summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* ptest-runner: Upgrade to 2.1.1Aníbal Limón2018-01-021-2/+2
| | | | | | | | | | | | | | Contains fixes, - timeout option missing the argument option ":" to getopt - utils.c: Prefer monotonic clock to calculate elapsed time - Add support to avoid load/run twice a run_ptest script (From OE-Core rev: 843fccd46323268252ea698e3b8ab956dd4b48e0) Signed-off-by: Aníbal Limón <anibal.limon@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: remove inappropriate patchRoss Burton2017-12-182-28/+1
| | | | | | | | | | This was patching -lxslt directly into the pkgconfig file, but XSLT_LIBS already contains this so the patch is redundant. (From OE-Core rev: 57b811b61dfbea551e6a4bdd98ec697729f1411b) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: use HTTP instead of FTP in SRC_URIRoss Burton2017-12-181-1/+1
| | | | | | | | | | | FTP isn't as reliable as HTTP. [ YOCTO #12398 ] (From OE-Core rev: 52263f5f6caeaf215ab96d58218fb5f9a2ed4264) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: fix libicudata corruption on big endian systemYi Zhao2017-12-181-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | ICU library libicudata is created with a wrong endianness if the host and target have different endianness. (e.g. build ICU for qemuppc on x86-64 host) See upstream bug report: http://bugs.icu-project.org/trac/ticket/11758 The discussion in oe-core mailing list: https://www.mail-archive.com/openembedded-core@lists.openembedded.org/msg65155.html The root cause is the native pkgdata can not generate correct icu data for different endianness. By default, this data is built into the shared library libicudata that would cause it corrupt. But ICU also provides additional options for loading the data. With option --with-data-packaging=archive, ICU outputs a single icudt.dat file which can be loaded by the library. See document: http://userguide.icu-project.org/icudata So for big endian system, we can use the separated data file which re-generates by icupkg and set the correct ICU_DATA environment variable to make sure the library can load the data without problems. (From OE-Core rev: 77d1b9cda69d09cd7d3c8174ef14b4ee10e5efb6) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunistring: upgrade to 0.9.8Maxin B. John2017-12-182-23/+39
| | | | | | | | | | | | | | Refreshed the following patch: iconv-m4-remove-the-test-to-convert-euc-jp.patch No change in license as update in License Checksum is due to change in Copyright years. (From OE-Core rev: 79f36e7d329a8aa2ed1b1d69878203ced96bc6ca) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: fix malformed/missing Upstream-Status tagsRoss Burton2017-12-101-0/+1
| | | | | | | (From OE-Core rev: 9e7aed823d3035b8429d3c5fc537cacadf16f675) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libbsd: Make it build with GCC 5.0 and olderPeter Kjellerstedt2017-12-102-0/+32
| | | | | | | | (From OE-Core rev: 2a769d0831cf368992cf540e7758cc2c2d9067ab) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lzo: don't do aclocal/acinclude danceRoss Burton2017-12-102-363/+0
| | | | | | | | | | autoreconf finds autoconf/local.m4 on its own, so there's no need to mess around with a fork of aclocal.m4 as acinclude.m4. (From OE-Core rev: 8f9025f05b787f41f1867d340d911d7754ee7794) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: remove aclocal/acinclude danceRoss Burton2017-12-101-6/+2
| | | | | | | (From OE-Core rev: 4143d0896bcf05d95c29bf18e913f32204c707f0) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* neon: remove the recipeAlexander Kanavin2017-12-022-53/+0
| | | | | | | | | | | | | | | | For these reasons: 1) Upstream website has been dead for quite a while now; 2) Nothing is actually using neon in oe-core, except one gstreamer plugin in gst-plugins-bad (and I couldn't find evidence of that plugin being used anywhere) However, the recipe is still required by libmusicbrainz in meta-oe and so it will be moved there (with the tarball taken from debian). (From OE-Core rev: 62513ad6d38e4aba3e6b155e04c4c6344ed70ebc) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libassuan: update to 2.4.4Armin Kuster2017-12-022-43/+45
| | | | | | | | | | | | | forward ported patch assuan-def.h checksum changed do to "SPDX formating" assuan.c checksum changes do to "SPDX formating" (From OE-Core rev: ec00c2eb893b1755f9fdf89d0c74dc0e0bc3cf01) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss: update to 3.34Armin Kuster2017-12-021-2/+2
| | | | | | | | | | | for more info see: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes (From OE-Core rev: 55ad71fd60507d566bf5235b5a119b327184fcf0) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: update to 3.4 and cleanupArmin Kuster2017-12-027-80/+65
| | | | | | | | | | | | | | | | | | | merge .inc forward ported two patches to work with 3.4 for more info see: http://lists.gnu.org/archive/html/info-gnu/2017-11/msg00007.html Change SRC_URI to use GNU download instead of liu.se, which interacts badly with wget 1.19.2 and downloads uncompressed tarballs (RB). (From OE-Core rev: 0b5d971a4e8e6904d2f4641fd5f3647d23ff4fa0) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> XX nettle: update SRC_URI Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnutls: update to 3.6.1Armin Kuster2017-12-024-87/+10
| | | | | | | | | | | zlib configure.ac support removed in 3.6.1 drop patch (From OE-Core rev: 537325f204f2f7c66f13a12dc8fc08f8e16e4754) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: update to 1.1.32Alexander Kanavin2017-11-301-2/+2
| | | | | | | | (From OE-Core rev: b515861a16c25b6cc0350812343f08d7d1e384eb) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: update to 60.1Alexander Kanavin2017-11-304-53/+35
| | | | | | | | | | | | Rebase a couple of patches. LICENSE checksum change due to typo fix. (From OE-Core rev: d4a76a51762d094d6f4fc016c52a6817c7f92637) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcheck: fix upstream version checkAlexander Kanavin2017-11-301-0/+1
| | | | | | | | (From OE-Core rev: 6e23418c69fade223c4a83425865714e901e6da4) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss: pay attention to CFLAGSJoe Slater2017-11-301-1/+6
| | | | | | | | | | nss ignores CFLAGS so we suggest them via CC. (From OE-Core rev: 95b65eefe7eb001752a37d1015bbf9be63bfd6bb) Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ca-certificates: Add /etc to SYSROOT_DIRSPatrick Vacek2017-11-301-0/+1
| | | | | | | | | | | | For recipes that depend on native ca-certificates.crt, /etc should be added to the list of directories that automatically populate the sysroot, otherwise the file may not be there. (From OE-Core rev: 355e49e19abb3e729c82a6de46ada8da8a257f58) Signed-off-by: Patrick Vacek <patrick@advancedtelematic.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup-2.4: upgrade to 2.60.2Maxin B. John2017-11-301-2/+2
| | | | | | | | | | 2.60.1 -> 2.60.2 (From OE-Core rev: c008fb8270209e790cc71b6a7ec776aef0a57c49) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: CVE-2017-14952Ovidiu Panait2017-11-212-0/+29
| | | | | | | | | | | | | | | | | | | Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-14952 Upstream patches: http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp (From OE-Core rev: 4ff12a8bf2b8d094085afbe8fa1d43f781cfa79d) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade to 3.21.0Maxin B. John2017-11-212-60/+2
| | | | | | | | | | | Remove upstreamed patch: 1. sqlite3-fix-CVE-2017-13685.patch (From OE-Core rev: 483711e676cd063a873179bdb2daedf56de0aa75) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libproxy: upgrade to 0.4.15Maxin B. John2017-11-211-2/+2
| | | | | | | | | | 0.4.14 -> 0.4.15 (From OE-Core rev: 4ec39933d2290c484e34ac803420155c7a2feee7) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: remove redundant intltool dependencyRoss Burton2017-11-111-1/+1
| | | | | | | (From OE-Core rev: 3546344f518a473b79e0ebce7158a3808d76409a) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* db: don't provide virtual/dbRoss Burton2017-11-111-10/+0
| | | | | | | | | | As there are no alternative providers for virtual/db remove the PROVIDES and recipes can just depend on db. (From OE-Core rev: dcbc45aa3fe72c528fe4d47a783da4b4ed5ff38e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* atk: update to 2.26.0Alexander Kanavin2017-11-091-4/+2
| | | | | | | | | Remove --disable-glibtest as ./configure no longer has it. (From OE-Core rev: 97dbe812e5f964e2d25ae7e8014ca07b7bdc6318) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-atk: update to 2.26.0Alexander Kanavin2017-11-091-2/+2
| | | | | | | (From OE-Core rev: 8b69b8d0fc16c768f9005941bde6c2436b26ebe9) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: update to 2.26.0Alexander Kanavin2017-11-093-72/+20
| | | | | | | | | | | | | Drop 0001-nls.m4-Take-it-from-gettext-0.15.patch as it's now upstreamed. Remove --disable-xevie option: https://github.com/GNOME/at-spi2-core/commit/644096a28a47bdf5c6e0c34c9cd5b944df059925 (From OE-Core rev: f7c3b14238b7e2b84d5a972bc3dfda29de45ad3e) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: update to 0.50.1Alexander Kanavin2017-11-091-2/+2
| | | | | | | (From OE-Core rev: c00f50e58d8db29243db2e9d29023635e381080c) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shared-mime-info: update to 1.9Alexander Kanavin2017-11-092-7/+7
| | | | | | | (From OE-Core rev: 5d1c0d9a54aff15ef5283cdfecc222405d2cf9ca) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup-2.4: update to 2.60.1Alexander Kanavin2017-11-091-2/+2
| | | | | | | (From OE-Core rev: 26aaaf8313a3361aafd8abdb0bc8a00d39958e3e) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iso-codes: update to 3.76Alexander Kanavin2017-11-091-2/+2
| | | | | | | (From OE-Core rev: 5cbcd0c1bddda4dc6f0377ec2e35e728947966cb) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: update to 1.65.1Alexander Kanavin2017-11-095-53/+41
| | | | | | | | | | | | Add a patch to fix bjam-native compile error (due to mistyped variable name). Drop upstreamed patch. (From OE-Core rev: ba2d391d8268203895ab2f792f92b7fd92deeb45) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: update to 1.1.31Alexander Kanavin2017-11-094-264/+3
| | | | | | | | | | | | Drop upstreamed patches, including pkg-config support patch, as upstream now does use pkg-config. configure.in is now configure.ac, adjust recipe accordingly. (From OE-Core rev: e9d487de8b5c03108c8c25c0365d5bd6b48f03e9) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lz4: fix upstream version checkAlexander Kanavin2017-11-091-0/+1
| | | | | | | (From OE-Core rev: c6606acfe3a8c831de9b19749aaa61a3888aecbe) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl_7.54.1.bb: improve reproducibilityJuro Bystricky2017-11-082-1/+41
| | | | | | | | | | | | | Improve reproducible build of curl-dev and curl-dbg packages. curl-dev: Correctly remove build host references from curl-config curl-dbg: Do not generate time stamps in files generated by mkhelp.pl (From OE-Core rev: 6bc323ac9315712e75a0282cddb292bc84afc6f1) Signed-off-by: Juro Bystricky <juro.bystricky@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* db: change types to avoid headers changing between architecturesRoss Burton2017-11-082-3/+61
| | | | | | | | | | | | | | | | | | | | Triggered by looking at why Python doesn't find db.h (because it greps db.h for a regex, and db.h is actually a oe_multilib_header wrapper) I realised that the only reason we have to oe_multilib_header db.h is because one typedef is different between 32-bit and 64-bit architectures. However, the typedef is for a 64-bit integer so instead of using long (64-bit) or long long (32-bit), just use int64_t. Some of the overly complicated configure tests need to be deleted after this change but that is safe as we're building in a controlled environment and can assume int64_t exists. With this done the header doesn't change between architectures, and it doesn't need to be wrapped by oe_multilib_header. (From OE-Core rev: 60aa20b8b691e5a72a6a11bf795b86c6359db886) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash-completion: remove rfkill file that util-linux providesChen Qi2017-11-081-1/+1
| | | | | | | | | | | Remove the rfkill bash completion file that util-linux provides to avoid conflicts. (From OE-Core rev: db5f9b8b5f51e8c0b6fc99dfdbac8b11f272d602) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnutls: update to 3.5.16Armin Kuster2017-11-071-2/+2
| | | | | | | | | | | | | | | This is a bug fix release on the current stable branch. Note that, I've also switched the release cadence to bi-monthly as less and less bug fixes/updates accumulate each month on this branch. ** API and ABI modifications: No changes since last version. (From OE-Core rev: a843ab62f2252165ec3d687de92f939f766376e4) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpcre2: update to 10.30Armin Kuster2017-11-073-194/+3
| | | | | | | | | | | | | | LICENSE files changed: Amend licence to relax its conditions for chains of binary distributions. removed included patches includes CVE-2017-8399 (From OE-Core rev: d8ea0674d1feee803b75cf837e8d029619f8d663) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss: update to 3.33.0Armin Kuster2017-11-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.33_release_notes * TLS compression is no longer supported. API calls that attempt to enable compression are accepted without failure. However, TLS compression will remain disabled. * This version of NSS uses a formally verified implementation of Curve25519 on 64-bit systems. * The compile time flag DISABLE_ECC has been removed. * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks are not performed anymore. * Fixes CVE-2017-7805, a potential use-after-free in TLS 1.2 server when verifying client authentication https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes The Websites (TLS/SSL) trust bit was turned off for the following root certificates. * CN = AddTrust Class 1 CA Root SHA-256 Fingerprint: 8C:72:09:27:9A:C0:4E:27:5E:16:D0:7F:D3:B7:75:E8:01:54:B5:96:80:46:E3:1F:52:DD:25:76:63:24:E9:A7 * CN = Swisscom Root CA 2 SHA-256 Fingerprint: F0:9B:12:2C:71:14:F4:A0:9B:D4:EA:4F:4A:99:D5:58:B4:6E:4C:25:CD:81:14:0D:29:C0:56:13:91:4C:38:41 The following CA certificates were Removed: * CN = AddTrust Public CA Root SHA-256 Fingerprint: 07:91:CA:07:49:B2:07:82:AA:D3:C7:D7:BD:0C:DF:C9:48:58:35:84:3E:B2:D7:99:60:09:CE:43:AB:6C:69:27 * CN = AddTrust Qualified CA Root SHA-256 Fingerprint: 80:95:21:08:05:DB:4B:BC:35:5E:44:28:D8:FD:6E:C2:CD:E3:AB:5F:B9:7A:99:42:98:8E:B8:F4:DC:D0:60:16 * CN = China Internet Network Information Center EV Certificates Root SHA-256 Fingerprint: 1C:01:C6:F4:DB:B2:FE:FC:22:55:8B:2B:CA:32:56:3F:49:84:4A:CF:C3:2B:7B:E4:B0:FF:59:9F:9E:8C:7A:F7 * CN = CNNIC ROOT SHA-256 Fingerprint: E2:83:93:77:3D:A8:45:A6:79:F2:08:0C:C7:FB:44:A3:B7:A1:C3:79:2C:B7:EB:77:29:FD:CB:6A:8D:99:AE:A7 * CN = ComSign Secured CA SHA-256 Fingerprint: 50:79:41:C7:44:60:A0:B4:70:86:22:0D:4E:99:32:57:2A:B5:D1:B5:BB:CB:89:80:AB:1C:B1:76:51:A8:44:D2 * CN = GeoTrust Global CA 2 SHA-256 Fingerprint: CA:2D:82:A0:86:77:07:2F:8A:B6:76:4F:F0:35:67:6C:FE:3E:5E:32:5E:01:21:72:DF:3F:92:09:6D:B7:9B:85 * CN = Secure Certificate Services SHA-256 Fingerprint: BD:81:CE:3B:4F:65:91:D1:1A:67:B5:FC:7A:47:FD:EF:25:52:1B:F9:AA:4E:18:B9:E3:DF:2E:34:A7:80:3B:E8 * CN = Swisscom Root CA 1 SHA-256 Fingerprint: 21:DB:20:12:36:60:BB:2E:D4:18:20:5D:A1:1E:E7:A8:5A:65:E2:BC:6E:55:B5:AF:7E:78:99:C8:A2:66:D9:2E * CN = Swisscom Root EV CA 2 SHA-256 Fingerprint: D9:5F:EA:3C:A4:EE:DC:E7:4C:D7:6E:75:FC:6D:1F:F6:2C:44:1F:0F:A8:BC:77:F0:34:B1:9E:5D:B2:58:01:5D * CN = Trusted Certificate Services SHA-256 Fingerprint: 3F:06:E5:56:81:D4:96:F5:BE:16:9E:B5:38:9F:9F:2B:8F:F6:1E:17:08:DF:68:81:72:48:49:CD:5D:27:CB:69 * CN = UTN-USERFirst-Hardware SHA-256 Fingerprint: 6E:A5:47:41:D0:04:66:7E:ED:1B:48:16:63:4A:A3:A7:9E:6E:4B:96:95:0F:82:79:DA:FC:8D:9B:D8:81:21:37 * CN = UTN-USERFirst-Object SHA-256 Fingerprint: 6F:FF:78:E4:00:A7:0C:11:01:1C:D8:59:77:C4:59:FB:5A:F9:6A:3D:F0:54:08:20:D0:F4:B8:60:78:75:E5:8F (From OE-Core rev: 83d79f449c33eff7bba92dfda8ffd4b699fb6462) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nspr: update to 4.17Armin Kuster2017-11-071-2/+2
| | | | | | | (From OE-Core rev: 94282273d4d3da1e4393324b66da185542e3d629) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcheck: Upgrade to 0.12.0Khem Raj2017-11-051-5/+3
| | | | | | | | (From OE-Core rev: 0597f4dace6159323762b49340adaafb78870b4a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Security Advisory - curl - CVE-2017-1000254Li Zhou2017-11-052-0/+139
| | | | | | | | | | | Porting patch from <https://github.com/curl/curl/commit/ 5ff2c5ff25750aba1a8f64fbcad8e5b891512584> to solve CVE-2017-1000254. (From OE-Core rev: 08f8d5db06647b94f96d655100c358047682dd2f) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle-ptest: fix a failing testJuro Bystricky2017-11-052-0/+24
| | | | | | | | | | | | | | | This patch changes the result of the nettle dlopen-test from FAIL to PASS. The test used to fail because the test could not find and load libnettle.so. This patch fixes this by using absolute path instead of relative. This was the only test out of 88 that used to fail. (From OE-Core rev: f12d493418417c8529a97c7a768e4af58ea5c91b) Signed-off-by: Juro Bystricky <juro.bystricky@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: add 'enable-ares' packageconfig optionJavier Viguera2017-11-051-0/+2
| | | | | | | | | | | | | | | This build time option is needed to use the '--dns-interface' runtime parameter to instruct 'curl' to use a specific interface for DNS resolution. Not enabled by default, as it depends on 'c-ares' package from meta-openembedded (meta-networking). (From OE-Core rev: 4fe0aa3791db0ee6c85e7a068f69def6e7c0da46) Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgcrypt: update from version 1.8.0 to 1.8.1Jussi Laako2017-11-052-163/+3
| | | | | | | | | | Update libgcrypt version from 1.8.0 to 1.8.1. (From OE-Core rev: b26d1dc8767cd0a34da47a8eb3ab001cc86cd8cc) Signed-off-by: Jussi Laako <jussi.laako@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rng-tools: Fix crazy defaultsRichard Purdie2017-11-051-2/+1
| | | | | | | | | | | | | | | | | | | | | | | Feeding the output of /dev/urandom into /dev/random is pretty much insane and not something we should encourage. I can't really imagine a scenario where this would be a sensible idea since /dev/urandom if effectively derived from /dev/random. This changes the tool to default to /dev/hwrng which makes much more sense, feeding hardware entropy into the random pool. In the QEMU case, this will feed entropy from the host into the guests which is also what we want. Yes, this change will cause rngd not to start if /dev/hwrng isn't present, but it isn't needed if that isn't so I don't see this as a bad thing. (https://wiki.archlinux.org/index.php/Rng-tools has a section in red which agrees with the above, "this is a really bad idea, since you are simple filling the kernel entropy pool with entropy coming from the kernel itself!") (From OE-Core rev: f1dc9ac46710814c27cae2d22e79c84a9522993a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: fix CVE-2017-13685Wenzong Fan2017-10-162-0/+58
| | | | | | | | | | | | | | | | The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file. Backport patch to fix the issue. Some references: https://sqlite.org/src/info/02f0f4c54f2819b3 http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html (From OE-Core rev: 9b9f566d2042f2b393de88506d2da964bc4d17b0) Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgcrypt: Fix building on armv6Paul Barker2017-10-162-0/+97
| | | | | | | | | | | This patch is backported from the upstream git repository to fix building libgcrypt on armv6 platforms such as raspberrypi. (From OE-Core rev: c47ed9aa7a34ef62b3ffaea6ebd5cc9e7c052899) Signed-off-by: Paul Barker <pbarker@toganlabs.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-07-01 12:08:11 +0000