summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
* ofono: tidy up the recipeNicola Lunghi2019-10-312-44/+46
| | | | | | | | | | - remove the inc file - run oe-stylize on the recipe (From OE-Core rev: 3bfec923cf717bd1082beb0e026567951c2e99c0) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wpa-supplicant: fix CVE-2019-16275Ross Burton2019-10-312-0/+83
| | | | | | | (From OE-Core rev: d7b5a2ebdb6e74a21059ac2496b5dbea4597eb87) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* squashfs-tools: clean up compile/install tasksRoss Burton2019-10-311-5/+3
| | | | | | | | | The makefile can do the right thing now. (From OE-Core rev: 6f65dd3164a6f523de82cb30e67ec3d180e45c2e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* squashfs-tools: remove redundant source checksumsRoss Burton2019-10-311-2/+0
| | | | | | | | | | oe-core e37a1ecc stopped downloading a LZMA tarball, but the checksums were not removed at the same time. (From OE-Core rev: 73a1e1135618a23f3f2a714c311df39c7b809ed5) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-numpy: Stop shipping manual config filesAdrian Bunk2019-10-3129-2022/+0
| | | | | | | | | | Automatic generation seems to work fine, and does not become outdated. (From OE-Core rev: 8993270f8bc65e152418d84fde03f8ead83c054b) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap-ng: undefined reference to `pthread_atfork'Trevor Woerner2019-10-311-0/+1
| | | | | | | | | Some hosts need -pthread in order to link properly (e.g. openSUSE 15.1). (From OE-Core rev: 6196e68ffc83ae0655336d3466d950828d42e191) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnu-efi: Upgrade 3.0.9 -> 3.0.10Adrian Bunk2019-10-313-20/+41
| | | | | | | | | Part of patch fixed upstream removed. (From OE-Core rev: 82169fd7684389f9cdedd6f91a00698641741a8c) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: Avoid potential build configuration contaminationRichard Purdie2019-10-281-0/+1
| | | | | | | | | | | | | | | | | Changing the gl options to qemu doesn't result in a correctly rebuilt binary, the GL linkage can persist from a build where it was enabled to one where it was not. As well as clearly being incorrect and non-reproducible, this caused some mystery failures on the autobuilder. Cleaning ${B} at do_configure time avoids this. Most recipes (e.g. autotools derived ones) already clean ${B} as appropriate and avoid this issue. (From OE-Core rev: b91b30c09ffbcd81e8dcaae832b3ae4f61046236) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc: Remove stale gcc 8 patchfileAdrian Bunk2019-10-281-44/+0
| | | | | | | (From OE-Core rev: 176c70277d82228bc440f3fcd40ea90f0b12d641) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nspr: Upgrade 4.21 -> 4.23Adrian Bunk2019-10-282-91/+2
| | | | | | | | | Patch applied upstream removed. (From OE-Core rev: 41812d3366f0a0080624b8582fdba430243ce710) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: Upgrade 0.10.00 -> 0.10.08Adrian Bunk2019-10-282-26/+2
| | | | | | | | | Patch applied upstream removed. (From OE-Core rev: 0f9519de7b7a590fbd967d703d8dd9e3b905f1f1) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* screen: Upgrade 4.6.2 -> 4.7.0Adrian Bunk2019-10-286-510/+2
| | | | | | | | | Patches applied upstream removed. (From OE-Core rev: 16425fbd8e2565b1a40462840e3f0931ae1a7b6c) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* squashfs-tools: Upgrade to 4.4Adrian Bunk2019-10-282-35/+2
| | | | | | | | | Patch for issue fixed upstream removed. (From OE-Core rev: a29889c1f5e98b84c87522c6e0a058da262153e1) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: Improve handling when no exported fileysystemsRichard Purdie2019-10-281-1/+1
