1 which are otherwise skipped

Make locale-base-de-de and locale-base-fr-fw rdep unconditional as
musl-locales do provide these locales

(From OE-Core rev: b4091c20196ebde3ba14a502eca0082f28b09b5c)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-14 15:22:43 +01:00
Wang Mingyu
bf33e089fe dbus: upgrade 1.14.8 -> 1.14.10
Changelog:
===========
• Avoid a dbus-daemon crash if re-creating a connection's policy fails.

• If getting the groups from a user ID fails, report the error correctly,
  instead of logging "(null)"

• Return the primary group ID in GetConnectionCredentials()' UnixGroupIDs
  field for processes with a valid-but-empty supplementary group list

(From OE-Core rev: aeabd6dd4e65e5cc31f4c2acc5cc46ea03737bed)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-14 09:19:37 +01:00
Khem Raj
84a98ef63c coreutils: Add config.h to ptest package
This is needed by several tests during run on target

Fixes
grep: /usr/lib/coreutils/ptest/lib/config.h: No such file or directory
inotify-race.sh: skipped test: inotify is not supported

More tests are now passing

 ============================================================================
 Testsuite summary for GNU coreutils 9.4
 ============================================================================
 # TOTAL: 643
-# PASS:  509
-# SKIP:  131
+# PASS:  516
+# SKIP:  124

(From OE-Core rev: 66ea2aab453384d4d265969a209ee6b156dd421d)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-14 09:19:37 +01:00
Khem Raj
4fe96220a8 coreutils: Upgrade to 9.4
Drop a backport which is already in 9.4

(From OE-Core rev: a51b0456001fbff3443e827aa9465648699ba0ef)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-14 09:19:37 +01:00
Robert Yang
90bdd736c0 libxcrypt-compat: Remove libcrypt.so to fix conflict with libcrypt
Fixed:
IMAGE_INSTALL:append = " libxcrypt-compat"

$ bitbake <image> -cpopulate_sdk
file /usr/lib/libcrypt.so from install of libxcrypt-compat-dev-4.4.33-r0.0.aarch64 conflicts with file from package libcrypt-dev-4.4.33-r0.2.aarch64

Remove libcrypt.so like other files to fix the error.

(From OE-Core rev: dc0c7a8c3d1d4f02869b7f0d42f704fd24bf0dde)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-12 07:45:52 +01:00
Khem Raj
a1b3e8758e libc-test: Run as non-root user
Some of tests impose rlimit on it before running which wont be imposed
when running as root user.

Fixes
src/regression/pthread_atfork-errno-clobber.c:23: (pid = fork()) == -1 failed: fork succeeded despite rlimit
src/regression/pthread_atfork-errno-clobber.c:23: (pid = fork()) == -1 failed: fork succeeded despite rlimit
FAIL src/regression/pthread_atfork-errno-clobber-static.exe [status 1]

(From OE-Core rev: 585bf4b780a8ad60ba2b33cede4f0092ff61ddfc)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-11 16:04:35 +01:00
Richard Purdie
61531cd395 build-appliance-image: Update to master head revision
(From OE-Core rev: 03d37854b1dacbecd2c522821c59ef01d9bd305c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-10 09:03:44 +01:00
Richard Purdie
9c443cce8d build-appliance-image: Update to master head revision
(From OE-Core rev: ad7cba40ec764f0a50ea5a25493c3e8abaf9050a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-10 08:55:50 +01:00
Richard Purdie
6fd8af0d30 classes: Drop ';' delimiter from ROOTFS/IMAGE*COMMAND variables
Originally these were shell functions but they have long since been processed by
bb.build.exec_func(). Since we no longer need shell syntax, we can drop the ';'
delimiters and just use a space separated string.

This cleans up the variable and quietly removes any stray ';' that do happen to
still make it in.

(From OE-Core rev: c3365dfd9ddd7fbe70b62e0f11166e57a8ca6f73)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-09 22:14:41 +01:00
Khem Raj
a72438e9c4 libc-test: Depend on musl-staticdev
It builds statically linked tests during ptest run and therefore needs
libc.a

(From OE-Core rev: 88904b5186f4904b5c11870fc6fdf392c5b5fcee)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-09 22:14:41 +01:00
Yogita Urade
a09d8afd48 dropbear: fix CVE-2023-36328
Integer Overflow vulnerability in mp_grow in libtom libtommath before
commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to
execute arbitrary code and cause a denial of service (DoS).

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-36328
https://github.com/libtom/libtommath/pull/546

(From OE-Core rev: aa392840d625f5c45832e7ddf60c4dfaba3c4287)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-09 22:14:41 +01:00
Alexander Kanavin
63e53fb8b6 build-sysroots: target or native sysroot population need to be selected explicitly
Running them in parallel is prone to races as postinsts from target sysroots
rely on executables from native sysroots which may or may not be fully prepared
yet. This was observed for example here:

https://autobuilder.yoctoproject.org/typhoon/#/builders/146/builds/468/steps/12/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/147/builds/467/steps/12/logs/stdio

(From OE-Core rev: 38d7a2e45b883cf999a86af05bcc0eaa875bb47c)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-09 12:04:55 +01:00
Ross Burton
c8ba5f0771 busybox: remove coreutils dependency in busybox-ptest
A dependency on coreutils was added to busybox-ptest in oe-core 658c5ed
to fix a test failure.

The failure is because one of the start-stop-daemon tests is known to
fail if /bin/false is busybox. Instead of failing, we can check if
/bin/false is a symlink to busybox and skip the test if so.

[ YOCTO #15068 ]

(From OE-Core rev: 37482e404cf4dcf9360c29986ced8db78baf249b)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:42:37 +01:00
Emil Kronborg Andersen
7838c01d22 dbus: add additional entries to CVE_PRODUCT
(From OE-Core rev: d50b395ceff3f30c30a10dba94fb340a547e434f)

Signed-off-by: Emil Kronborg Andersen <emkan@prevas.dk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Ross Burton
16cdb6cc3b glib-2.0: libelf has a configure option now, specify it
GLib has had an option to control libelf since 2.67.0, so use it.

(From OE-Core rev: d2f028c53a2390c28685b373841c9a600e91819a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Alexander Kanavin
8e3523daad libgudev: upgrade 237 -> 238
Add patches to eudev to ensure compatibility with this version.

(From OE-Core rev: 476ed3f57efb0f7a24651fecc7ddf6489e9ac78a)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Alexander Kanavin
97df11e158 libcgroup: update 3.0.0 -> 3.1.0
(From OE-Core rev: 833e8d6fa0b4bdb82baa3dbf0ebd77daaa11efe7)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Alexander Kanavin
84ba56a144 gettext: upgrade 0.21.1 -> 0.22
Drop autoconf-2.73.patch as upstream did update the gnulib.

(From OE-Core rev: 7c29196f8e378cb12b82da31ab2a05f5e8d1b831)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Ross Burton
0fce19ee9e glib-2.0: explicitly enable strlcpy()
We have glibc 2.38 which added strlcpy(), so enable the use of it
explicitly in the Meson cross file for when the target doesn't support
qemu-usermode (which will result in the default of not using it).

(From OE-Core rev: b29028a12cfa6747ba83e63e03e4ec9c8064c667)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 07:53:51 +01:00