Commit Graph

39960 Commits

Author SHA1 Message Date
André Draszik
eeefadc738 oeqa/target/ssh oeqa/target/qemu: expose server listening port to tests
Allow tests to access the listening port as just introduced.
Note that when using qemu this infrastructure shouldn't be
needed, but we still need to set the port to 0 so that
a listening port is determined automatically (e.g. by the
python http server).

(From OE-Core rev: ca58559fc30842c123907fb5cc68b3356c530862)

Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
André Draszik
ae6c729a53 oeqa/runtime/context.py: support listening port in TEST_SERVER_IP
Similar to the existing possibility to specify a port in
TEST_TARGET_IP, allow TEST_SERVER_IP to also contain a
port.

The intention is for this port to be passed into e.g.
the http server from the apt / dnf / opkg tests, or
any other (custom) tests that might need the target to
connect to a service spawned by bitbake / oeqa, where
bitbake is actually running inside a docker container.

(From OE-Core rev: 9f401cd8b010ca613a151d0323b251f2243f399f)

Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
André Draszik
6f637e973a oeqa/utils/httpserver: allow to pass in listening port
Being able to specify the listening port is useful when
running OEQA from within a docker container, e.g.
crops or any other solution.
In that case, a port on the outside must be mapped to a
specific port inside the container. If no port is specified
for the http server module in this case, the http server
would choose a random port, which is unlikely to be mapped
and thus won't be reachable from the outside.

(From OE-Core rev: e54391ca9068661693275fbfcfded9bc0b2606f3)

Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
André Draszik
804489d993 connman: update kernel module RRECOMMENDS for kernel >= v4.19
nf_tables_inet.ko and nf_tables_ipv4.ko and nf_tables_ipv6.o
(and nf_tables_arp.ko and nf_tables_netdev.ko) were merged into
the core nf_tables.ko before v4.17 in kernel commit
    02c7b25e5f54 netfilter: nf_tables: build-in filter chain type

nf_meta.ko was merged to be a builtin of nf_tables.ko before
v4.18 in kernel commit
    8a22543c8e70 netfilter: nf_tables: make meta expression builtin

(From OE-Core rev: 98715c9dc8dd925cffce9bd5d57172206d1e2a7b)

Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
André Draszik
1d09005509 e2fsprogs: split dumpe2fs into its own package
This is a mere 24KB (on 32bit arm), avoiding to pull in
all of the remainder +300KB in small initramfs images
when not needed.
Add this new package to RDEPENDS of e2fsprogs so as to
not break existing users.

Also, remove a stale reference to the non-existent
e2fsprogs-fsck package which was removed in 2012 from here
in commit 98b1b9f047ef ("e2fsprogs: Drop fsck binary"),
commit 93d6471727 in poky, and sort some of the lists
alphabetically.

(From OE-Core rev: 19dd3453da39066564d899d561e4814822dcbd18)

Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Slavic Brutalik
151da8bf98 systemd-systemctl: Fix handling of aliased targets
The script scans for services, parses them and makes sure those targets are still
there. The exists file check fails if the target is an alias, such as default.target
so add an additional test.

[YOCTO #13685]

(From OE-Core rev: 10bdbf033e51c97f6408c9114d480372135a2c2e)

Signed-off-by: Werner Grift <sky.captin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Quanyang Wang
666616121d lttng-modules: fix NULL pointer deference error when testing rpc_task_running
This is a backport from upstream https://github.com/lttng/lttng-modules.git stable-2.10
to fix NULL pointer deference error when running kts testcase lttng_syscall_events.

(From OE-Core rev: a522ccff838ba1577255c90e64d98dd75470fb0a)

Signed-off-by: Quanyang Wang <quanyang.wang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Anuj Mittal
44e809c1e6 git: upgrade 2.24.0 -> 2.24.1
Fixes a bunch of CVEs:
53a06cf39b

(From OE-Core rev: 8be3c48a418776c8480dbae2dcb5f46c8fb138ed)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
4e4352b5a4 sudo: update to 1.8.29
License-Update: added SPDX info.
(From OE-Core rev: d3660148a64fc6ef18c7f9d2080c26d89c0b3826)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
aa4848622c cpio: update to 2.13
Drop a couple of backports.

(From OE-Core rev: 66f3b09364c499d9b0610f7c01763ae5dc1521cf)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
48a9408093 man-db: update to 2.9.0
(From OE-Core rev: dd0c62ba4c1ade7aaa4760f351cf9f76c0aca91e)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
2023a2191f man-pages: update to 5.04
(From OE-Core rev: 6451a900ce184e7d78785dbdfced9c7812e33374)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
634264a924 parted: update 3.2->3.3
0001-Unset-need_charset_alias-when-building-for-musl.patch is no longer
necessary as upstream has removed the code.

dm_check.patch is replaced with 0002-tests-use-skip_-rather-than-skip_test_-which-is-unde.patch

Rework ptests, in particular remove the generated Makefile
from the layer, and use the upstream Makefile.

