linux/poky.git/meta/recipes-extended, branch styhead-5.1.3

libnsl2: set CVE_PRODUCT

2025-02-12T14:29:33+00:00

Our libnsl2 recipe is just libnsl version 2.x, so set the CVE vendor and product pair appropriately as per: https://www.cvedetails.com/version/1177013/Libnsl-Project-Libnsl-2.0.0.html (From OE-Core rev: c8e9cde342e935b309aeab06029fc5a46ef89028) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit d0e77d3f9217b96f1c77ba65fc9b8420f413c401) Signed-off-by: Steve Sakoman

groff: Fix race issues for parallel build

2025-01-13T13:49:08+00:00

Fixed race issues for parallel build: groff: error: couldn't exec soelim: Permission And: groff: error: couldn't exec grn: Permission denied (From OE-Core rev: 99da4c812712b6277a857ae8c903627a6c6d792a) Signed-off-by: Robert Yang (cherry picked from commit b9ee7ea9ab05a1887c863dc9fccc65cb9e6850df) Signed-off-by: Steve Sakoman

shadow: use update-alternatives to handle su.1 and nologin.8

2024-12-17T20:58:11+00:00

This patch fixes the following error at do_rootfs: update-alternatives: Error: not linking /PATH/TO/rootfs/usr/share/man/man1/su.1 to /usr/share/man/man1/su.1.util-linux since /PATH/TO/rootfs/usr/share/man/man1/su.1 exists and is not a link update-alternatives: Error: not linking /PATH/TO/rootfs/usr/share/man/man8/nologin.8 to /usr/share/man/man8/nologin.8.util-linux since /PATH/TO/rootfs/usr/share/man/man8/nologin.8 exists and is not a link The problem can be reproduced by adding the following lines to local.conf and then building an image: EXTRA_IMAGE_FEATURES:append = " doc-pkgs" IMAGE_INSTALL:append = " shadow util-linux" su.1 and nologin.8 are handled by update-alternatives in util-linux recipe, so do it in shadow recipe too. (From OE-Core rev: a12be809144cbca43576d15c0f0f1781eeaf5a27) Signed-off-by: Sid-Ali Teir Signed-off-by: Richard Purdie (cherry picked from commit 198c4582c6391ac87c49e09882189235c44b60e9) Signed-off-by: Steve Sakoman

ghostscript: upgrade 10.03.1 -> 10.04.0

2024-12-17T20:58:11+00:00

avoid-host-contamination.patch refreshed for 10.04.0 Changelog: =========== - addresses CVEs: CVE-2024-46951, CVE-2024-46952, CVE-2024-46953, CVE-2024-46954, CVE-2024-46955, CVE-2024-46956 - add protection for device selection from PostScript input. - efforts in code hygiene and maintainability continue. - The usual round of bug fixes, compatibility changes, and incremental improvements. - add the capability to build with the Tesseract OCR engine. (From OE-Core rev: a0c802e9b1d8400589aede20e52f40d10a344314) (From OE-Core rev: 067e769ada6c8cd5783c6d32f24cea9f0e4ed666) Signed-off-by: Wang Mingyu Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

libarchive: fix CVE-2024-48957 & CVE-2024-48958

2024-12-17T20:58:10+00:00

Backport fixes for: * CVE-2024-48957 - Upstream-Status: Backport from https://github.com/libarchive/libarchive/commit/3006bc5d02ad3ae3c4f9274f60c1f9d2d834734b * CVE-2024-48958 - Upstream-Status: Backport from https://github.com/libarchive/libarchive/commit/a1cb648d52f5b6d3f31184d9b6a7cbca628459b7 (From OE-Core rev: 8b520c3cea136591128f6601718c23334afd7a55) (From OE-Core rev: 4f6a2eea1476bc7be1d55b6b6051c4b65d4d97fa) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

shadow: use update-alternatives to handle groups.1

2024-11-30T13:41:59+00:00

This patch fixes the following error at do_rootfs: update-alternatives: Error: not linking /PATH/TO/rootfs/usr/share /man/man1/groups.1 to /usr/share/man/man1/groups.1.coreutils since /PATH/TO/rootfs/usr/share/man/man1/groups.1 exists and is not a link The problem can be reproduced by adding the following lines to local.conf and then building an image: EXTRA_IMAGE_FEATURES:append = " doc-pkgs" IMAGE_INSTALL:append = " shadow coreutils" groups.1 is handled by update-alternatives in coreutils recipe, so do it in shadow recipe too. (From OE-Core rev: 822d70b7ccc2e5922de99a7703ec7eb3f814e29f) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie (cherry picked from commit 78c8eb60097df2e16c699464c39ff9142fc1ae69) Signed-off-by: Steve Sakoman

tzdata/tzcode-native: upgrade 2024a -> 2024b

2024-11-30T13:41:59+00:00

(From OE-Core rev: eae95be63db899ab2e247d823149e89aea6170f7) Signed-off-by: Jinfeng Wang Signed-off-by: Richard Purdie (cherry picked from commit b84b29b1827624270cc1698feda2ee87d55c01e4) Signed-off-by: Steve Sakoman

groff: fix rare build race in hdtbl

2024-11-26T13:37:09+00:00

It's possible to build the hdtbl examples before grn has been build: groff: error: couldn't exec grn: No such file or directory Backport a dependency fix from upstream. [ YOCTO #15610 ] (From OE-Core rev: 1c007c8dab24da03c739d4cccdaabfcf78807b5b) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit d590a32423d05cefc4e7282f971f633b3fa0b941) Signed-off-by: Steve Sakoman

lsb-release: fix Distro Codename shell escaping

2024-10-29T12:51:03+00:00

(From OE-Core rev: 168bed0e3d339ec75973faa682d47269ec96d599) Signed-off-by: Sergei Zhmylev Signed-off-by: Richard Purdie (cherry picked from commit 7b5824c547b1348713e992a8bebd40577a0c5709) Signed-off-by: Steve Sakoman

libpam: use libdir in conditional

2024-10-29T12:51:03+00:00

Using the usrmerge distro feature for this check causes the -native variant's build to fail. Simplify the test to be correct for both native and target builds. (From OE-Core rev: ba11742291bccc9ac4d30ca85b058576cbc17427) Signed-off-by: Daniel McGregor Signed-off-by: Richard Purdie (cherry picked from commit 105e6fbdd28238cef41f280c0c28939b24d1a96e) Signed-off-by: Steve Sakoman