linux/poky.git, branch hardknott-next

oeqa/runtime/rpm: Drop log message counting test component

2021-06-02T22:32:45+00:00

This test is flawed since multiple parts of the system can write to the log and we obtain different numbers of log messages depending on factors we can't control. Drop the log testing component of the test. [YOCTO #12465] (From OE-Core rev: 6ca1047e98a1c8bc305a3f40ad1919c5038e1698) Signed-off-by: Richard Purdie

package_rpm: pass XZ_THREADS to rpm

2021-06-02T22:32:45+00:00

By default RPM uses the number of cores as the number of threads to use, which can result in quite antisocial memory usage. As we control the macros for compression anyway, we can pass XZ_THREADS to limit the number of threads if needed. (From OE-Core rev: 959e1faa911ee67d5d84a57b932135b76cac6a53) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

pkgconfig: update SRC_URI

2021-06-02T22:32:44+00:00

The git repo for pkg-config was changed, so update the SRC_URI accordingly with the new link. (From OE-Core rev: 07f223048a5b8ac3cb828a68b6069825c8d656ae) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie

flex: correct license information

2021-06-02T22:32:44+00:00

License-Update: Corrected license information flex package is under two licenses: - "BSD-3-Clause" is provided in top-level COPYING file; the license actually include third obligation (without the actual "3" numbering) - "LGPL-2.0+" is explained by src/gettext.h (From OE-Core rev: f5c5763ae530f6c6b53d0ab510b62b9ae77a5f81) Signed-off-by: Dmitry Kisil Signed-off-by: Richard Purdie

expat: set CVE_PRODUCT

2021-06-02T22:32:44+00:00

Upstream database uses both "expat" and "libexpat" to report CVEs (From OE-Core rev: 30357a56df82d3ea11f7288a8c02dd2d201b498a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

curl: fix CVE-2021-22876

2021-06-02T22:32:44+00:00

Backport and modify the patch for CVE-2021-22876 from curl 7.76 to make it apply cleanly on 7.75. CVE: CVE-2021-22876 (From OE-Core rev: 7c39b71b78ffc64a456872769b341cfc662e747d) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

curl: fix CVE-2021-22890

2021-06-02T22:32:44+00:00

Backport and modify the patch for CVE-2021-22890 from curl 7.76 to make it apply cleanly on 7.75. CVE: CVE-2021-22890 (From OE-Core rev: b11dc35cce0449623182ecf044c4a49664119b9c) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

qemu: Exclude CVE-2020-3550[4/5/6] from cve-check

2021-06-02T22:32:44+00:00

CVE's affect ESP (NCR53C90) part of chip STP2000 (Master I/O). On Sparc32 it is the NCR89C100 part of the chip. On Macintosh Quadra it is NCR53C96. Both are not supported by yocto. (From OE-Core rev: e3ded54f9fd089382e6304604ca02d2305f16f21) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie

bind: upgrade 9.16.15 -> 9.16.16

2021-06-02T22:32:44+00:00

(From OE-Core rev: 5e1a46f08284e0c54f42f999e3a1c0a403943810) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

bind: upgrade 9.16.13 -> 9.16.15

2021-06-02T22:32:44+00:00

(From OE-Core rev: bceca3c36eade64c87a88d70eecd45ae1cb5aae9) Signed-off-by: Richard Purdie