linux/poky.git/meta/recipes-extended, branch 2.6_M3

libsolv: make rpm optional

2018-09-22T01:45:47+00:00

(From OE-Core rev: dfe55fdc34ae32b75934ea42b44d9ab6023e0250) Signed-off-by: Max Kellermann Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libarchive: Update 3.3.2 -> 3.3.3

2018-09-22T01:45:46+00:00

This upgrades to 3.3.3 release and drop the backported patches when doing the recipe update. (From OE-Core rev: 60d99a4e64fdddbbe5863fa5879c813fa004600b) Signed-off-by: Otavio Salvador Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ltp: add a patch for source code to fix issue about fcntl

2018-09-22T01:45:46+00:00

The testcases of fcntl fail on 32-bit arch To cope with glibc commit: 06ab719d30b0 ("Fix Linux fcntl OFD locks for non-LFS architectures (BZ#20251)") Make OFD command use fcntl64() syscall on 32-bit. (From OE-Core rev: 67fca07c9487ccd1a28357da32c9987c00d1ba77) Signed-off-by: Hongzhi.Song Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ghostscript: upgrade to 9.25

2018-09-20T12:41:32+00:00

Removed below patches, as v9.25 source already has those changes/security fixes: 0001-Bug-699665-memory-corruption-in-aesdecode.patch 0001-pdfwrite-Guard-against-trying-to-output-an-infinite-.patch 0002-Bug-699656-Handle-LockDistillerParams-not-being-a-bo.patch 0003-Fix-Bug-699660-shading_param-incomplete-type-checkin.patch 0004-Hide-the-.shfill-operator.patch 0005-Bug-699657-properly-apply-file-permissions-to-.tempf.patch remove-direct-symlink.patch Re-worked ghostscript-9.21-native-fix-disable-system-libtiff.patch and ghostscript-9.21-prevent_recompiling.patch to fix warnings in do_patch task of ghostscript v9.25 recipe. Highlights of ghostscript v9.25 release: --------------------------------------- - This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional security issues over the recent 9.24 release. - Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources. - Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits. - As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files. - IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available as its own package separately from Ghostscript (and MuPDF). - The usual round of bug fixes, compatibility changes, and incremental improvements. (From OE-Core rev: 4340928b8878b91b5a2750eb6bc87918740511ca) Signed-off-by: Jagadeesh Krishnanjanappa Signed-off-by: Richard Purdie Signed-off-by: Richard Purdie

unzip: add nativesdk support

2018-09-20T12:41:32+00:00

(From OE-Core rev: 82886e19ba874a33e618a4854a32987884e2c058) Signed-off-by: Andrej Valek Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ltp: fix mmap15 failed on qemumips64

2018-09-13T06:42:28+00:00

Actually, this is not a bug, mmap15 only run on 64bit system. On qemumips64, mmap15 return EINVAL, x86-64 and arm64 return ENOMEM. This is because mips system check the addr that passed to the syscall mmap15: https://github.com/torvalds/linux/blob/master/arch/mips/mm/mmap.c#L71 If the addr larger than (TASK_SIZE - page_size), mips think it is invalid. (From OE-Core rev: cbc026227fb9bafe71665a673104272e191bdef9) Signed-off-by: Dengke Du Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ghostscript: fix CVE-2018-15908 & CVE-2018-15909 & CVE-2018-15910 & CVE-2018-15911

2018-09-11T08:05:35+00:00

(From OE-Core rev: b6d32d43fd2b016e932b7dc81fb943eb936b73bb) Signed-off-by: Hongxu Jia Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

lighttpd: update to 1.4.50

2018-09-10T11:13:06+00:00

(From OE-Core rev: 2b32390d0e79c75138ecc3ec84062f8bdb163abf) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

libsolv: update to 0.6.35

2018-09-10T11:13:06+00:00

(From OE-Core rev: a0462977458cc4ec2879c97a98c681fae50f6383) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

bzip2: do not perform upstream verison check

2018-09-10T11:13:05+00:00

Otherwise, latest version is reported as 1.0.2 which is less than 1.0.6. Hopefully some kind of official homepage will exist at some point. (From OE-Core rev: 12baebac49ab774935f1f71eaaf22ed696366d10) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie