summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* shadow: whitelist CVE-2013-4235Purushottam Choudhary2021-03-281-2/+3
| | | | | | | | | | | | | | | | | | This CVE is about TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees which had very low severity problem and marked as closed and won't fix. Therefore whitelisted CVE-2013-4235. Master, gatesgarth and dunfell all have shadow version 4.81. Hence, this is applicable for master, gatesgarth and dunfell. Link: https://bugzilla.redhat.com/show_bug.cgi?id=884658 (From OE-Core rev: 1474dcb84c925603736bafbe9fc802a99a014a39) Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b1c6cd87bee6b019619dc5728fd6c36bc87ed696) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* parted: Fix reproducibility issueRichard Purdie2021-03-101-0/+1
| | | | | | | | | | | | We don't use tbe BUILDINFO line of host information in the Makefile so remove it for reproducibility. (From OE-Core rev: d068eb7f453aa35eb3339c170a29dbd7a8ae51fe) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a9742595fa90d4977fdd8129a4fe4932ddb96a18) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: fix CVE-2020-10001Stefan Ghinea2021-03-102-0/+75
| | | | | | | | | | | | | | | | | | A buffer (read) overflow in the ippReadIO function. References: https://nvd.nist.gov/vuln/detail/CVE-2020-10001 Upstream patches: https://github.com/OpenPrinting/cups/commit/efbea1742bd30f842fbbfb87a473e5c84f4162f9 (From OE-Core rev: bf8ea2c4d477133196b20a00b4bfb63c7f36de18) Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 90eba79bf6f623aa3021eafd0141dad1c3059001) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: Fix reproducibility issuesRichard Purdie2021-03-101-0/+2
| | | | | | | | | | | | configure inspects the host's /etc/group for these configuration options, fix this to the correct values by using configure options. (From OE-Core rev: 0ede88ee0d5972352d317d1e2c7735b89bffab50) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f16f9c727569414cd52862dcba18d8e423f4e961) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* asciidoc: Switch to using the main branchPeter Kjellerstedt2021-03-101-1/+1
| | | | | | | | | | | | Upstream has renamed the "master" branch to "main". (From OE-Core rev: b03cb7c092754247153e7c8045532aff656c6d1f) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 05637733cf89a81fd5d787402f5a917f279a1a0d) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* screen: fix CVE-2021-26937Scott Murray2021-03-102-0/+69
| | | | | | | | | | | | Apply patch from Debian to fix CVE-2021-26937. (From OE-Core rev: 4131e1bc7188c5e88b06bcde1efc4de3c2d06c85) Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6d688cc8672b1830ba10966492ab3f8a12d32e17) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* groff: Fix determinism issueRichard Purdie2021-03-102-1023/+14
| | | | | | | | | | | | | | | | | Sometimes bison would regenerate source files and sometimes it would not This is likely related to the patching of generated files by on of the patches. Drop those changes and force the files to regenerate in all cases since we depend on bison-native anyway. This ensures the results are always consistent. (From OE-Core rev: aca1fba185ee3aac9a4631917462e60b5d89eecf) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4449fa226e94f7124215c5ead43aadda7967f3af) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* acpica: Fix reproducibility issuesJoshua Watt2021-02-261-0/+2
| | | | | | | | | | | | | Fixes reproducibility when build acpica yacc sources by instructing bison on how to do the file prefix mapping (From OE-Core rev: 0e5605af9ebbfceffd510e42013d4eaa76c4e820) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d13a1df7bd173fca3fc2cdf889d5eb487e35d6fd) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: Avoid reproducibility failures after fixing buildRichard Purdie2021-02-261-0/+5
| | | | | | | | | | | | | Add some temporary bumps to versions to change the output hash so the fix applies correctly. Can be dropped next time we update the recipe and the output changes. (From OE-Core rev: eb6323932b0d852ad5c10cb7e1e5015bb3e51e3e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 69205edcdff865048e55a6b7feaf82064ebc10c5) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: Fix determinism issue from sendmail host pathRichard Purdie2021-02-261-0/+1
| | | | | | | | | | | | The build was injecting the path of the host's sendmail binary. Set this deterministically to match OE's path for it. (From OE-Core rev: 023e7e667334f5c8a5647eab278262713bfd6555) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 476328b91ea4417160580d28df4fcc1147d85ae2) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cwautomacros: Ensure version is set deterministicallyRichard Purdie2021-02-261-1/+1
| | | | | | | | | | | | The makefile injects the current date into the version file. Do this deterministically with SOURCE_DATE_EPOCH. (From OE-Core rev: c135012f85d8e1f4b50880b580514410caacbcf5) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 31f2ad739ea776a1e11b5cef5434df188007c7bf) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: fix CVE-2021-3156Anuj Mittal2021-02-116-0/+301
| | | | | | | (From OE-Core rev: 2f6c7aae835c75a350686b058fba732005e4c923) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: fix CVE-2021-23240Anuj Mittal2021-02-112-0/+420
| | | | | | | (From OE-Core rev: 98470df92dc8650c349cc454d5c11e12e6803f19) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: upgrade to 2021aOvidiu Panait2021-02-051-3/+3
| | | | | | | | | | | | | | | | | | | Release 2021a - 2021-01-24 10:54:57 -0800 Changes to future timestamps South Sudan changes from +03 to +02 on 2021-02-01 at 00:00. (Thanks to Steffen Thorsen.) (From OE-Core rev: ed9114df2086c4ad0544cf99c9c1ff8fb7b830b9) (From OE-Core rev: c34b1432078647b3e435dfa8bc52a6d8c36e18b0) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d647db7c3087cee051e29211d6c519d3c9575b3d) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: fix CVE-2021-23239Anuj Mittal2021-02-052-0/+63
| | | | | | | (From OE-Core rev: ed8e858fc3ca0c5a401f08408a793f8c864ff645) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zip: whitelist CVE-2018-13410 and CVE-2018-13684Mikko Rapeli2021-01-271-0/+6
| | | | | | | | | | | | | | | | | | | | | | https://nvd.nist.gov/vuln/detail/CVE-2018-13410 is disputed and also Debian considers it not a vulnerability: https://security-tracker.debian.org/tracker/CVE-2018-13410 http://seclists.org/fulldisclosure/2018/Jul/24 "Negligible security impact, would involve that a untrusted party controls the -TT value." https://nvd.nist.gov/vuln/detail/CVE-2018-13684 is not for zip, also Debian concludes this: https://security-tracker.debian.org/tracker/CVE-2018-13684 "NOT-FOR-US: smart contract implementation for ZIP" (From OE-Core rev: f0314a6937a63b3274bcd84817476834c1de876e) Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: upgrade to 2020fOvidiu Panait2021-01-121-3/+3
| | | | | | | | | | | | | | | | | Release 2020f - 2020-12-29 00:17:46 -0800 Change to build procedure 'make rearguard_tarballs' no longer generates a bad rearguard.zi, fixing a 2020e bug. (Problem reported by Deborah Goldsmith.) (From OE-Core rev: 7f9c55651c47ad4b62f504c4725393f03ea7b1d3) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c7efa4d28d632d415ca574140586570ca376caf6) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-db: Fix reproducibility issueRichard Purdie2021-01-121-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | Executing a sequence like: bitbake man-db bitbake man-db -c clean bitbake man-db -c package_write_deb -f results in the ownership of files in the man-db package changing from "man/man" to "6/12". This is due to base-passwd not being installed in the recipe sysroot. Add the missing dependency so even if a recipe "re-packages", the name of the user/group is found and the packages are reproducible. [YOCTO #14172] (From OE-Core rev: ba0797130d60d168ea85be4e5928492a73fa4e7b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 769f8be29a192fd4fa0c4752f851fa3728d71179) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: upgrade to 2020eOvidiu Panait2021-01-121-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Briefly: Volgograd switches to Moscow time on 2020-12-27 at 02:00. Changes to future timestamps Volgograd changes time zone from +04 to +03 on 2020-12-27 at 02:00. (Thanks to Alexander Krivenyshev and Stepan Golosunov.) Changes to past timestamps Correct many pre-1986 transitions, fixing entries originally derived from Shanks. The fixes include: - Australia: several 1917 through 1971 transitions - Bahamas: several 1941 through 1945 transitions - Bermuda: several 1917 through 1956 transitions - Belize: several 1942 through 1968 transitions - Ghana: several 1915 through 1956 transitions - Israel and Palestine: several 1940 through 1985 transitions - Kenya and adjacent: several 1908 through 1960 transitions - Nigeria and adjacent: correcting LMT in Lagos, and several 1905 through 1919 transitions - Seychelles: the introduction of standard time in 1907, not 1906 - Vanuatu: DST in 1973-1974, and a corrected 1984 transition (Thanks to P Chan.) Because of the Australia change, Australia/Currie (King Island) is no longer needed, as it is identical to Australia/Hobart for all timestamps since 1970 and was therefore created by mistake. Australia/Currie has been moved to the 'backward' file and its corrected data moved to the 'backzone' file. Changes to past time zone abbreviations and DST flags To better match legislation in Turks and Caicos, the 2015 shift to year-round observance of -04 is now modeled as AST throughout before returning to Eastern Time with US DST in 2018, rather than as maintaining EDT until 2015-11-01. (Thanks to P Chan.) Changes to documentation The zic man page now documents zic's coalescing of transitions when a zone falls back just before DST springs forward. (From OE-Core rev: 9b291019c128652951e4ddd569813cd89843f6bb) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9d7643339b4db6609b2bad1f76599a54da9d17f2) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* minicom: RDEPENDS on ncurses-terminfo-baseRobert Yang2021-01-041-0/+2
| | | | | | | | | | | | | | Fixed when ncurses-terminfo-base is not installed: $ minicom No termcap database present! (From OE-Core rev: 071b3aa630861795b9459ddaace9e3dea6eab41e) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 15198ebe8a0fc58c2d1122b956fca092c66a0d41) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: upgrade to 2020dChangqing Li2021-01-041-3/+3
| | | | | | | | | | (From OE-Core rev: 1b3a8230af25ddd496c14956ac81d4daffb3ae37) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 365787658cffc3b2dedb88db311a33012be9d70d) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-db: Avoid reproducibility failures after fixing groff-nativeRichard Purdie2021-01-041-0/+5
| | | | | | | | | | | | Add some temporary bumps to versions to change the output hash so we really can take advantage of the groff-native reproducibility fix. (From OE-Core rev: ea9615d82b7d180038967143f16d30ed9d8dc766) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit af9bd5a03ecf45e92868bc49b1de5c27d94eff6f) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* groff: Fix reproducibility issueRichard Purdie2021-01-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | groff chooses a default papersize depending on the value from /etc/papersize and failing that, the search domain in /etc/resolv.conf based on the comment in configure: """ If the top-level domain is two letters and it's not 'us' or 'ca' then they probably use A4 paper. """ Oddly, my system sets to "a4" in /etc/papersize which means it defaults to "letter" since its != "A4". These defaults ripple through to cause the output of man-db to change depending on which default value was selected. To resolve this, set a default of "A4" since that covers the larger population of the two default values. (From OE-Core rev: e300796a7877ba854d5793c660a9b924a5942874) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6cb511bfbd18258c782ee18f054a2590e4daaddc) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* parted: Make readline dependency optionalMark Jonas2021-01-041-1/+4
| | | | | | | | | | (From OE-Core rev: 27b2aca75af2d0df9b6d63ff0368b6cb02e6b52f) Signed-off-by: Mark Jonas <toertel@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bb433833d2ae7b87d18dfae5635eac9097ecc9b7) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: Mark CVE-2008-1033 as a non-issueRichard Purdie2021-01-041-0/+2
