summaryrefslogtreecommitdiffstats
path: root/meta/recipes-devtools
Commit message (Collapse)AuthorAgeFilesLines
* cmake: whitelist CVE-2016-10642Ross Burton2020-09-171-0/+4
| | | | | | | | | | | | | This CVE is specific to the npm package that can install cmake, so isn't relevant to our cmake recipe. (From OE-Core rev: ad11e4a9afea5a4c9dd34a7fa37b82efd61952a4) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8e74ed809ec4c1f61264ecf5be4bc319e5e07766) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* autoconf: consolidate DEPENDSRoss Burton2020-09-171-3/+2
| | | | | | | | | | | | | | Depending on nativesdk- varients in a nativesdk build isn't correct, so just collapse the DEPENDS down and let bitbake do the right thing (which is leaving them as -native). (From OE-Core rev: 32902a2763a7557d52bf27f3717b8f9b27275284) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4864167ad4ed4c57e49f2aa5e7c58383bddb052b) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: fix CVE-2020-14364 CVE-2020-14415Lee Chee Yang2020-09-173-0/+132
| | | | | | | | (From OE-Core rev: 1a150f0df36892283686e3e1afb30a7742c8e252) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* json-c: Fix CVE-2020-12762Khem Raj2020-09-102-0/+232
| | | | | | | | (From OE-Core rev: d26c5882ee5dbdb41d5c8903b0e470f2291512a5) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* perl: fix CVE-2020-12723Lee Chee Yang2020-08-272-0/+303
| | | | | | | | | | | | | Minor changes to the test cases count in the .patch file to make it align with current version, so the fixes can be apply. Changes apply to line: https://github.com/perl/perl5/commit/66bbb51b93253a3f87d11c2695cfb7bdb782184a#diff-e31ddd69cf47acf02911647c691a0283L28 (From OE-Core rev: 43f1aa650c45a0976230c7c2f79d8efe0e6e159a) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Upgrade to 1.14.7Khem Raj2020-08-211-2/+2
| | | | | | | | | | | | | CVE_CHECK_WHITELIST += "CVE-2020-16845" (From OE-Core rev: 787c7a2b355a06bc5d6d6fa30ccc37111c78ee00) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Li Zhou <li.zhou@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 91580c9d335e0fbee95f94be6f9b34298d3e9a48) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: update 1.14.4 -> 1.14.6Khem Raj2020-08-211-3/+2
| | | | | | | | | | | | | | Includes security Fixes for CVE-2020-14039 and CVE-2020-15586 (cherry picked from commit 97d5c2d1f2dffe2518f46bbe57cb9348eb59c633) (cherry picked from commit 6591d269792fe864d7af4e379035f1cebc4510f5) (cherry picked from commit c9011d04eb624aeabf5d707e88de80137bcc2eb1) (From OE-Core rev: e33d2ddaa6c8945227a5bbf4e96d63606d0fab38) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc-9.3.inc: Mark CVE-2019-15847 as fixedKhem Raj2020-08-211-0/+2
| | | | | | | | | | | We do not have explicit patch to mark it and cve checker gets confused, so help it out (From OE-Core rev: 17c654c34d59b1491f41fc328222697f407c23b1) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: fix CVE-2020-15863Lee Chee Yang2020-08-122-0/+64
| | | | | | | | (From OE-Core rev: d6eb50dfe66838e6bea061cbd1a120981777b700) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ruby: upgrade 2.7.0 -> 2.7.1zhengruoqin2020-08-121-2/+2
| | | | | | | | | | | | | | | This release includes security fixes: CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix) CVE-2020-10933: Heap exposure vulnerability in the socket library (From OE-Core rev: 51b45ec3fcdc3c338f8a141110abf8aa5d374e5e) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8d9b48bdf25363fb115a6311b031a7e5da8e0d4d) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm: fix nativesdk's default var locationChen Qi2020-07-311-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | For now, the nativesdk-rpm's %_var in /usr/lib/rpm/macros is '/var'. This is causing error when running `rpm -qplv A.rpm'. error: cannot open Packages index using db5 - Permission denied (13) error: cannot open Packages database in /var/lib/rpm The rpm in SDK should be using its own database. So we should remove this configure option, letting the SDK's native sysroot prefix to be there in %_var. In fact, '%_usr' in macros has already got the prefix. After this change, we have in the macros file lines like below. """ %_usr /opt/windriver/wrlinux/20.29/sysroots/x86_64-wrlinuxsdk-linux/usr %_usrsrc %{_usr}/src %_var /opt/windriver/wrlinux/20.29/sysroots/x86_64-wrlinuxsdk-linux/var """ (From OE-Core rev: 4e0d1bdc6e896c7dedccf615d6d0da9eb91d9b1d) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 13e17930062cb3f816516ba7dbeb70d6da7174dd) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go-dep: Fix build on riscv64Khem Raj2020-07-222-0/+145575
| | | | | | | | | | | | Bring in only patch from meta-riscv here (From OE-Core rev: ecd7563cc29d5b473a3c71f35c4d9c98ff4d2349) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2e6e7b0be6e5ba5ab8fe9478c1dfdd530d22123f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Disbale CGO for riscv64Khem Raj2020-07-222-1/+2
| | | | | | | | | | | | | | | | | | cgo is still not available in go for riscv64, we will re-evaluate it once we upgrade to 1.15 Fixes | /usr/src/debug/go-runtime/1.14.4-r0/go/src/runtime/cgo/gcc_util.c:23: undefined reference to `_cgo_sys_thread_start' [YOCTO #13966] (From OE-Core rev: 987d29d0b0dfa19ef6564996198f22c2b08f6ff9) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f512b3308ed6ee878c77f72b9235ada83d107dba) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* subversion: extend for nativesdkJens Rehsack2020-07-221-1/+1
| | | | | | | | | | | | | | | For SDK environments where people still use subversion, let it easily being added to buildtools-tarball to invite more developers relying on Yocto based SDKs without much requirement to setup anything on the development workplace. (From OE-Core rev: 795781db8a82c9268fcabc93dd54cb6b07cbe9c8) Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 586a15b76f879f49c5224116cbf506b7ccf96cd2) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bison: fix Argument list too long errorLee Chee Yang2020-07-221-1/+1
| | | | | | | | | | | | fix Argument list too long error when len(TMPDIR) = 410 (From OE-Core rev: 90c75ff2e696e984d18e33726d1d07647b140ee6) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 73f05ba58dcee57e25712f9aee97535d9a32c982) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: fix CVE-2020-14422Lee Chee Yang2020-07-072-0/+78
| | | | | | | | (From OE-Core rev: 0400d217d0891ee553926c10d7caaabc8bebc22e) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: fix CVE-2020-10702/10761/13362/13659/13800Lee Chee Yang2020-07-076-0/+374
| | | | | | | | | | | | | | | fix these CVE: CVE-2020-10702 CVE-2020-10761 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 (From OE-Core rev: 98c4642c526259fc664723145a1d6026b491032d) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-libarchive-c: add the missing rdependsMingli Yu2020-07-071-1/+5
| | | | | | | | | | | | | | | | | | Add the missing rdepends to fix below error: # python3 [snip] >>> import libarchive [snip] ModuleNotFoundError: No module named 'ctypes' ModuleNotFoundError: No module named 'mmap' (From OE-Core rev: 347e6fafea8bd9c715d87882159fc2d4bbde0cc7) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b3a2615878bc7515a7bdace525dc27be45f158e2) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pseudo: Fix attr errors due to incorrect library resolution issuesRichard Purdie2020-07-022-0/+55
| | | | | | | | | | | | | | | | | | | | | | | | | On a tumbleweed system, "install X Y" was showing the error: pseudo: ENOSYS for 'fsetxattr'. which was being caused by dlsym() for that function returning NULL. This appears to be due to it finding an unresolved symbol in libacl for this symbol in libattr. It hasn't been resolved so its NULL. dlerror() returns nothing since this is a valid symbol entry, its just not the one we want. We can add the glibc version string for the symbol we actually want so we get that version rather than the libattr/libacl one. The calls in libattr are just wrappers around the libc version so our attaching to the libc versions should intercept any accesses via these too. [YOCTO #13952] (From OE-Core rev: 60ae9e6d31dcfc06961fedf7622a204162d3f464) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 82655cb26ad01de9587ef41eaef155c61c361f67) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* perl: fix CVE-2020-10543 & CVE-2020-10878Lee Chee Yang2020-07-024-0/+227
| | | | | | | | (From OE-Core rev: d9c5d9c52eb1f03ff9c907a76dda31042fb26edb) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go-dep: Avoid use of 'go mod' supportOtavio Salvador2020-06-261-0/+4
| | | | | | | | | | | | dep utility must not use 'go mod' support, so we explicitly disable it. (From OE-Core rev: e953be6c159bfed4ac69f30fa2562d217d25c254) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b34000ae3dd6e0a1d7fc332efb35c5da84cf2275) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glide: Avoid use of 'go mod' supportOtavio Salvador2020-06-261-0/+4
| | | | | | | | | | | | | Glide utility must not use 'go mod' support, so we explicitly disable it. (From OE-Core rev: 229ee71cbc9db1dd24f14dabea7d9236b3819421) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b5a4369ba606677285b0a89a78c040b38f57767f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* perl: Fix host specific modules problemsRichard Purdie2020-06-261-1/+1
| | | | | | | | | | | | | | | | | | | We were seeing a ton of empty perl modules being created such as "perl-module-x86-64-linux-encoding" where the name would include ${TARGET_ARCH}-linux. These files were already being filtered in an earlier do_split_packages() expression so exclude them from the latter one to remove the pointless empty modules in PACKAGES. This doesn't explain why some were not deterministic but will recude the do_package execution time and clean up the build directories at the very least. (From OE-Core rev: 5aaf9d3a748cbad17a4a3e5d9715ac2f289b007d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9f1a959d9831f43dda656e3b0c4d059db3363877) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mtd-utils: Fix return value of ubiformatOtavio Salvador2020-06-262-0/+63
| | | | | | | | | | | | | | | | | | | | | This changeset fixes a feature regression in ubiformat. Older versions of ubiformat, when invoked with a flash-image, would return 0 in the case no error was encountered. Upon upgrading to latest, it was discovered that ubiformat returned 255 even without encountering an error condition. This changeset corrects the above issue and causes ubiformat, when given an image file, to return 0 when no errors are detected. Backport fix from 2.1.2 (From OE-Core rev: 3ee98b6c9ddd1dd0825245ca672236b7befb9859) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 7ebacd9cbaec98fbc406e8ae99c9805a24fdadc6) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: fix CVE-2020-13361Lee Chee Yang2020-06-262-0/+62
| | | | | | | | | | (From OE-Core rev: 0e4985236dd7d2e92576fb30b70bc434a7ecd367) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2dcef5dfb5c4c57fd793d04ac936a9ff73aae844) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* patchelf: switch to gitAlexander Kanavin2020-06-261-3/+4
| | | | | | | | | | | | | | The tarball download website is full of broken links; while direct tarball download still works, exploring around and checking for latest versions does not. (From OE-Core rev: d350a0ca191040b5573ed9cd67c08c41ad2f3dc9) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d1c11259464ba2d972e1e1ad5c540050ccc80c15) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: Backport upstream patch to fix __getauxval needsKhem Raj2020-06-232-2/+145
| | | | | | | | | | | | | Drop disabling outline-atomics since that was added to fix this issue in particular (From OE-Core rev: a3cb468746635f5c052074c3e4de485465fd8da8) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 702a1ae29c6a0f920bd67b7a7a41b886ac52a751) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: Do not use outline-atomics on aarch64Khem Raj2020-06-231-0/+2
| | | | | | | | | | | | | | | | This avoids the __getauxval undefined reference error seen with gcc10 on doing static linking with -nodefaultlibs, which is uncommon usecase anyway, disabling outline-atomics is not a huge deal for OE in terms of performance as we already use -mcpu which is tuned enough to the SOC the code is being generated for (From OE-Core rev: 48c53bc81963621e8e9fbb89277d1a3d10f153d5) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3952738d083b888e5b898ed3d63a0ed9a4dd3712) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* syslinux: Fix build with gcc10Khem Raj2020-06-232-0/+98
| | | | | | | | | | | | Bring in a patch from fedora to fix -fno-common issue (From OE-Core rev: 7457e6e2a2b0d00875c15112b6528c9ad97830d5) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f635bd89d53cc8c110b18aa593babc55eeffc511) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* squashfs-tools: Backport fix for compiling with gcc 10Jacob Kroon2020-06-232-0/+46
| | | | | | | | | | (From OE-Core rev: 41bf4adead2033ff1a59e016daef05244d8a38d9) Signed-off-by: Jacob Kroon <jacob.kroon@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bae1603a27fadcfa7257801167f28db3ff02dc97) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: add patch to fix issues with gcc 10Richard Leitner2020-06-232-0/+62
| | | | | | | | | | | | | gcc 10 introduced "-fno-common" as default. Therefore backport the according binutils patch to fix this issue. (From OE-Core rev: c41fe48f323a78fd0e205471362ecc6c66f87f45) Signed-off-by: Richard Leitner <richard.leitner@skidata.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit fbeb572e1872cf64786d01d5c6408a6765f814ce) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcomps: update to 0.1.15Richard Leitner2020-06-234-47/+15
| | | | | | | | | | | | | | | | In this update the 0001-Make-__comps_objmrtree_all-static-inline.patch was mainlined by commit 18f52cb. Furthermore mainline commit 3237f44 fixes a build problem with the default "-fno-common" of gcc 10. (From OE-Core rev: 55e2f218de2725d65b2cf231b6e835eb94f8eceb) Signed-off-by: Richard Leitner <richard.leitner@skidata.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 90b942d01decbcff3b883ee6fb4bba67fb446817) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: force build type to productionJoe Slater2020-06-181-0/+5
| | | | | | | | | | | | | qemu will not build for -Og optimization because macros in lockable.h expect dead-code elimination. Override DEBUG_BUILD. (From OE-Core rev: dce2315ea2e0f14854fa43994eede04848cd624c) Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ad404b2e51223625bd95f9a7da4c7a690c37bdfb) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* patchelf: Add patch to address corrupt shared library issueRichard Purdie2020-06-182-0/+38
| | | | | | | | | | | | | patchelf can corrupt shared libraries if the program headers don't immediately follow the elf header. Add a patch submitted upstream to address this. (From OE-Core rev: faaf5f34332290708f3720a5488b3d1549d9e95a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e7811c787bbe2f5d49b3506309499acc27189988) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pyelftools: Upgrade 0.25 -> 0.26Joshua Watt2020-06-051-2/+2
| | | | | | | | | | (From OE-Core rev: b2306d00dc82cb780a439b569104c0f526e6e4d5) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0323e12624ef45e64e7a8ba6384c06e4d42df064) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pycryptodome(x): Upgrade 3.9.4 -> 3.9.7Joshua Watt2020-06-054-7/+6
| | | | | | | | | | | | | Also splits apart the SRC_URI checksums to make automatic upgrades easier (From OE-Core rev: 03b27d56272a4815ead04da08cfaa738b450ae59) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ae1f210546396b761ea86d9e32bf90c0867ff845) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pyelftools: Import from meta-pythonJoshua Watt2020-06-051-0/+14
| | | | | | | | | | | | | | | | Imports the pyelftools recipes from meta-python, as of 7c02c7d41 ("gnome-themes-extra: correct the recipe name"). This recipe is commonly used by other layers, so moving it into OE-core helps to cut down on layer dependencies. (From OE-Core rev: 0a8cdaa90f4dd2d09b0b471dafd868a4dcad4ed3) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 910ffaf5beed42936588c95b0c7c1b1ad67f99d3) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pycryptodome: Import from meta-pythonJoshua Watt2020-06-053-0/+41
| | | | | | | | | | | | | | | | Imports the pycryptodome recipes from meta-python, as of 7c02c7d41 ("gnome-themes-extra: correct the recipe name"). These recipes are commonly used by other layers, so moving them into OE-core helps to cut down on layer dependencies. (From OE-Core rev: 27798f3da506fcae19b74deb17ef199131cff405) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a96f815c53364b119b5743b8b7100eb5588d5cf5) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* git: Upgrade 2.24.1 -> 2.24.3Adrian Bunk2020-05-282-11/+9
| | | | | | | | | | This includes the fixes for CVE-2020-5260 and CVE-2020-11008. (From OE-Core rev: 46da8ac6d25bb75c625c2da1d36cbc693a7d442d) Signed-off-by: Adrian Bunk <bunk@kernel.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* file: add bzip2-replacement-native to DEPENDS to fix sstate issueJan-Simon Moeller2020-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | file-native when built on a Debian 10 host will embed a dependency to 'libbz2.so.1.0' (instead of 'libbz2.so.1'). This can cause issues when sharing the sstate between hosts e.g.: recipe-sysroot-native/usr/lib/rpm/rpmdeps: error while loading shared libraries: libbz2.so.1.0: \ cannot open shared object file: No such file or directory To avoid this situation, let's add the bzip2-replacement-native to the file recipe's DEPENDS_class-native . Details in https://bugzilla.yoctoproject.org/show_bug.cgi?id=13915 . (From OE-Core rev: 5a2bc3bfa9e1a4f37b6e26a5c40a4a9c025d03f1) Signed-off-by: Jan-Simon Moeller <dl9pf@gmx.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4a996574464028bd5d57b90920d0887d1a81e9e9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: fix CVE-2020-11869Lee Chee Yang2020-05-282-0/+98
| | | | | | | | | | | (From OE-Core rev: 1af607d9e635e7cf2f6cf3e4c6d05f1e2cb6acc9) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 5f01d45266bbc0d0f1a32d10c0841326193cc9c1) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-setuptools: add the missing rdependsMingli Yu2020-05-281-0/+2
