summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* sysdig: disable building for ppcSaul Wold2021-05-191-0/+2
| | | | | | | Sysdig depends on tbb which no longer builds for powerpc Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencv: remove tbb packageconfig for powerpcSaul Wold2021-05-191-0/+3
| | | | | | | Since tbb does not build for powerpc remove it from the enabled list Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* surf: Upgrade 2.0 -> 2.1Leon Anavi2021-05-192-27/+14
| | | | | | | | | | | | Upgade Surf browser to release 2.1: - Remove accelerated canvas parameter - Remove external plugin handling License-Update: Update contributors in file LICENSE Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nano: upgrade 5.6 -> 5.7Andreas Müller2021-05-191-1/+2
| | | | | | | | | Full changelog is found at [1] [1] https://www.nano-editor.org/dist/latest/ChangeLog Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* portaudio-v19: upgrade 19.6.0 -> 19.7.0Andreas Müller2021-05-194-83/+64
| | | | | | | | | | | | | | | | | | | | * development continues on github * build with CMake * examples is a configure option -> replace (always empty) extra package by PACKAGECONFIG From announcement: * support for latest Mac OS APIs * Jack - fixes for device names that allows use on Linux systems with PipeWire * WASAPI - numerous improvements * OSS - better format support * ALSA - various fixes for hangs and crashes * WDMKS - improved performance and fixes * updated build scripts Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl: Fix CVE-2019-13616wangmy2021-05-192-0/+28
| | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13616 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c. Upstream-Status: Backport [https://github.com/libsdl-org/SDL/commit/97fefd050976bbbfca9608499f6a7d9fb86e70db] CVE: CVE-2019-13616 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29473wangmy2021-05-192-0/+22
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29473 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1587/commits/e6a0982f7cd9282052b6e3485a458d60629ffa0b] CVE: CVE-2021-29473 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29470wangmy2021-05-192-0/+33
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29470 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1581/commits/6628a69c036df2aa036290e6cd71767c159c79ed] CVE: CVE-2021-29470 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29464wangmy2021-05-192-0/+73
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29464 The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54] CVE: CVE-2021-29464 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-3482wangmy2021-05-192-1/+56
| | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3482 Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1523/commits/22ea582c6b74ada30bec3a6b15de3c3e52f2b4da] CVE: CVE-2021-3482 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29463wangmy2021-05-192-1/+122
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29463 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b] CVE: CVE-2021-29463 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29458wangmy2021-05-192-1/+39
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29458 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1536/commits/06d2db6e5fd2fcca9c060e95fc97f8a5b5d4c22d] CVE: CVE-2021-29458 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29457wangmy2021-05-192-1/+28
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29457 The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/0230620e6ea5e2da0911318e07ce6e66d1ebdf22] CVE: CVE-2021-29457 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hostapd: fix building with CONFIG_TLS=internalAlexander Vickberg2021-05-172-0/+46
| | | | | | | | | The patch recently added for CVE-2021-30004 broke compilation with CONFIG_TLS=internal. This adds the necessary function to let it compile again. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* span-lite: upgrade 0.8.1 -> 0.9.2William A. Kennington III2021-05-171-1/+1
| | | | | Signed-off-by: William A. Kennington III <wak@google.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiio: mark libxml2 as depends for usb_backendNuno Sá2021-05-171-1/+1
| | | | | | | | When usb_backend is configured, libxml2 is set as a RDEPEND. But, in reality we want it to be part of the DEPENDS list. Signed-off-by: Nuno Sá <nuno.sa@analog.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiio: add serial backend supportNuno Sá2021-05-171-1/+2
| | | | | | | This patch adds the serial backend to the PACKAGECONFIG list. Signed-off-by: Nuno Sá <nuno.sa@analog.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libraw: Move from meta-qt5-extra to meta-oeKhem Raj2021-05-171-0/+11
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Andreas Müller <schnitzeltony@gmail.com>
* googletest: Update to tip of trunkKhem Raj2021-05-171-4/+3
| | | | | | | Check the top level license for checksums, as it is now available and is BSD-3-Clause Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nss: remove -march vs -mcpu workaroundRoss Burton2021-05-141-4/+0
| | | | | | | | | | | | | | | | | | | NSS's build tries to be clever and passes for example -march=armv8-a+crypto explicitly, instead of relying on the person doing the compilation to set the right flags. This conflicts with our compiler flags which typically pass the ideal tune for the target, for example -mcpu=cortex-a55+crc+crypto. When this happens GCC warns that the flags conflict (which was promoted to an error, now fixed) and -march takes precedence over -mcpu. As there's a huge number of potential tune flags to remove to avoid the conflict, now that warnings are not fatal we can stop removing the flags and let GCC warn as the generated code is the same. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nss: disable -WerrorRoss Burton2021-05-141-0/+1
| | | | | | | | -Werror should be used by developers and not packagers, because new compiler flags or GCC versions can use new warnings. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libxmlb: upgrade 0.3.0 -> 0.3.1zhengruoqin2021-05-141-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libjcat: upgrade 0.1.6 -> 0.1.7zhengruoqin2021-05-141-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdivecomputer: upgrade 0.6.0 -> 0.7.0zhengruoqin2021-05-141-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iwd: upgrade 1.13 -> 1.14zangrc2021-05-142-10/+12
| | | | | | | | Refresh the following patch: 0001-build-Use-abs_top_srcdir-instead-of-abs_srcdir-for-e.patch Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gensio: upgrade 2.2.4 -> 2.2.5zangrc2021-05-141-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cloc: upgrade 1.88 -> 1.90zangrc2021-05-141-3/+3
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uftrace: Fix a plthook crash on aarch64 with binutils2.35.1 and later ↵wangmy2021-05-143-28/+48
| | | | | | | versions on aarch64 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-oe: add audit to pkg grpArmin Kuster2021-05-121-0/+1
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audit: migrate from meta-selinuxArmin Kuster2021-05-127-0/+586
| | | | | | | Move audit to a more common layer to simplify integration. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ostree: switch from default master branch to main to fix do_fetch failureMartin Jansa2021-05-121-1/+1
| | | | | | | * branch was renamed in upstream repo Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* breakpad: Fix type mismatch for SIGSTKSZKhem Raj2021-05-112-0/+35
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tbb: Fix build with GCC 11Khem Raj2021-05-112-0/+38
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mongodb: Do not use MINSIGSTKSZKhem Raj2021-05-112-0/+35
| | | | | | glibc 2.34 has made MINSIGSTKSZ non-constant Signed-off-by: Khem Raj <raj.khem@gmail.com>
* remmina: make avahi support optional and off by defaultAlexander Kanavin2021-05-111-1/+3
| | | | | | | | This requires gtk support enabled in avahi, which was disabled on oe-core. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vboxguestdrivers: upgrade 6.1.20 -> 6.1.22Gianfranco2021-05-111-2/+2
| | | | | | Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nmap: change shebang to python3Changqing Li2021-05-111-3/+5
| | | | | | | | upstream nmap is python2 compatiable now, but this recipe supports python3. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cdrkit: add nativesdk supportHongxu Jia2021-05-112-2/+33
| | | | | | | | | | | | | | - Fix an absolute path symlink issue, replace with a relative link - Fix installed-vs-shipped QA Issue of nativesdk package ... |ERROR: nativesdk-cdrkit-1.1.11-r0 do_package: QA Issue: nativesdk-cdrkit: Files/directories were installed but not shipped in any package: | /opt/windriver/wrlinux-graphics/21.18/sysroots/x86_64-wrlinuxsdk-linux/usr/sbin/netscsid ... Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* poppler: upgrade 21.04.0 -> 21.05.0Andreas Müller2021-05-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Release 21.05.0 core: * Fix crashes in malformed files * Export SplashFont* symbols used by Scribus * Minor code improvements qt5/qt6: * Make sure new signatures are always properly oriented * Allow to pass the border width when signing glib: * Enhance find to support multi-line matching utils: * pdftoppm: Fix regression when using single scaleTo. Issue #1062 build system: * Allow to disable building manual tests Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* apitrace: Upgrade to 0.10Khem Raj2021-05-112-2/+37
| | | | | | | | | | apitrace: Fix build with musl Changes are here [1] which fixed musl build [1] https://github.com/apitrace/apitrace/releases/tag/10.0 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mariadb: Upgrade to 10.5.10Khem Raj2021-05-116-56/+10
| | | | | | | | | Drop fix-a-building-failure.patch because upstream has made is narrower to apply to emulator builds and not just any cross compiling builds Add missing dependency on boost Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mariadb: Fix configureAndreas Müller2021-05-112-0/+36
| | | | | | | Assume recent CMake upgrade made this pop up. Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* minicoredumper: Replace pthread_mutexattr_setrobust_np with ↵Khem Raj2021-05-113-29/+34
| | | | | | | | pthread_mutexattr_setrobust Remove unused patch 0001-minicoredumper-Initialize-pointer-to-config-struct-t.patch Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grpc: Upgrade to 1.37.1Khem Raj2021-05-111-2/+2
| | | | | | | | Changes are here [1] [1] https://github.com/grpc/grpc/releases/tag/v1.37.1 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* abseil-cpp: Upgrade to lts_2021_03_24Khem Raj2021-05-113-25/+109
| | | | | | | | Fix build with glibc 2.34 while here Forward patches to this version Let system package the libraries Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sdbus-c++-libsystemd: Avoid hard dependency on rsyncKhem Raj2021-05-112-3/+57
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* icewm: Upgrade to 2.3.3Khem Raj2021-05-062-9/+26
| | | | | | | | | | | | | | Do not check for C++11, since it is a runtime check, wont work during cross compile, in anycase our compilers do support C++11 and default to c++ or newer std, so this check is redundant for OE toolchains Add new required build time deps on fribidi and imlib2 Changes are [1] [1] https://github.com/ice-wm/icewm/releases/tag/2.3.3 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* makedumpfile: Bump srcrevBruce Mitchell2021-05-063-11/+7
| | | | | | supports for kernel 5.10, prior to 1.6.9 release Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-oe: Add poke to packagegroup-meta-oe-devtoolsRomain Naour2021-05-061-0/+1
| | | | | Signed-off-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* poke: add optional json-c dependencyRomain Naour2021-05-051-1/+2
| | | | | | | | | | | | | | From [1]: "The poke machine-interface uses a protocol to communicate with clients, which is based on JSON. poke uses the json-c library to parse and build JSON strings. If this library is not found, poke will build without machine-interface support." [1] https://git.savannah.nongnu.org/cgit/poke.git/tree/DEPENDENCIES?h=releases/poke-1.2#n55 Signed-off-by: Romain Naour <romain.naour@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>