Commit Graph

3994 Commits

Author SHA1 Message Date
Benjamin Bara
75335fc2ee ghostscript: avoid neon on unsupported machines
Disable neon if the machine does not support it.

(From OE-Core rev: 22d40fcb984849bc8735bf03b306c3a3b11eb779)

Signed-off-by: Benjamin Bara <benjamin.bara@skidata.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-05 08:09:13 +01:00
Wang Mingyu
0d1f93d628 xz: upgrade 5.4.3 -> 5.4.4
Changelog:
===========
* liblzma and xzdec can now build against WASI SDK when threading
  support is disabled. xz and tests don't build yet.

* CMake:

    - Fixed a bug preventing other projects from including liblzma
      multiple times using find_package().

    - Don't create broken symlinks in Cygwin and MSYS2 unless
      supported by the environment. This prevented building for the
      default MSYS2 environment. The problem was introduced in
      xz 5.4.0.

* Documentation:

    - Small improvements to man pages.

    - Small improvements and typo fixes for liblzma API
      documentation.

* Tests:

    - Added a new section to INSTALL to describe basic test usage
      and address recent questions about building the tests when
      cross compiling.

    - Small fixes and improvements to the tests.

* Translations:

    - Fixed a mistake that caused one of the error messages to not
      be translated. This only affected versions 5.4.2 and 5.4.3.

    - Updated the Chinese (simplified), Croatian, Esperanto, German,
      Korean, Polish, Romanian, Spanish, Swedish, Ukrainian, and
      Vietnamese translations.

    - Updated the German, Korean, Romanian, and Ukrainian man page
      translations.

(From OE-Core rev: 1cc37e3f7aca7e04b03de99f9ce4b8068a61510d)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:06 +01:00
Wang Mingyu
b64374be63 sysklogd: upgrade 2.5.0 -> 2.5.2
Changelog:
- Issue #67: restore support for reading kernel logs from '/proc/kmsg',
  regression introduced in v2.4.0, issue #48.
- Issue #37: improved accuracy of the MARK timer, optional, default: 20
  minutes.  Generates log messages to files, which have had no activity
  within the MARK interval.  Was off by up to 'interval / 2' minutes.
  It may now be off by up to '1 / 2' minutes, i.e.g, 30 seconds.
- Issue #64: sub-second faking of kernel timestamps was always zero

(From OE-Core rev: 64d7c4af897cb052b6951dce6519a705cf2ac0ac)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:06 +01:00
Wang Mingyu
c05e07afff pigz: upgrade 2.7 -> 2.8
(From OE-Core rev: eaf8cf1a24b6459877139105a4a2917751de3998)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:06 +01:00
Wang Mingyu
bf0b19cf8d mc: upgrade 4.8.29 -> 4.8.30
0001-mc-replace-perl-w-with-use-warnings.patch
removed since it's included in 4.8.30

Changelog:
==========
- Core
--------
    * Support PCRE2 as search engine (via ----with-search-engine=pcre2) (#4450)
    * Implement panelization buffers for both file panels (#4370)

- VFS
-------
    * tar: support extended headers (including long file names and sparse files) (#1952, #2201)
    * extfs helpers: replace "perl -w" with "use warnings" (MidnightCommander/mc#174)
    * extfs/patchfs: be more specific in error message (#4485)

- Editor
---------
    * Add syntax highlighting:
        - Jenkinsfiles (#4469)
        - B language (#4470)
    * Improve syntax highlighting:
        - ECMAScript (MidnightCommander/mc#172)
        - ECMAScript in TypeScript (MidnightCommander/mc#172)
        - use diff syntax highlighting for git commit messages (COMMIT_EDITMSG) (MidnightCommander/mc#85)

- Misc
--------
    * Code cleanup (#4426, #4438)
    * Filehighlight:
        - recognize vsix files as zip files (MidnightCommander/mc#171)
    * Skin updates:
        - julia256 (#4441, #4445)

- Fixes
----------
    * Usage of 'sed' in build system/makefiles is not portable (#4459, #4466)
    * Unportable '$<' in Makefiles (#4460)
    * FTBFS if ncurses used without --with-ncurses-includes= configure parameter (#4462)
    * Ncurses library is duplicated in MCLIBS (#4463, #4465)
    * FTBFS without ext2fs attributes support (#4464)
    * Wrong sort order after swapping panels (#4432)
    * Incorrect time delimiter in the copy/move progress window (#4437)
    * Incorrect redraw of overlapped file panels (#4408)
    * Subshell/Command line prompt is empty/missing (#3121)
    * Find file: relative ignore directory is applied to the start search directory (#4235)
    * Diff viewer: options are not applied on second run (#4486)
    * mc.ext.ini: 'Edit' command from 'Default' section is ignored (#4434)
    * mc.ext.ini: .md files are not recognized as Markdown ones by extension (#4444)
    * mcedit: off-by-one error in paragraph formatting (#4446)
    * ftp: incomplete file listing: block and character devices, pipes, sockets are missed (#4472)
    * Various typos in the source code (MidnightCommander/mc#177, MidnightCommander/mc#178)

(From OE-Core rev: 9ba1f7042de6e430c687970657173740eec9ea7b)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:05 +01:00
Wang Mingyu
850987481a libconvert-asn1-perl: upgrade 0.33 -> 0.34
Changelog:
===========
  * Fixes: #47 2nd - Debug output using print instead of printf
  * Fixes #47 Debug output using print instead of printf
  * ASN1.pod: fix minor typo

(From OE-Core rev: db8c33b58baacd73781cf7184bfeac66c3801e0c)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:05 +01:00
Chen Qi
81b2eedb69 stress-ng: disable DEBUG_BUILD
We get do_compile error when DEBUG_BUILD is enabled:

  error: inlining failed in call to 'always_inline' '_mm512_storeu_si512': target specific option mismatch

To reproduce the issue, set the following lines in local.conf
and then `bitbake stress-ng'.

  MACHINE = "qemux86-64"
  DEBUG_BUILD = "1"

A new issue is filed for stress-ng to track it:
https://github.com/ColinIanKing/stress-ng/issues/315

(From OE-Core rev: 3270f6f3bcb7811fd5e576808c086428f1a8c568)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:05 +01:00
Julien Stephan
da67e9e9cd less: add ptest support
add ptest support for less

root@qemux86-64:~# ptest-runner less
START: ptest-runner
2023-08-21T14:22
BEGIN: /usr/lib/less/ptest
TEST chinese1.lt
PASS: chinese1 (30 steps)
TEST colorbars.lt
PASS: colorbars (222 steps)
TEST github216.lt
PASS: github216 (143 steps)
TEST github265.lt
PASS: github265 (17 steps)
TEST github329.lt
PASS: github329 (28 steps)
TEST hdr-unicode.lt
PASS: hdr-unicode (164 steps)
TEST hdr-unicode1.lt
PASS: hdr-unicode (107 steps)
TEST proc-special.lt
PASS: proc-special (107 steps)
TEST seq200.lt
PASS: seq200 (18 steps)
TEST subsearch.lt
PASS: subsearch (59 steps)
TEST table-50x200.lt
PASS: table-50x200 (467 steps)
TEST utf8-2.txt.lt
PASS: utf8-2.txt (309 steps)
TEST version.c.lt
PASS: version.c (38 steps)
RAN  13 tests with 0 errors
DURATION: 184
END: /usr/lib/less/ptest
2023-08-21T14:25
STOP: ptest-runner
TOTAL: 1 FAIL: 0

[YOCTO #15073]

(From OE-Core rev: 1d20e7990656c2135570640a329c80b7df879675)

Signed-off-by: Julien Stephan <jstephan@baylibre.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-29 09:41:07 +01:00
Julien Stephan
64de3746ad less: upgrade 633 -> 643
(From OE-Core rev: 8557ecc23c52de0d171807fa9a982374e2caa746)

Signed-off-by: Julien Stephan <jstephan@baylibre.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-29 09:41:07 +01:00
Richard Purdie
65318019cd recipes/classes/scripts: Drop SRCPV usage in OE-Core
Now that SRCPV isn't needed we can simplify things in a few places...

(From OE-Core rev: 843f82a246a535c353e08072f252d1dc78217872)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-24 16:50:24 +01:00
Ross Burton
3b6ebc1111 procps: backport fix for CVE-2023-4016
(From OE-Core rev: 255515e1b52fea6d72d37fae61667db08eb5b086)

(From OE-Core rev: eae2a94f5de78b95590ec45e11e930655dbd5caf)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-22 15:13:54 +01:00
Anuj Mittal
f45975373f stress-ng: upgrade 0.15.08 -> 0.16.04
(From OE-Core rev: 5fa07f6e882c35df4bb0d0f13804510ed2bea6f8)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-21 16:15:35 +01:00
Dmitry Baryshkov
ac0f329806 mdadm: disable strace on rv32 arch
strace program is not yet ported to RiscV 32 arch. Disable corresponding
dependency and test to remove dependency on the non-existing package,
which otherwise breaks building of core images:

ERROR: Nothing RPROVIDES 'strace' (but /oe/poky/meta/recipes-extended/mdadm/mdadm_4.2.bb RDEPENDS on or otherwise requires it)
strace was skipped: incompatible with host riscv32-poky-linux (not in COMPATIBLE_HOST)
NOTE: Runtime target 'strace' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['strace']
NOTE: Runtime target 'mdadm' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['mdadm', 'strace']
NOTE: Runtime target 'matchbox-terminal' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['matchbox-terminal', 'gtk+3', 'glib-2.0', 'util-linux', 'mdadm', 'strace']
ERROR: Required build target 'core-image-weston' has no buildable providers.
Missing or unbuildable dependency chain was: ['core-image-weston', 'matchbox-terminal', 'gtk+3', 'glib-2.0', 'util-linux', 'mdadm', 'strace']

(From OE-Core rev: 9eca859f3bad9a881162f514d6147be5fd1351d9)

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-21 11:34:12 +01:00
Ovidiu Panait
f32ff564f3 mdadm: skip running 04update-uuid and 07revert-inplace testcases
04update-uuid and 07revert-inplace tests are unreliable and fail intermittently
on the autobuilder (BZ#15181 and BZ#15159). Unfortunately, the failures cannot
be reproduced locally and the logs cannot be retrieved from the AB.

Mark the testcases as BROKEN to skip them when running ptest.

(From OE-Core rev: eb219aff7cfe1cff1da93107ac7b22c678c0000f)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-21 11:34:12 +01:00
Wang Mingyu
90801cd8cb tar: upgrade 1.34 -> 1.35
CVE-2022-48303.patch
removed since it's included in 1.35

License-Update: http changed to https

Changelog:
===========
* Fail when building GNU tar, if the platform supports 64-bit time_t
  but the build uses only 32-bit time_t.
* Leave the devmajor and devminor fields empty (rather than zero) for
  non-special files, as this is more compatible with traditional tar.
* Bug fixes
** Fix interaction of --update with --wildcards.
** When extracting archives into an empty directory, do not create
   hard links to files outside that directory.
** Handle partial reads from regular files.
** Warn "file changed as we read it" less often.
** Fix --ignore-failed-read to ignore file-changed read errors
** Fix --remove-files to not remove a file that changed while we read it.
** Fix --atime-preserve=replace to not fail if there was no need to replace,
   either because we did not read the file, or the atime did not change.
** Fix race when creating a parent directory while another process is
   also doing so.
** Fix handling of prefix keywords not followed by "." in pax headers.
** Fix handling of out-of-range sparse entries in pax headers.
** Fix handling of --transform='s/s/@/2'.
** Fix treatment of options ending in / in files-from list.
** Fix crash on 'tar --checkpoint-action exec=\"'.
** Fix low-memory crash when reading incremental dumps.
** Fix --exclude-vcs-ignores memory allocation misuse.

