summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
* busybox:upgrade 1.31.0 -> 1.31.1Wang Mingyu2019-11-271-2/+2
| | | | | | | (From OE-Core rev: 406e675a2269d731786264cf8cf5dab3825b04ab) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* liberror-perl: update 0.17027 -> 0.17028Tim Orling2019-11-271-3/+3
| | | | | | | | | | | | | HOMEPAGE change from bitbucket to github Upstream release notes: - Moved the VCS repo to https://github.com/shlomif/perl-error.pm - No other significant changes. (From OE-Core rev: 488680f45fbe28e32391e2a1a66ab350706abe93) Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-bad: add PACKAGECONFIG option for zbarNorbert Wesp2019-11-251-2/+2
| | | | | | | | | | | As a recipe for zbar was added 2016-12-26, we can add an option in PACKAGECONFIG for it. (From OE-Core rev: 655e46772c7f93469e42e791037013338bdcf787) Signed-off-by: Norbert Wesp <n.wesp@phytec.de> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: CVE-2019-14869Stefan Ghinea2019-11-252-0/+71
| | | | | | | | | | | | | | | | | | | | | A flaw was found in all versions of ghostscript 9.x before 9.28, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands. References: https://nvd.nist.gov/vuln/detail/CVE-2019-14869 Upstream patches: https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904 (From OE-Core rev: 0bb88ac63b4e1728373c6425477a32f7a6362b2c) Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: update patch statusRoss Burton2019-11-251-1/+1
| | | | | | | (From OE-Core rev: 3bb0a089840caf51065d7f8b59b3e055bce31e1c) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-pages: update to 5.03Alexander Kanavin2019-11-251-2/+2
| | | | | | | | (From OE-Core rev: 73ea9a2a2bf04910cb397a3074dc21ab5144f29b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* grub: don't autoreconf twiceRoss Burton2019-11-251-2/+3
| | | | | | | | | | | | do_configure() essentially calls autogen.sh to generate some sources and then autoreconf, but autogen.sh also calls autoreconf. Pass a magic variable so that autogen.sh doesn't autoreconf for us. (From OE-Core rev: 19e18446c09fef14c3dd54b0de12a8d21b280c93) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* grub: inherit pkgconfigRoss Burton2019-11-251-1/+1
| | | | | | | | | | Grub uses pkg-config but is only in the sysroot via dependencies. Be explicit and inherit pkgconfig directly. (From OE-Core rev: 6cdf9a0712b136a1002e8a814274e23ee7a5f06d) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* psmisc: remove a patch that is no longer necessaryAlexander Kanavin2019-11-252-29/+0
| | | | | | | | (From OE-Core rev: 3b1a87d78ba39593fb2a95362a426cf48c3e8a68) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* adwaita-icon-theme:upgrade 3.34.0 -> 3.34.3Wang Mingyu2019-11-252-3/+3
| | | | | | | | (From OE-Core rev: 7a1ca18512e355eb9adcff5e2e2105cde0e2bd9c) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat: remove check for chkconfigWenlin Kang2019-11-252-0/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For cross-platform, chkconfig can't work, so should remove check for it. This can only be reproduced on some platform with chkconfig(e.g. CentOS Linux release 7.2.1511), and need with --enable-install-cron and without --enable-copy-only. Fixed: | if [ "n" == "n" ]; then \ | if [ -x "/usr/sbin/chkconfig" ]; then \ | cd /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/init.d && /usr/sbin/chkconfig --add sysstat; \ | else \ | [ -d /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc2.d ] || mkdir -p /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc2.d; \ | [ -d /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc3.d ] || mkdir -p /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc3.d; \ | [ -d /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc5.d ] || mkdir -p /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc5.d; \ | cd /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc2.d && ln -s -f ../init.d/sysstat S01sysstat; \ | cd /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc3.d && ln -s -f ../init.d/sysstat S01sysstat; \ | cd /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d/rc5.d && ln -s -f ../init.d/sysstat S01sysstat; \ | fi \ | fi \ | elif [ -d /path/to/tmp/work/corei7-64-wrs-linux/sysstat/11.1.5-r0/image/etc/rc.d ]; then \ | ... | fi | error reading information on service sysstat: No such file or directory | Makefile:382: recipe for target 'install_all' failed (From OE-Core rev: d193caa4bd94661b87393719d72d6e9cacc60439) Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Remove acl and at runtime dependencyJoerg Vehlow2019-11-251-2/+0
