summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* boost: fix build with x32 and muslAnuj Mittal2018-01-031-1/+1
| | | | | | | | | | | | | Make sure that boost picks up correct address model value for x32 even when musl is enabled. Fixes [YOCTO #12119] Suggested-by: Ovidiu Panait <ovidiu.panait@windriver.com> (From OE-Core rev: 1879bd13f09c8180f737ddaccd2025e22c7f0c46) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libatomic-ops: upgrade to 7.6.2Maxin B. John2018-01-032-72/+3
| | | | | | | | | | | | 7.6.0 -> 7.6.2 Remove unused patch: 0001-Add-initial-nios2-architecture-support.patch (From OE-Core rev: 4471993aabd2be1ee56259a55c1e02ed49d504f2) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: 2.26.0 -> 2.26.2Huang Qiyu2018-01-021-2/+2
| | | | | | | | | Upgrade at-spi2-core from 2.26.0 to 2.26.2. (From OE-Core rev: 1a7f33dc480bf2ef291629e27dd1b04f34ea79c3) Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-atk: 2.26.0 -> 2.26.1Huang Qiyu2018-01-021-2/+2
| | | | | | | | | Upgrade at-spi2-atk from 2.26.0 to 2.26.1 (From OE-Core rev: e9ed571daa9a68cb315e2b15f99c34857bffb680) Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bmap-tools: fix RDEPENDS and update SRC_URITim Orling2018-01-021-2/+2
| | | | | | | | | | | | | | * RDEPENDS are now all the python3 versions * Upstream SRC_URI has moved to github.com/intel/bmap-tools * Missing RDEPENDS on python3-setuptools added - Provides import for pkg_resources Fixes [YOCTO #12148] (From OE-Core rev: 3d63452d8d8d8dc61cd26b7759b5c0d235d70451) Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libassuan: update to 2.5.1Armin Kuster2018-01-021-2/+2
| | | | | | | | (From OE-Core rev: 16775d498acef984092b9702a1c0177103bf99c3) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pinentry: update to 1.1.0Armin Kuster2018-01-023-2/+2
| | | | | | | | (From OE-Core rev: c147eb60bdcd5de9cf51414bef7cff7ee5bdc8ba) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss: update to 3.34.1Armin Kuster2018-01-021-2/+2
| | | | | | | | | | | | | The following CA certificate was Re-Added. It was removed in NSS 3.34, but has been re-added with only the Email trust bit set. (bug 1418678) CN = Certum CA, O=Unizeto Sp. z o.o. SHA-256 Fingerprint: D8:E0:FE:BC:1D:B2:E3:8D:00:94:0F:37:D2:7D:41:34:4D:99:3E:73:4B:99:D5:65:6D:97:78:D4:D8:14:36:24 (From OE-Core rev: cc76625cc19422fba045a308aca017c8f4c8fa5f) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner: Upgrade to 2.1.1Aníbal Limón2018-01-021-2/+2
| | | | | | | | | | | | | | Contains fixes, - timeout option missing the argument option ":" to getopt - utils.c: Prefer monotonic clock to calculate elapsed time - Add support to avoid load/run twice a run_ptest script (From OE-Core rev: 843fccd46323268252ea698e3b8ab956dd4b48e0) Signed-off-by: Aníbal Limón <anibal.limon@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: remove inappropriate patchRoss Burton2017-12-182-28/+1
| | | | | | | | | | This was patching -lxslt directly into the pkgconfig file, but XSLT_LIBS already contains this so the patch is redundant. (From OE-Core rev: 57b811b61dfbea551e6a4bdd98ec697729f1411b) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: use HTTP instead of FTP in SRC_URIRoss Burton2017-12-181-1/+1
| | | | | | | | | | | FTP isn't as reliable as HTTP. [ YOCTO #12398 ] (From OE-Core rev: 52263f5f6caeaf215ab96d58218fb5f9a2ed4264) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: fix libicudata corruption on big endian systemYi Zhao2017-12-181-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | ICU library libicudata is created with a wrong endianness if the host and target have different endianness. (e.g. build ICU for qemuppc on x86-64 host) See upstream bug report: http://bugs.icu-project.org/trac/ticket/11758 The discussion in oe-core mailing list: https://www.mail-archive.com/openembedded-core@lists.openembedded.org/msg65155.html The root cause is the native pkgdata can not generate correct icu data for different endianness. By default, this data is built into the shared library libicudata that would cause it corrupt. But ICU also provides additional options for loading the data. With option --with-data-packaging=archive, ICU outputs a single icudt.dat file which can be loaded by the library. See document: http://userguide.icu-project.org/icudata So for big endian system, we can use the separated data file which re-generates by icupkg and set the correct ICU_DATA environment variable to make sure the library can load the data without problems. (From OE-Core rev: 77d1b9cda69d09cd7d3c8174ef14b4ee10e5efb6) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunistring: upgrade to 0.9.8Maxin B. John2017-12-182-23/+39
| | | | | | | | | | | | | | Refreshed the following patch: iconv-m4-remove-the-test-to-convert-euc-jp.patch No change in license as update in License Checksum is due to change in Copyright years. (From OE-Core rev: 79f36e7d329a8aa2ed1b1d69878203ced96bc6ca) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: fix malformed/missing Upstream-Status tagsRoss Burton2017-12-101-0/+1
| | | | | | | (From OE-Core rev: 9e7aed823d3035b8429d3c5fc537cacadf16f675) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libbsd: Make it build with GCC 5.0 and olderPeter Kjellerstedt2017-12-102-0/+32
| | | | | | | | (From OE-Core rev: 2a769d0831cf368992cf540e7758cc2c2d9067ab) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lzo: don't do aclocal/acinclude danceRoss Burton2017-12-102-363/+0
| | | | | | | | | | autoreconf finds autoconf/local.m4 on its own, so there's no need to mess around with a fork of aclocal.m4 as acinclude.m4. (From OE-Core rev: 8f9025f05b787f41f1867d340d911d7754ee7794) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: remove aclocal/acinclude danceRoss Burton2017-12-101-6/+2
| | | | | | | (From OE-Core rev: 4143d0896bcf05d95c29bf18e913f32204c707f0) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* neon: remove the recipeAlexander Kanavin2017-12-022-53/+0
| | | | | | | | | | | | | | | | For these reasons: 1) Upstream website has been dead for quite a while now; 2) Nothing is actually using neon in oe-core, except one gstreamer plugin in gst-plugins-bad (and I couldn't find evidence of that plugin being used anywhere) However, the recipe is still required by libmusicbrainz in meta-oe and so it will be moved there (with the tarball taken from debian). (From OE-Core rev: 62513ad6d38e4aba3e6b155e04c4c6344ed70ebc) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libassuan: update to 2.4.4Armin Kuster2017-12-022-43/+45
| | | | | | | | | | | | | forward ported patch assuan-def.h checksum changed do to "SPDX formating" assuan.c checksum changes do to "SPDX formating" (From OE-Core rev: ec00c2eb893b1755f9fdf89d0c74dc0e0bc3cf01) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss: update to 3.34Armin Kuster2017-12-021-2/+2
| | | | | | | | | | | for more info see: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.34_release_notes (From OE-Core rev: 55ad71fd60507d566bf5235b5a119b327184fcf0) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: update to 3.4 and cleanupArmin Kuster2017-12-027-80/+65
| | | | | | | | | | | | | | | | | | | merge .inc forward ported two patches to work with 3.4 for more info see: http://lists.gnu.org/archive/html/info-gnu/2017-11/msg00007.html Change SRC_URI to use GNU download instead of liu.se, which interacts badly with wget 1.19.2 and downloads uncompressed tarballs (RB). (From OE-Core rev: 0b5d971a4e8e6904d2f4641fd5f3647d23ff4fa0) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> XX nettle: update SRC_URI Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnutls: update to 3.6.1Armin Kuster2017-12-024-87/+10
