linux/poky.git/meta/recipes-gnome, branch hardknott

epiphany: fix CVEs

2022-04-03T19:49:03+00:00

Backport patch [1] to fix below CVEs: - CVE-2021-45085 - CVE-2021-45086 - CVE-2021-45087 - CVE-2021-45088 [1] https://sources.debian.org/data/main/e/epiphany-browser/3.38.2-1+deb11u2/debian/patches/encode-untrusted-data.patch (From OE-Core rev: 125c6f5770542c3b509336b92d6c45c0c955027e) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

meta: add explicit branch and protocol to SRC_URI

2021-11-21T11:40:35+00:00

Add branch name explicitly to SRC_URI where it's not defined and switch to using https protocol for Github projects. The change was made using convert-srcuri script in scripts/contrib. (From OE-Core rev: ab781d4e3fa7425d96ea770ddfd0f01f62018c5b) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

meta: bump HASHEQUIV_HASH_VERSION after RPM fix

2021-11-03T11:19:04+00:00

ef37fca2f4 fixes issues where PLATFORM tag in RPMs generated n aarch and x86 hosts are different for noarch RPMs. But, we'd still need to bump hashequiv version for allarch recipes to avoid issues because of the RPMs that were incorrectly generated so reproducibility tests don't fail. Also bump PR to force rebuilds. (From OE-Core rev: 2c41e766219032dca953eb7c0b18e812a8d0b8f2) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

gobject-introspection: Don't write $HOME into scripts

2021-10-29T10:17:20+00:00

Writing an expanded version of $HOME into the wrapper script breaks reproducibility. We don't need this here so don't. (From OE-Core rev: e9c71a121f05b07fcd5ef2acbfac3c2dc9685384) Signed-off-by: Richard Purdie (cherry picked from commit 5df092524e93cd7d0eaa633ec8a5689d4c0d018d) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

gobject-introspection: Fix the license (add MIT)

2021-08-06T08:59:14+00:00

As per upstream the license should also include MIT[1]. This is also what Fedora Linux uses[2]. This should also address the problem with auto-generated scannerparser.h file which has the following header: /* Bison interface for Yacc-like parsers in C Copyright (C) 1984, 1989-1990, 2000-2015, 2018-2020 Free Software Foundation, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ /* As a special exception, you may create a larger work that contains part or all of the Bison parser skeleton and distribute that work under terms of your choice, so long as that work isn't itself a parser generator using the skeleton or a modified version thereof as a parser skeleton. Alternatively, if you modify or redistribute the parser skeleton itself, you may (at your option) remove this special exception, which will cause the skeleton and the resulting Bison output files to be licensed under the GNU General Public License without this special exception. This special exception was added by the Free Software Foundation in version 2.2 of Bison. */ Taking advantage of the Bison expcetion, more precisely the following fragment: "distribute that work under terms of your choice" it should also be possible to reuse the MIT license tag for redistribution of that work instead of adding the default GPLv3+ tag (which would otherwise be required without using the special exception). [1] https://gitlab.gnome.org/GNOME/gobject-introspection/-/blob/master/COPYING#L8 [2] https://src.fedoraproject.org/rpms/gobject-introspection/c/6db290968fa1f92967851dc60115dfb3ea173cf7?branch=rawhide (From OE-Core rev: 57b90c098ea7e8caf8fb861e3b7adf77da30ac10) Signed-off-by: Damian Wrobel Signed-off-by: Richard Purdie (cherry picked from commit 3685b51982ac4f611d3e235c8818474563548bd9) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

librsvg: Exclude CVE-2018-1000041 from cve-check

2021-05-22T09:01:03+00:00

Issue only affects windows. (From OE-Core rev: eee05da7eb054f474d24e66799b98e288a2a85fe) Signed-off-by: Richard Purdie

libnotify: whitelist CVE-2013-7381 (specific to the NodeJS bindings)

2021-05-22T09:01:02+00:00

(From OE-Core rev: 2aa9aa01445ad648721c28b15bc9aeab7a1656b1) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

gdk-pixbuf: fix CVE-2021-20240

2021-04-30T13:37:26+00:00

(From OE-Core rev: bd08e4d179979937604c196b4047f59c5499a960) Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libhandy: update 1.0.3 -> 1.2.0

2021-03-20T18:54:56+00:00

(From OE-Core rev: 48fb4f03fec2085ca2e4745e0e40eaab6787e0f2) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

epiphany: Add package configuration for building in developer mode

2021-03-06T22:39:04+00:00

(From OE-Core rev: 51ca329ea9cd51b699545bae2cf2a6a02f70a887) Signed-off-by: Andrei Gherzan Signed-off-by: Richard Purdie