linux/poky.git/meta/recipes-support, branch hardknott-next

curl: fix CVE-2021-22876

2021-06-02T22:32:44+00:00

Backport and modify the patch for CVE-2021-22876 from curl 7.76 to make it apply cleanly on 7.75. CVE: CVE-2021-22876 (From OE-Core rev: 7c39b71b78ffc64a456872769b341cfc662e747d) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

curl: fix CVE-2021-22890

2021-06-02T22:32:44+00:00

Backport and modify the patch for CVE-2021-22890 from curl 7.76 to make it apply cleanly on 7.75. CVE: CVE-2021-22890 (From OE-Core rev: b11dc35cce0449623182ecf044c4a49664119b9c) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

boost: fix do_fetch failure

2021-05-30T07:19:35+00:00

Bintray service has been discontinued causing boost do_fetch to fail: WARNING: boost-1.76.0-r0 do_fetch: Failed to fetch URL https://dl.bintray.com/boostorg/release/1.75.0/source/boost_1_75_0.tar.bz2, attempting MIRRORS if available RP: Backport to 1.75.0 (From OE-Core rev: 146f04f9d38f781767a52884f4870570c0d817e0) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie

libcap: Configure Make variables correctly without a horrible hack

2021-05-15T16:18:21+00:00

Occasionally, the build would fail with: make[2]: execvp: mkdir: Argument list too long This turned out to be due to a hacky solution used in the recipe to modify the Makefile, which resulted in one more $(BUILD_CFLAGS) being added to the immediately expanded BUILD_CFLAGS Make variable each time do_configure was executed. After a couple of times, this lead to an environment with a 140 kB BUILD_CFLAGS when mkdir should execute, which resulted in the E2BIG. (From OE-Core rev: 44900610bea76ab8983a899599f78790f6c5f659) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie (cherry picked from commit 116e6b61c585c6f0f7ae6f010bd490bb39914348) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

db: update CVE_PRODUCT

2021-05-15T16:18:21+00:00

Update CVE_PRODUCT to also include 'berkeley_db'. For example, CVE-2020-2981 uses 'berkeley_db'. (From OE-Core rev: b5004de05327c734d63cfac153ebf1542f9177c9) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie (cherry picked from commit ad799b109716ccd2f44dcf7a6a4cfcbd622ea661) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libevent: Increase ptest timing tolerance 50 ms -> 100 ms

2021-05-11T11:02:29+00:00

Adjusting the tolerance to a more reasonable time given the load on the AB and given the high amount(100) of events some of the tests like `common_timeout` generates. [YOCTO #14163] (From OE-Core rev: d5d88c2293e8ebc958d1bce9af8f796024443be9) Signed-off-by: Yi Fan Yu Signed-off-by: Richard Purdie (cherry picked from commit 38b36d2b90d570149e63816e68f457aea28a5092) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

diffoscope: add native libraries to LD_LIBRARY_PATH

2021-05-11T11:02:29+00:00

Reversal of global setting in previous commit necessitates a local fix, otherwise, this happens: File "/home/pokybuild/yocto-worker/reproducible-debian/build/build-st-52142/tmp/work/x86_64-linux/diffoscope-native/172-r0/recipe-sysroot-native/usr/lib/python3.9/ctypes/__init__.py", line 392, in __getitem__ func = self._FuncPtr((name_or_ordinal, self)) AttributeError: nativepython3: undefined symbol: archive_errno (From OE-Core rev: 73edf1b88f0997f7368bfdb59d3076f085c5da4e) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 87884d9938829d5ae5d250f483c749e00cd83322) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ptest-runner: libgcc must be installed for pthread_cancel to work

2021-05-11T11:02:29+00:00

This only affects glibc systems and have been found on runqemu core-image-minimal with gstreamer ptest-runner STOP: ptest-runner libgcc_s.so.1 must be installed for pthread_cancel to work Aborted (From OE-Core rev: 0eeb4dd1e9dbbbe205ff9821a398c44d5769f798) Signed-off-by: Jose Quaresma Signed-off-by: Richard Purdie (cherry picked from commit 1cb679e6a4528a2cef16f65342d5e65adb14cb16) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libssh2: fix build failure with option no-ecdsa

2021-05-04T21:57:50+00:00

libssh2 fails at do_compile if DEPRECATED_CRYPTO_FLAGS = "no-ecdsa" is set in recipe: ../src/.libs/libssh2.so: undefined reference to `LIBSSH2_KEX_METHOD_EC_SHA_HASH_CREATE_VERIFY' References: https://github.com/libssh2/libssh2/issues/549 Upstream patches: https://github.com/libssh2/libssh2/commit/1f76151c92e1b52e9c24ebf06adc77fbd6c062bc (From OE-Core rev: d70cf4cd57d61f7db7179673b211e631c944e0e6) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie (cherry picked from commit 2bb146e7315f8080cb49a95212231ccb76a4a822) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ca-certificates: Fix openssl runtime cert dependencies

2021-04-30T13:37:25+00:00

With commit dc778c70449ee5401b5a24ad18b22b88338c47c5, dependency was moved to openssl-bin which in itself was a fine change, but dropping dependency on openssl too should have been kept along, dropping this meant that openssl binary wont be able to validate secure connections as the CApath files wont be installed, which infact are required for openssl bins to work, following call e.g. fails $ openssl s_client -connect google.com:443 .... New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 20 (unable to get local issuer certificate) .... The local issuer certs are not found in default location /usr/lib/ssh-1.1/certs, this dir and its content is installed by openssl package therefore re-add the dependency on openssl (From OE-Core rev: 84afcdcb9d7ee24596bd3f8d808d30c9d558d918) Signed-off-by: Khem Raj Cc: Andrei Gherzan Signed-off-by: Richard Purdie (cherry picked from commit eaf377315efc73d6ffe361372a873918b3bb3bf5) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie