summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* hdf5: upgrade to 1.14.4Yogita Urade2024-08-032-40/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release notes: https://github.com/HDFGroup/hdf5/blob/hdf5_1.14.4.3/release_docs/RELEASE.txt License update: link update from https://raw.githubusercontent.com/hdfgroup/hdf5/develop/COPYING_LBNL_HDF5 to https://raw.githubusercontent.com/hdfgroup/hdf5/hdf5_1_14/COPYING_LBNL_HDF5. Upstream has only Released tar file extension is .gz so SRC_URI tar file extension changed from .bz2 to .gz Fixes File /usr/lib/libhdf5.settings in package hdf5 contains reference to TMPDIR File /usr/src/debug/hdf5/1.14.4-3/src/H5build_settings.c in package hdf5-src contains reference to TMPDIR [buildpaths] - Running H5make_libsettings is no longer required for cross-compiling The functionality of H5make_libsettings is now handled via template files, so H5make_libsettings has been removed. - Running H5detect is no longer required for cross-compiling The functionality of H5detect is now exercised at library startup, so H5detect has been removed Rework the patch 0001-cmake-remove-build-flags.patch to fix the build path issue. Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: Break perl RDEPENDSBarry Grussling2024-08-031-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | Currently, any non-native recipes that inherits cpan-base ends up with an image RDEPENDS on perl (via https://git.yoctoproject.org/poky/tree/meta/classes-recipe/cpan-base.bbclass?h=scarthgap#n14) If you are building an image and desire to have Postgresql installed but NOT perl, this creates a problem. This changeset attempts to fix this shortcoming by not inheriting cpan-base directly. Note this work is a continuation of attempts to change cpan-base: https://bugzilla.yoctoproject.org/show_bug.cgi?id=15563 The Postgresql build system uses perl, so add it as a DEPENDS. This happened previously via the "inherit cpan-base" directive. I've validated this recipe successfully packages with and without the perl PACKAGECONFIG in Scarthgap. Signed-off-by: Barry Grussling <mr.scada@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f311f1f01c19924d8cced61fa915f1387f92455b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tree: fix broken linksBenjamin Szőke2024-08-031-2/+2
| | | | | | | | | | | | | New tarball location is: http://oldmanprogrammer.net/tar/tree/ Homepage is: http://oldmanprogrammer.net/source.php?dir=projects/tree Signed-off-by: Benjamin Szőke <egyszeregy@freemail.hu> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0c4079fc28cc36cb2dbfe48093f2cf64106f8b5d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* uutils-coreutils: upgrade 0.0.26 -> 0.0.27Etienne Cordonnier2024-08-032-89/+123
| | | | | | | | See https://github.com/uutils/coreutils/releases/tag/0.0.27 Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* uutils-coreutils: upgrade 0.0.25 -> 0.0.26Etienne Cordonnier2024-08-032-41/+67
| | | | | | | | See https://github.com/uutils/coreutils/releases/tag/0.0.26 Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* graphviz: fix CVE-2023-46045Yogita Urade2024-08-034-0/+111
| | | | | | | | | | | | | | | | | | | | Graphviz 2.36 before 10.0.0 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root. CVE-2023-46045-0003.patch is the CVE fix and CVE-2023-46045-0001.patch, CVE-2023-46045-0002.patch are dependent commits to fix the CVE. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-46045 Upstream patches: https://gitlab.com/graphviz/graphviz/-/commit/361f274ca901c3c476697a6404662d95f4dd43cb https://gitlab.com/graphviz/graphviz/-/commit/3f31704cafd7da3e86bb2861accf5e90c973e62a https://gitlab.com/graphviz/graphviz/-/commit/a95f977f5d809915ec4b14836d2b5b7f5e74881e Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hiredis: remove ANSI color from ptest resultZhang Peng2024-08-031-6/+6
| | | | | | | | This change removes the ANSI color codes from the ptest result. Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* giflib: fix build with gold and avoid imagemagick-native dependencyMartin Jansa2024-07-233-45/+39
| | | | | | | | | * avoid imagemagick-native like upstream did in: https://sourceforge.net/p/giflib/code/ci/d54b45b0240d455bbaedee4be5203d2703e59967/ Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bolt: package systemd_system_unitdir correctlyMartin Jansa2024-07-231-2/+2