| | | | | | | | | | | zlib configure.ac support removed in 3.6.1 drop patch (From OE-Core rev: 537325f204f2f7c66f13a12dc8fc08f8e16e4754) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: update to 1.1.32Alexander Kanavin2017-11-301-2/+2
| | | | | | | | (From OE-Core rev: b515861a16c25b6cc0350812343f08d7d1e384eb) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: update to 60.1Alexander Kanavin2017-11-304-53/+35
| | | | | | | | | | | | Rebase a couple of patches. LICENSE checksum change due to typo fix. (From OE-Core rev: d4a76a51762d094d6f4fc016c52a6817c7f92637) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcheck: fix upstream version checkAlexander Kanavin2017-11-301-0/+1
| | | | | | | | (From OE-Core rev: 6e23418c69fade223c4a83425865714e901e6da4) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss: pay attention to CFLAGSJoe Slater2017-11-301-1/+6
| | | | | | | | | | nss ignores CFLAGS so we suggest them via CC. (From OE-Core rev: 95b65eefe7eb001752a37d1015bbf9be63bfd6bb) Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ca-certificates: Add /etc to SYSROOT_DIRSPatrick Vacek2017-11-301-0/+1
| | | | | | | | | | | | For recipes that depend on native ca-certificates.crt, /etc should be added to the list of directories that automatically populate the sysroot, otherwise the file may not be there. (From OE-Core rev: 355e49e19abb3e729c82a6de46ada8da8a257f58) Signed-off-by: Patrick Vacek <patrick@advancedtelematic.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup-2.4: upgrade to 2.60.2Maxin B. John2017-11-301-2/+2
| | | | | | | | | | 2.60.1 -> 2.60.2 (From OE-Core rev: c008fb8270209e790cc71b6a7ec776aef0a57c49) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: CVE-2017-14952Ovidiu Panait2017-11-212-0/+29
| | | | | | | | | | | | | | | | | | | Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-14952 Upstream patches: http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp (From OE-Core rev: 4ff12a8bf2b8d094085afbe8fa1d43f781cfa79d) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade to 3.21.0Maxin B. John2017-11-212-60/+2
| | | | | | | | | | | Remove upstreamed patch: 1. sqlite3-fix-CVE-2017-13685.patch (From OE-Core rev: 483711e676cd063a873179bdb2daedf56de0aa75) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libproxy: upgrade to 0.4.15Maxin B. John2017-11-211-2/+2
| | | | | | | | | | 0.4.14 -> 0.4.15 (From OE-Core rev: 4ec39933d2290c484e34ac803420155c7a2feee7) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: remove redundant intltool dependencyRoss Burton2017-11-111-1/+1
| | | | | | | (From OE-Core rev: 3546344f518a473b79e0ebce7158a3808d76409a) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* db: don't provide virtual/dbRoss Burton2017-11-111-10/+0
| | | | | | | | | | As there are no alternative providers for virtual/db remove the PROVIDES and recipes can just depend on db. (From OE-Core rev: dcbc45aa3fe72c528fe4d47a783da4b4ed5ff38e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* atk: update to 2.26.0Alexander Kanavin2017-11-091-4/+2
| | | | | | | | | Remove --disable-glibtest as ./configure no longer has it. (From OE-Core rev: 97dbe812e5f964e2d25ae7e8014ca07b7bdc6318) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-atk: update to 2.26.0Alexander Kanavin2017-11-091-2/+2
| | | | | | | (From OE-Core rev: 8b69b8d0fc16c768f9005941bde6c2436b26ebe9) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: update to 2.26.0Alexander Kanavin2017-11-093-72/+20
| | | | | | | | | | | | | Drop 0001-nls.m4-Take-it-from-gettext-0.15.patch as it's now upstreamed. Remove --disable-xevie option: https://github.com/GNOME/at-spi2-core/commit/644096a28a47bdf5c6e0c34c9cd5b944df059925 (From OE-Core rev: f7c3b14238b7e2b84d5a972bc3dfda29de45ad3e) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: update to 0.50.1Alexander Kanavin2017-11-091-2/+2
| | | | | | | (From OE-Core rev: c00f50e58d8db29243db2e9d29023635e381080c) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shared-mime-info: update to 1.9Alexander Kanavin2017-11-092-7/+7
| | | | | | | (From OE-Core rev: 5d1c0d9a54aff15ef5283cdfecc222405d2cf9ca) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup-2.4: update to 2.60.1Alexander Kanavin2017-11-091-2/+2
| | | | | | | (From OE-Core rev: 26aaaf8313a3361aafd8abdb0bc8a00d39958e3e) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iso-codes: update to 3.76Alexander Kanavin2017-11-091-2/+2
| | | | | | | (From OE-Core rev: 5cbcd0c1bddda4dc6f0377ec2e35e728947966cb) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: update to 1.65.1Alexander Kanavin2017-11-095-53/+41
| | | | | | | | | | | | Add a patch to fix bjam-native compile error (due to mistyped variable name). Drop upstreamed patch. (From OE-Core rev: ba2d391d8268203895ab2f792f92b7fd92deeb45) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: update to 1.1.31Alexander Kanavin2017-11-094-264/+3
| | | | | | | | | | | | Drop upstreamed patches, including pkg-config support patch, as upstream now does use pkg-config. configure.in is now configure.ac, adjust recipe accordingly. (From OE-Core rev: e9d487de8b5c03108c8c25c0365d5bd6b48f03e9) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lz4: fix upstream version checkAlexander Kanavin2017-11-091-0/+1
| | | | | | | (From OE-Core rev: c6606acfe3a8c831de9b19749aaa61a3888aecbe) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl_7.54.1.bb: improve reproducibilityJuro Bystricky2017-11-082-1/+41
| | | | | | | | | | | | | Improve reproducible build of curl-dev and curl-dbg packages. curl-dev: Correctly remove build host references from curl-config curl-dbg: Do not generate time stamps in files generated by mkhelp.pl (From OE-Core rev: 6bc323ac9315712e75a0282cddb292bc84afc6f1) Signed-off-by: Juro Bystricky <juro.bystricky@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* db: change types to avoid headers changing between architecturesRoss Burton2017-11-082-3/+61
| | | | | | | | | | | | | | | | | | | | Triggered by looking at why Python doesn't find db.h (because it greps db.h for a regex, and db.h is actually a oe_multilib_header wrapper) I realised that the only reason we have to oe_multilib_header db.h is because one typedef is different between 32-bit and 64-bit architectures. However, the typedef is for a 64-bit integer so instead of using long (64-bit) or long long (32-bit), just use int64_t. Some of the overly complicated configure tests need to be deleted after this change but that is safe as we're building in a controlled environment and can assume int64_t exists. With this done the header doesn't change between architectures, and it doesn't need to be wrapped by oe_multilib_header. (From OE-Core rev: 60aa20b8b691e5a72a6a11bf795b86c6359db886) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash-completion: remove rfkill file that util-linux providesChen Qi2017-11-081-1/+1
| | | | | | | | | | | Remove the rfkill bash completion file that util-linux provides to avoid conflicts. (From OE-Core rev: db5f9b8b5f51e8c0b6fc99dfdbac8b11f272d602) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnutls: update to 3.5.16Armin Kuster2017-11-071-2/+2
| | | | | | | | | | | | | | | This is a bug fix release on the current stable branch. Note that, I've also switched the release cadence to bi-monthly as less and less bug fixes/updates accumulate each month on this branch. ** API and ABI modifications: No changes since last version. (From OE-Core rev: a843ab62f2252165ec3d687de92f939f766376e4) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpcre2: update to 10.30Armin Kuster2017-11-073-194/+3
| | | | | | | | | | | | | | LICENSE files changed: Amend licence to relax its conditions for chains of binary distributions. removed included patches includes CVE-2017-8399 (From OE-Core rev: d8ea0674d1feee803b75cf837e8d029619f8d663) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss: update to 3.33.0Armin Kuster2017-11-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.33_release_notes * TLS compression is no longer supported. API calls that attempt to enable compression are accepted without failure. However, TLS compression will remain disabled. * This version of NSS uses a formally verified implementation of Curve25519 on 64-bit systems. * The compile time flag DISABLE_ECC has been removed. * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks are not performed anymore. * Fixes CVE-2017-7805, a potential use-after-free in TLS 1.2 server when verifying client authentication https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.32_release_notes The Websites (TLS/SSL) trust bit was turned off for the following root certificates. * CN = AddTrust Class 1 CA Root SHA-256 Fingerprint: 8C:72:09:27:9A:C0:4E:27:5E:16:D0:7F:D3:B7:75:E8:01:54:B5:96:80:46:E3:1F:52:DD:25:76:63:24:E9:A7 * CN = Swisscom Root CA 2 SHA-256 Fingerprint: F0:9B:12:2C:71:14:F4:A0:9B:D4:EA:4F:4A:99:D5:58:B4:6E:4C:25:CD:81:14:0D:29:C0:56:13:91:4C:38:41 The following CA certificates were Removed: * CN = AddTrust Public CA Root SHA-256 Fingerprint: 07:91:CA:07:49:B2:07:82:AA:D3:C7:D7:BD:0C:DF:C9:48:58:35:84:3E:B2:D7:99:60:09:CE:43:AB:6C:69:27 * CN = AddTrust Qualified CA Root SHA-256 Fingerprint: 80:95:21:08:05:DB:4B:BC:35:5E:44:28:D8:FD:6E:C2:CD:E3:AB:5F:B9:7A:99:42:98:8E:B8:F4:DC:D0:60:16 * CN = China Internet Network Information Center EV Certificates Root SHA-256 Fingerprint: 1C:01:C6:F4:DB:B2:FE:FC:22:55:8B:2B:CA:32:56:3F:49:84:4A:CF:C3:2B:7B:E4:B0:FF:59:9F:9E:8C:7A:F7 * CN = CNNIC ROOT SHA-256 Fingerprint: E2:83:93:77:3D:A8:45:A6:79:F2:08:0C:C7:FB:44:A3:B7:A1:C3:79:2C:B7:EB:77:29:FD:CB:6A:8D:99:AE:A7 * CN = ComSign Secured CA SHA-256 Fingerprint: 50:79:41:C7:44:60:A0:B4:70:86:22:0D:4E:99:32:57:2A:B5:D1:B5:BB:CB:89:80:AB:1C:B1:76:51:A8:44:D2 * CN = GeoTrust Global CA 2 SHA-256 Fingerprint: CA:2D:82:A0:86:77:07:2F:8A:B6:76:4F:F0:35:67:6C:FE:3E:5E:32:5E:01:21:72:DF:3F:92:09:6D:B7:9B:85 * CN = Secure Certificate Services SHA-256 Fingerprint: BD:81:CE:3B:4F:65:91:D1:1A:67:B5:FC:7A:47:FD:EF:25:52:1B:F9:AA:4E:18:B9:E3:DF:2E:34:A7:80:3B:E8 * CN = Swisscom Root CA 1 SHA-256 Fingerprint: 21:DB:20:12:36:60:BB:2E:D4:18:20:5D:A1:1E:E7:A8:5A:65:E2:BC:6E:55:B5:AF:7E:78:99:C8:A2:66:D9:2E * CN = Swisscom Root EV CA 2 SHA-256 Fingerprint: D9:5F:EA:3C:A4:EE:DC:E7:4C:D7:6E:75:FC:6D:1F:F6:2C:44:1F:0F:A8:BC:77:F0:34:B1:9E:5D:B2:58:01:5D * CN = Trusted Certificate Services SHA-256 Fingerprint: 3F:06:E5:56:81:D4:96:F5:BE:16:9E:B5:38:9F:9F:2B:8F:F6:1E:17:08:DF:68:81:72:48:49:CD:5D:27:CB:69 * CN = UTN-USERFirst-Hardware SHA-256 Fingerprint: 6E:A5:47:41:D0:04:66:7E:ED:1B:48:16:63:4A:A3:A7:9E:6E:4B:96:95:0F:82:79:DA:FC:8D:9B:D8:81:21:37 * CN = UTN-USERFirst-Object SHA-256 Fingerprint: 6F:FF:78:E4:00:A7:0C:11:01:1C:D8:59:77:C4:59:FB:5A:F9:6A:3D:F0:54:08:20:D0:F4:B8:60:78:75:E5:8F (From OE-Core rev: 83d79f449c33eff7bba92dfda8ffd4b699fb6462) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nspr: update to 4.17Armin Kuster2017-11-071-2/+2
| | | | | | | (From OE-Core rev: 94282273d4d3da1e4393324b66da185542e3d629) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-11-13 14:55:45 +0000