linux/poky.git/meta/recipes-support, branch yocto-3.4.3

vim: Update to 8.2.4524 for further CVE fixes

2022-03-15T16:38:29+00:00

Includes CVE-2022-0696, CVE-2022-0714, CVE-2022-0729. (From OE-Core rev: 4fa9357473eb62703b1df1b1fb529b4c0ba452a9) Signed-off-by: Richard Purdie (cherry picked from commit 0d29988958e48534a0076307bb2393a3c1309e03) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: Upgrade 8.2.4314 -> 8.2.4424

2022-02-24T11:12:40+00:00

License file had some grammar fixes. Includes CVE-2022-0554. (From OE-Core rev: 66fa8e1716a1b66ee6f5a905f41ac20c6ae9a040) Signed-off-by: Richard Purdie (cherry picked from commit a8d0a4026359c2c8a445dba9456f8a05470293c1) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: Upgrade 4269 -> 4134

2022-02-24T11:12:39+00:00

License text underwent changes on how to submit Uganda donations, switch from http to https urls and an update date change but the license itself is unchanged. Also, add an entry for the top level license file. This is also the vim license so LICENSE is unchanged but we should monitor it too. (From OE-Core rev: d5207a762648a3b12d16b6f79a751dec90180354) Signed-off-by: Richard Purdie (cherry picked from commit d195005e415b0b2d7c8b0b65c0aef888d4d6fc8e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: upgrade to patch 4269

2022-02-09T23:15:15+00:00

Upgrade to the latest patch release to fix the following CVEs: - CVE-2022-0261 - CVE-2022-0318 - CVE-2022-0319 (From OE-Core rev: 61dcaeda02fe1136610f1cf4d4ec271f16dacfcf) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 96442e681c3acd82b09e3becd78e902709945f1f) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libusb1: correct SRC_URI

2022-02-09T23:15:15+00:00

(From OE-Core rev: 0fccab0724769a862e31e635ffa1db3ba2f37312) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit d4c37ca1f1e97d53045521e9894dc9ed5b1c22a1) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

icu: fix make_icudata dependencies

2022-02-09T23:15:15+00:00

The make_icudata task is set before the configure task then the dependencies for this task are not populate yet. Fixed it by adding do_prepare_recipe_sysroot task dependency to the make_icudata task. (From OE-Core rev: 18a43fe970b691250fbf48f39ed5f4f7ad121b75) Signed-off-by: Kory Maincent Signed-off-by: Richard Purdie (cherry picked from commit c134f62062a6359d2d5831ba4cb9694035e4f25a) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: update to include latest CVE fixes

2022-01-31T21:55:57+00:00

Update the version to 4.2.4118, which incorporates the following CVE fixes: - CVE-2021-4187 - CVE-2022-0128 - CVE-2022-0156 - CVE-2022-0158 Also remove the explicit whitelisting of CVE-2021-3968 as this is now handled with an accurate CPE specifying the fixed version. (From OE-Core rev: 10e6043aa5a11675127760097580b78a8cac4515) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 764519ad0da6b881918667ca272fcc273b56168a) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: upgrade to 8.2 patch 3752

2022-01-31T21:55:57+00:00

There's a fairly constant flow of CVEs being fixed in Vim, which are getting increasing non-trivial to backport. Instead of trying to backport (and potentially introduce more bugs), or just ignoring them entirely, upgrade vim to the latest patch in the hope that vim 8.3 will be released before we release Kirkstone. (From OE-Core rev: c987c75ca06c67b6055c50a9fb29e4fd24aceffc) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 78a4796de27d710f97c336d288d797557a58694e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

boost: Fix build on arches with no atomics

2021-12-13T23:02:49+00:00

1.77 is broken on architectures which dont have lockfree atomics e.g. armv5 [1], backport relevant fixes from upstream to unbreak the build [1] https://github.com/boostorg/math/issues/673 (From OE-Core rev: aaaf763acfca236654e299d3be6a9484355e3be9) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit 57dc797712abcf83b63694b21d2b3a3f09b1c9bc) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

boost: allow searching for python310

2021-12-13T23:02:49+00:00

(From OE-Core rev: 8d622afe96b67133f519fc888ff03222162f20f9) Signed-off-by: Martin Jansa Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit a8add0bdec7c51c9a7f851b2c63017c79faaa273) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie