summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* libsolv: fix segfault when using SOLVER_DISFAVORAlejandro del Castillo2019-02-082-1/+36
| | | | | | | | | | | Opkg --add-ignore-recommends use the flag SOLVER_DISFAVOR. If a package is set to be ignored as a recommendee, but there are not other recommends on the package graph, libsolv segfaults. (From OE-Core rev: d3ee06845e18ecf94770ff0970c2a0d6631ed214) Signed-off-by: Alejandro del Castillo <alejandro.delcastillo@ni.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml-sax-perl: extend nativesdkKyle Russell2019-02-061-1/+1
| | | | | | | (From OE-Core rev: 3927ceda533ac1088865aabb747ff0bc46ee06b8) Signed-off-by: Kyle Russell <bkylerussell@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml-sax-base-perl: extend nativesdkKyle Russell2019-02-061-1/+1
| | | | | | | (From OE-Core rev: 1e396217351d5ef0a941fe50e80b555b05675bee) Signed-off-by: Kyle Russell <bkylerussell@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml-namespacesupport-perl: extend nativesdkKyle Russell2019-02-061-1/+1
| | | | | | | (From OE-Core rev: bf1ec2ed8851f506855dc5893ed4b00b18ed7e25) Signed-off-by: Kyle Russell <bkylerussell@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: refactor to simplify maintArmin Kuster2019-02-053-27/+23
| | | | | | | | | | | | | | move tzcode and tzdata-native into new dir Updates are now limited to the common include file. [v2] Fix UMMARY typ0 in timezone.inc (From OE-Core rev: 60c30127df63b75d70a61d90c9f9afe0f938dc71) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsolv: Drop now uneeded musl patchRandy MacLeod2019-02-053-359/+0
| | | | | | | | | | | | | | Drop the musl specific fopencookie patches since musl added support for fopencookie in: 06184334 implement the fopencookie extension to stdio in December 2017 so it has been in musl since v1.1.19. There was no change in libsolv's configure log when building with musl and these patches dropped. (From OE-Core rev: 8eeb5bae02331cec3bea98adef784357c6e3c910) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsolv: upgrade 0.7.2 -> 0.7.3Alejandro del Castillo2019-02-021-1/+1
| | | | | | | | | | | | | | | | | | | | from NEWS: - selected bug fixes: * fixed a couple of null pointer derefs and potential memory leaks * made disfavoring recommended packages work if strong recommends is enabled * no longer disable infarch rules when they don't conflict with the job - new features: * do favor evaluation before pruning allowing to (dis)favor specific package versions (From OE-Core rev: a0f78447a14cf17ce4ae03a97ed4f703cbe1af2b) Signed-off-by: Alejandro del Castillo <alejandro.delcastillo@ni.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ed: upgrade 1.14.2 -> 1.15Alexander Kanavin2019-01-181-4/+5
| | | | | | | | License-Update: copyright years updated (From OE-Core rev: 65aee6ef1bf849ecb5c505a5d1d6ac83567a1eff) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Fix Deprecated warnings from regexsRichard Purdie2019-01-163-4/+4
| | | | | | | | | | | | | | | | | | | | Fix handling of escape characters in regexs and hence fix python Deprecation warnings which will be problematic in python 3.8. Note that some show up as: """ meta/classes/package.bbclass:1293: DeprecationWarning: invalid escape sequence \.   """ where the problem isn't on 1293 in package.bbclass but in some _prepend to a package.bbclass function in a different file like mesa.inc, often from do_package_split() calls. (From OE-Core rev: 4b1c0c7d5525fc4cea9e0f02ec54e92a6fbc6199) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: fix gcc-8 format-truncation warningHongxu Jia2019-01-112-0/+40
| | | | | | | | | | | | | | | | | | | While compiling with `-Werror=format-truncation=', it failed [snip] |super0.c:236:32: error: 'snprintf' output may be truncated before the last format character [-Werror=format-truncation=] | snprintf(nb, sizeof(nb), "%4d", d); | ^ |super0.c:236:3: note: 'snprintf' output between 5 and 12 bytes into a destination of size 11 | snprintf(nb, sizeof(nb), "%4d", d); [snip] (From OE-Core rev: cd5013a94609ef2f3e0d621339e22e4137d649d3) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* logrotate: upgrade 3.14.0 -> 3.15.0Yi Zhao2019-01-113-91/+96
| | | | | | | | | | | Refresh patches: act-as-mv-when-rotate.patch disable-check-different-filesystems.patch (From OE-Core rev: 3e05b81166ef6c8f167acc708d0ed906c622edce) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wget: upgrade 1.19.5 -> 1.20.1Yi Zhao2019-01-113-39/+8
| | | | | | | | | | Drop 0001-Unset-need_charset_alias-when-building-for-musl.patch as it had been fixed upstream. (From OE-Core rev: 491c0ee55e7c6aa71ef5590cc38f866d9098bfe0) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: update HOMEPAGEYi Zhao2019-01-111-1/+1
| | | | | | | | | The project pages and wiki has been moved to GitHub. (From OE-Core rev: 45a5129663bd6f9e94fd5c674d8ce1dcc99195e0) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* selftest/distrodata: un-break the upstream version check testAlexander Kanavin2019-01-111-1/+2
| | | | | | | | | And fix the reported upstream check failures. (From OE-Core rev: 63af0edcd954fac530ba17b04e5df5837cddc0a4) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsolv: upgrade 0.7.1 -> 0.7.2Anuj Mittal2019-01-111-1/+1
| | | | | | | | | | | | | | | | >From NEWS: - bug fixes: * do not autouninstall packages because of forcebest updates - new features: * support rpm's new '^' version separator * support set/get_considered_list in bindings * new experimental SOLVER_FLAG_ONLY_NAMESPACE_RECOMMENDED flag (From OE-Core rev: 5b0d21e4b369821235d5b1d00a578b2dca5c5d09) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-pages: use alternatives to resolve crypt.3 conflictmark asselstine2019-01-031-1/+2
| | | | | | | | | | | | | | | | To fix: Error: Transaction check error: file /usr/share/man/man3/crypt.3 conflicts between attempted installs of libcrypt-doc-4.4.1-r0.core2_64 and man-pages-4.16-r0.core2_64 This issue came about after commit 59be9254df9f [libxcrypt: Upgrade to 4.4.1 release]. (From OE-Core rev: c4e0034cd1f020cfb074c7c80af281683752afeb) Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tzdata/tzcode-native: update to 2018iArmin Kuster2019-01-032-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2018i: Briefly: São Tomé and Príncipe switches from +01 to +00 on 2019-01-01. Changes to future timestamps Due to a change in government, São Tomé and Príncipe switches back from +01 to +00 on 2019-01-01 at 02:00. (Thanks to Vadim Nasardinov and Michael Deckers.) 2018h: Briefly: Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21. New zone Asia/Qostanay because Qostanay, Kazakhstan didn't move. Metlakatla, Alaska observes PST this winter only. Guess Morocco will continue to adjust clocks around Ramadan. Add predictions for Iran from 2038 through 2090. Changes to future timestamps Guess that Morocco will continue to fall back just before and spring forward just after Ramadan, the practice since 2012. (Thanks to Maamar Abdelkader.) This means Morocco will observe negative DST during Ramadan in main and vanguard formats, and in rearguard format it stays in the +00 timezone and observes ordinary DST in all months other than Ramadan. As before, extend this guesswork to the year 2037. As a consequence, Morocco is scheduled to observe three DST transitions in some Gregorian years (e.g., 2033) due to the mismatch between the Gregorian and Islamic calendars. The table of exact transitions for Iranian DST has been extended. It formerly cut off before the year 2038 in a nod to 32-bit time_t. It now cuts off before 2091 as there is doubt about how the Persian calendar will treat 2091. This change predicts DST transitions in 2038-9, 2042-3, and 2046-7 to occur one day later than previously predicted. As before, post-cutoff transitions are approximated. Changes to past and future timestamps Qyzylorda (aka Kyzylorda) oblast in Kazakhstan moved from +06 to +05 on 2018-12-21. This is a zone split as Qostanay (aka Kostanay) did not switch, so create a zone Asia/Qostanay. Metlakatla moved from Alaska to