Ptest pass rate is 100%.

(From OE-Core rev: 5dc6529d0b5b8b1bef12b90008f0a25612bd453e)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
d62895e112 libxml2: update to 2.9.10
(From OE-Core rev: de72e0440bc36fab09a7e3c13d3967c97dcda66b)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
d80f1a2c09 glide: update to 0.13.3
(From OE-Core rev: 0270b64a69f30d36f03ce8de819fa703da84ecbb)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
03b8eb9fe1 puzzles: update to latest revision
Remove 0001-Use-labs-instead-of-abs.patch as problem is fixed upstream.

(From OE-Core rev: 6ecc17f83d57d08bbeb6366cb586993a8844c8a6)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Alexander Kanavin
2bb1f5362b dos2unix: update to 7.4.1
License-Update: copyright years
(From OE-Core rev: 248e777ac61e90da061e336acbcd23e8e71cd0e4)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Richard Purdie
ba4dbacedd sstatesig: Further optimise
Optimise the call into the parent function to be only when needed.

(From OE-Core rev: 198bacaa1068fd68075d9182318fe64e9809dd36)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-16 23:25:49 +00:00
Richard Purdie
58726c4a56 sstatesig: Optimise get_taskhash for hashequiv
With hashequiv the get_taskhash function is called much more regularly
and contains expensive operations. This these don't change based upon
hash in a given build, improve the caching within the function to
reduce overhead.

(From OE-Core rev: de98cfe3cde4b8d5f4b163b5fba3f129651ef06a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Ross Burton
6d738f4a6e conf/machine/x86-base: use wic instead of live
Use wic instead of the live/hddimg filesystem type for x86 machines, as it
produces better filesystems and doesn't have a hard limit of 4GB.

(From OE-Core rev: 04e4e93efa4d8e2bdde950fe95c2fd95f89c13e7)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Khem Raj
f2fa6b3305 buildstats: Replace 'is' with '==' in python condition check expression
python 3.8 has started to throw this as a warning but usage is wrong see
[1], it seems to be working by accident and not design.

Fixes
SyntaxWarning: "is" with a literal. Did you mean "=="?

[1]: https://bugs.python.org/issue34850

(From OE-Core rev: c3cb6bc21f3f84e2ed103b6438516ab85222faa9)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Joshua Watt
98453bee39 libjpeg-turbo: Build reproducibly
Configures the options passed to nasm to remove build paths in the
generated object files.

(From OE-Core rev: 9119a882adbf19df9f47f66cebaa7f730d3e9462)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Joshua Watt
a14457c796 nasm: Add debug-prefix-map option
Adds an option to nasm to change the prefix for file paths encoded in
the object files. This allows builds to be reproducible regardless of
the build directory.

(From OE-Core rev: ad5c914933c7b38296dcb8bba3c36aed45aacc32)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Khem Raj
0b468662b8 Revert "go: Reset unneeded GOARCH variables for native recipe"
This reverts commit 4825eede606b075d0d529b38d6162999f1dec506.

(From OE-Core rev: 18b90967bd367263280ec871be84e67e3eed11fa)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Khem Raj
d07fba12a0 goarch: Remove target specific dependencies
goarch is used in all classes of recipes ranging from native to target,
therefore its best to contain the variables and not spill over into
recipe classes where they can adversely affect shared state reuse e.g.
go-native currently gets TUNE_FEATURES into dependency chain of
referenced variables which means go-native gets rebuilt when we change
from qemuarm to qemux86 machine types since TUNE_FEATURES is defined
with DEFAULTTUNE which would change as machines are switched

These variables are specific to arm/mips/x86 so marking them with
appropriate overrides for native recipes will be right thing here

Chose 'hardfloat' for mips which is default too, 7 for arm and sse2 for x86
somehow go-native bootstrap compiler (1.4) still needs them so feed
commonly used values or defaults.

Fixes
ERROR: go-native different signature for task do_configure.sigdata between qemux86copy and qemuarm
...
List of dependencies for variable TUNE_FEATURES changed from '{'DEFAULTTUNE', 'TUNE_FEATURES_tune-core2-32'}' to '{'DEFAULTTUNE', 'TUNE_FEATURES_tune-armv7vethf-neon'}'
changed items: {'TUNE_FEATURES_tune-core2-32', 'TUNE_FEATURES_tune-armv7vethf-neon'}

(From OE-Core rev: 83eebf5577dd0a23be937375c1a8a15e3da4fa64)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Stefano Babic
4ba498a5f8 cronie:fix SRC_URI path
(From OE-Core rev: 06ce57157a43f5988e1a0c6bc147fec7b55e63ec)

Signed-off-by: Stefano Babic <sbabic@denx.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Alexander Kanavin
fe20a6c256 bluez5: disable debug output in ptests
This makes the log very large and breaks the ptest result
parser.

