summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* liblockfile: fix do_install failure when ldconfig is not installedChangqing Li2023-03-052-0/+64
| | | | | | | | liblockfile do_install task will fail since syntax error when ldconfig is not installed on the host. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: 7.0.5 -> 7.0.7Changqing Li2023-01-252-10/+12
| | | | | | | | | This upgrade include fix for CVE-2022-3647 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d869383b0f9848a07ab3d7fbb5b7f687dce7744a) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: upgrade 7.0.4 to 7.0.5Changqing Li2023-01-251-1/+1
| | | | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c8d9407eec21e1eb3e34b66cac8d11fe13c6e63e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: 6.2.7 -> 6.2.8Changqing Li2023-01-252-7/+10
| | | | | | | This upgrade include fix for CVE-2022-3647 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: build with USE_SYSTEMD=yes when systemd is enabledZheng Qiu2022-11-192-2/+7
| | | | | | | | | | | | | Compile redis with full systemd support when the chosen init system is systemd. Enabling systemd supervision allows redis to communicate the actual server status (i.e. "Loading dataset", "Waiting for master<->replica sync") to systemd, instead of declaring readiness right after initializing the server process. Signed-off-by: Zheng Qiu <zheng.qiu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* polkit: refresh patchChen Qi2022-10-041-10/+10
| | | | | | Refresh patch to avoid QA issue about patch fuzz. Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
* libcec: fix runtime dependencies for ${PN}-examplesMartin Jansa2022-09-251-0/+3
| | | | | | | | | | | | | | | | | | | | | | * cec-client doesn't link with libcec, but uses LibCecInitialise to dlopen libcec, so do_package cannot add the runtime dependency automatically * fixes: root@rpi4:# cec-client -l libcec.so.6: cannot open shared object file: No such file or directory root@rpi4:# cecc-client -l libcec.so.6: cannot open shared object file: No such file or directory libcec.so.6: cannot open shared object file: No such file or directory libcec/6.0.2-r0 $ objdump -p ./build/src/cec-client/cec-client-6.0.2 | grep NEEDED NEEDED libncurses.so.5 NEEDED libtinfo.so.5 NEEDED libstdc++.so.6 NEEDED libgcc_s.so.1 NEEDED libc.so.6 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* polkit: update patches for musl compilationMarta Rybczynska2022-08-074-63/+96
| | | | | | | | | | | | | | | | | | | | | | | Update the patch to make netgroup support optional to fit the commit merged upstream [1], update the other patch depending on one of the changes. Without this update, a compilation using duktape with musl fails with: | ../../../polkit-0.119/src/polkitbackend/polkitbackendduktapeauthority.c: In function 'js_polkit_user_is_in_netgroup': | ../../../polkit-0.119/src/polkitbackend/polkitbackendduktapeauthority.c:1039:7: warning: implicit declaration of function 'innetgr' [-Wimplicit-function-declaration] | 1039 | if (innetgr (netgroup, | | ^~~~~~~ The main patch has been split in two, to apply the duktape part only when duktape is applied. [1] https://gitlab.freedesktop.org/polkit/polkit/-/commit/b57deee8178190a7ecc75290fa13cf7daabc2c66 Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 271282b1a5579179241748d5f0bdb8d2ea013dd6) {Fixup for kirkstone content; exlude Ducktape chages] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* polkit: Add --shell /bin/nologin to polkitd userAkash Hadke2022-08-071-1/+1
| | | | | | | | | | polkitd user has default access to /bin/sh, add --shell /bin/nologin to remove default access to /bin/sh and avoid login through it. Signed-off-by: Akash Hadke <akash.hadke@kpit.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 7ca63e5454bd7cbdb5ac58f6b5913e3387b64201) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* polkit-group-rule-udisks2: fix override syntax in RDEPENDSYi Zhao2022-08-071-1/+1
| | | | | | | | | RDEPENDS_${PN} -> RDEPENDS:${PN} Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 10b508deacd8ff588b1511d077fcdd708deb653a) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* polkit: add udisks2 ruleVyacheslav Yurkov2022-08-072-0/+41
| | | | | | | | | | The rule allows non-priviledged users from plugdev group to mount/unmount block devices Signed-off-by: Vyacheslav Yurkov <v.yurkov@precitec.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d7ff4a77241fc79fc704a0d9d6b414b52f025531) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: upgrade 7.0.2 -> 7.0.4wangmy2022-07-261-1/+1
| | | | | | | | | | | | | | | | | Changelog: ========== Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: ---------------- (CVE-2022-31144) A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. The problem affects Redis versions 7.0.0 or newer. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d9f8d015a45188c3cf2d6841ea05319032930dbc) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* rsyslog: update 8.2202->8.2206Aryaman Gupta2022-07-211-1/+1
| | | | | | | | | | | | | | | | | | Package changes mainly include performance improvements to tcpsrv/imtcp, bug fixes and additional/updated tests: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog ptest results for qemux86-64 with kvm and increasing filesystem space to 4GB using IMAGE_ROOTFS_EXTRA_SPACE : Version | Passed | Failed | Skipped 8.2202 | 456 | 0 | 5 8.2206 | 465 | 0 | 5 Signed-off-by: Aryaman Gupta <aryaman.gupta@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0f048c4c46fd4b377b7aacc236a23249ae05fdaa) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-oe: ignore patched CVEsDavide Gardenal2022-07-212-0/+8
| | | | | | | | | | | Some old CVEs don't have a vulnerable version range in the NVD database, this causes come mismatch with cve-check. Ignore many CVEs that are picked up by the class but are patched in our products. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit efa12676dd0676fd0aa63457d7ba360fe8a6fae2) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libplist: ignore patched CVEsDavide Gardenal2022-07-211-0/+6
| | | | | | | | | | | CVE-2017-5834, CVE-2017-5835 and CVE-2017-5836 are patched in our version of libplist but they don't have a vulnerable version range in the NVD database, that's why they need to be ignored. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 261465eb6e2bd8f83e6841f8e42e1fb1be6d1499) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: upgrade 7.0-rc3 -> 7.0.2Changqing Li2022-07-181-1/+1
| | | | | | | | This upgrade include CVE fix: CVE-2022-24735 CVE-2022-24736 Signed-off-by: Changqing Li <changqing.li@windriver.com>
* redis: upgrade 6.2.6 -> 6.2.7Changqing Li2022-07-182-7/+9
| | | | | | | | This upgrade include CVE fix: CVE-2022-24735 CVE-2022-24736 Signed-off-by: Changqing Li <changqing.li@windriver.com>
* dlt-daemon: upgrade to commit 6a3bd901d8 to fix CVE-2022-31291Yue Tao2022-07-091-3/+4
| | | | | | | | | | The upstream commit fcb676a79d introduced new option WITH_DLT_ADAPTOR_UDP to select dlt-adaptor-udp.service instread of WITH_DLT_ADAPTOR, so update the PACKAGECONFIG. Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ostree: prevent ostree-native depending on target virtual/kernel to provide ↵Martin Jansa2022-05-231-1/+1
| | | | | | | | | kernel-module-overlay Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c06c5b71eefaa29c5d1b0f3b3cdcfb03663e4d75) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* s-nail: Set VAL_MTAMingli Yu2022-05-172-1/+50
| | | | | | | | | | | | | | | | | | | | Some build server may provide sendmail like /usr/lib/sendmail which may result the VAL_MTA to be /usr/lib/sendmail during do_configure, but the sendmail is actually /usr/sbin/sendmail on the target. Fixes: # echo "invalide address email" | s-nail -s "test mail" -r test@test.com tester@test.com s-nail: Cannot start /usr/lib/sendmail: executable not found (adjust *mta* variable) /home/root/dead.letter 10/234 s-nail: ... message not sent # which sendmail /usr/sbin/sendmail Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f334a009472136b266c4f72612b549846df20c0e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* boinc-client: Make script install not depend on host install pathsKhem Raj2022-05-032-10/+60
| | | | | | | | | | The install target is checking for install paths on build host assuming thats where it will run too, which breaks cross builds. Add a patch to aide the install from recipe. Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit bbc6fa72c378c792bdae35cae9b6ff165ee196c9) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fluentbit: Disable systemd support when systemd distro feature is disabledKhem Raj2022-05-033-4/+5
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f9a935ac8e0129fa91279ec8bff9f8ced93734f2) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hexedit: upgrade 1.5 -> 1.6wangmy2022-05-031-1/+1
| | | | | | | | | | | | | | | | april 2022 - 1.6 - configure script must error-out when (n)curses isn't found - Move SIGWINCH handling from handler to NCURSES - Make configure.ac compliant with autoconf >= 2.70 - Check that malloc did not return NULL - Fix a possible memory leak in findFile() - Prevent division by zero on empty files. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c4d4e192f48e98a0386980baa415218cb496048f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pam-ssh-agent-auth: Use specific versions of BSD licensesKhem Raj2022-05-031-1/+1
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 088e40179871c6528eff5c328c68f061acd77ccb) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* boinc-client: Do not overwrite same file when using usrmergeKhem Raj2022-05-031-1/+2
| | | | | | | | in case usrmerge is enabled, unit file is already in expected location Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b8e97f5b2a11c0d4be9f61821aead402780a4be7) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mozjs: Use vendored icu on ppc/clangKhem Raj2022-05-031-0/+2
| | | | | | | | | This helps compile gjs, external icu is needed with gcc-12 but not with clang Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 78180b6c21638b41a5bab9ed706211304d5f2552) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fluentbit: Fix build with usrmerge distro featureKhem Raj2022-05-032-1/+30
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit ae8e0ae77f74d966d687fef38bc1bccc76268f8f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mozjs-91: Add option to use system ICUKhem Raj2022-04-211-4/+6
| | | | | | | | | | | | ARM needs to use system icu, otherwise build fails with gcc-12 firefox-91.8.0/intl/icu/source/common/stringtriebuilder.cpp:388: more undefined references to `std::type_info::operator==(std::type_info const&) const' follow | collect2: error: ld returned 1 exit status Keep using vendored ICU on mips since this breaks build for gjs introspection code which is run under qemu-user Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mozjs-91: Disable stripKhem Raj2022-04-211-0/+1
| | | | | | OE build takes care of this during packaging anyway Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlt-daemon: Fix build on rv32/rv64Khem Raj2022-04-202-0/+48
| | | | | | This is seen with gcc particularly Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mozjs-91: Upgrade to 91.8.0Khem Raj2022-04-201-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnuplot: inherit pkgconfigPreeti Sachan2022-04-191-1/+1
| | | | | | | | Inherited pkgconfig to fix pngcairo terminal compilation enabled by default with pkgconfig option PACKAGECONFIG[cairo] Signed-off-by: Preeti Sachan <preeti.sachan@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* linuxconsole: Fix makefile issue found with clangKhem Raj2022-04-142-0/+38
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Wang Mingyu <wangmy@fujitsu.com>
* s-nail: upgrade 14.9.23 -> 14.9.24wangmy2022-04-141-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========= - Release tarball might be in --format=pax. - Again honour MTA arguments passed after the "--" command line "option" in non-send-only mode (broken since at least v14.9.12). - support Microsoft IMAP servers. - Fix crash due to crafted emails. - Fix *expandargv*#419=restrict (broken since v14.9.0). - Fix a bug from nail 10.08 as of 2004-06-28 that leads to crashes when some file cannot be loaded. And while here fix one file-close overshoot of mine in since v14.9.16, that would cause panics in debug-enabled code. - deal with argc==0 aka CVE-2021-4034. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pegtl: upgrade 3.2.1 -> 3.2.5wangmy2022-04-141-2/+2
| | | | | | | | | Changelog: ========== Added missing include for fallback demangle() implementations. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pam-plugin-ldapdb: upgrade 1.3 -> 1.3.1wangmy2022-04-142-29/+2
| | | | | | | | 0001-include-stdexcept-for-std-invalid_argument.patch removed since it's included in 1.3.1 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* linuxconsole: upgrade 1.7.0 -> 1.7.1wangmy2022-04-131-1/+1
| | | | | | | | | | | Changelog: ========= * inputattach supports the Gunze protocol * Three missing dependencies were added in the Makefile * An overflow in ffcfstress was fixed Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: upgrade to 7.0-rc3Oleksandr Kravchuk2022-04-131-1/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* icewm:include imlib2-loaders packageKARN JYE LAU2022-04-131-1/+1
| | | | | | | | | icewm 2.0.0 above have use imlib2 as default rendering engine.Update icewm recipe to include the essential packages for icewm to work properly. Signed-off-by: KARN JYE LAU <karn.jye.lau@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* logwatch: upgrade 7.5.3 -> 7.6wangmy2022-04-121-3/+2
| | | | | | | License-Update: Copyright year updated to 2021. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* icewm: upgrade 2.9.0 -> 2.9.6wangmy2022-04-121-1/+1
| | | | | | | | Changelog from 2.9.0 to 2.9.6: https://github.com/ice-wm/icewm/blob/2.9.6/NEWS Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* byacc: upgrade 20211224 -> 20220128wangmy2022-04-111-2/+2
| | | | | | | | | | | | | | | | | | All changes from 20211224 to 20220128 included in https://invisible-island.net/byacc/CHANGES.html License-Update: ---------------- - Add Format, Upstream-Name, Upstream-Contact to byacc. - Add "Copyright: 2001-2021,2022 by Thomas E. Dickey" to all files of byacc. - Copyright of aclocal.m4 and package/debian/* updated to 2022. - Modify Licence to License. - Add "Copyright: 1992-2021 Free Software Foundation, Inc." and "License: GPL-3" to config.guess config.sub Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* haveged: upgrade 1.9.17 -> 1.9.18wangmy2022-04-111-1/+1
| | | | | | | | | | Changelog: ========= Round bits up and target full pool size Specify the right kernel commit in README Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnuplot: Disable libcerf and fix typoKhem Raj2022-04-101-1/+2
| | | | | | | | | We do not carry recipe for libcerf, so disable it explicitly so the native builds are also a bit more deterministic. Fix a typo in knob to disable wxwidgets Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wxwidgets: Fix building without x11Scott Murray2022-04-101-3/+3
| | | | | | | | | | | | | | | Building with wayland and opengl in DISTRO_FEATURES without x11 as well was giving the error: wxwidgets: PACKAGECONFIG[no_gui] Conflict package config 'opengl' set in PACKAGECONFIG. Upon some investigation, it looks like wxwidgets now supports building against Gtk's Wayland support, so we can also enable it if wayland is in DISTRO_FEATURES. For OpenGL, however, wxwidgets seems to have a dependency on libglu, so the DISTRO_FEATURES check has been changed to only enable it by default if both x11 and opengl are configured. Signed-off-by: Scott Murray <scott.murray@konsulko.com>
* libyang: do not inherit binconfig-disabledYi Zhao2022-04-101-2/+1
| | | | | | | | Do not inherit binconfig-disabled as pcre2-config is not required by upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wxwidgets: fix wx-config multilib issueKai Kang2022-04-072-0/+60
| | | | | | | | | | | It sets 'libdir' with path element 'lib' directly which is not suitable for multilib. Add an option '--baselib' for wx-config to support multilib when cross compile. And set EGREP for wx-config to avoid host contamination. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libzip: add CVE-2017-12858 to allowlistMatsunaga-Shinji2022-04-061-0/+3
| | | | | | | Patch for CVE-2017-12858 is applied in version 1.2.0. Signed-off-by: matsunaga-shinji <shin.matsunaga@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wxwidgets: git -> gitsm to fix build when no x11Robert Yang2022-04-061-1/+1
| | | | | | | | | | | Fixed when x11 is not in DISTRO_FEATURES: $ bitbake wxwidgets CMake Error at build/cmake/functions.cmake:542 (add_library): Cannot find source file: /path/to/core2-64-wrs-linux/wxwidgets/3.1.5-r0/git/src/expat/expat/lib/xmlparse.c Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wxwidgets: Fix checking for PACKAGECONFIG and DISTRO_FEATURESRobert Yang2022-04-061-5/+6
| | | | | | | | | | | | | | The PACKAGECONFIG depends on DISTRO_FEATURES, not DISTRO_FEATURES depends on PACKAGECONFIG. And the REQUIRED_DISTRO_FEATURES is not needed since it can work with gtk or x11. Fixed when x11 is not in DISTRO_FEATURES: $ bitbake wxwidgets ERROR: Nothing PROVIDES 'wxwidgets' wxwidgets was skipped: missing required distro feature 'x11' (not in DISTRO_FEATURES) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-07-28 19:16:47 +0000