summaryrefslogtreecommitdiffstats
path: root/meta
AgeCommit message (Collapse)Author
2019-11-25gstreamer1.0-plugins-bad: add PACKAGECONFIG option for zbarNorbert Wesp
As a recipe for zbar was added 2016-12-26, we can add an option in PACKAGECONFIG for it. (From OE-Core rev: 655e46772c7f93469e42e791037013338bdcf787) Signed-off-by: Norbert Wesp <n.wesp@phytec.de> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25ghostscript: CVE-2019-14869Stefan Ghinea
A flaw was found in all versions of ghostscript 9.x before 9.28, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands. References: https://nvd.nist.gov/vuln/detail/CVE-2019-14869 Upstream patches: https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904 (From OE-Core rev: 0bb88ac63b4e1728373c6425477a32f7a6362b2c) Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25python3: update patch statusRoss Burton
(From OE-Core rev: 3bb0a089840caf51065d7f8b59b3e055bce31e1c) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25man-pages: update to 5.03Alexander Kanavin
(From OE-Core rev: 73ea9a2a2bf04910cb397a3074dc21ab5144f29b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25grub: don't autoreconf twiceRoss Burton
do_configure() essentially calls autogen.sh to generate some sources and then autoreconf, but autogen.sh also calls autoreconf. Pass a magic variable so that autogen.sh doesn't autoreconf for us. (From OE-Core rev: 19e18446c09fef14c3dd54b0de12a8d21b280c93) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25grub: inherit pkgconfigRoss Burton
Grub uses pkg-config but is only in the sysroot via dependencies. Be explicit and inherit pkgconfig directly. (From OE-Core rev: 6cdf9a0712b136a1002e8a814274e23ee7a5f06d) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25psmisc: remove a patch that is no longer necessaryAlexander Kanavin
(From OE-Core rev: 3b1a87d78ba39593fb2a95362a426cf48c3e8a68) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25adwaita-icon-theme:upgrade 3.34.0 -> 3.34.3Wang Mingyu
(From OE-Core rev: 7a1ca18512e355eb9adcff5e2e2105cde0e2bd9c) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25sysstat: remove check for chkconfigWenlin Kang
For cross-platform, chkconfig can't work, so should remove check for it. This can only be reproduced on some platform with chkconfig(e.g. CentOS Linux release 7.2.1511), and need with --enable-install-cron and without --enable-copy-only. Fixed: | if [ "n" == "n" ]; then \ | if [ -x "/usr/sbin/chkconfig" ]; then \ | cd /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/init.d && /usr/sbin/chkconfig --add sysstat; \ | else \ | [ -d /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc2.d ] || mkdir -p /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc2.d; \ | [ -d /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc3.d ] || mkdir -p /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc3.d; \ | [ -d /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc5.d ] || mkdir -p /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc5.d; \ | cd /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc2.d && ln -s -f ../init.d/sysstat S01sysstat; \ | cd /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc3.d && ln -s -f ../init.d/sysstat S01sysstat; \ | cd /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc5.d && ln -s -f ../init.d/sysstat S01sysstat; \ | fi \ | fi \ | elif [ -d /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d ]; then \ | ... | fi | error reading information on service sysstat: No such file or directory | Makefile:382: recipe for target 'install_all' failed (From OE-Core rev: d193caa4bd94661b87393719d72d6e9cacc60439) Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25ltp: Remove acl and at runtime dependencyJoerg Vehlow
Tests that use at and acl tool were removed in release 20190115. See ltp commit 0fc9b8624bea8acfdb408bf5ff4916b1453e3daa (From OE-Core rev: 256479b01b6dfdd1e2a35f41a5fbcde799ba2742) Signed-off-by: Joerg Vehlow <joerg.vehlow@aox-tech.de> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25libjitterentropy: Upgrade 2.1.2 -> 2.2.0Joshua Watt
Upstream has a patch that replaces "install -s" with an INSTALL_STRIP make variable, which can be used to replace the custom patch being carried. License checksum change was due to a date in the license text being updated. The actual contents are unchanged. (From OE-Core rev: 0f261c26131b24f2b39c51232132dd9ace546c96) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25texi2html: removeRoss Burton
The last user of this obsolete recipe (abandoned upstream in 2010, removed from oe-core build dependencies in 2012) has now been deleted from oe-core, so delete the recipe too. (From OE-Core rev: 3be906bad55fb44228a2aa2b8fa3c567c3d01b83) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25packagegroup-self-hosted: texi2html isn't a build requirementRoss Burton
texi2html isn't a build requirement and hasn't been since 2012 (oe-core aa1c451). (From OE-Core rev: 362fcae816e6985193c06e3848c20b6fa0bd1180) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25packagegroup-core-self-hosted: remove intltoolRoss Burton
