summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
* apt: upgrade 2.2.2 -> 2.2.3Alexander Kanavin2021-05-253-3/+3
| | | | | | | (From OE-Core rev: 78fb660b67488bdd7e29ca606c22d0a06c5a309f) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: update 2.68.1 -> 2.68.2Alexander Kanavin2021-05-252-4/+4
| | | | | | | (From OE-Core rev: 19b459c60f40d0fa6b1d6d439346b846b11a60fd) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* webkitgtk: update 2.32.0 -> 2.32.1Alexander Kanavin2021-05-255-265/+8
| | | | | | | | | | | | Drop 49a19c49c6de8af74e521f36cb43e6c1ec2e391c.patch (backport) 0001-Fix-build-with-musl.patch (problem fixed upstream). (From OE-Core rev: b824f728c9f78c9c5777987a17bfd794c60ad0ec) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgpg-error: update 1.41 -> 1.42Alexander Kanavin2021-05-254-58/+130
| | | | | | | (From OE-Core rev: 9d08ba366260a161c34b81ad6d9e52fe970e83d3) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vulkan-samples: update to latest revisionAlexander Kanavin2021-05-251-1/+1
| | | | | | | (From OE-Core rev: 482c3509bccfde031100c60b641bcada659c981a) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mesa: update 21.0.3 -> 21.1.1Alexander Kanavin2021-05-254-11/+12
| | | | | | | | | License-Update: typo fix (From OE-Core rev: 2b91620cdb2047fd3df8e951a80142b67af85f26) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* igt-gpu-tools: upgrade 1.25 -> 1.26Alexander Kanavin2021-05-253-85/+3
| | | | | | | | | Drop patches merged upstream. (From OE-Core rev: 8f97315e2fbec7308b77d5b53077014bbd973c53) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gsettings-desktop-schemas: upgrade 3.38.0 -> 40.0Alexander Kanavin2021-05-251-1/+1
| | | | | | | (From OE-Core rev: 0e8fcd88678a073a51fb386117f946a0b4a56ee5) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnomebase: trim the SRC_URI directory from the backAlexander Kanavin2021-05-251-1/+2
| | | | | | | | | | Rather than take the first two components, drop the last one at the end. This makes it compatible with both old and new gnome version schemes. (From OE-Core rev: fa8950d0cf6174ce517275fe44df9e4c0788d5f0) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at: upgrade 3.2.1 -> 3.2.2Alexander Kanavin2021-05-251-1/+2
| | | | | | | | | | Drop a script in /usr/share as purpose is unclear (nothing references it), and it pulls in bash without need. (From OE-Core rev: 19b259d421aa878047104b92141c4d67963fc4e0) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-smartypants: fix upstream version checkAlexander Kanavin2021-05-251-0/+1
| | | | | | | | | Upstream has never published the 2.0.1 tarball. (From OE-Core rev: 00f3ebbab50182ad5b948f266480cf30f9eb1d33) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mmc-utils: update to latest revisionAlexander Kanavin2021-05-252-36/+2
| | | | | | | | | Drop patch as upstream has fixed the issue. (From OE-Core rev: 656894bc388bc5c65e2b7cc4a34642bf17db89bf) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnu-config: update to latest revisionAlexander Kanavin2021-05-251-2/+2
| | | | | | | (From OE-Core rev: ae9d04e9bb517fb66ad84d09269aea2c59ae8ed8) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-conf: do not version in lockstep with systemdAlexander Kanavin2021-05-251-0/+2
| | | | | | | | | | This is not needed as systemd-conf only packages standalone config files. (From OE-Core rev: 02bebaaf927e2cf5326bcae1de10cd4a82fd9495) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Fix 248.3 on muslKhem Raj2021-05-253-102/+40
| | | | | | | (From OE-Core rev: 7a6009a8a9eee36724672610569f1db08615cf50) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: update 247.6 -> 248.3Alexander Kanavin2021-05-2532-951/+388
| | | | | | | | | | | | | | | | | | | Drop backports: 48fff0a2af3f62acd446ebec8081b039b72caad8.patch 7c5fd25119a495009ea62f79e5daec34cc464628.patch 0001-analyze-resolve-executable-path-if-it-is-relative.patch 0001-analyze-resolve-executable-path-if-it-is-relative.patch Drop 0027-proc-dont-trigger-mount-error-with-invalid-options-o.patch as difficult to rebase; please resend if you feel strongly that it is needed. Rebase the big pile of musl patches. (From OE-Core rev: e8dd5a36bf2f1e645fb2ff15eb3b5e97c04776e6) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xxhash: backport patch to fix special char problemChen Qi2021-05-252-1/+58
| | | | | | | | | | | | | | | | When building nativesdk-xxhash, we get error like below. Makefile:422: *** configured libdir (/opt/poky/3.3+snapshot/sysroots/x86_64-pokysdk-linux/usr/lib) is outside of exec_prefix (/opt/poky/3.3+snapshot/sysroots/x86_64-pokysdk-linux/usr), can't generate pkg-config file. Stop. This is because we have '+' in the path. Backport a patch to fix this problem. (From OE-Core rev: 0f328cd36fe10e0d1d865ada45ca4f118007956c) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* unfs3: correct configure optionChangqing Li2021-05-251-1/+1
| | | | | | | | | | | | | | | | | | | | | On some new distro like ubuntu21.04, unfs3-native compile failed with error: undefined reference to `xdr_uint32', since new distro has new glibc. >From glibc 2.27 rpc support is dropped, so unfs3 need to link to libtirpc. Here is defination of ac_link: ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' Depended library should be added into LIBS, not LDFLAGS, otherwise, gcc may not load the lib since it is before conftest.$ac_ext during configure. Finally, it results in compile failed. (From OE-Core rev: 27867862c1fee6c0e649286500fa1ab015d57faf) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Update to latest 2.33 branchKhem Raj2021-05-257-466/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drop backported patches Add CVE-2021-27645 to CVE_CHECK_WHITELIST and drop the patch as its also upstreamed Changes in the version bump are * 3f5080aedd nptl: Do not build nptl/tst-pthread-gdb-attach as PIE * 36783141cf nptl: Check for compatible GDB in nptl/tst-pthread-gdb-attach * ea299b62e8 nptl_db: Support different libpthread/ld.so load orders (bug 27744) * 162df872f0 x86: tst-cpu-features-supports.c: Update AMX check * 12ff80b312 Remove PR_TAGGED_ADDR_ENABLE from sys/prctl.h * 1bf38e7260 Fix SXID_ERASE behavior in setuid programs (BZ #27471) * a7b8e8ec9b Enhance setuid-tunables test * ee16c81063 tst-env-setuid: Use support_capture_subprogram_self_sgid * 267e174f19 support: Add capability to fork an sgid child * 249c486ce8 support: Pass environ to child process * 45b2c57d34 support: Typo and formatting fixes * e07abf59b2 tunables: Fix comparison of tunable values * 3e9ca60a58 linux: always update select timeout (BZ #27706) * 8380ca5833 linux: Normalize and return timeout on select (BZ #27651) * 85e4dc415a libsupport: Add support_select_normalizes_timeout * b5b4aa62c1 libsupport: Add support_select_modifies_timeout * 3d525dd639 misc: Fix tst-select timeout handling (BZ#27648) * 830674605f tst: Provide test for select * e78ea9bd26 Update Nios II libm-test-ulps. * 98bb18f52a malloc: Fix a realloc crash with heap tagging [BZ 27468] * fc4ecce85b S390: Also check vector support in memmove ifunc-selector [BZ #27511] * db32fc27e7 test-container: Always copy test-specific support files [BZ #27537] * 79c6be6a0a nptl: Remove private futex optimization [BZ #27304] * f90d6b0484 pthread_once hangs when init routine throws an exception [BZ #18435] * dd8023c2ac elf: ld.so --help calls _dl_init_paths without a main map [BZ #27577] * ea5a537e87 elf: Always set l in _dl_init_paths (bug 23462) * 64f6c287ad x86: Handle _SC_LEVEL1_ICACHE_LINESIZE [BZ #27444] * 32b9280f1d io: Return EBAFD for negative file descriptor on fstat (BZ #27559) * a151f2e05a nscd: Fix double free in netgroupcache [BZ #27462] * ee9f98d9ca x86: Set minimum x86-64 level marker [BZ #27318] * 3e880d7337 nss: Re-enable NSS module loading after chroot [BZ #27389] * 71b2463f61 x86: Add CPU-specific diagnostics to ld.so --list-diagnostics * a1eb3915e7 x86: Automate generation of PREFERRED_FEATURE_INDEX_1 bitfield * 33dc1dd602 ld.so: Implement the --list-diagnostics option * 8d4241b897 string: Work around GCC PR 98512 in rawmemchr * 6efa2d44c8 S390: Add new hwcap values. * c5e3545897 tunables: Disallow negative values for some tunables * 905fdc7071 x86: Use SIZE_MAX instead of (long int)-1 for tunable range value * 15afd6b8d8 tunables: Simplify TUNABLE_SET interface * 17f0ff0978 nsswitch: return result when nss database is locked [BZ #27343] (From OE-Core rev: c6fb9b80ecb0a4e7970157774ce9add12e9ef3ea) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rt-tests: update SRCREVChen Qi2021-05-251-2/+2
| | | | | | | | | | | | | | | The commit '6af88067da16c6e69243b376c3b6454ec694460b' is not available in the repo any more. I think it's due to some mis-operation of the upstream repo in the past few hours. Update the SRCREV to use the latest commit on unstable/devel/latest branch. Also, set PV explicitly and remove the obsolete comment. (From OE-Core rev: 42f1c751bbaa2cc0a0abe874878b8bbbda250d02) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gdk-pixbuf: update a patch statusAlexander Kanavin2021-05-251-1/+1
| | | | | | | (From OE-Core rev: 6b4a5608dfacc1e82cd19bfa71ae9013673c64c1) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bison: Make libtextstyle and libreadline optionalDaniel McGregor2021-05-251-2/+17
| | | | | | | | | | | | Bison opportunistically enables libtextstyle and libreadline support if they're installed on the build host. Since textstyle and readline aren't part of uninative avoid host contamination by making their support configurable and disabled by default in the native case. (From OE-Core rev: 286e60702aa1d8448efc703fa40735e079e6a027) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* uboot-sign/kernel-fitimage: split generate_rsa_keys taskMing Liu2021-05-252-32/+34
| | | | | | | | | | | | | Currently generate_rsa_keys tasks are being executed parallelly in kernel and uboot's task list, and both of them are calling openssl to generate rsa keys in same path, this can lead to race condition. Let's split it to kernel_generate_rsa_keys and uboot_generate_rsa_keys. (From OE-Core rev: 36814f5467c9abd84aeb05916b4fd49f766f4f9f) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-fitimage.bbclass: drop unit addresses from bootscr sectionsMing Liu2021-05-251-4/+4
| | | | | | | | | | | | | | | In commit 6047be9f: [ kernel-fitimage: Don't use unit addresses on FIT ] It had dropped unit addresses from FIT image but missed on bootscr part. Drop unit addresses from bootscr sections in this patch. (From OE-Core rev: 0ef3a5e2a6d4507c8d9bc6143f9aa65e6cdb1ed7) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc-cross-canadian: add symlinks for ld.bfd and ld.goldSamuli Piippo2021-05-251-1/+1
| | | | | | | | | | | | When -fuse-ld gcc option is used, missing ld.bfd or ld.gold symlinks can lead to linker error: collect2: fatal error: cannot find 'ld' (From OE-Core rev: 9ec1cd0a1e4cc2740be37585231279adf91c47d7) Signed-off-by: Samuli Piippo <samuli.piippo@qt.io> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-framework:rootfs: fix wrong indentionsMing Liu2021-05-221-1/+1
| | | | | | | (From OE-Core rev: cd4d76f43c6ead9f32dece1faa9c9c5da895d9cd) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-fitimage.bbclass: fix a wrong conditional checkMing Liu2021-05-221-1/+1
| | | | | | | | | | It should check if "${UBOOT_SIGN_ENABLE}" equals to "1" instead of checking if "${UBOOT_SIGN_ENABLE}" is not empty since it could be "0". (From OE-Core rev: 900949af7fe357ee66065ba150b0b1914e8ca581) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Disable problematic tests causing autobuilder hangsRichard Purdie2021-05-222-0/+46
| | | | | | | | | | We've seen three hangs in cgroup_xattr and two in proc01 so far. The new plan is just to disable any tests seen to hang. I've had enough of these causing problems on our testing infrastructure. (From OE-Core rev: 0cc8d4e27e5d3024e35ad877622f32f9bb4819a4) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: Update to 2.9.12Tony Tascioglu2021-05-218-253/+80
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drop CVE patches which are fixed by the new upstream version. Modify conflicting patches to apply to the new versions: libxml2/libxml-m4-use-pkgconfig.patch libxml2/0001-Make-ptest-run-the-python-tests-if-python-is-enabled.patch Drop fix-python39, which is merged upstream. Removed hunk for tstLastError.py from libxml2/0001-Make-ptest-run-the-python-tests-if-python-is-enabled.patch since it has been fixed upstream by: 8c3e52e: Updated python/tests/tstLastError.py libxml2.registerErrorHandler(None,None): None is not acceptable as first argument failUnlessEqual replaced by assertEqual The checksums for the licence file changed because a typo was fixed across the files. The licence remains the same. The obsolete MD5 checksums for the tar files have been dropped in favor of SHA256. The new release also adds fuzz tests, which are removed from the makefile to allow the ptests to run. Fuzz testing is done upstream and there is no need to run them as part of ptests which are intended for functionality testing. (From OE-Core rev: c7c429d05ca51b0404f09981f6c9bcad7dc33222) Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gdk-pixbuf: fix nativesdk do_configure failedhongxu2021-05-211-0/+4
| | | | | | | | | | | | | | | Since commit [92fc28498f gdk-pixbuf: rewrite the cross-build support for tests] applied, it add meson option -Duse_prebuilt_tools=true to taget. Add the same option for nativesdk to fix do_configure failure |../gdk-pixbuf-2.42.6/thumbnailer/meson.build:32:0: ERROR: Arrays do not have a method called 'full_path' (From OE-Core rev: 4781dad55cc0449a3dc52914e2b6f9eace91158e) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xorgproto: Upgrade to 2021.4 releaseKhem Raj2021-05-211-1/+1
| | | | | | | (From OE-Core rev: 46a223866fcedafc63543a052721d19560d1792b) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxfixes: Update to 6.0.0 releaseKhem Raj2021-05-211-4/+1
| | | | | | | (From OE-Core rev: 71b53b096e66da4923cc4a79c429f3d5d3469d84) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rxvt-unicode: upgrade 9.22 -> 9.26zhengruoqin2021-05-212-33/+1
| | | | | | | | | | 0001-libev-remove-deprecated-throw-specification.patch removed since it is included in 9.26 (From OE-Core rev: 62342c91c7aaa27cbc83d9f9421205d879b32d3a) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-sortedcontainers: upgrade 2.3.0 -> 2.4.0zhengruoqin2021-05-211-1/+1
| | | | | | | (From OE-Core rev: c8c4e324eccc816432381d61b94c6ec13e25d634) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-importlib-metadata: upgrade 3.10.1 -> 4.0.1zhengruoqin2021-05-211-1/+1
| | | | | | | (From OE-Core rev: 4dc1d078ea224659592b9c072701ab965718853c) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libtasn1: upgrade 4.16.0 -> 4.17.0wangmy2021-05-211-3/+3
| | | | | | | | | file LICENSE renamed to COPYING. (From OE-Core rev: 52e30a0344e727527cc3f498aa09bbbdfa1c2f47) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libidn2: upgrade 2.3.0 -> 2.3.1wangmy2021-05-211-4/+4
| | | | | | | | | -License-Update: Copyright year updated to 2021. (From OE-Core rev: 25646e0608610a88be49de8d50b8965ddea8268a) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libdrm: upgrade 2.4.105 -> 2.4.106wangmy2021-05-211-1/+1
| | | | | | | (From OE-Core rev: a7dfd075e5a809be3728d4e0041caf23cf3c5258) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* distcc: upgrade 3.3.5 -> 3.4wangmy2021-05-211-1/+1
| | | | | | | (From OE-Core rev: 572d446cca38d564e462ccc5d8f7bcf1648433b0) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* baremetal-image: Fix post process command rootfs_update_timestampAlejandro Hernandez Samaniego2021-05-211-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | When running: execute_pre_post_process(d, d.getVar(ROOTFS_POSTPROCESS_COMMAND)) rootfs_update_timestamp is run, which assumes that rootfs/${sysconfdir} is already created (usually done through the do_rootfs task on linux). This causes the build to fail if ${sysconfdir} does not exist. This may be overlooked if debug-tweaks is enabled since some other commands are added, one of which creates the required path (see postinst_enable_logging). See [1] for more info: [1] https://github.com/aehs29/meta-freertos/issues/4 (From OE-Core rev: 04791272e0cc104450cae6ab89b9d8e866457a0b) Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sstatesig.py: make it fatal error when sstate manifest isn't foundMartin Jansa2021-05-211-1/+1
| | | | | | | | | | * all known issues in this area were fixed, make it fatal that it cannot be overlooked if someone triggers this issue again (From OE-Core rev: 64b89f3c8fc31842256c482a3039d90d3f12c1cc) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Fix __NR_fstatat syscall name for riscvKhem Raj2021-05-212-0/+33
| | | | | | | (From OE-Core rev: 3bd71e31ea535c5ad480c2d97110ff0b4b290555) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sstate: Ignore sstate signing keyDaniel McGregor2021-05-211-0/+2
| | | | | | | | | | What key is used to sign sstate artefacts should not affect the hash of the object, otherwise everyone would need to use the same signing key. (From OE-Core rev: 57cc9429dba4f9bd23127633dbc1f57dc2d5dd16) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lib/oe/gpg_sign.py: Fix gpg verificationDaniel McGregor2021-05-211-1/+1
| | | | | | | | | | | A stray space made it into the command for verifying gpg signatures. This caused verification to fail, at least on my host. Removing the space makes it work as expected. (From OE-Core rev: af1d948822cbe6ac7ede9cb4e881db8dc780e308) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* u-boot: upgrade 2021.01 -> 2021.04Alexander Kanavin2021-05-2110-1066/+1
| | | | | | | (From OE-Core rev: 9da492e576b2d7190130224c486ba22675dce416) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-extra-exclusions.inc: Clean up merged CPE updatesRichard Purdie2021-05-211-15/+0
| | | | | | (From OE-Core rev: d2ba6d58e77430cceeca9db61fdb06882a92e1e7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* grub: Exclude CVE-2019-14865 from cve-checkRichard Purdie2021-05-211-0/+3
| | | | | | | | The CVE only applies to RHEL. (From OE-Core rev: 8cfc3ebe50facb7e34e778f3e264b26cfae20a04) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-extra-exclusions: Fix typosRichard Purdie2021-05-201-4/+4
| | | | | | (From OE-Core rev: d4d4644e7c127e8b88b180635124e8afc905c69e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm: Drop CVE exclusion as database fixed to handleRichard Purdie2021-05-201-4/+0
| | | | | | | | Didn't think this might make it in but it has, we can drop the exclusion. (From OE-Core rev: 64456aed7514d611a242c210375c01d7f4048de2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-extra-exclusions.inc: add exclusion list for intractable CVE'sRichard Purdie2021-05-201-0/+88
| | | | | | | | | | | | | | | | | | | | | | | | | The preferred methods for CVE resolution are: 1. Version upgrades where possible 2. Patches where not possible 3. Database updates where version info is incorrect 4. Exclusion from checking where it is determined that the CVE does not apply to our environment In some cases none of these methods are possible. For example the CVE may be decades old with no apparent resolution, and with broken links that make further research impractical. Some CVEs are vauge with no specific action the project can take too. This patch creates a mechanism for users to remove this type of CVE from the cve-check results via an optional include file. Based on an initial patch from Steve Sakoman <steve@sakoman.com> but extended heavily by RP. (From OE-Core rev: cf282ae03db3f09df42dcd110d7086c2d854642c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>