From: Pascal Bach <pascal.bach@...> The libseccomp patch was a backport and is included in the current release. The GOBUILDFLAGS patch is replaced by explicitly setting

On Sun, Aug 14, 2022 at 11:12 PM Bruce Ashfield via lists.yoctoproject.org <bruce.ashfield=gmail.com@...> wrote: after updating my oe-core and other layers today, I'm seeing a

Upgrade ceph to latest v15.x. Minor upgrade containing fix for CVE-2022-0670. Signed-off-by: Sakib Sajal <sakib.sajal@...> --- recipes-extended/ceph/{ceph_15.2.15.bb => ceph_15.2.17.bb} |

If anyone is a lxc user, I just worked through a sizable update from 4.x to 5.x. https://git.yoctoproject.org/meta-virtualization/commit/?h=master-next&id=67c13e9ec856ed3e9af0febad03d29581dd1f0ac In

merged. Bruce In message: [meta-virtualization] [PATCH] dynamic-layers/raspberrypi: drop linux-yocto 5.10 bbappend on 12/08/2022 Martin Jansa wrote:

* the inc file was dropped in: 58f5ac6 kernel: drop 5.10 .inc but this .bbappend still causes parsing error, because 5.10 recipes were removed from oe-core ---

Ceph-volume does not properly control key sizes. Cherry-pick from github.com/ceph/ceph.git. Signed-off-by: Joe Slater <joe.slater@...> --- .../ceph/ceph/CVE-2021-3979.patch |

No, you didn't miss it. I'll send it in an hour or so. Joe

In order to merge this to kirkstone, it needs to be on master first. So there should be two sends of the patch, one for master and then another for kirkstone (if it can't be cherry picked). If you

What about master ? Does it have the same issue ? Bruce -- - Thou shalt not follow the NULL pointer, for chaos and madness await thee at its end - "Use the force Harry" - Gandalf, Star Trek II

Ceph-volume does not properly control key sizes. Cherry-pick from github.com/ceph/ceph.git. Signed-off-by: Joe Slater <joe.slater@...> --- .../ceph/ceph/CVE-2021-3979.patch |

I realize that. No, I'm suggesting the smallest footprint change, but that is more for the other recipes, versus the single use of it in this kubernetes recipe. That comment was more for the k3s

Bruce Ashfield <bruce.ashfield@...> escreveu no dia terça, 9/08/2022 à(s) 18:07: kubernetes is installing all binaries files to ${D}/${bindir}: install -m 755 -D

That could very well be it. I'm really only interested in the BIN_PREFIX being set in those recipes. The smallest footprint change. So as the series currently stands, it isn't something I'll

Bruce Ashfield <bruce.ashfield@...> escreveu no dia terça, 9/08/2022 à(s) 16:05: right, maybe you don't see the QA because it will only shon for files installed in /bin when usrmerge is enabled. for

This will change the instalation path from "${exec_prefix}/local/bin" to "${bindir}", that in OE-core moves the binaries from the "/usr/local/bin" to the default "/usr/bin" path. Update the systemd

Signed-off-by: Jose Quaresma <jose.quaresma@...> --- recipes-containers/kubernetes/kubernetes_git.bb | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git

- Install the binaries in the default "/usr/bin" and not in "/bin" - The env BIN_PREFIX is there from the beginning but it is not defined, also fix a fatal QA errors installed-vs-shipped (only

- Install the binaries in the default "/usr/bin" and not in "/bin" - The env BIN_PREFIX is there from the beginning but it is not defined, also fix a fatal QA errors installed-vs-shipped (only