(From OE-Core rev: 78221af4c0297e0278c042eed390ad0e53f2548a)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Alexander Kanavin
47a9dac49f bluez: update 5.50 -> 5.52
Drop a big pile of backports.

Disable zsh completions, as they're unlikely to be useful.

(From OE-Core rev: dad8cd50bcc4203a65d153dc2445502c1e728975)

(From OE-Core rev: 1a31a31a3bd68f027ba0a13f8e66ce92104a4d4c)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Hongxu Jia
c26566e44b kbd: avoid vlock conflict with busybox
busybox as well as vlock utility from meta-oe provides vlock utility
which can conflict when with kbd if pam is a enabled distro_feature

Fixes image build errors

update-alternatives: Error: not linking <rootfs>/usr/bin/vlock to /bin/busybox.suid since <rootfs>/usr/bin/vlock exists and is not a link

ERROR: yoe-qt5-wayland-image-1.0-r0 do_rootfs: Postinstall scriptlets of ['busybox'] have failed. If the intention is to defer them to first boot,
then please place them into pkg_postinst_ontarget_${PN} ().
Deferring to first boot via 'exit 1' is no longer supported.

(From OE-Core rev: 08636708f6ca677a6ee6c88fa2999c7b70b7d474)

Signed-off-by: Khem Raj <raj.khem@gmail.com>

The vlock doesn't exist if PAM isn't enabled.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Ross Burton
e3d5f55c3e reproducible_build_simple: inherit podfix
When doing reproducible builds inherit podfix to remove the possibility
of differing Perl versions causing manpages to change.

(From OE-Core rev: 5dc43edab4787906f2c9f51e51bf78d1dc966286)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Ross Burton
6576c85e43 podfix: class to remove Pod::Man versions from manpages
Manpages generated by Pod::Man contain the version number, which isn't
reproducible if we're using the host Perl to generate manpage.

One option is to always depend on perl-native when generating manpages
but this is a heavy dependency, so instead strip out the versions in
do_install().

(From OE-Core rev: 18d8e5ac689d6eb6098f68ac785f43e9d5f5938a)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Paul Eggleton
01fa7fdd05 oeqa: qemu: ensure we print runqemu output in the event of failure
If we get here in the code it's because runqemu has failed, this is not
a debug situation - we need to see the output, so print it as an error.

Fixes [YOCTO #13681].

(From OE-Core rev: c1def38c680d64c992839166bbf9bec51eb0788a)

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Paul Eggleton
c4d247ff7c oeqa: qemu: fix width of top output in host dump
If runqemu fails, there is some logic to run a set of commands to dump
various bits of information that might help debug the issue
(particularly in a busy situation such as on the autobuilder). One of
those commands is "top -bn1", however top restricts the output to the
width of the calling terminal, and for whatever reason this is a little
restrictive when called from inside testimage, so set COLUMNS in the
environment to a high value to fix it. (Another way is to use the -w
option, but that is not supported by our default busybox configuration
so it will then fail when this same list of commands is used on the
target).

(From OE-Core rev: 07da998f5aa6c3f5ffeee5150fc579e8a1051ba4)

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Paul Eggleton
f0f8714238 oeqa: qemu: ensure that host dump commands can be run properly
If runqemu fails, there is some logic to run a set of commands to dump
various bits of information that might help debug the issue
(particularly in a busy situation such as on the autobuilder). However,
when we try to run these we are inside the normal build environment
which restricts commands to be run on the host to those specified in
HOSTTOOLS. Since this isn't a place where host contamination is going to
be a problem, override PATH to a reasonable default so that we run the
actual host tools directly to avoid the issue. (Logically we would want
to use the original PATH value here, but it is not easily accessible.)

(From OE-Core rev: 3f6dcf67bccb4f0fc1a9a64e02bd0e2da620ad0e)

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-15 09:10:46 +00:00
Richard Purdie
1abffc542a build-appliance-image: Update to master head revision
(From OE-Core rev: 0f04e81c797d5d337ece4e8638a6b71c75bc0a00)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-12 14:21:43 +00:00
Richard Purdie
ec506ce22d build-appliance-image: Update to master head revision
(From OE-Core rev: 0980868fb1a315b2bb2ccd8d36873808056cb1ee)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-12 13:15:18 +00:00
Richard Purdie
c59afbae72 build-appliance-image: Update to master head revision
(From OE-Core rev: cb5e746a2398d70b14a14ada7cef82bfd5e80d0e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-11 11:59:57 +00:00
Richard Purdie
a5128cba80 sstate: Ensure mkdir happens before mktemp
This avoids a directory not present error.

Fix a comment typo whilst here.

(From OE-Core rev: 1360d8d7d99b70a80c8cdbc1fc6d9e6752483139)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-11 11:59:49 +00:00
Richard Purdie
1571d6b45a build-appliance-image: Update to master head revision
(From OE-Core rev: bf6ee2b39e2294f7f3719f7d373af9e0ec2979e9)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-11 10:09:47 +00:00
Richard Purdie
2624d45265 sstate: Ensure target sstate directory exists if unihash changes
The previous patches meant the mkdir might no longer match the final target
directory. Fix this.

(From OE-Core rev: 0af4dae84099e8632a9ea6a4afdbea2f232bb170)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-11 10:09:39 +00:00
Richard Purdie
f48ef0bb49 build-appliance-image: Update to master head revision
(From OE-Core rev: 76e84ce1815ff273647657eeafb5149d6016730b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-10 23:19:48 +00:00
Richard Purdie
d767b4d3b4 sstate: Ensure SSTATE_PKG is reloaded when handling siginfo
STATE_PKG may have been changed by sstate_report_unihash so don't
cache the variable's value.

(From OE-Core rev: be29a25400c4ea285ab3f588c5831f00ba5d4f63)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-10 23:19:32 +00:00
Richard Purdie
9d606cfbda build-appliance-image: Update to master head revision
(From OE-Core rev: 093a1971f2ae12e1f514598da984f268607e550b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-10 13:31:16 +00:00
Richard Purdie
60901bc11d Revert "bluez: update 5.50 -> 5.52"
This reverts commit dad8cd50bcc4203a65d153dc2445502c1e728975.

It is causing performance problems in ptest, taking hours (~18) to parse the ptest runner logs.
Log output increased from ~4MB to ~65MB. Revert until we can deal with the performance issue.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-10 13:31:04 +00:00
Richard Purdie
27f1f98ab5 build-appliance-image: Update to master head revision
(From OE-Core rev: 42719edc86ac2013280a34f1c58ca83726cec04a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-10 12:57:08 +00:00
Richard Purdie
09f65c6e61 sstate: Stop overwriting SSTATE_PKG
Its rather antisocial to overwrite SSTATE_PKG with an expanded form for the variable
and it stops the value of BB_UNIHASH being changed when the package is written out.

Instead of expanding the variable, append to it instead to avoid this rather
hard to figure out behaviour and allow the siggen code to behave as expected.

(From OE-Core rev: 62eca02024b4c44d618ab9bcf87a3166c886dadb)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-10 12:56:50 +00:00
Richard Purdie
adaa81c97a build-appliance-image: Update to master head revision
(From OE-Core rev: 85b7a3d5ec553ef71fa6060b99afbdccdc87dd37)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-10 12:56:50 +00:00
Richard Purdie
5249d759dc build-appliance-image: Update to master head revision
(From OE-Core rev: efc1945a95897539a491f9e833ba07e653fdb1d4)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-09 12:07:05 +00:00
Niko Mauno
6a1aa45571 cve-check: Switch to NVD CVE JSON feed version 1.1
Switch to recently released version 1.1 of NVD CVE JSON feed, as in
https://nvd.nist.gov/General/News/JSON-1-1-Vulnerability-Feed-Release
it is mentioned that

  Due to changes required to support CVSS v3.1 scoring, the JSON
  vulnerability feeds must be modified. This will require the consumers
  of this data to update their internal processes. We will be providing
  the JSON 1.1 schema on the data feeds page and the information below
  to prepare for this transition.
  ...
  The JSON 1.1 data feeds will be available on September 9th, 2019. At
  that time the current JSON 1.0 data feeds will no longer available.

This change was tested briefly by issuing 'bitbake core-image-minimal'
with 'cve-check.bbclass' inherited via local.conf, and then comparing
the content between the resulting two
'DEPLOY_DIR_IMAGE/core-image-minimal-qemux86.cve' files, which did not
seem to contain any other change, except total of 167 entries like

  CVSS v3 BASE SCORE: 0.0

were replaced with similar 'CVSS v3 BASE SCORE:' entries which had
scores that were greater than '0.0' (up to '9.8').

(From OE-Core rev: cc20e4d8ff2f3aa52a2658404af9a0ff358cc323)

Signed-off-by: Niko Mauno <niko.mauno@iki.fi>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-09 12:06:05 +00:00
Ross Burton
f5487cd427 libcap-ng: add missing Upstream-Status tags
(From OE-Core rev: b45c967a8324c10642f2ef445f4c8c1a82947e1f)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-09 12:00:43 +00:00