| | | | | | | | | | | | | | | | | | | Add the missing rdepends to fix below error: # python3 [snip] >>> import setuptools.lib2to3_ex [snip] ModuleNotFoundError: No module named 'lib2to3' ModuleNotFoundError: No module named 'pickle' (From OE-Core rev: d19d1ccca3f86a59a72023727d3d804c2e9d18dc) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit be5c3c989d75290863cc7aef9949cf6e82d3070f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bison: fix the parallel buildMingli Yu2020-05-282-0/+64
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Explicitly make the BUILT_SOURCES which are the generated headers such as stdio.h, fcntl.h and etc to be the dependencies of the gl_LIBOBJS such as libbison_a-sprintf.o, libbison_a-printf.o and etc to guarantee the BUILT_SOURCES is generated before begin to compile EXTRA_lib_libbison_a_SOURCES such as fprintf.c in parallel builid, otherwise there may come below error: | muscle-tab.c:(.text+0x77a): undefined reference to `rpl_sprintf' It does the same for src_bison_OBJECTS and lib_libbison_a_OBJECTS to make sure BUILT_SOURCES generated before begin to compile src_bison_SOURCES which contains AnnotationList.c and etc. BTW, the MOSTLYCLEANFILES also contains the generated header needs to be created early in the build process, so add it also in to avoid below error: | ./lib/uniwidth/width.c:21:10: fatal error: uniwidth.h: No such file or directory [YOCTO #13825] (From OE-Core rev: 99ddfee2a2434d282749e2062987067f70b0ef54) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> (cherry picked from commit 43d74b11095092b13f94074785d0306484fabea6) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* file: add PACKAGECONFIG for auto optionsKonrad Weihmann2020-05-221-2/+8
| | | | | | | | | | | | | | | | | | | A few options of file configure are set to auto, which can lead to unpredictable effects when something in the sysroot does provide things that satisfy the autotools checks. In the worst case this will lead to package-qa failures as libraries are not set in RDEPENDS but configured for the tool. To mitigate changes of accidental configure set explicit options via newly introduced PACKAGECONFIG variables for bzip, lzma and zlib support, where the default is just zlib, as it was before (From OE-Core rev: 5bfdb6bfbd6f1de10d415228e5a5ebe01a623e2a) Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pseudo: Fix enum typedefJacob Kroon2020-05-222-0/+32
| | | | | | | | | | | | | 'pseudo_access_t' is a type, so use typedef. Fixes building pseudo with gcc 10 where -fno-common is the default. (From OE-Core rev: 2093769199ecc3d1e474bea5ec6e8b193f6f8ea3) Signed-off-by: Jacob Kroon <jacob.kroon@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-setuptools: add the missing rdependsMingli Yu2020-05-221-0/+1
| | | | | | | | | | | | | | | | Add the missing rdepends to fix below error: # python3 [snip] >>> import setuptools [snip] ModuleNotFoundError: No module named 'json' (From OE-Core rev: 5733811eeba9fd88f4a621c705a2de61b197c3d7) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* opkg-keyrings: check if opkg-key exists before run postinstYi Zhao2020-05-221-1/+4
| | | | | | | | | | | | | By default, the opkg-key command is not included in pokg package because it is only installed when gpg support is enabled. We'd better check if it exists before run 'opkg-key populate' in pkg_postinst. (From OE-Core rev: 174c27e4edea0af92f60779cf3f63d21f6bce6fe) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cdrtools-native: fix upstream version checkAlexander Kanavin2020-05-221-1/+0
| | | | | | | | | (From OE-Core rev: aecd1239123d6fd94fbae10b162cf8a57eeaf18d) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meson: fix upstream version checkAlexander Kanavin2020-05-221-0/+1
| | | | | | | | | (From OE-Core rev: 6cfa86069dd2189782a3505ffdacc489ea5cc3f1) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc-target: Ensure buildtools-extended-tarball doesn't use arch=nativeRichard Purdie2020-05-071-5/+5
| | | | | | | | | | | | | | | | A nativesdk BBCLASSEXTEND was added to gcc-target without realising this would pass arch=native through to it for x86-64. This heavily optimises gcc output for the host its running on meaning it can't be reused via sstate on other machines. Add class-target overrides here to get the desired behaviour. All targets have been covered for completeness. (From OE-Core rev: 3fff2c9400f2f64cbc8cc450b5ab29505eacbdd1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-11-10 20:22:52 +0000