| | | | | | | | | Ensure /etc/exports exists and is readable before calling exportfs to avoid errors. (From OE-Core rev: 723f2464f746624ece06caa9752910a52f290f95) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: fix CVE-2019-16935Chen Qi2019-10-282-0/+102
| | | | | | | (From OE-Core rev: 1a7593bcdaf8a8cf15259aee8a0e2686247f2987) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: fix CVE-2019-16935Chen Qi2019-10-282-0/+87
| | | | | | | (From OE-Core rev: 78846c823cbb662897ce85b061a745c1dd7deeab) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* unfs3: fixed the issue that unfsd consumes 100% CPUHaiqing Bai2019-10-282-0/+55
| | | | | | | | | | | | | | | | | | | | | | | The 'accept' function on the socket of unfsd daemon is always in below error state: accept(4, 0x7ffd5e6dddc0, [128]) = -1 EINVAL (Invalid argument) accept(6, 0x7ffd5e6dddc0, [128]) = -1 EINVAL (Invalid argument) And 'strace -c -p <the pid of unfsd>' shows: % time seconds usecs/call calls errors syscall ------ ----------- ----------- --------- --------- ---------------- 70.87 0.005392 0 513886 513886 accept 29.13 0.002216 0 256943 poll This error state is in the 'for' loop of the daemon, so it consumes 100% CPU. The reason is that 'listen' is not called for the TCP socket before 'accept'. Actually the called 'svc_tli_create' from libtirpc will not call 'listen' on a bound socket. (From OE-Core rev: 1f6784d2e839f81749d21ad1b615a9f7bb0e64d6) Signed-off-by: Haiqing Bai <Haiqing.Bai@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: fix CVE-2019-6471 and CVE-2018-5743Kai Kang2019-10-289-0/+2723
| | | | | | | | | | | | Backport patches to fix CVE-2019-6471 and CVE-2018-5743 for bind. CVE-2019-6471 is fixed by 0001-bind-fix-CVE-2019-6471.patch and the other 6 patches are for CVE-2018-5743. And backport one more patch to fix compile error on arm caused by these 6 commits. (From OE-Core rev: 3c39d4158677b97253df63f23b74c3a9dd5539f6) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildhistory-analysis: filter out -src changes by defaultRoss Burton2019-10-281-1/+1
| | | | | | | | | | | Like the -dbg package, this package is automatically generated and contains source filenames. We expect this to change on every upgrade, so don't show the differences unless the user wants to see all changes. (From OE-Core rev: 30acbf6f89ba76d6fab8987ed20f72d1fa3d70fa) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: add missing description in recipes-gnomeMaxime Roussin-Bélanger2019-10-2810-2/+34
| | | | | | | | | Remove some trailing whitespace (From OE-Core rev: 5714e4fb5e35454f2f3e523b1161a6451fcd3427) Signed-off-by: Maxime Roussin-Bélanger <maxime.roussinbelanger@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: update and add missing homepage/bugtracker linksMaxime Roussin-Bélanger2019-10-2813-14/+21
| | | | | | | (From OE-Core rev: 9e5089dac1ae8277263ec3dced1fb1633ba98e57) Signed-off-by: Maxime Roussin-Bélanger <maxime.roussinbelanger@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gsettings-desktop-schemas: upgrade 3.32.0 -> 3.34.0Andreas Müller2019-10-281-2/+2
| | | | | | | | | | | Need it for gnome-settings-daemon 3.34: | meson.build:91:0: ERROR: Invalid version of dependency, need 'gsettings-desktop-schemas' ['>= 3.33.0'] found '3.32.0'. (From OE-Core rev: e94ce7ecc80efd41ec496fadf7546ea027f7dafd) Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* connman: mark connman-wait-online as SYSTEMD_PACKAGEAndré Draszik2019-10-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The connman-wait-online package currently isn't marked as systemd-enabled package. This means it is impossible to auto-enable the service during image creation or package installation, as no preset files and no pkg_postinst() snippet is being created. This change should have been done as part of the upgrade to v1.31 Note: connman-wait-online is needed when connman is in use in more complex network/interface setups for systemd's network-online.target to report success. systemd-networkd's systemd-networkd-wait-online.service alone doesn't work in such scenarios and simply times out, as it know nothing about the expected network/ interface configuration, meaning the target doesn't boot successfully (systemctl list-units --failed), and long delays are seen, caused by waiting for the systemd-networkd-wait-online.service timeout. (From OE-Core rev: 1a8d18eeee6dc188d8becc778bfa933031490781) Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-devicetree: Cope with non-standard kernel deploy subdirectoryMike Crowe2019-10-231-10/+10
| | | | | | | | | | | | | | | | kernel.bbclass installs non-standard kernels (where KERNEL_PACKAGE_NAME is not "kernel") in a subdirectory of ${DEPLOYDIR}. To achieve this kernel_do_deploy sets the deployDir shell variable to ${DEPLOYDIR} for the standard kernel or ${DEPLOYDIR}/${KERNEL_DEPLOYSUBDIR} for non-standard kernels. kernel-devicetree.bbclass's do_deploy_append ought to do the same and can do so by using the same shell variable. (From OE-Core rev: db5752911fe085337b9d3d4af85f89a0c664388e) Signed-off-by: Mike Crowe <mac@mcrowe.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-fitimage: Cope with non-standard kernel deploy subdirectoryMike Crowe2019-10-231-9/+9
| | | | | | | | | | | | | | | | kernel.bbclass installs non-standard kernels (where KERNEL_PACKAGE_NAME is not "kernel") in a subdirectory of ${DEPLOYDIR}. To achieve this kernel_do_deploy sets the deployDir shell variable to ${DEPLOYDIR} for the standard kernel or ${DEPLOYDIR}/${KERNEL_DEPLOYSUBDIR} for non-standard kernels. kernel-fitimage.bbclass's kernel_do_deploy_append ought to do the same and can do so by using the same shell variable. (From OE-Core rev: d324b22d32eaea9e4337c963c8b1a33b0ba6a2dd) Signed-off-by: Mike Crowe <mac@mcrowe.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: fix CVE-2019-16276Chen Qi2019-10-232-0/+164
| | | | | | | (From OE-Core rev: e31f87e289dfd3bbca961e927447a9c7ba816d3f) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* adwaita-icon-theme: upgrade 3.32.0 -> 3.34.0Andreas Müller2019-10-232-3/+3
| | | | | | | (From OE-Core rev: b4e9af206623755651753ed1b776cedb004e59fd) Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: fix CVE-2019-14287Changqing Li2019-10-233-0/+292
| | | | | | | | | | | | | In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. (From OE-Core rev: 4e11cd561f2bdaa6807cf02ee7c9870881826308) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meson: Backport fix to assist meta-oe breakageRichard Purdie2019-10-232-0/+96
| | | | | | | | | Add a backported commit from upstream which helps fix build failures in meta-oe. (From OE-Core rev: 6665e84bfba43cd8897b9561b14975ac524fbbe2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap-ng:upgrade 0.7.9 -> 0.7.10Zang Ruochen2019-10-233-3/+3
| | | | | | | (From OE-Core rev: 1d5ab1936c9fdf5d2613562ab1ace920089de49b) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: fix PKNAME name is NULL when use lsblk [LIN1019-2963]Liwei Song2019-10-232-0/+37
| | | | | | | | | | PKNAME is NULL when run "lsblk -o+PKNAME /dev/sda1" backport an upstream patch to fix it. (From OE-Core rev: a5a987ff5e5e333e28be44a12e729907272ea3cb) Signed-off-by: Liwei Song <liwei.song@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python-setuptools:upgrade 41.2.0 -> 41.4.0Zang Ruochen2019-10-233-2/+2
| | | | | | | (From OE-Core rev: c94bb5b7431af8b495a3fa96e96d968dc45fb4f3) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pip:upgrade 19.2.3 -> 19.3.1Zang Ruochen2019-10-231-2/+2
| | | | | | | (From OE-Core rev: 0f3fe0edb5a7c26d4a3162d54c9e627e396af476) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/runtime/context.py: ignore more files when loading controllersAndré Draszik2019-10-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When loading controllers as (external) modules, the code currently tries to load all files ending with .py. This is a problem when during development using an editor that creates a lock-file in the same directory as the .py file, as the lock file is typically called '.#xxxx.py'. Python will try to load the lock file and fail miserably with an exception: The stack trace of python calls that resulted in this exception/failure was: File: 'exec_python_func() autogenerated', lineno: 2, function: <module> 0001: *** 0002:do_testimage(d) 0003: File: 'poky/meta/classes/testimage.bbclass', lineno: 114, function: do_testimage 0110: netstat -an 0111:} 0112: 0113:python do_testimage() { *** 0114: testimage_main(d) 0115:} 0116: 0117:addtask testimage 0118:do_testimage[nostamp] = "1" File: 'poky/meta/classes/testimage.bbclass', lineno: 294, function: testimage_main 0290: 0291: # the robot dance 0292: target = OERuntimeTestContextExecutor.getTarget( 0293: d.getVar("TEST_TARGET"), logger, d.getVar("TEST_TARGET_IP"), *** 0294: d.getVar("TEST_SERVER_IP"), **target_kwargs) 0295: 0296: # test context 0297: tc = OERuntimeTestContext(td, logger, target, host_dumper, 0298: image_packages, extract_dir) File: 'poky/meta/lib/oeqa/runtime/context.py', lineno: 116, function: getTarget 0112: # XXX: Don't base your targets on this code it will be refactored 0113: # in the near future. 0114: # Custom target module loading 0115: target_modules_path = kwargs.get('target_modules_path', '') *** 0116: controller = OERuntimeTestContextExecutor.getControllerModule(target_type, target_modules_path) 0117: target = controller(logger, target_ip, server_ip, **kwargs) 0118: 0119: return target 0120: File: 'poky/meta/lib/oeqa/runtime/context.py', lineno: 128, function: getControllerModule 0124: # ImportError raised if a provided module can not be imported. 0125: @staticmethod 0126: def getControllerModule(target, target_modules_path): 0127: controllerslist = OERuntimeTestContextExecutor._getControllerModulenames(target_modules_path) *** 0128: controller = OERuntimeTestContextExecutor._loadControllerFromName(target, controllerslist) 0129: return controller 0130: 0131: # Return a list of all python modules in lib/oeqa/controllers for each 0132: # layer in bbpath File: 'poky/meta/lib/oeqa/runtime/context.py', lineno: 163, function: _loadControllerFromName 0159: # Raise ImportError if a provided module can not be imported 0160: @staticmethod 0161: def _loadControllerFromName(target, modulenames): 0162: for name in modulenames: *** 0163: obj = OERuntimeTestContextExecutor._loadControllerFromModule(target, name) 0164: if obj: 0165: return obj 0166: raise AttributeError("Unable to load {0} from available modules: {1}".format(target, str(modulenames))) 0167: File: 'poky/meta/lib/oeqa/runtime/context.py', lineno: 173, function: _loadControllerFromModule 0169: @staticmethod 0170: def _loadControllerFromModule(target, modulename): 0171: obj = None 0172: # import module, allowing it to raise import exception *** 0173: module = __import__(modulename, globals(), locals(), [target]) 0174: # look for target class in the module, catching any exceptions as it 0175: # is valid that a module may not have the target class. 0176: try: 0177: obj = getattr(module, target) Exception: ImportError: No module named 'oeqa.controllers.' Simply ignore those when collecting the list of files to try to load. (From OE-Core rev: 682f223cf2e2dabe8cf60634b6779bb2d5e359bd) Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libc-package.bbclass: Use with to manage filehandle in do_spit_gconvsOla x Nilsson2019-10-231-8/+7
| | | | | | | | | | Tweak the write loop slightly to avoid dict lookups that can easily be done in the for loop. (From OE-Core rev: 35c65b7336c52c19810e3e9e87a36a8636ac4120) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* devtool-source.bbclass: Use with to manage file handle lifetimeOla x Nilsson2019-10-231-5/+3
| | | | | | | | | Replace copy-and-if with a filtering list comprehension. (From OE-Core rev: eb763856be8da854d37c7d4b8e8d645ab1d3fa06) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* package.bbclass: Use with to manage file handle lifetimesOla x Nilsson2019-10-231-42/+34
| | | | | | | (From OE-Core rev: e90978056c4b49e138b3d422939bf995829ec3b0) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* report-error.bbclass: Use with to control file handle lifetimeOla x Nilsson2019-10-231-6/+2
| | | | | | | (From OE-Core rev: ab108dfc690fb95b66f1c6243ff165f0849fa2b1) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lib/oe/package_manager: Use with to control file handle lifetimeOla x Nilsson2019-10-231-4/+4
| | | | | | | (From OE-Core rev: e3e86d6683e305865c9fd171c6081aec037d9870) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lib/oe/packagedata: Use with to control file handle lifetimeOla x Nilsson2019-10-231-3/+2
| | | | | | | (From OE-Core rev: 28b3635b7f40b627a9d6294a78589c78f0c682c8) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oe.types.path: Use with to control file handle lifetimeOla x Nilsson2019-10-231-2/+2
| | | | | | | (From OE-Core rev: b6e7fee68d018e5f148a7a02cf110bc210022a72) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest/recipetool: Use with to control file handle lifetimeOla x Nilsson2019-10-231-1/+3
| | | | | | | (From OE-Core rev: 890fbd77315474fbd582f8bbeb26925c6a42d8d4) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* llvm: add missing Upstream-Status tagsRoss Burton2019-10-232-0/+6
| | | | | | | (From OE-Core rev: 85d9348272c4e6d59977a514338f29fe5156eb2c) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xorgproto: upgrade to 2019.2Ross Burton2019-10-231-2/+2
| | | | | | | (From OE-Core rev: e4d3f842194ea1ff584ae4fe8ad211dd3e706e6c) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libx11: upgrade to 1.6.9Ross Burton2019-10-234-96/+7
| | | | | | | (From OE-Core rev: a4834fd1e63b825870b6351bedc203c20abb5ead) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxvmc:upgrade 1.0.11 -> 1.0.12Zang Ruochen2019-10-231-2/+2
| | | | | | | | (From OE-Core rev: 5cf224a701dbc3d779099aab55013c66fe587eb9) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xorgproto: fix summaryRoss Burton2019-10-231-1/+1
| | | | | | | (From OE-Core rev: 7346e6d4f584439ed1dc9d228b8bd015da8a6668) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dbus: update dbus-1.init to reflect new PID fileTom Benn2019-10-231-2/+2
| | | | | | | | | | The PID file referenced in dbus-1.init script was out of date and no longer existed. This meant that dbus could not be restarted via init.d without force removing the old PID file. (From OE-Core rev: 2ed6f06f30cb54b9c70f1a92d93c920ec4d01ffe) Signed-off-by: fridgecow <fridgecow@fb.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgcrypt: fix CVE-2019-12904Yi Zhao2019-10-234-0/+603
| | | | | | | | | | | | | | | | | | | | | In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-12904 Patches from: https://github.com/gpg/libgcrypt/commit/1374254c2904ab5b18ba4a890856824a102d4705 https://github.com/gpg/libgcrypt/commit/daedbbb5541cd8ecda1459d3b843ea4d92788762 https://github.com/gpg/libgcrypt/commit/a4c561aab1014c3630bc88faf6f5246fee16b020 (From OE-Core rev: 37e390ff05b6a4509019db358ed496731d80cc51) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python: Fix CVE-2019-10160Changqing Li2019-10-232-0/+82
| | | | | | | | (From OE-Core rev: b4240b585d7fcac2fdbf33a8e72d48cb732eb696) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>