summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* cpio: backport fix for CVE-2021-38185Ross Burton2021-09-092-0/+582
| | | | | | | | | | (From OE-Core rev: dfc013ae9cb01e9985471df45e279b67ed8771a1) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4accf77ea5b5810cb2330acc6773690ec1b1c71b) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tar: ignore node-tar CVEsRoss Burton2021-08-261-0/+3
| | | | | | | | | | | | These two CVEs are specific to the Node package node-tar. (From OE-Core rev: 79945a0fb947bc2c127314d8cb3e93b80cfe6308) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bc7216e8148d0dee7b56e6851da6615e93647a0a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zstd: fix CVE_PRODUCTChen Qi2021-08-141-0/+2
| | | | | | | | | | | | zstd uses 'zstandard' in NVD database. e.g. CVE-2021-24031 (From OE-Core rev: e158fce14fb6596344c67ead61e8326a69bfa5f8) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 304eb663e414171d38faeebb3c72e49e6e4e1112) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: Drop defining daddr_tKhem Raj2021-08-142-34/+0
| | | | | | | | | | | | | | This is fixed differently upstream [1] [1] https://github.com/ColinIanKing/stress-ng/commit/7e150ab18b0e8954ca426eb5366000a8f0d01110 (From OE-Core rev: 7c5d4136388ba59aafa38be4a454355040d3e6a5) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 96b1d483ccf2166bf577e73075d5fe57c45bbfdf) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* parted: skip tests that need vfat supportRoss Burton2021-08-062-0/+52
| | | | | | | | | | | | | | | | | At the time of writing the qemu kernels don't support vfat filesystems. There are patches on the list to add that, but as two tests fail without vfat support, make them skip if vfat isn't available. [ YOCTO #14470 ] (From OE-Core rev: 414288ee0c96253b0714e10cd3be6c1366f4b10a) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 17ecb3552cb7d7e7f82cc8b2e1b83f276525cbda) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* parted: fix ptest RRECOMMENDSRoss Burton2021-08-061-1/+1
| | | | | | | | | | | | | | The recipe was using =, which replaces the default RRECOMMENDS from ptest.bbclass. (From OE-Core rev: 09be83e7f575c0c271d76c6805f8f782701f48b3) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit cebcb4ae46b0860179edfe480e8e4d924f931436) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* parted: improve ptest executionRoss Burton2021-08-062-4/+7
| | | | | | | | | | | | | | | | | | | | | Delete the right log files in run-ptest so the tests can be executed more than once. Install config.h so the tests which examine the build configuration will do the right thing, specifically this causes the tests using libblkid to execute instead of skip. Add missing RDEPENDS: mkswap and tune2fs binaries, loop and vfat kernel modules. (From OE-Core rev: 4395acee739e09249ca5cdab77322c49616fc0c6) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 43bd50cbf902ce92ea613d142fae2524011b8f55) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libconvert-asn1-perl: fix CVE-2013-7488Changqing Li2021-07-202-1/+37
| | | | | | | | (From OE-Core rev: 9010ccd086c5895902308f6cf185c930ce63e5eb) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xinetd: Exclude CVE-2013-4342 from cve-checkRichard Purdie2021-06-031-0/+3
| | | | | | | | | We use the SUSE mirror of xinetd. The CVE fix was added to the main repo after the latest release but is included in the version from the SUSE repo. (From OE-Core rev: 14477263562fe683f914ae640e0ff30a4d54977a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Disable problematic tests causing autobuilder hangsRichard Purdie2021-05-302-0/+46
| | | | | | | | | | We've seen three hangs in cgroup_xattr and two in proc01 so far. The new plan is just to disable any tests seen to hang. I've had enough of these causing problems on our testing infrastructure. (From OE-Core rev: 622b1a409aaa8fd895821a53ee5db33206b98825) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: whitelist CVE-2021-25317Ross Burton2021-05-221-0/+4
| | | | | | | | | This CVE relates to bad ownership of /var/log/cups, which we don't have. (From OE-Core rev: 60bca0789b9830fa27694c5d65042d1206a07fe2) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: Exclude CVE-2013-6629 from cve-checkRichard Purdie2021-05-221-0/+4
| | | | | | | | | The CVE is in the jpeg sources included with ghostscript. We use our own external jpeg library so this doesn't affect us. (From OE-Core rev: e19caff111bcbd70e5e7507388a4aaea2d10f7e0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cpio: Exclude CVE-2010-4226 from cve-checkRichard Purdie2021-05-221-0/+3
| | | | | | | | Issue applies to use of cpio in SUSE/OBS, doesn't apply to us. (From OE-Core rev: a175059e678bf9a5e843d00ac1bbf65b49f97f32) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* unzip: Exclude CVE-2008-0888 from cve-checkRichard Purdie2021-05-221-0/+3
| | | | | | | | | The patch mentioned as the fix for the CVE is applied to the 6.0 source code. Zip versioning makes CPE entry changes hard. (From OE-Core rev: f816be9387d4691dbacd17673749809fe125d35c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* logrotate: Exclude CVE-2011-1548,1549,1550 from cve-checkRichard Purdie2021-05-221-0/+3
| | | | | | | | | These CVEs apply to the way logrotate was installed on Gentoo, Debian and SUSE, exclude from cve-check as they don't apply to OE. (From OE-Core rev: 55b53c501e911df04bdff6fca54b11c3e54770c9) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lsb-release: fix reproducibility failureAnuj Mittal2021-05-152-0/+28
| | | | | | | | | | | | | | | | Make sure help2man output is reproducible. Fixes: | .\"·DO·NOT·MODIFY·THIS·FILE!··It·was·generated·by·help2man·1.022. .\"·DO·NOT·MODIFY·THIS·FILE!··It·was·generated·by·help2man·1.022. | .TH·FSG·"1"·"April·2021"·"FSG·lsb_release·v1.4"·FSG .TH·FSG·"1"·"May·2021"·"FSG·lsb_release·v1.4"·FSG | .SH·NAME 3 .SH·NAME (From OE-Core rev: e73898b59eb79d20082963e629ce6f8cc75103c9) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 49371207a7f1fe3d3feb7b8b9aabb62b43ae34d1) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: fix empty ltp-dev packageJonas Höppner2021-04-301-1/+1
| | | | | | | | | | | | | | | | Currently the headers are not installed and the ltp-dev package is empty. This patch adds an include-install make target in the do_install step to install them in sysroot which ends up as a working ltp-dev package. (From OE-Core rev: c4419fb58b6ab5f4fbdcd65e5b6d2e7742c8d66f) Signed-off-by: Jonas Höppner <jonas.hoeppner@garz-fricke.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f6943da4444cd71053650be0c9212bc25ac53137) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* groff: not ship /usr/bin/grap2graphMingli Yu2021-04-301-0/+4
| | | | | | | | | | | | | | | | | | | | | | | grap2graph which converts a GRAP diagram into a cropped image fails to run as below: $ grap2graph /usr/bin/grap2graph: line 89: convert: command not found /usr/bin/grap2graph: warning: falling back to old '-crop 0x0' trim method /usr/bin/grap2graph: line 104: convert: command not found /usr/bin/grap2graph: line 103: grap: command not found Considering we don't often need to convert a GRAP diagram into a cropped image and the recipe ImageMagick which provides convert command is in meta-oe layer, so don't ship the related files to avoid the confusion about the above run time error. (From OE-Core rev: b096417b9635c5a790616d20f0490bc15b9d7c0f) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 251be7279a475ee18c0c53fe9795bb37bffc2b45) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go-helloworld: disable module-aware modeChangqing Li2021-03-231-2/+3
| | | | | | | | | | | | | | | | | >From go 1.16, module-aware mode is enabled by default, regardless of whether a go.mod file is present in the current working directory or a parent directory. Above change makes go-helloworld build fail when doing offline build or proxy.golang.org is not accessible. This fix is kind of workaround, as from go1.17, GOPATH mode will be dropped, and GO111MODULE is ignored. (From OE-Core rev: a0dc36d60809a0a937bbb02ec27ba768ef177063) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.12.04 -> 0.12.05zhengruoqin2021-03-231-1/+1
| | | | | | | (From OE-Core rev: e5f457cb81698a517a11df48131169b3a40105ce) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* asciidoc: update 9.0.4 -> 9.1.0Alexander Kanavin2021-03-202-56/+2
| | | | | | | | | Dropped patch supserseded by https://github.com/asciidoc-py/asciidoc-py/pull/172 (From OE-Core rev: 4051cb4ac24c75494b26e1422e281196ae5c9e3b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: CVE_VERSION_SUFFIX to work with patched releaseLee Chee Yang2021-03-201-0/+2
| | | | | | | | | | | | | CVE_VERSION_SUFFIX in "patch" to treat version string with suffix "pX" or "patchX" as patched release. also update testcases to cover this changes and set CVE_VERSION_SUFFIX for sudo. (From OE-Core rev: 8076815fc2ffc8f632e73527ce2b7d158a29e9ea) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* msmtp: upgrade 1.8.14 -> 1.8.15Wang Mingyu2021-03-201-1/+1
| | | | | | | (From OE-Core rev: 93f0bf11ce2b950215a2de79a4ce928cd0b1b7b9) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: upgrade 1.9.6 -> 1.9.6p1zhengruoqin2021-03-201-1/+1
| | | | | | | (From OE-Core rev: 237411b48d639bd325a54d5a1c9168b776f485e1) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: upgrade 1.9.5p2 -> 1.9.6Richard Purdie2021-03-161-1/+1
| | | | | | (From OE-Core rev: ecb038f14c0b91280ba1532ad94a6ebc64c70644) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* procps: update 3.3.16 -> 3.3.17Alexander Kanavin2021-03-153-1/+70
| | | | | | | (From OE-Core rev: a3f0ee1cff8c4fef82e82effcc9944a39caec7c6) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zstd: upgrade 1.4.8 -> 1.4.9Randy MacLeod2021-03-152-10/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Shave fuzz off the Makefile-sort-all-wildcard-file-list-expansions patch CHANGELOG: v1.4.9 (Mar 1, 2021) bug: Use `umask()` to Constrain Created File Permissions (#2495, @felixhandte) bug: Make Simple Single-Pass Functions Ignore Advanced Parameters (#2498, @terrelln) api: Add (De)Compression Tracing Functionality (#2482, @terrelln) api: Support References to Multiple DDicts (#2446, @senhuang42) api: Add Function to Generate Skippable Frame (#2439, @senhuang42) perf: New Algorithms for the Long Distance Matcher (#2483, @mpu) perf: Performance Improvements for Long Distance Matcher (#2464, @mpu) perf: Don't Shrink Window Log when Streaming with a Dictionary (#2451, @terrelln) cli: Fix `--output-dir-mirror`'s Rejection of `..`-Containing Paths (#2512, @felixhandte) cli: Allow Input From Console When `-f`/`--force` is Passed (#2466, @felixhandte) cli: Improve Help Message (#2500, @senhuang42) tests: Remove Flaky Tests (#2455, #2486, #2445, @Cyan4973) tests: Correctly Invoke md5 Utility on NetBSD (#2492, @niacat) tests: Avoid Using `stat -c` on NetBSD (#2513, @felixhandte) build: Zstd CLI Can Now be Linked to Dynamic `libzstd` (#2457, #2454 @Cyan4973) build: Hide and Avoid Using Static-Only Symbols (#2501, #2504, @skitt) build: CMake: Enable Only C for lib/ and programs/ Projects (#2498, @concatime) build: CMake: Use `configure_file()` to Create the `.pc` File (#2462, @lazka) build: Fix Fuzzer Compiler Detection & Update UBSAN Flags (#2503, @terrelln) build: Add Guards for `_LARGEFILE_SOURCE` and `_LARGEFILE64_SOURCE` (#2444, @indygreg) build: Improve `zlibwrapper` Makefile (#2437, @Cyan4973) contrib: Add `recover_directory` Program (#2473, @terrelln) doc: Change License Year to 2021 (#2452 & #2465, @terrelln & @senhuang42) doc: Fix Typos (#2459, @ThomasWaldmann) (From OE-Core rev: 305c954a1d8aaeda3240523e4705c1b06e2c8590) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysklogd: upgrade 2.2.1 -> 2.2.2Wang Mingyu2021-03-111-1/+1
