linux/meta-openembedded.git/meta-oe, branch thud

polkit: Fix CVE-2018-19788

2019-10-05T16:01:00+00:00

Signed-off-by: Dan Tran Signed-off-by: Armin Kuster

mariadb: update SRC_URI, as 5.5.64 has moved to archive

2019-10-05T16:00:26+00:00

The old URL now gives 404 Not Found Signed-off-by: Denys Dmytriyenko Signed-off-by: Armin Kuster

postgres: update to 10.10

2019-09-05T00:34:11+00:00

Source: postgres.org MR: 99749, 99235, 98775, 99326 Type: Security Fix Disposition: Backport from postgress.org ChangeID: aa72ce0ba009e6544ee0ae57a042aeb99c339d06 Description: LIC_CHK_SUM update do to year updates drop two patches included in update. Bug fix only updates. 10.10 CVE-2019-10211 CVE-2019-10210 CVE-2019-10208 10.9 CVE-2019-10164 10.8 CVE-2019-10130 CVE-2019-10128 10.6 CVE-2019-10127 CVE-2018-16850 Signed-off-by: Armin Kuster

libedit: Add native and nativesdk to BBCLASSEXTEND

2019-09-03T04:34:25+00:00

To keep support of meta-clang support on thud branch. It depends on libedit native Signed-off-by: Maxime Roussin-Bélanger Signed-off-by: Armin Kuster

lua: Security fix for CVE-2019-6706

2019-09-03T02:54:39+00:00

Source: lua.org MR: 97553 Type: Security Fix Disposition: Backport from http://lua.2524044.n2.nabble.com/CVE-2019-6706-use-after-free-in-lua-upvaluejoin-function-tc7685575.html ChangeID: c939b7edcb54274ab0aeebcb7e3dc9f17cc09c2d Description: Affects < 5.3.5 Fixes: CVE-2019-6706 Signed-off-by: Armin Kuster

ccid: fix SRC_URI

2019-05-26T16:09:32+00:00

* alioth.debian.org isn't available anymore * master already has this (was part of the upgrade to newer version) Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

mariadb: update to 5.5.64

2019-05-25T20:12:48+00:00

Bug fix only updates: https://mariadb.com/kb/en/library/mariadb-5564-release-notes/ 5.5.64; CVE-2019-2614 CVE-2019-2627 5.5.63; CVE-2019-2529 Signed-off-by: Armin Kuster

cpupower: remove LIC_FILES_CHKSUM

2019-05-21T04:01:55+00:00

cpupower is a 'special' recipe since it does "inherit kernelsrc" , which essentially means that it doesn't have its own sources, but reuse the kernel source tree, from virtual/kernel recipe. As such, checking the license file in cpupower recipe does not seem relevant, since it does not fetch anything (kernelsrc has "deltask do_fetch") and the fetching is deferred to the virtual/kernel recipe. so we are basically checking the COPYING file twice. If there was any license issue, it would have been caught by virtual/kernel recipe already. Hence we remove LIC_FILES_CHKSUM like it is done for perf recipe in OE-core in meta/recipes-kernel/perf/perf.bb. It has the nice side effect that BSP layers can use different kernel versions without worrying about any LICENSE checksum changes in between kernel versions. Reported-by: Daniel Díaz Signed-off-by: Nicolas Dechesne Signed-off-by: Khem Raj (cherry picked from commit 7142f09407b81c2221bbf1c5078641ab4bc63ee9) Signed-off-by: Armin Kuster

vim: improve reproducibility

2019-02-05T06:09:31+00:00

Clear all_cflags, all_lflags, compiled_user and compiled_sys to avoid introducing build info to improve reproducibility as below: WARNING: vim-8.1.0347-r0 do_package_qa: QA Issue: File /work/core2-64-wrs-linux/vim/8.1.0347-r0/packages-split/vim/usr/bin/vim.vim in package contained reference to tmpdir [buildpaths] Signed-off-by: Mingli Yu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

libgit2: Fix install for multilib

2019-02-05T06:07:30+00:00

| ERROR: libgit2-0.27.4-r0 do_package: QA Issue: libgit2: Files/directories were installed but not shipped in any package: | /usr/lib/libgit2.so.0.27.5 | /usr/lib/libgit2.so.27 | /usr/lib/libgit2.so | /usr/lib/pkgconfig | /usr/lib/pkgconfig/libgit2.pc | Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. + reduce 8 spaces by 4 Signed-off-by: Andreas Müller Signed-off-by: Khem Raj Signed-off-by: Armin Kuster