summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* curl: Refine ptest perl RDEPENDSRobert Joslyn2023-07-251-2/+17
| | | | | | | | | | | RDEPEND on the specific perl modules required for the tests rather than the perl-modules meta package. (From OE-Core rev: 0c13dac8fe3f432b7756c57a5892f8ab99d43166) Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Update from 8.1.2 to 8.2.0Robert Joslyn2023-07-251-1/+1
| | | | | | | | | | | This is a feature and bugfix update. Full release notes available at: https://curl.se/changes.html#8_2_0 (From OE-Core rev: 5cfdcc722c7b7a153bedcf2f490c892565a87cfa) Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-214-13/+4
| | | | | | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version (From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Reviewed-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: upgrade 243 -> 244Trevor Gamblin2023-07-211-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: https://diffoscope.org/news/diffoscope-244-released/ * Address compatibility with python-libarchive-c version 5. (Closes: reproducible-builds/diffoscope#344) * Testsuite changes: - Mark that test_dex::test_javap_14_differences requires procyon. - Fix "test skipped" textual reason generation in the case of a required version being outside of the required range. - Temporarily mark some Android-related as XFAIL due to Debian bugs #1040941 and #1040916. (From OE-Core rev: e7ab92360cb9515c28197b809bdc8b112e23bb57) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* debianutils: upgrade 5.7 -> 5.8Wang Mingyu2023-07-211-2/+2
| | | | | | | | | | | | | | | | License-Update: Convert to machine-readable format Changelog: ============= * Remove constraints unnecessary since buster (oldstable) * Salvage package (Closes: #1038553) * Apply quilt patches from NMUs (From OE-Core rev: 635bc9aafc81c419eb5c9df1ac993d55301df486) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nghttp2: upgrade 1.54.0 -> 1.55.1Wang Mingyu2023-07-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changelog: ============ doc: Bump boringssl Fix memory leak Fix build error without libev Bump go to 1.20 Bump go package dependencies mruby: Support cross build for autotools h2load, nghttpx: Add UDP_GRO support Bump ngtcp2 nghttpx: Randomize initial QUIC packet number Bump llhttp to a0e744f850d8101a51284868ffdf745bcfe4fbcc Bump macos to 12 (From OE-Core rev: 5049566d6edaa1c3df8db5a0df1ea8d015e64d17) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libproxy: upgrade 0.5.2 -> 0.5.3Wang Mingyu2023-07-211-1/+1
| | | | | | | | | | | | | | | Changelog: ========= -Fix crash querying URLs without a host -Web: Update application page -Add appplication info about apt and python requests -Bump version to 0.5.3 (From OE-Core rev: 102d1e8c24bb1cbd6e80d296d179378879d4e106) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: upgrade 72-1 -> 73-2Trevor Gamblin2023-07-191-3/+3
| | | | | | | | | | | | Changelog: https://github.com/unicode-org/icu/releases/tag/release-73-2 ICU moved to a common LICENSE file in the project root. The only actual change was an update to the copyright year. (From OE-Core rev: 7fc8d0bb1f237140d9b4070eb8cc9413f809361f) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner: Pull in parallel test fixes and output handlingRichard Purdie2023-07-191-1/+1
| | | | | | | | | | | | | | | | | | | Pull in the commits: Flush stdout and stderr after test Remove _child_reader singleton Report test failure on timeout Only collect system state on timeout Revert "Change test timeout to be total elapsed time" Change test timeout to be total elapsed time Report if child dies from a signal Recreate pipe for each test Revert "runner: Correctly handle running parallel tests" runner: Correctly handle running parallel tests (From OE-Core rev: 8de47e5f3837a9c87c3cbf8dc45f9e90110eda1e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: add missing RDEPENDS and alphabetizeTrevor Gamblin2023-07-191-1/+14
| | | | | | | | (From OE-Core rev: afe7f5ad6b3e4fb532f064c3993d0d612b503fbe) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* p11-kit: upgrade 0.24.1 -> 0.25.0Trevor Gamblin2023-07-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: - add PKCS#11 3.0 support - add support for profile objects - add ability to adjust module and config paths at run-time via system environmental exports - make terminal output nicer - p11-kit: add command to print merged configuration - p11-kit: add commands to list, add and delete profiles of a token - trust: add command to check format of .p11-kit files - virtual: fix libffi type signatures for PKCS#11 3.0 functions - server: fix umask setting when --group is specified - server: check SHELL only when neither --sh nor --csh is specified - rpc: use space string in C_InitToken - rpc: fix two off-by-one errors identified by asan - modules: make logging message more translatable - pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms - pkcs11.h: add IBM specific mechanism and attributes - pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms - pkcs11.h: add AES-GCM mechanism parameters for message-based encryption - po: update translations from Transifex - bug and build fixes - test fixes (From OE-Core rev: 9bba4570f0ea626ee4f991bac00da0441fc54a75) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* taglib: upgrade 1.13 -> 1.13.1Wang Mingyu2023-07-141-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: =========== * Fixed parsing of TXXX frames without description. * Detect MP4 atoms with invalid length or type. * Do not miss ID3v2 frames when an extended header is present. * Use property "DISCSUBTITLE" for ID3v2 "TSST" frame. * Build system improvements: Use absolute path for macOS dylib install name, support --define-prefix when using pkg-config, fixed minimum required CppUnit version. * Code clean up using clang-tidy. (From OE-Core rev: 69477347a21cc810851fd231659f73c6b4661d03) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: upgrade 242 -> 243Trevor Gamblin2023-07-141-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: [ Chris Lamb ] * Drop Jenkins build reference in README.rst. [ Ed Maste ] * Update FreeBSD package names [ Mattia Rizzolo ] * Improve the documentation on to produce that binary blob that in the arsc comparator. (From OE-Core rev: 8781670bfc04cf9abef7dd9364f5e83e2c52d311) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libssh2: disable rpath to fix curl-native buildSudip Mukherjee2023-07-101-0/+1
| | | | | | | | | | | | | When curl is built with PACKAGECONFIG:append = " libssh2", the build fails with the error: gcc: error: unrecognized command-line option '-R' It was trying to set the rpath for libssh2. (From OE-Core rev: c213d8579951e168a19231cf5b2f81d55e059a22) Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: upgrade 0.72.1 -> 0.72.2Anuj Mittal2023-07-101-1/+1
| | | | | | | (From OE-Core rev: 034ab8fdb2d1df0eabcdf15806200b9ec238c749) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade 3.41.2 -> 3.42.0Anuj Mittal2023-07-101-1/+1
| | | | | | | (From OE-Core rev: 6613920d4058afacfde7000cad9feba7ee5562b9) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner: Pull in "runner: Remove threads and mutexes" fixRichard Purdie2023-06-301-1/+1
| | | | | | | | | | This fix simplifies the code to drop the pthread and mutexs which should address some of the buffering issues we were seeing in some test case failures. (From OE-Core rev: bffa6d381d7ea0a6aad19d61cd973c82aadef070) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nghttp2: upgrade 1.53.0 -> 1.54.0Wang Mingyu2023-06-281-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========== nghttpx: Consistent error handling and use of high-level API h2load: Fix http3 upload stall h2load: Use std::chrono::steady_clock for quic timestamp Avoid ev_now by @tatsuhiro-t in #1907 Remove unused macro bswap64 Bump ngtcp2 and nghttp3 Bump libbpf to v1.2.0 Avoid copies (From OE-Core rev: f3b440805cafa525bed0e8512f5fcaa9e1359bfb) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: upgrade 3.9 -> 3.9.1Wang Mingyu2023-06-281-1/+1
| | | | | | | | | | | | | | | Bug fixes: ========== * Fix OCB loop for processing messages of size 272 bytes or larger. * Fix alignment bug in the new x86_64 non-pclmul assembly implementation of ghash. * Fix build-time memory leak in eccdata. (From OE-Core rev: 7595367022b2a0226a3996bf2e6152a452e92715) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libmd: upgrade 1.0.4 -> 1.1.0Wang Mingyu2023-06-281-1/+1
| | | | | | | (From OE-Core rev: a907f4b704367e85456616de060d30fb023589dd) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libksba: upgrade 1.6.3 -> 1.6.4Wang Mingyu2023-06-281-1/+1
| | | | | | | | | | Changelog: Correctly detect CMS write errors. (From OE-Core rev: 0296cf63007542c1cb209a4288be1c82aa2ba843) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libassuan: upgrade 2.5.5 -> 2.5.6Wang Mingyu2023-06-281-1/+1
| | | | | | | | | | | | | | Changelog: =========== * Fix logging of confidential data. [rA0fc31770fa] * Fix memory wiping. [T5977] * Fix macOS build problem. [T5440,T5610] * Upgrade autoconf stuff. (From OE-Core rev: 90126be6dc32170c08eb90223b6a6cc06c2133ce) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libssh2: update 1.10.0 -> 1.11.0Alexander Kanavin2023-06-273-30/+9
| | | | | | | | | | | | | | | License-update: copyright years Enable static libs as some tests need them. Fix up ptests; the set being run is the same. test_simple is statically linked, hence DISABLE_STATIC is overriden. (From OE-Core rev: c3c5b74e428a13335f8c09bf4cc74dd009c8bc06) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libproxy: update 0.4.18 -> 0.5.2Alexander Kanavin2023-06-271-20/+9
| | | | | | | | | | | | | | | License-update: formatting, years Upstream has completely overhauled the build system (cmake -> meson) and available options. Add the most important ones that require external dependencies; there's plenty more if someone finds them useful. (From OE-Core rev: bbcfef76c3d412f1a79c77f8712aff36190bf7fa) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libproxy: fetch from gitAlexander Kanavin2023-06-271-3/+4
| | | | | | | | | | Upstream no longer provides tarballs for newer versions. (From OE-Core rev: e971f27cb4ad78b4df3c3bca2948f3cb60d0d5cf) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner: Ensure data writes don't raceRichard Purdie2023-06-201-1/+1
| | | | | | | | | | | | | Currently the code can race as there is a read/write thread handling the stdio but there is no guarantee that when the process exits, the thread has handled all the data. This results in output where "END:" isn't actually at the end of the logs but somewhere in the middle of the output. Update to a revision with this fix. (From OE-Core rev: 6608ee551ed7e8864cdeabfb09832621313d3191) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner: Pull in sync fix to improve log warningsRichard Purdie2023-06-191-1/+1
| | | | | | | | | | | | | | | | | | | Pulls in: utils: Ensure buffers are flushed after child exits We currently wait for the child to exit but we don't flush the buffers. This can mean the output ends up out of sync and the END: line isn't at the end of the logs. We've recently seen a lot of issues related to this on the autobuilder. Add in a flush call for all fds to ensure buffers are in sync. This does appear to improve warnings on the autobuilder now we started detecting the issue. (From OE-Core rev: f051de5d5da7e9a2f4137013e24589b594ff6d35) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* serf: upgrade 1.3.9 -> 1.3.10Alexander Kanavin2023-06-165-92/+2
| | | | | | | | | As serf is undead, we need to reassess all the remaining patches. (From OE-Core rev: 775cbcc876edcb6c339f342a3253f5afcf6ef163) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nghttp2: upgrade 1.52.0 -> 1.53.0Alexander Kanavin2023-06-161-1/+1
| | | | | | | (From OE-Core rev: cc7fb8330059fb632bf55a28875e38c3190470c9) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: upgrade 3.8.1 -> 3.9Alexander Kanavin2023-06-161-1/+1
| | | | | | | (From OE-Core rev: 8d99440fb81b09724b236107c9ab2c30efab821d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: upgrade 1.1.37 -> 1.1.38Alexander Kanavin2023-06-161-1/+1
| | | | | | | (From OE-Core rev: 1fc95356b016303b9333741cf8fd1e374931ead2) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: upgrade 2.4.0 -> 2.4.2Alexander Kanavin2023-06-163-13/+13
| | | | | | | (From OE-Core rev: c9eddfded59819a2a375b6f5518bf2c3184237d2) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: upgrade 236 -> 242Alexander Kanavin2023-06-151-1/+1
| | | | | | | (From OE-Core rev: 2fb5f18a066d8ac1bd73e73ef381784ab3777fec) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* attr: package /etc/xattr.conf with the library that consumes itAlexander Kanavin2023-06-151-1/+1
| | | | | | | | | | | This matters for example with latest coreutils where cp wouldn't copy extended attributes by default if the config file specifying that policy is not there, and so ptest fails. (From OE-Core rev: 90818d87eaa7f2bf6cec6200c727c1bd10b4fdd8) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: upgrade 2.48.0 -> 2.48.3Alexander Kanavin2023-06-151-1/+1
| | | | | | | (From OE-Core rev: be78cd5cfbdefecd4b1a3d873661eb2fd50d9902) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* apr: upgrade 1.7.3 -> 1.7.4Alexander Kanavin2023-06-151-1/+1
| | | | | | | (From OE-Core rev: 3db1d7fc97415f1d2af3f694723222ad81de13af) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: inherit lib_packageRoss Burton2023-06-091-1/+3
| | | | | | | | | | | Nettle is primarily a library that ships some tools, so inherit the lib_package class to package the tools in nettle-bin, and add a dependency on it to nettle-ptest. (From OE-Core rev: eacfc88e0efe534290205ca8e399629623d882aa) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: rewrite ptest integrationRoss Burton2023-06-093-58/+32
| | | | | | | | | | | | | | | | | | Instead of patching a relative path to an unversioned libnettle.so to be a bare filename which then needs nettle-dev to be installed, create a symlink in the expected place which points to the actual library. This means nettle-ptest no longer needs to depend on nettle-dev. Explicitly skip symbols-test, it has been silently failing as nm isn't available and also needs a static libnettle.a to run. Install two rsa-* example binaries that are needed for pkcs1-conv-test to pass. (From OE-Core rev: dc5cd169e8b9a0f9d9881f116a8d83706460bb7c) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap: upgrade 2.68 -> 2.69Wang Mingyu2023-06-021-1/+1
| | | | | | | | (From OE-Core rev: a6c9f01098083de40666a920be5819aade635999) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libmicrohttpd: upgrade 0.9.76 -> 0.9.77Wang Mingyu2023-06-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== API changes: ------------- + Added new function MHD_get_version_bin(). Improvements and enhancements: ------------------------------- * Digest Auth: changed algorithm identifiers in server generated headers from "md5" / "sha-256" to "MD5" / "SHA-256" to better match RFC (while clients should use caseless matching). * Improved Base64 decoding by new implementation with robust input data validation checks. * Improved configure for cross-compiling, for better compatibility with POSIX and for better compatibility with the latest compiler versions. * New internal tests: for Base64 decoding, Basic Auth and folded headers. * Supported new libcurl API in tests to mute deprecation warnings. * Supported ARM and ARM64 for VC compilers. Functionality changes: ------------------------ * any negative number returned by response data generation callback function is treated as an error. Previously negative values except predefined error codes could produce undefined behaviour. * Added handling of "DEBUG" preprocessor macro as an alias of "_DEBUG". Fixes: --------- # Fixed functionality with blocking sockets. # Fixed very inefficient data pumping for upgraded TLS connections. # Fixed processing of folded headers in the requests. # Fixed data races when closing upgraded connection. # Removed duplication of "Connection: upgrade" header. # Digest auth: fixed thread sync to avoid "stale hash" results. # Fixed harmless unwanted extra data processing resulting in triggering of the assert. # Fixed tests for LTO. # Removed removed non-portable functions in examples. # Fixed delayed call of connection notification callback in thread-per-connection mode. # Fixed Address Sanitizer unpoison of memory when memory pool is destroyed. This fixed periodic ASAN error when used for a long time with the sanitizer. # Fixed compiler warnings in library code, examples, tests and configure checks. # New TLS certificates for test-suite: all with SAN fields and SHA-256 hash. # Tests: fixed tests on Darwin 22.x (Ventura). # Tests: redesigned one tests group to avoid stress-testing of the OS. (From OE-Core rev: bdc28b0262ad8a57d56f029b55b338478afb3a07) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* fribidi: upgrade 1.0.12 -> 1.0.13Wang Mingyu2023-06-021-1/+1
| | | | | | | | | | | Changelog: * Adding missing man pages to the tar release file. (From OE-Core rev: 0f6da8601fd4d992550e8afe7b09ba7c491250fd) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* enchant2: upgrade 2.3.4 -> 2.5.0Wang Mingyu2023-06-021-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========= * A new dictionary method remove_from_session() allows providers to stay in sync with Enchant's personal wordlist, by removing as well as adding words in the spelling session. * The public API enchant_dict_store_replacement() is deprecated, and no longer does anything. It only previously had an effect with the Aspell provider. * The APIs enchant_dict_add() and enchant_dict_remove() also respectively add the word to the session or remove it. (From OE-Core rev: c21b5b930430f5fbf47866380f94c088dd809089) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dos2unix: upgrade 7.4.4 -> 7.5.0Wang Mingyu2023-06-021-1/+1
| | | | | | | | | | | | | | | Changelog: =========== * New option -O, --to-stdout to write to standard output. * New option -e, --add-eol to add a line break to the last line if there isn't one. Option --no-add-eol disables the feature. (From OE-Core rev: a81874c8898ccd33c0c20260f2bfe9bcb2d75d69) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: upgrade 8.1.1 -> 8.1.2Wang Mingyu2023-06-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - lib1560: verify more scheme guessing - page-header: minor wording polish in the URL segment - page-header: mention curl version and how to figure out current release - RELEASE-NOTES: synced - configure: without pkg-config and no custom path, use -lnghttp2 - curl: cache the --trace-time value for a second - libcurl.m4: remove trailing 'dnl' that causes this to break autoconf - http3: send EOF indicator early as possible - scripts/contri*sh: no longer grep -v ' ' - cf-socket: restore Curl_sock_assign_addr() - libssh: when keyboard-interactive auth fails, try password - configure: fix build with arbitrary CC and LD_LIBRARY_PATH - urlapi: remove superfluous host name check - http2: fix EOF handling on uploads with auth negotiation - lib: remove unused functions, make single-use static - scripts/singleuse.pl: add more API calls - configure: quote the assignments for run-compiler - misc: fix spelling mistakes (From OE-Core rev: db5773bf9c5e78affaaf0a21422bad07560eaa86) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: upgrade 9.0.1527 -> 9.0.1592Trevor Gamblin2023-05-311-2/+2
| | | | | | | | | | | | | | | Fixes: https://nvd.nist.gov/vuln/detail/CVE-2023-2609 d1ae836 patch 9.0.1531: crash when register contents ends up being invalid https://nvd.nist.gov/vuln/detail/CVE-2023-2610 ab9a2d8 patch 9.0.1532: crash when expanding "~" in substitute causes very long text (From OE-Core rev: 1e4b4dfb4145bc00eb6937b5f54a41170e9a5b4c) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "sqlite3: Whitelist CVE-2022-21227"Richard Purdie2023-05-301-3/+0
| | | | | | This reverts commit cfc42fdabb3f12eb4ac5069a549ba5699385dfdc. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: Whitelist CVE-2022-21227Sanjay Chitroda2023-05-291-0/+3
| | | | | | | | | | | | This CVE is applicable to "SQLite3 bindings for Node.js" only. References: https://nvd.nist.gov/vuln/detail/CVE-2022-21227 (From OE-Core rev: cfc42fdabb3f12eb4ac5069a549ba5699385dfdc) Signed-off-by: Sanjay Chitroda <schitrod@cisco.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Update from 8.1.0 to 8.1.1Robert Joslyn2023-05-291-1/+1
| | | | | | | | | | This is a bugfix only release. Release notes: https://curl.se/changes.html#8_1_1 (From OE-Core rev: 833191171181f11802a3e0ae8b91b8ca5892b067) Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "sqlite3: update CVE_PRODUCT"schitrod=cisco.com@lists.openembedded.org2023-05-291-1/+1
| | | | | | | | | | | | This reverts commit 8800976e79d65956218ab462d9644d0661579301. As per NVD database "ghost:sqlite3" product is specific to "node.js" CVEs reported against above products are not applicable to us. (From OE-Core rev: 7616b1d28cb119adb471b5268a77ec61d5dd555c) Signed-off-by: Sanjay Chitroda <schitrod@cisco.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gdbm: improve run-ptestRoss Burton2023-05-251-1/+1
| | | | | | | | | | | There's no need to use a sed to get the output we need, autotest can do that itself if told. (From OE-Core rev: fa74ffac2e9ecf1b30fd893a21a7d2f8531e558d) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>