summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
...
* xterm: provide virtual/x-terminal-emulatorDmitry Baryshkov2021-01-181-1/+6
| | | | | | | | Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8826791d795e65851ad20bbc0f34e74b2bf72e07) (cherry picked from commit 2ed77abf132696b7f3a8b9f8f422eb33ff711038) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xterm: install xterm and uxterm desktop filesDmitry Baryshkov2021-01-181-1/+8
| | | | | | | | | | Modify recipe to install application desktop files for xterm. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 593f21eda5b119f6408975c6b15e94fb168cc9dc) (cherry picked from commit a653238398d483c805c3d026d890162f131ecc01) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: Update to 12.5Robert Joslyn2021-01-181-1/+1
| | | | | | | | | | | | | | | | Fixes the following CVEs: CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 Full release notes at: https://www.postgresql.org/docs/12/release-12-5.html Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 6ff4bd4f345b4e8030b9197d13097308df521576) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* geoclue: select avahi-daemon if nmea enabledChenxi Mao2021-01-141-1/+1
| | | | | | | | geoclue serivce rely on avahi-daemon, so enable it by default. Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9239584e717bb2093c9bfd6972bb2f01507ab859) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libsdl2-mixer: set --disable-music-ogg-shared to link staticallyjabdoa22021-01-141-1/+1
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 69bae2a2360643805de2ae1cd9ebc4202cd5a2fb) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libsdl2-mixer: Fix ogg/vorbis support in libsdl2-mixerjabdoa22021-01-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Remove --enable-music-ogg-tremor as it broke vorbis support: checking tremor/ivorbisfile.h usability... no checking tremor/ivorbisfile.h presence... no checking for tremor/ivorbisfile.h... no checking for ov_open_callbacks in -lvorbisidec... no configure: WARNING: *** Unable to find Ogg Vorbis Tremor library (http://www.xiph.org/) configure: WARNING: Ogg Vorbis support disabled With this change: checking vorbis/vorbisfile.h usability... yes checking vorbis/vorbisfile.h presence... yes checking for vorbis/vorbisfile.h... yes checking for ov_open_callbacks in -lvorbisfile... yes -- dynamic libvorbisfile -> libvorbisfile.so.3 Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 074c7d9a1ebb86674f02d8a5545e1ed54f6d87fe) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: 12.19.1 -> 12.20.1Sean Nyekjaer2021-01-131-2/+2
| | | | | | | | | Signed-off-by: Sean Nyekjaer <sean@geanix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cde1019804c2f7b67bf89d178eec9f4efafea414) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit ac6bc96e7da6b3c9d5b9c9272b487a926fbb462e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: 12.19.0 -> 12.19.1Stacy Gaikovaia2021-01-131-1/+1
| | | | | | | | | | | | | | | | | Uprev nodejs in order to fix CVE-2020-8277. This CVE allows an attacker to trigger a DNS request for a host of their choice, which could trigger a Denial of Service in nodejs versions < 12.19.1. See https://nvd.nist.gov/vuln/detail/CVE-2020-8277 for details. CVE: CVE-2020-8277 Signed-off-by: Stacy Gaikovaia <Stacy.Gaikovaia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a44015408253d8a4f64055f41fa1f497aeacfc30) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 387f40ce8068ec8848c2e3b76ce2e3267b98c3d6) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: Update to 12.19.0Khem Raj2021-01-131-1/+1
| | | | | | | | This perhaps is last release in 12.x LTS Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a10f894a8e7f800d2412fff8d47fb37d363fa322) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: Fix arm32/thumb builds with clangKhem Raj2021-01-132-0/+54
| | | | | | | | | | | | | Backport a patch from upstream to take care of build failure e.g. | ../deps/v8/src/codegen/arm/cpu-arm.cc:38:16: error: write to reserved register 'R7' | asm volatile("svc 0\n" | ^ | 1 error generated. Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 45a2dfdd0f16ed6941926e2dca1ad90f36e120bc) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: Upgrade to 12.18.3Khem Raj2021-01-135-327/+14
| | | | | | | | | Drop already upstreamed patches use builtin uv, it does not build without it Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit bda3ee6276d76a10d2b5564da5709db4c21b8f13) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: Fix build with icu 67.1Khem Raj2021-01-132-0/+195
