Select Git revision
Search by author
- Any Author
- authors
-
Adalberto Fontoura
adalbertofontoura
-
Alfio Rizzo
alfiorizzo
-
Amin Hosseini Nejad
aminhosseini
-
Anders Lindh Olsson
anderslindh1
-
Andre de Oliveira Favoto andrede
-
Andreas Persson andreaspersson
-
André Bengtsson andrebengtsson
-
Anna Klimenko annaklimenko
-
Antoni Simelio antonisimelio
-
Attila Horvath attilahorvath
-
Balazs Molnar balazsmolnar
-
Caissa Roque
caissaroque
-
Carlos Neto
carlosneto
-
Casper Riess casperriess
-
Christian Amstutz
christianamstutz
-
Dahyeon Kim dahyeonkim
-
Dominik Domagala domagaladominik
-
Douglas Araujo
douglasaraujo
-
Emilio Asensi emilioasensiconejero
-
Evan Foy
evanfoy
This project is mirrored from https://git.yoctoproject.org/poky.
Pull mirroring updated .
- Aug 10, 2024
-
-
Steve Sakoman authored
(From OE-Core rev: 236ac1b43308df722a78d3aa20aef065dfae5b2b) Signed-off-by:Steve Sakoman <steve@sakoman.com>
-
Steve Sakoman authored
(From meta-yocto rev: 9a4b3f7d66c5546855805e284585a550b235c313) Signed-off-by: -
Changqing Li authored
update SRC_URI to fix do_fetch warning: WARNING: libpng-1.6.42-r0 do_fetch: Failed to fetch URL https://downloads.sourceforge.net/project/libpng/libpng16/libpng-1.6.42.tar.xz , attempting MIRRORS if available (From OE-Core rev: aa23e392e379ab7f8cdfc48e1d2d96812f330c74) Signed-off-by:
Changqing Li <changqing.li@windriver.com> Signed-off-by:
-
Peter Marko authored
libmnl autoconf autodetects doxygen to generate manpages. If doxygen is provided via hosttools, the build fails. Also until now manpages were not needed. So explicitly disable doxygen in configure step. (From OE-Core rev: 8d7bbf4d6936d831e341e9443a6b3711be09c7ab) (From OE-Core rev: fdce1a6f1143edc577f12c7e8fab878ec69c3c9a) Signed-off-by:
Peter Marko <peter.marko@siemens.com> Signed-off-by:
Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by:
-
Changqing Li authored
Since commit 148de08220 [ curl: Update from 8.2.1 to 8.3.0 ], --enable-crypto-auth option was removed and split into separate options for basic-auth, bearer-auth, digest-auth, kerberos-auth negotiate-auth, and aws. In this commit, --enable-crypto-auth is removed from EXTRA_OECONF, and the separate options is added into PACKAGECONFIG for target. But not added into PACKAGECONFIG for native/nativesdk, this make curl/git in buildtools not works well to connect basic auth https server. Failed commands: git ls-remote https://xxx(input username/passwd) curl -u name:passwd https://xxx Error: Authentication failed xxx HTTP/1.1 401 Unauthorized (From OE-Core rev: 67b98253ea70a1e2850a78bb101c934093d30937) Signed-off-by:
-
Ashish Sharma authored
Includes security fixes for: CVE-2024-1975 CVE-2024-1737 CVE-2024-0760 CVE-2024-4076 Changelog: ========= https://gitlab.isc.org/isc-projects/bind9/-/blob/v9.18.28/CHANGES (From OE-Core rev: 45fccf634a3ba0f60ee16522b7a767bb778dd984) Signed-off-by:
Ashish Sharma <asharma@mvista.com> Signed-off-by:
-
Wang Mingyu authored
(From OE-Core rev: 9be9260985e751f90f9432aa68a789bf0a26fb43) Signed-off-by:
Wang Mingyu <wangmy@fujitsu.com> Signed-off-by:
Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by:
-
Richard Purdie authored
Removes CVE-2022-46456 from reports. (From OE-Core rev: 4a5b6e8dd315b2281afb232410db585d431be00f) (From OE-Core rev: 5b330f3dfe7a37eff5251d2c29d324e90677b33c) Signed-off-by:
-
Archana Polampalli authored
(From OE-Core rev: 617a9cdba6e2f0bd3ccc24e7bb2fe84e9573fecd) Signed-off-by:
Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by:
-
Peter Marko authored
This CVE is fixed in v8.2.2 with v8.2.1-55-g480a6adc83 https://github.com/qemu/qemu/commit/480a6adc83a7bbc84bfe67229e084603dc061824 (From OE-Core rev: 422fc84ddbe46580dc6d647eff62c4dbc8551e63) Signed-off-by:
-
Peter Marko authored
This CVE status should have been removed on version update. CPE says >=2.34 and <2.39 while our version is already 2.39. (From OE-Core rev: b568a8f428e76f75bb8c374983f62822325ebe8a) (From OE-Core rev: 35d55934cb6ec24098e4e8679b87066bf3bae6a9) Signed-off-by:
-
Peter Marko authored
Picked commit per https://curl.se/docs/CVE-2024-6197.html (From OE-Core rev: 0f172ed0c94d287c96ec465e4724c8b47f846a4c) Signed-off-by:
-
- Aug 07, 2024
-
-
Ranjitsinh Rathod authored
There is a need to enable some extra tools from the rust for the build and so this new variable will help for that This varaible then we can use during do_configure task to add overall values as per json format in build -> tools (From OE-Core rev: 136a25567499191b23a4d000a06bf83a473224ca) Signed-off-by:
Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com> Signed-off-by:
-
Wadim Egorov authored
systemd started to warn about used but unset environment variables. Let us set watchdog_module=none which is used by the watchdog.service to get rid of the following warning: watchdog.service: Referenced but unset environment variable evaluates to an empty string: watchdog_module (From OE-Core rev: 953ea8fa9e3e6a34cbb42e56743fb7c6cf98ff2a) Signed-off-by:
Wadim Egorov <w.egorov@phytec.de> Signed-off-by:
-
Changqing Li authored
Fix following error: File "/usr/lib64/rt-tests/ptest/./rt_bmark.py", line 287, in run_cyclictest_once m = rex.search(line) ^^^^^^^^^^^^^^^^ TypeError: cannot use a string pattern on a bytes-like object (From OE-Core rev: 9563027c35a4b1961a83100e22d4ea4430abd8b9) Signed-off-by: -
Patrick Wicki authored
The gpgme-tool binary is licensed GPL-3.0-or-later. Split it out into its own package that can be opted out of. (From OE-Core rev: 09fe1a471c570c09e8219c6cc57eb5252a5caa54) Signed-off-by:
Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by:
-
Christian Taedcke authored
This commit fixes a memory corruption issue when iptables (with enabled PACKAGECONFIG libnftnl) is used to access rules created by nft. To reproduce the issue: nft add chain ip filter TESTCHAIN { meta mark set 123 \;} iptables -t filter -n -L TESTCHAIN This produced the following output: Chain TESTCHAIN (0 references) target prot opt source destination MARK 0 -- 0.0.0.0/0 0.0.0.0/0 MARK set 0x7b malloc(): corrupted top size Aborted (core dumped) This commit fixes this issue. (From OE-Core rev: fa3873cfcda862d8aad564966070af216e4903c6) Signed-off-by:Christian Taedcke <christian.taedcke@weidmueller.com> Signed-off-by:
-
Richard Purdie authored
Update to a new revision which includes "Bugfix for Linux open(O_CREAT|O_EXCL)" (From OE-Core rev: 97410e90f7233e5c9ce38eea0fa99b76160ffce9) Signed-off-by:
Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by:
-
Richard Purdie authored
glibc 2.40 renames some internal header variables. Update our hack to work with the new version. These kinds of problems illustrate we need to address the issue properly. (From OE-Core rev: 1d5903bf749436d9b26df858041337b723614963) Signed-off-by:
-
Mark Hatle authored
Newlib generally requires additional components to function. Skip the cases where newlib is known to not work. (From OE-Core rev: 99a5ca1c2c2b7b3193710bc681fbf05936025b5b) Signed-off-by:
Mark Hatle <mark.hatle@amd.com> Signed-off-by:
-
Richard Purdie authored
Currently, "tarball" sdk based recipes don't generate SPDX manifests as they don't include the rootfs generation classes. Split the SPDX 3.0 image class into two so the SDK components can be included where needed. To do this, introduce an SDK_CLASSES variable similar to IMAGE_CLASSES which the SDK code can use. Migrate testsdk usage to this. Also move the image/sdk spdx classes to classes-recipe rather than the general classes directory since they'd never be included on a global level. For buildtools-tarball, it has its own testsdk functions so disable the class there as a deferred inherit would overwrite it. (From OE-Core rev: 95660951a09e2a3fe63eb1017ad8f1d7fc9cd503) Signed-off-by:
-
Mark Hatle authored
When a create-spdx-* classes is processing documents, it needs to find the document in a path that is related to the SSTATE_ARCH when a packge is generated. The SSTATE_ARCH can be affected by multilib configurations, resulting is something like armv8a-mlib. When the image (or SDK) is being generated and the components are collected, the system has no knowledge of the multilib arch and will fail to find it, such as: ERROR: meta-toolchain-1.0-r0 do_populate_sdk: No SPDX file found for package libilp32-libgcc-dbg, False sstate:libilp32-libgcc:armv8a-ilp32-mllibilp32-elf:14.1.0:r0:armv8a-ilp32:12: sstate:libilp32-libgcc::14.1.0:r0::12: Adding in the new SPDX_MULTILIB_SSTATE_ARCHS will provide a full set of SSTATE_ARCHS including ones that contain the multilib extension which will allow create-spdx-* to correctly find the document it is looking for. This would also be valuable to any other function doing a similar search through SSTATE_ARCH that may have been extended with multilib configurations. (From OE-Core rev: 5c1ce317fff6df6818f72d93197e5ec59ad4c462) Signed-off-by:
-
Mark Hatle authored
Additional test cases for debug symlink generation both binaries and static libraries. This also has the side effect of testing for race conditions in the hardlink debug generation and stripping. (From OE-Core rev: 39823d3211411e661320e1164ba4c50370804425) Signed-off-by:
-
Mark Hatle authored
When PACKAGE_STRIP_STATIC is enabled the system did not pay attention to hardlinks. This could trigger a race condition during stripping of static libraries where multiple strips (through hardlinks) could run at the same time triggering a truncated or modified file error. The hardlink breaking code is based on the existing code for elf files, but due to the nature of the symlinks needed to be done in a separate block of code. Add support for static-library debugfs hardlinking through the existing inode processing code. Print a note to the logs if the link target can't be found. This isn't strictly an error, but may be useful for debugging an issue where a file isn't present. (From OE-Core rev: c2809691992dab48a360c9516d205ec031378cda) Signed-off-by:
-
Mark Hatle authored
Fix: NameError: name 'shutil' is not defined (From OE-Core rev: a9d8e3f12032c92fa8dd7f2ad40f618da5ee281a) Signed-off-by:
-
Yogita Urade authored
This includes fix for: CVE-2024-26327, CVE-2024-26328 and CVE-2024-3447 General changelog for 8.2: https://wiki.qemu.org/ChangeLog/8.2 Droped 0001-linux-user-x86_64-Handle-the-vsyscall-page-in-open_s.patch, CVE-2024-3446 and CVE-2024-3567 since already contained the fix. (From OE-Core rev: 1a6d502c04fad0d190bb665e9d454b85c0853fcc) Signed-off-by:
Yogita Urade <yogita.urade@windriver.com> Signed-off-by:
-
Niko Mauno authored
This commit incorporates changes in following master branch commits: f3479f74 libyaml: Amend CVE status as 'upstream-wontfix' 3ebb2ca8 libyaml: Change CVE status to wontfix 56b6b356 libyaml: Update status of CVE-2024-35328 which mitigate the following warning with cve-check.bbclass: WARNING: libyaml-native-0.2.5-r0 do_cve_check: Found unpatched CVE (CVE-2024-35328), for more information check .../tmp/work/x86_64-linux/libyaml-native/0.2.5/temp/cve.log (From OE-Core rev: a88c83ba93346b62c2a360ab71bacc57585fec60) Signed-off-by:
Niko Mauno <niko.mauno@vaisala.com> Signed-off-by:
-
Khem Raj authored
(From OE-Core rev: 25554f0a542894416ad17e1334c8a05feb56b12e) Signed-off-by:
Khem Raj <raj.khem@gmail.com> Signed-off-by:
Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by:
-
Khem Raj authored
backport upstream fix for CVEs and fix the regression that introduced [1] [1] http://lists.busybox.net/pipermail/busybox/2024-May/090766.html (From OE-Core rev: 7fa82243e587563172c0c2c4ab005a873583d26e) Signed-off-by:
-
Peter Marko authored
