mbox series

Kirkstone merge request: Jan 8th

Message ID 48dfc489-5c28-88bf-f714-a3c4b4cf840f@gmail.com
State New
Headers show
Series Kirkstone merge request: Jan 8th | expand

Pull-request

https://git.openembedded.org/meta-openembedded kirkstone-next

Message

akuster808 Jan. 8, 2023, 3:32 p.m. UTC
The following changes since commit a8055484f2829e8dfd03d5c8520b2c611aa7ebd2:

   dool: Add patch to fix rebuild (2022-12-11 16:18:53 -0500)

are available in the Git repository at:

   https://git.openembedded.org/meta-openembedded kirkstone-next

for you to fetch changes up to a9c25bef8882a69fd35ea7dbac3d978ce440fe06:

   mariadb: Upgrade to 10.7.7 (2023-01-04 11:46:45 -0500)

----------------------------------------------------------------
Archana Polampalli (1):
       Nodejs: Fixed python3 DeprecationWarning

Mingli Yu (3):
       php: Upgrade to 8.1.12
       mariadb: not use qemu to run cross-compiled binaries
       mariadb: Upgrade to 10.7.7

Narpat Mali (1):
       Fix collections.abc deprecation warning in downloadutils Warning 
appears as:

Polampalli, Archana (1):
       xfce4-settings: 4.16.2 -> 4.16.5

Siddharth Doshi (1):
       xterm : Fix CVE-2022-45063 code execution via OSC 50 input 
sequences] CVE-2022-45063

Yogita Urade (1):
       multipath-tools:fix CVE-2022-41973

  .../{mariadb-native_10.7.4.bb => mariadb-native_10.7.7.bb} |   4 +-
  meta-oe/recipes-dbs/mysql/mariadb.inc                           | 23 +-
  .../0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch    | 69 +++
  meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch         | 34 ++
  meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch        | 416 
---------------
  .../recipes-dbs/mysql/{mariadb_10.7.4.bb => mariadb_10.7.7.bb} |   6 +-
  .../nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch     | 35 ++
  meta-oe/recipes-devtools/nodejs/nodejs_16.18.1.bb               | 3 +-
  meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} |   2 +-
  meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch    | 782 
++++++++++++++++++++++++++++
  meta-oe/recipes-graphics/xorg-app/xterm_372.bb                  | 1 +
  .../files/0001-multipath-tools-use-run-instead-of-dev-shm.patch | 159 
++++++
  .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
  ...1-Fix-collections.abc-deprecation-warning-in-downloadu.patch | 41 ++
  .../recipes-devtools/python/python3-requests-toolbelt_0.9.1.bb  | 5 +-
  .../{xfce4-settings_4.16.2.bb => xfce4-settings_4.16.5.bb} |   2 +-
  16 files changed, 1147 insertions(+), 439 deletions(-)
  rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.7.4.bb => 
mariadb-native_10.7.7.bb} (93%)
  create mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch
  create mode 100644 meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch
  delete mode 100644 
meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch
  rename meta-oe/recipes-dbs/mysql/{mariadb_10.7.4.bb => 
mariadb_10.7.7.bb} (81%)
  create mode 100644 
meta-oe/recipes-devtools/nodejs/nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch
  rename meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} (99%)
  create mode 100644 
meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch
  create mode 100644 
meta-oe/recipes-support/multipath-tools/files/0001-multipath-tools-use-run-instead-of-dev-shm.patch
  create mode 100644 
meta-python/recipes-devtools/python/python3-requests-toolbelt/0001-Fix-collections.abc-deprecation-warning-in-downloadu.patch
  rename meta-xfce/recipes-xfce/xfce4-settings/{xfce4-settings_4.16.2.bb 
=> xfce4-settings_4.16.5.bb} (93%)

Comments

Khem Raj Jan. 8, 2023, 3:53 p.m. UTC | #1
merged thanks.

