[yocto-security] [OE-core CVE] branch pyro-next updated. uninative-1.6-760-gb1cd9fc

Thu Mar 15 21:31:46 PDT 2018

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "".

The branch, pyro-next has been updated
  discards  fe793eddfe0abf2af88746fce39ac068d91a03c9 (commit)
  discards  784afd6b06960b5fd691658ff5cbd665dd2fd3a1 (commit)
  discards  d2d84b8f1beb15d4d7ae47b93822bf9f8accaa91 (commit)
  discards  1a30a9c5f1b0e9b54b1aaa6d33476f003ede6310 (commit)
  discards  177a8d7af49a2f7b9ed489284c2ef70e3b1f691d (commit)
  discards  429e364f4c15db1dd9c95df61971e13317c85c81 (commit)
  discards  10022dd011b5ca57b31a46aab26c5ba18ddb294c (commit)
  discards  832c8007a28a3f292d730c15662bac6391a9a182 (commit)
  discards  2c4e0a0374eb3d862bf4e8ba9ffb6f39006394ea (commit)
  discards  307d4deebf2511904e23f329c674a80e6ab5de4a (commit)
  discards  4eddc982c37e2e1ecb698182c0a48af5aa38b8c9 (commit)
  discards  4bbe8575ee90802cec2623c2ad702a9dd505875f (commit)
  discards  4663ff3b2832a274123f3699e72a9c61ff5ecae1 (commit)
       via  b1cd9fce587e7460c565e4b6acf0b4081162a0a2 (commit)
       via  71a70b12145e16ad247e8cd32b29d0ca316ee3b1 (commit)
       via  3c142b90087c1d800f1686f09bac73f1538c82ea (commit)
       via  b3c5cde8f01373d7e20c7c822ee209759f72c5c1 (commit)
       via  6d675a93c86a8a1322d543864f55c04f8f0f67b0 (commit)
       via  25331278ef20231acb870209fe8f711a5bf7dc7a (commit)
       via  fd19ebb26ac6e1c3650fddf75f61aba5406dd161 (commit)
       via  21d2900cf26b80190c5b21227d64b8f9f3991413 (commit)
       via  f92515e05cb988f4e40de293afec90454ef974b8 (commit)
       via  a2b9165b74ecfb8fc72b79c86ea4fd807ffb6648 (commit)
       via  ee6d88f61be7341a06dd7e8210e9937adf15ed3c (commit)
       via  5e4b4874c4d81b62a32b3836d1c22ecc4c5479c6 (commit)
       via  8147911a951c7b0508f9c2aef93480d65b4362c0 (commit)
       via  f2006493d26de1a6b5ffdbfd553d82d6254884d5 (commit)
       via  2b0617e1e416bd6cd1ec75e55e46c4f699785452 (commit)
       via  f5992ee01fca27d5fdfb9108f436adfcb49f1ae7 (commit)
       via  9f6820abfba5a634068cc4df8659640edf0f529a (commit)
       via  e58b420a0e4ef62bd597ce286c9faea2a51913c4 (commit)
       via  4586a66aa3f9992f54839c2920c3d51e95040a1b (commit)
       via  bb6af5f0dbb39553654ba3a587c8078bb635da6f (commit)
       via  d8842e86114cae7ca006ef903ac5459c7414010e (commit)
       via  8264826911888bd45b1d0cc914675d30a1a78546 (commit)
       via  103a41f50961d916d52343c6457639c6734d4e72 (commit)
       via  d31ee3eb2be020b072278262693ed7bd607ba18a (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (fe793eddfe0abf2af88746fce39ac068d91a03c9)
            \
             N -- N -- N (b1cd9fce587e7460c565e4b6acf0b4081162a0a2)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit b1cd9fce587e7460c565e4b6acf0b4081162a0a2
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:28 2018 +0000

    cross-localedef-native: add way to specify which locale archive to write

    localedef has no way to specify which locale archive to use, and the
    compile-time default isn't useful as it points to the work directory.

    Add support to read an environmental variable for the path, and don't fail to
    write a new locale archive.

    (From OE-Core rev: bf0f205a3c3714926649bd69db29e4df1c0ea112)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit 71a70b12145e16ad247e8cd32b29d0ca316ee3b1
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:30 2018 +0000

    package-manager: add install_glob()

    (From OE-Core rev: 8d1b530c82de386d4183f5673c060b9d416a3835)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit 3c142b90087c1d800f1686f09bac73f1538c82ea
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:29 2018 +0000

    package_manager: improve install_complementary

    - No need to use bb.utils.which() as subprocess will search $PATH
    - Clarity flow by moving the install inside the try/except

    (From OE-Core rev: f4d22b7195dd8f08fe26dd353c7e860208e87d6a)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit b3c5cde8f01373d7e20c7c822ee209759f72c5c1
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:33 2018 +0000

    sdk: generate locale archive and remove packages

    (From OE-Core rev: c6f1010a47df33b40320aa5784181b659a3254d7)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit 6d675a93c86a8a1322d543864f55c04f8f0f67b0
Author: Ross Burton <ross.burton at intel.com>
Date:   Fri Mar 2 20:52:54 2018 +0000

    populate_sdk_base: depend on nativesdk-glibc-locale

    If we're building a SDK and we're using glibc so may be installing locales,
    add a build-dependency on natiesdk-glibc-locale so the locales we need will
    exist.

    (From OE-Core rev: 8d6869a0a89d8cf3c6e57723fab2750ba2c885db)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit 25331278ef20231acb870209fe8f711a5bf7dc7a
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:32 2018 +0000

    populate_sdk: install UTF-8 locales in SDKs

    As glibc 2.27 can't read older locale-archives, SDKs using glibc 2.27 on hosts
    using glibc earlier than 2.27 won't be able to find any locales, so bitbake
    won't start and Python can't use UTF-8.

    So by default install all locales into the SDK.  Special-case Extensible SDKs by
    installing no locales as they ship glibc in a buildtools, and that will have the
    locales.

    Locale installation requires cross-localedef, so add that to DEPENDS.

    Also remove the explicit en_US addition in buildtools-tarball as it is now
    redundant.

    (From OE-Core rev: 96896568d197cd06302713c24c0f7d91bfaea6c1)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit fd19ebb26ac6e1c3650fddf75f61aba5406dd161
Author: Ross Burton <ross.burton at intel.com>
Date:   Fri Mar 2 20:53:10 2018 +0000

    sdk: only install locales if we're using glibc

    Using glibc-locale to install locales only makes sense if we're using glibc.

    (From OE-Core rev: 8fc80734053645fa893694dfe33ddaee99aa9a1a)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit 21d2900cf26b80190c5b21227d64b8f9f3991413
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:31 2018 +0000

    sdk: install specified locales into SDK

    (From OE-Core rev: 9b1c3dbe79f67d3b46e0f90a73bce6c61f094a50)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit f92515e05cb988f4e40de293afec90454ef974b8
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:27 2018 +0000

    glibc: relocate locale paths in nativesdk

    nativesdk is built with a specific prefix but this will be different at install
    time, however glibc hard-codes the path to locale files. Expand these strings to 4K and move them to a magic segment which we can relocate when the SDK is installed.

    (From OE-Core rev: 59e0679378aac27c4fea0b06721e0a184a93c100)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit a2b9165b74ecfb8fc72b79c86ea4fd807ffb6648
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:26 2018 +0000

    glibc: don't use host locales in nativesdk

    (From OE-Core rev: d7ded85766852689a0d774c896a11d0609004ab2)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

commit ee6d88f61be7341a06dd7e8210e9937adf15ed3c
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 1 18:26:25 2018 +0000

    default-distrovars: don't rename locales for nativesdk

    (From OE-Core rev: 909da982c74b2ed931a65dda248557cb18f773e0)

    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>

-----------------------------------------------------------------------

Summary of changes:
 meta/classes/populate_sdk_base.bbclass             |  6 +-
 meta/classes/populate_sdk_ext.bbclass              |  3 +-
 meta/conf/distro/include/default-distrovars.inc    |  1 +
 meta/lib/oe/package_manager.py                     | 27 +++++++-
 meta/lib/oe/sdk.py                                 | 72 ++++++++++++++++++++++
 .../glibc/cross-localedef-native_2.25.bb           |  1 +
 meta/recipes-core/glibc/glibc/archive-path.patch   | 39 ++++++++++++
 .../glibc/glibc/relocate-locales.patch             | 55 +++++++++++++++++
 meta/recipes-core/glibc/glibc_2.25.bb              |  7 +--
 meta/recipes-core/meta/buildtools-tarball.bb       |  1 -
 10 files changed, 201 insertions(+), 11 deletions(-)
 create mode 100644 meta/recipes-core/glibc/glibc/archive-path.patch
 create mode 100644 meta/recipes-core/glibc/glibc/relocate-locales.patch

hooks/post-receive
-- 