| | | | | | | | | | | | | | | * ${libdir}/systemd doesn't work on multilib builds, where libdir might be something else than ${nonarch_base_libdir} fixes: ERROR: QA Issue: lib32-bolt: Files/directories were installed but not shipped in any package: /usr/lib/systemd /usr/lib/systemd/system /usr/lib/systemd/system/bolt.service Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* rrdtool: Fix do_populate_sysroot QA issuesJiaying Song2024-07-231-0/+5
| | | | | | | | | | | | | | | | | | | | | This commit addresses the shebang size issue encountered in the do_populate_sysroot task of the rrdtool-native recipe. The issue was caused by the shebang line in the cgi-demo.cgi file exceeding the maximum allowed length of 128 characters. The following error was observed: ERROR: rrdtool-native-1.8.0-r0 do_populate_sysroot: QA Issue: : /work/x86_64-linux/rrdtool-native/1.8.0/sysroot-destdir/work/x86_64-linux/rrdtool-native/1.8.0/recipe-sysroot-native/usr/share/rrdtool/examples/cgi-demo.cgi maximum shebang size exceeded, the maximum size is 128. [shebang-size] ERROR: rrdtool-native-1.8.0-r0 do_populate_sysroot: do_populate_sysroot for this recipe installed files with QA issues  The solution implemented involves modifying the shebang line in the cgi-demo.cgi file to use '/usr/bin/env rrdcgi', ensuring it adheres to the length limit. Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 05c17b63fe0bbc7f94154017f2c54237576df94c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* opencl-clhpp: add native and nativesdkRandolph Sapp2024-07-171-0/+2
| | | | | | | | | This is a header only package. It may be useful to the native machine but it is definitely useful for the nativesdk machine. Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openbox: fix crash on alt+tab with fullscreen appAlexandre Videgrain2024-07-172-0/+57
| | | | | | | | | | | | | | Apply an openbox patch to openbox recipe to fix crashes on alt+tab with fullscreen app. Github issue: https://github.com/openembedded/meta-openembedded/issues/837 Signed-off-by: Alexandre Videgrain <alexandre.videgrain@smile.fr> Suggested-by: Ludovic Jozeau <ludovic.jozeau@smile.fr> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 85132c16210d1bdf83e8be5b3da4f430ce7b4b91) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-meta-oe: fix lvgl inclusionYoann Congal2024-07-171-1/+1
| | | | | | | | | | | | | | | | | | | Since commit f7fedd156374 ("lvgl: Upgrade to LVGL 9 series"): * lv-drivers and lv-lib-png packages do not exist anymore * lvgl does not depend on "wayland" being in DISTRO_FEATURES This fixes these warnings (e.g. from AB[0]): Nothing RPROVIDES 'lv-lib-png' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) Nothing RPROVIDES 'lv-drivers' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cda9ade9fb9662d11b6e956844db7c8202b9902b) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* v4l-utils: Install media ctrl header and library filesNeel Gandhi2024-07-172-0/+79
| | | | | | | | | | | | | Commit 9389d63fdddcab400cb0b243b74d47bf665aba18 removed a previous patch that caused the recipe to install the header and library files. Restore this behavior to the new meson based build system. Signed-off-by: Neel Gandhi <neel.gandhi@amd.com> Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5f453c3401e20eb5489fac4d3b54a5bf96d019ab) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdbd-mysql-perl: avoid invoking assert_lib at do_configure stageChen Qi2024-07-092-1/+43
| | | | | | | | | | | | | | | | The assert_lib from perl package will execute the generated binary. This is not suitable for cross compilation environment such as OE. In OE, if the libs are not available, the following do_compile task will just fail. So we should avoid invoking assert_lib at do_configure stage to avoid error message like below in log.do_configure: /usr/lib64/ld-linux-aarch64.so.1: No such file or directory Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatbuffers: adapt for cross-compilation environmentsBINDU2024-07-091-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | Flatbuffers contains a library and a schema compiler. The package contains cmake files to discover the libraries and the compiler tool. Currently, all of these cmake files are installed into the target sysroot. However, the compiler utility isn't installed into the sysroot (as it is not runnable on the build machine). When an