On Sun, Jan 8, 2023 at 7:32 AM akuster808 <akuster808@gmail.com> wrote:
>
> The following changes since commit a8055484f2829e8dfd03d5c8520b2c611aa7ebd2:
>
>    dool: Add patch to fix rebuild (2022-12-11 16:18:53 -0500)
>
> are available in the Git repository at:
>
>    https://git.openembedded.org/meta-openembedded kirkstone-next
>
> for you to fetch changes up to a9c25bef8882a69fd35ea7dbac3d978ce440fe06:
>
>    mariadb: Upgrade to 10.7.7 (2023-01-04 11:46:45 -0500)
>
> ----------------------------------------------------------------
> Archana Polampalli (1):
>        Nodejs: Fixed python3 DeprecationWarning
>
> Mingli Yu (3):
>        php: Upgrade to 8.1.12
>        mariadb: not use qemu to run cross-compiled binaries
>        mariadb: Upgrade to 10.7.7
>
> Narpat Mali (1):
>        Fix collections.abc deprecation warning in downloadutils Warning
> appears as:
>
> Polampalli, Archana (1):
>        xfce4-settings: 4.16.2 -> 4.16.5
>
> Siddharth Doshi (1):
>        xterm : Fix CVE-2022-45063 code execution via OSC 50 input
> sequences] CVE-2022-45063
>
> Yogita Urade (1):
>        multipath-tools:fix CVE-2022-41973
>
>   .../{mariadb-native_10.7.4.bb => mariadb-native_10.7.7.bb} |   4 +-
>   meta-oe/recipes-dbs/mysql/mariadb.inc                           | 23 +-
>   .../0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch    | 69 +++
>   meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch         | 34 ++
>   meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch        | 416
> ---------------
>   .../recipes-dbs/mysql/{mariadb_10.7.4.bb => mariadb_10.7.7.bb} |   6 +-
>   .../nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch     | 35 ++
>   meta-oe/recipes-devtools/nodejs/nodejs_16.18.1.bb               | 3 +-
>   meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} |   2 +-
>   meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch    | 782
> ++++++++++++++++++++++++++++
>   meta-oe/recipes-graphics/xorg-app/xterm_372.bb                  | 1 +
>   .../files/0001-multipath-tools-use-run-instead-of-dev-shm.patch | 159
> ++++++
>   .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
>   ...1-Fix-collections.abc-deprecation-warning-in-downloadu.patch | 41 ++
>   .../recipes-devtools/python/python3-requests-toolbelt_0.9.1.bb  | 5 +-
>   .../{xfce4-settings_4.16.2.bb => xfce4-settings_4.16.5.bb} |   2 +-
>   16 files changed, 1147 insertions(+), 439 deletions(-)
>   rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.7.4.bb =>
> mariadb-native_10.7.7.bb} (93%)
>   create mode 100644
> meta-oe/recipes-dbs/mysql/mariadb/0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch
>   create mode 100644 meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch
>   delete mode 100644
> meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch
>   rename meta-oe/recipes-dbs/mysql/{mariadb_10.7.4.bb =>
> mariadb_10.7.7.bb} (81%)
>   create mode 100644
> meta-oe/recipes-devtools/nodejs/nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch
>   rename meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} (99%)
>   create mode 100644
> meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch
>   create mode 100644
> meta-oe/recipes-support/multipath-tools/files/0001-multipath-tools-use-run-instead-of-dev-shm.patch
>   create mode 100644
> meta-python/recipes-devtools/python/python3-requests-toolbelt/0001-Fix-collections.abc-deprecation-warning-in-downloadu.patch
>   rename meta-xfce/recipes-xfce/xfce4-settings/{xfce4-settings_4.16.2.bb
> => xfce4-settings_4.16.5.bb} (93%)
>
Geoff Parker Jan. 9, 2023, 11:31 p.m. UTC | #2
Since the merge of
.../recipes-support/multipath-tools/multipath-tools_0.8.4.bb  CVE fix,
I've been getting build failures on my kirkstone builds due to this
do_package_qa Error.

ERROR: multipath-tools-0.8.4-r0 do_package_qa: QA Issue: non
-dev/-dbg/nativesdk- package multipath-tools-libs contains symlink .so
'/usr/lib/libdmmp.so'
non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
.so '/usr/lib/libmpathcmd.so'
non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
.so '/usr/lib/libmultipath.so'
non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
.so '/usr/lib/libmpathpersist.so' [dev-so]
ERROR: multipath-tools-0.8.4-r0 do_package_qa: Fatal QA errors were
found, failing task.

The only ways I've been able to resolve the QA Error is to either
revert the multipath-tools CVE fix commit, or add
'INSANE_SKIP:${PN}-libs = "dev-so" '  to a .bbappend.

I'm happy to send a patch for the INSSANE_SKIP work-around, but I'm
not sure this is a proper fix to this or not.

On Sun, Jan 8, 2023 at 7:54 AM Khem Raj <raj.khem@gmail.com> wrote:
>
> merged thanks.
>
> On Sun, Jan 8, 2023 at 7:32 AM akuster808 <akuster808@gmail.com> wrote:
> >
> > The following changes since commit a8055484f2829e8dfd03d5c8520b2c611aa7ebd2:
> >
> >    dool: Add patch to fix rebuild (2022-12-11 16:18:53 -0500)
> >
> > are available in the Git repository at:
> >
> >    https://git.openembedded.org/meta-openembedded kirkstone-next
> >
> > for you to fetch changes up to a9c25bef8882a69fd35ea7dbac3d978ce440fe06:
> >
> >    mariadb: Upgrade to 10.7.7 (2023-01-04 11:46:45 -0500)
> >
> > ----------------------------------------------------------------
> > Archana Polampalli (1):
> >        Nodejs: Fixed python3 DeprecationWarning
> >
> > Mingli Yu (3):
> >        php: Upgrade to 8.1.12
> >        mariadb: not use qemu to run cross-compiled binaries
> >        mariadb: Upgrade to 10.7.7
> >
> > Narpat Mali (1):
> >        Fix collections.abc deprecation warning in downloadutils Warning
> > appears as:
> >
> > Polampalli, Archana (1):
> >        xfce4-settings: 4.16.2 -> 4.16.5
> >
> > Siddharth Doshi (1):
> >        xterm : Fix CVE-2022-45063 code execution via OSC 50 input
> > sequences] CVE-2022-45063
> >
> > Yogita Urade (1):
> >        multipath-tools:fix CVE-2022-41973
> >
> >   .../{mariadb-native_10.7.4.bb => mariadb-native_10.7.7.bb} |   4 +-
> >   meta-oe/recipes-dbs/mysql/mariadb.inc                           | 23 +-
> >   .../0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch    | 69 +++
> >   meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch         | 34 ++
> >   meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch        | 416
> > ---------------
> >   .../recipes-dbs/mysql/{mariadb_10.7.4.bb => mariadb_10.7.7.bb} |   6 +-
> >   .../nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch     | 35 ++
> >   meta-oe/recipes-devtools/nodejs/nodejs_16.18.1.bb               | 3 +-
> >   meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} |   2 +-
> >   meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch    | 782
> > ++++++++++++++++++++++++++++
> >   meta-oe/recipes-graphics/xorg-app/xterm_372.bb                  | 1 +
> >   .../files/0001-multipath-tools-use-run-instead-of-dev-shm.patch | 159
> > ++++++
> >   .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
> >   ...1-Fix-collections.abc-deprecation-warning-in-downloadu.patch | 41 ++
> >   .../recipes-devtools/python/python3-requests-toolbelt_0.9.1.bb  | 5 +-
> >   .../{xfce4-settings_4.16.2.bb => xfce4-settings_4.16.5.bb} |   2 +-
> >   16 files changed, 1147 insertions(+), 439 deletions(-)
> >   rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.7.4.bb =>
> > mariadb-native_10.7.7.bb} (93%)
> >   create mode 100644
> > meta-oe/recipes-dbs/mysql/mariadb/0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch
> >   create mode 100644 meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch
> >   delete mode 100644
> > meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch
> >   rename meta-oe/recipes-dbs/mysql/{mariadb_10.7.4.bb =>
> > mariadb_10.7.7.bb} (81%)
> >   create mode 100644
> > meta-oe/recipes-devtools/nodejs/nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch
> >   rename meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} (99%)
> >   create mode 100644
> > meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch
> >   create mode 100644
> > meta-oe/recipes-support/multipath-tools/files/0001-multipath-tools-use-run-instead-of-dev-shm.patch
> >   create mode 100644
> > meta-python/recipes-devtools/python/python3-requests-toolbelt/0001-Fix-collections.abc-deprecation-warning-in-downloadu.patch
> >   rename meta-xfce/recipes-xfce/xfce4-settings/{xfce4-settings_4.16.2.bb
> > => xfce4-settings_4.16.5.bb} (93%)
> >
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#100476): https://lists.openembedded.org/g/openembedded-devel/message/100476
> Mute This Topic: https://lists.openembedded.org/mt/96132811/141655
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [geoffhp@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
Khem Raj Jan. 10, 2023, 1:04 a.m. UTC | #3
Can you try https://patchwork.yoctoproject.org/project/oe/patch/20230110002358.GC1773006@codepurple/

On Mon, Jan 9, 2023 at 3:31 PM Geoff Parker <geoffhp@gmail.com> wrote:
>
> Since the merge of
> .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb  CVE fix,
> I've been getting build failures on my kirkstone builds due to this
> do_package_qa Error.
>
> ERROR: multipath-tools-0.8.4-r0 do_package_qa: QA Issue: non
> -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink .so
> '/usr/lib/libdmmp.so'
> non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> .so '/usr/lib/libmpathcmd.so'
> non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> .so '/usr/lib/libmultipath.so'
> non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> .so '/usr/lib/libmpathpersist.so' [dev-so]
> ERROR: multipath-tools-0.8.4-r0 do_package_qa: Fatal QA errors were
> found, failing task.
>
> The only ways I've been able to resolve the QA Error is to either
> revert the multipath-tools CVE fix commit, or add
> 'INSANE_SKIP:${PN}-libs = "dev-so" '  to a .bbappend.
>
> I'm happy to send a patch for the INSSANE_SKIP work-around, but I'm
> not sure this is a proper fix to this or not.
>
> On Sun, Jan 8, 2023 at 7:54 AM Khem Raj <raj.khem@gmail.com> wrote:
> >
> > merged thanks.
> >
> > On Sun, Jan 8, 2023 at 7:32 AM akuster808 <akuster808@gmail.com> wrote:
> > >
> > > The following changes since commit a8055484f2829e8dfd03d5c8520b2c611aa7ebd2:
> > >
> > >    dool: Add patch to fix rebuild (2022-12-11 16:18:53 -0500)
> > >
> > > are available in the Git repository at:
> > >
> > >    https://git.openembedded.org/meta-openembedded kirkstone-next
> > >
> > > for you to fetch changes up to a9c25bef8882a69fd35ea7dbac3d978ce440fe06:
> > >
> > >    mariadb: Upgrade to 10.7.7 (2023-01-04 11:46:45 -0500)
> > >
> > > ----------------------------------------------------------------
> > > Archana Polampalli (1):
> > >        Nodejs: Fixed python3 DeprecationWarning
> > >
> > > Mingli Yu (3):
> > >        php: Upgrade to 8.1.12
> > >        mariadb: not use qemu to run cross-compiled binaries
> > >        mariadb: Upgrade to 10.7.7
> > >
> > > Narpat Mali (1):
> > >        Fix collections.abc deprecation warning in downloadutils Warning
> > > appears as:
> > >
> > > Polampalli, Archana (1):
> > >        xfce4-settings: 4.16.2 -> 4.16.5
> > >
> > > Siddharth Doshi (1):
> > >        xterm : Fix CVE-2022-45063 code execution via OSC 50 input
> > > sequences] CVE-2022-45063
> > >
> > > Yogita Urade (1):
> > >        multipath-tools:fix CVE-2022-41973
> > >
> > >   .../{mariadb-native_10.7.4.bb => mariadb-native_10.7.7.bb} |   4 +-
> > >   meta-oe/recipes-dbs/mysql/mariadb.inc                           | 23 +-
> > >   .../0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch    | 69 +++
> > >   meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch         | 34 ++
> > >   meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch        | 416
> > > ---------------
> > >   .../recipes-dbs/mysql/{mariadb_10.7.4.bb => mariadb_10.7.7.bb} |   6 +-
> > >   .../nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch     | 35 ++
> > >   meta-oe/recipes-devtools/nodejs/nodejs_16.18.1.bb               | 3 +-
> > >   meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} |   2 +-
> > >   meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch    | 782
> > > ++++++++++++++++++++++++++++
> > >   meta-oe/recipes-graphics/xorg-app/xterm_372.bb                  | 1 +
> > >   .../files/0001-multipath-tools-use-run-instead-of-dev-shm.patch | 159
> > > ++++++
> > >   .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
> > >   ...1-Fix-collections.abc-deprecation-warning-in-downloadu.patch | 41 ++
> > >   .../recipes-devtools/python/python3-requests-toolbelt_0.9.1.bb  | 5 +-
> > >   .../{xfce4-settings_4.16.2.bb => xfce4-settings_4.16.5.bb} |   2 +-
> > >   16 files changed, 1147 insertions(+), 439 deletions(-)
> > >   rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.7.4.bb =>
> > > mariadb-native_10.7.7.bb} (93%)
> > >   create mode 100644
> > > meta-oe/recipes-dbs/mysql/mariadb/0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch
> > >   create mode 100644 meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch
> > >   delete mode 100644
> > > meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch
> > >   rename meta-oe/recipes-dbs/mysql/{mariadb_10.7.4.bb =>
> > > mariadb_10.7.7.bb} (81%)
> > >   create mode 100644
> > > meta-oe/recipes-devtools/nodejs/nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch
> > >   rename meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} (99%)
> > >   create mode 100644
> > > meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch
> > >   create mode 100644
> > > meta-oe/recipes-support/multipath-tools/files/0001-multipath-tools-use-run-instead-of-dev-shm.patch
> > >   create mode 100644
> > > meta-python/recipes-devtools/python/python3-requests-toolbelt/0001-Fix-collections.abc-deprecation-warning-in-downloadu.patch
> > >   rename meta-xfce/recipes-xfce/xfce4-settings/{xfce4-settings_4.16.2.bb
> > > => xfce4-settings_4.16.5.bb} (93%)
> > >
> >
> > -=-=-=-=-=-=-=-=-=-=-=-
> > Links: You receive all messages sent to this group.
> > View/Reply Online (#100476): https://lists.openembedded.org/g/openembedded-devel/message/100476
> > Mute This Topic: https://lists.openembedded.org/mt/96132811/141655
> > Group Owner: openembedded-devel+owner@lists.openembedded.org
> > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [geoffhp@gmail.com]
> > -=-=-=-=-=-=-=-=-=-=-=-
> >
Geoff Parker Jan. 10, 2023, 2:23 a.m. UTC | #4
Hi Khem,

Stephanie's patch worked for me.

