summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* colord: upgrade 1.4.4 -> 1.4.5Andreas Müller2021-05-242-6/+5
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dialog: upgrade 1.3-20210319 -> 1.3-20210509Andreas Müller2021-05-241-4/+2
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.14.0 -> 2.18.1Andreas Müller2021-05-241-2/+1
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fltk: upgrade 1.3.5 -> 1.3.6Andreas Müller2021-05-246-245/+19
| | | | | | | | | | | * DOPTION_BUILD_EXAMPLES was deprecated in favor of FLTK_BUILD_TEST * FLTK_BUILD_TEST fails for native due to reduced build * FLTK_BUILD_TEST fails for cross due ti trying to run cross fluid * Patches: 0002.. adjust / 0003.. upstream has acknowledged it a bad ides so change was commented out / 0004.. upstreamed Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* giflib: upgrade 5.1.4 -> 5.2.1Andreas Müller2021-05-242-32/+9
| | | | | | | | | * Project removed autotools configuration files. It is now a pure Makefile build so autotools are not required any more * Checked sources: Back ported CVE-patch can go Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libeigen: upgrade 3.3.7 -> 3.3.9Andreas Müller2021-05-221-3/+2
| | | | | | | Simplify packaging a bit Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgusb: upgrade 0.3.5 -> 0.3.6Andreas Müller2021-05-221-3/+2
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmxml: upgrade 3.1 -> 3.2Andreas Müller2021-05-221-2/+2
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* qpdf: upgrade 10.2.0 -> 10.3.2Andreas Müller2021-05-221-2/+1
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* protobuf: upgrade 3.15.2 -> 3.17.0Andreas Müller2021-05-221-1/+1
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mm-common: upgrade 1.0.2 -> 1.0.3Andreas Müller2021-05-221-2/+1
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* modemmanager: upgrade 1.16.2 -> 1.16.4Andreas Müller2021-05-221-1/+1
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libpeas: upgrade 1.26.0 -> 1.30.0Andreas Müller2021-05-223-64/+1
| | | | | | | (Identical) patches have been applied upstream Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* remmina: upgrade 1.4.11 -> 1.4.17Andreas Müller2021-05-221-16/+24
| | | | | | | | * 1.4.11 fails to fetch * do_install_append can go the only path left is metainfo and mime Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: upgrade 6.2.2 -> 6.2.3Andreas Müller2021-05-222-7/+5
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snappy: upgrade 1.1.8 -> 1.1.9Andreas Müller2021-05-221-3/+3
| | | | | | | Get sources from github repo Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xrdp: upgrade 0.9.15 -> 0.9.16Andreas Müller2021-05-222-4/+9
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ttf-lohit: upgrade 2 -> 2.92.1Andreas Müller2021-05-221-1/+1
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zsh: upgrade 5.4.2 -> 5.8Andreas Müller2021-05-221-15/+3
| | | | | | | | | * without autotools-brokensep install fails for several isssues. Started to fix them but stooped after third * remove some odd/orphaned code in recipe Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnuplot: upgrade 5.2.8 -> 5.4.1Andreas Müller2021-05-224-30/+33
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: Use PACKAGECONFIG for build optionsRobert Joslyn2021-05-211-4/+13
| | | | | | | | | | | | | | | | | | | | Make the dependencies optional via PACKAGECONFIG where possible to make it easier for users to enable or disable them as desired. Set the new PACKAGECONFIG defaults to recreate what was built previously. The configure script does not have a manpages option, resulting in a warning: ctags-5.9.20210502.0-r0 do_configure: QA Issue: ctags: invalid PACKAGECONFIG: manpages [invalid-packageconfig] The configure script detects if rst2man.py is available, and enables creating the man pages if found. Add python3-docutils-native as a dependency only when documentation is requested. Remove commented code which looks like leftover debugging. The binary is installed as expected. Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencv: Disable tbb on riscv/muslKhem Raj2021-05-201-0/+3
| | | | | | | getcontext|setcontext functionality is provided via libucontext for musl but this library is not yet ported to RISCV Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtinyxml2: upgrade 8.0.0 -> 8.1.0zhengruoqin2021-05-191-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libqmi: upgrade 1.28.2 -> 1.28.4zhengruoqin2021-05-191-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postgresql: upgrade 13.2 -> 13.3zangrc2021-05-192-2/+2
| | | | | | | | Refresh the following patch: 0001-configure.in-bypass-autoconf-2.69-version-check.patch Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* makedumpfile: upgrade 1.6.8 -> 1.6.9zangrc2021-05-191-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* trace-cmd: Conflict resolutionwangmy2021-05-191-0/+2
| | | | | | | perf(oe-core) also uses the doc included in plugins/, so package it in own subdirs of trace-cmd. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sysdig: disable building for ppcSaul Wold2021-05-191-0/+2
| | | | | | | Sysdig depends on tbb which no longer builds for powerpc Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencv: remove tbb packageconfig for powerpcSaul Wold2021-05-191-0/+3
| | | | | | | Since tbb does not build for powerpc remove it from the enabled list Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* surf: Upgrade 2.0 -> 2.1Leon Anavi2021-05-192-27/+14