application that depends on flatbuffers gets built, it uses flatbuffers' exported cmake targets to configure the project. One of the exported targets is FlatcTarget.cmake which expects to see flatc binary in /usr/bin of the sysroot. Since binaries for target don't end up in target sysroot, cmake configuration fails. This patch addresses this problem of flatbuffers' build infrastructure in cross-compiling environments. By removing FlatcTarget.cmake for target builds from the sysroot we essentially skip this step of flatbuffers' configuration. Signed-off-by: Ivan Stepic <Ivan.Stepic@bmw.de> Signed-off-by: Bhabu Bindu <bindudaniel1996@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit b97dbaac6629e22138f71ae19eb421d041447619) Signed-off-by: Akash Hadke <akash.hadke27@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: upgrade 1.21.2 -> 1.21.3Vijay Anusuri2024-07-091-2/+2
| | | | | | | | | | | CVEs Fixed CVE-2024-37370, CVE-2024-37371 Release Notes: https://web.mit.edu/kerberos/krb5-1.21/krb5-1.21.3.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* thin-provisioning-tools: install missed thin_shrink and era_repairLibo Chen2024-07-091-3/+5
| | | | | | | Install missed thin_shrink and era_repair for thin provisioning Signed-off-by: Libo Chen <libo.chen.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-oe/conf/layer.conf: remove libbpf from NON_MULTILIB_RECIPES for x86 and ↵Wentao Zhang2024-06-271-0/+3
| | | | | | | | | | | | x86-64 libbpf supports x86_64 and i.86, remove libbpf from NON_MULTILIB_RECIPES for x86 and x86-64 Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d06a9c504928f3369568e8db3b53be368f465e1d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade to 8.2.20Soumya Sambu2024-06-261-1/+1
| | | | | | | | | | Includes fix for CVE-2024-5458, CVE-2024-2408 and other bugs Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vulkan-cts: add workaround for createMeshShaderMiscTestsEXTRandolph Sapp2024-06-261-0/+3
| | | | | | | | | | | | | | | | | | Remove the CXX flag "-O2" for GCC 13 and 14. There's a bug with ARM GCC that breaks the iteration of "types" in the createMeshShaderMiscTestsEXT function. This issue is not present for clang or x86_64 GCC 14. It seems that the array is not initialized before the first iteration. In testing this can result in a random value being used. This can manifest in LINES type being processed twice, resulting in the following error: FATAL ERROR: Failed to initialize dEQP: Test case with non-unique name 'no_lines' added to group 'misc'. Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cjson: fix buildpath warningsPeter Marko2024-06-261-0/+5
| | | | | | | | | | | | | | | Following warning occurs when building with ptests enabled: WARNING: cjson-1.7.17-r0 do_package_qa: QA Issue: File /usr/lib/cjson/ptest/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR File /usr/lib/cjson/ptest/tests/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR File /usr/lib/cjson/ptest/fuzzing/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR [buildpaths] The cmake files also contain full paths to original CMakeLists.txt file in _BACKTRACE_TRIPLES property; These are not needed for successful ptests as we don't install the CMakeLists.txt files anyway. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tipcutils: Add systemd supportVijay Anusuri2024-06-262-1/+11
| | | | | | | | | | | | Install tipc kernel module explictly. tipcutils.conf is added to modules-load.d to load the required tipc kernel module. Ref: http://tipc.io/getting_started.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 93a0667456b978ce9317fdadd2f38880b1f5494e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* jemalloc: add +git to versionPeter Marko2024-06-241-1/+3
| | | | | | | | | | | jemalloc was switched from tag to development branch 171 commit ahead. Adapt PV accordingly. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 53f608235a20793324ad9d0587392d26079f7cc6) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hiredis: change ptest output formatZhang Peng2024-06-171-1/+16
| | | | | | | | | | This change consolidates the output format of the ptest command into a single common format. The format selected is the automake "simple test" format: "result: testname" Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* re2: rework solibs handlingPeter Marko2024-06-171-1/+2
| | | | | | | | This is cleaner way how to package unversioned libraries which was suggested during review of the last commit. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* re2: remove dev dependencies from main packagePeter Marko2024-06-171-4/+1
| | | | | | | | | | | | | It's a bad idea to add dev dependencies to main package. It's pulling build dependencies including toolchain items. The dependencies "were needed" because main package contains packageconfig file. This can be fixed by correct packaging. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwebsockets: remove STAGING_LIBDIR with /Martin Jansa2024-06-171-2/+2
| | | | | | | | | | | | | | | | | | | * after buildpath warnings fix from: https://git.openembedded.org/meta-openembedded/commit/?id=eeef1fddd9052bed4b1a91565260518eb042fed2 the LibwebsocketsTargets.cmake ends with: INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/libcap.so;-lpthread" instead of: INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/OE/build/.../libwebsockets/4.3.3/lib32-recipe-sysroot/usr/lib/libcap.so;-lpthread" which causes e.g. mosquitto to fail in do_compile with: ninja: error: '/libcap.so', needed by 'src/mosquitto', missing and no known rule to make it * this happens only when libwebsocket is built with libcap enabled (by libcap in DEPENDS) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwebsockets: fix buildpath warningsGerard Salvatella2024-06-171-0/+2
| | | | | | | | | | In order to remove absolute paths from the cmake artifacts, paths from the `$lib` folder should also be stripped off, otherwise internally linked libraries (e.g. libz) may appear. Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* uriparser: upgrade 0.9.7 -> 0.9.8Wang Mingyu2024-06-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== * Protect against integer overflow in ComposeQueryEngine * Protect against integer overflow in ComposeQueryMallocExMm * Require CMake >=3.5.0 * CMake option URIPARSER_SHARED_LIBS=(ON|OFF) to control, whether to produce a shared or static library for uriparser and that alone, falls back to standard BUILD_SHARED_LIBS if available, else defaults to "ON" * Document that scheme-based normalization a la section 6.2.3 of RFC 3986 is a responsibility of the application using uriparser * Document supported code points for functions uriEscape(Ex)W * Update Clang from 15 to 18 * Adapt to breaking changes in Clang packaging * Get sanitizer CFLAGS and LDFLAGS back in sync * Pin GitHub Actions to specific commits for security Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libgpiod: update to v2.1.2Bartosz Golaszewski2024-06-171-1/+1
| | | | | | | | | | | | This is a small bugfix release that fixes a build issue with slibtool (not relevant to meta-oe ATM), makes the licensing of C++ bindings less restrictive and preemptively fixes an issue that will be triggered with linux v6.9 when running gpio-tools ptest suite. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libfido2: remove non-functional native and nativesdk BBCLASSEXTENDYoann Congal2024-06-171-2/+0
| | | | | | | | | | | | | | | | | | | | | | | libfido2 depends on udev and libcbor which do not exist for native and nativesdk targets. Remove native & nativesdk from BBCLASSEXTEND to avoid hitting these in world/universe builds. Fixes these warnings (as seen on AB[0]): WARNING: Nothing PROVIDES 'nativesdk-udev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'nativesdk-libcbor' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'libcbor-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'udev-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing RPROVIDES 'nativesdk-libfido2-dev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it) WARNING: Nothing RPROVIDES 'nativesdk-libfido2' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Cc: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1a3d194eb3552eb948ca61dffcb9dbe2710f516b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* giflib: upgrade to version 5.2.2nikhil2024-06-172-3/+48
| | | | | | | | | | | | | | | | | | | Upgrade to latest version giflib v5.2.2. This version fixes bugs listed in link below: Link: https://sourceforge.net/p/giflib/code/ci/5.2.2/tree/NEWS Fixes for CVE-2023-48161, CVE-2022-28506, CVE-2023-39742 Link: https://clients.neighbourhood.ie/yocto/1-40.html#:~:text=CVE%2D2023%2D39742%3A%20giflib%3Agiflib%2Dnative Added dependency on ImageMagick which includes "convert" utility, to ensure availability of required tool during compilation process. Add patch to rename binary used in Makefile from "convert" to "convert.im7" as installed by imagemagick package. Signed-off-by: Bhabu Bindu <bhabubindu@kpit.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nano: Security fix for CVE-2024-5742Siddharth Doshi2024-06-172-1/+104
| | | | | | | | | | Upstream-Status: Backport from [https://git.savannah.gnu.org/cgit/nano.git/commit/?id=5e7a3c2e7e118c7f12d5dfda9f9140f638976aa2] CVE's Fixed: CVE-2024-5742 nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* abseil-cpp: backport RISC-V fixScott Murray2024-06-172-0/+83
| | | | | | | | | | | Backport upstream fix[1] for SIGILL crash on RISC-V with 6.6 and newer kernels. The patch has been tweaked to apply on top of the existing stack. [1]: https://github.com/abseil/abseil-cpp/commit/7335a36d Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: Update SRC tarball pathVijay Anusuri2024-06-171-1/+1
| | | | | | | Fix WARNING: Failed to fetch URL https://c-ares.org/download/c-ares-1.27.0.tar.gz Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* unixodbc: Fix CVE-2024-1013Soumya Sambu2024-06-172-0/+54
| | | | | | | | | | | | | An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken. References: https://nvd.nist.gov/vuln/detail/CVE-2024-1013 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pcapplusplus: Fix build with gcc14Khem Raj2024-06-023-1/+73
| | | | | | | | | | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> ---- v2] Scarthgap has the same error as master: initialize timespec variable. pcapplusplus/23.09/git/Packet++/src/RawPacket.cpp:23:18: error: 'nsec_time.timespec::<anonymous>' is used uninitialized [-Werror=uninitialized] | 23 | timespec nsec_time; | | ^~~~~~~~~ | cc1plus: all warnings being treated as errors
* postgresql: upgrade 16.2 -> 16.3Wang Mingyu2024-06-023-3/+3
| | | | | | | | | | | | 0003-configure.ac-bypass-autoconf-2.69-version-check.patch refreshed for 16.3 Changelog: https://www.postgresql.org/docs/release/16.3/ Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatpak: update 1.15.6 -> 1.15.8Markus Volk2024-06-023-64/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - remove included patches - set path for fusermount3 to avoid requirement for fuse3-native. This is needed since: https://github.com/flatpak/flatpak/commit/2cb17b4eb82ecedaa98b5b7f954cf3e52fa95682 Changes in 1.15.8 ~~~~~~~~~~~~~~~~~ Security fixes: * Don't allow an executable name to be misinterpreted as a command-line option for bwrap(1). This prevents a sandbox escape where a malicious or compromised app could ask xdg-desktop-portal to generate a .desktop file with access to files outside the sandbox. (CVE-2024-32462) Other bug fixes: * Pass the -export-dynamic linker option as -Wl,-export-dynamic, fixing build failures with clang 18 and lld 18 (#5760) * Fix a double-free when installation is cancelled (#5763) * Fix installed-tests failure with "FUSERMOUNT: unbound variable" (#5751) * Translation updates: pt_BR (#5762), tr (#5761) Changes in 1.15.7 ~~~~~~~~~~~~~~~~~ Released: 2024-03-27 Dependencies: * The Meson build system is now required. Compiling with Autotools is no longer possible. * In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.9.0 is recommended. Several of the bug fixes listed below will not be active if an older version is used. * In distributions that compile Flatpak to use a separate xdg-dbus-proxy executable, version 0.1.5 is recommended. * If libmalcontent (parental controls) is enabled, it must be version 0.5.0 or later. New features: * Automatically remove obsolete driver versions and other autopruned refs (#5632) * `--socket=inherit-wayland-socket` (#5614) * Automatically reload D-Bus session bus configuration after installing or upgrading apps, to pick up any exported D-Bus services (#3342) Bug fixes: * Update included copy of bubblewrap to version 0.9.0: * `--symlink` is now idempotent, meaning it succeeds if the symlink already exists and already has the desired target (#2387, #3477, #5255) * Report a better error message if `mount(2)` fails with `ENOSPC` * Fix a double-close on error reading from `--args`, `--seccomp` or `--add-seccomp-fd` argument * Improve memory allocation behaviour * Silence various compiler warnings * Update included copy of bubblewrap to