summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-devtools
Commit message (Collapse)AuthorAgeFilesLines
* lua: update to 5.3.6Armin Kuster2021-02-091-3/+3
| | | | | | | | | | | | | | | LIC_FILES_CHKSUM changed to do year updates This is the last 5.3.x update. This will give us the best starting point for doing Maintence moving forward. Its a bug fix only update. See http://www.lua.org/work/diffs-lua-5.3.5-lua-5.3.6.html Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 25d8d65eb537b949aa42d1388fecbc22ba059b33) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* giflib: apply patch for CVE-2019-15133 and set CVE_PRODUCTMikko Rapeli2021-01-282-1/+29
| | | | | | | | | | Backport upstream patch for CVE-2019-15133. Set CVE_PRODUCT to "giflib_project:giflib" which is used in NVD. https://nvd.nist.gov/vuln/detail/CVE-2019-15133 Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatbuffers: whitelist CVE-2020-35864Mikko Rapeli2021-01-281-0/+2
| | | | | | | | | | | | | CVE-2020-35864 is for the rust crate for flatbuffers, not flatbuffers itself. https://security-tracker.debian.org/tracker/CVE-2020-35864 "NOT-FOR-US: flatbuffers rust crate" Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sip3: simplify recipeS. Lockwood-Childs2021-01-281-12/+5
| | | | | | | | | | | | | The custom configure block can be shared between target and native if you just configure the sysroot option accordingly and use STAGING_INCDIR to locate the python headers to build against. Signed-off-by: S. Lockwood-Childs <sjl@vctlabs.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5fe362171c7f3426fced0c7889facec397c9cc5e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: 12.19.1 -> 12.20.1Sean Nyekjaer2021-01-131-2/+2
| | | | | | | Signed-off-by: Sean Nyekjaer <sean@geanix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cde1019804c2f7b67bf89d178eec9f4efafea414) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tclap: fix branchChen Qi2021-01-101-1/+1
| | | | | | | | | Upstream has deleted the 'master' branch, so use the 1.2 branch. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 583fbb4775a960391cb62d55164b91570a70921a) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tclap: align version to tag v1.2.2Chencheng Zhang2021-01-101-1/+1
| | | | | | | | | | | This is to update the tclap v1.2.2 with several bug fixes. See: https://sourceforge.net/p/tclap/bugs/23/ Signed-off-by: Chencheng Zhang <chencheng@wittra.se> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f03ad4971ed0b7cf34550a90ee3c0fa18f964533) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nanopb: move to dynamic-layersMartin Jansa2021-01-101-29/+0
| | | | | | | | | | | | | | | * depends on python3-protobuf from meta-python: * fixes: ERROR: Nothing RPROVIDES 'python3-protobuf' (but meta-oe/recipes-devtools/nanopb/nanopb_0.4.3.bb RDEPENDS on or otherwise requires it) NOTE: Runtime target 'python3-protobuf' is unbuildable, removing... Missing or unbuildable dependency chain was: ['python3-protobuf'] ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'nanopb', 'python3-protobuf'] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 4678e224755dd6fc32be16b1d062a5f2af26753b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: 12.19.0 -> 12.19.1Stacy Gaikovaia2021-01-101-1/+1
| | | | | | | | | | | | | | | Uprev nodejs in order to fix CVE-2020-8277. This CVE allows an attacker to trigger a DNS request for a host of their choice, which could trigger a Denial of Service in nodejs versions < 12.19.1. See https://nvd.nist.gov/vuln/detail/CVE-2020-8277 for details. CVE: CVE-2020-8277 Signed-off-by: Stacy Gaikovaia <Stacy.Gaikovaia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a44015408253d8a4f64055f41fa1f497aeacfc30) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: CVE-2020-7069Zheng Ruoqin2021-01-102-0/+159
| | | | | | | | | | | | | Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7069 https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit fa80193468745a11bc12d5845f66412a0d62e0e2) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: CVE-2020-7070Zheng Ruoqin2021-01-102-0/+25
| | | | | | | | | | | | | | Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7070 https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364 https://github.com/php/php-src/blob/master/main/php_variables.c Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit aff8a1fefb9a1a311e5ba14ad69871514270803a) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mcpp: Normalize the patch format of CVEZang Ruochen2021-01-103-32/+36
| | | | | | | | | Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9301b77e3266160ffb7e9bfd69d445f0392076c8) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: remove the failing ${D}/${TMPDIR} codeMax Kellermann2020-12-141-9/+0
| | | | | | | | | | | Appending ${TMPDIR} to ${D} doesn't make any sense, because both are absolute paths. And additionally, the code fails: rmdir: failed to remove '/usr/src/oe/tmp-musl/work/core2-64-oe-linux-musl/php/7.1.9-r0/image//usr': Directory not empty Signed-off-by: Max Kellermann <max.kellermann@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* musl-nscd: Update to latestKhem Raj2020-11-031-1/+1
| | | | | | | Get fix https://github.com/pikhq/musl-nscd/commit/ce81a80e30c2041d8260115fac86831ff64c354a Signed-off-by: Khem Raj <raj.khem@gmail.com>
* upgrade and de-blacklist nanopb recipeJasper Orschulko2020-11-031-2/+1
| | | | | | | | | | The current nanopb recipe is blacklisted due to python2 dependencies. However, newer releases of nanopb use python3 by default. This commit updates the used nanopb version to 0.4.3 and removes the recipe from the blacklist. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: Update to 12.19.0Khem Raj2020-11-021-1/+1
| | | | | | This perhaps is last release in 12.x LTS Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: Fix arm32/thumb builds with clangKhem Raj2020-11-022-0/+54
| | | | | | | | | | | Backport a patch from upstream to take care of build failure e.g. | ../deps/v8/src/codegen/arm/cpu-arm.cc:38:16: error: write to reserved register 'R7' | asm volatile("svc 0\n" | ^ | 1 error generated. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add new recipe for squashfs-tools-ngLuca Boccassi2020-10-271-0/+32
| | | | | | | | | The main difference with squashfs-tools is the availability of a shared library and a programmatic interface, rather than just command-line tools. Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* protobuf: upgrade 3.13.0 -> 3.13.0.1zangrc2020-10-231-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* apitrace: Disable secuirty flags for clangKhem Raj2020-10-191-0/+2
| | | | | | | Add apitrace to relevant packagegroup Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Michael Tretter <m.tretter@pengutronix.de>
* apitrace: add new recipeMichael Tretter2020-10-191-0/+28
| | | | | | | | | | | | | | | apitrace consists of a set of tools to: - trace OpenGL, OpenGL ES, Direct3D, and DirectDraw APIs calls to a file; - replay OpenGL and OpenGL ES calls from a file; - inspect OpenGL state at any call while retracing; - visualize and edit trace files. Signed-off-by: Michael Tretter <m.tretter@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: use /run instead /var/run in systemd service fileQi.Chen@windriver.com2020-10-161-1/+1
| | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* musl-nscd: add packageArmin Kuster2020-10-091-0/+37
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnf-plugin-tui: upgrade 1.1 -> 1.2Zheng Ruoqin2020-09-291-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* luajit: advance SRCREV to fix two CVE'sSlater, Joseph2020-09-151-2/+4
| | | | | | | | | | | | Fix CVE-2020-15890 and CVE-2020-24372. Also change PV format because the reference to 2.1.0-beta3 was already far behind the SRCREV. Now, base PV on a tag and date of SRCREV commit if it is later. Sort order is 2.1.0~beta3 -> 2.1.0~beta-yymmdd -> 2.1.0 -> 2.1.0-yymmdd. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* geany: add source-code-pro-fonts to RRECOMMENDSAndreas Müller2020-09-121-0/+2
| | | | | | | Same: having source-code-pro-fonts around is like a bugfix Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* android-tools: Support libselinux to build with musl which now has gettidKhem Raj2020-09-101-12/+9
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lua: fix CVE-2020-24371Wenlin Kang2020-09-072-0/+91
| | | | | | | Fix CVE-2020-24371 Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* log4cplus: pkg moved to coreArmin Kuster2020-09-031-19/+0
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lua: fix CVE-2020-15945Wenlin Kang2020-09-012-0/+168
| | | | | | | | Backport with modifications to apply successfully. Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade 7.4.4 -> 7.4.9Leon Anavi2020-08-312-15/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 7.4.9: - Fixed: Upgrade apache2handler's php_apache_sapi_get_request_time to return usec - Fixed: BSTR to PHP string conversion not binary safe - Fixed: DCOM does not work with Username, Password parameter - Fixed: serialize() and unserialize() methods can not be called statically - Fixed: Segfault in php_str_replace_common - Fixed: Assertion failure if dumping closure with unresolved static variable - Fixed: Assertion failure when assigning property of string offset by reference - Fixed: HT iterators not removed if empty array is destroyed - Fixed: Changing array during undef index RW error segfaults - Fixed: Use after free if changing array during undef var during array write fetch - Fixed: Use after free if string used in undefined index warning is changed - Fixed: Public non-static property in child should take priority over private static - Fixed: getimagesize function silently truncates after a null byte - Fixed: finfo_file crash (FILEINFO_MIME) - Fixed: ftp_size on large files - Fixed: mb_strimwidth does not trim string - Fixed: Use of freed hash key in the phar_parse_zipfile function - Fixed: ::getStaticProperties() ignores property modifications - Fixed: ::getStaticPropertyValue() throws on protected props - Fixed: Use after free when type duplicated into ReflectionProperty gets resolved - Fixed: Can't copy() large 'data://' with open_basedir - Fixed: dns_check_record() always return true on Alpine - Fixed: array_walk() does not respect property types Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openocd: Update to latest git versionMarc2020-08-283-80/+3
| | | | | | | | | | The 0001-Do-not-include-sysctrl.h-with-glibc.patch is no longer needed, and is thus removed. The 0001-bitbang-Make-bitbang_swd-extern-definition.patch was fixed upstream in c60252ac2b636c4d99b766a574b9df0966151696 and is thus removed. Signed-off-by: Marc Reilly <marc@cpdesign.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* doxygen: Upgrade 1.8.17 -> 1.8.20Leon Anavi2020-08-262-278/+85
| | | | | | | | | | | | | | | | | | | | Upgrade to release 1.8.20: - Add configuration setting to have docstrings not as preformatted text but as normal documentation - Bug fix: void return type reported as not documented - Bug fix: Doxywizard 1.8.19 (Windows): Source code directory seems to be ignored - Bug fix: The Doxygen uses too much memory (or has probably a memory leak) - Bug fix: Doxygen doesn't stop on errors - Bug fix: C++ grouped functions in namespace have disappeard - Improvement of line count for e.g. warnings - Improved layout on the bibliography page - Updated the swedish language translation to 1.8.19 Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xmlrpc-c: fix Makefile macro errorArthur She2020-08-252-0/+30
| | | | | | | This error caused the curl library wouldn't to be linked correctly. Signed-off-by: Arthur She <arthur.she@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mercurial: Upgrade 5.4 -> 5.5Leon Anavi2020-08-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 5.5: - clonebundles can be annotated with the expected memory requirements using the REQUIREDRAM option. This allows clients to skip bundles created with large zstd windows and fallback to larger, but less demanding bundles. - The phabricator extension now provides more functionality of the arcanist CLI like changing the status of a differential. - Phases processing is much faster, especially for repositories with old non-public changesets. - For the case when connected to a TTY, stdout was fixed to be line-buffered on Python 3 - Subversion sources