linux/poky.git/meta/recipes-support, branch yocto-2.4

sqlite3: fix CVE-2017-13685

2017-10-16T22:52:44+00:00

The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file. Backport patch to fix the issue. Some references: https://sqlite.org/src/info/02f0f4c54f2819b3 http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html (From OE-Core rev: 9b9f566d2042f2b393de88506d2da964bc4d17b0) Signed-off-by: Wenzong Fan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libgcrypt: Fix building on armv6

2017-10-16T22:52:43+00:00

This patch is backported from the upstream git repository to fix building libgcrypt on armv6 platforms such as raspberrypi. (From OE-Core rev: c47ed9aa7a34ef62b3ffaea6ebd5cc9e7c052899) Signed-off-by: Paul Barker Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

argp-standalone: drop RDEPENDS dev/staticdev packages on main package

2017-10-07T22:20:40+00:00

This ensures argp-standalone-staticdev package could be installed correctly(without depending on the empty argp-standalone package) if it's being required during SDK population. (From OE-Core rev: 6d13c09fb57e13aa4aae590cd49cff7279c8685d) Signed-off-by: Ming Liu Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

nspr, nss: Use BUILD_CC instead of hardcoded "gcc"

2017-10-07T22:20:40+00:00

Recipes nspr_4.16.bb and nss_3.31.1.bb ignored BUILD_CC and it's BUILD_CFLAGS and tried to compile with hardcoded "gcc" instead. As result build for this recipes will fail if host use different name for compiler or require any flags. (From OE-Core rev: 79e3339ab9edacb9e34d3725305d5880a974364a) Signed-off-by: Nikolay Merinov Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

curl: Added option to enable http2 protocol.

2017-09-26T10:05:01+00:00

With default --without-nghttp2 flag set there was no way to get http2 protocol support using nghttp2 library. Instead moved it to PACKAGECONFIG options (From OE-Core rev: bcc8560300c8b1218b1f3709f5a7732e17fbfa46) Signed-off-by: baali Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libgcrypt: fix CVE-2017-0379

2017-09-26T10:05:01+00:00

Backport the fix from https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git; a=commit;h=bf76acbf0da6b0f245e491bec12c0f0a1b5be7c9 (From OE-Core rev: 3b827eff306c484d78d61b259cd5d4eef8df381c) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

ptest-runner: fix segfault with -t option

2017-09-22T16:15:30+00:00

The ptest-runner would segfault with -t option: root@qemux86-64:~# ptest-runner -d /usr/lib test_pkg -t 5 [ 237.234112] ptest-runner[810]: segfault at 0 ip 000000382e638060 sp 00007fff9130f400 error 4 in libc-2.26.so[382e600000+1a7000] It is safe to bump SRCREV to latest upstream commit to fix this issue because there is only one commit since the last update: commit 8a93832dad621535e90aa8e1fb74ae5ba743fc3e Author: Anders Wallin Date: Sun May 28 11:47:00 2017 +0200 timeout option missing the argument option ":" to getopt ptest-runner -t xx gives segfault Signed-off-by: Anders Wallin Signed-off-by: Aníbal Limón (From OE-Core rev: 503ce98bb89dfa019faff872121c8911e6465b05) Signed-off-by: Yi Zhao Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libffi: Add HOMEPAGE info into recipe file.

2017-09-22T16:15:30+00:00

(From OE-Core rev: cfe74cb67f284e58c6d133d456fb6d8e763f3e5c) Signed-off-by: Huang Qiyu Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

nspr: Fix build with musl/mips

2017-09-21T08:24:24+00:00

(From OE-Core rev: ecf386d113011c430a2e04dfdac981a265a83b7b) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

attr: Backports to fix exported headers

2017-09-18T10:07:30+00:00

Packages which depends on attr headers fail due to uint32_t not being defined, this needed header to include sys/types.h (From OE-Core rev: af7c8f8a9bfc3396dc729f3fc54c38d19f2aa3fc) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie