summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* cups: fix CVE-2020-10001Stefan Ghinea2021-02-262-0/+75
| | | | | | | | | | | | | | | A buffer (read) overflow in the ippReadIO function. References: https://nvd.nist.gov/vuln/detail/CVE-2020-10001 Upstream patches: https://github.com/OpenPrinting/cups/commit/efbea1742bd30f842fbbfb87a473e5c84f4162f9 (From OE-Core rev: 90eba79bf6f623aa3021eafd0141dad1c3059001) Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: Fix reproducibility issuesRichard Purdie2021-02-261-0/+2
| | | | | | | | | configure inspects the host's /etc/group for these configuration options, fix this to the correct values by using configure options. (From OE-Core rev: f16f9c727569414cd52862dcba18d8e423f4e961) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* asciidoc: Switch to using the main branchPeter Kjellerstedt2021-02-261-1/+1
| | | | | | | | | Upstream has renamed the "master" branch to "main". (From OE-Core rev: 05637733cf89a81fd5d787402f5a917f279a1a0d) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go-helloworld: Turn into a go module enabled buildKhem Raj2021-02-261-2/+3
| | | | | | | (From OE-Core rev: 86aacbc889830846150ff2d0f1cd7ba00a2c10f6) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* reproducible: Improve SOURCE_DATE_EPOCH_FALLBACK handlingRichard Purdie2021-02-242-2/+0
| | | | | | | | | | | | | | Ensure the fallback value if used is written to the SDE file and hence stored in sstate, reducing any confusion within the code over '0' values. Bump the HASHEQUIV_VERSION since we've had a ton of trouble with ensuring this rolls out correctly on the autobuilder so others may too, take a clean slate for it. (From OE-Core rev: 53ffffa32b76330835287dfc05d4e4796841af08) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* screen: fix CVE-2021-26937Scott Murray2021-02-232-0/+69
| | | | | | | | | Apply patch from Debian to fix CVE-2021-26937. (From OE-Core rev: 6d688cc8672b1830ba10966492ab3f8a12d32e17) Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* net-tools: update to 2.10Oleksandr Kravchuk2021-02-233-53/+4
| | | | | | | | | | | Removed upstreamed patches. Added new package configs. (From OE-Core rev: 179756f647c2a2e63b3bbcc53e7c0ff3c5df4e39) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* groff: Fix determinism issueRichard Purdie2021-02-192-1023/+14
| | | | | | | | | | | | | | Sometimes bison would regenerate source files and sometimes it would not This is likely related to the patching of generated files by on of the patches. Drop those changes and force the files to regenerate in all cases since we depend on bison-native anyway. This ensures the results are always consistent. (From OE-Core rev: 4449fa226e94f7124215c5ead43aadda7967f3af) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* asciidoc: fix upstream checkAnuj Mittal2021-02-191-0/+2
| | | | | | | | | Detect versions with numbers only and ignore the pre-release versions. (From OE-Core rev: e632b97d2411bc4510c54f6ac32ffa9042f69034) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-db: upgrade 2.9.3 -> 2.9.4Anuj Mittal2021-02-191-6/+1
| | | | | | | (From OE-Core rev: 25e247f386b8d2370e9835a3ca99cae41da2577f) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysklogd: upgrade 2.1.2 -> 2.2.1Anuj Mittal2021-02-183-47/+3
| | | | | | | | | Merge inc and bb files too. (From OE-Core rev: 76d1af4fe73fee0696067dfc4dd1bc9a9015416a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lighttpd: upgrade 1.4.58 -> 1.4.59Anuj Mittal2021-02-181-1/+1
| | | | | | | (From OE-Core rev: 95fb3526f71e03e946209df039f84b7e7a2a91dc) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* psmisc: upgrade 23.3 -> 23.4Anuj Mittal2021-02-181-1/+1
| | | | | | | (From OE-Core rev: 514a0b78c00296314f601b1e7175756d253b42b1) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat: upgrade 12.4.2 -> 12.4.3Anuj Mittal2021-02-181-1/+1
| | | | | | | (From OE-Core rev: d8ad03cb38881e8cd42ab372d7dd730c5decc432) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pigz: upgrade 2.4 -> 2.6Anuj Mittal2021-02-181-2/+1
| | | | | | | (From OE-Core rev: 2df01c9fd4d4add863938a6f7679a5af4c5917a6) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.12.02 -> 0.12.03Anuj Mittal2021-02-181-1/+1
| | | | | | | (From OE-Core rev: 01c99bb02e99feae3a1378d0b40b4bf3c51d6bac) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* acpica: Fix reproducibility issuesJoshua Watt2021-02-171-0/+2
| | | | | | | | | | Fixes reproducibility when build acpica yacc sources by instructing bison on how to do the file prefix mapping (From OE-Core rev: d13a1df7bd173fca3fc2cdf889d5eb487e35d6fd) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: Avoid reproducibility failures after fixing buildRichard Purdie2021-02-161-0/+5
| | | | | | | | | | Add some temporary bumps to versions to change the output hash so the fix applies correctly. Can be dropped next time we update the recipe and the output changes. (From OE-Core rev: 69205edcdff865048e55a6b7feaf82064ebc10c5) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: Fix determinism issue from sendmail host pathRichard Purdie2021-02-161-0/+1
| | | | | | | | | The build was injecting the path of the host's sendmail binary. Set this deterministically to match OE's path for it. (From OE-Core rev: 476328b91ea4417160580d28df4fcc1147d85ae2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cwautomacros: Ensure version is set deterministicallyRichard Purdie2021-02-161-1/+1
| | | | | | | | | The makefile injects the current date into the version file. Do this deterministically with SOURCE_DATE_EPOCH. (From OE-Core rev: 31f2ad739ea776a1e11b5cef5434df188007c7bf) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tar: update to 1.34Oleksandr Kravchuk2021-02-161-1/+1
| | | | | | | (From OE-Core rev: 6dd51b6d2f2c7110d8c2755dadcdb04f60db7d83) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* parted: upgrade 3.3 -> 3.4Wang Mingyu2021-02-104-131/+3
| | | | | | | | | | | | | | | 0001-Move-python-helper-scripts-used-only-in-tests-to-Pyt.patch 0001-libparted-fs-add-sourcedir-lib-to-include-paths.patch 0002-tests-use-skip_-rather-than-skip_test_-which-is-unde.patch removed since they are included in 3.4 Add python3-core to RDEPENDS_parted-ptest since /usr/lib/parted/ptest/tests/msdos-overlap contained in package parted-ptest requires /usr/bin/python3 (From OE-Core rev: c7d7e5f8177cdebd580ca7ff8f4412596567aff1) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at: correct upstream version checkAlexander Kanavin2021-02-091-2/+0
| | | | | | | (From OE-Core rev: 0e2dfa9f7904db32a14c09b1d451382a4c91f85d) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tar: update 1.32 -> 1.33Alexander Kanavin2021-02-092-24/+2
| | | | | | | | | Drop musl fix as upstream fixed the issue. (From OE-Core rev: 9ac95af964876752e7dae819f5b678ae4b510064) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash: Disable bracketed input by defaultJoshua Watt2021-02-061-0/+4
| | | | | | | | | | | | Bash 5.1 enabled bracketed input mode by default, but this causes a lot of problems with automated testing as it can inject a lot of control sequences into non-interactive output. Disable it to cleanup the output an preserve the pre-5.1 behavior (From OE-Core rev: 6c1cb7e274050f1ccb817b8ee34d0f61f34c95e3) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mc: upgrade 4.8.25 -> 4.8.26zhengruoqin2021-02-061-1/+2
| | | | | | | | | | | | Fix the do_compile error: | ../../../mc-4.8.26/lib/tty/tty-ncurses.c: In function 'tty_colorize_area': | ../../../mc-4.8.26/lib/tty/tty-ncurses.c:557:5: error: unknown type name 'cchar_t'; did you mean 'wchar_t'? add -DNCURSES_WIDECHAR=1 when musl. (From OE-Core rev: 5be29caca3d06dd3d2bab4c76588f509f1268199) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "msmtp: Fix to work with autoconf 2.70"Richard Purdie2021-02-032-19/+1
| | | | | | | | This reverts commit e8c0012ea036cb962db25a5941619c22e7218985. No longer needed with autoconf 2.71 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.12.01 -> 0.12.02Wang Mingyu2021-01-301-1/+1
| | | | | | | (From OE-Core rev: 3244bd2d48bfd993299125856113965056797dc9) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: upgrade 20200930 -> 20210121Wang Mingyu2021-01-302-35/+1
| | | | | | | | | | 0001-ltp-pan-Use-long-long-int-to-print-time_t.patch removed since it is included in 20210121 (From OE-Core rev: b6f49fc60a12ec6c4c1334ca3c266e99c03e81d4) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsolv: upgrade 0.7.16 -> 0.7.17Wang Mingyu2021-01-301-1/+1
| | | | | | | (From OE-Core rev: c51a6d1cad733da227ef4f97061238f3caa9f582) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* msmtp: Fix to work with autoconf 2.70Richard Purdie2021-01-292-1/+19
| | | | | | | | | Add the required gettext version macro to work with the new autoconf version. (From OE-Core rev: e8c0012ea036cb962db25a5941619c22e7218985) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at: Upgrade 3.1.23 -> 3.2.1Richard Purdie2021-01-295-31/+24
| | | | | | | | | | This fixes flex issues with autoconf 2.70 rather than backporting patches. Patches refreshed. (From OE-Core rev: 3ca412ed7fc5a9d525d4ba7922e7e3e179904380) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Clean up various class-native* RDEPENDS overridesRichard Purdie2021-01-291-1/+0
| | | | | | | | | | | | | | | | | | | | | | With PACKAGES functioning more correctly for native recipes combined with classextend improvements over the years, there are various overrides of RDEPENDS which look unecessary now, clean them up. There some some minor changes in dependencies, specifically: "python3-numpy-native.do_populate_sysroot" -> "python3-native.do_populate_sysroot" "python3-mako-native.do_populate_sysroot" -> "python3-native.do_populate_sysroot" "itstool-native.do_populate_sysroot" -> "libxml2-native.do_populate_sysroot" however there are already: XXX-native.do_prepare_recipe_ssysroot -> YYY-native.do_populate_sysroot mappings from DEPENDS so this is effectively a null op. (From OE-Core rev: 2edd826531d79744d7b2114c5f24296966d51781) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: upgrade 1.9.5p1 -> 1.9.5p2Yi Fan Yu2021-01-271-1/+1
| | | | | | | | | Notable fix: CVE-2021-3156 (From OE-Core rev: 1140ca0090eb235cad3bc1427703dea43429d9de) Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: upgrade to 2021aOvidiu Panait2021-01-271-3/+3
| | | | | | | | | | | | | | Release 2021a - 2021-01-24 10:54:57 -0800 Changes to future timestamps South Sudan changes from +03 to +02 on 2021-02-01 at 00:00. (Thanks to Steffen Thorsen.) (From OE-Core rev: ed9114df2086c4ad0544cf99c9c1ff8fb7b830b9) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpam: add ptest supportMingli Yu2021-01-272-1/+47
| | | | | | | | | Add ptest support. (From OE-Core rev: 016efb82e90a56707995d2a6addd34e6b28b6b99) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iptables: upgrade 1.8.6 -> 1.8.7Wang Mingyu2021-01-231-1/+1
| | | | | | | (From OE-Core rev: 7d5c46abf904de5c9770e466baef38705f46695e) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: upgrade 1.9.4p1 -> 1.9.5p1Anuj Mittal2021-01-202-3/+3
| | | | | | | | | License-Update: copyright years changed (From OE-Core rev: b72b3e04457928235843173981fd0a20ef1b00ae) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* acpica: upgrade 20201217 -> 20210105Anuj Mittal2021-01-201-2/+2
| | | | | | | | | License-Update: copyright years changed (From OE-Core rev: b19a0aad639ce6aeb8f56860f230ff1e1b3e48de) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lighttpd: upgrade 1.4.57 -> 1.4.58Anuj Mittal2021-01-201-1/+1
| | | | | | | (From OE-Core rev: 4720e8f26f86a1d1fdc764309baa25b83d6d2483) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wget: upgrade 1.20.3 -> 1.21.1Anuj Mittal2021-01-202-8/+7
| | | | | | | (From OE-Core rev: 589bf1c8de9273e8c4bbc6a4468fb699d4deb176) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lzip: upgrade 1.21 -> 1.22Anuj Mittal2021-01-201-3/+3
| | | | | | | | | License-Update: copyright years, formatting changes (From OE-Core rev: ef26799535f4ada60e35c7fe48cce959ba632c78) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* logrotate: upgrade 3.17.0 -> 3.18.0Anuj Mittal2021-01-201-1/+1
| | | | | | | (From OE-Core rev: 4efc2586a43a399c0f91a26d66a33ac47b8778e2) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.12.00 -> 0.12.01Anuj Mittal2021-01-201-1/+1
| | | | | | | (From OE-Core rev: 6a5c1500889f1c13e8a66ab4524f7936a088f9ae) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash: Add makefile race workaroundRichard Purdie2021-01-202-0/+53
| | | | | | | | | | | There is a race between two make invocations in 5.1. It has been reported upstream, in the meantime add a work around patch (which upstream may yet even apply). The autobuilder found two instances of this race in a single build. (From OE-Core rev: 62b8580cea567f2d9b7a900fc4302d6bc5a785b2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash: Set HEREDOC_PIPESIZE deterministicallyRichard Purdie2021-01-201-0/+3
| | | | | | | | | | We had reproducibility issues where the pipe size appears to vary on some build hosts between 65535 and 4096. It should be the former on Linux in general so standarise on that. Easiest way is to pass in CFLAGS. (From OE-Core rev: 6de2152693c31ee1181e9eacc32b90dd63d4e0a9) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash: update 5.0 -> 5.1Alexander Kanavin2021-01-206-474/+106
| | | | | | | | [RP: Add aclocal support and patch m4 handling to adapt to OE] (From OE-Core rev: ab4406dfdbd5e21f6fff0865228ebf5da1274505) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zip: whitelist CVE-2018-13410 and CVE-2018-13684Mikko Rapeli2021-01-161-0/+6
| | | | | | | | | | | | | | | | | | | | | https://nvd.nist.gov/vuln/detail/CVE-2018-13410 is disputed and also Debian considers it not a vulnerability: https://security-tracker.debian.org/tracker/CVE-2018-13410 http://seclists.org/fulldisclosure/2018/Jul/24 "Negligible security impact, would involve that a untrusted party controls the -TT value." https://nvd.nist.gov/vuln/detail/CVE-2018-13684 is not for zip, also Debian concludes this: https://security-tracker.debian.org/tracker/CVE-2018-13684 "NOT-FOR-US: smart contract implementation for ZIP" (From OE-Core rev: 06b72a91b6dcf63fed437fd2105c59e922ba6525) Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libarchive: upgrade 3.4.3 -> 3.5.1zhengruoqin2021-01-161-2/+2
| | | | | | | | | copyright: add libarchive/archive_entry.c (From OE-Core rev: 222431080ded2c459ca20327feb44471516cf5d8) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* findutils: upgrade 4.7.0 -> 4.8.0Wang Mingyu2021-01-131-2/+1
| | | | | | | (From OE-Core rev: 6061687ff33938c9ac9346caed8cf831270b18aa) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>