of the convert extension were fixed to work on Python 3 - Subversion sources of the convert extension now interpret the encoding of URLs like Subversion. - The empty changeset check of in-memory rebases was fixed to match that of normal rebases (and that of the commit command). - The push command now checks the correct set of outgoing changesets for obsolete and unstable changesets. Previously, it could happen that the check prevented pushing changesets which were already on the server. More details are available at: https://www.mercurial-scm.org/wiki/Release5.5 Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lshw: Upgrade 2.18 -> 2.19Leon Anavi2020-08-255-188/+128
| | | | | | | | | | | | | Upgrade to release B.02.19: - detection of NVMe disks - detection of SD/MMC and SDIO devices - bug fixes - code cleanup - updated data files Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* protobuf: upgrade 3.12.3 -> 3.13.0Zang Ruochen2020-08-211-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nlohmann-json: upgrade 3.9.0 -> 3.9.1Zang Ruochen2020-08-211-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* valijson: Move it to networking-layer under BBFILES_DYNAMICKhem Raj2020-08-201-36/+0
| | | | | | | | | | it has a hard dependency on curlpp package which comes from meta-networking Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Cc: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* json-schema-validator: Add recipeShlomi Vaknin2020-08-181-0/+14
| | | | | | Signed-off-by: Shlomi Vaknin <shlomi.39sd@gmail.com> Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xmlrpc-c: Upgrade 1.51.03 -> 1.54.02Arthur She2020-08-171-2/+3
| | | | | | | | | | | | | | | Upgrade to release 1.54.02: - Build: Use 'curl-config' found at configure time, not at make time. - Fix bug: 'toValue' won't compile for vector of vectors or map of vectors. Thanks Yang Bo . - Fix tiny memory leak in virtually impossible low memory situation. It also solved one igt-gpu-tools test results misleading issue [1] [1] https://gitlab.freedesktop.org/drm/igt-gpu-tools/-/issues/92 Signed-off-by: Arthur She <arthur.she@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: Upgrade to 12.18.3Khem Raj2020-08-135-327/+14
| | | | | | | Drop already upstreamed patches use builtin uv, it does not build without it Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openocd: Fix build with gcc10/-fno-commonKhem Raj2020-08-132-0/+43
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Adding recipe for exprtkVijay Khemka2020-08-111-0/+22
| | | | | | | | | | | | | The C++ Mathematical Expression Toolkit Library (ExprTk) is a simple to use, easy to integrate and extremely efficient run-time mathematical expression parsing and evaluation engine. The parsing engine supports numerous forms of functional and logic processing semantics and is easily extensible. It is a header only library. Signed-off-by: Vijay Khemka <vijaykhemka@fb.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipc-run: upgrade 20180523.0 -> 20200505.0Zang Ruochen2020-08-051-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jsonrpc: Fix build with libmicrohttpd 0.9.71Zang Ruochen2020-08-052-1/+56
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* abseil-cpp: Use SkipRecipe exceptionJacob Kroon2020-08-041-4/+4
| | | | | | | SkipPackage exception is deprecated. Signed-off-by: Jacob Kroon <jacob.kroon@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* boost-url: Add recipeJames Feist2020-08-041-0/+17
| | | | | | | boost-url is a library for manipulating URI and URL. Signed-off-by: James Feist <james.feist@linux.intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nlohmann-json: upgrade 3.7.3 -> 3.9.0Zang Ruochen2020-07-313-146/+2
| | | | | | | | | | | -License-Update: Copyright year updated to 2020. -0001-Templatize-basic_json-ctor-from-json_ref.patch -0001-typo-fix.patch Removed since these are included in 3.9.0 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lua: Security Advisory - lua - CVE-2020-15888Yue Tao2020-07-282-0/+46
| | | | | | | | Backport fix from https://github.com/lua/lua.git. Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>