linux/poky.git, branch rocko-18.0.3

build-appliance-image: Update to rocko head revision

2018-05-23T16:46:34+00:00

(From OE-Core rev: 0d70ca998b3bdc18db6a5644f4ed8797fd0e7ddd) Signed-off-by: Richard Purdie

poky: Bump version to 2.4.3

2018-05-23T16:46:21+00:00

(From meta-yocto rev: 52883b21ee64c04db23a6fb3f32b33c39d54b324) Signed-off-by: Richard Purdie

meta-yocto-bsp: bump to the latest v4.12 stable kernel for the non-x86 BSPs

2018-05-23T16:43:00+00:00

(From meta-yocto rev: 08884dc6ed749da5e7f73c9045a56d2dd53827bb) (From meta-yocto rev: 5de52cf4a74f6d87f7f62f322f8f39f3f4f0a136) Signed-off-by: Kevin Hao Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

linux-yocto: update genericx86* SRCREVs for 4.12

2018-05-23T16:43:00+00:00

Bump to stable kernel release 4.12.21. (From meta-yocto rev: de49fbc8dda014ab26294ff97955d545dd09123c) (From meta-yocto rev: c0fee7423ae9321a2f0d28036abee62bef6360ea) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libnl: fix CVE-2017-0553

2018-05-23T16:43:00+00:00

An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32342065. NOTE: this issue also exists in the upstream libnl before 3.3.0 library. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0553 Backport fix from upstream libnl 3.3.0 release: https://github.com/thom311/libnl/commit/3e18948f17148e6a3c4255bdeaaf01ef6081ceeb http://lists.infradead.org/pipermail/libnl/2017-May/002313.html (From OE-Core rev: f452fbc5d2ffb9c1417079574bed0dfcdc44787a) Signed-off-by: Andre McCurdy Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

ncurses: Abstract out termlib

2018-05-23T16:43:00+00:00

termlib needs to be disabled on some targets e.g. mingw this change paves the way for doing that. Functionally it does not change anything for other platforms (From OE-Core rev: 88f33e1e5ba4f85093f60a296cba3ee1c1341c43) (From OE-Core rev: 82fc84b059367917690336d279cd8cab679d63ed) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

ncurses: fix deletion of /usr/lib/terminfo

2018-05-23T16:43:00+00:00

Ncurses doesn't honour ${libdir} for terminfo, so try more options to remove it. (From OE-Core rev: 17fd322e925cf492b22c75e296d5fee31e3511db) (From OE-Core rev: 3d07d4a1e8a7324437e2f37ffcafbb032a086008) Signed-off-by: Koen Kooi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

ncurses: fix do_install failure when base_libdir has more than one level

2018-05-23T16:43:00+00:00

Other sections of the .inc already use mkdir -p, so use it here as well. (From OE-Core rev: 62434e5021b99391a0c129a40bf943465a19e7ce) (From OE-Core rev: f7538ee974d5bb07be193a3c8e31a05087bcc990) Signed-off-by: Koen Kooi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

ncurses: 6.0+20170715 -> 6.0+20171125

2018-05-23T16:43:00+00:00

- Drop backported CVE fix includes cves: CVE-2017-10684 CVE-2017-10685 CVE-2017-11112 CVE-2017-11113 (From OE-Core rev: 382e861b8c89c65b3538c706361767eff78d4a5a) (From OE-Core rev: 6e7b9c78aca121301e9c92ed9cdb65f1a7613ee0) Signed-off-by: Hongxu Jia Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

package.py: use single quotes for path passed to file in is_elf()

2018-05-08T14:37:17+00:00

Align package.py is_elf() with recent changes in package.bbclass isELF(): http://git.openembedded.org/openembedded-core/commit/?id=7877761534b0c2492da6289e9f2269d41b6ed464 (From OE-Core rev: 5fcb57ffd67384b3487d0a1b83a1f13d52a15eb7) Signed-off-by: Andre McCurdy Signed-off-by: Ross Burton (cherry picked from commit ab056c7f6065f310be4dd256ceb45f85ff981f69) Signed-off-by: Richard Purdie