Very little software needs intltool to build, and we don't need it on the host to build Poky. (From OE-Core rev: 0ba27bd08e9e5b20edbcb00316f785184c9d9fc7) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25packagegroup-core-sdk: remove intltoolRoss Burton
Intltool is deprecated these days, as gettext can handle almost everything intltool could. Remove it from the SDK packagegroups, if it is needed then the user can add it explicitly. (From OE-Core rev: 52558efc0f401b665e5060c51d956e2337c47da8) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25man-pages: correct the SRC_URIAlexander Kanavin
The homepage: https://www.kernel.org/doc/man-pages/download.html specifies that the latest tarballs are published one level up from where we currently take them. (From OE-Core rev: 3722fc6f7804107bc95619576d9789259acd7f68) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25gdb: Fix CVE-2019-1010180Vinay Kumar
Source: git://sourceware.org/git/binutils-gdb.git Tracking -- https://sourceware.org/bugzilla/show_bug.cgi?id=23657 Backported upstream commit 950b74950f6020eda38647f22e9077ac7f68ca49 to gdb-8.3.1 sources. Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=950b74950f6020eda38647f22e9077ac7f68ca49] (From OE-Core rev: 82a227e54e704ef9237c1613b9d3350fa26fe9dd) Signed-off-by: Vinay Kumar <vinay.m.engg@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25python3-pycairo:upgrade 1.18.1 -> 1.18.2Zang Ruochen
(From OE-Core rev: 3a1690812a7187196db047bf715d8d7db991ebd6) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25python-setuptools: upgrade 41.4.0 -> 41.6.0Zang Ruochen
(From OE-Core rev: c40d5f0db5238f03174f11b538706f58bb2f0236) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25e2fsprogs: fix build issues with the latest version of gettextAlexander Kanavin
(From OE-Core rev: 55134bc50193a53b659af9dd315bdc4d9b87da1c) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25console-tools: remove the recipeAlexander Kanavin
The last release of this was in 2002(!), kbd is the modern, supported alternative. (From OE-Core rev: 320319f24dd1be300bc89c52b97d1703eab83029) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25mc: backport a patch to fix builds with latest gettextAlexander Kanavin
(From OE-Core rev: be02c5ccfd575c731ba32765f2277023cc23cb5b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25systemtap: update to 4.2Alexander Kanavin
(From OE-Core rev: 8ba5ecb17a08b29bbb314b6a498b17ac88f7f17c) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25go: Extract common environment setup.Alex Kube
Add default values for go environment variables to go-common.inc. Override where appropriate in other go*.inc files, and use host/target tuples from goarch for setting CC flags. (From OE-Core rev: 1e3f040b1f68fa1f808851ecd9623544e935e9ad) Signed-off-by: Alex Kube <alexander.j.kube@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25go: Remove go-1.12Alex Kube
(From OE-Core rev: 2b76e904a5f7d6479974a179d6d17d6ee9af94e7) Signed-off-by: Alex Kube <alexander.j.kube@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25go: Change default GOVERSION to 1.13Alex Kube
(From OE-Core rev: 3e9647233ef326583063e2113bfa17e1440f26aa) Signed-off-by: Alex Kube <alexander.j.kube@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-25go: Add go1.13 recipesAlex Kube
(From OE-Core rev: c1cd99c0b617717bd642ef5065c4f70ee0dfafae) Signed-off-by: Alex Kube <alexander.j.kube@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-22package_ipk: Remove pointless comment to trigger rebuildRichard Purdie
The opkg-utils change didn't trigger a full repackage due to its mention in layer.conf for update-alternatives hash exclusion. Do it manually to invalidate broken ipks. (From OE-Core rev: 6dd59dffd73618e4c0979b284a7968055a4eb8fb) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-22oeqa/selftest/sstatetests: Ensure we don't use hashequiv for sstatesigs testsRichard Purdie
(From OE-Core rev: 6af559467f869afabad16cd84ae1af4bc7af0950) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-22sanity: Add check for tar older than 1.28Richard Purdie
Older versions break opkg-build when reproducible builds are enabled. Rather than trying to be selective based on which features are enabled, lets just make this a minimum version. (From OE-Core rev: 0fdc43da005c3c6102cf07383ad6f451d2203fa5) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21core-image-full-cmdline: Add lessRichard Purdie
Less was coming from busybox in these images, add the full version. [YOCTO #13630] (From OE-Core rev: 42047185d55fc878821defec4908b119884d3d07) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21opkg-utils: Fix silent empty/broken opkg package creationRichard Purdie
opkg-build was failing on hosts where tar < 1.28 and reproducibile builds were enabled but it was doing this silently and generating corrupted (empty) ipk files. Add a fix for this (submitted upstream). The fix requires bash but if you're building ipk files this shoudn't be a problem. (From OE-Core rev: ff9ec19b02650a3ae230e4d1bdc99ec686cc4c81) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21opkg: Add upstream fixes for empty packagesRichard Purdie
An ipk with a zero size data.tar file caused opkg to crash with a double free abort. Add the upstream fixes for this. (From OE-Core rev: aa17a8096263934f5c1877f3ef749df595486a9c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21glib-2.0: upgrade 2.62.1 -> 2.62.2Anuj Mittal
(From OE-Core rev: 5cf40fd1b3f004bd796d220c125271f245065605) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21stress-ng: upgrade 0.10.08 -> 0.10.10Anuj Mittal
(From OE-Core rev: fa2f558e5185f72634c6736c2aedf5ba700b1215) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21sqlite3: upgrade 3.30.0 -> 3.30.1Anuj Mittal
(From OE-Core rev: 81c7ac8a206f50d045d4cbeeb50e9b4e14c47259) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21libsolv: upgrade 0.7.6 -> 0.7.8Anuj Mittal
(From OE-Core rev: d41f41ac407e63d1cfda3d5572ff078133c2a087) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21harfbuzz: upgrade 2.6.1 -> 2.6.4Anuj Mittal
(From OE-Core rev: 3eca909a6de3a9698f967b0da8905f8025d20add) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21rng-tools: upgrade 6.7 -> 6.8Anuj Mittal
(From OE-Core rev: 1c6f29a7dc6172c4ddaca4a74bb5c178ead14182) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21webkitgtk: Remove clang specific optionKhem Raj
This should be no longer needed. if needed then meta-clang might be better suited (From OE-Core rev: ad9dd755646fdb42b88440e9464f1d94e244c316) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21selftest: check that 'devtool upgrade' correctly drops backported patchesAlexander Kanavin
There was a regression in this functionality that went unnoticed due to lack of tests. (From OE-Core rev: a75e4eceb703b2b13ddd4ba3dea3a86af0b0a9eb) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21cairo: the component is dual licensedAlexander Kanavin
Somehow, over the years, no one noticed that cairo does in fact offer a choice between mpl and lgpl, but the COPYING makes it clear: https://gitlab.freedesktop.org/cairo/cairo/blob/1.16/COPYING (From OE-Core rev: 6b72445aa098054257da77aab8e8d4ffcd3d0437) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21cve-check: fetch CVE data once at a time instead of in a single callRoss Burton
This code used to construct a single SQL statement that fetched the NVD data for every CVE requested. For recipes such as the kernel where there are over 2000 CVEs to report this can hit the variable count limit and the query fails with "sqlite3.OperationalError: too many SQL variables". The default limit is 999 variables, but some distributions such as Debian set the default to 250000. As the NVD table has an index on the ID column, whilst requesting the data CVE-by-CVE is five times slower when working with 2000 CVEs the absolute time different is insignificant: 0.05s verses 0.01s on my machine. (From OE-Core rev: 53d0cc1e9b7190fa66d7ff1c59518f91b0128d99) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21cve-check: neaten get_cve_infoRoss Burton
Remove obsolete Python 2 code, and use convenience methods for neatness. (From OE-Core rev: f19253cc9e70c974a8e21a142086c13d7cde04ff) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21cve-check: rewrite look to fix false negativesRoss Burton
A previous optimisation was premature and resulted in false-negatives in the report. Rewrite the checking algorithm to first get the list of potential CVEs by vendor:product, then iterate through every matching CPE for that CVE to determine if the bounds match or not. By doing this in two stages we can know if we've checked every CPE, instead of accidentally breaking out of the scan too early. (From OE-Core rev: d61aff9e22704ad69df1f7ab0f8784f4e7cc0c69) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21cve-update-db-native: clean up proxy handlingRoss Burton
urllib handles adding proxy handlers if the proxies are set in the environment, so call bb.utils.export_proxies() to do that and remove the manual setup. (From OE-Core rev: 6b73004668b3b71c9c38814b79fbb58c893ed434) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21cve-update-db-native: add an index on the CVE ID columnRoss Burton
Create an index on the PRODUCTS table which contains a row for each CPE, drastically increasing the performance of lookups for a specific CVE. (From OE-Core rev: b4048b05b3a00d85c40d09961f846eadcebd812e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21cve-update-db-native: don't hardcode the database nameRoss Burton
Don't hardcode the database filename, there's a variable for this in cve-check.bbclass. (From OE-Core rev: 0d188a9dc4ae64c64cd661e9d9c3841e86f226ab) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21sysstat: upstream version check is working againAlexander Kanavin
As upstream has released a new stable version, the exception is no longer needed. (From OE-Core rev: fa99c061275cd96cf375ff60d1c73a6e818dca25) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-11-21vala: upgrade 0.46.3 -> 0.46.4Alexander Kanavin
(From OE-Core rev: d3f63f082b8c3484f08ea753ca43e40824cf1a1b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-07 02:47:28 +0000