linux/meta-openembedded.git, branch zeus-next

tremor: update SRC_URI as project moved to gitlab

2020-06-22T18:14:55+00:00

It appears Xiph.Org is now on gitlab https://gitlab.xiph.org/xiph Signed-off-by: Armin Kuster Signed-off-by: Khem Raj (cherry picked from commit cc6e59fdff71e47ef5b9b40aab3bcd9438960ea4) Signed-off-by: Rahul Kumar Signed-off-by: Armin Kuster

ipmitool: fix CVE-2020-5208

2020-03-22T02:47:04+00:00

Fix CVE-2020-5208 Signed-off-by: Wenlin Kang Signed-off-by: Armin Kuster

opensc: CVE-2019-19479 CVE-2019-19480

2020-03-22T02:46:49+00:00

Security Advisory References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19479 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19480 Signed-off-by: Wang Mingyu Signed-off-by: Armin Kuster

libssh2: CVE-2019-17498.patch

2020-03-22T02:46:34+00:00

Security Advisory References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17498 Signed-off-by: Wang Mingyu Signed-off-by: Armin Kuster

python-urllib3/python3-urllib3: fix CVE-2020-7212

2020-03-22T02:46:18+00:00

Optimize _encode_invalid_chars for a denial of service (CPU consumption) Signed-off-by: Haiqing Bai Signed-off-by: Armin Kuster

gd: fix CVE-2017-6363

2020-03-22T02:44:00+00:00

Backport the CVE patch from the upstream to fix the heap-based buffer over-read in tiffWriter. Signed-off-by: Haiqing Bai Signed-off-by: Armin Kuster

sanlock: Replace cp -a with cp -R --no-dereference

2020-03-15T20:30:34+00:00

helps to stop leaking builder's UID into sstate cache Fixes Exception: KeyError: 'getpwuid(): uid not found: 6000' Signed-off-by: Khem Raj (cherry picked from commit 80d4d7538a85123603eea3d87542c1c0433febb7) [ak: fixes build issue Exception: KeyError: 'getpwuid(): uid not found: 1000'] Signed-off-by: Armin Kuster

s3c24xx-gpio, s3c64xx-gpio, sjf2410-linux-native, usbpath, wmiconfig: use git fetcher instead of svn fetcher

2020-03-15T20:30:34+00:00

* svn checkouts from http://svn.openmoko.org/ are now redirected to github: svn --non-interactive --trust-server-cert co --no-auth-cache --ignore-externals -r 4949 http://svn.openmoko.org/trunk/src/target/gpio@4949 gpio Redirecting to URL 'https://github.com/openmoko/openmoko-svn': A gpio/branches A gpio/branches/oe A gpio/branches/oe/pre-20070305 A gpio/branches/oe/pre-20070305/README A gpio/branches/oe/pre-20070305/classes A gpio/branches/oe/pre-20070305/classes/autotools.bbclass A gpio/branches/oe/pre-20070305/classes/base.bbclass A gpio/branches/oe/pre-20070305/classes/openmoko-base.bbclass A gpio/branches/oe/pre-20070305/classes/openmoko-panel-plugin.bbclass * unfortunately this is causing the checkout to start from trunk, not the subdirectory specified in the URL (e.g. /trunk/src/target/gpio) and then S variable points to incorrect directory as discussed here: http://lists.openembedded.org/pipermail/openembedded-devel/2020-February/205028.html * use git fetcher directly to remove the dependency on subversion-native * for simplicity use the same SRCREV and PV for all of these, there wasn't any commit in last 8 years (not anyone can expect new commits), I don't expect anyone nowadays actually using these recipes which I've imported from meta-smartphone in 2011 - that's why I will send their removal in follow-up commit. Signed-off-by: Martin Jansa Signed-off-by: Khem Raj (cherry picked from commit 6902dcd2edc3a08f6929e19e9a9c18493883f9d2) [ak: fixes build issue WARNING: s3c24xx-gpio-1.0+svnr4949-r2 do_populate_lic: Could not copy license file /home/build/builds/zeus/tmp-glibc/work/core2-64-oe-linux/s3c24xx-gpio/1.0+svnr4949-r2/gpio/gpio.c to /home/build/builds/zeus/tmp-glibc/work/core2-64-oe-linux/s3c24xx-gpio/1.0+svnr4949-r2/license-destdir/s3c24xx-gpio/gpio.c: [Errno 2] No such file or directory: '/home/build/builds/zeus/tmp-glibc/work/core2-64-oe-linux/s3c24xx-gpio/1.0+svnr4949-r2/gpio/gpio.c' ERROR: s3c24xx-gpio-1.0+svnr4949-r2 do_populate_lic: QA Issue: s3c24xx-gpio: LIC_FILES_CHKSUM points to an invalid file: /home/build/builds/zeus/tmp-glibc/work/core2-64-oe-linux/s3c24xx-gpio/1.0+svnr4949-r2/gpio/gpio.c [license-checksum] ] Signed-off-by: Armin Kuster

opencv: abort configure if we need to download

2020-03-15T20:30:34+00:00

OpenCV's habit of downloading files during do_configure is bad form (as it becomes impossible to do offline builds), so add an option to error out if a download would be needed. Signed-off-by: Ross Burton Signed-off-by: Khem Raj Signed-off-by: Yeoh Ee Peng Signed-off-by: Armin Kuster

opencv: PACKAGECONFIG for G-API, use system ADE

2020-03-15T20:30:34+00:00

The Graph API is enabled by default, and if ADE isn't present it will download a copy of the source during do_configure. Add a PACKAGECONFIG for the Graph API, and depend on the ADE that we package. Signed-off-by: Ross Burton Signed-off-by: Khem Raj Signed-off-by: Yeoh Ee Peng Signed-off-by: Armin Kuster