[yocto-security] [OE-core CVE] branch thud updated. 2018-10-424-gf162d5b

cve-notice at lists.openembedded.org cve-notice at lists.openembedded.org
Tue May 21 16:32:27 PDT 2019


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "".

The branch, thud has been updated
       via  f162d5bfe6eaeca24f441c83c87252c8d05744fc (commit)
       via  22f4d5218ad016442b8511e9ccae649faf79152c (commit)
       via  becb0a3f855eff7700fa284a0a7981d6a260a1c5 (commit)
       via  7d0dfd6ada9b2fdf0c14833c388730ffc887af49 (commit)
       via  8f6d55056a1c6f9fd00b09a8e91b3e888750e793 (commit)
       via  7dbaaf8a823527a3523187327f5b0885fc682510 (commit)
       via  1d3696bd3b6d05b91c119ade79c40510d1426a56 (commit)
       via  170a233452539b0b6b8fc4db50cf69d848d1ac5b (commit)
       via  7bfb8bef5ec9c4137f439b35c56856697c6b79a4 (commit)
       via  3e48404afe27c93fa6ffbd8d66bc52dcd6216005 (commit)
       via  3dae8d5a02c29523dc640bee31a362f46ffde6ca (commit)
       via  17fd507e218bfd0f6745737bcd1a170d82e712e5 (commit)
       via  7d4450d373a297f246b8c3708fd7d2cafadd3ae9 (commit)
       via  cf4d3230ac439118a2ad3c381bac38e11b3e14e8 (commit)
       via  274c22a1fd95418e4afb6633bb4b2e6debc4d7ea (commit)
       via  6f58c301e2d3463848df35c5b5c55d167ab34035 (commit)
       via  f1009d6d44097a3f140e2f8679e9184031b10b44 (commit)
       via  3c164b94fbb0efc513ee747cccd571a73688b541 (commit)
       via  53df0c93c46b6ab1366df44bd9927dc6f8699b29 (commit)
       via  68919826fe4d4db4582223569c5a939a9c2f9c72 (commit)
       via  909baeb5901f7f212fbdd6c358c5ada6fe25e091 (commit)
       via  5685a349eb471f4c8c9dcc2dc3b34f20369920bb (commit)
       via  6351f52609af51055786f7b3b24aee722b4dcea4 (commit)
       via  9c63433010aae6891149a7605a637bee879dc4ef (commit)
       via  ced3c75fa75d9b9373d695d9204b197b98ea3bd9 (commit)
       via  5e900f2c9319843c8905713dd3dd12a1ad435976 (commit)
       via  ae87e2fab31590aaf8c2f0672d327d633f896cbd (commit)
       via  ed650ca30379279f6a0f1e8f9f728cc542504732 (commit)
       via  3a0272bab546a4b47feab117713e32873419bbe7 (commit)
       via  a9cc1b3f9a684c14f02b06226693b023adc3e609 (commit)
       via  bddf9bec4913fb8eabe6f2995020bf06cc7f890a (commit)
       via  4cf8d01d0066699f39162e25d1cdc847c0175473 (commit)
       via  b768cfb6c849cbbc2d6e2d03974af009ca5340de (commit)
       via  4c6bac8453768cab9c416c012019ead5edeaafa5 (commit)
       via  ad29465ccb9fea2622aa2ef8c7118a0deae829a2 (commit)
       via  d761b2ae95a84f353c4132bc9b0506c4a4b4c73f (commit)
       via  c4bb2bdbe6f74141f30171dabab49fa5cd45371f (commit)
       via  2861b339f4539ec4042cc7aa5351361246f4921f (commit)
       via  dc15a21cbb3090dfb56e78f622486f843be4f54a (commit)
       via  cf787f8eab1c85dbafb5e74bf12eb4ddb5c5cbf7 (commit)
       via  fbb34412641afa0fa7327cf599b82564ca375217 (commit)
       via  932762be3999906c2e8a0ed9236f1f01d9e2ea93 (commit)
       via  e6b272b7c0d10f49dde71dd9714aaa0fb6aec091 (commit)
       via  883726c93b4e6d64eec942e2fc9c937f7092adb0 (commit)
       via  383425fb86fdeccad88080369078d9ac988bab2f (commit)
       via  0ae5ff4c0adc5fd727e5c5c47aba8c7859d60a73 (commit)
       via  eae5caaf050f54a065e2654a60f55fda2c3afd95 (commit)
       via  65042ebf07afad2922dcdfceb6e8931c05255649 (commit)
       via  12df5392afb8446507bb73f4d33ee42e06a17b82 (commit)
       via  ca415c4250e32e9430a13b9edf7b308637ce597f (commit)
       via  9088a78e78f70721b2aa6bdbdf055551d5bd0265 (commit)
       via  9535dc7c6dc185defac2cad6a2733621c42420b7 (commit)
       via  e041812a84025a9ff9121efabc3805ff2dfe6375 (commit)
       via  aa4d86ff55b01d150f49b5b4517b0c661a10c36b (commit)
       via  e7721ee7e7942570ebab793f5870d7a021154a92 (commit)
       via  aa5c0d159c5016c6517f42a0a1738188b5646517 (commit)
       via  a053af9d2bbd1f7cf2d05100af208c359190eb97 (commit)
       via  a3dd494337bbdf20d7bff651d533f944f270766e (commit)
       via  3aad3c98cf8af4929bc416bbda55ccc71879f2f2 (commit)
       via  5f15e883502e6f737f7cdc577f6c104e8fbeeaa9 (commit)
       via  d8fc8bbab4bf5c34d316cc884e83fc6e66d57954 (commit)
       via  6998a3d7d0ecd27014053fe40c9fb4e0ec970880 (commit)
       via  89dc69464b9ec1c2cac5d2420dfe6928da50d384 (commit)
       via  ba193703ccda16c0ed834248d8c9fda0d6ad2302 (commit)
       via  87728d921cfa5997b454ebc5074d2c1aee2def89 (commit)
       via  dc2238b268d48b4e62a795a4f6b257efc298e2b2 (commit)
      from  7b5a069d4f11e36a1c407c4212aba5aafaf4ee7f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit f162d5bfe6eaeca24f441c83c87252c8d05744fc
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Wed May 15 15:45:14 2019 +0100

    core-image-sato-sdk-ptest: Tweak size to stay within 4GB limit
    
    Adding the valgrind debug symbol information caused the genericx86-64 image to
    overflow the 4GB boundary. Tweak the sizes to avoid autobuilder failures yet
    leave enough space all the tests still run successfully.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 22f4d5218ad016442b8511e9ccae649faf79152c
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Mon Apr 15 21:01:31 2019 +0100

    core-image-sato-sdk-ptest: Try and keep image below 4GB limit
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit becb0a3f855eff7700fa284a0a7981d6a260a1c5
Author: Chee Yang Lee <chee.yang.lee at intel.com>
Date:   Mon May 13 12:07:09 2019 +0800

    wic/bootimg-efi: replace hardcoded volume name with label
    
    volume name should refer to --label in .wks.
    Replace the hardcoded volume name  with label.
    set "ESP" as default name when no lable specified.
    
    Signed-off-by: Chee Yang Lee <chee.yang.lee at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 7d0dfd6ada9b2fdf0c14833c388730ffc887af49
Author: Joshua Watt <jpewhacker at gmail.com>
Date:   Wed May 8 11:16:23 2019 -0500

    resulttool: Add option to dump all ptest logs
    
    Adds an option to dump all the ptest logs to individual files in a
    specified directory. If multiple test runs are present, the
    '--prepend-run' argument will create separate directories for each test
    run under the target directory and put the logs there to prevent each
    test run from clobbering the others.
    
    [YOCTO #13331]
    
    Signed-off-by: Joshua Watt <JPEWhacker at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 8f6d55056a1c6f9fd00b09a8e91b3e888750e793
Author: Ross Burton <ross.burton at intel.com>
Date:   Tue Apr 30 14:57:18 2019 +0100

    wic: change expand behaviour to match docs
    
    The documentation says that --expand takes a comma-separated list of
    partition:size pairs, but the code was splitting on hyphens.
    
    Hyphens are not a transitional separator for a list of items, so change the code
    to reflect the documentation.
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 7dbaaf8a823527a3523187327f5b0885fc682510
Author: Alex Kiernan <alex.kiernan at gmail.com>
Date:   Sun May 5 06:24:27 2019 +0100

    recipetool: fix unbound variable when fixed SRCREV can't be found
    
    If attempting to find a fixed SRCREV fails because the directory doesn't exit,
    avoid failing with:
    
      Traceback (most recent call last):
        File "/home/vagrant/poky/scripts/recipetool", line 121, in <module>
          ret = main()
        File "/home/vagrant/poky/scripts/recipetool", line 110, in main
          ret = args.func(args)
        File "/home/vagrant/poky/scripts/lib/recipetool/create.py", line 707, in create_recipe
          srcrev = stdout.rstrip()
      UnboundLocalError: local variable 'stdout' referenced before assignment
    
    Fixes: 000480c42797 ("recipetool / devtool: set a fixed SRCREV by default when fetching from git")
    Signed-off-by: Alex Kiernan <alex.kiernan at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 1d3696bd3b6d05b91c119ade79c40510d1426a56
Author: sangeeta jain <sangeeta.jain at intel.com>
Date:   Fri Apr 19 16:22:26 2019 +0800

    resulttool/manualexecution: Enable test case configuration option
    
    Current manualexecution required user to exceute all test cases defined inside a "modulename.json" file in oeqa/manual
    
    There are cases when all test cases all not required to run for a module on specific DUT.
    
    Enable manualexecution to have the optional feature where it will use pre-defined json format test case configuration file
    where user will be able to select test cases from the "modulename.json" instead of running all of them. This will help
    in reducing testing time and reporting unneccesary skip or failures.
    
    Example pre-defined json format test case configuration file (for build-applince):
    
    {
        "testcases" : [
            "build-appliance.build-appliance.Create_core-image-sato-sdk_using_build_appliance",
            "build-appliance.build-appliance.Build_a_image_without_error_(added_recipe)"
        ]
    }
    
    Signed-off-by: sangeeta jain <sangeeta.jain at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 170a233452539b0b6b8fc4db50cf69d848d1ac5b
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Thu Apr 25 11:09:11 2019 +0100

    resultool/resultutils: Fix module import error
    
    Fix AttributeError: module 'urllib' has no attribute 'request' when
    using remote http urls.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 7bfb8bef5ec9c4137f439b35c56856697c6b79a4
Author: Joshua Watt <jpewhacker at gmail.com>
Date:   Thu Apr 18 21:57:18 2019 -0500

    resulttool: Add log subcommand
    
    Adds a subcommand for dumping various logs from test results
    
    Signed-off-by: Joshua Watt <JPEWhacker at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 3e48404afe27c93fa6ffbd8d66bc52dcd6216005
Author: Joshua Watt <jpewhacker at gmail.com>
Date:   Thu Apr 18 21:57:17 2019 -0500

    resulttool: Load results from URL
    
    Adds support for resulttool to load JSON files directly from a http://
    or https:// URL
    
    Signed-off-by: Joshua Watt <JPEWhacker at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 3dae8d5a02c29523dc640bee31a362f46ffde6ca
Author: Yeoh Ee Peng <ee.peng.yeoh at intel.com>
Date:   Thu Apr 11 13:20:49 2019 +0800

    resulttool/manualexecution: Refactor and remove duplicate code
    
    Remove duplicate codes. Replace unnecessary class variables with
    local variables. Rename variables and arguments with simple and
    standard name.
    
    Signed-off-by: Yeoh Ee Peng <ee.peng.yeoh at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 17fd507e218bfd0f6745737bcd1a170d82e712e5
Author: Yeoh Ee Peng <ee.peng.yeoh at intel.com>
Date:   Tue Apr 9 13:53:08 2019 +0800

    resulttool/manualexecution: Enable creation of configuration option file
    
    Allow the creation of configuration option file based on user inputs.
    Where this configuration option file will be used by the the manual
    execution to display options for configuration rather than user
    need to inputs configuration manually.
    
    Signed-off-by: Yeoh Ee Peng <ee.peng.yeoh at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 7d4450d373a297f246b8c3708fd7d2cafadd3ae9
Author: Hongxu Jia <hongxu.jia at windriver.com>
Date:   Mon May 13 11:12:46 2019 -0400

    oeqa/targetcontrol.py: fix qemuparams not work in runqemu with launch_cmd
    
    As runqemu with launch_cmd means directly run the command, don't need set
    rootfs or env vars.
    
    Since commit [a847dd7202 runqemu: Let qemuparams override default settings]
    applied in oe-core, if launch_cmd contains "qemuparams='***'", it does not
    work, which is overridden by latter qemuparams="-serial tcp:127.0.0.1" in
    QemuRunner.launch();
    
    So we set qemuparams as a parameter in runqemu, the fix makes it work
    
    Signed-off-by: Hongxu Jia <hongxu.jia at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit cf4d3230ac439118a2ad3c381bac38e11b3e14e8
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Sun May 12 19:49:25 2019 +0100

    oeqa/target/ssh: Replace suggogatepass with ignoring errors
    
    We continued to see encoding problems with ssh commands run in oeqa. After much
    research the conclusion was we should use ignore the errors since some occasional bad
    locale encoding is better than the unicode decoding issues we were seeing which crashed
    large parts of tests.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 274c22a1fd95418e4afb6633bb4b2e6debc4d7ea
Author: Mikko Rapeli <mikko.rapeli at bmw.de>
Date:   Wed May 8 16:26:08 2019 +0300

    oeqa/sdk: use bash to execute SDK test commands
    
    The commands only work with with bash. If /bin/sh is
    dash like in Debian, the command execution fails with
    errors like:
    
    Standard Output: /bin/sh: 5: export: --sysroot: bad variable name
    
    and all SDK tests fail.
    
    Signed-off-by: Mikko Rapeli <mikko.rapeli at bmw.de>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 6f58c301e2d3463848df35c5b5c55d167ab34035
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Thu May 9 14:35:03 2019 +0100

    oeqa/concurrenttest: Patch subunit module to handle classSetup failures
    
    Currently setupClass errors were not being mapped back to the failing tests
    and they were hence being marked as UNKNOWN and the test statistics were
    inaccurate.
    
    This is because whilst the errors were being encoded into the test results
    stream, the decoder doesn't cope with an error outside a testStart event.
    
    We patch in an addError handler to the outsideTest parser so that this
    does get handled in a way similar to the non-concurrent case.
    
    It would be nice if we didn't have to do this but there doesn't seem
    to be any other way to fix this other than forking subunit.
    
    We also make a minor change so another of our changes can cope with
    tests without a start time.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit f1009d6d44097a3f140e2f8679e9184031b10b44
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Thu May 9 14:33:37 2019 +0100

    oeqa/runner: Fix subunit setupClass/setupModule failure handling
    
    The string format for subunit setupClass/setupModule failures is slightly
    different, tweak the regex to correctly handle both cases.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 3c164b94fbb0efc513ee747cccd571a73688b541
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Wed May 8 16:20:19 2019 +0100

    oeqa/core/runner: Handle unexpectedSucesses
    
    Instead of showing:
    RESULTS - ptest.PtestRunnerTest.test_ptestrunner - Testcase 1600: UNKNOWN (32.30s)
    
    map unexpectedSuccesses to PASSED and improve the way they're displayed. We
    expect/allow ptest runner to fail but if it passes we should handle it correctly.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 53df0c93c46b6ab1366df44bd9927dc6f8699b29
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Wed May 1 08:00:00 2019 +0100

    oeqa/ssh: Avoid unicode decode exceptions
    
    This code really needs to be rewritten to not split potential
    multibyte characters, for now work around it to avoid exceptions like:
    
      File "/home/pokybuild/yocto-worker/qa-extras2/build/meta/lib/oeqa/core/target/ssh.py", line 211, in run
        data = reader.read(1024, 4096)
      File "/usr/lib64/python3.6/codecs.py", line 503, in read
        newchars, decodedbytes = self.decode(data, self.errors)
    UnicodeDecodeError: 'utf-8' codec can't decode byte 0x92 in position 0: invalid start byte
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 68919826fe4d4db4582223569c5a939a9c2f9c72
Author: Mardegan, Alberto <AMardegan at luxoft.com>
Date:   Thu Apr 25 08:03:28 2019 +0000

    oeqa/core/runner: dump stdout and stderr of each test case
    
    Some CI pipelines might perform further processing of the test output
    (for instance, to plot some metrics into a chart). However, Since `thud`
    we switched away from the XML-based jUnit reporting, and at the same
    time we lost the ability of collecting the stdout and stderr of the
    various tests.
    
    We now restore this functionality by adding `stdout` and `stderr` keys
    to the JSON reports. This behavior is off by default; in order to enable
    it, one must set the `TESTREPORT_FULLLOGS` variable in the bitbake
    configuration.
    
    Signed-off-by: Alberto Mardegan <amardegan at luxoft.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 909baeb5901f7f212fbdd6c358c5ada6fe25e091
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Tue Apr 9 16:04:04 2019 +0100

    oeqa/utils/qemurunner: Fix typo in previous commit
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 5685a349eb471f4c8c9dcc2dc3b34f20369920bb
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Mon Mar 25 10:33:21 2019 +0000

    oeqa/qemurunner: Dont mix binary and non-binary strings
    
    self.msg is a str(), bootlog is b'' so this code clearly doesn't work. Add
    in a decode since its being used as a string.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 6351f52609af51055786f7b3b24aee722b4dcea4
Author: Ming Liu <liu.ming50 at gmail.com>
Date:   Fri Apr 5 16:22:15 2019 +0200

    opkg-utils: backport a patch to fix a sstate timestamp issue
    
    When using sstate, two parallel builds can produce two packages
    with the same mtime but different checksums. When later one of
    those two builds fetches the others ipk, the package index does
    not get udpated properly (since mtime matches). This ends up with
    messages such as:
      Downloading file:/../tmp/work/../image/...ipk.
      Removing corrupt package file /../sysroot/../var/cache/opkg/volatile/...ipk
    
    However, in that case, ctime is different. Use ctime instead of
    mtime to prevent failures like this.
    
