aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2018-08-14coreutils: remove obsolete patchessumoRoss Burton3-111/+0
No point fixing small problems with the man pages build if we later disable them entirely. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-08-14coreutils: don't build suRoss Burton2-4/+57
Previously we built su but didn't package it because util-linux is the preferred provider. However with glibc 2.28 libcrypt has been removed so su doesn't build. Instead of depending on virtual/crypt, lets just not build su at all. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-08-06gnutls: update 3.3.29 -> 3.3.30Andre McCurdy2-8/+8
* Version 3.3.30 (released 2018-07-16) ** libgnutls: Corrected infinite loop when an incorrect PIN was provided via pin-value or pin-source. ** gnutls-cli: backported the --sni-hostname option. This allows overriding the hostname advertised to the peer. ** Improved counter-measures for TLS CBC record padding. Kenny Paterson, Eyal Ronen and Adi Shamir reported that the existing counter-measures had certain issues and were insufficient when the attacker has additional access to the CPU cache and performs a chosen-plaintext attack. This affected the legacy CBC ciphersuites. [CVSS: medium] ** The ciphers utilizing HMAC-SHA384 and SHA256 have been removed from the default priority strings. They are not necessary for compatibility or other purpose and provide no advantage over their SHA1 counter-parts, as they all depend on the legacy TLS CBC block mode. ** API and ABI modifications: No changes since last version. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-07-20bc: addRoss Burton2-0/+54
Add 1.06 from oe-core as bc 1.07 is GPLv3. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-04-26diffutils Make it build with compile time hardening enabledyocto-2.5.3yocto-2.5.2sumo-19.0.3sumo-19.0.2Peter Kjellerstedt2-1/+35
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-26rsync: Make it build with compile time hardening enabledPeter Kjellerstedt2-0/+33
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-26patch: Make it build with compile time hardening enabledPeter Kjellerstedt2-1/+99
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-26rxvt-unicode: Inherit pkgconfigPeter Kjellerstedt1-1/+1
The configure script uses pkg-config and falls back to disabling features that were enabled in EXTRA_OECONF if pkg-config isn't found. This corresponds to commit 50368960cd in OE-Core. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-26rxvt-unicode: Make it build with C++11Peter Kjellerstedt2-0/+26
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-25README: Add Peter Kjellerstedt as co-maintainerPeter Kjellerstedt1-11/+14
And wrap the lines at 80 characters. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-25texinfo: Update a patch to avoid fuzzPeter Kjellerstedt1-3/+3
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-25gnupg: Update a patch to avoid fuzzPeter Kjellerstedt1-2/+1
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-25dosfstools: Update a patch to avoid fuzzPeter Kjellerstedt1-3/+3
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-25sed: Update a patch to avoid fuzzPeter Kjellerstedt1-4/+4
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
2018-04-23coreutils: Update a patch to avoid fuzzyocto-2.5sumo-19.0.0Peter Kjellerstedt1-2/+2
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-04-23coreutils: Avoid warnings due to update-alternatives for man pagesPeter Kjellerstedt1-4/+0
The man pages for this package was disabled in 46349e1a with the result that the following warnings appeared: WARNING: coreutils-6.9-r0 do_package: coreutils: alternative target (/usr/share/man/man1/su.1 or /usr/share/man/man1/su.1.coreutils) does not exist, skipping... WARNING: coreutils-6.9-r0 do_package: coreutils: alternative target (/usr/share/man/man1/hostname.1 or /usr/share/man/man1/hostname.1.coreutils) does not exist, skipping... WARNING: coreutils-6.9-r0 do_package: coreutils: NOT adding alternative provide /usr/share/man/man1/su.1: /usr/share/man/man1/su.1.coreutils does not exist WARNING: coreutils-6.9-r0 do_package: coreutils: NOT adding alternative provide /usr/share/man/man1/hostname.1: /usr/share/man/man1/hostname.1.coreutils does not exist WARNING: coreutils-6.9-r0 do_package: coreutils: alt_link == alt_target: /usr/share/man/man1/su.1 == /usr/share/man/man1/su.1 WARNING: coreutils-6.9-r0 do_package: coreutils: alt_link == alt_target: /usr/share/man/man1/hostname.1 == /usr/share/man/man1/hostname.1 This change removes the update-alternatives for the man pages that no longer exists. Change-Id: If79bb634e05db48462265c6e65291db27169fa51 Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-04-23bash: Provide /bin/{sh, bash} when usrmerge is usedPeter Kjellerstedt1-0/+2
Most shell scripts have '#!/bin/{sh,bash}' on the first line of the script, which triggers RPM to automatically add a runtime dependency on that path for any package that contains shell scripts. However, when the usrmerge feature is enabled, the path will actually be /usr/bin/{sh,bash}. So, to satisfy the runtime dependencies, add '/bin/{sh,bash}' to what the bash package provides. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-04-10layer.conf: Add LAYERSERIES_COMPATRichard Purdie1-0/+2
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-19nettle: refresh the patches2.5_M3Martin Jansa4-46/+63
* fixes: WARNING: nettle-2.7.1-r0 do_patch: Some of the context lines in patches were ignored. This can lead to incorrectly applied patches. The context lines in the patches can be updated with devtool: devtool modify <recipe> devtool finish --force-patch-refresh <recipe> <layer_path> Then the updated patches and the source tree (in devtool's workspace) should be reviewed to make sure the patches apply in the correct place and don't introduce duplicate lines (which can, and does happen when some of the context is ignored). Further information: http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450 Details: Applying patch Add-target-to-only-build-tests-not-run-them.patch patching file Makefile.in Hunk #1 succeeded at 53 (offset -2 lines). patching file testsuite/Makefile.in Hunk #1 succeeded at 105 with fuzz 2 (offset -11 lines). Now at patch Add-target-to-only-build-tests-not-run-them.patch Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-28gnutls: update 3.3.28 -> 3.3.29Andre McCurdy2-8/+8
* Version 3.3.29 (released 2018-02-16) ** libgnutls: Fixed issue which caused 1-byte handshake fragments to be refused. Reported by Balázs Kéri. ** libgnutls: Fixed interoperability issue with openssl when safe renegotiation was used. Resolves gitlab issue #259. ** libgnutls: Use readdir() instead of readdir_r internally. The latter is deprecated and on our use we don't need readdir() to be thread safe (which it is in most common platforms). ** libgnutls: require strict DER encoding for certificates, OCSP requests, private keys, CRLs and certificate requests. This backports the already default behavior from the 3.5.x branch, in order to reduce issues due to the complexity of BER rules. ** libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by Vitezslav Cizek). ** libgnutls: Addressed issue in the accelerated code which may affect interoperability with versions of nettle > 3.4. ** p11tool: Fixed issue preventing the deletion of objects in batch mode. ** p11tool: Mark all generated objects as sensitive by default. ** API and ABI modifications: No changes since last version. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-22time: move it from oe-coreRobert Yang2-0/+1325
The 1.8 is GPLv3, so remove the v2 one to meta-gplv2. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-15make: Do not assume glibc glob internalsKhem Raj2-0/+37
glibc 2.27 hides them Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-12-19elfutils_0.148: musl build fixesAndre McCurdy2-2/+140
Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-12-19gettext: fix compilation with securityflags enabledPhong Tran2-0/+89
Signed-off-by: Phong Tran <tranmanphong@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-11-09gnutls: update 3.3.27 -> 3.3.28Andre McCurdy3-22/+12
* Version 3.3.28 (released 2017-07-04) ** libgnutls: Fixed issue when rehandshaking without a client certificate in a session which initially used one. Reported by Frantisek Sumsal. ** libgnutls: fix issue in RSA-PSK client callback which resulted in no username being sent to the peer. Patch by Nicolas Dufresne. ** libgnutls: no longer parse the ResponseID field of the status response TLS extension. The field is not used by GnuTLS nor is made available to calling applications. That addresses a null pointer dereference on server side caused by packets containing the ResponseID field. Reported by Hubert Kario. [GNUTLS-SA-2017-4] ** libgnutls: Handle specially HSMs which request explicit authentication. There are HSMs which return CKR_USER_NOT_LOGGED_IN on the first private key operation. Detect that state and try to login. ** libgnutls: the GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs. That is, even in tokens which do not have a CKF_LOGIN_REQUIRED flag a login will be forced. This improves operation on certain Safenet HSMs. ** libgnutls: do not set leading zeros when copying integers on HSMs. PKCS#11 defines integers as unsigned having most significant byte first, e.g., 32768 = 0x80 0x00. This is interpreted literraly by some HSMs which do not accept an integer with a leading zero. This improves operation with certain Atos HSMs. ** libgnutls: Backported PKCS#11 key generation functionality for DSA keys. ** libgnutls: Improve check for /dev/urandom uniqueness. Ensure that when gnutls_global_init() is called for a second time that /dev/urandom is re-opened when the inode or device ID has changed. ** API and ABI modifications: No changes since last version. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-10-04groff: Drop local getopt implementation in favor of the one from glibcPeter Kjellerstedt2-0/+1840
This avoids the following error with GCC 7: In file included from /usr/include/bits/getopt_posix.h:27:0, from /usr/include/unistd.h:872, from src/libs/libgroff/maxfilename.cc:28: /usr/include/bits/getopt_core.h:91:12: error: declaration of 'int getopt(int, char* const*, const char*) throw ()' has a different exception specifier extern int getopt (int ___argc, char *const *___argv, const char *__shortopts) ^~~~~~ In file included from src/include/lib.h:42:0, from src/libs/libgroff/maxfilename.cc:23: src/include/groff-getopt.h:50:12: note: from previous declaration 'int getopt(int, char* const*, const char*)' extern int getopt(int, // __argc ^~~~~~ Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-10-04groff: Make it build with compile time hardening enabledPeter Kjellerstedt2-6/+42
This avoids the following error: src/devices/grohtml/post-html.cc: In member function 'void header_desc::write_headings(FILE*, int)': src/devices/grohtml/post-html.cc:1402:32: error: format not a string literal and no format arguments [-Werror=format-security] fprintf(f, buffer.contents()); Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-09-26elfutils: Make it build with GCC 7 and compile time hardening enabledPeter Kjellerstedt3-0/+77
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-09-19gnupg: specify tar path explicitlyWenlin Kang2-4/+44
The gpg-zip script contains wrong tar binary path: "TAR=/buildarea/poky/build/tmp/hosttools/tar" Specify the correct tar path when configure. Also remove the code for ustar format detection in configure because it is not applicable for cross-compile environment. Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-08-29gmp_4.2.1: prevent calls to mpn_add_nc() if HAVE_NATIVE_mpn_sub_nc is falseAndre McCurdy2-0/+79
When building for aarch64 (ie relying only on generic C code rather than asm) libgmp.so contains undefined references to __gmpn_add_nc and __gmpn_sub_nc which causes attempts to link with -lgmp to fail: | .../usr/lib/libgmp.so: undefined reference to `__gmpn_sub_nc' | .../usr/lib/libgmp.so: undefined reference to `__gmpn_add_nc' Solution based on a historical patch posted to the gmp mailing list: https://gmplib.org/list-archives/gmp-discuss/2006-May/002344.html Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-08-18mc: disable Ctrl-g key and Ctrl-\ keyHongxu Jia2-0/+87
Since ncurses upgraded to 6.0+20170715, it compile failed ... | ../../../mc-4.7.5.2/lib/tty/tty-ncurses.c: In function 'tty_init': | ../../../mc-4.7.5.2/lib/tty/tty-ncurses.c:163:13: error: dereferencing pointer to incomplete type 'TERMINAL {aka struct term}' | cur_term->Nttyb.c_cc[VINTR] = CTRL ('g'); /* ^g */ ... We could not backport fix from the latest master which introduce gplv3 contamination, but we could revert to disable Ctrl-g key and Ctrl-\ key Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-18Revert "mc: Drop from meta-gplv2 as incompatible with newer ncurses versions"Hongxu Jia2-0/+78
This reverts commit ec80d2cac67a952b06ed27fbd4d71f17641e9a7c. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-18Revert "layer.conf: Remove mc from packagegroup-core-full-cmdline-utils"Hongxu Jia1-2/+0
This reverts commit 73a8f9df9f4b5e0d87605962c3bd8dcbaef28aea. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-17layer.conf: Remove mc from packagegroup-core-full-cmdline-utilsRichard Purdie1-0/+2
mc is no longer in the gplv2 layer, remove it as a dependency from the packagegroup we test build to avoid validation errors. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-17mc: Drop from meta-gplv2 as incompatible with newer ncurses versionsRichard Purdie2-78/+0
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-13README: fix mailing list addressRoss Burton1-1/+1
Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-13rxvt-unicode: move it to BBFILESRobert Yang5-0/+0
It should be in recipes-sato/rxvt-unicode, not recipes-sato. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-23gnutls: make it independent on gnutls.inc from oe-coreMartin Jansa2-7/+58
* also remove correct_rpl_gettimeofday_signature.patch like in commit e01e7c543a559c8926d72159b5cd55db0c661434 Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Thu Jun 15 23:15:00 2017 +0100 meta: Remove further uclibc remnants (inc. patches and site files) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-22grep: fix compilation with security flags enabledAndré Draszik2-0/+135
As per attached patch Signed-off-by: André Draszik <adraszik@tycoint.com> Acked-by: Sylvain Lemieux <slemieux@tycoint.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-22m4: fix security & musl issuesAndré Draszik3-0/+84
As per the patches. Signed-off-by: André Draszik <adraszik@tycoint.com> Acked-by: Sylvain Lemieux <slemieux@tycoint.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-22coreutils: fix musl compilationAndré Draszik2-0/+45
As per the patch Signed-off-by: André Draszik <adraszik@tycoint.com> Acked-by: Sylvain Lemieux <slemieux@tycoint.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-12gnutls: add use-pkg-config-to-locate-zlib.patchMartin Jansa2-1/+68
* it was modified in oe-core/master in this commit: commit ba7e5f51327d9833776aa066f30c5e46606be374 Author: Fan Xin <fan.xin@jp.fujitsu.com> Date: Fri Jun 9 15:49:18 2017 +0900 gnutls: Upgrade to 3.5.13 1. Upgrade gnutls from 3.5.9 to 3.5.13 2. Rebase the following patch file. use-pkg-config-to-locate-zlib.patch Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> and no longer applies for this version. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-09msmtp: add old version with gplv2Jackie Huang3-0/+339
msmtp changed to gplv3 from 1.4.13 Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-04-26elfutils: Fix build with gcc7Khem Raj3-0/+296
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-04-25gnutls: add older gnutls compatible with nettleMartin Jansa2-0/+54
* gnutls depends on nettle-3.1* since 3.4.0: The requirement for nettle was bumped from 3.0 to 3.1 in gnutls_3_4_0 https://gitlab.com/gnutls/gnutls/commit/c84129af91b21d33ffe086e507632771b0e76498 and from 2.7 to 3.0 a bit earlier also in gnutls_3_4_0 https://gitlab.com/gnutls/gnutls/commit/3fa80cf68919f07b3351b2722278ba463d6e731c * add recipe for last release in 3.3 branch which is compatible with nettle 2.7.1 used in meta-gplv2 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-03-13dosfstools: Restore support for the -h option to mkdosfsEmma Holmberg Ohlsson2-3/+3
The support for the -h option to mkdosfs was accidentally removed when the target and native versions of the recipe were unified back in Dylan... Signed-off-by: Emma Holmberg Ohlsson <emma.holmberg.ohlsson@axis.com> Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-03-09coreutils: Disable broken man pagesRichard Purdie2-0/+20
These are generated from --help output of the host tools which is clearly incorrect, particularly given the older nature of this recipe. Simply disable them entirely. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-09bison: add missing patch from oe-coreMartin Jansa1-0/+591
* meta-gplv2/recipes-devtools/bison/bison_2.3.bb: Unable to get checksum for bison SRC_URI entry bison-2.3_m4.patch: file could not be found Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-08meta: start to ignore the largefile distro featureAndre McCurdy1-1/+1
The largefile distro feature has been enabled by default in oe-core for a long time and, more recently, also in poky-tiny. Building without the largefile distro feature receives little or no testing. Many packages now enable LFS without exposing a configure option, so there should be very little expectation that disabling the distro feature will result in a distro which globally disables LFS. Respecting the distro feature adds a maintenance over-head and may be the source of configurations oddities (e.g. dbus-native currently builds with LFS disabled for no clear reason - fixed by this commit). Ignore the largefile distro feature more widely, as a first step towards deprecating and eventually removing it. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-03-08README: Nominate Ross as maintainerRichard Purdie1-1/+1
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>