linux/poky.git/meta/recipes-core/ncurses, branch yocto-3.1.23

ncurses: Fix CVE-2022-29458

2022-06-04T11:16:59+00:00

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library. Backported from the link below, extracting only the relevant changes. https://github.com/ThomasDickey/ncurses-snapshots/commit/9d1d651878d4bf0695872a64cc65ba0acb825f36 (From OE-Core rev: 2287d591cf32f5580ea6679805d04c3a5146ecd5) Signed-off-by: Gustavo Lima Chaves Signed-off-by: Dan Tran Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ncurses: Fix for CVE-2021-39537

2021-12-08T20:28:01+00:00

Add patch to fix CVE-2021-39537 Link: http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/devel/ncurses/patches/Attic/patch-ncurses_tinfo_captoinfo.c?rev=1.1&content-type=text/x-cvsweb-markup (From OE-Core rev: abe9e7aec3b3363927eed014775145c55710fa07) Signed-off-by: Ranjitsinh Rathod Signed-off-by: Ranjitsinh Rathod Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

meta: Add explict branch to git SRC_URIs, handle github url changes

2021-11-11T10:54:32+00:00

This update was made with the convert-scruri.py script in scripts/contrib This script handles two emerging issues: 1. There is uncertainty about the default branch name in git going forward. To try and cover the different possible outcomes, add branch names to all git:// and gitsm:// SRC_URI entries. 2. Github are dropping support for git:// protocol fetching, so remap github urls as needed. For more details see: https://github.blog/2021-09-01-improving-git-protocol-security-github/ (From OE-Core rev: 827a805349f9732b2a5fa9184dc7922af36de327) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ncurses: Don't put terminfo into the sysroot

2021-02-05T23:37:04+00:00

This recudes the file count from ~2850 to ~100 which is a huge win for reducing build directory clutter, its unlikely anything uses the terminfo data or man pages in the sysroot. This is especially helpful as we usually end up with two copies of these sets of files. (From OE-Core rev: 7789eb844a1f0033cec7d7d42f1dd42d571cb6c2) Signed-off-by: Richard Purdie (cherry picked from commit 443633dfc20177ef88a388d96745675817510c99) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ncurses: Prevent LDFLAGS being emitted in .pc files

2021-01-09T09:17:16+00:00

By default ncurses includes the values of LDFLAGS in its output pkgconfig .pc files. This causes issues because OE includes options that are specific to either the build host, or build configuration. These options are not expected to be embedded in the pkgconfig output that is installed. Specifically this change resolves issues with uninative, where uninative includes '-Wl,--dynamic-linker=' in LDFLAGS in order to force the building and execution of native binaries against the dynamic linker provided by uninative. This path is specific to TMPDIR at the time of build, such that the installed files (and the associated sstate) have this path. This prevents the sstate from being portable across build directories/hosts. (From OE-Core rev: 7b84c9ea009b5452a21233483516de5e070fbe82) Signed-off-by: Nathan Rossi Signed-off-by: Richard Purdie (cherry picked from commit ef960d14bd9cecb9a3b50994636fbd455f06104a) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ncurses: remove config.cache

2021-01-09T09:17:16+00:00

Instead of having a config.cache that overrides the system site files, simply set the values in CACHED_CONFIGUREVARS. We can also drop the mkstemp check as the configure.ac assumes it works, leaving just nanosleep. (From OE-Core rev: d095c3f88e8a3c64e4db07c010d6cf2de373ce7f) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit c30c90e3adfa91407c37838c971e251f8482e2b8) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ncurses: Make ncurses-tools depend on ncurses-terminfo-base

2021-01-09T09:17:16+00:00

Fixed when ncurses-terminfo-base is not installed: $ infocmp infocmp: couldn't open terminfo file linux. The required file is in ncurses-terminfo-base (From OE-Core rev: c172e9c27c4504c7b1c941693ab9af5e86dea64f) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie (cherry picked from commit f3e0a6bf1b7d9009c253e3f97df8736ecf3aa79b) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

ncurses: Comment out version parsing that broke CVE checking

2020-02-29T21:47:30+00:00

This will be needed again when using patchlevel versions again. Also make it more generic. (From OE-Core rev: 7939288700ad35ed43e5988371e16d5afc594a57) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

ncurses: upgrade 6.1+20191019 -> 6.2

2020-02-28T23:11:28+00:00

License-Update: copyright years and holders (From OE-Core rev: f59334e70313676c7ab3216cb9583eefb27835e6) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

ncurses: Fix reproducibility issue

2020-02-08T13:20:01+00:00

The build was deciding whether to rename manpages based upon the presence of /etc/debian_version. Be explicit about the configuration instead and ensure determinism. [YOCTO #13781] (From OE-Core rev: 09c8a28893e7ca94a44232d802e1cb02a8f34b87) Signed-off-by: Richard Purdie