summaryrefslogtreecommitdiffstats
path: root/meta/recipes-gnome
AgeCommit message (Collapse)Author
2022-04-03epiphany: fix CVEsMingli Yu
Backport patch [1] to fix below CVEs: - CVE-2021-45085 - CVE-2021-45086 - CVE-2021-45087 - CVE-2021-45088 [1] https://sources.debian.org/data/main/e/epiphany-browser/3.38.2-1+deb11u2/debian/patches/encode-untrusted-data.patch (From OE-Core rev: 125c6f5770542c3b509336b92d6c45c0c955027e) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-11-21meta: add explicit branch and protocol to SRC_URIAnuj Mittal
Add branch name explicitly to SRC_URI where it's not defined and switch to using https protocol for Github projects. The change was made using convert-srcuri script in scripts/contrib. (From OE-Core rev: ab781d4e3fa7425d96ea770ddfd0f01f62018c5b) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-11-03meta: bump HASHEQUIV_HASH_VERSION after RPM fixAnuj Mittal
ef37fca2f4 fixes issues where PLATFORM tag in RPMs generated n aarch and x86 hosts are different for noarch RPMs. But, we'd still need to bump hashequiv version for allarch recipes to avoid issues because of the RPMs that were incorrectly generated so reproducibility tests don't fail. Also bump PR to force rebuilds. (From OE-Core rev: 2c41e766219032dca953eb7c0b18e812a8d0b8f2) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-10-29gobject-introspection: Don't write $HOME into scriptsRichard Purdie
Writing an expanded version of $HOME into the wrapper script breaks reproducibility. We don't need this here so don't. (From OE-Core rev: e9c71a121f05b07fcd5ef2acbfac3c2dc9685384) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5df092524e93cd7d0eaa633ec8a5689d4c0d018d) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-06gobject-introspection: Fix the license (add MIT)Damian Wrobel
As per upstream the license should also include MIT[1]. This is also what Fedora Linux uses[2]. This should also address the problem with auto-generated scannerparser.h file which has the following header: /* Bison interface for Yacc-like parsers in C Copyright (C) 1984, 1989-1990, 2000-2015, 2018-2020 Free Software Foundation, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>. */ /* As a special exception, you may create a larger work that contains part or all of the Bison parser skeleton and distribute that work under terms of your choice, so long as that work isn't itself a parser generator using the skeleton or a modified version thereof as a parser skeleton. Alternatively, if you modify or redistribute the parser skeleton itself, you may (at your option) remove this special exception, which will cause the skeleton and the resulting Bison output files to be licensed under the GNU General Public License without this special exception. This special exception was added by the Free Software Foundation in version 2.2 of Bison. */ Taking advantage of the Bison expcetion, more precisely the following fragment: "distribute that work under terms of your choice" it should also be possible to reuse the MIT license tag for redistribution of that work instead of adding the default GPLv3+ tag (which would otherwise be required without using the special exception). [1] https://gitlab.gnome.org/GNOME/gobject-introspection/-/blob/master/COPYING#L8 [2] https://src.fedoraproject.org/rpms/gobject-introspection/c/6db290968fa1f92967851dc60115dfb3ea173cf7?branch=rawhide (From OE-Core rev: 57b90c098ea7e8caf8fb861e3b7adf77da30ac10) Signed-off-by: Damian Wrobel <dwrobel@ertelnet.rybnik.pl> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3685b51982ac4f611d3e235c8818474563548bd9) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22librsvg: Exclude CVE-2018-1000041 from cve-checkRichard Purdie
Issue only affects windows. (From OE-Core rev: eee05da7eb054f474d24e66799b98e288a2a85fe) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-22libnotify: whitelist CVE-2013-7381 (specific to the NodeJS bindings)Ross Burton
(From OE-Core rev: 2aa9aa01445ad648721c28b15bc9aeab7a1656b1) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-30gdk-pixbuf: fix CVE-2021-20240Changqing Li
(From OE-Core rev: bd08e4d179979937604c196b4047f59c5499a960) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20libhandy: update 1.0.3 -> 1.2.0Alexander Kanavin
(From OE-Core rev: 48fb4f03fec2085ca2e4745e0e40eaab6787e0f2) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-06epiphany: Add package configuration for building in developer modeAndrei Gherzan
(From OE-Core rev: 51ca329ea9cd51b699545bae2cf2a6a02f70a887) Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-06gcr: Add support for building without x11Andrei Gherzan
(From OE-Core rev: d04d813189f388bc8505e29edc3166673a60c746) Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-02recipes-gnome: Add missing HOMEPAGE and DESCRIPTION for recipesMeh Mbeh Ida Delphine
Fixes: [YOCTO #13471] (From OE-Core rev: e501e87b847d915e97b11d966b5781059daaf362) Signed-off-by: Ida Delphine <idadelm@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26libhandy: Fix reproducibility issueRichard Purdie
(From OE-Core rev: ba559d5e07cbe92ee22308a1b5b8afc558c662dd) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26libsecret: Improve determimismRichard Purdie
(From OE-Core rev: 28175c44e7402397a24a00a4b056eef39b0a03fa) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26epiphany: Fix distributor contamination from /etc/os-releaseRichard Purdie
Set our own distro string rather than using the value from /etc/os-release. (From OE-Core rev: 77f23ece471e8855bfd8be06951f21cabce25545) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26epiphany: Fix reproducibility issueRichard Purdie
We don't want to encide BUILD_ROOT into target packages. This is used for build time tests but in our case those would be on target anyway do use the target paths. (From OE-Core rev: 2818dc90bd62487879e7da2c68357b39282415b0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26gtk-doc: Fix reproducibility issueRichard Purdie
config_data was including a build system path to pkg-config, fix this. (From OE-Core rev: 7b8f56224c12a40f4f0aca3f612198deb933af4d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26gcr: Fix reproducibility issueRichard Purdie
(From OE-Core rev: b53133572de9e5bdf77dd44831a86ec34bf41b2c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-19json-glib: upgrade 1.6.0 -> 1.6.2Anuj Mittal
(From OE-Core rev: eae6582575c5b1853b247820c0e354191fb44d4e) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-18gtk+3: upgrade 3.24.24 -> 3.24.25Anuj Mittal
(From OE-Core rev: 74c559a09b024eca34d0d7b0519618209b064d80) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-09libhandy: upgrade 1.0.2 -> 1.0.3Alexander Kanavin
(From OE-Core rev: 97acf2c86b7496385eabf57d5e21dae835a45e6b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-30gtk-doc: upgrade 1.33.1 -> 1.33.2Wang Mingyu
(From OE-Core rev: 89506684baf82448136d4ca3e3fb62dc5d4cbba4) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-29native: Stop clearing PACKAGESRichard Purdie
Native recipes have been special and they don't have packages generated from them. The RDEPENDS/RPROVIDES and other runtime package specific variables can contain important data about dependencies recipes need though and currently it is required to write this information explicitly in the native case. We now delete the packaging tasks for native recipes which removes the need to clear PACKAGES. The next step to improve the metadata is to stop clearing it and ensure any entries in these variables are remapped appropriately. The R* variables were already being processed by the class extension code but the implementation was suboptimal. This patch stops clearing PACKAGES and PACKAGES_DYNAMIC and fixes the places where that caused issues in OE-Core, for example PACKAGES additions in anonymous python without the "-native" suffix and a case where the included classes caused a self reference in DEPENDS which would once have been removed by the previous code. The implementation uses datastore/parser parameters to ensure that the variable overrides are not overwritten when calling setVar which is appropriate for a function as close to the core as this one is. Some now unneeded code in python3-setuptools is dropped, there are further changes like this which can follow. This change was verified with OE-Core by comparing task-depends.dot generated by "bitbake world -g" before and after the change, the files were identical. (From OE-Core rev: fd6a007efa7cb45101a66f294af81d9d33bb3fab) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-29gobject-introspection: Fix variable override orderRichard Purdie
The DEPENDS variable override ordering here was almostly certainly incorrect and led to weird behaviour when making changes elsewhere. Correct it. (From OE-Core rev: c8f7e92244b3c52c275a457aced69086800351d8) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-23adwaita-icon-theme: add version 3.34.3 backKai Kang
Newer versions of adwaita-icon-theme can't work well with librsvg 2.40. Boot up the core-image-sato image, and start "Media Player", most of the icons are not showed properly. The source code of librsvg has been adapted to rust, so it is impossible to update librsvg in oe core for now. Then add adwaita-icon-theme 3.34.3 back and set as preferred version. Duplicate one patch as well to fix patch fuzz issue. Ref: 1. https://gitlab.gnome.org/GNOME/adwaita-icon-theme/-/issues/84 2. https://people.gnome.org/~federico/blog/do-not-use-librsvg-2.40.x.html (From OE-Core rev: e46e8d638440446d34744e6b816f2446029e4a34) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-20gcr: upgrade 3.38.0 -> 3.38.1Anuj Mittal
(From OE-Core rev: 3e515429df3c1728ffa69b1aba8e5350f5430f44) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-12-31gdk-pixbuf: fix CVE-2020-29385Lee Chee Yang
Backport patch from https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/bdd3acbd48a575d418ba6bf1b32d7bda2fae1c81 image file in upstream patch is for test purpose only, it cause error during do_patch so drop it: File tests/test-images/fail/hang_114.gif: git binary diffs are not supported. (From OE-Core rev: 7cd401b7c60dba91f6fb10395ab4a10a267cf23d) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-12-30gtk+3: upgrade 3.24.23 -> 3.24.24Alexander Kanavin
(From OE-Core rev: 532f4c12c4edcc39addd2d92010023975dca3826) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-12-30epiphany: upgrade 3.38.1 -> 3.38.2Alexander Kanavin
(From OE-Core rev: 75fce00e3a289c912a4fe91fe1fa62cedff8d914) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-12-09libhandy: upgrade 1.0.1 -> 1.0.2Alexander Kanavin
(From OE-Core rev: 41e91f9b320694e5e8816a38d874595014fa6ef7) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-29gtk-doc: upgrade 1.33.0 -> 1.33.1zangrc
(From OE-Core rev: 790de5b5d7eb9dcfa55ed5c4d3c1c792fddf1480) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-08json-glib: update patch statusRoss Burton
(From OE-Core rev: 26b77f9a995aea9d7d77d216b31385012cad2523) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-08json-glib: use PACKAGECONFIG for testsRoss Burton
json-glib 1.6 has an option to enable or disable the tests, so use that instead of a do_install_append. (From OE-Core rev: cbfa29cda670222928ca692406114839c5e41e0c) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-03libhandy: upgrade 1.0.0 -> 1.0.1Alexander Kanavin
(From OE-Core rev: 26030503e882a8f6078abd334860470e6f900f06) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-03libgudev: upgrade 233 -> 234Alexander Kanavin
(From OE-Core rev: c6004c580169a6d0a03c208ddf69b43091e8e80e) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-03gtk+3: upgrade 3.24.22 -> 3.24.23Alexander Kanavin
(From OE-Core rev: 29944db7bda2294350dc0c2e8a864cc67cdeb876) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-03gcr: upgrade 3.36.0 -> 3.38.0Alexander Kanavin
(From OE-Core rev: d0d33f2aa7028593768e0ad2d09c729d170c858e) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-03adwaita-icon-theme: upgrade 3.36.1 -> 3.38.0Alexander Kanavin
(From OE-Core rev: ada61419ac96a7591231d62ee1d10d4b61b1fe56) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-31json-glib: fix reproducibilityAlexander Kanavin
(From OE-Core rev: fd7e1a40bf29b552b90e3b20863b8c79594bcd85) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30gtk-doc: upgrade 1.32 -> 1.33.0Alexander Kanavin
(From OE-Core rev: 12b008386d7e546db51dbb0c871a4e6d87e34dfe) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30epiphany: upgrade 3.36.4 -> 3.38.1Alexander Kanavin
libportal is a new hard dependency. (From OE-Core rev: 118dbb137adb11a8d92bdbf60ab3696176d64aa0) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30libportal: add a recipeAlexander Kanavin
This is a new build requirement of epiphany browser. (From OE-Core rev: 6a0888a146ab015c25309bafd8b2d5ebdd81b8a4) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30libhandy: upgrade 0.0.13 -> 1.0.0Alexander Kanavin
(From OE-Core rev: f6ce78a0bb50ab1411ecb8cf66a52d4e85273188) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30libsecret: update 0.20.3 -> 0.20.4Alexander Kanavin
Drop the patch as it is merged upstream. (From OE-Core rev: 05bd45017b9eaffc835d5cc42747ae21c0135fe8) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30gsettings-desktop-schemas: update 3.36.1 -> 3.38.0Alexander Kanavin
Drop 0001-Do-not-skip-gir-installation-for-cross-compiling.patch as upstream has done the same change. (From OE-Core rev: 50ecc0ae003895e416d5835b5a75ed4b246deea1) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30json-glib: upgrade 1.4.4 -> 1.6.0Alexander Kanavin
(From OE-Core rev: e241f48c2eaaa7c19b1665b2d3896722553ba8a1) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30gobject-introspection: upgrade 1.64.1 -> 1.66.1Alexander Kanavin
Add a patch to avoid build errors if building g-i data is disabled. (From OE-Core rev: e2c4cd1cebbd9e83e90759671147442d7f77d7c5) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30libdazzle: upgrade 3.36.0 -> 3.38.0Alexander Kanavin
(From OE-Core rev: f564fddd78e39cadefcd0c3a72414f263a648bbc) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-30meta: fix some unresponsive homepages and bugtracker linksMaxime Roussin-Bélanger
remove some extra whitespaces (From OE-Core rev: 32ce3716761165b9df12306249418645724122cc) Signed-off-by: Maxime Roussin-Bélanger <maxime.roussinbelanger@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-10-17License-Update: gdk-pixbuf: Fix LICENSE.Akira Shibakawa
As README.md says gdk-pixbuf is under not only LGPLv2.1 but also its later version, I fixed LICENSE value. (From OE-Core rev: e9800fecbae1e4565275cd1528397c3cec81bcab) Signed-off-by: Akira Shibakawa <arabishi900@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-25 15:20:19 +0000