(From OE-Core rev: c63769de05ce08c0627d302d14316ced31816b4d)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-21 11:34:12 +01:00
Wang Mingyu
cfc13491e4 libarchive: upgrade 3.6.2 -> 3.7.1
Changelog:
=========
    SEGV and stack buffer overflow in verbose mode of cpio
    bsdunzip updated to match latest upstream code
    miscellaneous functional bugfixes
    build fixes on multiple platforms
    bsdunzip: new tool ported from FreeBSD
    drop-in replacement for Info-ZIP unzip, not yet ported for Windows
    7zip reader: support for Zstandard compression
    7zip reader: support for ARM64 filter
    zstd filter: support for multi-frame zstd archives
    pax: fix year 2038 problem on platforms with 64-bit time_t
    Windows: Universal Windows Platform (UWP) fixes and improvements
    Windows: bcrypt usage fixes and improvements
    Windows: time function usage fixes and improvements

(From OE-Core rev: 186bf084301b3d088dd1f100d870937b39d1389a)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-21 11:34:12 +01:00
Wang Mingyu
8f73cfe9d2 sudo: upgrade 1.9.14p2 -> 1.9.14p3
Changelog:
===========
 * Fixed a crash with Python 3.12 when the sudo Python python is
   unloaded.  This only affects "make check" for the Python plugin.
 * Adapted the sudo Python plugin test output to match Python 3.12.

(From OE-Core rev: 63859b9e402e88ab704abef3060d66c8221a944e)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-14 12:51:21 +01:00
Ovidiu Panait
b06d0238c7 mdadm: save ptest logs
Run test script with --save-logs and --logdir parameters, so the log files can
be retrieved in case of failure.

(From OE-Core rev: 32fe21e420b1c2a4e7ef9d7c768a22c9a7caa115)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-10 09:18:54 +01:00
Ross Burton
e6eb540236 ghostscript: ignore CVE-2023-38560
The ghostscript recipe isn't vulnerable to CVE-2023-38560, as this is an
issue in the GhostPCL release, whereas this recipe is the Ghostscript
release.

(From OE-Core rev: f82a13beabc784da1455f86064ce9f0f225b6e5a)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-09 21:48:11 +01:00
Ross Burton
4adb195619 ghostscript: backport fix for CVE-2023-38559
(From OE-Core rev: 38478a82598260e5e0616598e8cf78416dac1867)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-09 21:48:11 +01:00
Frederic Martinsons
e9a09c8012 rust-hello-world: Drop recipe
we now have more rust/cargo recipes and tests that cover various use cases
so this is no longer needed.

(From OE-Core rev: 8baaf94d200f5355791ecd980727698b1ab0e539)

Signed-off-by: Frederic Martinsons <frederic.martinsons@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-09 13:22:00 +01:00
Luca Boccassi
93e8644287 systemd: update to v254
- Drop dependency on gnu-efi, add dependency on pyelftools for EFI builds
- Refresh patches
- Ship new files and directories
- Use meson target to build sd-boot instead of filenames
- Change libpam recipe to set ANY_OF_DISTRO_FEATURES = "pam systemd" to let
  logind pull in pam-plugin-umask

(From OE-Core rev: 95ed1fa4ff74a77deade51ad73b2f8963ff81548)

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-04 11:44:28 +01:00
Peter Marko
5dd5f0f534 libarchive: ignore CVE-2023-30571
This issue was reported and discusses under [1] which is linked in NVD CVE report.
It was already documented that some parts or libarchive are thread safe and some not.
[2] was now merged to document that also reported function is not thread safe.
So this CVE *now* reports thread race condition for non-thread-safe function.
And as such the CVE report is now invalid.

The issue is still not closed for 2 reasons:
* better document what is and what is not thread safe
* request to public if someone could make these functions thread safe
This should however not invalidate above statment about ignoring this CVE.

[1] https://github.com/libarchive/libarchive/issues/1876
[2] https://github.com/libarchive/libarchive/pull/1875

(From OE-Core rev: 9b5b850d6a6982bb8ff14dcfbb6769b293638293)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-30 12:00:15 +01:00
Alexander Kanavin
0b3ba1e2d9 procps: address failure with gettext 0.22
(From OE-Core rev: 046458f00108385eeae9f71f7350dc1693f64081)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-30 09:16:53 +01:00
Alexander Kanavin
2c92cddeb1 sudo: update 1.9.13p3 -> 1.9.14p2
License-update: file removed upstream

Drop patch as issue fixed upstream.

(From OE-Core rev: 71621e8e2c630b3b55f40359821a6db8e409442c)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-30 09:16:53 +01:00
Alexander Kanavin
fc8241a606 acpica: tarball and homepage relocated to intel.com
Sadly the tarball link is hidden behind html button trickery: while
the link seems stable, determining what it is is too much for
our upstream version checker, and so new versions will
have to be checked by hand every sometimes.

Switching to git won't help either: the tags are in MMDDYY format,
and so won't sort:
https://github.com/acpica/acpica/tags
https://github.com/acpica/acpica/issues/886

(From OE-Core rev: 56320b9058b703e33f43c839dddb27b67ead523f)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-30 09:16:52 +01:00
Alexander Kanavin
e0515a6a0d meta: add missing summaries for image recipes
(From OE-Core rev: ff6f67f8fa6a5601a4203000ed039252aea1ef93)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-30 09:16:52 +01:00
Richard Purdie
f35b5f5d20 autoconf: Upgrade to 2.72c
2.72c is a prerelease version of autoconf 2.73. It contains largefile and y2038 64 bit
time_t improvements for 32 bit architectures.

Rather than work on the older codebase, this brings us to work with the recent
autoconf upstream with the 64 bit changes. It is unclear when upstream will release
2.73 but it is easier for us to be aligned now we've done the bulk of the work needed
to update.

Upstream added several patches which fixed several common failures OE builds ran
into (backported in the next commit). In general testing has otherwise been good for us.

There is an unfortunate gnulib largefile.m4 bug. This change patches various software
to workaround it, next time they update new versions of the gnulib code will be pulled
in which address the issue with the official fix.

There are also a couple of ordering related fixes for apr and libarchive.

(From OE-Core rev: bb74a03e927b4867d885ad3539b097f0e7ed108c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-30 07:54:44 +01:00
Khem Raj
5afd5091cc ltp: Use bfd linker for KVM_LD as well when ld-is-lld
(From OE-Core rev: 808934304ce997c08152bf620071dfdce72cc845)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-29 08:34:35 +01:00
Richard Purdie
10ab0949a1 ltp: Add kernel loopback module dependency
The qemuarm64 kernel builds loopback device support as a module and it isn't included
in the image leading to ltp test failures on that platform.

Add the missing kernel module RRECOMMENDS to avoid this and fix those errors.

(From OE-Core rev: 8691020f33a644d52b7d867376ef3c85be84abf9)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-29 08:34:35 +01:00
Khem Raj
12c9f826de ltp: Use bfd linker when lld is distro linker default
(From OE-Core rev: 3f6ab1fea2d07a4e553bb67e3055133ff38dd68c)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-27 21:07:53 +01:00
Ovidiu Panait
71252e03e7 mdadm: add util-linux-blockdev ptest dependency
07revert-inplace test logs contain the following:
func.sh: line 335: /sbin/blockdev: No such file or directory

Add the missing util-linux-blockdev dependency.

(From OE-Core rev: a15cd04f528d137d428a572f15d1ec5ebbbd81f0)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-25 15:27:33 +01:00
Ross Burton
aceb924845 ltp: add RDEPENDS on findutils
With busybox find some of the test script fails, so depend on GNU find.

(From OE-Core rev: 2d1b1987ef927b33b799bb6e6805a1fdd8d92921)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-21 11:52:26 +01:00
Andrej Valek
c15e506a46 cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Reviewed-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-21 11:52:26 +01:00
Andrej Valek
679b7b6700 oeqa/selftest/cve_check: rework test to new cve status handling
- After introducing the CVE_STATUS and CVE_CHECK_STATUSMAP flag
variables, CVEs could contain a more information for assigned statuses.
- Add an example conversion in logrotate recipe.

(From OE-Core rev: da1f34b58fd106a40c296b68daf8a7e5db354c9a)

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-19 23:25:01 +01:00
Enrico Scholz
d302b05707 shadow-sysroot: add license information
Recipe references 'login.defs' in LIC_FILES_CHKSUM.  This causes some
problems:

- file does not contain a single word which is related with its license

- changing this file (here: increasing SYS_UID_MIN) invalidates
  LIC_FILES_CHKSUM

Add 'SPDX-License-Identifier' to the file and limit the checksum to
this part.

(From OE-Core rev: 8c6f2e3feeb26abefb4136c56db6f3c0349acefb)

Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-19 19:37:38 +01:00
Wang Mingyu
dcdfbd3b45 libnss-nis: upgrade 3.1 -> 3.2
Changelog:
* Do not call malloc_usable_size

(From OE-Core rev: 5cd967503c0574f45b814572da9503182556b431)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-17 15:30:04 +01:00
Wang Mingyu
20aec7cff6 acpica: upgrade 20230331 -> 20230628
(From OE-Core rev: bf7f90bacae773658dc671a49132b8a78c311309)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-14 17:31:06 +01:00
Wang Mingyu
373e00555e msmtp: upgrade 1.8.23 -> 1.8.24
Changelog:
===========
- Added a new configuration command 'from_full_name' to set a full name for the
  From header (like -F on the command line)
- Fixed the allow_from_override command

(From OE-Core rev: f55725095465620fbe3154712fb18340d3ab76c6)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-14 17:31:06 +01:00
Joe Slater
e62c3540f2 ghostscript: advance to version 10.01.2
Fix CVE-2023-28879 and CVE-2023-36664.

(From OE-Core rev: 7a66d238af8545dfb9a79e551ccaac889b2d52dd)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-14 17:31:05 +01:00
Ross Burton
7379a88457 cups: upgrade to 2.4.6
This resolves CVE-2023-34241.

(From OE-Core rev: 829c742b5461c4599d304541e0da0915dc44146c)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Ovidiu Panait
5276e9f9b8 mdadm: skip running known broken ptests
Upstream marked some testcases as "KNOWN BROKEN" and introduced the
"--skip-broken" flag to ignore them when running the testsuite (commits [1]
and [2]). Backport these two commits to get rid of the last remaining ptest
failures.

Also, add the "--skip-broken" option to the run-ptest script.

[1] https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/commit/?id=28520bf114b3
[2] https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/commit/?id=daa86d663476

(From OE-Core rev: 62148b978b26b5fcd1a2fa3a0ff82ef814f4e7ec)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Ovidiu Panait
03a94d9a35 mdadm: fix segfaults when running ptests
Currently, some segfaults are reported when running ptest:
mdadm[12333]: segfault at 0 ip 00007fe855924060 sp 00007ffc4d6caf88 error 4 in libc.so.6[7f)
Code: d2 0f 84 b7 0f 00 00 48 83 fa 01 0f 84 b9 0f 00 00 49 89 d3 89 f1 89 f8 48 83 e1 3f 4f

Backport the following upstream commits to fix them:
679bd9508a30 ("DDF: Cleanup validate_geometry_ddf_container()")
2b93288a5650 ("DDF: Fix NULL pointer dereference in validate_geometry_ddf()")
548e9b916f86 ("mdadm/Grow: Fix use after close bug by closing after fork")
9ae62977b51d ("monitor: Avoid segfault when calling NULL get_bad_blocks")

The fixes are part of the "Bug fixes and testing improvments" patchset [1].

[1] https://www.spinics.net/lists/raid/msg70621.html

(From OE-Core rev: 9585009e3e505b361cd32b14e0e85e77e7822878)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Ovidiu Panait
3c9c721be3 mdadm: fix 07revert-inplace ptest
Testcase 07revert-inplace fails if strace is not installed:
...
strace -o /tmp/str ./mdadm -A /dev/md0 --update=revert-reshape /dev/<...>
tests/07revert-inplace: line 40: strace: command not found

Add strace to mdadm-ptest RDEPENDS to make sure the testcase passes even with
a core-image-minimal build.

(From OE-Core rev: 7d9386663ac52ab69812867a0823c6055aedbc18)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Ovidiu Panait
f9e29f3f5d mdadm: fix util-linux ptest dependency
Trying to run mdadm-ptest in a core-image-minimal build will result in:
root@qemux86-64:~# ptest-runner mdadm
START: ptest-runner
BEGIN: /usr/lib/mdadm/ptest
which: no lsblk in (/usr/local/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin)
lsblk command not found!
DURATION: 0
END: /usr/lib/mdadm/ptest
2023-06-28T10:14
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Remove util-linux from RRECOMMENDS and only add util-linux-lsblk and
util-linux-losetup to RDEPENDS.

(From OE-Core rev: 3004f7589974c135cc82630d980ea281b97ecd83)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Martin Jansa
ad78defddf cpio: respect MLPREFIX for PACKAGE_WRITE_DEPS
* unlike DEPENDS/RDEPENDS the PACKAGE_WRITE_DEPS dependency isn't automatically
  extended with MLPREFIX, causing lib32-cpio to depend on 64bit ptest-runner (and
  all its deps)

* append it only for class-target to avoid nativesdk-cpio depending
  on target ptest-runner (before this patch) and depending on non-existent
  nativesdk-ptest-runner with this patch (as nativesdk.bbclass sets MLPREFIX to
  "nativesdk-")

  stdio: WARNING: Nothing PROVIDES 'nativesdk-ptest-runner'. Close matches:
  stdio: WARNING: Nothing RPROVIDES 'nativesdk-cpio' (but virtual:nativesdk:/home/pokybuild/yocto-worker/a-full/build/meta/recipes-extended/cpio/cpio_2.14.bb RDEPENDS on or otherwise requires it)
  stdio: WARNING: Nothing RPROVIDES 'nativesdk-cpio-dev' (but virtual:nativesdk:/home/pokybuild/yocto-worker/a-full/build/meta/recipes-extended/cpio/cpio_2.14.bb RDEPENDS on or otherwise requires it)

(From OE-Core rev: c74697e194fe07cb4a2fee45142ae626996fd294)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Khem Raj
4c59fc31bf libpam: Fix examples build on musl
This came with latest libpam upgrade

../../Linux-PAM-1.5.3/examples/tty_conv.c:9:10: fatal error: 'termio.h' file not found
         ^~~~~~~~~~
1 error generated.

(From OE-Core rev: 00b5cbad49ccce7f2886b2e70b93e60e054f8f46)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Ross Burton
a825e136fe ghostscript: remove CVE_CHECK_IGNORE for CVE-2013-6629
This CVE now has a version range, indicating that this Ghostscript
release isn't vulnerable.

(From OE-Core rev: da6d0763a7fb9c7a322bf5964f8abdf6bed7e219)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-29 10:59:56 +01:00
Alexander Kanavin
084ef1d41a libpam: update 1.5.2 -> 1.5.3
(From OE-Core rev: ddb5e0f8a2cc7c48e1fb53b665e2fd5ed263bb19)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
45ff515d34 shadow: remove dependency on pam-plugin-lastlog
This item has been deprecated in pam 1.5.3 and is no longer
built by default:
https://github.com/linux-pam/linux-pam/blob/master/NEWS

(From OE-Core rev: 04f3c3e335bf5e7c3a12ccc97fda9a8c214135d0)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00