summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-graphics
Commit message (Collapse)AuthorAgeFilesLines
* openjpeg: Backport fix CVE-2023-39327Vijay Anusuri2025-02-092-0/+83
| | | | | | | | | | | Upstream commit: https://github.com/uclouvain/openjpeg/commit/c58bc128b4f770e7c89bc8ba3d0273b9a3904aad Reference: https://github.com/uclouvain/openjpeg/pull/1547 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openjpeg: fix CVE-2024-56827Zhang Peng2025-01-222-0/+34
| | | | | | | | | | | | | | | | | | CVE-2024-56827: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2024-56827] [https://github.com/uclouvain/openjpeg/issues/1564] Upstream patches: [https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openjpeg: fix CVE-2024-56826Zhang Peng2025-01-222-0/+131
| | | | | | | | | | | | | | | | | | CVE-2024-56826: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2024-56826] [https://github.com/uclouvain/openjpeg/issues/1563] Upstream patches: [https://github.com/uclouvain/openjpeg/commit/98592ee6d6904f1b48e8207238779b89a63befa2] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vk-gl-cts: Fix branch namesRamax Lo2024-12-081-3/+3
| | | | | | | | The branch names of several upstream repos have been changed, thus we update the recipe to avoid fetching failure. Signed-off-by: Ramax Lo <ramaxlo@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xterm: Security fix for CVE-2023-40359Rohini Sangam2024-04-282-0/+389
| | | | | | | | | | | | | CVE fixed: - CVE-2023-40359 xterm: ReGIS reporting for character-set names containing characters other than alphanumerics or underscore Upstream-Status: Backport from https://github.com/ThomasDickey/xterm-snapshots/commit/41ba5cf31da5e43477811b28009d64d3f643fd29 Note: The CVE patch is part of minor version-up and is extracted from the snapshot of xterm-379c. Documentation of the commit shows 2 different overflows being fixed and hence the fix was extracted from the commit. Signed-off-by: Rohini Sangam <rsangam@mvista.com> Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openjpeg: Backport fix CVE-2021-3575Vivek Kumbhar2024-03-252-0/+46
| | | | | | | Upstream-Status: Backport from https://github.com/uclouvain/openjpeg/commit/7bd884f8750892de4f50bf4642fcfbe7011c6bdf Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* graphviz: fix CVE-2023-46045Meenali Gupta2024-02-284-0/+111
| | | | | | | | Graphviz 2.36 before 10.0.0 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root. Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xscreensaver: Add osuosl backup MIRRORJoao Marcos Costa2024-02-071-0/+2
| | | | | | | | | | | | | old tarballs disappear from main location, use a backup location to fetch it in such cases. Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joao Marcos Costa <joaomarcos.costa@bootlin.com> Backported from Nanbield (cherry-picked from commit 8d34444c749a466f35445fd4c2212b3fbdb8d844) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-oe: Drop broken BBCLASSEXTEND variantsRichard Purdie2023-11-173-4/+1
| | | | | | | | | | | | | | | | | | | | | | | | The command "bitbake universe -c fetch" currently throws a ton of warnings as there are many 'impossible' dependencies. In some cases these variants may never have worked and were just added by copy and paste of recipes. In some cases they once clearly did work but became broken somewhere along the way. Users may also be carrying local bbappend files which add further BBCLASSEXTEND. Having universe fetch work without warnings is desireable so clean up the broken variants. Anyone actually needing something dropped here can propose adding it and the correct functional dependencies back quite easily. This also then ensures we're not carrying or fixing things nobody uses. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9962d57f7c235873de0a0bb192b5f56747762fc7) Backport: * Updated paths to follow PV changes * Adapted modified recipes to the ones generating warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* freeglut: Add packageconfigs for x11/wayland/glesKhem Raj2023-09-231-4/+14
| | | | | | | | | helps it compiling on on different openGL implementations which may not implement fulll openGL specs Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a9212722c1b1a2ab29215651063ca94fb114c39b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-oe-components: Avoid usage of nobranch=1Sourav Kumar Pramanik2023-09-043-3/+3
| | | | | | | | | The usage of nobranch=1 in SRC_URI allows using unprotected branches. This change updates the real branch name in place of nobranch=1 for these components. Signed-off-by: Sourav Kumar Pramanik <pramanik.souravkumar@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tslib: Add native & nativestdk package supportBhargav Das2023-05-061-0/+2
| | | | | | | Add support for building native and nativesdk variants. Signed-off-by: Bhargav Das <bhargav.das@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lvgl,lv-lib-png,lv-drivers: fix installed-vs-shipped QA issue with multilibMartin Jansa2023-04-133-10/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * with multilib BASELIB is just "lib" while baselib is "lib64" and libdir is "/usr/lib64". * fixes: ERROR: QA Issue: lvgl: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/liblvgl.a Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. lvgl: 2 installed and not shipped files. [installed-vs-shipped] * lowercase baselib should work for ppc64 as well (I hope) # $baselib [3 operations] # set oe-core/meta/conf/bitbake.conf:10 # "${BASELIB}" # set oe-core/meta/conf/bitbake.conf:11 # [vardepvalue] "${baselib}" # set oe-core/meta/conf/multilib.conf:2 # "${@d.getVar('BASE_LIB:tune-' + (d.getVar('DEFAULTTUNE') or 'INVALID')) or d.getVar('BASELIB')}" # pre-expansion value: # "${@d.getVar('BASE_LIB:tune-' + (d.getVar('DEFAULTTUNE') or 'INVALID')) or d.getVar('BASELIB')}" baselib="lib64" * simplify destsuffix/S setting * I was surprised that ${WORKDIR}/${PN}-${PV} works in multilib build but then I've noticed that it's because destsuffix is set to S which is a bit uncommon, so drop that and use default "git" * use ${STAGING_INCDIR} instead of ${RECIPE_SYSROOT}/${includedir} Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xterm : Fix CVE-2022-45063 code execution via OSC 50 input sequences] ↵Siddharth Doshi2023-01-042-0/+783
| | | | | | | | | | | CVE-2022-45063 Upstream-Status: Backport [https://github.com/ThomasDickey/xterm-snapshots/commit/787636674918873a091e7a4ef5977263ba982322] CVE: CVE-2022-45063 Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Fix tigervnc crash due to missing xkbcomp rdependsAlexander Thoma2022-11-011-1/+1
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 447de4d47ba2deba1af80201b91bb312f184fe0e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libsdl: add CVE-2019-14906 to allowlistHitomi Hasegawa2022-10-041-0/+3
| | | | | | | | | | CVE-2019-14906 is a Red Hat vulnerability and Yocto is not applicable. So add it to the allowlist. Signed-off-by: Hitomi Hasegawa <hasegawa-hitomi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8803be17aada56ec6a11fba4db9df74f16f9c58c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openjpeg: ignore CVE-2015-1239Davide Gardenal2022-07-261-0/+4
| | | | | | | This CVE is patched in our version of openjpeg. The NVD database doesn't include a version range this is why it's still reported. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
* meta-oe: ignore patched CVEsDavide Gardenal2022-07-212-0/+8
| | | | | | | | | | | Some old CVEs don't have a vulnerable version range in the NVD database, this causes come mismatch with cve-check. Ignore many CVEs that are picked up by the class but are patched in our products. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit efa12676dd0676fd0aa63457d7ba360fe8a6fae2) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tesseract-lang: switch from master branch to mainMartin Jansa2022-06-151-1/+1
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* graphviz: rrecommends on liberation-fontsKai Kang2022-06-031-0/+2
| | | | | | | | | | There will be tofos in output pictures without any font, so make graphviz rrecommends on liberation-fonts. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0e036cb1bc0c272b27cbd7e42eacbae48edc685e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* imlib2: update SRC_URINicolas Dechesne2022-05-231-1/+1
| | | | | | | | | | | | | | | | | The upstream repo location has changed, it's now https://git.enlightenment.org/old/legacy-imlib2 It's not clear when or why it happened, but the the commit hash we use in SRCREV exists in the 'new' location, so let's at least update the SRC_URI for now, and fix this warning: WARNING: imlib2-1.7.1-r0 do_fetch: Failed to fetch URL git://git.enlightenment.org/legacy/imlib2.git;protocol=https;branch=master, attempting MIRRORS if available Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 62becef1091d21f487e826df7be7dcef3ab8f94c) Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pangomm: Allow building with waylandKhem Raj2022-05-031-1/+2
| | | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Andreas Müller <schnitzeltony@gmail.com> (cherry picked from commit 9abe74eb0bd53316b0bb3fe1d241c83e2674e72e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* dietsplash: specify install rootdirKhem Raj2022-05-031-1/+1
| | | | | | | | This takes care of rootdir being different when using usrmerge Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8cec1f1fd9ea585039d985943f3f20b37aff9a3b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xterm: upgrade 368 -> 372wangmy2022-04-151-2/+2
| | | | | | | | | | | | License-Update: Copyright year updated to 2022 Changelog: ========== * amend allocation/freeing of scrollback lines, eliminating an adjustment for status-line added in patch #371 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* twm: upgrade 1.0.11 -> 1.0.12wangmy2022-04-151-2/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* st: upgrade 0.8.4 -> 0.8.5wangmy2022-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openjpeg: fix CVE-2022-1122Marguet, Nicolas2022-04-142-0/+32
| | | | | | | | | | | | CVE: CVE-2022-1122 The defect is undergoing reanalysis and there may be follow-up commits. Ref: * https://github.com/uclouvain/openjpeg/issues/1368 Signed-off-by: Nicolas Marguet <nicolas.marguet@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* parallel-deqp-runner: Fix build with gcc 12Khem Raj2022-04-132-0/+46
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* feh: upgrade 3.6.1 -> 3.8wangmy2022-04-111-1/+1
| | | | | | | Changelog from 3.6.1 to 3.8 is included in https://feh.finalrewind.org/archive/ Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xorg-sgml-doctools: upgrade 1.11 -> 1.12wangmy2022-04-061-3/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* graphviz: don't clear PACKAGECONFIG for nativesdkChristian Eggers2022-03-291-1/+0