On Mon, Jan 9, 2023 at 5:04 PM Khem Raj <raj.khem@gmail.com> wrote:
>
> Can you try https://patchwork.yoctoproject.org/project/oe/patch/20230110002358.GC1773006@codepurple/
>
> On Mon, Jan 9, 2023 at 3:31 PM Geoff Parker <geoffhp@gmail.com> wrote:
> >
> > Since the merge of
> > .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb  CVE fix,
> > I've been getting build failures on my kirkstone builds due to this
> > do_package_qa Error.
> >
> > ERROR: multipath-tools-0.8.4-r0 do_package_qa: QA Issue: non
> > -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink .so
> > '/usr/lib/libdmmp.so'
> > non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> > .so '/usr/lib/libmpathcmd.so'
> > non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> > .so '/usr/lib/libmultipath.so'
> > non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> > .so '/usr/lib/libmpathpersist.so' [dev-so]
> > ERROR: multipath-tools-0.8.4-r0 do_package_qa: Fatal QA errors were
> > found, failing task.
> >
> > The only ways I've been able to resolve the QA Error is to either
> > revert the multipath-tools CVE fix commit, or add
> > 'INSANE_SKIP:${PN}-libs = "dev-so" '  to a .bbappend.
> >
> > I'm happy to send a patch for the INSSANE_SKIP work-around, but I'm
> > not sure this is a proper fix to this or not.
> >
> > On Sun, Jan 8, 2023 at 7:54 AM Khem Raj <raj.khem@gmail.com> wrote:
> > >
> > > merged thanks.
> > >
> > > On Sun, Jan 8, 2023 at 7:32 AM akuster808 <akuster808@gmail.com> wrote:
> > > >
> > > > The following changes since commit a8055484f2829e8dfd03d5c8520b2c611aa7ebd2:
> > > >
> > > >    dool: Add patch to fix rebuild (2022-12-11 16:18:53 -0500)
> > > >
> > > > are available in the Git repository at:
> > > >
> > > >    https://git.openembedded.org/meta-openembedded kirkstone-next
> > > >
> > > > for you to fetch changes up to a9c25bef8882a69fd35ea7dbac3d978ce440fe06:
> > > >
> > > >    mariadb: Upgrade to 10.7.7 (2023-01-04 11:46:45 -0500)
> > > >
> > > > ----------------------------------------------------------------
> > > > Archana Polampalli (1):
> > > >        Nodejs: Fixed python3 DeprecationWarning
> > > >
> > > > Mingli Yu (3):
> > > >        php: Upgrade to 8.1.12
> > > >        mariadb: not use qemu to run cross-compiled binaries
> > > >        mariadb: Upgrade to 10.7.7
> > > >
> > > > Narpat Mali (1):
> > > >        Fix collections.abc deprecation warning in downloadutils Warning
> > > > appears as:
> > > >
> > > > Polampalli, Archana (1):
> > > >        xfce4-settings: 4.16.2 -> 4.16.5
> > > >
> > > > Siddharth Doshi (1):
> > > >        xterm : Fix CVE-2022-45063 code execution via OSC 50 input
> > > > sequences] CVE-2022-45063
> > > >
> > > > Yogita Urade (1):
> > > >        multipath-tools:fix CVE-2022-41973
> > > >
> > > >   .../{mariadb-native_10.7.4.bb => mariadb-native_10.7.7.bb} |   4 +-
> > > >   meta-oe/recipes-dbs/mysql/mariadb.inc                           | 23 +-
> > > >   .../0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch    | 69 +++
> > > >   meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch         | 34 ++
> > > >   meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch        | 416
> > > > ---------------
> > > >   .../recipes-dbs/mysql/{mariadb_10.7.4.bb => mariadb_10.7.7.bb} |   6 +-
> > > >   .../nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch     | 35 ++
> > > >   meta-oe/recipes-devtools/nodejs/nodejs_16.18.1.bb               | 3 +-
> > > >   meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} |   2 +-
> > > >   meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch    | 782
> > > > ++++++++++++++++++++++++++++
> > > >   meta-oe/recipes-graphics/xorg-app/xterm_372.bb                  | 1 +
> > > >   .../files/0001-multipath-tools-use-run-instead-of-dev-shm.patch | 159
> > > > ++++++
> > > >   .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
> > > >   ...1-Fix-collections.abc-deprecation-warning-in-downloadu.patch | 41 ++
> > > >   .../recipes-devtools/python/python3-requests-toolbelt_0.9.1.bb  | 5 +-
> > > >   .../{xfce4-settings_4.16.2.bb => xfce4-settings_4.16.5.bb} |   2 +-
> > > >   16 files changed, 1147 insertions(+), 439 deletions(-)
> > > >   rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.7.4.bb =>
> > > > mariadb-native_10.7.7.bb} (93%)
> > > >   create mode 100644
> > > > meta-oe/recipes-dbs/mysql/mariadb/0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch
> > > >   create mode 100644 meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch
> > > >   delete mode 100644
> > > > meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch
> > > >   rename meta-oe/recipes-dbs/mysql/{mariadb_10.7.4.bb =>
> > > > mariadb_10.7.7.bb} (81%)
> > > >   create mode 100644
> > > > meta-oe/recipes-devtools/nodejs/nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch
> > > >   rename meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} (99%)
> > > >   create mode 100644
> > > > meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch
> > > >   create mode 100644
> > > > meta-oe/recipes-support/multipath-tools/files/0001-multipath-tools-use-run-instead-of-dev-shm.patch
> > > >   create mode 100644
> > > > meta-python/recipes-devtools/python/python3-requests-toolbelt/0001-Fix-collections.abc-deprecation-warning-in-downloadu.patch
> > > >   rename meta-xfce/recipes-xfce/xfce4-settings/{xfce4-settings_4.16.2.bb
> > > > => xfce4-settings_4.16.5.bb} (93%)
> > > >
> > >
> > > -=-=-=-=-=-=-=-=-=-=-=-
> > > Links: You receive all messages sent to this group.
> > > View/Reply Online (#100476): https://lists.openembedded.org/g/openembedded-devel/message/100476
> > > Mute This Topic: https://lists.openembedded.org/mt/96132811/141655
> > > Group Owner: openembedded-devel+owner@lists.openembedded.org
> > > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [geoffhp@gmail.com]
> > > -=-=-=-=-=-=-=-=-=-=-=-
> > >
Khem Raj Jan. 10, 2023, 3:45 a.m. UTC | #5
Great, thanks for testing. I am sure Armin will get this sorted soon

On Mon, Jan 9, 2023 at 6:24 PM Geoff Parker <geoffhp@gmail.com> wrote:
>
> Hi Khem,
>
> Stephanie's patch worked for me.
>
> On Mon, Jan 9, 2023 at 5:04 PM Khem Raj <raj.khem@gmail.com> wrote:
> >
> > Can you try https://patchwork.yoctoproject.org/project/oe/patch/20230110002358.GC1773006@codepurple/
> >
> > On Mon, Jan 9, 2023 at 3:31 PM Geoff Parker <geoffhp@gmail.com> wrote:
> > >
> > > Since the merge of
> > > .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb  CVE fix,
> > > I've been getting build failures on my kirkstone builds due to this
> > > do_package_qa Error.
> > >
> > > ERROR: multipath-tools-0.8.4-r0 do_package_qa: QA Issue: non
> > > -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink .so
> > > '/usr/lib/libdmmp.so'
> > > non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> > > .so '/usr/lib/libmpathcmd.so'
> > > non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> > > .so '/usr/lib/libmultipath.so'
> > > non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
> > > .so '/usr/lib/libmpathpersist.so' [dev-so]
> > > ERROR: multipath-tools-0.8.4-r0 do_package_qa: Fatal QA errors were
> > > found, failing task.
> > >
> > > The only ways I've been able to resolve the QA Error is to either
> > > revert the multipath-tools CVE fix commit, or add
> > > 'INSANE_SKIP:${PN}-libs = "dev-so" '  to a .bbappend.
> > >
> > > I'm happy to send a patch for the INSSANE_SKIP work-around, but I'm
> > > not sure this is a proper fix to this or not.
> > >
> > > On Sun, Jan 8, 2023 at 7:54 AM Khem Raj <raj.khem@gmail.com> wrote:
> > > >
> > > > merged thanks.
> > > >
> > > > On Sun, Jan 8, 2023 at 7:32 AM akuster808 <akuster808@gmail.com> wrote:
> > > > >
> > > > > The following changes since commit a8055484f2829e8dfd03d5c8520b2c611aa7ebd2:
> > > > >
> > > > >    dool: Add patch to fix rebuild (2022-12-11 16:18:53 -0500)
> > > > >
> > > > > are available in the Git repository at:
> > > > >
> > > > >    https://git.openembedded.org/meta-openembedded kirkstone-next
> > > > >
> > > > > for you to fetch changes up to a9c25bef8882a69fd35ea7dbac3d978ce440fe06:
> > > > >
> > > > >    mariadb: Upgrade to 10.7.7 (2023-01-04 11:46:45 -0500)
> > > > >
> > > > > ----------------------------------------------------------------
> > > > > Archana Polampalli (1):
> > > > >        Nodejs: Fixed python3 DeprecationWarning
> > > > >
> > > > > Mingli Yu (3):
> > > > >        php: Upgrade to 8.1.12
> > > > >        mariadb: not use qemu to run cross-compiled binaries
> > > > >        mariadb: Upgrade to 10.7.7
> > > > >
> > > > > Narpat Mali (1):
> > > > >        Fix collections.abc deprecation warning in downloadutils Warning
> > > > > appears as:
> > > > >
> > > > > Polampalli, Archana (1):
> > > > >        xfce4-settings: 4.16.2 -> 4.16.5
> > > > >
> > > > > Siddharth Doshi (1):
> > > > >        xterm : Fix CVE-2022-45063 code execution via OSC 50 input
> > > > > sequences] CVE-2022-45063
> > > > >
> > > > > Yogita Urade (1):
> > > > >        multipath-tools:fix CVE-2022-41973
> > > > >
> > > > >   .../{mariadb-native_10.7.4.bb => mariadb-native_10.7.7.bb} |   4 +-
> > > > >   meta-oe/recipes-dbs/mysql/mariadb.inc                           | 23 +-
> > > > >   .../0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch    | 69 +++
> > > > >   meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch         | 34 ++
> > > > >   meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch        | 416
> > > > > ---------------
> > > > >   .../recipes-dbs/mysql/{mariadb_10.7.4.bb => mariadb_10.7.7.bb} |   6 +-
> > > > >   .../nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch     | 35 ++
> > > > >   meta-oe/recipes-devtools/nodejs/nodejs_16.18.1.bb               | 3 +-
> > > > >   meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} |   2 +-
> > > > >   meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch    | 782
> > > > > ++++++++++++++++++++++++++++
> > > > >   meta-oe/recipes-graphics/xorg-app/xterm_372.bb                  | 1 +
> > > > >   .../files/0001-multipath-tools-use-run-instead-of-dev-shm.patch | 159
> > > > > ++++++
> > > > >   .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
> > > > >   ...1-Fix-collections.abc-deprecation-warning-in-downloadu.patch | 41 ++
> > > > >   .../recipes-devtools/python/python3-requests-toolbelt_0.9.1.bb  | 5 +-
> > > > >   .../{xfce4-settings_4.16.2.bb => xfce4-settings_4.16.5.bb} |   2 +-
> > > > >   16 files changed, 1147 insertions(+), 439 deletions(-)
> > > > >   rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.7.4.bb =>
> > > > > mariadb-native_10.7.7.bb} (93%)
> > > > >   create mode 100644
> > > > > meta-oe/recipes-dbs/mysql/mariadb/0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch
> > > > >   create mode 100644 meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch
> > > > >   delete mode 100644
> > > > > meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch
> > > > >   rename meta-oe/recipes-dbs/mysql/{mariadb_10.7.4.bb =>
> > > > > mariadb_10.7.7.bb} (81%)
> > > > >   create mode 100644
> > > > > meta-oe/recipes-devtools/nodejs/nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch
> > > > >   rename meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} (99%)
> > > > >   create mode 100644
> > > > > meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch
> > > > >   create mode 100644
> > > > > meta-oe/recipes-support/multipath-tools/files/0001-multipath-tools-use-run-instead-of-dev-shm.patch
> > > > >   create mode 100644
> > > > > meta-python/recipes-devtools/python/python3-requests-toolbelt/0001-Fix-collections.abc-deprecation-warning-in-downloadu.patch
> > > > >   rename meta-xfce/recipes-xfce/xfce4-settings/{xfce4-settings_4.16.2.bb
> > > > > => xfce4-settings_4.16.5.bb} (93%)
> > > > >
> > > >
> > > > -=-=-=-=-=-=-=-=-=-=-=-
> > > > Links: You receive all messages sent to this group.
> > > > View/Reply Online (#100476): https://lists.openembedded.org/g/openembedded-devel/message/100476
> > > > Mute This Topic: https://lists.openembedded.org/mt/96132811/141655
> > > > Group Owner: openembedded-devel+owner@lists.openembedded.org
> > > > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [geoffhp@gmail.com]
> > > > -=-=-=-=-=-=-=-=-=-=-=-
> > > >
akuster808 Jan. 10, 2023, 6:21 p.m. UTC | #6
noted