| | | | | | | (From OE-Core rev: a7d7c1412bdeffd8cb179f12b47ac0fb60dc0b26) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Fix libswapon issue properlyRichard Purdie2021-03-103-8/+502
| | | | | | | | | Replace the libswapon reproducibility workaround with the solution preferred by upstream. (From OE-Core rev: 5fc7d4a4c428d5be7103d8e9345d23038dae4247) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Fix determinism issueRichard Purdie2021-03-104-294/+354
| | | | | | | | | | | | | | | There was still a remaining issue with reporoducibility based upon the make version from the host system. Some versions added whitespace for XXX+=<tab> (e.g. 4.1) and some versions do not (e.g. 4.3). Replace the determinism patches with those submitted upstream both for this issue and the previous one. The LC_ALL setting for sort is dropped as it didn't fix an issue as hoped. (From OE-Core rev: fda178ace0f4acad931c69300f6af54556472a06) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Further extend reproducibility patchRichard Purdie2021-03-092-2/+269
| | | | | | | | | Further issues were highlighted by autobuilder testing, extend the second patch to cover them. (From OE-Core rev: 3cf69fba8542e6ebbdb754c7616cf2ad44eec6ff) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta/recipes-extended: Add HOMEPAGE / DESCRIPTIONDorinda2021-03-0625-2/+28
| | | | | | | | | | | Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage [YOCTO #13471] (From OE-Core rev: cc6c7af900ae0196a62b7fa1375c55bbcd8e68b4) Signed-off-by: Dorinda Bassey <dorindabassey@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: whitelist CVE-2013-4235Purushottam Choudhary2021-03-061-2/+3
| | | | | | | | | | | | | | | This CVE is about TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees which had very low severity problem and marked as closed and won't fix. Therefore whitelisted CVE-2013-4235. Master, gatesgarth and dunfell all have shadow version 4.81. Hence, this is applicable for master, gatesgarth and dunfell. Link: https://bugzilla.redhat.com/show_bug.cgi?id=884658 (From OE-Core rev: b1c6cd87bee6b019619dc5728fd6c36bc87ed696) Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.12.03 -> 0.12.04Wang Mingyu2021-03-061-1/+1
| | | | | | | (From OE-Core rev: f2e1ea8df71d9ac312bc9f7c341477c8fc7c3923) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Fix another determinism issueRichard Purdie2021-03-062-2/+27
| | | | | | | | | After the other fixes there remained occasional problems. Fix another makefile sorting problem affecting the disktest binary. (From OE-Core rev: 636f4d1f6ed8a95e3a583abc5904ab8dbc6184af) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Fixing determinism issuesRichard Purdie2021-03-022-0/+56
| | | | | | | | | | | | | | Add a patch adding sorting to a couple of points in the Makefiles which removes most of the determinism issues in ltp. Build swapon before the main build to ensure libswapon.o is built deterministically as it races with swapoff. All issues reported on the upstream mailing list. (From OE-Core rev: 0f51f9a37e5d058bce28cfe7b9a32a895f83c091) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iputils: Fix cap_net_raw for installed binariesJate Sujjavanich2021-03-021-3/+2
| | | | | | | | | | | | | | | Add libcap-native to libcap PACKAGECONFIG making native setcap available during the build. This assures its availability during install and prevents meson from searching absolute paths and the resulting possible host contamination. Move -DNO_SETCAP_OR_SUID=true to the libcap PACKAGECONFIG negative case This will prevent possible non-determinism for the setuid case. (From OE-Core rev: 6b31f6b9a6a12a12d1d10b8634012e50ef778ec4) Signed-off-by: Jate Sujjavanich <jatedev@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* parted: Fix reproducibility issueRichard Purdie2021-02-261-0/+1
| | | | | | | | | We don't use tbe BUILDINFO line of host information in the Makefile so remove it for reproducibility. (From OE-Core rev: a9742595fa90d4977fdd8129a4fe4932ddb96a18) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysklogd: do not open any network sockets by defaultDiego Santa Cruz2021-02-261-0/+3
| | | | | | | | | | | | | | The default in sysklogd 2.x is to open listening network sockets, unlike sysklogd 1.5 where the default was the opposite. This is contrary to a "secure by default" design, so set up the init script to pass the -ss option to prevent syslogd from opening any network sockets. It can be overridden in /etc/default/syslogd. (From OE-Core rev: 103688fd349338520c147d5bde07429951925141) Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: fix CVE-2020-10001Stefan Ghinea2021-02-262-0/+75
| | | | | | | | | | | | | | | A buffer (read) overflow in the ippReadIO function. References: https://nvd.nist.gov/vuln/detail/CVE-2020-10001 Upstream patches: https://github.com/OpenPrinting/cups/commit/efbea1742bd30f842fbbfb87a473e5c84f4162f9 (From OE-Core rev: 90eba79bf6f623aa3021eafd0141dad1c3059001) Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: Fix reproducibility issuesRichard Purdie2021-02-261-0/+2
| | | | | | | | | configure inspects the host's /etc/group for these configuration options, fix this to the correct values by using configure options. (From OE-Core rev: f16f9c727569414cd52862dcba18d8e423f4e961) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* asciidoc: Switch to using the main branchPeter Kjellerstedt2021-02-261-1/+1
| | | | | | | | | Upstream has renamed the "master" branch to "main". (From OE-Core rev: 05637733cf89a81fd5d787402f5a917f279a1a0d) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go-helloworld: Turn into a go module enabled buildKhem Raj2021-02-261-2/+3
| | | | | | | (From OE-Core rev: 86aacbc889830846150ff2d0f1cd7ba00a2c10f6) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* reproducible: Improve SOURCE_DATE_EPOCH_FALLBACK handlingRichard Purdie2021-02-242-2/+0
| | | | | | | | | | | | | | Ensure the fallback value if used is written to the SDE file and hence stored in sstate, reducing any confusion within the code over '0' values. Bump the HASHEQUIV_VERSION since we've had a ton of trouble with ensuring this rolls out correctly on the autobuilder so others may too, take a clean slate for it. (From OE-Core rev: 53ffffa32b76330835287dfc05d4e4796841af08) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* screen: fix CVE-2021-26937Scott Murray2021-02-232-0/+69
| | | | | | | | | Apply patch from Debian to fix CVE-2021-26937. (From OE-Core rev: 6d688cc8672b1830ba10966492ab3f8a12d32e17) Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* net-tools: update to 2.10Oleksandr Kravchuk2021-02-233-53/+4
| | | | | | | | | | | Removed upstreamed patches. Added new package configs. (From OE-Core rev: 179756f647c2a2e63b3bbcc53e7c0ff3c5df4e39) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* groff: Fix determinism issueRichard Purdie2021-02-192-1023/+14
| | | | | | | | | | | | | | Sometimes bison would regenerate source files and sometimes it would not This is likely related to the patching of generated files by on of the patches. Drop those changes and force the files to regenerate in all cases since we depend on bison-native anyway. This ensures the results are always consistent. (From OE-Core rev: 4449fa226e94f7124215c5ead43aadda7967f3af) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* asciidoc: fix upstream checkAnuj Mittal2021-02-191-0/+2
| | | | | | | | | Detect versions with numbers only and ignore the pre-release versions. (From OE-Core rev: e632b97d2411bc4510c54f6ac32ffa9042f69034) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-db: upgrade 2.9.3 -> 2.9.4Anuj Mittal2021-02-191-6/+1
| | | | | | | (From OE-Core rev: 25e247f386b8d2370e9835a3ca99cae41da2577f) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysklogd: upgrade 2.1.2 -> 2.2.1Anuj Mittal2021-02-183-47/+3
| | | | | | | | | Merge inc and bb files too. (From OE-Core rev: 76d1af4fe73fee0696067dfc4dd1bc9a9015416a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>