These recipes come from rust sources and CVEs are reported for them under rust-lang:rust vendor:product touple. Especially libstd-rs needs correct CVE_PRODUCT as is it installed on target devices (being statically linked to rust compiled binaries). before: cargo: CVE_PRODUCT="cargo" cargo-c-native: CVE_PRODUCT="cargo-c" libstd-rs: CVE_PRODUCT="libstd-rs" rust: CVE_PRODUCT="rust" rust-cross-canadian: CVE_PRODUCT="rust-cross-canadian-<arch>" rust-llvm: CVE_PRODUCT="rust-llvm" after: cargo: CVE_PRODUCT="cargo" cargo-c-native: CVE_PRODUCT="cargo-c" libstd-rs: CVE_PRODUCT="rust" rust: CVE_PRODUCT="rust" rust-cross-canadian-x86-64: CVE_PRODUCT="rust" rust-llvm: CVE_PRODUCT="rust-llvm" Product for rust-llvm is uncertain and, should be handled in another commit if it is desired to align it, too. sqlite> select vendor, product, count(product) from products where vendor="rust-lang" group by product; rust-lang|async-h1|2 rust-lang|cargo|5 rust-lang|future-utils|2 rust-lang|futures-task|2 rust-lang|mdbook|1 rust-lang|regex|2 rust-lang|rsa|2 rust-lang|rust|45 rust-lang|socket2|1 (From OE-Core rev: 91bfe1f64ee3e2b8534baa8a3eb2fb7fa3521657) Signed-off-by:
-
- Aug 01, 2024
-
-
Jose Quaresma authored
Drop our sd-notify patch and switch to the upstream standalone implementation that does not depend on libsystemd. (From OE-Core rev: 1c9d3c22718bf49ae85c2d06e0ee60ebdc2fd0c1) Signed-off-by:
Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by:
-
Jose Quaresma authored
Still side effects of the XZ backdoor. Racional [1]: License incompatibility and library bloatedness were the reasons. Given recent events we're never going to take a dependency on libsystemd, though we might implement the notification protocol ourselves if it isn't too much work. [1] https://github.com/openssh/openssh-portable/pull/375#issuecomment-2027749729 (From OE-Core rev: 29faae166366dd022598b95fb1595bd9473d2a17) Signed-off-by:
-
Jose Quaresma authored
The rationale [1] is that C11 6.5.6.9 says: """ When two pointers are subtracted, both shall point to elements of the same array object, or one past the last element of the array object; the result is the difference of the subscripts of the two array elements. """ In these cases the objects are arrays of char so the result is defined, and we believe that the compiler incorrectly trapping on defined behaviour. I also found https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63303 ("Pointer subtraction is broken when using -fsanitize=undefined") which seems to support this position. [1] https://bugzilla.mindrot.org/show_bug.cgi?id=2608 (From OE-Core rev: ea9b6812e2e547767d430a05f4f9282f6988468a) Signed-off-by:
-
Jose Quaresma authored
The SCP protocol was deprecated in favor of the SFTP. For the legacy SCP protocol scp should be run with "-O". Instead of adding "-O" on the scp_options ssh oeqa we can require the openssh-sftp-server to be instaled on the target. This way the test will work more deterministic regardless of the host machine client used. For the old fashion clients still using legacy SCP protocol the openssh-sshd server will be used, for the new ones using the SFTP the openssh-sftp-server will be picked. (From OE-Core rev: 7629a47d6cac36c78184788010f754175853bb03) Signed-off-by:
-
Guðni Már Gilbert authored
python3-ctypes was dropped as a dependency in v19.2.0 (From OE-Core rev: 48c43d2ff467c067d1518dc55d8d6da39bea159a) Signed-off-by:
-
Alexander Kanavin authored
(From OE-Core rev: c7c18d83029ed9b928ae0c7c78d2ef78813ca8bd) Signed-off-by:
Alexander Kanavin <alex@linutronix.de> Signed-off-by:
-
Alexander Kanavin authored
(From OE-Core rev: bd782cf02ab8ae5250d8009595a877fab54b8d1a) Signed-off-by:
-
Alexander Kanavin authored
(From OE-Core rev: ab532f6010a671e622a9451f6a5d2fe31dbc2f32) Signed-off-by:
-
Alexander Kanavin authored
The patch is specific to how oe-core runs autotools-generated tests: by cherry-picking needed bits from builddir and srcdir, then hacking Makefile with sed until it runs. As GNU is not interested in installable tests, they wouldn't be interested in this patch either; and if they become interested, it's probably going to be done in a whole different way. (From OE-Core rev: c7a8632469913638070878022bffac5588201006) Signed-off-by:
-
Alexander Kanavin authored
(From OE-Core rev: 81d8c2567d9319e68854217022bb038546b6298a) Signed-off-by:
-