| | | | | | | | | | | | Upgade Surf browser to release 2.1: - Remove accelerated canvas parameter - Remove external plugin handling License-Update: Update contributors in file LICENSE Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nano: upgrade 5.6 -> 5.7Andreas Müller2021-05-191-1/+2
| | | | | | | | | Full changelog is found at [1] [1] https://www.nano-editor.org/dist/latest/ChangeLog Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* portaudio-v19: upgrade 19.6.0 -> 19.7.0Andreas Müller2021-05-194-83/+64
| | | | | | | | | | | | | | | | | | | | * development continues on github * build with CMake * examples is a configure option -> replace (always empty) extra package by PACKAGECONFIG From announcement: * support for latest Mac OS APIs * Jack - fixes for device names that allows use on Linux systems with PipeWire * WASAPI - numerous improvements * OSS - better format support * ALSA - various fixes for hangs and crashes * WDMKS - improved performance and fixes * updated build scripts Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl: Fix CVE-2019-13616wangmy2021-05-192-0/+28
| | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13616 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c. Upstream-Status: Backport [https://github.com/libsdl-org/SDL/commit/97fefd050976bbbfca9608499f6a7d9fb86e70db] CVE: CVE-2019-13616 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29473wangmy2021-05-192-0/+22
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29473 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1587/commits/e6a0982f7cd9282052b6e3485a458d60629ffa0b] CVE: CVE-2021-29473 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29470wangmy2021-05-192-0/+33
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29470 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1581/commits/6628a69c036df2aa036290e6cd71767c159c79ed] CVE: CVE-2021-29470 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29464wangmy2021-05-192-0/+73
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29464 The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54] CVE: CVE-2021-29464 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-3482wangmy2021-05-192-1/+56
| | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3482 Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1523/commits/22ea582c6b74ada30bec3a6b15de3c3e52f2b4da] CVE: CVE-2021-3482 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29463wangmy2021-05-192-1/+122
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29463 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b] CVE: CVE-2021-29463 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29458wangmy2021-05-192-1/+39
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29458 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1536/commits/06d2db6e5fd2fcca9c060e95fc97f8a5b5d4c22d] CVE: CVE-2021-29458 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: Fix CVE-2021-29457wangmy2021-05-192-1/+28
| | | | | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29457 The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/0230620e6ea5e2da0911318e07ce6e66d1ebdf22] CVE: CVE-2021-29457 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hostapd: fix building with CONFIG_TLS=internalAlexander Vickberg2021-05-172-0/+46
| | | | | | | | | The patch recently added for CVE-2021-30004 broke compilation with CONFIG_TLS=internal. This adds the necessary function to let it compile again. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* span-lite: upgrade 0.8.1 -> 0.9.2William A. Kennington III2021-05-171-1/+1
| | | | | Signed-off-by: William A. Kennington III <wak@google.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiio: mark libxml2 as depends for usb_backendNuno Sá2021-05-171-1/+1
| | | | | | | | When usb_backend is configured, libxml2 is set as a RDEPEND. But, in reality we want it to be part of the DEPENDS list. Signed-off-by: Nuno Sá <nuno.sa@analog.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiio: add serial backend supportNuno Sá2021-05-171-1/+2
| | | | | | | This patch adds the serial backend to the PACKAGECONFIG list. Signed-off-by: Nuno Sá <nuno.sa@analog.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libraw: Move from meta-qt5-extra to meta-oeKhem Raj2021-05-171-0/+11
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Andreas Müller <schnitzeltony@gmail.com>
* googletest: Update to tip of trunkKhem Raj2021-05-171-4/+3
| | | | | | | Check the top level license for checksums, as it is now available and is BSD-3-Clause Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nss: remove -march vs -mcpu workaroundRoss Burton2021-05-141-4/+0
| | | | | | | | | | | | | | | | | | | NSS's build tries to be clever and passes for example -march=armv8-a+crypto explicitly, instead of relying on the person doing the compilation to set the right flags. This conflicts with our compiler flags which typically pass the ideal tune for the target, for example -mcpu=cortex-a55+crc+crypto. When this happens GCC warns that the flags conflict (which was promoted to an error, now fixed) and -march takes precedence over -mcpu. As there's a huge number of potential tune flags to remove to avoid the conflict, now that warnings are not fatal we can stop removing the flags and let GCC warn as the generated code is the same. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nss: disable -WerrorRoss Burton2021-05-141-0/+1
| | | | | | | | -Werror should be used by developers and not packagers, because new compiler flags or GCC versions can use new warnings. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libxmlb: upgrade 0.3.0 -> 0.3.1zhengruoqin2021-05-141-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libjcat: upgrade 0.1.6 -> 0.1.7zhengruoqin2021-05-141-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>