| | | | | | | | | | | Tests that use at and acl tool were removed in release 20190115. See ltp commit 0fc9b8624bea8acfdb408bf5ff4916b1453e3daa (From OE-Core rev: 256479b01b6dfdd1e2a35f41a5fbcde799ba2742) Signed-off-by: Joerg Vehlow <joerg.vehlow@aox-tech.de> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libjitterentropy: Upgrade 2.1.2 -> 2.2.0Joshua Watt2019-11-253-39/+62
| | | | | | | | | | | | | | | Upstream has a patch that replaces "install -s" with an INSTALL_STRIP make variable, which can be used to replace the custom patch being carried. License checksum change was due to a date in the license text being updated. The actual contents are unchanged. (From OE-Core rev: 0f261c26131b24f2b39c51232132dd9ace546c96) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* texi2html: removeRoss Burton2019-11-253-71/+0
| | | | | | | | | | | The last user of this obsolete recipe (abandoned upstream in 2010, removed from oe-core build dependencies in 2012) has now been deleted from oe-core, so delete the recipe too. (From OE-Core rev: 3be906bad55fb44228a2aa2b8fa3c567c3d01b83) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* packagegroup-self-hosted: texi2html isn't a build requirementRoss Burton2019-11-251-1/+0
| | | | | | | | | | texi2html isn't a build requirement and hasn't been since 2012 (oe-core aa1c451). (From OE-Core rev: 362fcae816e6985193c06e3848c20b6fa0bd1180) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* packagegroup-core-self-hosted: remove intltoolRoss Burton2019-11-251-1/+0
| | | | | | | | | | Very little software needs intltool to build, and we don't need it on the host to build Poky. (From OE-Core rev: 0ba27bd08e9e5b20edbcb00316f785184c9d9fc7) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* packagegroup-core-sdk: remove intltoolRoss Burton2019-11-251-1/+0
| | | | | | | | | | | Intltool is deprecated these days, as gettext can handle almost everything intltool could. Remove it from the SDK packagegroups, if it is needed then the user can add it explicitly. (From OE-Core rev: 52558efc0f401b665e5060c51d956e2337c47da8) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-pages: correct the SRC_URIAlexander Kanavin2019-11-251-1/+1
| | | | | | | | | | | | The homepage: https://www.kernel.org/doc/man-pages/download.html specifies that the latest tarballs are published one level up from where we currently take them. (From OE-Core rev: 3722fc6f7804107bc95619576d9789259acd7f68) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gdb: Fix CVE-2019-1010180Vinay Kumar2019-11-252-0/+133
| | | | | | | | | | | | | | | Source: git://sourceware.org/git/binutils-gdb.git Tracking -- https://sourceware.org/bugzilla/show_bug.cgi?id=23657 Backported upstream commit 950b74950f6020eda38647f22e9077ac7f68ca49 to gdb-8.3.1 sources. Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=950b74950f6020eda38647f22e9077ac7f68ca49] (From OE-Core rev: 82a227e54e704ef9237c1613b9d3350fa26fe9dd) Signed-off-by: Vinay Kumar <vinay.m.engg@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pycairo:upgrade 1.18.1 -> 1.18.2Zang Ruochen2019-11-251-2/+2
| | | | | | | | (From OE-Core rev: 3a1690812a7187196db047bf715d8d7db991ebd6) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-setuptools: upgrade 41.4.0 -> 41.6.0Zang Ruochen2019-11-253-2/+2
| | | | | | | | (From OE-Core rev: c40d5f0db5238f03174f11b538706f58bb2f0236) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* e2fsprogs: fix build issues with the latest version of gettextAlexander Kanavin2019-11-255-12/+73
| | | | | | | | (From OE-Core rev: 55134bc50193a53b659af9dd315bdc4d9b87da1c) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* console-tools: remove the recipeAlexander Kanavin2019-11-2515-545/+0
| | | | | | | | | | | The last release of this was in 2002(!), kbd is the modern, supported alternative. (From OE-Core rev: 320319f24dd1be300bc89c52b97d1703eab83029) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mc: backport a patch to fix builds with latest gettextAlexander Kanavin2019-11-252-0/+111
| | | | | | | | (From OE-Core rev: be02c5ccfd575c731ba32765f2277023cc23cb5b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemtap: update to 4.2Alexander Kanavin2019-11-251-2/+2
| | | | | | | | (From OE-Core rev: 8ba5ecb17a08b29bbb314b6a498b17ac88f7f17c) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Extract common environment setup.Alex Kube2019-11-256-47/+19
| | | | | | | | | | | | Add default values for go environment variables to go-common.inc. Override where appropriate in other go*.inc files, and use host/target tuples from goarch for setting CC flags. (From OE-Core rev: 1e3f040b1f68fa1f808851ecd9623544e935e9ad) Signed-off-by: Alex Kube <alexander.j.kube@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Remove go-1.12Alex Kube2019-11-2517-1127/+0
| | | | | | | | (From OE-Core rev: 2b76e904a5f7d6479974a179d6d17d6ee9af94e7) Signed-off-by: Alex Kube <alexander.j.kube@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Change default GOVERSION to 1.13Alex Kube2019-11-251-1/+1
| | | | | | | | (From OE-Core rev: 3e9647233ef326583063e2113bfa17e1440f26aa) Signed-off-by: Alex Kube <alexander.j.kube@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: Add go1.13 recipesAlex Kube2019-11-257-0/+48
| | | | | | | | (From OE-Core rev: c1cd99c0b617717bd642ef5065c4f70ee0dfafae) Signed-off-by: Alex Kube <alexander.j.kube@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* package_ipk: Remove pointless comment to trigger rebuildRichard Purdie2019-11-221-1/+0
| | | | | | | | | | The opkg-utils change didn't trigger a full repackage due to its mention in layer.conf for update-alternatives hash exclusion. Do it manually to invalidate broken ipks. (From OE-Core rev: 6dd59dffd73618e4c0979b284a7968055a4eb8fb) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest/sstatetests: Ensure we don't use hashequiv for sstatesigs testsRichard Purdie2019-11-221-0/+12
| | | | | | (From OE-Core rev: 6af559467f869afabad16cd84ae1af4bc7af0950) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sanity: Add check for tar older than 1.28Richard Purdie2019-11-221-1/+4
| | | | | | | | | | Older versions break opkg-build when reproducible builds are enabled. Rather than trying to be selective based on which features are enabled, lets just make this a minimum version. (From OE-Core rev: 0fdc43da005c3c6102cf07383ad6f451d2203fa5) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* core-image-full-cmdline: Add lessRichard Purdie2019-11-211-0/+1
| | | | | | | | | | Less was coming from busybox in these images, add the full version. [YOCTO #13630] (From OE-Core rev: 42047185d55fc878821defec4908b119884d3d07) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* opkg-utils: Fix silent empty/broken opkg package creationRichard Purdie2019-11-212-0/+34
| | | | | | | | | | | | | opkg-build was failing on hosts where tar < 1.28 and reproducibile builds were enabled but it was doing this silently and generating corrupted (empty) ipk files. Add a fix for this (submitted upstream). The fix requires bash but if you're building ipk files this shoudn't be a problem. (From OE-Core rev: ff9ec19b02650a3ae230e4d1bdc99ec686cc4c81) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* opkg: Add upstream fixes for empty packagesRichard Purdie2019-11-213-0/+102
| | | | | | | | | An ipk with a zero size data.tar file caused opkg to crash with a double free abort. Add the upstream fixes for this. (From OE-Core rev: aa17a8096263934f5c1877f3ef749df595486a9c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: upgrade 2.62.1 -> 2.62.2Anuj Mittal2019-11-211-2/+2
| | | | | | | (From OE-Core rev: 5cf40fd1b3f004bd796d220c125271f245065605) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.10.08 -> 0.10.10Anuj Mittal2019-11-211-2/+2
| | | | | | | (From OE-Core rev: fa2f558e5185f72634c6736c2aedf5ba700b1215) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade 3.30.0 -> 3.30.1Anuj Mittal2019-11-211-2/+2
| | | | | | | (From OE-Core rev: 81c7ac8a206f50d045d4cbeeb50e9b4e14c47259) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsolv: upgrade 0.7.6 -> 0.7.8Anuj Mittal2019-11-211-1/+1
| | | | | | | (From OE-Core rev: d41f41ac407e63d1cfda3d5572ff078133c2a087) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* harfbuzz: upgrade 2.6.1 -> 2.6.4Anuj Mittal2019-11-211-2/+2
| | | | | | | (From OE-Core rev: 3eca909a6de3a9698f967b0da8905f8025d20add) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rng-tools: upgrade 6.7 -> 6.8Anuj Mittal2019-11-211-1/+1
| | | | | | | (From OE-Core rev: 1c6f29a7dc6172c4ddaca4a74bb5c178ead14182) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* webkitgtk: Remove clang specific optionKhem Raj2019-11-211-2/+0
| | | | | | | | | | This should be no longer needed. if needed then meta-clang might be better suited (From OE-Core rev: ad9dd755646fdb42b88440e9464f1d94e244c316) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* selftest: check that 'devtool upgrade' correctly drops backported patchesAlexander Kanavin2019-11-211-3/+22
| | | | | | | | | | There was a regression in this functionality that went unnoticed due to lack of tests. (From OE-Core rev: a75e4eceb703b2b13ddd4ba3dea3a86af0b0a9eb) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cairo: the component is dual licensedAlexander Kanavin2019-11-211-6/+6
| | | | | | | | | | | | Somehow, over the years, no one noticed that cairo does in fact offer a choice between mpl and lgpl, but the COPYING makes it clear: https://gitlab.freedesktop.org/cairo/cairo/blob/1.16/COPYING (From OE-Core rev: 6b72445aa098054257da77aab8e8d4ffcd3d0437) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: fetch CVE data once at a time instead of in a single callRoss Burton2019-11-211-10/+10
| | | | | | | | | | | | | | | | | This code used to construct a single SQL statement that fetched the NVD data for every CVE requested. For recipes such as the kernel where there are over 2000 CVEs to report this can hit the variable count limit and the query fails with "sqlite3.OperationalError: too many SQL variables". The default limit is 999 variables, but some distributions such as Debian set the default to 250000. As the NVD table has an index on the ID column, whilst requesting the data CVE-by-CVE is five times slower when working with 2000 CVEs the absolute time different is insignificant: 0.05s verses 0.01s on my machine. (From OE-Core rev: 53d0cc1e9b7190fa66d7ff1c59518f91b0128d99) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: neaten get_cve_infoRoss Burton2019-11-211-13/+5
| | | | | | | | | Remove obsolete Python 2 code, and use convenience methods for neatness. (From OE-Core rev: f19253cc9e70c974a8e21a142086c13d7cde04ff) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: rewrite look to fix false negativesRoss Burton2019-11-211-29/+34
| | | | | | | | | | | | | | | A previous optimisation was premature and resulted in false-negatives in the report. Rewrite the checking algorithm to first get the list of potential CVEs by vendor:product, then iterate through every matching CPE for that CVE to determine if the bounds match or not. By doing this in two stages we can know if we've checked every CPE, instead of accidentally breaking out of the scan too early. (From OE-Core rev: d61aff9e22704ad69df1f7ab0f8784f4e7cc0c69) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: clean up proxy handlingRoss Burton2019-11-211-26/+5
| | | | | | | | | | urllib handles adding proxy handlers if the proxies are set in the environment, so call bb.utils.export_proxies() to do that and remove the manual setup. (From OE-Core rev: 6b73004668b3b71c9c38814b79fbb58c893ed434) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: add an index on the CVE ID columnRoss Burton2019-11-211-0/+3
| | | | | | | | | | Create an index on the PRODUCTS table which contains a row for each CPE, drastically increasing the performance of lookups for a specific CVE. (From OE-Core rev: b4048b05b3a00d85c40d09961f846eadcebd812e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: don't hardcode the database nameRoss Burton2019-11-211-2/+2
| | | | | | | | | | Don't hardcode the database filename, there's a variable for this in cve-check.bbclass. (From OE-Core rev: 0d188a9dc4ae64c64cd661e9d9c3841e86f226ab) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-01-15 10:13:40 +0000