summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* gd: upgrade v2.3.2 -> v2.3.3Sakib Sajal2021-10-082-37/+3
| | | | | | | | | | | | Changes: i) removed patches contained in newer version ii) LIC_FILES_CHKSUM changed because of the following commits: 6013c7bc Just make it easier for the doc 82d26095 merge duplicate COPYING files Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libiio: Make libiio-python3 depend on python3-corePeter Kjellerstedt2021-10-081-1/+4
| | | | | | | | Inheriting setuptools3 incorrectly adds the dependency on python3-core to libiio instead of to libiio-python3 where it belongs. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* dash: upgrade 0.5.11.3 -> 0.5.11.5zangrc2021-09-261-2/+1
| | | | | | | | | | parser: Fix VSLENGTH parsing with trailing garbage eval: Do not cache value of eflag in evaltree Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 633f2115055dbc529f94eb39487e38ba384f6b83) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* crash: upgrade 7.2.9 -> 7.3.0zangrc2021-09-265-563/+14
| | | | | | | | | | | | | | | | Refresh the following patch: donnot-extract-gdb-during-do-compile.patch remove-unrecognized-gcc-option-m32-for-mips.patch 0001-printk-add-support-for-lockless-ringbuffer.patch 0002-printk-use-committed-finalized-state-values.patch Removed since these are included in 7.3.0. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c833f0248954cad69cc14f866eb4003752e0b6eb) [Fixes issue with 5.10 kernel] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* can-utils: rrecommend iproute2 to make it possible to configure can interfacesAlexander Kanavin2021-09-261-0/+5
| | | | | | | | | | This replicates the fix from canutils.bb, for the same issue. See the link in the comment for details. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 020b87add3368b259662c5994a5a9d7edaa58085) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* dstat: Add missing python-six runtime dependencyMarek Vasut2021-09-201-1/+1
| | | | | | | | | | | | | | | | | | The tool depends on the six module, add it, otherwise the following traceback happens when running it on the target: Traceback (most recent call last): File "/usr/bin/dstat", line 32, in <module> import six ModuleNotFoundError: No module named 'six' Signed-off-by: Marek Vasut <marex@denx.de> Cc: Khem Raj <raj.khem@gmail.com> Cc: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 866e2e88911c0975403b6f2be2cd498b34c2b395) [minor fixup for Hardknott context] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: Upgrade to 10.5.12Mingli Yu2021-09-154-3/+3
| | | | | | | | | Fixes for the following security vulnerabilities: CVE-2021-2372 CVE-2021-2389 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: fix CVE-2021-3672Changqing Li2021-09-143-0/+197
| | | | | | | | | | Refer: https://c-ares.org/adv_20210810.html https://github.com/c-ares/c-ares/commit/362f91d807d293791008cdb7616d40f7784ece83 https://github.com/c-ares/c-ares/commit/44c009b8e62ea1929de68e3f438181bea469ec14 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vboxguestdrivers: Remove __divmoddi4 patchKhem Raj2021-09-082-37/+0
| | | | | | | | | | This function has been added upstream as well, therefore the patch is no longer needed Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Gianfranco Costamagna <locutusofborg@debian.org> (cherry picked from commit 552269da69d3c7d366ca3ad7340de715f06005a5) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: fix CVE-2021-32761Joe Slater2021-09-072-0/+258
| | | | | | | Backport from version 6.2.5. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup: Add runtime dependency on lvm2-udevrules for udevKristian Klausen2021-09-071-1/+1
| | | | | | | | | Without the udevrules cryptsetup luksOpen will be hanging with "Udev cookie 0xd4de0f6 (semid 5) waiting for zero". Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 60b33e376b2331cd20950f0745336397790d2201) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup: Only recommend kernel modules when building for targetPeter Kjellerstedt2021-09-071-12/+13
| | | | | | | | | | | | | | | | | | | | | | Otherwise cryptsetup-native depends on the target kernel and thus the target compiler, as can be seen by: $ bitbake -g cryptsetup-native $ grep 'cryptsetup.*linux-yocto' task-depends.dot "cryptsetup-native.do_build" -> "linux-yocto.do_deploy" "cryptsetup-native.do_build" -> "linux-yocto.do_package_write_rpm" "cryptsetup-native.do_populate_sysroot" -> "linux-yocto.do_populate_sysroot" $ grep 'linux-yocto.*gcc-cross' task-depends.dot "linux-yocto.do_kernel_configme" -> "gcc-cross-x86_64.do_populate_sysroot" "linux-yocto.do_prepare_recipe_sysroot" -> "gcc-cross-x86_64.do_populate_sysroot" This also moves the runtime dependencies to near the end of the recipe, which is more customary. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 497602b4840720e8351ecf961ac6f85103093750) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup: upgrade 2.3.5 -> 2.3.6zangrc2021-09-071-2/+2
| | | | | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 056d0892f0e2d1eb30029dbe9810b0800e87e634) [Bugz fix only update] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2021-36222Yi Zhao2021-09-072-0/+122
| | | | | | | | | | | | | | | | | | | | CVE-2021-36222: ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation. References: https://nvd.nist.gov/vuln/detail/CVE-2021-36222 Patches from: https://github.com/krb5/krb5/commit/fc98f520caefff2e5ee9a0026fdf5109944b3562 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 620badcbf8a59fbd2cdda6ab01c4ffba1c3ee327) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cjson: upgrade 1.7.14 -> 1.7.15wangmy2021-09-061-1/+1
| | | | | | | | | | | | | | Fixes: Fix potential core dumped for strrchr, see https://github.com/DaveGamble/cJSON/pull/546 Fix null pointer crash in cJSON_CreateXxArray, see https://github.com/DaveGamble/cJSON/pull/538 Fix several null pointer problems on allocation failure, see https://github.com/DaveGamble/cJSON/pull/526 Fix a possible dereference of null pointer, see https://github.com/DaveGamble/cJSON/pull/519 Fix windows build failure about defining nan, see https://github.com/DaveGamble/cJSON/pull/518 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit fa00ac02df4e3caabe8ba81d1700cec835bcb139) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* dlt-daemon: update from 2.18.6 to 2.18.7Gianfranco2021-09-042-3/+47
| | | | | | | | | | | | - add an upstream proposed patch 317.patch to fix a build failure with enabled systemd binding Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 01fa60898c2fe65f327bea2f84aaca00aef3f371) [Stable version, bug fix only] Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gd: fix CVE-2021-38115Sakib Sajal2021-08-262-0/+34
| | | | | Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linuxptp: upgrade 3.1 -> 3.1.1Changqing Li2021-08-261-3/+3
| | | | | | | | | | | | | | | | | | | * fix WARNING: linuxptp-3.1-r0 do_fetch: Failed to fetch URL http://sourceforge.net/projects/linuxptp/files/v3.1/linuxptp-3.1.tgz, attempting MIRRORS if available linuxptp-3.1.tgz replace by linuxptp-3.1.1.tgz * 3.1.1 release note Version 3.1.1 Fixes: CVE-2021-3570 linuxptp: missing length check of forwarded messages CVE-2021-3571 linuxptp: wrong length of one-step follow-up in transparent clock Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ldns: fix override syntaxRoland Hieber2021-08-251-1/+1
| | | | | | | | | | | | | | | | | | Commit 2e794f33a43d71bb9861 cherry-picked a fix from master, which used the new override syntax, which was introduced in poky commit 2abf8a699edd513405be (2021-07-25, "bitbake: bitbake: Switch to using new override syntax"). However, this change was merged after 3.4_M2 and is not part of hardknott, so bitbake complains about the new syntax: ERROR: ParseError at …/meta-openembedded/meta-oe/recipes-devtools/ldns/ldns_1.7.1.bb:20: unparsed line: 'do_install:append() {' Revert to the old syntax on the hardknott branch for now. Fixes: 2e794f33a43d71bb9861 (2021-08-09, "ldns: fix QA Issue after LDFLAGS change") Signed-off-by: Roland Hieber <rhi@pengutronix.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* polkit: fix CVE-2021-3560Mingli Yu2021-08-212-0/+32
| | | | | | | | | | | Backport a patch [1] to fix CVE-2021-3560. [1] https://gitlab.freedesktop.org/polkit/polkit/-/commit/a04d13affe0fa53ff618e07aa8f57f4c0e3b9b81 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b65c646b25a2652de02ba2adbbef942b5b475e7f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fvwm: Fix build time paths in target perl/python scriptsKhem Raj2021-08-151-0/+7
| | | | | | | | | Add rdeps as needed Fixes shebang-size QA warnings Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8cc64128c70c5b6a41b050332abb1d73a10ef4fa) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fvwm: Package extra files and man pagesKhem Raj2021-08-151-6/+12
| | | | | | | | Avoids using installed-vs-shipped Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 566049b4f1ddc049c1f89a5838d1a71bb429faa3) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: fix CVE-2021-32625Tony Tascioglu2021-08-142-0/+62
| | | | | | | | | | | | | CVE: CVE-2021-32625 Upstream-Status: Backport [e9a1438ac4c52aa68dfa2a8324b6419356842116] Fix integer overflow in STRALGO LCS (CVE-2021-32625) (#9011) An integer overflow bug in Redis version 6.0 or newer can be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ldns: fix QA Issue after LDFLAGS changeTony Battersby2021-08-141-0/+7
| | | | | | | | | | | | | | | Adding -f*-prefix-map to LDFLAGS caused the following issue: QA Issue: ldns.pc failed sanity test (tmpdir) Fix by filtering out -f*-prefix-map from *.pc files. [YOCTO #14481] Signed-off-by: Tony Battersby <tonyb@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a4791bf2f37de55dd51971d34ac2252d3cf68f30) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdbi-perl: fix CVE-2014-10402Kai Kang2021-08-142-1/+59
| | | | | | | | | | | | | | Backport patch to fix CVE-2014-10402. CVE: CVE-2014-10402 Ref: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972180#12 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c80b3757ffc762a1577bcf7d0da41ebf1954b3f1) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: Update SRC_URIMingli Yu2021-08-071-1/+1
| | | | | | | | | | | | | | The previous SRC_URI only stores the latest source tarball and we will meet do_fetch issue if not upgrade timely. Update the SRC_URI which stores all versions to fix some warning like below: WARNING: mariadb-10.5.9-r0 do_fetch: Failed to fetch URL https://downloads.mariadb.org/interstitial/mariadb-10.5.9/source/mariadb-10.5.9.tar.gz, attempting MIRRORS if available Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit da798f15ffd93759e1ba3f21bd1ba80c73e962af) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: redefine log-error itemMingli Yu2021-08-012-6/+1
| | | | | | | | | | | | | | | | | | | | | The log-error item which defined in my.cnf is "/var/log/mysqld.err" previouly and it's not consistent with which created in install_db service file which will call mysql-systemd-start to create the file "/var/log/mysqld.log". And it fails when boot with sysvinit as below: $ service mysqld start Starting MariaDB.210727 04:05:03 mysqld_safe Logging to '/var/log/mysqld.err'. 210727 04:05:03 mysqld_safe Starting mariadbd daemon with databases from /var/lib/mysql /usr/bin/mysqld_safe_helper: Can't create/write to file '/var/log/mysqld.err' (Errcode: 13 "Permission denied") So make the log-error item consistent to fix the above failure and also remove the related workaround when boot with systemd. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1a4144d954692ad68121d16adae09dc990e8ab1f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vboxguestdrivers: upgrade 6.1.22 -> 6.1.24Gianfranco2021-08-012-279/+3
| | | | | | | | | | | Drop patch to fix build failure with kernel 5.13, now part of upstream codebase Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 66b5131e266a6e4a82b467d58cb657a28a2e4b7e) [stable branch] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pm-qa: fix paths for shell scriptsAnastasios Kavoukis2021-08-011-1/+2
| | | | | | | | | | | | | | | | | | | | A commit in the repo of pm-qa: "adf9df9 Fix path to library files and change shebang line" Changed the text that sed was using to replace relative to absolute paths. As a result sed was not effectively finding the text "source ../include" to replace it, as the sed should be now searching for ". ../include". Similarly for "../Switches" Signed-off-by: Anastasios Kavoukis <anastasios.kavoukis@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 06a93a04efe2c2cbae6de93d07962be4dfa35019) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Suppress eol in functionfs setup scripts (#147)Devendra Tewari2021-08-013-4/+4
| | | | | | | | | | Stray newline character causes errors in functionfs setup scripts used by android-tools-adbd.service, when using musl libc and/or toybox. Signed-off-by: Devendra Tewari <devendra.tewari@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit db5f48734404a52ee5323659082f1d6baa225ca7) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: move to version 7.4.21Joe Slater2021-08-011-1/+2
| | | | | | | | | | | Lots of bug fixes. CVE: CVE-2021-21704 CVE-2021-21705 Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 93045c3db744a9f1cd0a9b0ce992d44d9c44c309) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* htop: Add ncurses-terminfo-base to RDEPENDSPaulo Neves2021-08-011-0/+2
| | | | | | | | Without it there are no terminal configurations on the target and htop refuses to run. (cherry picked from commit b5d74f8a6bd33e8468dd04d990f08d89d1e6928a) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vboxguestdrivers: add a fix for build failure with kernel 5.13Gianfranco2021-07-182-0/+277
| | | | | | | | | | Its already upstream and also used in Debian and Ubuntu Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d0f2d7c954b9f3befd9470d97de581fe5b1fb2a8) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vboxguestdrivers: upgrade 6.1.20 -> 6.1.22Gianfranco2021-07-181-2/+2
| | | | | | | | | Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 319490178b999a74a82d092320de5d9d2e5c67bd) [Stable branch] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vboxguestdrivers: upgrade 6.1.18 -> 6.1.20Gianfranco2021-07-182-26/+2
| | | | | | | | | | | Drop all patches, now part of upstream codebase Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 37537bda8c4775ce1c390d1a9a5b2f5fab89bfc7) [Stable branch] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: fix failures to start install_db.serviceKai Kang2021-07-181-11/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It fails to start install_db.service when install mariadb-setupdb from a package repo via dnf: root@qemux86-64:~# systemctl status install_db x install_db.service - Install MySQL Community Server Database Loaded: loaded (/lib/systemd/system/install_db.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Fri 2021-07-09 02:55:12 UTC; 5s ago Process: 504 ExecStart=/usr/bin/mysql-systemd-start pre (code=exited, status=203/EXEC) Main PID: 504 (code=exited, status=203/EXEC) Jul 09 02:55:12 qemux86-64 systemd[1]: Starting Install MySQL Community Server Database... Jul 09 02:55:12 qemux86-64 systemd[504]: install_db.service: Failed to locate executable /usr/bin/mysql-systemd-start: No such file or directo> Jul 09 02:55:12 qemux86-64 systemd[504]: install_db.service: Failed at step EXEC spawning /usr/bin/mysql-systemd-start: No such file or direct> Jul 09 02:55:12 qemux86-64 systemd[1]: install_db.service: Main process exited, code=exited, status=203/EXEC Jul 09 02:55:12 qemux86-64 systemd[1]: install_db.service: Failed with result 'exit-code'. Jul 09 02:55:12 qemux86-64 systemd[1]: Failed to start Install MySQL Community Server Database. The scripts required by install_db.service are packaged in mariadb-server which depends on mariadb-setupdb already. So move the scripts to mariadb-setupdb to make sure start install_db.service successfully. And move creating user 'mysql' in mariadb-setupdb as well. Packageconfig 'setupdb' has been useless from last upgrade, so remove it at same time. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b7554ae2855483edc0a7d4c533d7d818bbc9e4f8) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: Upgrade to 10.5.11Zoltán Böszörményi2021-07-184-2/+2
| | | | | | | | | | Forward port musl patches Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 287ffdf1d03731fadd6a90b224d08cf9a3b50de5) [Stable branch] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: Use qemu to run cross-compiled binariesZoltán Böszörményi2021-07-184-108/+15
| | | | | | | | | This way, mariadb does not depend on mariadb-native anymore. Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 6f05b2463a20f99d43c5a7db190dfe3490929247) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: Fix build with clang/muslKhem Raj2021-07-182-0/+12
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit abbca30bd61c0ff856785900aac899ab33ead08b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: Include missing sys/type.h for ssize_tKhem Raj2021-07-182-0/+16
| | | | | | | | | | | | | | | musl finds this problem in sources where its missing to include needed system header for ssize_t Fixes wsrep-lib/include/wsrep/gtid.hpp:80:5: error: unknown type name 'ssize_t'; did you mean 'size_t'? ssize_t scan_from_c_str(const char* buf, size_t buf_len, ^~~~~~~ size_t Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0298521fcd9eefdd9cd415b58740b972d65cf93c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: Upgrade to 10.5.10Khem Raj2021-07-186-56/+10
| | | | | | | | | | | | | | Drop fix-a-building-failure.patch because upstream has made is narrower to apply to emulator builds and not just any cross compiling builds Add missing dependency on boost Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 2183f0894110a6913c44bee9a1f4b1cea7639bdc) [Bug fix only update: CVE-2021-2166 CVE-2021-2154 ] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: Fix configureAndreas Müller2021-07-182-0/+36
| | | | | | | | | Assume recent CMake upgrade made this pop up. Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit ca18e276d63e9fc6fece6a32e88959cbcf84c91b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: fix CVE-2021-29478Tony Tascioglu2021-07-172-0/+43
| | | | | | | | | | | | | | | | | | | | | | This patch backports the fix for CVE-2021-29478 CVE: CVE-2021-29478 Upstream-Status: Backport [https://github.com/redis/redis/commit/29900d4e6bccdf3691bedf0ea9a5d84863fa3592] An integer overflow bug in Redis 6.2 could be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default set-max-intset-entries configuration value, creating a large set key that consists of integer values and using the COPY command to duplicate it. The integer overflow bug exists in all versions of Redis starting with 2.6, where it could result with a corrupted RDB or DUMP payload, but not exploited through COPY (which did not exist before 6.2). Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: fix CVE-2021-29477Tony Tascioglu2021-07-172-0/+36
| | | | | | | | | | | | | | | This patch backports the fix for CVE-2021-29477. CVE: CVE-2021-29477 Upstream-Status: Backport [https://github.com/redis/redis/commit/f0c5f920d0f88bd8aa376a2c05af4902789d1ef9] An integer overflow bug in Redis version 6.0 or newer could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sysbench: fix memory testmassimo toscanelli2021-07-142-1/+43
| | | | | | | | | | | | | | | | | | | In sysbench version 0.4, the tmp variable used by the memory test to execute requests is optimized by the compiler. Caching mechanism reduces the direct accesses to the memory increasing the transfer speed. This leads to false timing estimations that considerably affect read and also random write operations. In sysbench version 1, this issue is fixed adding the volatile modifier to the tmp variable. This prevents compiler optimizations forcing a direct access to the memory. The final result is a realistic transfer speed measurement. Signed-off-by: massimo toscanelli <massimo.toscanelli@leica-geosystems.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 59cce5ad1603c2975684ae15b639e0e3cd688c40) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libiio: fix installing libiio when python3 bindings are enabledSam Van Den Berge2021-07-132-1/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch fixes the following error when libiio is installed when python3 bindings are enabled: ERROR: Execution of '.../libiio/0.21+gitAUTOINC+565bf68ecc-r0/temp/run.do_install.2349473' failed with exit code 1: running build running build_py running install Traceback (most recent call last): File ".../libiio/0.21+gitAUTOINC+565bf68ecc-r0/build/bindings/python/setup.py", line 77, in _check_libiio_installed raise OSError OSError During handling of the above exception, another exception occurred: Traceback (most recent call last): File ".../libiio/0.21+gitAUTOINC+565bf68ecc-r0/build/bindings/python/setup.py", line 106, in <module> setup(**config) File ".../libiio/0.21+gitAUTOINC+565bf68ecc-r0/recipe-sysroot-native/usr/lib/python3.9/site-packages/setuptools/__init__.py", line 153, in setup return distutils.core.setup(**attrs) File ".../libiio/0.21+gitAUTOINC+565bf68ecc-r0/recipe-sysroot-native/usr/lib/python3.9/distutils/core.py", line 148, in setup dist.run_commands() File ".../libiio/0.21+gitAUTOINC+565bf68ecc-r0/recipe-sysroot-native/usr/lib/python3.9/distutils/dist.py", line 966, in run_commands self.run_command(cmd) File ".../libiio/0.21+gitAUTOINC+565bf68ecc-r0/recipe-sysroot-native/usr/lib/python3.9/distutils/dist.py", line 985, in run_command cmd_obj.run() File ".../libiio/0.21+gitAUTOINC+565bf68ecc-r0/build/bindings/python/setup.py", line 52, in run self._check_libiio_installed() File "/libiio/0.21+gitAUTOINC+565bf68ecc-r0/build/bindings/python/setup.py", line 83, in _check_libiio_installed raise Exception(msg) Exception: The libiio library could not be found. libiio needs to be installed first before the python bindings. The latest release can be found on GitHub: https://github.com/analogdevicesinc/libiio/releases Some time ago a fix for this issue was already discussed here [1]. However in the same discussion also a second issue was being handled. A fix for the second issue was merged in 51f98865da0. The first issue didn't pop up anymore and so a fix was never applied. Recently however after switching from build machine, I started seeing the first issue. I suspect due to build caching the first issue didn't pop up anymore before up until now. With this patch, fixes are now available for both issues handled in [1]. [1]: https://github.com/openembedded/meta-openembedded/issues/248 Signed-off-by: Sam Van Den Berge <sam.van.den.berge@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nss: add CVE-2006-5201 to allowlistMasaki Ambai2021-07-101-0/+3
| | | | | | | | | CVE-2006-5201 affects only using an RSA key with exponent 3 on Sun Solaris. Signed-off-by: Masaki Ambai <ambai.masaki@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 44113dcb5feea5522696d43d00909db41e5e6dbc) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* minifi-cpp: set CLEANBROKEN to 1Chen Qi2021-06-271-0/+2
| | | | | | | | | | | | Rebuilding minifi-cpp in old build dir sometimes result in do_compile failure. So set CLEANBROKEN to "1" to workaround this problem. If further investigation is done and the underlying problem is addressed, this setting could be removed. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a9e17243875b82dba698924cf2f1d31408127521) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* rapidjson: remove stale LIB_INSTALL_DIRAndrea Adami2021-06-271-1/+1
| | | | | | | | | | | | | | | | | | This was introduced with commit: 2e0fd78 rapidjson: fix cmake artifacts installation for non-default BASELIB case and should have been removed with commit: 5aa127a rapidjson: Remove unwanted patches NOTE: such multilib fixes are not needed after this commit in oe-core: 24f630c cmake.bbclass: Define LIB_SUFFIX Signed-off-by: Andrea Adami <andrea.adami@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0ceacaa68e212cc06ea7371a206bdbe21033cc05) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* minifi-cpp: set correct python processor directory in configure fileYi Zhao2021-06-271-0/+3
| | | | | | | | | | | Set an appropriate python processor directory in configure file to fix the minifi startup warning: [org::apache::nifi::minifi::python::PythonCreator] [error] Could not access /etc/minifi/minifi-python/ Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a86b772e31079231a04762ed49ec83d32005ca15) Signed-off-by: Armin Kuster <akuster808@gmail.com>