Pacific standard time on 2018-11-04. It did not change clocks that day and remains on -08 this winter. (Thanks to Ryan Stanley.) It will revert to the usual Alaska rules next spring, so this change affects only timestamps from 2018-11-04 through 2019-03-10. Change to past timestamps Kwajalein's 1993-08-20 transition from -12 to +12 was at 24:00, not 00:00. I transcribed the time incorrectly from Shanks. (Thanks to Phake Nick.) Nauru's 1979 transition was on 02-10 at 02:00, not 05-01 at 00:00. (Thanks to Phake Nick.) Guam observed DST irregularly from 1959 through 1977. (Thanks to Phake Nick.) Hong Kong observed DST in 1941 starting 06-15 (not 04-01), then on 10-01 changed standard time to +08:30 (not +08). Its transition back to +08 after WWII was on 1945-09-15, not the previous day. Its 1904-10-30 change took effect at 01:00 +08 (not 00:00 LMT). (Thanks to Phake Nick, Steve Allen, and Joseph Myers.) Also, its 1952 fallback was on 11-02 (not 10-25). This release contains many changes to timestamps before 1946 due to Japanese possession or occupation of Pacific/Chuuk, Pacific/Guam, Pacific/Kosrae, Pacific/Kwajalein, Pacific/Majuro, Pacific/Nauru, Pacific/Palau, and Pacific/Pohnpei. (Thanks to Phake Nick.) Assume that the Spanish East Indies was like the Philippines and observed American time until the end of 1844. This affects Pacific/Chuuk, Pacific/Kosrae, Pacific/Palau, and Pacific/Pohnpei. Changes to past tm_isdst flags For the recent Morocco change, the tm_isdst flag should be 1 from 2018-10-27 00:00 to 2018-10-28 03:00. (Thanks to Michael Deckers.) Give a URL to the official decree. (Thanks to Matt Johnson.) (From OE-Core rev: 100d0d0f24cabedd1a89b69ac8ffb05d85663761) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lighttpd: upgrade 1.4.51 -> 1.4.52Alexander Kanavin2019-01-031-2/+2
| | | | | | | (From OE-Core rev: 2f34de99030ebf872e442cdbdb99f07617d8d45a) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: default to unix pam moduleDiego Rondini2019-01-031-1/+1
| | | | | | | | | | | | When pam PACKAGECONFIG is enabled a cups "pam.d" configuration file is installed. The default configuration file uses a non-existing "pam_unknown.so", but a different existing module can be selected by passing the --with-pam-module parameter. Use the unix pam module when pam is enabled. (From OE-Core rev: a7fb921e16e2eb4fa5a799b556d23d79801720b0) Signed-off-by: Diego Rondini <diego.rondini@kynetics.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Fix build with glibc 2.29Khem Raj2018-12-152-1/+59
| | | | | | | (From OE-Core rev: 1ba3400e1022ad9ea5bfea8d2237f3db0b83a83c) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lzip: clean up recipeRoss Burton2018-12-131-3/+3
| | | | | | | | | | Use cleandirs to ensure ${B} is always empty, and remove redundant assignment of EXTRA_OEMAKE (presumably from when it had a non-empty default). (From OE-Core rev: 326e183479f9cae12f2219a2bf9112b322832daa) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: Drop redundant patches and fix build with clangKhem Raj2018-12-096-362/+40
| | | | | | | | | | | | | Several patches were being applied unnecessarily, the purpose they served at one point has either been fixed differently, or accepted upstream. Add a new patch to make clang's diagnostics happy (From OE-Core rev: 8bc0d2f2197430723f8b2d0785169e48c883eedb) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at: upgrade to 3.1.23Chen Qi2018-12-053-24/+37
| | | | | | | | | | | | The following patches are rebased. fix_parallel_build_error.patch pam.conf.patch (From OE-Core rev: 30fa97ec4c9d0553f1566bc26a6949e93cb6da90) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat: upgrade to 12.1.1Chen Qi2018-12-051-2/+2
| | | | | | | (From OE-Core rev: af912ac17f406ff11319eb33bc0d3910bcea39ef) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: upgrade to 2.2.9Chen Qi2018-12-053-20/+21
| | | | | | | | | | | The following patch is rebased. 0001-don-t-try-to-run-generated-binaries.patch (From OE-Core rev: ee57d79aec06e9b160cf2713636cda650ba68d5a) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: upgrade to 1.8.26Chen Qi2018-12-052-4/+7