| | | | | | | | | | | It only applies to MacOS. (From OE-Core rev: 7acb6701df68e8259f762101ef22c2f1b3526147) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit cad1162f41c4c060744b98109514f761aa64d34a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: Mark CVE-2009-0032 as a non-issueRichard Purdie2021-01-041-0/+2
| | | | | | | | | | | The CVE was against a cups plugin which is obsolete and we don't include. (From OE-Core rev: 16f70caa2360f880a8793d37dd149ca8caad386f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5f7cb9f6ec4b14f992d265b8c67a9f5589f9b842) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: whitelist CVE-2018-6553Steve Sakoman2021-01-041-0/+3
| | | | | | | | | | | | | | | | | | | This an Ububtu specific issue: The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS (From OE-Core rev: 2b611ac04446b722c1b11d49cf90667b99e735ba) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 22e89983a8f83a369d83bc67e4f3492bc50db648) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: fix multilib conflictKai Kang2020-12-182-2/+56
| | | | | | | | | | | | | | | | | | | | | | | It fails to install sudo and lib32-sudo at same time: | Error: Transaction test error: | file /usr/libexec/sudo/audit_json.so conflicts between attempted installs of lib32-sudo-1.9.3p1-r0.core2_32 and sudo-1.9.3p1-r0.core2_64 | file /usr/libexec/sudo/group_file.so conflicts between attempted installs of lib32-sudo-1.9.3p1-r0.core2_32 and sudo-1.9.3p1-r0.core2_64 Pass ${libdir} to configure option --libexecdir of sudo that it installs plugin libraries to /usr/lib{,64} rather than /usr/libexec/. Then add a patch to fix multilib conflict of sudo.conf. [RP: Add missing Upstream-Status] (From OE-Core rev: 9d67dd5a6363b9fae10784e8056e469ba2ef5735) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c9b6974cfcac370c6848d28400e0546ac85512e9) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gawk: Avoid using host ar during cross compileKhem Raj2020-11-202-0/+36
| | | | | | | | | | (From OE-Core rev: 93178cea0e694cccd602ba965909f50f1b7159c7) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5bc83ca06d0d38a6eb9fcc0343d081021dafb2ce) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: use /run instead /var/run in systemd's unit fileChen Qi2020-10-171-0/+1
| | | | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. (From OE-Core rev: 6c3f56020da7a26c2daea73e39c2f324f1f597db) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: use /run instead of /var/run in systemd service fileChen Qi2020-10-172-0/+31
| | | | | | | | | /var/run in deprecated by systemd, use /run instead, as suggested by systemd. (From OE-Core rev: 85c92455eb6a133ae5ce8e70d46cac4fcd55ffe4) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: update to 2020bArmin Kuster2020-10-092-9/+7
| | | | | | | | | For more info see: https://github.com/eggert/tz/blob/master/NEWS (From OE-Core rev: b19bc7ae71a59673bd725e1de3251667c2026ed5) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libtools-cross/shadow-sysroot: Use nopackages inheritRichard Purdie2020-10-061-0/+2
| | | | | | | | | When testing pseudo changes I realised these recipes have packaging tasks but don't generate packages. Drop the packages tasks for cleanliness. (From OE-Core rev: ef9c11797b5d626bdb40b4509d8b2b0d461ff9ea) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* parted: improve ptestRoss Burton2020-10-062-1/+3
| | | | | | | | | | | | | | | | Add a RRECOMMENDS on kernel-module-scsi-debug as this module is needed for many of the tests. Create the udev mount blacklist directory before writing into it, as it doesn't always exist. Delete any existing log files before calling make, as otherwise the tests cannot be repeated. (From OE-Core rev: 9d3cc0fb89cc4bd8a4f4fe168eff08a3c8bc8d2f) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: upgrade 1.9.2 -> 1.9.3zangrc2020-09-301-1/+1
| | | | | | | (From OE-Core rev: c5571fd473369deab62f5b8e7c2d4318746df725) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.11.19 -> 0.11.21zangrc2020-09-301-1/+1
| | | | | | | (From OE-Core rev: 1ec60f66852e371378371b333b688c3928447f1e) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysklogd: fix parallel build issueChangqing Li2020-09-302-0/+44
| | | | | | | | | | | | | | | | | | | fix below errors which caused by race condition: do_package: ERROR: dwarfsrcfiles failed with exit code 1 (cmd was ['dwarfsrcfiles', 'TOPDIR/tmp-glibc/work/ppc7400-oe-linux/sysklogd/2.1.2-r0/package/usr/lib/libsyslog.a']): dwarfsrcfiles: TOPDIR/tmp-glibc/work/ppc7400-oe-linux/sysklogd/2.1.2-r0/package/usr/lib/libsyslog.a: not a valid ELF file do_compile: arm-oe-linux-gnueabi-libtool: link: (cd ".libs" && rm -f "libsyslog.so.0" && ln -s "libsyslog.so.0.0.0" "libsyslog.so.0") arm-oe-linux-gnueabi-libtool: link: (cd ".libs" && rm -f "libsyslog.so" && ln -s "libsyslog.so.0.0.0" "libsyslog.so") arm-oe-linux-gnueabi-libtool: link: arm-oe-linux-gnueabi-gcc-ar cru .libs/libsyslog.a libsyslog_la-syslog.o ../lib/pidfile.o ../lib/strlcpy.o ../lib/strlcat.o TOPDIR/tmp-glibc/work/armv7vet2hf-neon-oe-linux-gnueabi/sysklogd/2.1.2-r0/recipe-sysroot-native/usr/bin/arm-oe-linux-gnueabi/../../libexec/arm-oe-linux-gnueabi/gcc/arm-oe-linux-gnueabi/10.1.0/ar: `u' modifier ignored since `D' is the default (see `U') TOPDIR/tmp-glibc/work/armv7vet2hf-neon-oe-linux-gnueabi/sysklogd/2.1.2-r0/recipe-sysroot-native/usr/bin/arm-oe-linux-gnueabi/../../libexec/arm-oe-linux-gnueabi/gcc/arm-oe-linux-gnueabi/10.1.0/ar: ../lib/strlcat.o: No such file or directory (From OE-Core rev: 3bab002a3fe4f15529a4771fb982f921a77eedfe) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash: fix CVE-2019-18276De Huo2020-09-242-0/+387
| | | | | | | | | | | | | | | | | | | | | | | An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support "saved UID" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use "enable -f" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected. Get the patch from [1] to fix the issue. [1] https://git.savannah.gnu.org/cgit/bash.git/commit/?h=devel&id=951bdaa (From OE-Core rev: 6f01acae9c279e0a580f46d1ba4c015caa3f8c2c) Signed-off-by: De Huo <De.Huo@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: add/fix invalid Upstream-Status tagsRoss Burton2020-09-231-1/+1
| | | | | | | (From OE-Core rev: 630ce8130598e2bca7231ac28a7cc18b5b942544) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash : include patch 17 & 18Chee Yang Lee2020-09-211-0/+7
| | | | | | | | | | | | | | | | | | | patch 17 :- https://ftp.gnu.org/gnu/bash/bash-5.0-patches/bash50-017 There were cases where patch 16 reaped process substitution file descriptors (or FIFOs) and processes to early. This is a better fix for the problem that bash50-016 attempted to solve. path 18 :- https://ftp.gnu.org/gnu/bash/bash-5.0-patches/bash50-018 In certain cases, bash does not perform quoted null removal on patterns that are used as part of word expansions such as ${parameter##pattern}, so empty patterns are treated as non-empty. (From OE-Core rev: 08f8580b1ad2a478538f6974e79cb79e726b6efa) Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* *-initramfs: don't use .rootfs IMAGE_NAME_SUFFIXMartin Jansa2020-09-171-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes the issue when image-live.bbclass expects the image ending with just INITRAMFS_FSTYPES: image-live.bbclass:INITRD_LIVE ?= "${DEPLOY_DIR_IMAGE}/${INITRD_IMAGE_LIVE}-${MACHINE}.${INITRAMFS_FSTYPES}" while by default it now was with .rootfs suffix: -rw-r--r-- 2 bitbake bitbake 1.5K Oct 25 16:12 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs.env -rw-r--r-- 4 bitbake bitbake 11M Oct 25 16:13 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64-1.0-r0-20191025154349.cpio.gz -rw-r--r-- 4 bitbake bitbake 1.2K Oct 25 16:11 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64-1.0-r0-20191025154349.manifest -rw-r--r-- 4 bitbake bitbake 1.3K Oct 25 16:12 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64-1.0-r0-20191025154349.qemuboot.conf -rw-r--r-- 4 bitbake bitbake 196K Oct 25 16:11 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64-1.0-r0-20191025154349.testdata.json -rw-r--r-- 4 bitbake bitbake 118M Oct 25 16:13 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64-1.0-r0-20191025154349.wic -rw-r--r-- 4 bitbake bitbake 3.1K Oct 25 16:13 