**** BEGIN LOGGING AT Fri Feb 05 02:59:57 2021 Feb 05 12:37:24 RP: it might be better to move the discussion here Feb 05 12:37:51 RP: regarding u-boot, did AUH post any of U-Boot update patches automatically yet ? Feb 05 12:40:59 marex: it tried and failed: https://lists.openembedded.org/g/openembedded-core/message/146746?p=,,,20,0,0,0::Created,,u-boot,20,2,0,79700212 Feb 05 12:43:08 marex: as the maintainer you should get emails? Feb 05 12:43:36 RP: way too many, yeah Feb 05 12:43:50 hmmm Feb 05 12:44:00 the AUH again failed to bump also the tools recipe in lockstep Feb 05 12:44:21 marex: well, can someone please help improve it? Feb 05 12:44:40 RP: improve what, the overload ? Feb 05 12:44:53 RP: or AUH ? Feb 05 12:44:58 marex: the fact it "again failed to bump also the tools recipe in lockstep" Feb 05 12:45:26 so AUH Feb 05 12:45:39 I was asking kanavin about that for a while, apparently it was difficult to add Feb 05 12:46:12 I didnt look into AUH myself, so I cannot answer that Feb 05 12:46:45 marex: we've done our best with it. We welcome help to improve it Feb 05 12:47:07 marex: I agree it isn't perfect, sadly nobody really seems interested in helping fix this kind of thing Feb 05 12:47:41 I actually get incredibly frustrated as we've made tools that get 90% there and all I hear are "oh, but X doesn't work" Feb 05 12:48:46 RP: I was also tweaking the uboot recipes so AUH could update it, I think we got exactly 90% there too Feb 05 12:49:09 RP: would it make you feel any better if I said I will add this onto a long todo ? Feb 05 12:49:38 marex: depends if it ever happens ;-) Feb 05 12:50:19 RP: eventually :/ Feb 05 13:18:02 | ModuleNotFoundError: No module named 'pkg_resources' - looks like no setuptools Feb 05 13:18:38 pip/wheel/setuptools are pita as venv depends on them or not Feb 05 13:34:52 hrw: you should know by now python is a job creation scheme not a language Feb 05 13:52:31 * mickeyl smiles Feb 05 15:30:39 ;D Feb 05 15:30:53 XorA: you summoned python daemon Feb 05 15:48:20 hrw: erk Feb 05 16:47:53 dl9pf: paulbarker I think we need to add a link to the stand chatroom. If I commit some pictures of prior year stands, can you add them to the text? Feb 05 17:13:47 yes Feb 05 17:14:58 just upload pictures to Feb 05 17:14:59 https://gitlab.com/openembedded/community/fosdem-stand-static Feb 05 17:21:34 Thanks! Feb 05 17:21:51 ANyone with hugo skills, please help dl9pf and paulbarker Feb 05 17:22:25 Also, need to make sure I get connected to the stand matrix room Feb 05 17:22:47 I am @crofton:gnuradio.org Feb 05 17:23:12 XorA: mind if I use the photo of you looking tired at the OE stand? Feb 05 17:24:48 hmm what size should I use? Feb 05 17:30:52 Anyone working on sudo CVE-2021-3156? I don't see any references to it in either the security emails or on the mailing list (patches or discussion) Feb 05 17:33:32 Crofton|cloud: keep it below 600px I'd say Feb 05 17:39:09 bother I went for original Feb 05 17:43:48 Crofton|cloud: no pronlem Feb 05 17:44:10 I think I skipped it Feb 05 17:45:04 https://flic.kr/p/5Y9GGH Feb 05 17:46:35 Crofton|cloud: fuck I was young then Feb 05 17:46:50 All of us were Feb 05 17:51:51 paulbarker: can you approve me for stand gitlab access Feb 05 17:54:11 fray: I thought a patch went by on oe-core from WR Feb 05 17:54:41 I didn't see it when I searched for CVE-2021-3156. I did find one for a newer CVE (less important) Feb 05 17:55:29 There is the (master) update from 1.9.5p1 -> 1.9.5p2 which fixes it, but that won't resovle the issue in past releases without a similar uprev Feb 05 17:56:02 (gatesgarth is on 1.9.3) Feb 05 17:58:58 fray: Anuj has a patch queued for CVE-2021-23239 for gatesgarth, I think, which I believe is actually the same issue as 3156 Feb 05 17:59:29 Ok, the CVE