linux/meta-openembedded.git/meta-oe, branch langdale-next

redis: upgrade 7.0.9 -> 7.0.10

2023-04-22T19:15:32+00:00

Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (CVE-2023-28425) Specially crafted MSETNX command can lead to assertion and denial-of-service Bug Fixes ========= * Large blocks of replica client output buffer may lead to psync loops and unnecessary memory usage (#11666) * Fix CLIENT REPLY OFF|SKIP to not silence push notifications (#11875) * Trim excessive memory usage in stream nodes when exceeding `stream-node-max-bytes` (#11885) * Fix module RM_Call commands failing with OOM when maxmemory is changed to zero (#11319) Signed-off-by: Changqing Li Signed-off-by: Khem Raj (cherry picked from commit b589edf930977dbd75418e05d618a8047982dd59) Signed-off-by: Armin Kuster

lirc: fix do_install with multilib

2023-04-18T10:45:53+00:00

* use ${S} instead of ${WORKDIR}/${PN}-${PV} and ${BP} instead of ${PN}-${PV} to fix build with multilib, where PN is lib32-lirc, but S is correctly set as ${WORKDIR}/${BP} and do_install fails with: mkdir: cannot create directory ‘lib32-lirc/0.10.1-r0/lib32-lirc-0.10.1/python-pkg/dist/’: No such file or directory Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

lvgl,lv-lib-png,lv-drivers: fix installed-vs-shipped QA issue with multilib

2023-04-18T10:45:49+00:00

* with multilib BASELIB is just "lib" while baselib is "lib64" and libdir is "/usr/lib64". * fixes: ERROR: QA Issue: lvgl: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/liblvgl.a Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. lvgl: 2 installed and not shipped files. [installed-vs-shipped] * lowercase baselib should work for ppc64 as well (I hope) # $baselib [3 operations] # set oe-core/meta/conf/bitbake.conf:10 # "${BASELIB}" # set oe-core/meta/conf/bitbake.conf:11 # [vardepvalue] "${baselib}" # set oe-core/meta/conf/multilib.conf:2 # "${@d.getVar('BASE_LIB:tune-' + (d.getVar('DEFAULTTUNE') or 'INVALID')) or d.getVar('BASELIB')}" # pre-expansion value: # "${@d.getVar('BASE_LIB:tune-' + (d.getVar('DEFAULTTUNE') or 'INVALID')) or d.getVar('BASELIB')}" baselib="lib64" * simplify destsuffix/S setting * I was surprised that ${WORKDIR}/${PN}-${PV} works in multilib build but then I've noticed that it's because destsuffix is set to S which is a bit uncommon, so drop that and use default "git" * use ${STAGING_INCDIR} instead of ${RECIPE_SYSROOT}/${includedir} Signed-off-by: Martin Jansa Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

pahole: respect libdir

2023-04-18T10:45:45+00:00

* use the same expression as cmake.bbclass is using: CMAKE_INSTALL_LIBDIR:PATH=${@os.path.relpath(d.getVar('libdir'), d.getVar('prefix') + '/')} but ${baselib} should work here as well Signed-off-by: Martin Jansa Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

mongodb: fix chown user for multilib builds

2023-04-18T10:45:41+00:00

* the user is named mongodb (BPN) and in multilib builds this fails with: chown: invalid user: 'lib32-mongodb:lib32-mongodb' Signed-off-by: Martin Jansa Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

openwsman: Change download branch from master to main.

2023-04-18T10:45:30+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

zsh: fix installed-vs-shipped with multilib

2023-04-13T12:20:06+00:00

* fixes: lib32-zsh-5.8: lib32-zsh: Files/directories were installed but not shipped in any package: /usr/share/lib32-zsh /usr/share/lib32-zsh/5.8 /usr/share/lib32-zsh/site-functions /usr/share/lib32-zsh/5.8/functions /usr/share/lib32-zsh/5.8/functions/_selinux_users ... 1000+ lines ... /usr/share/lib32-zsh/5.8/functions/VCS_INFO_bydir_detect Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. lib32-zsh: 1116 installed and not shipped files. [installed-vs-shipped] * they will clash if someone is trying to install both zsh and lib32-zsh, but it's not very likely as nobody sane was building lib32-zsh with 1000+ line warning regularly Signed-off-by: Martin Jansa Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

c-ares: fix CVE-2022-4904

2023-03-25T13:07:10+00:00

Backport based on https://github.com/c-ares/c-ares/issues/496 Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

nodejs: Upgrade 16.19.0 -> 16.19.1

2023-03-12T15:51:57+00:00

The following CVEs fixed in this version: CVE-2023-23918 CVE-2023-23919 CVE-2023-23920 CVE-2023-23936 CVE-2023-24807 Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

redis: Upgrade 7.x to 7.0.9

2023-03-07T12:03:54+00:00

Signed-off-by: Khem Raj (cherry picked from commit 6f351de04e2eb900dcddb866013dd27923dc150a) Signed-off-by: Armin Kuster