summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
...
* cpio: Fix wrong CRC with ASCII CRC for large filesMarek Vasut2023-04-062-0/+40
| | | | | | | | | | | | | Due to signedness, the checksum is not computed when filesize is bigger a 2GB. Pick a fix for this problem from CPIO ML, where the fix has been posted for 5 years. Since CPIO upstream is effectively unresponsive and any and all attempts to communicate with the maintainer and get the fix applied upstream failed, add the fix here instead. (From OE-Core rev: bfff138af4bdd356ac66571e6ad91c1a5599b935) Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* grep: upgrade 3.9 -> 3.10Denys Dmytriyenko2023-04-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | This is to announce grep-3.10, a stable release, fixing a bug with -P and \d. TL;DR, grep-3.9 would do this: $ LC_ALL=en_US.UTF-8 grep -P '\d' <<< ٠١٢٣٤٥٦٧٨٩ ٠١٢٣٤٥٦٧٨٩ It should print nothing, like it has always done. For more detail, see https://lists.gnu.org/r/bug-grep/2023-03/msg00005.html Thanks to Paul Eggert for catching the \D variant and to Bruno Haible for assiduously tending gnulib and for testing grep on so many different systems. There have been 12 commits by 2 people in the 17 days since 3.9. (From OE-Core rev: 7ac3bcf228ceb4b56f82c65941b95a276d7d3b95) Signed-off-by: Denys Dmytriyenko <denis@denix.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xz: upgrade 5.4.1 -> 5.4.2Denys Dmytriyenko2023-04-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | COPYING files had 2 updates w/o affecting licensing: * URLs to gnu.org and fsf.org switched to https * Clarifying licensing of liblzma Doxygen-generated docs - details below 5.4.2 (2023-03-18) * All fixes from 5.2.11 that were not included in 5.4.1. * If xz is built with support for the Capsicum sandbox but running in an environment that doesn't support Capsicum, xz now runs normally without sandboxing instead of exiting with an error. * liblzma: - Documentation was updated to improve the style, consistency, and completeness of the liblzma API headers. - The Doxygen-generated HTML documentation for the liblzma API header files is now included in the source release and is installed as part of "make install". All JavaScript is removed to simplify license compliance and to reduce the install size. - Fixed a minor bug in lzma_str_from_filters() that produced too many filters in the output string instead of reporting an error if the input array had more than four filters. This bug did not affect xz. * Build systems: - autogen.sh now invokes the doxygen tool via the new wrapper script doxygen/update-doxygen, unless the command line option --no-doxygen is used. - Added microlzma_encoder.c and microlzma_decoder.c to the VS project files for Windows and to the CMake build. These should have been included in 5.3.2alpha. * Tests: - Added a test to the CMake build that was forgotten in the previous release. - Added and refactored a few tests. * Translations: - Updated the Brazilian Portuguese translation. - Added Brazilian Portuguese man page translation. (From OE-Core rev: 0331fac93570b8e2960ac94b2a6a7eb71cb1a1d0) Signed-off-by: Denys Dmytriyenko <denis@denix.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xdg-utils: Fix CVE numberRichard Purdie2023-04-052-2/+2
| | | | | | | | | In the previous commit I somehow mixed up and used an incorrect CVE number. Use the correct one. (From OE-Core rev: b3e2729f686ff6e16e11590bcd701c057ae5f1e2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xdg-utils: Add a patch for CVE-2020-27748Richard Purdie2023-04-042-0/+146
| | | | | | | | | Take a patch submitted upstream for the issue while upstream decide what to do. We don't use thunderbird integration so this isn't an issue for us. (From OE-Core rev: b85b7714a44caa70beb2f115483ee52745aa1b97) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: Fix can not print full login timeout messageSoumya2023-04-032-0/+42
| | | | | | | | | | | | When we do not enter password during login, it is expected to display message "Login timed out after 60 seconds". But it prints only first few bytes(like "Login t") when write is immediately followed by exit. Fix - Calling exit from new handler provides enough time to display full message. Upstream-Status: Accepted [https://github.com/shadow-maint/shadow/commit/670cae834827a8f794e6f7464fa57790d911b63c] (From OE-Core rev: 644cfe9dcf351bfa6c67f4b4d1e7dec416a59021) Signed-off-by: Soumya <soumya.sambu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tzdata: upgrade to 2023cRoss Burton2023-03-303-306/+3
| | | | | | | | | | Drop a backport patch as it is now integrated. (From OE-Core rev: 80d26d1da47dcd9213a7083d9493a7bce0897a57) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cracklib: upgrade to v2.9.10Sudip Mukherjee2023-03-303-69/+15
| | | | | | | | | | | Remove a patch which has been applied upstream and rebase another patch on top of v2.9.10 (From OE-Core rev: d9e8baaca5a6dfd1517f9f328d6644c72404f19e) Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* abi_version/sstate: Handle pkgconfig output changes and bump output versionsRichard Purdie2023-03-261-3/+0
| | | | | | | | | | | | | A recent package.py change has highlighted some corruption issues with -dev pkgconfig package dependencies. Bump the output versions to trigger a rebuild and ensure everything is consistent. Take the opportunity to also drop all HASHEQUIV_HASH_VERSION entries since the main version is changing. (From OE-Core rev: f45ddfbf007de858327eef0ffefd5840ef4c69b8) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.15.04 -> 0.15.06Alexandre Belloni2023-03-261-1/+1
| | | | | | | (From OE-Core rev: 975ac5b3de39c642326a8e4fd71308f58640ab35) Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: fix tests/00raid0Mingli Yu2023-03-222-0/+42
| | | | | | | | | | | | Backport patch [1] to fix tests/00raid0. [1] https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/commit/?id=7539254342bc591717b0051734cc6c09c1b88640 (From OE-Core rev: baba79874444a9a55e787983a87408e9bc7ebea2) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cracklib: update github branch to 'main'Tim Orling2023-03-161-1/+1
| | | | | | | (From OE-Core rev: ab041ca5d036c2a1a1514893c6ffb5c7188ff00f) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: Fix raid0 testsMingli Yu2023-03-164-0/+185
| | | | | | | | | | | | | | Backport patches to fix raid0 tests: tests/00raid0 tests/00readonly tests/03r0assem tests/04r0update tests/04update-metadata (From OE-Core rev: cb8ab2674d155fa8d90956c3522653b013ce6e6c) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: fix tests/02lineargrowMingli Yu2023-03-162-0/+34
| | | | | | | | | | | Backport patch [1] to fix tests/02lineargrow. [1] https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/commit/?id=a2c832465fc75202e244327b2081231dfa974617 (From OE-Core rev: 4f7175b9af3f4407f6dfa1e1eb18b2c3d3a72c88) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: Fix testcase 06wrmostlyMingli Yu2023-03-162-0/+46
| | | | | | | | | | | Backport patch [1] to fix the failure of the 06wrmostly test. [1] https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/commit/?id=41edf6f45895193f4a523cb0a08d639c9ff9ccc9 (From OE-Core rev: e7359d98ab588eb7969e4d26979cccae79095479) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* grep: upgrade 3.8 -> 3.9Wang Mingyu2023-03-161-1/+1
| | | | | | | | | | | | | | | | | | | Bug fixes ========== With -P, some non-ASCII UTF8 characters were not recognized as word-constituent due to our omission of the PCRE2_UCP flag. E.g., given f(){ echo Perú|LC_ALL=en_US.UTF-8 grep -Po "$1"; } and this command, echo $(f 'r\w'):$(f '.\b'), before it would print ":r". After the fix, it prints the correct results: "rú:ú". When given multiple patterns the last of which has a back-reference, grep no longer sometimes mistakenly matches lines in some cases. [Bug#36148#13 introduced in grep 3.4] (From OE-Core rev: 59a2cad44782eb04a304d0b7a1022570d08477b0) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cpio: fix ptest failureChangqing Li2023-03-142-1/+2
| | | | | | | | | | Fix following ptest failure: /usr/lib64/cpio/ptest/run-ptest: line 7: cd: /usr/lib/cpio/ptest/tests/: No such file or directory (From OE-Core rev: 1809329c336cb509349bd39f13cc78acd8efe0cd) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tzcode-native: fix build with gcc-13 on hostMartin Jansa2023-03-142-0/+303
| | | | | | | | | | | | | | | | * passing -std=c2x to avoid build failure with gcc-13 on host works as well, but the resulting zic then segfaults when used in tzdata, use a fix from upstream instead * reported upstream in https://mm.icann.org/pipermail/tz/2023-March/032690.html * fixes: http://errors.yoctoproject.org/Errors/Details/697913/ (From OE-Core rev: 5dabf677f38c209fb6a8ba837d5a66fd89f57d4d) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tzdata: use separate B instead of WORKDIR for zic outputMartin Jansa2023-03-141-5/+9
| | | | | | | | | | * avoid copying whole exec_prefix over base_prefix as there were only zoneinfo files anyway (From OE-Core rev: 37846f8735683ed0fab5ef5c12d77c6041348801) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: use 'tz' subdir instead of ${WORKDIR} directlyMartin Jansa2023-03-143-7/+4
| | | | | | | (From OE-Core rev: bc53ccaf82c57826acac5f9c2557e403ec367807) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: update 1.9.12p2 -> 1.9.13p3Xiangyu Chen2023-03-141-1/+1
| | | | | | | | (From OE-Core rev: 7d5193a9437dedb3f2cf35cb466acfe29cfa654e) Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpam: Remove flex dependencyMartin Larsson2023-03-131-1/+1
| | | | | | | | | | | | libpam does not have a direct build time dependency toward flex. The libpam code does not have any references to the lib and does not use flex for anything else at runtime. (From OE-Core rev: d48fc8e1f26120e75377caefb5f66eedce50081c) Signed-off-by: Martin Larsson <martin.larsson@actia.se> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml-sax-perl: Fix ptest dependenciesRichard Purdie2023-03-121-1/+1
| | | | | | | | | Add a missing ptest perl module dependency to fix execution in minimal ptest images. (From OE-Core rev: 9c35001345d107ec3869216a214439818099c1de) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libconvert-asn1-perl: Fix ptest dependenciesRichard Purdie2023-03-121-1/+2
| | | | | | | | | Add dependencies for missing perl modules to fix execution in minimal images. (From OE-Core rev: eba3d013b077ec94641118bf925779edf6deb8de) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gawk: Fix ptest dependencyRichard Purdie2023-03-121-1/+1
| | | | | | | | | The gawk ptests need some locale information, add the missing dependency so tests work in minimal images. (From OE-Core rev: 5aafe0dd13eba8303d1a954adffd6f1d8d234952) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* findutils: Fix ptest dependency issueRichard Purdie2023-03-121-1/+2
| | | | | | | | | | The options used with 'od' don't work with our busybox config. Add a dependency on the full utility from coreutils to fix execution in minimal images. (From OE-Core rev: 027f0997bd9ba68a86000e91ad81fcf9ea1a4f89) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bc: Fix ptest test output namingRichard Purdie2023-03-121-2/+2
| | | | | | | | | | The quoting in the script was mangled leading to "0" tests being found by our log parsing code. Fix the quoting to allow the correct test counts to appear. (From OE-Core rev: 5ad2ee63396cb27823dcd022878764bc69e619e9) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* m4/opkg/ethtool/attr/libgpg-error: Add missing bash ptest dependencyRichard Purdie2023-03-121-1/+1
| | | | | | (From OE-Core rev: 27b6605c7b95f70a50b4243818a03c5b2412c5a6) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: remove obsolete patchAlexander Kanavin2023-03-112-36/+0
| | | | | | | | | | | Upstream has disabled gold support altogether: https://github.com/ColinIanKing/stress-ng/commit/e65f517917fc682784bfa1b3cb53de3f3263b094 (From OE-Core rev: ca7578588ad9bb7a9e6678c1f658da62ffb735f8) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iptables: update 1.8.8 -> 1.8.9Alexander Kanavin2023-03-116-46/+53
| | | | | | | | | | | Replace one format string fixing patch with another format string fixing patch. (one problem fixed upstream, another introduced) (From OE-Core rev: 4a7b4d41ddcfaeaf47cf75200f2346639c64b11c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ethtool: update 6.1 -> 6.2Alexander Kanavin2023-03-113-64/+4
| | | | | | | | | | Drop patch merged upstream. (From OE-Core rev: ae0e692476b9564aa0a64f65d2abfdc0e55ef23b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* procps: update 3.3.17 -> 4.0.3Alexander Kanavin2023-03-114-74/+67
| | | | | | | | | | | | | | Drop patches as upstream refactored the code. Add a compatibility patch to igt-gpu-tools. Add a musl compatibility patch. (From OE-Core rev: 631eba02d64f1a42514e0ae4361bbecc5cce5fa7) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: update 1.9.12p2 -> 1.9.13p2Alexander Kanavin2023-03-113-12/+13
| | | | | | | | | | License-update: copyright years, formatting. (From OE-Core rev: 1476813725cce6754334b4a6727675640a7a1e44) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: add/fix web interface packagingTrevor Woerner2023-03-111-7/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cups includes a web server. Users can surf to port 631 (default) of a machine running cups to (potentially, based on configuration, default off) view jobs, add printers, and perform other forms of administration. The location of the various resources that are used by the built-in web server (e.g. index.html) are installed under ${datadir}/doc/cups. By default these artifacts would be included in the ${PN}-doc package. The comments in this recipe, however, would suggest an attempt was made to have them added to ${PN}; albeit unsuccessfully. These resources add roughly 1.8M to an image. Since cups does include a configuration option to disable the web interface (--enable-webif), add a PACKAGECONFIG (default off) to allow the user to decide whether or not they would like the web interface configured and its pieces added to the image. Enabling this PACKAGECONFIG both enables the web interface to be configured and built into cups, and also adds (by way of a recommendation) the web interface package to the image. Considering that the previous intention was not working, defaulting this option to off preserves the existing behaviour. Previously in order to have the web interface data included in an image, a user would have needed to explicitly add the ${PN}-doc package to their image. (From OE-Core rev: 2c9bd267ec532cd86a4a1be1d4e499e2aae89aba) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: check PACKAGECONFIG for pam featureTrevor Woerner2023-03-111-1/+1
| | | | | | | | | | | | | | The cups' PACKAGECONFIG is populated based on DISTRO_FEATURES, but a user is free to enable or disable PACKAGECONFIGs at will. In theory it is possible that pam is enabled globally in DISTRO_FEATURES but disabled in cups' PACKAGECONFIG. Checking the PACKAGECONFIG to determine whether or not pam is enabled would be a safer check rather than relying on DISTRO_FEATURES. (From OE-Core rev: a053dd177ddc99ced11e68914079be0ffe261262) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: use BUILDROOT instead of DESTDIRTrevor Woerner2023-03-111-1/+1
| | | | | | | | | | | | | | | | | | The cups documentation is clear that the correct way to install into an alternate root directory is to use the BUILDROOT variable. From INSTALL.md: Use the `BUILDROOT` variable to install to an alternate root directory: make BUILDROOT=/some/other/root/directory install DESTDIR works, but we should use the mechanism the project specifically created for this purpose. (From OE-Core rev: f8fc70674e0ea5df46969a06da62f8ed135cae4e) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: ignore CVE-2016-15024Ross Burton2023-03-071-0/+3
| | | | | | | | | | | This recently got an updated CPE which matches this recipe, but the issue is related to an entirely different shadow project so ignore it. (From OE-Core rev: 2331e98abb09cbcd56625d65c4e5d258dc29dd04) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.15.03 -> 0.15.04Wang Mingyu2023-03-064-106/+9
| | | | | | | | | | | | | | | 0001-test-float-Make-variables-global.patch 0001-Include-sys-futex.h-for-clock_adjtime.patch removed since they're included in 0.15.04. 0001-Pass-LD_GOLD-1-via-makefile-to-enable-gold-linker.patch refreshed for 0.15.04. (From OE-Core rev: 7c6192ef37907341679a06ce9f5e519902036649) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mc: set ac_cv_path_PERL_FOR_BUILDMingli Yu2023-02-241-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After mc upgrade to 4.8.29, it introduces PERL_FOR_BUILD [1] and will result in the below build failure on some system when we build under a project with long path. | make[4]: Entering directory '/buildarea2/WTEST_Regression/Rerun/build_dir/02161802-multilib_pkgs_conflict/qemux86-64-standard-std-OE/build1/tmp-glibc/work/core2-64-wrs-linux/mc/4.8.29-r0/build/doc/hlp/es' make[4]: Nothing to be done for 'install-exec-am'. | ../../../src/man2hlp/man2hlp ../../../doc/man/es/mc.1 ../../../../mc-4.8.29/doc/hlp/es/xnc.hlp mc.hlp.es | ../../../src/man2hlp/man2hlp: line 32: use: command not found | ../../../src/man2hlp/man2hlp: line 33: use: command not found | ../../../src/man2hlp/man2hlp: line 36: syntax error near unexpected token `(' | ../../../src/man2hlp/man2hlp: line 36: `my %static = (' | make[4]: [Makefile:632: mc.hlp.es] Error 2 (ignored) $ head -n 5 tmp-glibc/work/core2-64-wrs-linux/mc/4.8.29-r0/build/src/man2hlp/man2hlp #! /buildarea2/WTEST_Regression/Rerun/build_dir/02161802-multilib_pkgs_conflict/qemux86-64-standard-std-OE/build1/tmp-glibc/hosttools/perl # # Man page to help file converter # Copyright (C) 1994, 1995, 1998, 2000, 2001, 2002, 2003, 2004, 2005, # 2007, 2010, 2011 It's beacause the shebang line exceeds 128 which is usually the max length. So set ac_cv_path_PERL_FOR_BUILD to fix the above issue and altogether to remove the build path issue. [1] https://github.com/MidnightCommander/mc/commit/6b67d231a2f447cf5f33180c618c2a67849e6d15 (From OE-Core rev: 33d91a2434eeb20076c8226340b224b1d606c40f) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* less: backport the fix for CVE-2022-46663Ross Burton2023-02-242-0/+29
| | | | | | | | (From OE-Core rev: 56d31067a34bc1942c7eb4940a41ecfc81110e58) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zstd: upgrade 1.5.2 -> 1.5.4Alexander Kanavin2023-02-201-3/+4
| | | | | | | | | | License-Update: copyright holder Facebook -> Meta (From OE-Core rev: 3c5fb3e291cbd61a76db47a93a78c0972506e574) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-pages: upgrade 6.02 -> 6.03Alexander Kanavin2023-02-201-3/+3
| | | | | | | | | | License-Update: unrelated clarification in README (From OE-Core rev: 0b18b25010be30361268ef6cfa440a258b4917e8) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tar: Update fix for CVE-2022-48303 to upstream versionJoe Slater2023-02-193-37/+44
| | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2022-48303 by checking Base-256 encoding is at least 2 bytes long. GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-48303 Upstream patch: https://savannah.gnu.org/bugs/?62387 https://git.savannah.gnu.org/cgit/tar.git/patch/src/list.c?id=3da78400eafcccb97e2f2fd4b227ea40d794ede8 (From OE-Core rev: 0043c9d3f7b65a0cbb0a27c37b4825b8f5511dec) Signed-off-by: Rodolfo Quesada Zumbado <rodolfo.zumbado@windriver.com> Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: Add missing header files for clock_adjtimeKhem Raj2023-02-152-0/+33
| | | | | | | | (From OE-Core rev: 216e5b0e450c7b3f6f096c2892256e1bc1ec4781) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lighttpd: upgrade 1.4.68 -> 1.4.69Wang Mingyu2023-02-152-25/+1
| | | | | | | | | | | fix-missing-test.patch removed since it's included in new verion. (From OE-Core rev: b88ffd2c41d99099d444e9a05b6d1b84090160a0) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tar: Fix CVE-2022-48303Chee Yang Lee2023-02-152-1/+39
| | | | | | | | (From OE-Core rev: 4573a584397f197fbc9170abec3c590ea36667f7) Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cpio: Add ptest supportyanxk2023-02-102-1/+31
| | | | | | | | | | | | | | | Add ptest function for oss 'cpio'. Tis test takes less than 1 second with kvm enabled, so it is a fast test. autotest files would contain TMPDIR, they are removed from script files atconfig and atlocal. (From OE-Core rev: 9661e76aa1ea89b3dcc24a4d69fa7e6161873d7f) Signed-off-by: yanxk <yanxk.fnst@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.15.02 -> 0.15.03Alexander Kanavin2023-02-091-1/+1
| | | | | | | | (From OE-Core rev: b62843c91eb3c9cd79c62ce2e2b16c717cbbd9a0) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* texinfo: upgrade 7.0.1 -> 7.0.2Alexander Kanavin2023-02-091-1/+1
| | | | | | | | (From OE-Core rev: 5f7a5387a4340fcf5b79a9201a538ea039249afc) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: upgrade 1.9.12p1 -> 1.9.12p2Alexander Kanavin2023-02-091-1/+1
| | | | | | | | (From OE-Core rev: 5a3f5f4f607f5e06af772287109b68579154fb2f) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-29 16:07:16 +0000