| | | | | | | librsvg is available again on nativesdk Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* graphviz: add pkg_postinst scriptKai Kang2022-03-291-1/+18
| | | | | | | | | | | | It needs to run `dot -c` first before call 'dot' command, otherwise it fails with: | Format: "png" not recognized. No formats found. | Perhaps "dot -c" needs to be run (with installer's privileges) to register the plugins? Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* graphene: upgrade 1.10.6 -> 1.10.8Wang Mingyu2022-03-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xbindkeys: Add recipeLeon Anavi2022-03-241-0/+18
| | | | | | | | | | | xbindkeys is an application that allows you to launch shell commands with your keyboard or your mouse under X Window. It links commands to keys or mouse buttons, using a configuration file. It is independant of the window manager and can capture all keyboard keys. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lvgl,lv-lib-png,lv-drivers: Pass libdir via LIB_INSTALL_DIR to cmakeKhem Raj2022-03-213-1/+4
| | | | | | Ensures it packages correclty on all platforms e.g. pp64 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgphoto: Fix build with libtool 2.4.7Khem Raj2022-03-191-0/+5
| | | | | | Delete old m4 macros, so autoreconf can repopulate it. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libvdpau: allow to build native and nativesdkMarkus Volk2022-03-171-0/+2
| | | | | | This fixes an error if trying to add libvdpau to mesa PACKAGECONFIG Signed-off-by: Khem Raj <raj.khem@gmail.com>
* graphviz: 2.44.1 -> 2.50.0Kai Kang2022-03-171-11/+6
| | | | | | | | | | | | | | Update graphviz from 2.44.1 to 2.50.0. * update SRC_URI * remove patches can not be applied * mkdefs is not provided any longer, so remove installation for graphviz-native * rrecommends on liberation-fonts that there will be tofos in outputed pictures without any font Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libvdpau: upgrade 1.4 -> 1.5Wang Mingyu2022-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ttf-vlgothic: Specify accurate BSD license typeKhem Raj2022-03-111-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl2-ttf: Change depenendency from virtual/libgl to virtual/eglKhem Raj2022-03-091-1/+1
| | | | | | Fixes build on graphics drivers not providing GL implementation Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fbida: Fix build when x11 is not enabled in distro featuresKhem Raj2022-03-061-0/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-0442-42/+42
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cairomm: correct SRC_URIKai Kang2022-03-031-1/+1
| | | | | | | It fails to run do_fetch for multilib build. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* graphviz: added PACKAGECONFIG for librsvgChristian Eggers2022-02-221-1/+4
| | | | | | | | | | | | nativesdk-librsvg is not available anymore ([2], transition to Rust). According to [2], graphviz can be used fine (even with svg images) without librsvg. [1] oe-core: 67dd505c42 ("librsvg: do not enable nativesdk") [2] https://www.linuxfromscratch.org/blfs/view/cvs/general/graphviz.html Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pangomm: Add recipe for pangomm-2.48Khem Raj2022-02-212-2/+21
| | | | | | | | | Upgrade normal pangomm to 2.46.2 Changes in 2.50.0 release are here https://gitlab.gnome.org/GNOME/pangomm/-/commit/cd00ba55a53b71a41fb566827db8b7d7c28c36b6#9f621eb5fd3bcb2fa5c7bd228c9b1ad42edc46c8 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cairomm: Add recipe for cairomm 1.16Khem Raj2022-02-212-3/+22
| | | | | | | | | Upgrade normal cairomm to 1.14.3 Changes in 1.16 are here https://github.com/freedesktop/cairomm/blob/master/NEWS Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Fix DeprecationWarning about regexpsMartin Jansa2022-02-212-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes: meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:125: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:126: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:128: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:129: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:130: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-graphics/ttf-fonts/ttf-mplus_027.bb:18: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio-paranoia_10.2+2.0.1.bb:21: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio_2.1.0.bb:28: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1342: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \- oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1344: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1345: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1348: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1350: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1353: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1355: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1358: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1360: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1365: DeprecationWarning: invalid escape sequence \. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-oe: Use new variable SYSROOT_DIRS_IGNOREKhem Raj2022-02-211-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Use renamed SKIP_RECIPE varFlagKhem Raj2022-02-212-2/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>