| | | | | | | | | License-Update: include more files to check, but license remains the same. (From OE-Core rev: ad0f26263eb51cda4cf96cd2fe7f6e7f950b9e8e) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cpio: update patch to merged versionRoss Burton2018-12-051-68/+32
| | | | | | | | | | The segfault on append was fixed upstream with a different patch, so apply that instead. (From OE-Core rev: 24000d1fdba2684202e15371f80bb385722c9d91) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: add back lost Upstream-Status tagsRoss Burton2018-12-054-4/+4
| | | | | | | (From OE-Core rev: ffde22a3a78c0333f42e8bc9bad633ef279f11ca) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: add missing patch Upstream-StatusRoss Burton2018-12-011-0/+1
| | | | | | | (From OE-Core rev: a6ca465d0981f25723b4ff93a2731e87fb20bd49) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cpio: fix crash when appending to archivesRoss Burton2018-12-012-0/+88
| | | | | | | | | | | The upstream fix for CVE-2016-2037 introduced a read from uninitialized memory bug when appending to an existing archive, which is an operation we perform when building an image. (From OE-Core rev: 046e3e1fca925febf47b3fdd5d4e9ee2e1fad868) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: 9.25 -> 9.26Hongxu Jia2018-12-019-1296/+3
| | | | | | | | | | - Drop backported CVE fixes 000[1-8]*.patch (From OE-Core rev: f30bd6bf01dbf81f0872382be44d507fb981f953) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: improve the run-ptestMingli Yu2018-11-271-8/+17
| | | | | | | | | | | | | | | | | | | | | | * There are 120+ cases under ${libdir}/mdadm/ptest/tests, but the test will break if one test fails as below logic in run-ptest. ./test &>./test.log That's to say, the tests after the failed test have no chance to run with the current logic. To guarantee all the tests can run even one of the tests fails, the option --keep-going should be added. * Refactor the test report to make the report more detailed and more common (From OE-Core rev: 80d17497b719efb2ca9f36b8a730815547e93aa7) Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ethtool: 4.17 -> 4.19Changhyeok Bae2018-11-232-3/+3
| | | | | | | (From OE-Core rev: 565bbbf43da14de466fccdfaa259bdb9b50b686e) Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bzip2: extend alternatives list to include bzip2Chen Qi2018-11-231-1/+1
| | | | | | | | | | bzip2 could also be provided by busybox. So extend the alternatives list to include bzip2. (From OE-Core rev: 832ce25879d5e3df2d443bdf4362bf4af1377e87) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: Remove tab indentations in python codeRobert Yang2018-11-231-4/+4
| | | | | | | | | Use 4 spaces to replace a tab. (From OE-Core rev: cbb6743d46752481782789fa1a0dfade11057114) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lighttpd: update to 1.4.51Alexander Kanavin2018-11-231-2/+2
| | | | | | | (From OE-Core rev: 7e95eca23f06bfeb7b780958a46ec01feb58f20b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* psmisc: update to 23.2Alexander Kanavin2018-11-232-10/+6
| | | | | | | (From OE-Core rev: df7a2a50b20fcbae17b87d0291cbc405b04c37d7) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: Upgrade to 4.1Mingli Yu2018-11-2315-354/+105
| | | | | | | | | | * Remove 5 backported patches * Refresh patches to remove fuzz warnings (From OE-Core rev: a455616df65f1e9dac5e283a9cda047868465d23) Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsolv: update to 0.7.1Alexander Kanavin2018-11-221-1/+1
| | | | | | | (From OE-Core rev: 425f8a83a47c013beb6303b88dda4c727d173ab9) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Use a legal bad address for mips in setrlimit05.cHongzhi.Song2018-11-212-0/+62
| | | | | | | | | | | | | | | | | This testcase fails on mips32. The process is killed by SIGBUS which is not as expect. This is because: ((void *)-1) is not a legal bad address which causes the process killed by SIGBUG on mips. 'tst_get_bad_addr()' returns an address that should works on mips and other arches. (From OE-Core rev: e45948d4be14c14eff0a5c8c8597a7523f2edff1) Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Delete unneeded patch for FNM_EXTMATCHDaniel Díaz2018-11-212-45/+0
| | | | | | | | | | The patch in question was reworked, merged and released by upstream version 20180926, as commit 822ad2043379. (From OE-Core rev: 6ad99f3eabe359d5be98d63d4781063b63c83eea) Signed-off-by: Daniel Díaz <daniel.diaz@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Update to 20180926Petr Vorel2018-11-197-279/+58
| | | | | | | | | | | | | | | | | | | | | | New patches * 0001-statx-fix-compile-errors.patch Rebased patches * 0039-commands-ar01-Fix-for-test-in-deterministic-mode.patch Removed removed (accepted in upstream) * 0041-cve-2017-5669-shmat-for-0-or-PAGESIZE-with-RND-flag-.patch * 0042-fs-ftest-ftest06.c-Fix-too-small-name-string-and-rel.patch * 0043-open-creat-skip-S_ISGID-check-on-files-created-by-no.patch Removed patches (different fix accepted in upstream) * 0001-mmap15-mips64-return-EINVAL.patch (From OE-Core rev: 439cb0421570e1edea6994775ed782b9b264f4a1) Signed-off-by: Petr Vorel <petr.vorel@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpcbind: 0.2.4 -> 1.2.5Hongxu Jia2018-11-144-358/+2
| | | | | | | | | | | | | | | | | - Drop backport fixes 0001-rpcbind-pair-all-svc_getargs-calls-with-svc_freeargs.patch pmapproc_dump-Fixed-typo-in-memory-leak-patch.patch rpcbproc_callit_com-Stop-freeing-a-static-pointer.patch - Do not manually move binaries from bindir to sbindir, the upstream already moved rpcbind from bin_PROGRAMS to sbin_PROGRAMS in Makefile.am https://git.linux-nfs.org/?p=steved/rpcbind.git;a=commitdiff;h=9afccfcd5ab350d6bc72622f3d1ccfb9e54652b0 (From OE-Core rev: 3df591cd914a4f060f0a178a59c93b464192d80d) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libaio: Extend to nativePeter Kjellerstedt2018-11-141-1/+1
| | | | | | | | | | | | | | | lvm2 currently requires libaio. So building lvm2-native will result in the following error. ERROR: Required build target 'lvm2-native' has no buildable providers. Missing or unbuildable dependency chain was: ['lvm2-native', 'libaio-native'] Extend libaio to native to fix this issue. (From OE-Core rev: fe871d23c2714e66a1f5e2428a16e742ca40fc62) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: improve reproducibility by hard-coding shell pathMartin Hundebøll2018-11-141-0/+2
| | | | | | | | | | | | | | | | | The shadow configure script tries really hard to detect the running shell to make sure it doesn't do unsupported calls. On my system the shell is detected as /bin/sh, while a build in an ubuntu docker it resolves to /bin/bash. And since the shell path is baked into the target binaries through config.h, the build becomes inreproducible. Fix reproducibility by hard-coding the shell to be /bin/sh (From OE-Core rev: 5e3e30446b6abd98d1d3e9bee818203a6a206634) Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-db: 2.8.3 -> 2.8.4Hongxu Jia2018-11-141-2/+3
| | | | | | | (From OE-Core rev: b630168f54e8414faad12710bc10133cff9e5857) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* unzip: actually apply CVE-2018-18384Ross Burton2018-11-091-0/+1
| | | | | | | (From OE-Core rev: d8e1b7afc536f989e7e6efdab0998d54f26ad1f6) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: fix CVE-2018-18284Hongxu Jia2018-11-072-0/+246
| | | | | | | | | | | Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator. (From OE-Core rev: 98ab5c5770d20b39bf3c58083f31f31838f2e940) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: fix CVE-2018-18073Hongxu Jia2018-11-073-0/+241
| | | | | | | | | | | Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object. (From OE-Core rev: 6098c19e1f179896af7013c4b5db3081549c97bc) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: fix CVE-2018-17961Hongxu Jia2018-11-076-0/+806
| | | | | | | | | | | | Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183. (From OE-Core rev: 6c32ea184941d292cd8f0eb898e6cc90120ada40) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>