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64-1.0-r0-20191025154349.wic.bmap -rw-r--r-- 4 bitbake bitbake 1.3K Oct 25 16:12 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64.qemuboot.conf -rw-r--r-- 4 bitbake bitbake 11M Oct 25 16:13 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64.rootfs.cpio.gz -rw-r--r-- 4 bitbake bitbake 1.2K Oct 25 16:11 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64.rootfs.manifest -rw-r--r-- 4 bitbake bitbake 118M Oct 25 16:13 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64.rootfs.wic -rw-r--r-- 4 bitbake bitbake 3.1K Oct 25 16:13 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64.rootfs.wic.bmap -rw-r--r-- 4 bitbake bitbake 196K Oct 25 16:11 /OE/build/oe-core/tmp/deploy/images/genericx86-64/core-image-minimal-initramfs-genericx86-64.testdata.json initramfs images aren't normally used for rootfs, so just set the suffix to empty, people using different artifact names might still need to set INITRD_LIVE (e.g. when their images don't end with "-${MACHINE}" as well) (From OE-Core rev: 431a7dfc6c1c86ead3e636d42e2bf1f1f906588c) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpcbind: Use update-alternatives for rpcinfoKhem Raj2020-09-051-1/+4
| | | | | | | | | rpcinfo is also provided vy netkit in meta-networking (From OE-Core rev: 28183dfd7446de9113773ab89edd0afb4ab82f7e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.11.18 -> 0.11.19Alexander Kanavin2020-09-031-1/+1
| | | | | | | (From OE-Core rev: bc03f9220fe18f4ae2a4c7bc8f7edfc752d3cbd4) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* msmtp: upgrade 1.8.11 -> 1.8.12Alexander Kanavin2020-09-031-1/+1
| | | | | | | (From OE-Core rev: 07ccd54e3ec58765f7333896a5b8cd6fd935b36b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iputils: Adapt ${PN}-tftpd package dependency to PACKAGECONFIGRichard Purdie2020-09-021-1/+2
| | | | | | | | This avoids failures when recipes try and use the iptuils package. (From OE-Core rev: 5cf4ab54a03bf23e47f239ed89bd4dd36a66a697) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iputils: upgrade s20190709 -> s20200821Changhyeok Bae2020-09-024-141/+4
| | | | | | | | | | | | - libgcrypt is not required anymore because the md5 implementation was part of this project. - ninfod patches are upstreamed and other patch is not required anymore. - Add tftpd in PACKAGECONFIG (From OE-Core rev: 18a4086652562e061d728a83c97151f5c7552ece) Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance/packagegroup-core-base-utils: Replace ↵Richard Purdie2020-09-021-2/+2
| | | | | | | | | | | dhcp-client/dhcp-server with dhcpcd/kea dhcp-client/dhcp-server is obsolete and unmaintained and about to be removed, replace it with something which is maintained. (From OE-Core rev: 2eae7e6f665ad5a0d734edda6ef5dff5a534eca6) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* timezone: include leap second data in tzdata-corePeter A. Bigot2020-09-021-0/+4
| | | | | | | | | | Conversion between UTC and continuous time scales like TAI requires information about leap seconds. (From OE-Core rev: ce8f6f139a82eeb20cc7cb9f7950b42684775ed8) Signed-off-by: Peter A. Bigot <pab@pabigot.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat: fix installed-vs-shipped QA Issue in systemdhongxu2020-09-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | While enabling systemd, there is QA issue: ... |ERROR: sysstat-12.4.0-r0 do_package: QA Issue: sysstat: Files/directories were installed but not shipped in any package: | /lib/systemd/system-sleep | /lib/systemd/system-sleep/sysstat.sleep ... https://www.freedesktop.org/software/systemd/man/systemd-sleep.html says the files should be dropped into /usr/lib/systemd/system-sleep (that would be /lib/systemd/system-sleep in our configuration). By moving the files to another directory they'll be packaged but not loaded by systemd. Suggested-by Ross Burton <ross@burtonini.com> (From OE-Core rev: 3bdd40ea09e50067f11c12290ab465a9ef229fc4) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat: upgrade 12.2.2 -> 12.4.0Alexander Kanavin2020-08-251-2/+1
| | | | | | | (From OE-Core rev: 10793d7dbf88a7a41291f54dfa042234acd4eea0) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-05-10 18:36:42 +0000