summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
AgeCommit message (Collapse)Author
2021-05-18libxml2: Add bash dependency for ptests.Tony Tascioglu
Before, running ptests on core-image-minimal would result in an error due to missing /bin/bash: [ -d test ] || ln -s ../libxml2-2.9.10/test . make: /bin/bash: No such file or directory make: *** [Makefile:2105: runtests] Error 127 Changing the Makefile to use /bin/sh results in some of the tests failing, so I have added the missing dependancy on bash. (From OE-Core rev: d2e81298c446aec8d7fcf61fd5023ac30350f205) Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18libxml2: Reformat runtest.patchTony Tascioglu
Reformatted runtest.patch to allow it to be applied using git am. This makes it easier to apply the series of patches to the original git repo. There are no changes to the code of the patch other than the reformat. Previously, the patch claimed to be a backport, but I have not found an upstream commit so I've changed the Upstream-Status to pending. (From OE-Core rev: 0361d625e1573e846a2f03ed90a8b897bc405160) Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18libxcrypt-compat: upgrade 4.4.19 -> 4.4.20Richard Purdie
(From OE-Core rev: d7eb1125e974fddd43062665bd5eb29f352832dc) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-14expat: upgrade 2.2.10 -> 2.3.0Alexander Kanavin
Drop 0001-Add-output-of-tests-result.patch (difficult to rebase). I have verified that ptests still pass, and print PASS for every test. If they start failing we can revisit what kind of output would be beneficial. (From OE-Core rev: ef1a76f9c130e7efaecae15ccb1d48a03fa17b9b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-13coreutils: Exclude CVE-2016-2781 from cve-checkRichard Purdie
http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=v8.27-101-gf5d7c0842 "Given runcon is not really a sandbox command, the advice is to use `runcon ... setsid ...` to avoid this particular issue. (From OE-Core rev: 2d273b5aed4a5bd509ec9c68a6f451c17ec17d0c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-13ovmf: Fix other reproducibility issuesRichard Purdie
When building in longer paths, the ovmf build changes in many ways. This adds a patch addressing various causes of problems. Full details are in the patch header. (From OE-Core rev: 9113a5815f3c682ef99fd777e35e892b2e08237f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-13ovmf: Disable lto to aid reproducibilityRichard Purdie
lto tends to break reproducibility and makes ovmf near impossible to debug reproducibility issues in. Disable it and supress the warnings that then generates from Werror. (From OE-Core rev: 627b6ed763eca90192203932784872b60a65fcaa) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11ovmf: Improve reproducibility by enabling prefix mappingRichard Purdie
We want to pass ${DEBUG_PREFIX_MAP} to gcc commands and also pass in --debug-prefix-map to nasm (we carry a patch to nasm for this). The tools definitions are built by ovmf-native so we need to pass this in at target build time when we know the right values. By using determininistc file paths in the ovmf build, it removes the opportunitity for gcc/ld to change the output binaries due to path lengths overflowing section sizes and causing small changes in the binary output. This also means that if builds have reproducibility issues in future, it becomes much easier to compare intermediate build artefacts. (From OE-Core rev: 51f51310d6d5cced2b55bf27dbb9a5717740a206) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11glibc: Document and whitelist CVE-2019-1010022-25Richard Purdie
These CVEs are disputed by upstream and there is no plan to fix/address them. No other distros are carrying patches for them. There is a patch for 1010025 however it isn't merged upstream and probably carries more risk of other bugs than not having it. (From OE-Core rev: b238db678083cc15313b98d2e33f83cccab03fc6) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11busybox: upgrade 1.33.0 -> 1.33.1zhengruoqin
0001-decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch removed since it is included in 1.33.1 (From OE-Core rev: 544236b12a72ee5be5ef0147249ead112082b871) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11ell: upgrade 0.39 -> 0.40wangmy
(From OE-Core rev: db1f0f28a0651a648cd9fd238f5e2809110ff577) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09systemd-boot: backport a fix to address failures with new gnu-efiAlexander Kanavin
(From OE-Core rev: c88679a2f1a3aa84f7699a0ee752cf8071e8a430) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09systemd: backport a patch to avoid unnecessary rsync dependency with latest ↵Alexander Kanavin
meson (From OE-Core rev: 3f0269ff1e5f87b23ef9012813a753daf3c5c24f) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-06glib-2.0: update 2.68.0 -> 2.68.1Alexander Kanavin
(From OE-Core rev: 1e8959da12afbde05060c5ee0019a28fd6945ef2) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-04busybox: Fix reproducibilityKhem Raj
The ensures that globbing results in same order irrespective of shell in use (From OE-Core rev: fdeee94fa78f91613850500b209b75a6608241d0) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-03busybox: Enable long options for enabled appletsKhem Raj
certain applets are enabled but the long options are not enabled for them, it results in subtle failures in ptests where its expecting these options e.g. gzip --best is commonly used in many package tests e.g. root@qemux86-64:/usr/lib# grep -r "\-\-best" * acl/ptest/Makefile:GZIP_ENV = --best attr/ptest/Makefile:GZIP_ENV = --best coreutils/ptest/Makefile:GZIP_ENV = --best ethtool/ptest/Makefile:GZIP_ENV = --best libxml2/ptest/Makefile:GZIP_ENV = --best lttng-tools/ptest/Makefile:GZIP_ENV = --best opkg/ptest/Makefile:GZIP_ENV = --best perl/ptest/cpan/ExtUtils-MakeMaker/lib/ExtUtils/MakeMaker.pm: COMPRESS ('gzip --best') python3.9/test/test_gzip.py: for compress_level in ('--fast', '--best'): ... this ensures that these options are enabled by default, which makes them more compatible than now with coreutils provided utilities busybox size grows by 4K which perhaps is acceptable --rwxr-xr-x root root 817704 ./bin/busybox.nosuid +-rwxr-xr-x root root 821800 ./bin/busybox.nosuid This makes autopoint-3/gettext pass This patch add all the long options to this fragment. The long options for a tool will only get enabled if the corresponding tool/feature is enabled in main defconfig, otherwise it will be ignored in final .config (From OE-Core rev: 6a6c64426f544fcd376f2eabdb5aecc0ab04e541) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-01glib-networking: upgrade 2.66.0 -> 2.68.1wangmy
(From OE-Core rev: 12a9bb0feed96a0f3e0795106c6d95755ccb42b0) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-30libxcrypt: Update to 4.4.19 release and fix symbol version issuesRichard Purdie
This patch upgrades to the 4.4.19 release and replaces a configure patch from "libxcrypt: fix sporadic failures in nativesdk-libxcrypt-compat" with a fix to avoid leading spaces in CFLAGS causing failures. The license changed a few filenames listed in the license but the overall license remains unchanged. (From OE-Core rev: 7a2144f065c913ef189011b94d90de4dde51a347) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-26systemd: Enable seccomp if FEATURE is setArmin Kuster
(From OE-Core rev: c9d4fb93429a90191dc77e1dbc183535d66952cb) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-23musl: Update to latest masterKhem Raj
changelog [1] * aad50fcd fix regression in dl_iterate_phdr reporting of modules with no TLS * 0ea78a64 nscd: fall back gracefully on kernels without AF_UNIX support * 95a540e1 mallocng/aligned_alloc: check for malloc failure * 2c00f95c make epoll_[p]wait a cancellation point * 521b4d27 fix dl_iterate_phdr dlpi_tls_data reporting to match spec * 122002f0 remove no-longer-needed special case handling in popen * 8ef9d46f use internal malloc for posix_spawn file actions objects * cfdfd5ea don't fail to map library/executable with zero-length segment maps * e48e99c1 suppress isascii() macro for C++ * b129cd86 guard against compilers failing to handle setjmp specially by default * 3309e2d7 aarch64/bits/mman.h: add PROT_MTE from linux v5.10 * 44331150 aarch64/bits/hwcap.h: add HWCAP2_MTE from linux v5.10 * 42aa19a0 add aarch64/bits/mman.h with PROT_BTI from linux v5.8 * b7554b5e aarch64/bits/hwcap.h: add HWCAP2_BTI from linux v5.8 * 87b8f148 signal.h: add MTE specific SIGSEGV codes from linux v5.10 * 19239cde sys/prctl.h: add MTE related constants from linux v5.10 * 8b29f023 elf.h: add NT_ARM_TAGGED_ADDR_CTRL from linux v5.10 * d7210f0c sys/mman.h: add MAP_HUGE_16KB from linux v5.10 * a7456524 sys/mount.h: add MS_NOSYMFOLLOW from linux v5.10 * 54ca1cc7 sys/membarrier.h: add new constants from linux v5.10 * fd285f9d bits/syscall.h: add process_madvise from linux v5.10 * 49b6df3d fix error return value for cuserid * cc577d0e fix misuse of getpwuid_r in cuserid * a75283d7 cuserid: don't return truncated results * ef137da6 cuserid: support invocation with a null pointer argument [1] https://git.musl-libc.org/cgit/musl/log/\?qt\=range\&q\=e5d2823631bbfebacf48e1a34ed28f28d7cb2570..aad50fcd791e009961621ddfbe3d4c245fd689a3 (From OE-Core rev: 601d8e87a7c796bd9d91d1ffa090d3b1afcf2a2d) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-23cve-update-db-native: skip on empty cpe23UriKonrad Weihmann
Recently an entry in the NVD DB appeared that looks like that {'vulnerable': True, 'cpe_name': []}. As besides all the vulnerable flag no data is present we would get a KeyError exception on acccess. Use get method on dictionary and return if no meta data is present Also quit if the length of the array after splitting is less than 6 (From OE-Core rev: 00ce2796d97de2bc376b038d0ea7969088791d34) Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-20glib-networking: Prefer openssl backend instead of gnutlsKhem Raj
Change the defaults to use openSSL (From OE-Core rev: e63a422a407ed941a0d31522a8016d4c784bd87b) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18systemd: Fix build on mips/muslKhem Raj
(From OE-Core rev: b4a0d8799af0a3d1b685dd7200b545fdb2c79d64) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18Revert "inittab: Add getty launch on hvc0 for qemuppc64"Kevin Hao
This reverts commit ed69ef20167da0986bc9363d1a91e62001995af4. The console entry has already been added into /etc/inittab based on the SERIAL_CONSOLES. So drop this redundant entry. (From OE-Core rev: 633f0c6b74e3caa2bae52ca60c61b811b7b2215d) Signed-off-by: Kevin Hao <kexin.hao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18sysvinit-inittab/start_getty: Check /sys for the tty device existenceKevin Hao
The hvc tty driver doesn't populate a file like /proc/tty/driver/serial, so the current implementation of start_getty doesn't work for the hvc console. By checking the /sys/class/tty/ for the tty device existence, it should support more console types and also make the codes more simple. (From OE-Core rev: 670ceef0f6584ece5ce4176610255226a6148570) Signed-off-by: Kevin Hao <kexin.hao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18systemd: upgrade 247.4 -> 247.6Anthony Bagwell
(From OE-Core rev: 63fbf39b8aa3d94ca2db719d1a53190045dbb86d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18packagegroup-core-tools-testapps.bb: Remove kexec for riscv32Mingli Yu
kexec is not yet ported to riscv32. (From OE-Core rev: f1e7da7737b3d6df27cc5af002fd1eb0c202d0b4) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18packagegroup-core-tools-profile: Remove valgrind for riscv32Mingli Yu
valgrind is not yet ported to riscv32. (From OE-Core rev: df70bc4c60838af1dd7e7f31aba43e8d190def77) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18Revert "glib-2.0: add workaround to fix codegen.py.test failing"Yi Fan Yu
This reverts commit afc9ba7d546f3f2e60fb6f46f740dc925542df16. Ptest-runner was upgraded in e3fd8f17dfb41173dbe037c25087a69f90b1346f, which means we no longer need to limit glib-2.0 ptest output. [YOCTO #14170] (From OE-Core rev: e7be3901e43645796e195348924739d03495a079) Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18glib-2.0: upgrade 2.66.7 -> 2.68.0wangmy
the following patches are refreshed: 0001-Set-host_machine-correctly-when-building-with-mingw3.patch 0001-gio-tests-codegen.py-bump-timeout-to-100-seconds.patch 0001-tests-codegen.py-removing-unecessary-print-statement.patch relocate-modules.patch the following patches are removed since they are included in 2.68.0: 0001-gobject-Drop-use-of-volatile-from-get_type-macros.patch 0002-tests-Fix-non-atomic-access-to-a-shared-variable.patch 0003-tests-Fix-non-atomic-access-to-a-shared-variable.patch 0004-tests-Drop-unnecessary-volatile-qualifiers-from-test.patch 0005-tests-Fix-non-atomic-access-to-some-shared-variables.patch 0006-tests-Drop-unnecessary-volatile-qualifiers-from-test.patch 0007-gdbusconnection-Drop-unnecessary-volatile-qualifiers.patch 0008-gdbuserror-Drop-unnecessary-volatile-qualifiers-from.patch 0009-gio-Drop-unnecessary-volatile-qualifiers-from-intern.patch 0010-kqueue-Fix-unlocked-access-to-shared-variable.patch 0011-tests-Drop-unnecessary-volatile-qualifiers-from-test.patch 0012-tests-Fix-non-atomic-access-to-some-shared-variables.patch 0013-gatomic-Drop-unnecessary-volatile-qualifiers-from-in.patch 0014-gatomic-Drop-unnecessary-volatile-qualifiers-from-ma.patch 0015-glib-Drop-unnecessary-volatile-qualifiers-from-inter.patch 0016-gobject-Drop-unnecessary-volatile-qualifiers-from-in.patch 0017-gmessages-Drop-unnecessary-volatile-qualifiers-from-.patch 0018-gtypes-Drop-volatile-qualifier-from-gatomicrefcount.patch 0019-gatomicarray-Drop-volatile-qualifier-from-GAtomicArr.patch 0020-gobject-Drop-volatile-qualifier-from-GObject.ref_cou.patch 0021-tests-Drop-unnecessary-volatile-qualifiers-from-test.patch 0022-build-Drop-unnecessary-volatile-qualifiers-from-conf.patch 0023-gdbusprivate-Avoid-a-warning-about-a-statement-with-.patch 0024-tests-Add-comment-to-volatile-atomic-tests.patch 0025-gthread-Use-g_atomic-primitives-correctly-in-destruc.patch 0026-gtype-Fix-some-typos-in-comments.patch 0027-gtype-Add-some-missing-atomic-accesses-to-init_state.patch 0028-gresource-Fix-a-pointer-mismatch-with-an-atomic-load.patch 0029-docs-Document-not-to-use-volatile-qualifiers.patch (From OE-Core rev: fde4cb18e28e98f934c0742292f7ec183a568233) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18netbase: upgrade 6.2 -> 6.3zhengruoqin
(From OE-Core rev: 9fd991163cfce6c4a1cf481b42c493eccb0a5a1a) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18dbus-glib: upgrade 0.110 -> 0.112wangmy
License-Update:add the following information of license SPDX-License-Identifier: AFL-2.1 OR GPL-2.0-or-later (From OE-Core rev: fbc9e6f5c2a45ff917b7c255487616d922bdeb7a) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18ell: upgrade 0.38 -> 0.39wangmy
(From OE-Core rev: dba7774a0f34eea86707a011941c7b3ef2fa5c1c) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18busybox: fix CVE-2021-28831Chen Qi
Backport patch to fix CVE-2021-28831. (From OE-Core rev: e579dbd9a6b2472ca90f411c0b594da9e38c9aca) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-18glibc: Rename glibc src packageKhem Raj
Since glibc uses custom PACKAGES, it misses using ${PN}-src and as a result it uses libc-src for name which means creating rdep on glibc src package becomes difficult since bitbake can not resolve rdep = glibc-src back to glibc recipe and bails out on builds Missing or unbuildable dependency chain was: ['glibc-src'] ERROR: Required build target 'valgrind' has no buildable providers. Missing or unbuildable dependency chain was: ['valgrind', 'glibc-src'] (From OE-Core rev: 816c8529f05271aba3d414ab2e68506ac7b6ec69) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-06build-appliance-image: Update to master head revisionyocto-3.3hardknott-3.3Richard Purdie
(From OE-Core rev: 14241ed09f9ed317045cf75a6d08416d3579bb8d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-31cve-update-db-native: Allow to overrule the URL in a bbappend.jan
With this small patch, it's possible to overrule the public URL with a local mirror for those without Internet access. (From OE-Core rev: 2d903126e8bbece3a5171c3488c3deae1f0aa3ee) Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-28packagegroups: delete useless "PROVIDES" linesRobert P. J. Day
There is apparently no functional value to "PROVIDES" lines anymore in packagegroup recipe files, so remove the lonely couple of examples left. (From OE-Core rev: 6f2c9602bc5fc6794b852ec20f40ea62a55ada1e) Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-28util-linux-libuuid: Simplify recipe and rename from util-linux-uuidRichard Purdie
Rename the recipe from util-linux-uuid to util-linux-libuuid which means we can drop the custom PACKAGES and FILES defintions which simplifies things. Also move the LICENSE setting to the libuuid recipe so that it is correctly applied to the right packages. This means the standard definitions from bitbake.conf are used, avoiding errors from situations where users have customised settings causing failures. (From OE-Core rev: 65efd76198ad805060fe28714765cd423fa748dc) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-28initramfs-framework:rootfs: fix some conditional checkMing Liu
Drop a duplicated check for "PARTLABEL=", also change to use elif to avoid go through all the checks for root parameter. (From OE-Core rev: 29e1e2ad0b6fd0db0e099831ba331b4ffa2b094b) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-23build-appliance-image: Update to master head revision3.3_M3Richard Purdie
(From OE-Core rev: 7ae12e4278e98c5b916a1067ae0b48c2da6e82cd) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20libxcrypt: fix sporadic failures in nativesdk-libxcrypt-compatAlexander Kanavin
(From OE-Core rev: ee1dca4ad342455c800b4ff38f375f5c40cfbdf6) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20systemd: upgrade 247.3 -> 247.4wangmy@fujitsu.com
refresh the following patches: systemd/0001-systemd.pc.in-use-ROOTPREFIX-without-suffixed-slash.patch systemd/0006-Include-netinet-if_ether.h.patch (From OE-Core rev: 5db15aec00517e5b6f6585b534a2314c226841bf) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20cve-update-db-native: consider version suffix when update CVE dbLee Chee Yang
some record from NVD can merge or split suffix from version, for example: CVE-2017-15906 "cpe23Uri" : "cpe:2.3:a:openbsd:openssh:5.0:p1:*:*:*:*:*:*" "cpe23Uri" : "cpe:2.3:a:openbsd:openssh:4.7p1:*:*:*:*:*:*:*" in such case include the suffix into version when update local CVE db. (From OE-Core rev: 13cc68197f81bb7c76fa1abecc5dd720b8bdb8d5) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20ovmf: make output binaries reproducibleRoss Burton
OVMF is mostly reproducible, but the final .efi binaries have a 'NM10' segment in that references the original input file, and this input file has the build path in. This can be solved by passing --zero to GenFw so that this segment is zero'd out in release builds. [ YOCTO #14264 ] (From OE-Core rev: 8b4e5a3b8c3eabfbb94ab577529240b2e270efa7) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20util-linux: backport patch to skip build of unused objectsLuca Boccassi
util-linux-uuid does not need libtcolors.a and libcommon.a but they get build regardless. Backport a patch from upstream to skip them and save some compilation time. https://github.com/karelzak/util-linux/commit/c65953d72bbc7412f32e566d9fa6e780d84f0696 (From OE-Core rev: 9353c4338acd51e1bc4172554fca018c4044829f) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-15build-appliance-image: Update to master head revisionRichard Purdie
(From OE-Core rev: fa1e1fbc082e82e41ccfeae58af97fe048c9aac7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-15build-appliance-image: Update to master head revisionRichard Purdie
(From OE-Core rev: aeacc675fcf0cf02ad0bc8e247285638fd72023d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-14glib-2.0: Drop volatile qualifierKhem Raj
Fixes glib/gatomic.h:112:5: error: argument 2 of '__atomic_load' discards 'volatile' qualifier [-Werror=incompatible-pointer-types] (From OE-Core rev: 06ac55a06f2300fa5442ec73a28c3f52022cc640) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-14ovmf: upgrade 202011 -> 202102Wang Mingyu
0003-ovmf-enable-long-path-file.patch removed since it is not available in 202102. (From OE-Core rev: c364d64adcb8c7fdfe196186efa868381f8630e7) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>