| | | | | | | | | Remove soon-to-be removed getAllFieldPositions Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Andrej Valek <andrej.valek@siemens.com> (cherry picked from commit 7910f2b64575dcd3352effd441accb3b56e3554d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nss: Security fix CVE-2020-12401Armin Kuster2021-01-122-0/+53
| | | | | | | | | | | | | | Source: Mozilla.org MR: 106876 Type: Security Fix Disposition: Backport from https://hg.mozilla.org/projects/nss/raw-rev/aeb2e583ee957a699d949009c7ba37af76515c20 ChangeID: a61d4926f8ab5afc54c23e58cd86b4a7609c9708 Description: Fixes CVE-2020-12401 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lua: update to 5.3.6Armin Kuster2021-01-121-3/+3
| | | | | | | | | | | | LIC_FILES_CHKSUM changed to do year updates This is the last 5.3.x update. This will give us the best starting point for doing Maintence moving forward. Its a bug fix only update. See http://www.lua.org/work/diffs-lua-5.3.5-lua-5.3.6.html Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lua: fix CVE-2020-24371Wenlin Kang2021-01-122-0/+91
| | | | | | | | | | | | | | | | Source: openembedded.org MR: 105165 Type: Security Fix Disposition: Backport from https://git.openembedded.org/meta-openembedded gatesgarth ChangeID: 747161877824daae061bc4fb458f55ab033f62f4 Description: Fix CVE-2020-24371 Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lua: fix CVE-2020-15945Wenlin Kang2021-01-122-0/+168
| | | | | | | | | | | | | | | | | | | Source: openembedded.org MR: 104897 Type: Security Fix Disposition: Backport from https://git.openembedded.org/meta-openembedded gatesgarth ChangeID: 6c43941d116bbb9f0d62ca5376da24ae03eb9eab Description: Fixes CVE-2020-15945 Backport with modifications to apply successfully. Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb: update to 10.4.17 for cve fixesArmin Kuster2021-01-1211-88/+51
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Source: mariadb.org MR: 107836, 107837, 107838, 107839, 107840, 107852, 106414, 106414, 107864, 107876, 107888 Type: Security Fix Disposition: Backport from mariadb.org ChangeID: 75fb83ced15990b94659af6e107c063d288cb037 Description: refresh several patches Drop 0001-Fix-build-breakage-from-lock_guard-error-6161.patch as fix included in update Bugfix only update including these cves: 10.4.13 CVE-2020-2752 CVE-2020-2812 CVE-2020-2814 CVE-2020-2760 CVE-2020-13249 10.4.15 CVE-2020-15180 10.4.16 CVE-2020-14812 CVE-2020-14765 CVE-2020-14776 CVE-2020-14789 CVE-2020-28912 (MDEV-24040) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: CVE-2020-7069Zheng Ruoqin2021-01-102-0/+159
| | | | | | | | | | | | | | | Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7069 https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit fa80193468745a11bc12d5845f66412a0d62e0e2) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 992e09f09a40e7a8d03c7c4b5adf40f821ed3774) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: CVE-2020-7070Zheng Ruoqin2021-01-102-0/+25
| | | | | | | | | | | | | | | | Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7070 https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364 https://github.com/php/php-src/blob/master/main/php_variables.c Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit aff8a1fefb9a1a311e5ba14ad69871514270803a) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 09f5a2ac5ab8550f5f0bd05417f2f54d27995dac) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: remove the failing ${D}/${TMPDIR} codeMax Kellermann2021-01-101-9/+0
| | | | | | | | | | | | | Appending ${TMPDIR} to ${D} doesn't make any sense, because both are absolute paths. And additionally, the code fails: rmdir: failed to remove '/usr/src/oe/tmp-musl/work/core2-64-oe-linux-musl/php/7.1.9-r0/image//usr': Directory not empty Signed-off-by: Max Kellermann <max.kellermann@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit f6338892d9c57c51ed48b04f587b468f7718a8ba) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade 7.4.4 -> 7.4.9Leon Anavi2021-01-102-15/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 7.4.9: - Fixed: Upgrade apache2handler's php_apache_sapi_get_request_time to return usec - Fixed: BSTR to PHP string conversion not binary safe - Fixed: DCOM does not work with Username, Password parameter - Fixed: serialize() and unserialize() methods can not be called statically - Fixed: Segfault in php_str_replace_common - Fixed: Assertion failure if dumping closure with unresolved static variable - Fixed: Assertion failure when assigning property of string offset by reference - Fixed: HT iterators not removed if empty array is destroyed - Fixed: Changing array during undef index RW error segfaults - Fixed: Use after free if changing array during undef var during array write fetch - Fixed: Use after free if string used in undefined index warning is changed - Fixed: Public non-static property in child should take priority over private static - Fixed: getimagesize function silently truncates after a null byte - Fixed: finfo_file crash (FILEINFO_MIME) - Fixed: ftp_size on large files - Fixed: mb_strimwidth does not trim string - Fixed: Use of freed hash key in the phar_parse_zipfile function - Fixed: ::getStaticProperties() ignores property modifications - Fixed: ::getStaticPropertyValue() throws on protected props - Fixed: Use after free when type duplicated into ReflectionProperty gets resolved - Fixed: Can't copy() large 'data://' with open_basedir - Fixed: dns_check_record() always return true on Alpine - Fixed: array_walk() does not respect property types Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f46931abf073a4c5b02a160a89fe073f1b67632b) [Bug fix on update. lts version] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* zabbix: CVE-2020-15803 Security AdvisoryWang Mingyu2021-01-102-0/+37
| | | | | | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15803 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d259144422bb44af9dbc7397fc4077d0bf3fc83f) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit d9911b087c83e0c73fbe7eeb497ca388b62d7706) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mcpp: Normalize the patch format of CVEZang Ruochen2021-01-103-32/+36
| | | | | | | | | | | Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9301b77e3266160ffb7e9bfd69d445f0392076c8) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 81874b239287126805aa176907bd52e9a7801655) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pcsc-lite: provide pcsc-lite-lib-native explicitly for native buildRoland Hieber2020-12-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Commits e2180b00b3b8fcf776c3 and 8edd760e66b48e411d2a added support for native builds for the opensc and pcsc-lite recipes, but building opensc-native fails after commit 40b3a5123120da0e4586 (2019-12-04, "opensc: fix RDEPENDS in pcsc PACKAGECONFIG"): ERROR: Required build target 'opensc-native' has no buildable providers. Missing or unbuildable dependency chain was: ['opensc-native', 'pcsc-lite-lib-native'] The commit in question is correct for target builds, but native builds don't have packages. The -lib part is also provided along with pcsc-lite-native, and there is no pcsc-lite-lib-native package. Ideally we would fix this in the opensc recipe. However, using syntax like "PACKAGECONFIG_class-native[pcsc]" in the opensc recipe is apparently not possible to overwrite the dependency for a native build, and using RDEPENDS_remove has no effect either – apparently dependencies from PACKAGECONFIG are added after RDEPENDS_remove is evaluated. Therefore let pcsc-lite provide the missing package name for native builds, even if fixing this unrelated package is not the most elegant solution. Fixes: 40b3a5123120da0e4586 (2019-12-04, "opensc: fix RDEPENDS in pcsc PACKAGECONFIG") Signed-off-by: Roland Hieber <rhi@pengutronix.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* dlt-daemon: add upstream patch to fix CVE-2020-29394Gianfranco2020-12-102-0/+39
| | | | | | | | | | | | | | More information on: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976228 | A buffer overflow in the dlt_filter_load function in dlt_common.c in | dlt-daemon 2.8.5 (GENIVI Diagnostic Log and Trace) allows arbitrary | code execution because fscanf is misused (no limit on the number of | characters to be read in a format argument). Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> [Fix up for Dunfell context - AK] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* remmina: use git fetcherMartin Jansa2020-11-151-4/+3
| | | | | | | | * fixes QA recently backported to dunfell: WARNING: remmina-1.3.6-r0 do_package_qa: QA Issue: remmina: SRC_URI uses unstable GitHub/GitLab archives, convert recipe to use git protocol [src-uri-bad] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Add missing dependencies for rsnapshot.Gianluca Pacchiella2020-11-091-0/+2
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit dfd5685ca7fc5688a8b808e6784d1ab22ec12b47) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hplip: use libexecdirDiego Rondini2020-11-091-7/+7
| | | | | | | | | | | | In oe-core commit: 2ce6ef29b9bb4f16ed9d78e166d455b7a6d968bf cups crossscripts have been fixed to report the correct serverbin folder, so backend, filters, etc, need to go in ${libexecdir} now. Signed-off-by: Diego Rondini <diego.rondini@kynetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit db7fc115e058e2e0e481e284768538f097cfdd90) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libeigen: update SRC_URI to use gitlab gitDiego Rondini2020-11-091-4/+4
| | | | | | | | | | | Update SRC_URI to use gitlab git repository. As discussed here gitlab archive stability is not fully guaranteed, so repository is preferred: https://forum.gitlab.com/t/gitlab-release-tarball-stability/41888/3 Signed-off-by: Diego Rondini <diego.rondini@kynetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a6b2a0c3d045bd09d4049ca8fb155f881657c31f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libeigen: update SRC_URI to download from gitlabDiego Rondini2020-11-091-4/+4
| | | | | | | | | | | | | Bitbucket is no longer the official home of eigen, which has moved to gitlab. Update SRC_URI to download releases from gitlab, fixing: WARNING: libeigen-3.3.7-r0 do_fetch: Failed to fetch URL https://bitbucket.org/eigen/eigen/get/3.3.7.tar.bz2;downloadfilename=libeigen-3.3.7.tar.bz2, attempting MIRRORS if available Signed-off-by: Diego Rondini <diego.rondini@kynetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 605c28165ba02c160888fedd510bf8b04c9e2c49) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mpv: fetch waf in do_fetchRoss Burton2020-11-091-7/+5
| | | | | | | | | | | | | | | | | | | | The mpv git repository doesn't include a copy of waf, instead there is a bootstrap script to fetch it. This recipe calls the bootstrap script in a do_patch postfunc, but downloading should be done in do_fetch. Instead of calling ./bootstrap.sh simply add waf to the SRC_URI so that Bitbake can use the mirrors/proxies/caching/checksum functionality. This is both better code and also works in buildtools environments where urllib2 can't make secure connections without configuration. [ YOCTO #14073 ] Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5af46f89fcef5c436786ed81978de60f26abe054) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libgphoto2: improve reproducibilityLee Chee Yang2020-11-091-0/+6
| | | | | | | | | | | remove WORKDIR information from config to improve reproducibility. libgphoto2_port recheck config during compile will set the WORKDIR info again, so remove this steps after configure. Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 42c71fae324c9e9fec0677044a5011d63bc60a11) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* README: fix incorrect linksDiego Rondini2020-11-091-2/+2
| | | | | | | | | | Fix incorrect links and replace the defunct "gitorious" with now popular "GitLab". Signed-off-by: Diego Rondini <diego.rondini@kynetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d80b5a52fd9d91b27b7f1967a0f2d6ccb6e22991) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* glog : improve reproducibilityLee Chee Yang2020-11-091-0/+7
| | | | | | | | | remove WORKDIR info from config file to improve reproducibility Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit be95549f2ea5c59c6da6ace852b918cdba3c7822) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* usb-modeswitch, usb-modeswitch-data: fix usrmergeUlrich Ölmann2020-11-092-3/+3
| | | | | | | Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 50a487fc0b0123b154db73f79bbb18b23eb234f0) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smartmontools: Remove obsolete setting regarding the Standard OutputMingli Yu2020-10-041-1/+0
| | | | | | | | | | | | | | The Standard output type "syslog" is obsolete, causing a warning since systemd version 246 [1]. Please consider using "journal" or "journal+console" [1] https://github.com/systemd/systemd/blob/master/NEWS#L202 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f9f8904623e5ca3ecea74e983f8d766a785097d4) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* haveged: upgrade 1.9.9 -> 1.9.13Pierre-Jean Texier2020-10-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | This includes the following changes: 1.9.10: - fix ordering cycle with private tmp 1.9.11: - Fixed wrong version string in v1.9.10 1.9.12: - Fix a memory leak in havege_destroy 1.9.13: - Added support for --version - Updated systemd SystemCallFilter settings Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 7e82d252fa558ebb6fe0d07b50a4be6abe40a725) [Bug fix only update, also fixes https://github.com/openembedded/meta-openembedded/issues/277] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* iwd: Upgrade to 1.9Khem Raj2020-09-191-1/+1
| | | | | | | Need this upgrade to work with ell >= 0.33 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* iwd: update to 1.8Oleksandr Kravchuk2020-09-191-1/+1
| | | | | | | | | | | | | Changelog: - Fix issue with handling FT AKMs when not supported. - Fix issue with handling FILS and RSNE in authenticate. - Fix issue with handling auto-connection and quick scan. - Fix issue with sending multiple scan requests. - Add support for P2P feature and API. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* iwd: upgrade 1.6 -> 1.7Pierre-Jean Texier2020-09-191-1/+1
| | | | | | | | | | | | This includes the following changes: ver 1.7: Fix issue with APs that send IGTK falsely in big endian. Fix issue with setting linkmode & operstate for open networks. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: Update to 12.4Robert Joslyn2020-09-192-5/+2
| | | | | | | | | | | | | createlang, droplang, and the tsearch2 module were all removed in the 10.0 release. More details are in the release notes: https://www.postgresql.org/docs/10/release-10.html The update from 12.3 to 12.4 is a minor release with bug and security fixes: https://www.postgresql.org/docs/current/release-12-4.html Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lcov: fix lcov-native buildMartin Jansa2020-08-231-2/+5
| | | | | | | | | * there is no provider for gcov-native nor gcov-symlinks-native Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e82bb7efa8cf4c3b826b22761d5ba798bc134cb9) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* exiv2: upgrade 0.27.1 -> 0.27.3Andreas Müller2020-08-232-2/+45
| | | | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 6443044ca9ec90d6740c42e618830ca52d656f5f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lua: Security Advisory - lua - CVE-2020-15888Yue Tao2020-07-302-0/+46
| | | | | | | | | | Backport fix from https://github.com/lua/lua.git. Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 698748c1538ed03efbcfdd936cf8317b4f138c29) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flashrom: Fix build failure with glibc 2.32Khem Raj2020-07-302-0/+58
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f16aa16e917ea440daa3d5bd136338f66a964f5c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lvm2: remove service template from SYSTEMD_SERVICEKai Kang2020-07-291-2/+6
| | | | | | | | | | | Remove systemd service template lvm2-pvscan@.service from SYSTEMD_SERVICE. It should be started/stopped in udev rules file 69-dm-lvm-metad.rules. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d85613d8d1d285c9a1f9cf3cf8b13655220cd8cf) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* jsoncpp: add PE do to revert to older PVArmin Kuster2020-07-181-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nss: Fix CVE-2020-12399Ovidiu Panait2020-07-142-0/+111
| | | | | | | | | | | | | | | Master (nss version 3.54) is not affected by this issue. This is a backport from nss version 3.54. NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. Upstream patch: https://hg.mozilla.org/projects/nss/rev/daa823a4a29bcef0fec33a379ec83857429aea2e Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Revert "jsoncpp: upgrade 1.9.2 -> 1.9.3"Armin Kuster2020-07-131-1/+1
| | | | | | | | | | | | | This reverts commit 2b384c59733c437027f9b14cc32da19251efd97b. It appears that there was a change in soname not noted in the changelog. https://github.com/open-source-parsers/jsoncpp/commit/8b7ea09b8055df01866a5ce4142b12ed8f9f13eb ABI change appears to have occured. https://abi-laboratory.pro/index.php?view=timeline&l=jsoncpp Signed-off-by: Armin Kuster <akuster808@gmail.com>
* multipath-tools: disable parallel build as a workaroundQi.Chen@windriver.com2020-07-121-0/+1
| | | | | | | | | | | | | | | | | | | | With parallel build enabled, we got the following error: ld: error in libsg.o(.eh_frame); no .eh_frame_hdr table will be created .... ld: BFD (GNU Binutils) 2.34.0.20200220 internal error, aborting at ../../bfd/merge.c:933 in _bfd_merged_section_offset .... | make[1]: *** [Makefile:24: libcheckcciss_tur.so] Error 1 | make[1]: *** Waiting for unfinished jobs.... However, looking at the Makefile, it does not seem to have problem. So disable the parallel build as a workaround. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 45d6317353ea7431e2ffbe0419ba7e07a911265b) Signed-off-by: Armin Kuster <akuster808@gmail.com>