summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core/ncurses
Commit message (Collapse)AuthorAgeFilesLines
* ncurses: Fix CVE-2023-45918Soumya Sambu13 days2-0/+181
| | | | | | | | | | | | ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. References: https://nvd.nist.gov/vuln/detail/CVE-2023-45918 (From OE-Core rev: 6573995adf4cfd48b036f8463b39f3864fcfd85b) Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Fix CVE-2023-50495Mingli Yu2024-04-232-0/+302
| | | | | | | | | | | | Backport a patch [1] to fix CVE-2023-50495. [1] http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commitdiff;h=7723dd6799ab10b32047ec73b14df9f107bafe99 (From OE-Core rev: bdf7b7460a4816e3d447264730a2814209667fb0) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Always pass -D_GNU_SOURCEKhem Raj2024-02-211-4/+2
| | | | | | | | | | | | So far it was assumed that it was detected ok for target recipe but actually it ends up with warnings and build moves on, however with gcc-14 these warnings are treated as errors and we see the problem even with target recipes. (From OE-Core rev: da381fb3d9dcd0e66bc3b48bdfde95cd29f0c654) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Fix - tty is hung after resetSoumya Sambu2023-12-232-0/+500
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Serial tty is hung after reset command - $echo "test " >> /dev/ttyS0 test $stty -a < /dev/ttyS0 speed 115200 baud; rows 34; columns 153; line = 0; intr = ^C; quit = ^\; erase = ^?; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = ^V; discard = ^O; min = 1; time = 0; -parenb -parodd -cmspar cs8 hupcl -cstopb cread clocal -crtscts -ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr icrnl ixon ixoff -iuclc -ixany -imaxbel iutf8 opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0 isig icanon -iexten echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc $reset $echo "test " >> /dev/ttyS0 ^C $stty -a < /dev/ttyS0 ^C Updating reset_tty_settings API with latest code which fixes tty hung issue (From OE-Core rev: 2419afd8024f903efff862f3f7f7772aedea7613) Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: fix CVE-2023-29491Chen Qi2023-08-012-0/+463
| | | | | | | | | | Backport patch to fix CVE-2023-29491. (From OE-Core rev: f1c95ae70f7aac574daf5b935a02bbba0d6f8a16) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: upgrade 6.3+20220423 -> 6.4Alexander Kanavin2023-02-092-6/+16
| | | | | | | | (From OE-Core rev: b0d653b443c68b8d254e52790da76496e8f16a7b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: restore version check as it's now again working due to release of 6.4Alexander Kanavin2023-01-061-1/+0
| | | | | | | | (From OE-Core rev: e2a7d23f0ad6db8939f9320eb86b6d67f0e52638) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Fix configure tests for exit and mbstate_tKhem Raj2022-09-012-0/+23
| | | | | | | | | | These tests do not include needed headers which results in warnings and as errors when using -Werror or latest clang e.g. (From OE-Core rev: 92f191c304b5d53c14be23f7a5d57b0f9f101767) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: mark upstream version as unknownAlexander Kanavin2022-07-081-0/+1
| | | | | | | | | | | This is to avoid check-version reporting a broken current version (6.3+nnnn sorts higher than 6.3 and isn't tagged in upstream git). (From OE-Core rev: 25668027b105144598a367797076818c9cf9b373) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: use GitHub mirror, not Debian's packagingRoss Burton2022-07-012-2/+2
| | | | | | | | | | | The GitHub mirror of ncurses is updated daily, whereas the Debian packaging repository is only updated when they do an upgrade. (From OE-Core rev: 3c53e0dfb2d41ab2c933764ecd5a56c5f43bf8eb) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: 6.3 -> 6.3+20220423Richard Purdie2022-06-302-3/+3
| | | | | | | | Includes a fix for CVE-2022-29458 (From OE-Core rev: 6032a1049d4693f17ab7f4b67f9b22719decadde) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: use COPYING fileKonrad Weihmann2022-04-191-1/+1
| | | | | | | | | | which has the same info as the in-file header used in before (From OE-Core rev: 8618589c10f85b7a92de01d93180751a804837ea) Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: poll() works, but only on LinuxRoss Burton2021-11-131-4/+1
| | | | | | | | | | | | | | | | ncurses does AC_TRY_RUN() to determine is poll() actually works. As that doesn't work in cross-compiles, we seed it with 'yes'. However, MinGW doesn't have a working poll(), so use a :linux override so that this only applies to Linux builds. The ncurses build now compiles but doesn't link in MinGW, which is a step forwards at least. (From OE-Core rev: f57de22c4a40cd9178f7726d544beca66384d25d) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses.inc: Remove a no longer relevant commentPeter Kjellerstedt2021-11-111-1/+0
| | | | | | | (From OE-Core rev: 62f4a0a2291aa39a00b98358a539cc2177744e64) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: use ln -rs instead of lnrRoss Burton2021-11-101-2/+2
| | | | | | | | | | | | | | | | | lnr is a script in oe-core that creates relative symlinks, with the same behaviour as `ln --relative --symlink`. It was added back in 2014[1] as not all of the supported host distributions at the time shipped coreutils 8.16, the first release with --relative. However the oldest coreutils release in the supported distributions is now 8.22 in CentOS 7, so lnr can be deprecated and users switched to ln. [1] 6ae3b85eaffd1b0b6914422e8de7c1230723157d (From OE-Core rev: 1ca455a98de4c713f58df0a537d4c982d256cd68) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Add explict branch to git SRC_URIsRichard Purdie2021-10-301-1/+1
| | | | | | | | | | | | | There is uncertainty about the default branch name in git going forward. To try and cover the different possible outcomes, add branch names to all git:// and gitsm:// SRC_URI entries. This update was made with the script added to contrib in this patch which aims to help others convert other layers. (From OE-Core rev: b51c405faf6f8c0365f7533bfaf470d79152a463) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: update 6.2 -> 6.3Alexander Kanavin2021-10-283-19/+18
| | | | | | | | (From OE-Core rev: db7666551ee1f0e0cf63a36ea24babe986e36713) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Convert to new override syntaxRichard Purdie2021-08-021-19/+19
| | | | | | | | | | | | This is the result of automated script conversion: scripts/contrib/convert-overrides.py <oe-core directory> converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Don't put terminfo into the sysrootRichard Purdie2021-01-281-0/+5
| | | | | | | | | | | This recudes the file count from ~2850 to ~100 which is a huge win for reducing build directory clutter, its unlikely anything uses the terminfo data or man pages in the sysroot. This is especially helpful as we usually end up with two copies of these sets of files. (From OE-Core rev: 443633dfc20177ef88a388d96745675817510c99) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Prevent LDFLAGS being emitted in .pc filesNathan Rossi2020-12-182-0/+30
| | | | | | | | | | | | | | | | | | | | | By default ncurses includes the values of LDFLAGS in its output pkgconfig .pc files. This causes issues because OE includes options that are specific to either the build host, or build configuration. These options are not expected to be embedded in the pkgconfig output that is installed. Specifically this change resolves issues with uninative, where uninative includes '-Wl,--dynamic-linker=' in LDFLAGS in order to force the building and execution of native binaries against the dynamic linker provided by uninative. This path is specific to TMPDIR at the time of build, such that the installed files (and the associated sstate) have this path. This prevents the sstate from being portable across build directories/hosts. (From OE-Core rev: ef960d14bd9cecb9a3b50994636fbd455f06104a) Signed-off-by: Nathan Rossi <nathan@nathanrossi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Make ncurses-tools depend on ncurses-terminfo-baseRobert Yang2020-12-151-1/+1
| | | | | | | | | | | | | Fixed when ncurses-terminfo-base is not installed: $ infocmp infocmp: couldn't open terminfo file linux. The required file is in ncurses-terminfo-base (From OE-Core rev: f3e0a6bf1b7d9009c253e3f97df8736ecf3aa79b) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: only include upstream releases in version checkAlexander Kanavin2020-10-201-1/+1
| | | | | | | (From OE-Core rev: 7381ec1e55ebe0f79a6e93076c0f146b988f9f13) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Create alternative symlinks for st and st-256colorKhem Raj2020-09-211-0/+5
| | | | | | | | | Adjust for other st implementations (From OE-Core rev: 151e7306cbd0cc004ee29aab3267e3295710a739) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: remove config.cacheRoss Burton2020-09-123-7/+3
| | | | | | | | | | | | Instead of having a config.cache that overrides the system site files, simply set the values in CACHED_CONFIGUREVARS. We can also drop the mkstemp check as the configure.ac assumes it works, leaving just nanosleep. (From OE-Core rev: c30c90e3adfa91407c37838c971e251f8482e2b8) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Comment out version parsing that broke CVE checkingAdrian Bunk2020-02-291-1/+2
| | | | | | | | | | This will be needed again when using patchlevel versions again. Also make it more generic. (From OE-Core rev: 7939288700ad35ed43e5988371e16d5afc594a57) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: upgrade 6.1+20191019 -> 6.2Alexander Kanavin2020-02-282-2/+2
| | | | | | | | License-Update: copyright years and holders (From OE-Core rev: f59334e70313676c7ab3216cb9583eefb27835e6) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Fix reproducibility issueRichard Purdie2020-02-081-0/+1
| | | | | | | | | | | | The build was deciding whether to rename manpages based upon the presence of /etc/debian_version. Be explicit about the configuration instead and ensure determinism. [YOCTO #13781] (From OE-Core rev: 09c8a28893e7ca94a44232d802e1cb02a8f34b87) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: add CVE_VERSIONAnuj Mittal2020-02-051-0/+2
| | | | | | | | | | Include the version number in a format that is comparable to what we get from NVD. (From OE-Core rev: fdb2a95d5e0265de1172940b6dc71fc7d602e8d1) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: upgrade 6.1+20190803 -> 6.1+20191019Alexander Kanavin2020-02-032-174/+4
| | | | | | | (From OE-Core rev: 325fe5f68bc698f78f5c1a14407c0bbb4cba45f7) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: fix CVE-2019-17594, CVE-2019-17595Trevor Gamblin2019-10-312-0/+170
| | | | | | | | | | | Backport changes to tinfo/comp_hash.c, tinfo/parse_entry.c, and progs/dump_entry.c from upstream to fix CVEs. (From OE-Core rev: 69c31032f1ec0e300c3247efa71aa9b4ebdaf23d) Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: upgrade 6.1+20181013 -> 6.1+20190803Hongxu Jia2019-08-221-1/+1
| | | | | | (From OE-Core rev: 8c5dc072b24c1b82b9254a80efde91aff8e8fa76) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "ncurses: fix incorrect UPSTREAM_CHECK_GITTAGREGEX"Alexander Kanavin2019-06-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 91227184b59df30222e45abf2edf13e4e65164a1. Instead of fixing incorrect regex, the commit actually broke the correct one. Before the reverted commit: alexander@alexander-box:~/development/poky$ devtool check-upgrade-status ncurses INFO: ncurses 6.1 6.1+20181013 Hongxu Jia <hongxu.jia@windriver.com> 7a97a7f937762ba342d5b2fd7cd090885a809835 After the reverted commit: alexander@alexander-box:~/development/poky$ devtool check-upgrade-status ncurses INFO: ncurses 6.1 UNKNOWN_BROKEN Hongxu Jia <hongxu.jia@windriver.com> The code in bitbake/lib/bb/fetch2/git.py actually splits each tag with '/' as separator and takes only the last part for some reason, so the "debian/" or "upstream/" prefixes are never a part of the string that is matched against regex: https://salsa.debian.org/debian/ncurses/tags (From OE-Core rev: b6f4c130e5b2df458bf9d1b2d8edc8ac87fecf12) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: fix incorrect UPSTREAM_CHECK_GITTAGREGEXHongxu Jia2019-05-121-1/+1
| | | | | | | | | | | | | | | The upstream git tag has a `upstream/' prefix, such as: >>> import re >>> pattern = "upstream/(?P<pver>\d+(\.\d+)+(\+\d+)*)" >>> string = "upstream/6.1+20181013" >>> result = re.match(pattern, string) >>> result['pver'] '6.1+20181013' (From OE-Core rev: 50c872f402656e192d47b7a64e003f345227e55c) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Add --cache-file to EXTRA_OECONFRobert Yang2019-01-241-1/+1
| | | | | | | | | | | | | This can save configure time since it runs configure multiple times: $ time bitbake ncurses-native -cconfigure 35s -> 25s Saved 10s (From OE-Core rev: 5607ae1ca59fa899ba7507ecfda7c7b0e6bf022f) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Fix Deprecated warnings from regexsRichard Purdie2019-01-161-2/+2
| | | | | | | | | | | | | | | | | | | | Fix handling of escape characters in regexs and hence fix python Deprecation warnings which will be problematic in python 3.8. Note that some show up as: """ meta/classes/package.bbclass:1293: DeprecationWarning: invalid escape sequence \.   """ where the problem isn't on 1293 in package.bbclass but in some _prepend to a package.bbclass function in a different file like mesa.inc, often from do_package_split() calls. (From OE-Core rev: 4b1c0c7d5525fc4cea9e0f02ec54e92a6fbc6199) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: upgrade 6.1 -> 6.1+20181013Hongxu Jia2018-11-231-1/+1
| | | | | | | (From OE-Core rev: 0471efa2189c0ec2d4dece259e54cd38f82315b2) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: upgrade 6.1 -> 6.1+20180714Hongxu Jia2018-11-141-1/+1
| | | | | | | (From OE-Core rev: c1d824c3bd3ff8651df0083a47e4cedbaa180831) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: 6.1 -> 6.1+20180630Hongxu Jia2018-07-041-1/+1
| | | | | | | | (From OE-Core rev: 397410d6ca6864c9a956b8a1e602b97f57d0031f) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncureses: 6.0+20171125 -> 6.1Hongxu Jia2018-05-044-17/+18
| | | | | | | | | | | | | | | | | | | | | | | | 1. Rebase 0001, 0002 2. Fix [already-stripped] QA Issue Since the following commit add, it strip executables which are installed by default. ... commit 087eaf92c621098927f3f98e3652411de48f8b6b Author: Sven Joachim <svenjoac@gmx.de> Date: Sun Jan 21 08:01:41 2018 +0100 Import upstream patch 20180120 20180120 + build-fix in picsmap.c for stdint.h existence. + add --disable-stripping option to configure scripts. ... (From OE-Core rev: 09bc55eeb41a6e06438b35e5456c66198d549b92) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: change SRC_URI from Debian anonscm to salsaMikko Rapeli2018-03-281-1/+1
| | | | | | | | | | | | | | | Debian anonscm service in Alioth is shutdown and thus fetching ncurses sources fails. https://wiki.debian.org/Alioth "Alioth is broken, and there is nobody around to fix it. Don't ask the remaining people who give it life support to implement fixes and changes. It is being replaced by a cocktail of ?GitLab (see Salsa), read-only repos and keep-alive mechanisms. See below for more information." (From OE-Core rev: 8fab5794218445ddb3e8f73a74fa3f130e7c42f6) Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Abstract out termlibKhem Raj2018-03-251-1/+2
| | | | | | | | | | | | termlib needs to be disabled on some targets e.g. mingw this change paves the way for doing that. Functionally it does not change anything for other platforms (From OE-Core rev: 88f33e1e5ba4f85093f60a296cba3ee1c1341c43) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: fix deletion of /usr/lib/terminfoKoen Kooi2018-03-151-1/+4