    Signed-off-by: Ming Liu <liu.ming50 at gmail.com>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 9c63433010aae6891149a7605a637bee879dc4ef
Author: Andreas Müller <schnitzeltony at gmail.com>
Date:   Wed Apr 17 15:39:41 2019 +0200

    adwaita-icon-theme: do not delete symbolic svg but pack them in ${PN}-symbolic
    
    This fixes:
    * gtk-icon-browser: for symbolic view almost all icons were missing
    * xfce's thunar: 'home' and 'up' icons were missing. Had a long discussion with
      XFCE-people [1] and asked here [2].
    
    How could I overlook the most obvious...
    
    [1] https://bugzilla.xfce.org/show_bug.cgi?id=14443
    [2] http://lists.openembedded.org/pipermail/openembedded-core/2018-November/275815.html
    
    (From OE-Core rev: 0911e7d2f5443210b594a198ada8465af7a2fc78)
    
    Signed-off-by: Andreas Müller <schnitzeltony at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit ced3c75fa75d9b9373d695d9204b197b98ea3bd9
Author: Chen Qi <Qi.Chen at windriver.com>
Date:   Fri Apr 12 09:40:06 2019 +0800

    runqemu: do not check return code of tput
    
    The subprocess.run was replaced by subprocess.check_call because
    of compatibility support down to python 3.4. But we really don't
    care about whether that command succeeds. Some user reports that
    in some tmux environment, this command fails and gives some
    unpleasant traceback output. So we use 'call' instead of 'check_call'
    to avoid such problem.
    
    Signed-off-by: Chen Qi <Qi.Chen at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 5e900f2c9319843c8905713dd3dd12a1ad435976
Author: Hongxu Jia <hongxu.jia at windriver.com>
Date:   Fri Apr 12 05:10:38 2019 -0400

    image_types.bbclass: fix a race between the ubi and ubifs FSTYPES
    
    The ubi, ubifs and multiubi FSTYPES calls `mkfs.ubifs' to create UBIFS
    images.
    
    In do_image_ubi, $vname is empty, the name of UBIFS image conflicts with
    the one in do_image_ubifs, and it's a race risk.
    [do_image_ubi]
    mkfs.ubifs -r ${IMAGE_ROOTFS} -o ${IMGDEPLOYDIR}/${IMAGE_NAME}${vname}${IMAGE_NAME_SUFFIX}.ubifs ${mkubifs_args}
    [do_image_ubi]
    
    [do_image_ubifs]
    mkfs.ubifs -r ${IMAGE_ROOTFS} -o ${IMGDEPLOYDIR}/${IMAGE_NAME}${IMAGE_NAME_SUFFIX}.ubifs ${MKUBIFS_ARGS}
    [do_image_ubifs]
    
    In do_image_multiubi, $vname is not empty, the UBIFS image name does
    not conflict with others.
    
    So do not call mkfs.ubifs in do_image_ubi and depend on do_image_ubifs
    to create UBIFS images.
    
    The fix does not affect do_image_multiubi which still call mkfs.ubifs to
    create multiple UBIFS images and symlinks.
    
    [YOCTO #13272]
    
    Signed-off-by: Hongxu Jia <hongxu.jia at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit ae87e2fab31590aaf8c2f0672d327d633f896cbd
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Thu Apr 11 22:34:57 2019 +0100

    e2fsprogs: Skip slow ptest tests
    
    The slow tests run unreliably with our current setup/infrsstructure/timeouts.
    
    There are only five slow ones and having the other ~250 run reliably without timeouts
    is the priority right now. We can revisit the slow tests at some later date if wanted.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit ed650ca30379279f6a0f1e8f9f728cc542504732
Author: Changqing Li <changqing.li at windriver.com>
Date:   Thu Apr 11 15:02:33 2019 +0800

    ruby: add ptest
    
    Signed-off-by: Changqing Li <changqing.li at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 3a0272bab546a4b47feab117713e32873419bbe7
Author: Changqing Li <changqing.li at windriver.com>
Date:   Thu Apr 11 15:02:32 2019 +0800

    ruby: make ext module fiddle can compile success
    
    ext module fiddle depend on libffi, in ruby source tree,
    there is in internal libffi in case target platfrom don't
    install libffi, but autotools.bbclass delete configure
    under libffi and not run autoreconf to regenerate one.so
    we met this error:
    ruby-2.5.3/ext/fiddle/libffi-3.2.1/configure: No such file or directory
    
    the fix is add depend and extra_oeconf to use libffi in the system
    
    Signed-off-by: Changqing Li <changqing.li at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit a9cc1b3f9a684c14f02b06226693b023adc3e609
Author: Grandbois, Brett <brett.grandbois at opengear.com>
Date:   Fri Feb 8 01:30:34 2019 +0000

    ruby: remove CVE-2018-1000073.patch as already fixed
    
    rubygems 2.7.6 which is in ruby 2.5.3 has this fix and as currently
    applied all gem extraction fails as the realpath check is done against
    the full path including the file to be extracted which will always fail
    as the file hasnt been extracted yet
    
    Signed-off-by: Brett Grandbois <brett.grandbois at opengear.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit bddf9bec4913fb8eabe6f2995020bf06cc7f890a
Author: Manjukumar Matha <manjukumar.harthikote-matha at xilinx.com>
Date:   Thu Jan 31 14:21:26 2019 -0800

    ruby.inc: Add dependency on readline-native
    
    Add dependency on readline-native to fix the following issue
    
    uninitialized constant Logfile
    |       Check ext/fiddle/mkmf.log for more details.
    | readline:
    |       Could not be configured. It will not be installed.
    |
    build/tmp/work/x86_64-linux/ruby-native/2.5.1-r0/ruby-2.5.1/ext/readline/extconf.rb:62:
    Neither readline nor libedit was found
    |       Check ext/readline/mkmf.log for more details.
    | *** Fix the problems, then remove these directories and try again if
    you want.
    
    Signed-off-by: Manjukumar Matha <manjukumar.harthikote-matha at xilinx.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 4cf8d01d0066699f39162e25d1cdc847c0175473
Author: Lei Yang <Lei.Yang at windriver.com>
Date:   Wed Apr 10 14:04:09 2019 +0800

    recipetool: add missed module
    
    When I use recipetool to add a new recipe, it says:
    
    [snip]
    sys.exit(14)
    NameError: name 'sys' is not defined
    [snip]
    
    Signed-off-by: Lei Yang <Lei.Yang at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit b768cfb6c849cbbc2d6e2d03974af009ca5340de
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Thu Apr 11 00:07:02 2019 +0100

    pseudo: Update to gain key bugfixes
    
    Newer distros are using new versions of glibc and coreutils which use the new glibc
    renameat2 function. We need to intercept this for correct functioning of pseudo. This
    is essential to ensure new distros continue to work with the project.
    
    Also, this version has a fix for path/inode cross corruption problems which
    may explain our mysterious locale permissions issues.
    
    Many thanks to Otavio and Peter Seebach for the help in figuring this out and
    fixing it.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 4c6bac8453768cab9c416c012019ead5edeaafa5
Author: Yeoh Ee Peng <ee.peng.yeoh at intel.com>
Date:   Tue Apr 9 13:53:07 2019 +0800

    resulttool/manualexecution: Enable configuration options selection
    
    Current manualexecution required user to input configuration manually
    where there were inconsistent inputs and human typo issues.
    
    Enable manualexecution to have the optional feature where it
    will use pre-compiled configuration options file where user will
    be able to select configuration from the pre-compiled list instead
    of manual key-in the configuration. This will eliminate human error.
    
    Expect the pre-compiled configuration options file in json format below
    
    {
        "bsps-hw": {
            "IMAGE_BASENAME": {
                "1": "core-image-sato-sdk"
            },
            "MACHINE": {
                "1": "beaglebone-yocto",
                "2": "edgerouter",
                "3": "mpc8315e-rdb",
                "4": "genericx86",
                "5": "genericx86-64"
            }
        },
        "bsps-qemu": {
            "IMAGE_BASENAME": {
                "1": "core-image-sato-sdk"
            },
            "MACHINE": {
                "1": "qemuarm",
                "2": "qemuarm64",
                "3": "qemumips",
                "4": "qemumips64",
                "5": "qemuppc",
                "6": "qemux86",
                "7": "qemux86-64"
            }
        }
    }
    
    Signed-off-by: Yeoh Ee Peng <ee.peng.yeoh at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit ad29465ccb9fea2622aa2ef8c7118a0deae829a2
Author: Bruce Ashfield <bruce.ashfield at gmail.com>
Date:   Tue Apr 9 11:37:54 2019 -0400

    linux-yocto/4.18: update to v4.18.33
    
    Integrating Paul Gortmaker's -stable ports to 4.18 which comprise the
    following commits:
    
       56f9fe35a4c5 Linux 4.18.33
       bf44ff79b855 net: hns: Fixes the missing put_device in positive leg for roce reset
       81614c514f4e mm: Use fixed constant in page_frag_alloc instead of size + 1
       035b5a7a3e3f ipvs: fix warning on unused variable
       58ab04e46d92 intel_th: gth: Fix an off-by-one in output unassigning
       8cb600d53c6c ARM: dts: exynos: Fix max voltage for buck8 regulator on Odroid XU3/XU4
       f11b815f39bf s390/setup: fix boot crash for machine without EDAT-1
       4059d23a36a6 KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
       d94637dc73e5 KVM: nVMX: Apply addr size mask to effective address for VMX instructions
       ee356457f2a3 KVM: nVMX: Sign extend displacements of VMX instr's mem operands
       b4485d9eb039 KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux
       fe7d69927661 KVM: x86/mmu: Detect MMIO generation wrap in any address space
       c34cae89374b KVM: Call kvm_arch_memslots_updated() before updating memslots
       9fb8b858d552 drm/amd/display: don't call dm_pp_ function from an fpu block
       d4302b79ffbd drm/amd/powerplay: correct power reading on fiji
       5f8c51055244 drm/radeon/evergreen_cs: fix missing break in switch statement
       3fc39cdce701 media: imx: csi: Stop upstream before disabling IDMA channel
       5c008f7971b8 media: imx: csi: Disable CSI immediately after last EOF
       74a5ff7db3b2 media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
       142a9bd66395 media: lgdt330x: fix lock status reporting
       465204a0c772 media: imx: prpencvf: Stop upstream before disabling IDMA channel
       42a2c1a40db0 rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
       f9480ca4fb29 tpm: Unify the send callback behaviour
       5f28509f81ad tpm/tpm_crb: Avoid unaligned reads in crb_recv()
       ea37270d4c87 md: Fix failed allocation of md_register_thread
       bd77b69a20ba perf intel-pt: Fix divide by zero when TSC is not available
       c9a63c17458f perf/x86/intel/uncore: Fix client IMC events return huge result
       63a25bdd4227 perf intel-pt: Fix overlap calculation for padding
       66a57e3b95b5 perf auxtrace: Define auxtrace record alignment
       76650254e18e perf intel-pt: Fix CYC timestamp calculation after OVF
       274ef4840d79 x86/unwind/orc: Fix ORC unwind table alignment
       3928a903e185 vt: perform safe console erase in the right order
       645a7ca69855 stable-kernel-rules.rst: add link to networking patch queue
       1c14622adb15 bcache: never writeback a discard operation
       261aad0b3ea7 PM / wakeup: Rework wakeup source timer cancellation
       ee610ce938cd svcrpc: fix UDP on servers with lots of threads
       0530b66bfd53 NFSv4.1: Reinitialise sequence results before retransmitting a request
       9a1d7090b36e nfsd: fix wrong check in write_v4_end_grace()
       e7edb30fd6b7 nfsd: fix memory corruption caused by readdir
       672f2e600d21 nfsd: fix performance-limiting session calculation
       624865483faa NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
       2b5fef7c9927 NFS: Fix an I/O request leakage in nfs_do_recoalesce
       63adecfe53e9 NFS: Fix I/O request leakages
       0b0545dd7e6e cpcap-charger: generate events for userspace
       8f27f8570fa7 mfd: sm501: Fix potential NULL pointer dereference
       f964d308797d dm integrity: limit the rate of error messages
       1ed46c0c4f65 dm: fix to_sector() for 32bit
       ea77e999f649 ipmi_si: fix use-after-free of resource->name
       5a0bc68e9a0d arm64: KVM: Fix architecturally invalid reset value for FPEXC32_EL2
       9dc4a1a6447e arm64: debug: Ensure debug handlers check triggering exception level
       c33e96f8ddb2 arm64: Fix HCR.TGE status for NMI contexts
       bb7edb8a409a ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
       e8d7edd36a92 powerpc/traps: Fix the message printed when stack overflows
       fbea0579063f powerpc/hugetlb: Don't do runtime allocation of 16G pages in LPAR configuration
       88d0042148f0 powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning
       b0fc119506bf powerpc: Fix 32-bit KVM-PR lockup and host crash with MacOS guest
       6e975dad4a8e powerpc/powernv: Don't reprogram SLW image on every KVM guest entry/exit
       fcf2d15a0a32 powerpc/83xx: Also save/restore SPRG4-7 during suspend
       87481c65c805 powerpc/powernv: Make opal log only readable by root
       12319dcc9a80 powerpc/wii: properly disable use of BATs when requested.
       be851891b1c9 powerpc/32: Clear on-stack exception marker upon exception return
       24d0b4b51dd1 security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
       3ea70bdc892f selinux: add the missing walk_size + len check in selinux_sctp_bind_connect
       00d550a195f2 jbd2: fix compile warning when using JBUFFER_TRACE
       b18848cc624a jbd2: clear dirty flag when revoking a buffer from an older transaction
       108ba9f62780 serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup()
       a79bc3e5fb7c serial: 8250_pci: Fix number of ports for ACCES serial cards
       78e39f8bb56e serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
       04eb2755b4e9 serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
       9007ccc01a91 bpf: only test gso type on gso packets
       ef5b4e1f5735 drm/i915: Relax mmap VMA check
       23ca68189393 can: flexcan: FLEXCAN_IFLAG_MB: add () around macro argument
       8529fecb481e gpio: pca953x: Fix dereference of irq data in shutdown
       31e04ac8a8ba media: i2c: ov5640: Fix post-reset delay
       1855d8c9e6c4 i2c: tegra: fix maximum transfer size
       8bc3433b216d parport_pc: fix find_superio io compare code, should use equal test.
       2c0542dbb267 intel_th: Don't reference unassigned outputs
       c64422307c34 device property: Fix the length used in PROPERTY_ENTRY_STRING()
       c88db9c0d127 kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
       5374924c9332 mm/memory.c: do_fault: avoid usage of stale vm_area_struct
       db693b432779 mm/vmalloc: fix size check for remap_vmalloc_range_partial()
       1811478753e3 mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
       492ea426ddce dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
       f1bb88d5cee1 usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
       9377917b523a clk: ingenic: Fix doc of ingenic_cgu_div_info
       f0412cfc06af clk: ingenic: Fix round_rate misbehaving with non-integer dividers
       b6b4011ce7d1 clk: samsung: exynos5: Fix kfree() of const memory on setting driver_override
       715fe29adfd1 clk: samsung: exynos5: Fix possible NULL pointer exception on platform_device_alloc() failure
       eb9aa4ebf835 clk: clk-twl6040: Fix imprecise external abort for pdmclk
       917fa829bbf5 clk: uniphier: Fix update register for CPU-gear
       80d526380136 ext2: Fix underflow in ext2_max_size()
       bbf30be02326 cxl: Wrap iterations over afu slices inside 'afu_list_lock'
       94f31d712f26 IB/hfi1: Close race condition on user context disable and close
       a80eceacf85c PCI: dwc: skip MSI init if MSIs have been explicitly disabled
       084005af4966 PCI/ASPM: Use LTR if already enabled by platform
       821934eb7e75 ext4: fix crash during online resizing
       01767d409537 ext4: add mask of ext4 flags to swap
       f21830e67d5d ext4: update quota information while swapping boot loader inode
       4de71f7481a7 ext4: cleanup pagecache before swap i_data
       4821bf3c61bb ext4: fix check of inode in swap_inode_boot_loader
       3cd2f1153739 cpufreq: pxa2xx: remove incorrect __init annotation
       dc4443928ee2 cpufreq: tegra124: add missing of_node_put()
       a0e15a764318 cpufreq: kryo: Release OPP tables on module removal
       d28564a8e60e x86/kprobes: Prohibit probing on optprobe template code
       56955276ba2e irqchip/brcmstb-l2: Use _irqsave locking variants in non-interrupt code
       14dda7949f82 irqchip/gic-v3-its: Avoid parsing _indirect_ twice for Device table
       3a8560230470 libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
       7e7e5728d161 Btrfs: fix corruption reading shared and compressed extents after hole punching
       be1ee0e2fd42 btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
       cb292a678ee2 Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
       f1f0ee2859e6 Btrfs: setup a nofs context for memory allocation at btrfs_create_tree()
       0e6de290666f m68k: Add -ffreestanding to CFLAGS
       f78f0d35d43a splice: don't merge into linked buffers
       433cbc2d30f3 fs/devpts: always delete dcache dentry-s in dput()
       dbb3e594eecd scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
       528af139ff6b scsi: sd: Optimal I/O size should be a multiple of physical block size
       ee579fc4e875 scsi: aacraid: Fix performance issue on logical drives
       818838eea45d scsi: virtio_scsi: don't send sc payload with tmfs
       478bd6b7f170 s390/virtio: handle find on invalid queue gracefully
       47c6ea331f58 s390/setup: fix early warning messages
       69304bcf9021 clocksource/drivers/arch_timer: Workaround for Allwinner A64 timer instability
       947a053a6d47 clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
       084c1f5522f1 clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
       95d7c41e448f regulator: s2mpa01: Fix step values for some LDOs
       69913dbd2d55 regulator: max77620: Initialize values for DT properties
       060c4f4e5d0c regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
       9a215e43276c spi: pxa2xx: Setup maximum supported DMA transfer length
       913cb6579c9a spi: ti-qspi: Fix mmap read when more than one CS in use
       bb427df35f34 netfilter: ipt_CLUSTERIP: fix warning unused variable cn
       8fb8fb9b67bb mmc:fix a bug when max_discard is 0
       85d7e5a8000a mmc: sdhci-esdhc-imx: fix HS400 timing issue
       882b6b31ea55 ACPI / device_sysfs: Avoid OF modalias creation for removed device
       b3a0dfcfdd64 tracing/perf: Use strndup_user() instead of buggy open-coded version
       054dec51d4e6 tracing: Do not free iter->trace in fail path of tracing_open_pipe()
       9031822970ed tracing: Use strncpy instead of memcpy for string keys in hist triggers
       9367b21da22c CIFS: Fix read after write for files with read caching
       db6a6106224d CIFS: Do not reset lease state to NONE on lease break
       aef1cf600f41 crypto: arm64/aes-ccm - fix bugs in non-NEON fallback routine
       134135d884be crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
       6779d6bdf611 crypto: x86/morus - fix handling chunked inputs and MAY_SLEEP
       2dc6214860a1 crypto: x86/aesni-gcm - fix crash on empty plaintext
       a6e83e8b0777 crypto: x86/aegis - fix handling chunked inputs and MAY_SLEEP
       f62b08c81429 crypto: testmgr - skip crc32c context test for ahash algorithms
       817cbacff744 crypto: skcipher - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
       bc647ef1085e crypto: pcbc - remove bogus memcpy()s with src == dest
       9fb0d7b8f9c2 crypto: morus - fix handling chunked inputs
       76bc71692818 crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
       67a69738546d crypto: arm64/crct10dif - revert to C code for short inputs
       e1369ad2e0fc crypto: arm64/aes-neonbs - fix returning final keystream block
       7807003aab85 crypto: arm/crct10dif - revert to C code for short inputs
       f54fbb0e595b crypto: aegis - fix handling chunked inputs
       1e1f858caf7d crypto: aead - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
       c81bf050b880 fix cgroup_do_mount() handling of failure exits
       638f4fb4ec67 libnvdimm: Fix altmap reservation size calculation
       5ebf4aa4cf6b libnvdimm/pmem: Honor force_raw for legacy pmem regions
       8f42d7ac37af libnvdimm, pfn: Fix over-trim in trim_pfn_device()
       68ab49b299fb libnvdimm/label: Clear 'updating' flag after label-set update
       063d65ab9fdd nfit/ars: Attempt short-ARS even in the no_init_ars case
       387b9f01ac16 nfit/ars: Attempt a short-ARS whenever the ARS state is idle at boot
       b4a1581c801d acpi/nfit: Fix bus command validation
       0c27d62e5752 nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
       fd8e9cd85f26 stm class: Prevent division by zero
       dd1250b50c61 tmpfs: fix uninitialized return value in shmem_link
       f4cadb1ec900 selftests: fib_tests: sleep after changing carrier. again.
       7d856eb21fd5 net: set static variable an initial value in atl2_probe()
       193e19cdf7a0 bnxt_en: Wait longer for the firmware message response to complete.
       36ca3daa9b6a bnxt_en: Fix typo in firmware message timeout logic.
       aae48df6d81b nfp: bpf: fix ALU32 high bits clearance bug
       9fbe31fda762 nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K
       a58be12de08d net: thunderx: add nicvf_send_msg_to_pf result check for set_rx_mode_task
       76320607b755 net: thunderx: make CFG_DONE message to run through generic send-ack sequence
       6d0ebfc3fd3c bpf, lpm: fix lookup bug in map_delete_elem
       4e9c4ca54607 mac80211_hwsim: propagate genlmsg_reply return code
       ce8e30135705 phonet: fix building with clang
       92f628f3c945 ARCv2: don't assume core 0x54 has dual issue
       1faac2e0838b ARCv2: support manual regfile save on interrupts
       53fc181c111c ARC: uacces: remove lp_start, lp_end from clobber list
       515122c2d88a ARCv2: lib: memcpy: fix doing prefetchw outside of buffer
       b1ba6184493e ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN
       a7bc4915f286 tmpfs: fix link accounting when a tmpfile is linked in
       5beffa8382a9 mm: handle lru_add_drain_all for UP properly
       7bd326b49004 net: marvell: mvneta: fix DMA debug warning
       70e79b53dd95 arm64: Relax GIC version check during early boot
       e3ca5da971e0 ARM: dts: armada-xp: fix Armada XP boards NAND description
       2ac1b780dae0 qed: Fix iWARP syn packet mac address validation.
       9e1395d75177 qed: Fix iWARP buffer size provided for syn packet processing.
       5db253fa68bf ASoC: topology: free created components in tplg load error
       31983c568574 mailbox: bcm-flexrm-mailbox: Fix FlexRM ring flush timeout issue
       98b9e4e542eb net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
       d19e6c11ca1f qmi_wwan: apply SET_DTR quirk to Sierra WP7607
       59e3fdbb9d45 pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
       63c87ecf5134 net: dsa: bcm_sf2: Do not assume DSA master supports WoL
       a2e5d18914c1 net: systemport: Fix reception of BPDUs
       8d33e97da9c5 scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
       1c976b2c9f19 keys: Fix dependency loop between construction record and auth key
       590d6228f163 assoc_array: Fix shortcut creation
       5aa6e4f891a2 af_key: unconditionally clone on broadcast
       8cae27e41068 bpf: fix lockdep false positive in stackmap
       c16b543d92ee bpf: only adjust gso_size on bytestream protocols
       908e6fda5d7d ARM: 8824/1: fix a migrating irq bug when hotplug cpu
       d6fb8e0d9e7d esp: Skip TX bytes accounting when sending from a request socket
       2dd0beec5a84 clk: sunxi: A31: Fix wrong AHB gate number
       48db12b60b5b kallsyms: Handle too long symbols in kallsyms.c
       882dbe3d5c03 clk: sunxi-ng: v3s: Fix TCON reset de-assert bit
       1ab0225d6786 Input: st-keyscan - fix potential zalloc NULL dereference
       8a6ef92721b7 auxdisplay: ht16k33: fix potential user-after-free on module unload
       53f4d6948b35 i2c: bcm2835: Clear current buffer pointers and counts after a transfer
       60bc9292260f i2c: cadence: Fix the hold bit setting
       e6e2c6c26a58 net: hns: Fix object reference leaks in hns_dsaf_roce_reset()
       bf6be978fece mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs
       7f72a70062d7 x86/CPU: Add Icelake model number
       4342d099969c net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend()
       6093401c933b scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd
       09f4a1b6edf1 Revert "mm: use early_pfn_to_nid in page_ext_init"
       7b9dd6a4976b mm/gup: fix gup_pmd_range() for dax
       3cd584b00e50 NFS: Don't use page_file_mapping after removing the page
       7d8cf3eb1dc7 xprtrdma: Make sure Send CQ is allocated on an existing compvec
       5c64b19db5ce floppy: check_events callback should not return a negative number
       1cae395dd7c0 ipvs: fix dependency on nf_defrag_ipv6
       d05d4feda816 blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue
       0af0889613a8 netfilter: compat: initialize all fields in xt_init
       f2883b8eb0a9 mac80211: Fix Tx aggregation session tear down with ITXQs
       665cb8ebf0f3 mac80211: call drv_ibss_join() on restart
       0a1d76449997 Input: matrix_keypad - use flush_delayed_work()
       375152e09de2 Input: ps2-gpio - flush TX work when closing port
       b15599627bd0 Input: cap11xx - switch to using set_brightness_blocking()
       a1e0fb446a4b ARM: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug
       7a587d77b211 ASoC: samsung: Prevent clk_get_rate() calls in atomic context
       bf74076b7dd3 KVM: arm64: Forbid kprobing of the VHE world-switch code
       d74df61de605 arm/arm64: KVM: Don't panic on failure to properly reset system registers
       58d6ec80a286 arm/arm64: KVM: Allow a VCPU to fully reset itself
       c05c5a6e1f0e KVM: arm/arm64: Reset the VCPU without preemption and vcpu state loaded
       ba274486de32 ASoC: dapm: fix out-of-bounds accesses to DAPM lookup tables
       a3d8ea1f2555 ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be uninitialized
       237e6c308062 Input: pwm-vibra - stop regulator after disabling pwm, not before
       6a48d09a77a1 Input: pwm-vibra - prevent unbalanced regulator
       fcae9decbc8f s390/dasd: fix using offset into zero size array error
       f98a25dc02b7 KVM: arm/arm64: vgic: Make vgic_dist->lpi_list_lock a raw_spinlock
       74b6b1e49d06 gpu: ipu-v3: Fix CSI offsets for imx53
       1c0723cba9a9 drm/imx: imx-ldb: add missing of_node_puts
       321e0fbdae09 gpu: ipu-v3: Fix i.MX51 CSI control registers offset
       f0e52962b9f2 drm/imx: ignore plane updates on disabled crtcs
       38fc637ca52e crypto: rockchip - update new iv to device in multiple operations
       5d89757429b3 crypto: rockchip - fix scatterlist nents error
       2365ae3a03c9 crypto: ahash - fix another early termination in hash walk
       512b0d76c2c9 crypto: cfb - remove bogus memcpy() with src == dest
       66b1348939de crypto: cfb - add missing 'chunksize' property
       40c76d76e11f crypto: ccree - don't copy zero size ciphertext
       2ff9501c582f crypto: ccree - fix free of unallocated mlli buffer
       ba3c72efd404 crypto: caam - fixed handling of sg list
       5d9cee322faf crypto: ccree - fix missing break in switch statement
       e0ea8deb72db stm class: Fix an endless loop in channel allocation
       95b10e2f6a61 mei: bus: move hw module get/put to probe/release
       1af8d0304685 iio: adc: exynos-adc: Fix NULL pointer exception on unbind
       513052a27dab ASoC: codecs: pcm186x: Fix energysense SLEEP bit
       d5f37b5d7009 ASoC: codecs: pcm186x: fix wrong usage of DECLARE_TLV_DB_SCALE()
       da21c5d9bacf ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
       b3e4f70db4f3 9p/net: fix memory leak in p9_client_create
       4b84eeface08 9p: use inode->i_lock to protect i_size_write() under 32-bit
       4441736404a3 media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
       3f7de80a22c6 perf/core: Fix impossible ring-buffer sizes warning
    
    Signed-off-by: Bruce Ashfield <bruce.ashfield at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit d761b2ae95a84f353c4132bc9b0506c4a4b4c73f
Author: Bruce Ashfield <bruce.ashfield at gmail.com>
Date:   Tue Apr 9 11:37:53 2019 -0400

    linux-yocto-tiny/4.18: point KBRANCH to 4.18
    
    The other kernel versions had the -tiny KBRANCH typo of 4.15
    fixed, but 4.18 was missed. So we update the kbranch to the right
    version for 4.18 as well.
    
    [YOCTO #13247]
    
    Signed-off-by: Bruce Ashfield <bruce.ashfield at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit c4bb2bdbe6f74141f30171dabab49fa5cd45371f
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Wed Apr 3 18:02:41 2019 +0100

    core-image-sato-sdk-ptest: Fix free space issues causing test failures
    
    Some tests such as strace-ptest require more than the current 500MB of free
    space. Increase the amount available, staying under the 4GB limit. We have more
    flexibility now since we shrank kernel-devsrc and the comments are out of date
    due to that.
    
    This should improve the strace-ptest results and the util-linux ones since
    those sort after strace and also hit the space issues as strace-ptest didn't
    clean up after itself when failing.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 2861b339f4539ec4042cc7aa5351361246f4921f
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Wed Jan 30 22:00:59 2019 +0000

    core-image-sato-sdk-ptest: Increase qemu memory to 1GB
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit dc15a21cbb3090dfb56e78f622486f843be4f54a
Author: Yeoh Ee Peng <ee.peng.yeoh at intel.com>
Date:   Tue Apr 2 14:38:03 2019 +0800

    resulttool: Enable report for single result file
    
    Current validation check function inside resulttool disallow the
    report for single result file although the underlying library
    was able to handle both directory and file as source input to report.
    Removed the validation check as it was no longer needed and to
    enable report for single result file.
    
    Signed-off-by: Yeoh Ee Peng <ee.peng.yeoh at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit cf787f8eab1c85dbafb5e74bf12eb4ddb5c5cbf7
Author: Kai Kang <kai.kang at windriver.com>
Date:   Tue Apr 2 03:44:26 2019 -0400

    avahi: fix CVE-2017-6519
    
    Backport patch to fix CVE-2017-6519.
    
    CVE: CVE-2017-6519
    
    Signed-off-by: Kai Kang <kai.kang at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit fbb34412641afa0fa7327cf599b82564ca375217
Author: Ross Burton <ross.burton at intel.com>
Date:   Wed Mar 27 13:40:38 2019 +0000

    libexif: fix CVE-2016-6328 and CVE-2018-20030
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 932762be3999906c2e8a0ed9236f1f01d9e2ea93
Author: Ross Burton <ross.burton at intel.com>
Date:   Mon Mar 25 23:21:08 2019 +0000

    libsndfile1: fix CVE-2019-3832
    
    The previous fix for CVE-2018-19758 wasn't complete, so backport another patch
    to solve it properly.
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit e6b272b7c0d10f49dde71dd9714aaa0fb6aec091
Author: Ross Burton <ross.burton at intel.com>
Date:   Tue Mar 5 16:29:59 2019 +0000

    libsndfile1: update security patches
    
    Remove CVE-2017-14245-14246.patch, fix rejected upstream as it doesn't solve the
    underlying issue.
    
    Instead 0001-a-ulaw-fix-multiple-buffer-overflows-432 also solves CVE-2017-14245
    and CVE-2017-14246 properly.
    
    Add patches for CVE-2017-12562 and CVE-2018-19758.
    
    Refresh CVE-2018-13139.patch.
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 883726c93b4e6d64eec942e2fc9c937f7092adb0
Author: Ross Burton <ross.burton at intel.com>
Date:   Mon Mar 25 23:21:07 2019 +0000

    bluez5: fix CVE-2018-10910
    
    Fix this CVE (Bluetooth discoverability may be enabled with no agents to handle
    requests) by backporting a number of patches from upstream.
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 383425fb86fdeccad88080369078d9ac988bab2f
Author: David Frey <dpfrey at gmail.com>
Date:   Thu Jan 10 11:23:52 2019 -0800

    bluez5: Fix status subcommand of init script
    
    Update the bluez5 init script to resolve an issue where the status
    subcommand would exit without printing any message if bluez was not
    running. The early exit was caused by the fact that the init script has
    "set -e". When "pidof ${DAEMON} >/dev/null" is executed, the script
    terminates immediately if bluez isn't running because pidof returns a
    non-zero result. The fixed version does not suffer from this issue and
    makes use of the "status" function from the functions library.
    
    Signed-off-by: David Frey <dpfrey at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 0ae5ff4c0adc5fd727e5c5c47aba8c7859d60a73
Author: Peter A. Bigot <pab at pabigot.com>
Date:   Tue Nov 13 12:06:20 2018 -0600

    bluez5: add mesh dependency on ell
    
    Introduced at or before 5.50.
    
    Signed-off-by: Peter A. Bigot <pab at pabigot.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit eae5caaf050f54a065e2654a60f55fda2c3afd95
Author: Taras Kondratiuk <takondra at cisco.com>
Date:   Thu Mar 21 17:56:59 2019 -0700

    devtool: prevent starting git gc in background
    
    Devtool creates a git repository for extracted sources in a temporary
    directory and then moves it to a final destination after patching is
    done. Unfortunately devtool is not aware that some of its git operations
    may have caused git garbage collector to start in background. If timing
    is just right a repository move fails because GC is removing git objects
    while they are being moved.
    
    The issue was hit on Krogoth release, but the code that moves created
    git repository is still the same.
    
    Disable gc.autodetach to make GC run synchronously and block git until
    it is done.
    
    Traceback (most recent call last):
      File "<snip>/openembedded-core/scripts/devtool", line 342, in <module>
        ret = main()
      File "<snip>/openembedded-core/scripts/devtool", line 329, in main
        ret = args.func(args, config, basepath, workspace)
      File "<snip>/openembedded-core/scripts/lib/devtool/standard.py", line 352, in extract
        initial_rev = _extract_source(srctree, args.keep_temp, args.branch, False, rd)
      File "<snip>/openembedded-core/scripts/lib/devtool/standard.py", line 644, in _extract_source
        shutil.move(srcsubdir, srctree)
      File "/usr/lib/python2.7/shutil.py", line 299, in move
        copytree(src, real_dst, symlinks=True)
      File "/usr/lib/python2.7/shutil.py", line 208, in copytree
        raise Error, errors
    Error: [('/tmp/devtool5RXkuX/workdir/grpc-1.2.5/.git/objects/5e', '<snip>/build/grpc/grpc_src/.git/objects/5e', "[Errno 2] No such file or directory: '/tmp/devtool5RXkuX/workdir/grpc-1.2.5/.git/objects/5e'"), ('/tmp/devtool5RXkuX/workdir/grpc-1.2.5/.git/objects/57', '<snip>/build/grpc/grpc_src/.git/objects/57', "[Errno 2] No such file or directory: '/tmp/devtool5RXkuX/workdir/grpc-1.2.5/.git/objects/57'"), many git objects ... ]
    
    Signed-off-by: Taras Kondratiuk <takondra at cisco.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 65042ebf07afad2922dcdfceb6e8931c05255649
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 21 12:31:52 2019 +0000

    python: fix CVE-2018-14647 in python-native too
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 12df5392afb8446507bb73f4d33ee42e06a17b82
Author: Changqing Li <changqing.li at windriver.com>
Date:   Thu Oct 25 16:59:28 2018 +0800

    python-native: fix one do_populate_sysroot warning
    
    Fix below warning:
    WARNING: Skipping RPATH /usr/lib64 as is a standard search path for
    work/x86_64-linux/python-native/2.7.15-r1.1/recipe-sysroot-native/
    usr/lib/python2.7/lib-dynload/_bsddb.so
    
    setup.py will check db.h under include_dirs, for native build,
    /usr/lib64 will be insert to postion 0 of include_dirs, so
    it's priority is higher then our sysroot, cause db.h sysroot
    is ignored, and rpath set to /usr/lib64. and this cause warning
    when do_populate_sysroot. use append to fix it.
    
    Signed-off-by: Changqing Li <changqing.li at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit ca415c4250e32e9430a13b9edf7b308637ce597f
Author: Aditya Tayade <Aditya.Tayade at kpit.com>
Date:   Mon Mar 25 15:27:11 2019 +0000

    run-ptest: use error handling for useradd and userdel
    
    Error handling in shell scripts is too easy to forget and
    get wrong. It is possible to check every external command
    for return values but it is better to use a generic setting
    which halts execution of the script on any failures.
    
    Upstream-Status: Pending
    Signed-off-by: Aditya Tayade <Aditya.Tayade at kpit.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 9088a78e78f70721b2aa6bdbdf055551d5bd0265
Author: Ross Burton <ross.burton at intel.com>
Date:   Tue Mar 26 12:02:27 2019 +0000

    zlib: clean up ptest
    
    Instead of patching and sedding the makefile, just install test/example and
    execute it in run-ptest.  example is the bulk of the test suite, as minimal as
    it is.
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 9535dc7c6dc185defac2cad6a2733621c42420b7
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 14 12:49:18 2019 +0000

    zlib: cleanup
    
    Drop remove.ldconfig.call.patch, as it's easier to just set LDCONFIG=true.
    
    Pass uname=GNU via the documented configure option instead of undocumented
    environment variable.
    
    Rename zlib-1.2.11/ to just zlib/ as we don't ship multiple versions.
    
    Send ldflags-tests.patch upstream and update Upstream-Status.
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit e041812a84025a9ff9121efabc3805ff2dfe6375
Author: Yann CARDAILLAC <yann.cardaillac at smile.fr>
Date:   Mon Mar 11 13:08:37 2019 +0100

    correct do_patch for kernel bbappend in sdk
    
    do_patch rule of SDK's workspace/appends/linux-*.bbhappend may fail if script are not written in Python
    
    that was the case with Phytec's BSP, the fix was to replace the do_patch rule with :
    
    do_patch[noexec]="1" when the file was generated in scripts/lib/devtool/standard.py
    
    Signed-off-by: Yann CARDAILLAC <yann.cardaillac at smile.fr>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit aa4d86ff55b01d150f49b5b4517b0c661a10c36b
Author: Robert Yang <liezhi.yang at windriver.com>
Date:   Mon Mar 11 18:16:55 2019 +0800

    oe-init-build-env: Error out when failed to locate cwd
    
    Ubuntu's /bin/sh symlinks to /bin/dash by default, so
    subprocess.check_call(oe-init-build-env, cwd=builddir) would be failed since
    pwd is builddir, and there is no $builddir/oe-init-build-env, this would
    lead to other confusing errors, check and error it out earlier to make it
    easier to locate the problem.
    
    We don't meet the problem when manually run ". oe-init-build-env" is because
    Ubuntu's default login shell is bash, but subprocess.check_call() doesn't
    respect to login shell, so the error only happens in situations like
    subprocess.check_call().
    
    And also print errors to stderr as oe-buildenv-internal does.
    
    Signed-off-by: Robert Yang <liezhi.yang at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit e7721ee7e7942570ebab793f5870d7a021154a92
Author: Armin Kuster <akuster808 at gmail.com>
Date:   Fri Mar 8 06:37:26 2019 -0800

    python: time.tzset missing
    
    import time
    time.tzset()
    Traceback (most recent call last):
      File "<stdin>", line 1, in <module>
    AttributeError: module 'time' has no attribute 'tzset'
    
    enable tzset in both python versions
    
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    [Fix up for Thud context ie python3_3.5.6]
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit aa5c0d159c5016c6517f42a0a1738188b5646517
Author: Armin Kuster <akuster808 at gmail.com>
Date:   Tue Mar 26 09:13:11 2019 -0700

    timezone: update to 2019a
    
    The 2019a release of the tz code and data is available. It reflects the following changes, which were either circulated on the tz mailing list or are relatively minor technical or administrative changes:
    
      Briefly:
        Palestine "springs forward" on 2019-03-30 instead of 2019-03-23.
        Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at 02:00.
    
      Changes to past and future timestamps
    
        Palestine will not start DST until 2019-03-30, instead of 2019-03-23 as
        previously predicted.  Adjust our prediction by guessing that spring
        transitions will be between 24 and 30 March, which matches recent practice
        since 2016.  (Thanks to Even Scharning and Tim Parenti.)
    
        Metlakatla ended its observance of Pacific standard time,
        rejoining Alaska Time, on 2019-01-20 at 02:00.  (Thanks to Ryan
        Stanley and Tim Parenti.)
    
      Changes to past timestamps
    
        Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25).
        (Thanks to Alois Treindl and Isaac Starkman.)
    
      Changes to time zone abbreviations
    
        Etc/UCT is now a backward-compatibility link to Etc/UTC, instead
        of being a separate zone that generates the abbreviation "UCT",
        which nowadays is typically a typo.  (Problem reported by Isiah
        Meadows.)
    
      Changes to code
    
        zic now has an -r option to limit the time range of output data.
        For example, 'zic -r @1000000000' limits the output data to
        timestamps starting 1000000000 seconds after the Epoch.
        This helps shrink output size and can be useful for applications
        not needing the full timestamp history, such as TZDIST truncation;
        see Internet RFC 8536 section 5.1.  (Inspired by a feature request
        from Christopher Wong, helped along by bug reports from Wong and
        from Tim Parenti.)
    
      Changes to documentation
    
        Mention Internet RFC 8536 (February 2019), which documents TZif.
    
        tz-link.html now cites tzdata-meta
        <https://tzdata-meta.timtimeonline.com/>.
    
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit a053af9d2bbd1f7cf2d05100af208c359190eb97
Author: Armin Kuster <akuster808 at gmail.com>
Date:   Mon Feb 4 16:01:27 2019 -0800

    timezone: refactor to simplify maint
    
    move tzcode and tzdata-native into new dir
    
    Updates are now limited to the common include file.
    
    [v2]
    Fix UMMARY typ0 in timezone.inc
    
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    [packages stayed the same, align for future updates]
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit a3dd494337bbdf20d7bff651d533f944f270766e
Author: Chen Qi <Qi.Chen at windriver.com>
Date:   Wed Mar 27 17:25:56 2019 +0800

    openssl: follow OE's rule for specifying CVE ID
    
    Signed-off-by: Chen Qi <Qi.Chen at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 3aad3c98cf8af4929bc416bbda55ccc71879f2f2
Author: Otavio Salvador <otavio at ossystems.com.br>
Date:   Tue Mar 19 13:36:52 2019 -0300

    openssl10: Upgrade 1.0.2q -> 1.0.2r
    
    Signed-off-by: Otavio Salvador <otavio at ossystems.com.br>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 5f15e883502e6f737f7cdc577f6c104e8fbeeaa9
Author: Otavio Salvador <otavio at ossystems.com.br>
Date:   Tue Mar 19 13:36:51 2019 -0300

    openssl: Upgrade 1.1.1a -> 1.1.1b
    
    License-Update: copyright years updated
    Signed-off-by: Otavio Salvador <otavio at ossystems.com.br>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit d8fc8bbab4bf5c34d316cc884e83fc6e66d57954
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Mar 14 20:34:04 2019 +0000

    openssl: fix CVE-2019-1543
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 6998a3d7d0ecd27014053fe40c9fb4e0ec970880
Author: Ross Burton <ross.burton at intel.com>
Date:   Thu Nov 22 14:05:16 2018 +0000

    openssl: don't disable the AFALG engine based on host kernel
    
    Whether the AFALG engine (use of hardware crypto via AF_ALG) is enable or
    disable depends on whether the host kernel is 4.1 or above, which has no bearing
    on whether the target system supports it.
    
    Remove the complicated logic and simply enable/disable as requested.
    
    Signed-off-by: Ross Burton <ross.burton at intel.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 89dc69464b9ec1c2cac5d2420dfe6928da50d384
Author: Ovidiu Panait <ovidiu.panait at windriver.com>
Date:   Mon Mar 4 13:38:45 2019 +0200

    openssl: Add cryptodev-linux PACKAGECONFIG
    
    The old bsd cryptodev engine was removed in
    https://github.com/openssl/openssl/pull/3699
    and the new one added in:
    https://github.com/openssl/openssl/pull/3744
    
    It can be enabled by configuring with "enable-devcryptoeng".
    
    Signed-off-by: Ovidiu Panait <ovidiu.panait at windriver.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit ba193703ccda16c0ed834248d8c9fda0d6ad2302
Author: Alexander Kanavin <alex.kanavin at gmail.com>
Date:   Wed Feb 27 15:36:48 2019 +0100

    openssl: drop Python 2.x dependency in -ptest
    
    It is only needed by 95-test_external_pyca_data which is
    actually skipped on the target.
    
    [YOCTO #13204]
    
    Signed-off-by: Alexander Kanavin <alex.kanavin at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit 87728d921cfa5997b454ebc5074d2c1aee2def89
Author: Richard Purdie <richard.purdie at linuxfoundation.org>
Date:   Wed Feb 27 00:29:46 2019 +0000

    openssl: Fix ptest test output translation
    
    openssl-ptest was recording now results, despite most tests passing. Fix
    so that the successes/skips/failures are reported correctly.
    
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

commit dc2238b268d48b4e62a795a4f6b257efc298e2b2
Author: Khem Raj <raj.khem at gmail.com>
Date:   Wed Mar 13 15:25:58 2019 +0000

    glibc: Drop upstream rejected patches
    
    These patches were applied, hoping that they will eventually be accepted
    upstream but they have been rejected, I think its best that they are
    dropped so we can avoid novel unintended behaviours that no other
    distros will be seeing
    
    (From OE-Core rev:54550aa42378ce4b215bccbfd95e5e650b0d2efa)
    
    Signed-off-by: Jonathan Rajotte <jonathan.rajotte-julien at efficios.com>
    Signed-off-by: Khem Raj <raj.khem at gmail.com>
    Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
    Signed-off-by: Armin Kuster <akuster808 at gmail.com>

-----------------------------------------------------------------------

Summary of changes:
 meta/classes/image_types.bbclass                   |   5 +-
 meta/classes/testimage.bbclass                     |   3 +-
 meta/lib/oeqa/core/runner.py                       |  34 +-
 meta/lib/oeqa/core/target/ssh.py                   |   4 +-
 meta/lib/oeqa/core/utils/concurrencytest.py        |  27 +-
 meta/lib/oeqa/sdk/case.py                          |   2 +-
 meta/lib/oeqa/sdk/utils/sdkbuildproject.py         |   3 +-
 meta/lib/oeqa/targetcontrol.py                     |   2 +-
 meta/lib/oeqa/utils/qemurunner.py                  |   1 +
 meta/recipes-connectivity/avahi/avahi.inc          |   4 +-
 .../avahi/files/fix-CVE-2017-6519.patch            |  48 ++
 meta/recipes-connectivity/bluez5/bluez5.inc        |   3 +-
 .../bluez5/bluez5/CVE-2018-10910.patch             | 705 +++++++++++++++++++++
 meta/recipes-connectivity/bluez5/bluez5/init       |  12 +-
 .../openssl/openssl/CVE-2019-1543.patch            |  69 ++
 .../openssl/openssl/afalg.patch                    |  31 +
 .../recipes-connectivity/openssl/openssl/run-ptest |   2 +-
 .../{openssl10_1.0.2q.bb => openssl10_1.0.2r.bb}   |   4 +-
 .../{openssl_1.1.1a.bb => openssl_1.1.1b.bb}       |  16 +-
 meta/recipes-core/glib-2.0/glib-2.0/run-ptest      |   1 +
 ...26-reset-dl_load_write_lock-after-forking.patch |  37 --
 ...so-lock-before-switching-to-malloc_atfork.patch |  65 --
 meta/recipes-core/glibc/glibc_2.28.bb              |   2 -
 .../zlib/zlib-1.2.11/Makefile-runtests.patch       |  38 --
 .../zlib/zlib-1.2.11/remove.ldconfig.call.patch    |  21 -
 meta/recipes-core/zlib/zlib-1.2.11/run-ptest       |   2 -
 .../zlib/{zlib-1.2.11 => zlib}/ldflags-tests.patch |   4 +-
 meta/recipes-core/zlib/zlib/run-ptest              |   7 +
 meta/recipes-core/zlib/zlib_1.2.11.bb              |  19 +-
 .../recipes-devtools/e2fsprogs/e2fsprogs/run-ptest |   2 +-
 ...pkg-make-index-use-ctime-instead-of-mtime.patch |  59 ++
 .../opkg-utils/opkg-utils_0.3.6.bb                 |   1 +
 meta/recipes-devtools/pseudo/pseudo_git.bb         |   2 +-
 ...ative-fix-one-do_populate_sysroot-warning.patch |  39 ++
 .../python/python-native_2.7.15.bb                 |   2 +
 meta/recipes-devtools/python/python3_3.5.6.bb      |   1 +
 meta/recipes-devtools/python/python_2.7.15.bb      |   2 +-
 meta/recipes-devtools/ruby/ruby.inc                |   6 +-
 .../ruby/ruby/CVE-2018-1000073.patch               |  34 -
 meta/recipes-devtools/ruby/ruby/run-ptest          |  13 +
 meta/recipes-devtools/ruby/ruby_2.5.3.bb           |  12 +-
 meta/recipes-extended/timezone/timezone.inc        |  18 +
 meta/recipes-extended/timezone/tzcode-native.bb    |  17 +
 .../{tzdata/tzdata_2018i.bb => timezone/tzdata.bb} |  12 +-
 .../recipes-extended/tzcode/tzcode-native_2018i.bb |  30 -
 .../gnome/adwaita-icon-theme_3.28.0.bb             |  10 +-
 meta/recipes-kernel/linux/linux-yocto-rt_4.18.bb   |   6 +-
 meta/recipes-kernel/linux/linux-yocto-tiny_4.18.bb |  10 +-
 meta/recipes-kernel/linux/linux-yocto_4.18.bb      |  20 +-
 ...-a-ulaw-fix-multiple-buffer-overflows-432.patch |  18 +-
 .../libsndfile/libsndfile1/CVE-2017-12562.patch    |  96 +++
 .../libsndfile1/CVE-2017-14245-14246.patch         | 121 ----
 .../libsndfile/libsndfile1/CVE-2018-13139.patch    |  30 +-
 .../libsndfile/libsndfile1/CVE-2018-19758.patch    |  34 +
 .../libsndfile/libsndfile1/CVE-2019-3832.patch     |  37 ++
 .../libsndfile/libsndfile1_1.0.28.bb               |   4 +-
 .../images/core-image-sato-sdk-ptest.bb            |  10 +-
 .../libexif/libexif/CVE-2016-6328.patch            |  64 ++
 .../libexif/libexif/CVE-2018-20030.patch           | 115 ++++
 meta/recipes-support/libexif/libexif_0.6.21.bb     |   4 +-
 oe-init-build-env                                  |   7 +-
 scripts/lib/devtool/__init__.py                    |   1 +
 scripts/lib/devtool/standard.py                    |   4 +-
 scripts/lib/recipetool/create.py                   |   2 +-
 scripts/lib/recipetool/create_npm.py               |   1 +
 scripts/lib/resulttool/log.py                      |  78 +++
 scripts/lib/resulttool/manualexecution.py          | 179 ++++--
 scripts/lib/resulttool/merge.py                    |   8 +-
 scripts/lib/resulttool/regression.py               |   6 +-
 scripts/lib/resulttool/report.py                   |   2 +-
 scripts/lib/resulttool/resultutils.py              |  39 +-
 scripts/lib/resulttool/store.py                    |   4 +-
 scripts/lib/wic/plugins/source/bootimg-efi.py      |   6 +-
 scripts/resulttool                                 |  12 +-
 scripts/runqemu                                    |   6 +-
 scripts/wic                                        |   2 +-
 76 files changed, 1802 insertions(+), 555 deletions(-)
 create mode 100644 meta/recipes-connectivity/avahi/files/fix-CVE-2017-6519.patch
 create mode 100644 meta/recipes-connectivity/bluez5/bluez5/CVE-2018-10910.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2019-1543.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/afalg.patch
 rename meta/recipes-connectivity/openssl/{openssl10_1.0.2q.bb => openssl10_1.0.2r.bb} (98%)
 rename meta/recipes-connectivity/openssl/{openssl_1.1.1a.bb => openssl_1.1.1b.bb} (93%)
 delete mode 100644 meta/recipes-core/glibc/glibc/0026-reset-dl_load_write_lock-after-forking.patch
 delete mode 100644 meta/recipes-core/glibc/glibc/0027-Acquire-ld.so-lock-before-switching-to-malloc_atfork.patch
 delete mode 100644 meta/recipes-core/zlib/zlib-1.2.11/Makefile-runtests.patch
 delete mode 100644 meta/recipes-core/zlib/zlib-1.2.11/remove.ldconfig.call.patch
 delete mode 100644 meta/recipes-core/zlib/zlib-1.2.11/run-ptest
 rename meta/recipes-core/zlib/{zlib-1.2.11 => zlib}/ldflags-tests.patch (91%)
 create mode 100644 meta/recipes-core/zlib/zlib/run-ptest
 create mode 100644 meta/recipes-devtools/opkg-utils/opkg-utils/0001-opkg-make-index-use-ctime-instead-of-mtime.patch
 create mode 100644 meta/recipes-devtools/python/python-native/0001-python-native-fix-one-do_populate_sysroot-warning.patch
 delete mode 100644 meta/recipes-devtools/ruby/ruby/CVE-2018-1000073.patch
 create mode 100644 meta/recipes-devtools/ruby/ruby/run-ptest
 create mode 100644 meta/recipes-extended/timezone/timezone.inc
 create mode 100644 meta/recipes-extended/timezone/tzcode-native.bb
 rename meta/recipes-extended/{tzdata/tzdata_2018i.bb => timezone/tzdata.bb} (94%)
 delete mode 100644 meta/recipes-extended/tzcode/tzcode-native_2018i.bb
 create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2017-12562.patch
 delete mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2017-14245-14246.patch
 create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2018-19758.patch
 create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2019-3832.patch
 create mode 100644 meta/recipes-support/libexif/libexif/CVE-2016-6328.patch
 create mode 100644 meta/recipes-support/libexif/libexif/CVE-2018-20030.patch
 create mode 100644 scripts/lib/resulttool/log.py


hooks/post-receive
-- 



More information about the yocto-security mailing list