On 1/9/23 10:45 PM, Khem Raj wrote:
> Great, thanks for testing. I am sure Armin will get this sorted soon
>
> On Mon, Jan 9, 2023 at 6:24 PM Geoff Parker <geoffhp@gmail.com> wrote:
>> Hi Khem,
>>
>> Stephanie's patch worked for me.
>>
>> On Mon, Jan 9, 2023 at 5:04 PM Khem Raj <raj.khem@gmail.com> wrote:
>>> Can you try https://patchwork.yoctoproject.org/project/oe/patch/20230110002358.GC1773006@codepurple/
>>>
>>> On Mon, Jan 9, 2023 at 3:31 PM Geoff Parker <geoffhp@gmail.com> wrote:
>>>> Since the merge of
>>>> .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb  CVE fix,
>>>> I've been getting build failures on my kirkstone builds due to this
>>>> do_package_qa Error.
>>>>
>>>> ERROR: multipath-tools-0.8.4-r0 do_package_qa: QA Issue: non
>>>> -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink .so
>>>> '/usr/lib/libdmmp.so'
>>>> non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
>>>> .so '/usr/lib/libmpathcmd.so'
>>>> non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
>>>> .so '/usr/lib/libmultipath.so'
>>>> non -dev/-dbg/nativesdk- package multipath-tools-libs contains symlink
>>>> .so '/usr/lib/libmpathpersist.so' [dev-so]
>>>> ERROR: multipath-tools-0.8.4-r0 do_package_qa: Fatal QA errors were
>>>> found, failing task.
>>>>
>>>> The only ways I've been able to resolve the QA Error is to either
>>>> revert the multipath-tools CVE fix commit, or add
>>>> 'INSANE_SKIP:${PN}-libs = "dev-so" '  to a .bbappend.
>>>>
>>>> I'm happy to send a patch for the INSSANE_SKIP work-around, but I'm
>>>> not sure this is a proper fix to this or not.
>>>>
>>>> On Sun, Jan 8, 2023 at 7:54 AM Khem Raj <raj.khem@gmail.com> wrote:
>>>>> merged thanks.
>>>>>
>>>>> On Sun, Jan 8, 2023 at 7:32 AM akuster808 <akuster808@gmail.com> wrote:
>>>>>> The following changes since commit a8055484f2829e8dfd03d5c8520b2c611aa7ebd2:
>>>>>>
>>>>>>     dool: Add patch to fix rebuild (2022-12-11 16:18:53 -0500)
>>>>>>
>>>>>> are available in the Git repository at:
>>>>>>
>>>>>>     https://git.openembedded.org/meta-openembedded kirkstone-next
>>>>>>
>>>>>> for you to fetch changes up to a9c25bef8882a69fd35ea7dbac3d978ce440fe06:
>>>>>>
>>>>>>     mariadb: Upgrade to 10.7.7 (2023-01-04 11:46:45 -0500)
>>>>>>
>>>>>> ----------------------------------------------------------------
>>>>>> Archana Polampalli (1):
>>>>>>         Nodejs: Fixed python3 DeprecationWarning
>>>>>>
>>>>>> Mingli Yu (3):
>>>>>>         php: Upgrade to 8.1.12
>>>>>>         mariadb: not use qemu to run cross-compiled binaries
>>>>>>         mariadb: Upgrade to 10.7.7
>>>>>>
>>>>>> Narpat Mali (1):
>>>>>>         Fix collections.abc deprecation warning in downloadutils Warning
>>>>>> appears as:
>>>>>>
>>>>>> Polampalli, Archana (1):
>>>>>>         xfce4-settings: 4.16.2 -> 4.16.5
>>>>>>
>>>>>> Siddharth Doshi (1):
>>>>>>         xterm : Fix CVE-2022-45063 code execution via OSC 50 input
>>>>>> sequences] CVE-2022-45063
>>>>>>
>>>>>> Yogita Urade (1):
>>>>>>         multipath-tools:fix CVE-2022-41973
>>>>>>
>>>>>>    .../{mariadb-native_10.7.4.bb => mariadb-native_10.7.7.bb} |   4 +-
>>>>>>    meta-oe/recipes-dbs/mysql/mariadb.inc                           | 23 +-
>>>>>>    .../0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch    | 69 +++
>>>>>>    meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch         | 34 ++
>>>>>>    meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch        | 416
>>>>>> ---------------
>>>>>>    .../recipes-dbs/mysql/{mariadb_10.7.4.bb => mariadb_10.7.7.bb} |   6 +-
>>>>>>    .../nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch     | 35 ++
>>>>>>    meta-oe/recipes-devtools/nodejs/nodejs_16.18.1.bb               | 3 +-
>>>>>>    meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} |   2 +-
>>>>>>    meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch    | 782
>>>>>> ++++++++++++++++++++++++++++
>>>>>>    meta-oe/recipes-graphics/xorg-app/xterm_372.bb                  | 1 +
>>>>>>    .../files/0001-multipath-tools-use-run-instead-of-dev-shm.patch | 159
>>>>>> ++++++
>>>>>>    .../recipes-support/multipath-tools/multipath-tools_0.8.4.bb    | 4 +
>>>>>>    ...1-Fix-collections.abc-deprecation-warning-in-downloadu.patch | 41 ++
>>>>>>    .../recipes-devtools/python/python3-requests-toolbelt_0.9.1.bb  | 5 +-
>>>>>>    .../{xfce4-settings_4.16.2.bb => xfce4-settings_4.16.5.bb} |   2 +-
>>>>>>    16 files changed, 1147 insertions(+), 439 deletions(-)
>>>>>>    rename meta-oe/recipes-dbs/mysql/{mariadb-native_10.7.4.bb =>
>>>>>> mariadb-native_10.7.7.bb} (93%)
>>>>>>    create mode 100644
>>>>>> meta-oe/recipes-dbs/mysql/mariadb/0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch
>>>>>>    create mode 100644 meta-oe/recipes-dbs/mysql/mariadb/cross-compiling.patch
>>>>>>    delete mode 100644
>>>>>> meta-oe/recipes-dbs/mysql/mariadb/mariadb-openssl3.patch
>>>>>>    rename meta-oe/recipes-dbs/mysql/{mariadb_10.7.4.bb =>
>>>>>> mariadb_10.7.7.bb} (81%)
>>>>>>    create mode 100644
>>>>>> meta-oe/recipes-devtools/nodejs/nodejs/0001-Nodejs-Fixed-pipes-DeprecationWarning.patch
>>>>>>    rename meta-oe/recipes-devtools/php/{php_8.1.10.bb => php_8.1.12.bb} (99%)
>>>>>>    create mode 100644
>>>>>> meta-oe/recipes-graphics/xorg-app/xterm/CVE-2022-45063.patch
>>>>>>    create mode 100644
>>>>>> meta-oe/recipes-support/multipath-tools/files/0001-multipath-tools-use-run-instead-of-dev-shm.patch
>>>>>>    create mode 100644
>>>>>> meta-python/recipes-devtools/python/python3-requests-toolbelt/0001-Fix-collections.abc-deprecation-warning-in-downloadu.patch
>>>>>>    rename meta-xfce/recipes-xfce/xfce4-settings/{xfce4-settings_4.16.2.bb
>>>>>> => xfce4-settings_4.16.5.bb} (93%)
>>>>>>
>>>>> -=-=-=-=-=-=-=-=-=-=-=-
>>>>> Links: You receive all messages sent to this group.
>>>>> View/Reply Online (#100476): https://lists.openembedded.org/g/openembedded-devel/message/100476
>>>>> Mute This Topic: https://lists.openembedded.org/mt/96132811/141655
>>>>> Group Owner: openembedded-devel+owner@lists.openembedded.org
>>>>> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [geoffhp@gmail.com]
>>>>> -=-=-=-=-=-=-=-=-=-=-=-
>>>>>