| | | | | | | | | | Ncurses doesn't honour ${libdir} for terminfo, so try more options to remove it. (From OE-Core rev: 17fd322e925cf492b22c75e296d5fee31e3511db) Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: fix do_install failure when base_libdir has more than one levelKoen Kooi2018-03-151-1/+1
| | | | | | | | | | Other sections of the .inc already use mkdir -p, so use it here as well. (From OE-Core rev: 62434e5021b99391a0c129a40bf943465a19e7ce) Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: 6.0+20170715 -> 6.0+20171125Hongxu Jia2018-02-062-543/+1
| | | | | | | | | | - Drop backported CVE fix (From OE-Core rev: 382e861b8c89c65b3538c706361767eff78d4a5a) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: CVE-2017-13732, CVE-2017-13734, CVE-2017-13730, CVE-2017-13729, ↵Ovidiu Panait2017-09-212-0/+542
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2017-13728, CVE-2017-13731 There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack. There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack. There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack. There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack. There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack. There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack. References: https://nvd.nist.gov/vuln/detail/CVE-2017-13734 https://nvd.nist.gov/vuln/detail/CVE-2017-13732 https://nvd.nist.gov/vuln/detail/CVE-2017-13731 https://nvd.nist.gov/vuln/detail/CVE-2017-13730 https://nvd.nist.gov/vuln/detail/CVE-2017-13729 https://nvd.nist.gov/vuln/detail/CVE-2017-13728 Upstream patch: https://anonscm.debian.org/cgit/collab-maint/ncurses.git/commit/?id=129aac80802d997b86ab0663836b7fdafb8e3926 (From OE-Core rev: 52d0f351062da730055ffc6b953ff4e68ddb437f) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: 6.0+20161126 -> 6.0+20170715Hongxu Jia2017-08-184-30/+42
| | | | | | | | | | | | | | | | | | | | | | | Rebase patches: - tic-hang.patch -> 0001 - configure-reproducible.patch -> 0002 Drop fix-cflags-mangle.patch, which accepted by upstream ... commit 1b74f120ab7be89011408a6ad0f1c748a314bae8 Author: Sven Joachim <svenjoac@gmx.de> Date: Sun Feb 26 09:01:34 2017 +0100 Import upstream patch 20170225 20170225 + fixes for CF_CC_ENV_FLAGS (report by Ross Burton). ... (From OE-Core rev: a4ad0703e1209fee6cd89bf74088931785c4d8c7) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: add SYSROOT_DESTDIR for siteconfig_gencacheJackie Huang2017-07-301-0/+2
| | | | | | | | | | | | | After switching to Recipe Specific Sysroots, ncurses will not be populated in its own sysroots, then siteconfig_gencache fails to find some headers, so add ${SYSROOT_DESTDIR}/${includedir} into the search list to fix the issue. (From OE-Core rev: 2ef34f7fb60ecdff29aae1d54a90a2e765c15e1e) Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Drop incorrect optionRichard Purdie2017-04-101-1/+0
| | | | | | | | | The --disable-static option doesn't exist in ncurses. Its equivalent is --without-normal so remove the option which does nothing. (From OE-Core rev: 974ddd2f99be04f44978c1bce054ed75c9367631) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses_6.0: Improve reproducibilityJuro Bystricky2017-04-012-0/+21
| | | | | | | | | | | | | | Build static libraries without the binutils "ar" -U option. This option deliberately breaks deterministic mode. The option seems to be a relic from 2015, intended as a workaround for some unspecified build problems. [YOCTO#11247] (From OE-Core rev: 46c757d0ca7ff294a7e55c130698fd256b69b62e) Signed-off-by: Juro Bystricky <juro.bystricky@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: 6.0+20160625 -> 6.0+20161126Hongxu Jia2017-02-232-1/+20
| | | | | | | | | | Add a patch to fix the CC/CFLAGS mangling that broke builds. [RB] (From OE-Core rev: e5d1cbbc1a04b0b190f3706e7ab7421c87d46c78) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-05-22 06:56:28 +0000