From patchwork Wed Sep 14 19:10:29 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 12858 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8FC7FC6FA82 for ; Wed, 14 Sep 2022 19:11:06 +0000 (UTC) Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.web08.1215.1663182656684649417 for ; Wed, 14 Sep 2022 12:10:57 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20210112.gappssmtp.com header.s=20210112 header.b=EqnldVft; spf=softfail (domain: sakoman.com, ip: 209.85.216.46, mailfrom: steve@sakoman.com) Received: by mail-pj1-f46.google.com with SMTP id o23so14238468pji.4 for ; Wed, 14 Sep 2022 12:10:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date; bh=wLTcUPV99ak5fcHCe3y0Nl+akjK88iNScgO+M/8qSL8=; b=EqnldVftJ7u7UhFKame8LtAnfOJ6vwsKF8+HQV+R1vvMxaY/oyObRIsEohFIlalIsn Ae4ZDsOSmCRtVKYsLkcriPfc1eNGc25MlVAcK3/tBT45htQ+JInxazN2P2tYJWcwQVcv evxGj+OXQ63Tlsz9tXT11DJSCUI8E7g5FY19xNSTgLOcTkCTwZQa8hR6xqdp03PJFj9N +mhMmlvX+WBY/+nojAMcodtG2TjXIWOK1gnxXlcnA1PUjyKx7wEesh1T3z/QuWYVz8ta C7VIyy6QRiUJmeVCgCLeA3TigD1GfUdKOdCFpNYjRv9HUra41l75EQruEFl2x07SpCZN OEUA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date; bh=wLTcUPV99ak5fcHCe3y0Nl+akjK88iNScgO+M/8qSL8=; b=K6RMUyPaZRsFf1iZ8ssiYxFSLKPRQtVEgG+v/tKnStra493QjHCXbb56Ooapm7MN/4 gaI6o2S5CavMDQEKOVc7+bcsurtlaTFBZxjSWs9S+KO8xS+/hZSVzQXdZx/PpnwiKcPU 6sRhLlg7S2MT0TBdfh/Z10HWnd1T1bPJuC2Hg9roWfafC0l43hgmGazbHjYBXSg6MjK7 +yMPvAHBDcdqcC08uvfswWsKPfU8b4cLp0AGdpvuMZjmY4gpW3NAEmY0GYNBAMke+5D3 Hg3uBxEZCI/WStYNLoRIstFsI9tWsoZmVZwikh3nZpoyR7JjO7q6hHlIvdapyig2w9GG TLUQ== X-Gm-Message-State: ACrzQf3SDCwBEwBXbMjYijtlWmsrkHF0vc3HWlhmCuXgUGk5A94Z8Q7U WERi7htVYZ1QYbYZi0AqxluKnTWZTYaVjhXM X-Google-Smtp-Source: AMsMyM5gS1mr7wSE3fkwf7BmyerMYWLo147rcOt9WICD7tSdvHpK5hSgSCFtFZEG6rDM46n3QpGUXQ== X-Received: by 2002:a17:902:7586:b0:172:d0de:7a3c with SMTP id j6-20020a170902758600b00172d0de7a3cmr484777pll.38.1663182655533; Wed, 14 Sep 2022 12:10:55 -0700 (PDT) Received: from hexa.router0800d9.com (dhcp-72-253-6-214.hawaiiantel.net. [72.253.6.214]) by smtp.gmail.com with ESMTPSA id w14-20020aa7954e000000b00535e950aa28sm10551156pfq.131.2022.09.14.12.10.54 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Sep 2022 12:10:54 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 1/5] systemd: Fix unwritable /var/lock when no sysvinit handling Date: Wed, 14 Sep 2022 09:10:29 -1000 Message-Id: X-Mailer: git-send-email 2.25.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Sep 2022 19:11:06 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/170669 From: "niko.mauno@vaisala.com" Commit 8089cefed8e83c0348037768c292058f1bcbbbe5 ("systemd: Add PACKAGECONFIG for sysvinit") decoupled enabling of systemd's sysvinit handling behavior behind a distinct PACKAGECONFIG feature. This new option affects among other things the installing of tmpfiles.d/legacy.conf, which is responsible for creating /run/lock directory, which is pointed to by /var/lock symlink provided by base-files package. In case the option is not enabled, then base-files provided /var/lock is a dangling symlink on resulting rootfs, causing problems with certain Linux userspace components that rely on existence of writable /var/lock directory. As an example: # fw_printenv Error opening lock file /var/lock/fw_printenv.lock Since Filesystem Hierarchy Standard Version 3.0 states in https://refspecs.linuxfoundation.org/FHS_3.0/fhs/ch05s09.html that Lock files should be stored within the /var/lock directory structure. Ensure the /run/lock directory is always created, so that lock files can be stored under /var/lock also when 'sysvinit' handling is disabled. (From OE-Core rev: 85e5ee2c35cf5778c3aefda45f526e8f6a511131) Signed-off-by: Niko Mauno Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman --- meta/recipes-core/systemd/systemd/00-create-volatile.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-core/systemd/systemd/00-create-volatile.conf b/meta/recipes-core/systemd/systemd/00-create-volatile.conf index 87cbe1e7d3..c4277221a2 100644 --- a/meta/recipes-core/systemd/systemd/00-create-volatile.conf +++ b/meta/recipes-core/systemd/systemd/00-create-volatile.conf @@ -3,5 +3,6 @@ # inside /var/log. +d /run/lock 1777 - - - d /var/volatile/log - - - - d /var/volatile/tmp 1777 - - From patchwork Wed Sep 14 19:10:30 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 12859 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 914ACC6FA8B for ; Wed, 14 Sep 2022 19:11:06 +0000 (UTC) Received: from mail-pj1-f44.google.com (mail-pj1-f44.google.com [209.85.216.44]) by mx.groups.io with SMTP id smtpd.web12.1130.1663182659180953945 for ; Wed, 14 Sep 2022 12:10:59 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20210112.gappssmtp.com header.s=20210112 header.b=1ZQpJ+4i; spf=softfail (domain: sakoman.com, ip: 209.85.216.44, mailfrom: steve@sakoman.com) Received: by mail-pj1-f44.google.com with SMTP id ge9so3993314pjb.1 for ; Wed, 14 Sep 2022 12:10:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date; bh=Is5clB+FjJBc2HVlc4JoDUmfDAN32Db0U9DgBy6TdKY=; b=1ZQpJ+4ibSjfF/Phf9AbQJQwXYxbYYi+lqEWYhZLKQNbvmTQ2tqdu73zVyhDyYgcd+ 1j0Xua4x8DDGsTkb1phzeXgkjMG0JSpEhixUfivEmCmaWTlUQNNVdMvi6Oi+okaBk/E7 nR3ZfUI1eT7Ktr5cbqBU5jegE7iNRzepoIthKyjdeBFua2TS+jPbkIOKtnJUv7n75AUp PL49o3GMmlPs1a350upCa/T1as9eWA76cla1CTJVFnjJ4TIXpM0JzSkC+yVi8uwyQGMW Ottq/NEsOT/q95ZRbNAymahJDBjSDMVMkrKMlO+ohZGpnYUiwVES5b/M08/kvQ0mQLH1 F4qg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date; bh=Is5clB+FjJBc2HVlc4JoDUmfDAN32Db0U9DgBy6TdKY=; b=3qq8q00xPeNdo1dadIEZjtST/sCZxoPoh5BKvbKyuqmT5McSBikejE5OPDCDm3Ap6T uL0eCP2G4elUHNOHEwTY9QYQ4BabvNCog6zWftCRyfQ7Sji3RhJRfCPg3Iq9LeB1XhVQ PY/901WSwnc/0+juO4RXwecZIs94m7TWacHJ3ujrM0j3FFKQGirCXzQhs7b5C+O5DCoB iJkaYCi3/Cbp0UwWH8R27IFWpnY8bJUAPzUBH9FV7kqt4cn4S720U0Bch1kReS3IN4QJ 2qEYRiycnjkRebmXIwLmfjD5bbsZ+BvEsZipVsRn+AnQdQyLvQRN0Gb4nraeXvJDWrDe rf0g== X-Gm-Message-State: ACrzQf0N273oOtDepsQGGvNaKKQ8Hky/DJCY2pm4aJLI7yTpQaQkfVQh dpRGGQVsbqkC+3Tw9P3DB74WqH2zW5FGJ7YW X-Google-Smtp-Source: AMsMyM6+a2RhZ6b0EP+ih51/Ug5vFyt/EewdPVi16ErkJP11VF4hn0cC4Pt0bvwpELvZhbi7sLJg7A== X-Received: by 2002:a17:902:f606:b0:172:9c81:d788 with SMTP id n6-20020a170902f60600b001729c81d788mr468800plg.42.1663182658265; Wed, 14 Sep 2022 12:10:58 -0700 (PDT) Received: from hexa.router0800d9.com (dhcp-72-253-6-214.hawaiiantel.net. [72.253.6.214]) by smtp.gmail.com with ESMTPSA id w14-20020aa7954e000000b00535e950aa28sm10551156pfq.131.2022.09.14.12.10.56 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Sep 2022 12:10:57 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 2/5] systemd: Add 'no-dns-fallback' PACKAGECONFIG option Date: Wed, 14 Sep 2022 09:10:30 -1000 Message-Id: <71f09bc00029acb3f368244bceb1e20b02cd9129.1663182524.git.steve@sakoman.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Sep 2022 19:11:06 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/170670 From: "niko.mauno@vaisala.com" systemd defines a default set of fallback DNS servers in https://github.com/systemd/systemd/blob/v251/meson_options.txt#L328-L330 By adding a PACKAGECONFIG knob providing a convenient way to opt out, and then adding that value to systemd's PACKAGECONFIG, the output from runtime 'resolvectl status' command no longer contains the following line: Fallback DNS Servers: 1.1.1.1#cloudflare-dns.com 8.8.8.8#dns.google 1.0.0.1#cloudflare-dns.com 8.8.4.4#dns.google 2606:4700:4700::1111#cloudflare-dns.com 2001:4860:4860::8888#dns.google 2606:4700:4700::1001#cloudflare-dns.com 2001:4860:4860::8844#dns.google (From OE-Core rev: 2b300d6b9ec6288a99d9dacb24a86949caf99e55) Signed-off-by: Niko Mauno Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman --- meta/recipes-core/systemd/systemd_250.5.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-core/systemd/systemd_250.5.bb b/meta/recipes-core/systemd/systemd_250.5.bb index 9923312830..5d568f639e 100644 --- a/meta/recipes-core/systemd/systemd_250.5.bb +++ b/meta/recipes-core/systemd/systemd_250.5.bb @@ -165,6 +165,7 @@ PACKAGECONFIG[manpages] = "-Dman=true,-Dman=false,libxslt-native xmlto-native do PACKAGECONFIG[microhttpd] = "-Dmicrohttpd=true,-Dmicrohttpd=false,libmicrohttpd" PACKAGECONFIG[myhostname] = "-Dnss-myhostname=true,-Dnss-myhostname=false,,libnss-myhostname" PACKAGECONFIG[networkd] = "-Dnetworkd=true,-Dnetworkd=false" +PACKAGECONFIG[no-dns-fallback] = "-Ddns-servers=" PACKAGECONFIG[nss] = "-Dnss-systemd=true,-Dnss-systemd=false" PACKAGECONFIG[nss-mymachines] = "-Dnss-mymachines=true,-Dnss-mymachines=false" PACKAGECONFIG[nss-resolve] = "-Dnss-resolve=true,-Dnss-resolve=false" From patchwork Wed Sep 14 19:10:31 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 12860 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9C1A5C6FA86 for ; Wed, 14 Sep 2022 19:11:06 +0000 (UTC) Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) by mx.groups.io with SMTP id smtpd.web09.1210.1663182661812950993 for ; Wed, 14 Sep 2022 12:11:02 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20210112.gappssmtp.com header.s=20210112 header.b=EXpp5UqL; spf=softfail (domain: sakoman.com, ip: 209.85.214.179, mailfrom: steve@sakoman.com) Received: by mail-pl1-f179.google.com with SMTP id k21so5545455pls.11 for ; Wed, 14 Sep 2022 12:11:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date; bh=HrDQT5XzVkhh15cwyVSpKBjVtMfEhHb6RBIwXXcsu68=; b=EXpp5UqLgckqzQtbFseAWM9YoM4pVerV0pnllKNPdgVfJjTUOVzkaM3CsQJNVycNTa Q6zyWznt6z80VyXFoaVfE7G793WTzpu7bF2TXny1b3TMXpS9g66wKSbgE54bCYTiix3h u3r6rqsOpYoJOGGB0Bz16+o6PtyuQiJWuDUT7nKBaepBmA5gTwhGK+7/2kIUFslT/tk2 bG3QdIGKWDqs8p3cegU8gJHODoCQYa1XLWWAqTuUBmiR/vTjdhoZeoqTM1yqpv7a4+Nn EHaZHLMXIKU60wh7YM1bufjvoz//rfcn1AMSw2j7QX8UoiWk82oJqGqvyZeAyo81InIG ZIAw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date; bh=HrDQT5XzVkhh15cwyVSpKBjVtMfEhHb6RBIwXXcsu68=; b=5yp7V6KkIRKB+K3LWP5nWGbQUWyJ9flZbPwsyakfAvQuuzHSPP7mtTc7inCe/ewxt1 DA6AluytCXtcxlS3uvcJa+QaD3sZ4t8o1pCM0nWolskmYVU0EDlOfllGW6nvxf/uvPez kkjs1VkBlksdtxzt9fevDWLaYIhKtWzlrVQWk0E97Uy1OgWU20dSpK5uTeWrvPgj8qTC nLP7nWn4c4nod0+Zt/bPylpqG/7zaVKFRbeV2/uAWItCex0zaId7dP5+f+0Tj62rp1pa cglYU5149vYti8s1ho1Pv7klbqMvrvXKNpY1px09nKUB14dmzVr6DKx09ZH15d9STnTj hJ3g== X-Gm-Message-State: ACrzQf2krzkZRliR7CRyK8W2yQ6yAtfTUAnauOuKemWjkbCgMuhOnwvq /4AUR2hOEJNtcOBqMhN3xLuGTCe5YQxT6l5/ X-Google-Smtp-Source: AMsMyM5FSJhkdXr8egoUtP05EEbBnbQTD/3eaDtumPC2g5ZyASza/v51XDkESWHjW4VCrcnNvefHkA== X-Received: by 2002:a17:902:6549:b0:178:12e9:8d7b with SMTP id d9-20020a170902654900b0017812e98d7bmr470803pln.14.1663182660565; Wed, 14 Sep 2022 12:11:00 -0700 (PDT) Received: from hexa.router0800d9.com (dhcp-72-253-6-214.hawaiiantel.net. [72.253.6.214]) by smtp.gmail.com with ESMTPSA id w14-20020aa7954e000000b00535e950aa28sm10551156pfq.131.2022.09.14.12.10.59 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Sep 2022 12:11:00 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 3/5] lighttpd: upgrade 1.4.64 -> 1.4.65 Date: Wed, 14 Sep 2022 09:10:31 -1000 Message-Id: X-Mailer: git-send-email 2.25.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Sep 2022 19:11:06 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/170671 From: wangmy Changelog: ========== * [build] meson: fix typo in variable name * [build] autoconf: report if building with zstd * [build] meson -Dlua_version=... to specify lua ver * [core] avoid CCRandomGenerateBytes on MacOS <10.12 (fixes #3140) * [core] use diff var name w/ CCRandomGenerateBytes (fixes #3141) * [core] parse conf cmds with SHELL or /bin/sh * [core] fix HMAC with openssl 3.0 * [mod_webdav] no COPYFILE_CLONE_FORCE on OSX <10.12 (fixes #3142) * [mod_deflate] fix to return 304 with If-None-Match (fixes #3143) * [core] Illumos epoll incompatible w/ lighttpd impl * [core] feature flag to allow Range w/ HTTP/1.0 * [mod_mbedtls] set usekeysize for mbedtls 3.2.0+ * [mod_deflate] collect mmap code * [mod_deflate] prototype using libdeflate w/ mmap * [mod_deflate] --with-libdeflate to use libdeflate * [mod_deflate] mark input bytes const * [core] sys-setjmp.[ch] * [mod_magnet] check lighty.result.content b4 setjmp * [core] include guard consistency in sys-time.h * [core] network_write_file_chunk_remap separate fn * [multiple] use new sys_setjmp_eval3() interface * [multiple] pedantic chunk.c checks for 0-len chunk * [multiple] shared code for struct chunk and mmap * [mod_deflate] use pread if available * [mod_deflate] improve loop compressing file chunk * [core] prep server_tag at startup for h2 resp hdr * [mod_magnet] defer req_env init unless needed * [mod_magnet] reset after error attaching content * [mod_magnet] lua_tointegerx() avoids raising error * [mod_mbedtls] use newer mbedtls 3.2.0+ interfaces * [mod_magnet] adjust hot path for more inlining * [mod_magnet] collect chk for magnet lua_State init * [mod_magnet] use type returned from lua_getfield() * [core] chunk_file_pread() to wrap pread() * [core] disable keep-alive if forcing HTTP/1.0 resp * [mod_magnet] use lua_getextraspace() to store r * [core] fall back to getauxval(AT_RANDOM), if avail * [mod_magnet] keep message handler on stack * [doc] update external links * [mod_magnet] pass lighty table index, defer pops * [mod_magnet] clear and reuse script-env table * [mod_magnet] clear stack when reloading script * [mod_magnet] use lua_isnoneornil() in interfaces * [mod_magnet] fix lighty.c.cookie_tokens() * [mod_magnet] fix lighty.c.urldec_query() * [mod_magnet] remove duplicated NULL checks * [mod_magnet] adjust magnet_lighty_result_get() * [mod_magnet] magnet_tmpbuf_acquire(),release() * [mod_magnet] lighty.c.quotedenc(),dec() funcs * [mod_magnet] fix header,content legacy table clear * [mod_cgi] cgi.local-redir request_reset thru fnptr * [core] isolate plugins_*() funcs to main server * [mod_wolfssl] wolfssl v5.0.0 defines DH_set0_pqg() * [mod_auth] save letter-case diff in require config * [mod_magnet] magnet_push_quoted_string shared code * [mod_magnet] lighty.c.header_tokens convenience fn * [core] fill in un.sun_path after accept() (fixes #3147) * [mod_extforward] adjust trust check for HTTP/2 * [mod_proxy] adjust handling of legacy X-* headers * [core] permit env w/ blank value (fix regression) * [TLS] consistent debug.log-ssl-noise config type * [mod_magnet] allow removal of req_env elt via nil * [core] compiler workarounds for very old gcc,glibc * [mod_mbedtls] use newer mbedtls 3.2.0+ interfaces * [mod_ssi] check http_chunk_transfer_cqlen for err * [core] chunkqueue_steal() handle unexpected 0 len * [core] discard DATA from REFUSED_STREAM at h2 init * [multiple] WebSockets over HTTP/2 (fixes #3151) * [multiple] immed connect to backend for streaming * [core] ensure socket ready before checking connect * [core] reduce trace on Upgrade backend connection * [core] adjust when TCP_CORK used on TLS connection * [mod_cgi] disable input optim if might Upgrade * [mod_cgi] immed start CGI if Upgrade * [mod_wolfssl] wolfssl v5.0.0 adds ASN1_TIME_diff() * [mod_openssl] libressl v3.5.0 adds ASN1_TIME_diff * [TLS] warn if leaf cert read is inactive/expired * [core] stricter conformance w/ upcoming HTTP/2 rev * [build] -D_DEFAULT_SOURCE consistency in builds * [mod_extforward] support addtl IPv6 syntax w/ "[]" * [core] build fix for cygwin and lmingw * [core] short-circuit earlier parsing h2 trailers * [core] reformat h2.h for cleaner enum additions * [core] consolidate trace for log-state-handling * [core] request_config bitmasks for smaller struct * [core] prefix (=^), suffix (=$) config conditions (fixes #3153) * [core] tighten config parsing loop * [core] convert simple config cond regex to pre/sfx * [tests] able to run tests when built w/o pcre * [core] allow redirect,rewrite ext subst w/o pcre * [mod_sockproxy] reset http vers, avoid rare crash (fixes #3152) * [core] HTTP/2 PRIORITY_UPDATE frame (experimental) * [core] send HTTP/2 SETTINGS_NO_RFC7540_PRIORITIES * [core] stricter check of HTTP/2 GOAWAY frame size * [mod_mbedtls] use newer mbedtls 3.2.0+ interfaces * [mod_webdav] opt for partial PUT via copy/rename * [core] quiet compiler warning * [multiple] recognize HTTP QUERY method * [multiple] limit scope of socket config options * [core] fix config typo reading large int from str * [core] h2 prio sort urgency, incr, then stream id * [core] send Priority resp hdr w/ .css, .js re-prio * [multiple] reset http vers, avoid rare crash (fixes #3152) * [core] delay response to http auth invalid creds * [core] connection_state_machine_h2 only if con->h2 * [core] default server.max-keep-alive-requests 1000 * [mod_magnet] set script env in func first upvalue * [mod_magnet] rewrite lighty.r as table of userdata * [mod_status] con->h2 instead of r->http_version * [mod_setenv] cleanup user-provided hdr sloppiness * [core] remove func decls duplicated in plugin.h * [mod_status] fix counting of HTTP/2 bytes written * [mod_magnet] no local server port on unix domain * [mod_extforward] unix domain socket pedantic chks * [core] sketch support for abstract sockets * [mod_magnet] magnet_plugin_stats_table() fn * [mod_magnet] magnet_script_setup_global_state() fn * [mod_magnet] lighty.server.* table w/ new function * [mod_accesslog] do not double-count hdr len in %I * [mod_magnet] reduce magnet_env_get_id() scanning * [mod_magnet] tighten magnet_env_get_buffer_by_id() * [mod_status] reusable code for r->state strings * [core] reusable code for r->state strings * [mod_magnet] expose r->state to lua scripts * [mod_magnet] tighten magnet_env_set() * [mod_magnet] lighty.r.req_item[] accessors * [mod_magnet] expose r->keep_alive to lua scripts * [mod_magnet] lighty.c.hrtime high-resolution time * [mod_magnet] lighty.r.resp_body.get * [mod_magnet] deprecate r.req_attr["response.*] * [mod_magnet] separate funcs for uri_path_raw * [mod_magnet] lighty.c.stat high precision time * [mod_magnet] format multiline err traceback * [mod_magnet] adjust p->conf.stage checks * [mod_magnet] further isolate legacy API result tbl * [core] buffer_append_char() convenience func * [mod_accesslog] accesslog.escaping = "json" * [multiple] use buffer_append_char() * [mod_accesslog] remove begin/end tags from %{}t * [core] fix configparser_simplify_regex() comment * [multiple] simplify bytes_in/bytes_out accounting * [mod_accesslog] reorder fields in switch() * [core] remove unused srv->con_* counters * [mod_magnet] read-only access to r->server_name * [core] buffer_append_bs_escaped() * [core] buffer_append_string_c_escaped ASCII optim * [mod_magnet] backspace-escape encode/decode * [mod_status] display HTTP/2 control stream w/ reqs * [multiple] use preferred syntax for Content-Type * [doc] regenerate doc/config/conf.d/mime.conf * [multiple] rename status_counter -> plugin_stats * [core] feature-flag server.metrics-high-precision * [mod_magnet] quiet coverity false positive * [mod_wolfssl] compile fix for OpenWRT * [mod_webdav] If-None-Match: * on non-existent * [mod_magnet] r.req_body .collect .get .set .add * [mod_cgi] fix detection of failing error handler (fixes #3157) * [core] "url-invalid-utf8-reject" normalization opt * [mod_magnet] skip req body collect warn if modsec3 * [build] update descriptions to remove old lua ver * [core] use current dir if context->basedir blank * [multiple] application/javascript text/javascript * [core] reset internal flags after graceful restart * [TLS] inherit ssl.engine from global scope * [core] avoid server.use-ipv6 warning after SIGUSR1 * [mod_webdav] alt handling PROPFIND on collection * [mod_mbedtls] fix crt chain construction logic * [core] h2 SETTINGS_INITIAL_WINDOW_SIZE 64k (fixes #3089) * [core] increase session window size to 256k * [core] h2: avoid sending small WINDOW_UPDATE frames * [core] h2: avoid sending tiny DATA frames * [core] update cached tables with Priority header * [tests] test stubs for http_header.c and http_kv.c Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 47188fa0dc19f160085554360c81bd9f363837d5) Signed-off-by: Sakib Sajal Signed-off-by: Steve Sakoman --- .../lighttpd/{lighttpd_1.4.64.bb => lighttpd_1.4.65.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-extended/lighttpd/{lighttpd_1.4.64.bb => lighttpd_1.4.65.bb} (97%) diff --git a/meta/recipes-extended/lighttpd/lighttpd_1.4.64.bb b/meta/recipes-extended/lighttpd/lighttpd_1.4.65.bb similarity index 97% rename from meta/recipes-extended/lighttpd/lighttpd_1.4.64.bb rename to meta/recipes-extended/lighttpd/lighttpd_1.4.65.bb index 8d2e77e011..10aa27f072 100644 --- a/meta/recipes-extended/lighttpd/lighttpd_1.4.64.bb +++ b/meta/recipes-extended/lighttpd/lighttpd_1.4.65.bb @@ -19,7 +19,7 @@ SRC_URI = "http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-${PV}.t file://lighttpd \ " -SRC_URI[sha256sum] = "e1489d9fa7496fbf2e071c338b593b2300d38c23f1e5967e52c9ef482e1b0e26" +SRC_URI[sha256sum] = "bf0fa68a629fbc404023a912b377e70049331d6797bcbb4b3e8df4c3b42328be" DEPENDS = "virtual/crypt" From patchwork Wed Sep 14 19:10:32 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 12857 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 907CBECAAD3 for ; Wed, 14 Sep 2022 19:11:06 +0000 (UTC) Received: from mail-pf1-f177.google.com (mail-pf1-f177.google.com [209.85.210.177]) by mx.groups.io with SMTP id smtpd.web09.1212.1663182664765970415 for ; Wed, 14 Sep 2022 12:11:04 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20210112.gappssmtp.com header.s=20210112 header.b=oexk/GZn; spf=softfail (domain: sakoman.com, ip: 209.85.210.177, mailfrom: steve@sakoman.com) Received: by mail-pf1-f177.google.com with SMTP id u132so15840022pfc.6 for ; Wed, 14 Sep 2022 12:11:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date; bh=c30t7WO6Bm+orEdBduWoaEjERwZI2HuWhobJ+/lfYg0=; b=oexk/GZn7Wvdc+yS5Etqdz27tCyLB58bIovmi7MimRLgRueRen/zxPWgOGvvxeSXsp BGQoVUUkzjYGpfFo5rSo1Hd55C9IPWj+qmHExEcLoctOcrmoJkCuLycjhh9Vb8n+DfMj b4hydCcLFJjV61J+FOfThp3pAcx9/yXWkE8BmIVEXGptXKpOtFqE1oQayTxy3RyxCyp6 nQuepjn48PbLQ1ArqZsbPqlat1iDuUSSsD60UglUJ6sTJiElSlruLmQ89y21DIzydLTL q6i+ysoT/BOeYS4CkN4vm5aziGhFbk+/cSjp8OfRto8CIxVF94FgMeKQOsoLNuwp9k2K t59A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date; bh=c30t7WO6Bm+orEdBduWoaEjERwZI2HuWhobJ+/lfYg0=; b=Q5/dIXA5E1SRlIoFuYQ3kL09gSCyU617RzxAyNAOi7WDcQPsK63i/ebbpVj72VAYu7 PO4CjJr2hJfRSJ7VOQaSLpIP4qB1JS5B4piw8VnNnDexajF4lqIjxjYYxUl0/4ueZNfu yU/H8Fxi8xVUpJhRV/2I1zCkFouRVJCRPUD54LdlCqXFsaR3nJ3uEKJnJsxaR7ZQPPSg kDXTucwjrtUz85A4nQoDFVXAxhoUMkbmyMTDD5GZYlV6u5Bm71y45wp2O54yuWKRTT3p UDTJwU3MqkLFIrNPtKhAPtdKAzZPjjEZdMv1tQGNZxt9hu8fiHbV5xYE6eE2kCTuYM2H bXjQ== X-Gm-Message-State: ACgBeo2hq8vjLSC72D9bnIB0uO2LF5NBzD9UGfIp3hGLMsahfmFGJ9gv xos8GkmswsvmszKQRHHCwPQwgfzA+yKNRJpr X-Google-Smtp-Source: AA6agR4rZjRE3oNeoqhE7Ep4Fk/cg7UeXhHBeXbAusbOtqV+kMHSEZoIj/xV3CzYLpiWpWUgy0+GIA== X-Received: by 2002:a63:c7:0:b0:42e:8690:960e with SMTP id 190-20020a6300c7000000b0042e8690960emr34106403pga.234.1663182663765; Wed, 14 Sep 2022 12:11:03 -0700 (PDT) Received: from hexa.router0800d9.com (dhcp-72-253-6-214.hawaiiantel.net. [72.253.6.214]) by smtp.gmail.com with ESMTPSA id w14-20020aa7954e000000b00535e950aa28sm10551156pfq.131.2022.09.14.12.11.01 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Sep 2022 12:11:02 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 4/5] lighttpd: upgrade 1.4.65 -> 1.4.66 Date: Wed, 14 Sep 2022 09:10:32 -1000 Message-Id: X-Mailer: git-send-email 2.25.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Sep 2022 19:11:06 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/170672 From: Alexander Kanavin Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 3163134b0f58c58aaabe4e957c30109e63b2d60f) Signed-off-by: Sakib Sajal Signed-off-by: Steve Sakoman --- .../lighttpd/{lighttpd_1.4.65.bb => lighttpd_1.4.66.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-extended/lighttpd/{lighttpd_1.4.65.bb => lighttpd_1.4.66.bb} (97%) diff --git a/meta/recipes-extended/lighttpd/lighttpd_1.4.65.bb b/meta/recipes-extended/lighttpd/lighttpd_1.4.66.bb similarity index 97% rename from meta/recipes-extended/lighttpd/lighttpd_1.4.65.bb rename to meta/recipes-extended/lighttpd/lighttpd_1.4.66.bb index 10aa27f072..801162867c 100644 --- a/meta/recipes-extended/lighttpd/lighttpd_1.4.65.bb +++ b/meta/recipes-extended/lighttpd/lighttpd_1.4.66.bb @@ -19,7 +19,7 @@ SRC_URI = "http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-${PV}.t file://lighttpd \ " -SRC_URI[sha256sum] = "bf0fa68a629fbc404023a912b377e70049331d6797bcbb4b3e8df4c3b42328be" +SRC_URI[sha256sum] = "47ac6e60271aa0196e65472d02d019556dc7c6d09df3b65df2c1ab6866348e3b" DEPENDS = "virtual/crypt" From patchwork Wed Sep 14 19:10:33 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 12861 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9B081C6FA82 for ; Wed, 14 Sep 2022 19:11:16 +0000 (UTC) Received: from mail-pl1-f172.google.com (mail-pl1-f172.google.com [209.85.214.172]) by mx.groups.io with SMTP id smtpd.web08.1220.1663182668013092776 for ; Wed, 14 Sep 2022 12:11:08 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20210112.gappssmtp.com header.s=20210112 header.b=o/uze5ID; spf=softfail (domain: sakoman.com, ip: 209.85.214.172, mailfrom: steve@sakoman.com) Received: by mail-pl1-f172.google.com with SMTP id w13so435212plp.1 for ; Wed, 14 Sep 2022 12:11:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date; bh=qXr3xWuIXe460xW4HBBED+PilpGqp33UAonEzCsrEME=; b=o/uze5ID2AviPfOpQFiDCWomkfXwKmrHEyTeFCEzl1chd8h3533K4/FiHvrzId0q7y AZBY2HXHKLSAAd4pv0ONkboWpE0Czoyr6TjD1RmAOAoM+rNysysKUd8rhGMCgKgOUzMn zLeydu1EK0AweJS/gMHfEnwR6FSpdGvVlX3QLyndtvPdHCCvLVPzcHA3O39tHkJR8f/p ji4Je/E1kC4hu8gG8RE0ZDBhRPGQUcF/aAUU4qxOtYfIv83UcTJw1zDnZDAVH0H0+s8M Blb0/18OEq4lLJbkuX0/U+HJ/i8ve0m6Mqfrs5FS5PIlK3S4vKKD76m0sFHfoMj6ZIN5 eyXw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date; bh=qXr3xWuIXe460xW4HBBED+PilpGqp33UAonEzCsrEME=; b=jdlaP0fBFSIUgFAkFTqR1yCUHIuWbsYaK62RzYWObcyEuvGzMhBDT+jl72d2Dm6S1s elbDQIdF4X76Ee7VVTkNL+5usFnev1UtLUx4RFrR0i6IV+/IL2Ea20rMp6PpnRxX+UEH nXgS75jDsMba1zokIHVRMVITAZg2kGFc43Ijdo9On0lrZ2N1ZCcxcVIvF7c7CnQoDFaF tRx6enOhc20DbfltEjjH3LGz2p8pipxk0zgZam5Ed6YLbL8miY/4Lwb2gNnPd13//xGB GZZfEfsjOcceN+D64oHnAQ5FPPWNQJilCKTtUzYIyCVUf8KE+CXVf4qKrxIwxfS3roNU mnyg== X-Gm-Message-State: ACrzQf3maLDXAn4o9bMetSpc2lIxRFDbtqVg9uE6F2Sm/jTpQQgKV+CL 2JkI9o7aKLkXRyMszsc4dsBLLHCPaA0EZ8q1 X-Google-Smtp-Source: AMsMyM7Hp696BxOR4FzsTfiQ7mSx3PukJXSW6kRs4mkex+LWBijB4nQw9ROJgnqQirRFvjQGnFAL6Q== X-Received: by 2002:a17:902:be02:b0:172:d409:e057 with SMTP id r2-20020a170902be0200b00172d409e057mr471357pls.90.1663182667142; Wed, 14 Sep 2022 12:11:07 -0700 (PDT) Received: from hexa.router0800d9.com (dhcp-72-253-6-214.hawaiiantel.net. [72.253.6.214]) by smtp.gmail.com with ESMTPSA id w14-20020aa7954e000000b00535e950aa28sm10551156pfq.131.2022.09.14.12.11.05 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Sep 2022 12:11:05 -0700 (PDT) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 5/5] vim: Upgrade 9.0.0341 -> 9.0.0453 Date: Wed, 14 Sep 2022 09:10:33 -1000 Message-Id: X-Mailer: git-send-email 2.25.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Sep 2022 19:11:16 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/170673 From: Richard Purdie Includes fixes for CVE-2022-3099 and CVE-2022-3134. Signed-off-by: Richard Purdie (cherry picked from commit d042923262130b6b96f703b5cd4184f659caeb92) Signed-off-by: Steve Sakoman --- meta/recipes-support/vim/vim.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-support/vim/vim.inc b/meta/recipes-support/vim/vim.inc index 33a8299243..70dc2dfecf 100644 --- a/meta/recipes-support/vim/vim.inc +++ b/meta/recipes-support/vim/vim.inc @@ -20,8 +20,8 @@ SRC_URI = "git://github.com/vim/vim.git;branch=master;protocol=https \ file://no-path-adjust.patch \ " -PV .= ".0341" -SRCREV = "92a3d20682d46359bb50a452b4f831659e799155" +PV .= ".0453" +SRCREV = "83a19c5fda0556330860899bfb484addf9178cd0" # Remove when 8.3 is out UPSTREAM_VERSION_UNKNOWN = "1"