list and Debian doesn't indicate it, but it doesn't surprise me if they are related based on the symptoms Feb 05 18:00:14 However, the Debian patch for (a slightly older) sudo is broken into 6? different parts.. so I'm not sure 23239 really is the fix Feb 05 18:00:23 ah, okay Feb 05 18:00:35 (I've got people asking about this, so I'm trying to gather whatever I need to be able to answer them) Feb 05 18:02:17 I figured other people were on top of it, since master got fixed right away, whoops Feb 05 18:03:05 I can try cooking up a backport of the fix(es) for dunfell over the weekend Feb 05 18:07:34 I assume the gatesgarth (if patched) would be easier to backport to Dunfell, then Dunfell as a separate patch Feb 05 18:10:12 right, though it'll take some untangling of 3156 vs 23239 Feb 05 18:10:35 Yup.. and 23240 was listed in the CVE check, but I've not looked there at all Feb 05 18:13:21 fun ;) Feb 05 18:40:19 arg, -fdebug-prefix-map is being weird. Feb 05 22:30:49 https://fosdem.org/2021/schedule/event/openembedded_welcome/ Feb 05 22:31:02 do we have this covered? 0300 here then :) Feb 05 22:31:29 what's the point of an internet conference? you can't download beer Feb 05 22:32:14 I know Feb 05 22:32:23 you tried? Feb 05 22:32:30 We are strggling to maintain some continuity through these crap times Feb 05 22:32:56 I ahve 4 .5L Delirium Tremens and some Reds in the fridge Feb 05 22:33:29 I have about 10 bottles from a local brewery Feb 05 22:33:40 Nice Feb 05 22:33:43 https://fosdem.org/2021/schedule/event/community_devroom_stop_worrying_do_less/ Feb 05 22:33:50 I think I need to watch this Feb 05 22:34:30 Crofton|cloud: I don't see any merge requests or permission requests on there Feb 05 22:34:46 grr Feb 05 22:34:52 https://www.theflowerpots.co.uk/product/lock-down-special-case/ Feb 05 22:35:12 I should have perm requests Feb 05 22:35:54 Crofton|cloud: What's your gitlab username? Feb 05 22:36:01 balister Feb 05 22:36:20 yeah Feb 05 22:37:03 can you add me and dl9pf Feb 05 22:37:29 dl9pf has access Feb 05 22:37:35 I've just added you as well Feb 05 22:37:43 Thanks! Feb 05 22:38:04 mru: I am trying to stay in theme, even have some Mate Feb 05 22:38:28 Also, I badly miss seeing all of you Feb 05 22:39:46 The number one contribution from teh Yocto Project to OpenEmbedded : https://fosdem.org/2021/schedule/event/community_devroom_documentation_first_class_citizen/ Feb 05 22:40:17 This is not likely completely true, but one I hear the most about Feb 05 22:40:40 nothing you hear a lot about is true Feb 05 22:41:06 I endorse this talk: https://fosdem.org/2021/schedule/event/embedded_linux_license_compliance/ Feb 05 22:41:19 * Crofton|cloud laughs Feb 05 22:41:31 you need t get other to endorse it fror you Feb 05 22:41:38 I've retweeted right? Feb 05 22:42:13 Crofton|cloud: I have no idea at this stage tbh Feb 05 22:42:37 If you tweeted I retweeted :) Feb 05 22:42:56 I am going through the schedule now, trying to build a picture for tomorrw Feb 05 22:43:04 I do need to post again about it tomorrow Feb 05 22:43:24 :) Feb 05 22:43:32 I'm usually exhausted after FOSDEM but this year it's definitely before Feb 05 22:43:41 Yeah Feb 05 22:43:52 Thankfully the talk is pre-recorded already Feb 05 22:44:00 This is the tough one for me to miss Feb 05 22:45:22 FOSDEM 2020 was the last good trip I had. Brussels then Ghent, Rotterdam & Delft before going home Feb 05 22:45:44 Then within a few weeks of getting home I'd caught covid and the rest is history Feb 05 22:59:13 Damn Feb 05 22:59:34 thos ea re al great places Feb 05 22:59:52 We ahd a gnuradio hackfest in Delft and learned to breathe fire Feb 06 00:10:10 Is it just me, or does the FOSDEM site seem better than the LF event ones ? **** ENDING LOGGING AT Sat Feb 06 02:59:57 2021