version 0.1.5: * Fix handling of long object paths * Don't parse `<developer><name/></developer>` as the application name (#5700) * Don't refuse to start apps when there is no D-Bus system bus available (#5076) * Don't try to repeat migration of apps whose data was migrated to a new name and then deleted (#5668) * Improve handling of mixed locales on systems with systemd-localed (#5497) * Improve display of ellipsized columns in wide terminals (#5722) * Make `flatpak info -e` look for extensions in all installations (#5670) * Fix warnings from newer GLib versions (#5660, #5737) * Always set the `container` environment variable (#5610) * Always let the app inherit redirected file descriptors (#5626) * In `flatpak ps`, add xdg-desktop-portal-gnome to the list of backends we'll use to learn which apps are running in the background (#5729) * Don't use `WAYLAND_SOCKET` unless given `--socket=inherit-wayland-socket` (#5614) * Use `fusermount3` if compiled with FUSE 3, overridable with `-Dsystem_fusermount` compile-time option (#5104) * Avoid leaking a temporary variable from /etc/profile.d/flatpak.sh into the shell environment (#5574) * Improve async-signal safety (#5687) * Fix various memory leaks (#5683, #5690, #5691) * Avoid undefined behaviour of signed left-shift when storing object IDs in a hash table (#5738) * Detect the correct gtk-doc when cross-compiling (#5650) * Detect the correct wayland-scanner when cross-compiling (#5596) * Documentation improvements (#5659, #5677, #5682, #5664, #5719) * Skip more tests when FUSE isn't available (#5611) * Translation updates (#5602, #5707) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdeflate: fix build with -mcpu=cortex-a76+crypto without ↵Martin Jansa2024-06-022-2/+60
| | | | | | | | | | | -march=armv8.2-a+crypto * fixes: https://github.com/ebiggers/libdeflate/issues/369 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade to 8.2.18Soumya Sambu2024-06-022-10/+13
| | | | | | | | | | | | Includes fixes for CVE-2024-3096, CVE-2024-2756 and other bugs. Changelog: https://www.php.net/ChangeLog-8.php#8.2.18 Rebase 0001-ext-opcache-config.m4-enable-opcache.patch to new version Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fwupd: fix uefi capsule update build errorMikko Rapeli2024-06-021-1/+1
| | | | | | | | | | | | | | plugin_uefi_capsule_splash does not provide "enabled" or "disabled" options but only basic bool "true" and "false". Fixes do_configure() failure with PACKAGECONFIG:append = " plugin_tpm plugin_uefi_pk plugin_uefi_capsule ": | ../fwupd-1.9.18/meson.build:1:0: ERROR: Value disabled is not boolean (true or false). Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs-oe-cache: fix offline install of dependenciesMartin Hundebøll2024-05-221-1/+1
| | | | | | | | | | | | | | | | | | | Apparently, npm has changed its request accept header, so that cache lookup misses. This causes an ENOTCACHED error when doing the offline install in do_compile() from npm.bbclass. Fix it by updating the fake cache entry to match the newest behaviour from npm. Note that npm doesn't agree with itself, as it still uses the previous header value when doing `npm cache add <pkg>`, but the new value when doing `npm install <pkg>`. Bug submitted upstream: https://github.com/npm/cli/issues/7465 Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* renderdoc: remove vim-native DEPENDSRoss Burton2024-04-301-1/+1
| | | | | | | | | This need for this was removed in 2016[1] [1] https://github.com/baldurk/renderdoc/commit/fff93a4bcc036f8288fd31dcdd1209fea36b9b58 Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* procmail: Update status for CVE-1999-0475Ninette Adhikari2024-04-301-0/+2
| | | | | | | | Current version 3.22 is not affected by the issue. Affected versions: Up to (excl.) 3.2.1 Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* st: Update status for CVE-2017-16224Ninette Adhikari2024-04-301-0/+2
| | | | | | | | | | The recipe used in the meta-openembedded is a different st package compared to the one which has the CVE issue. Package used in meta-embedded: https://st.suckless.org/ Package with CVE issue: https://www.npmjs.com/package/st No action required. Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* reproducibility: move repro excludes from AB config.json to meta-oeYoann Congal2024-04-301-0/+107
| | | | | | | | | | | | | | For now, the known non-reproducible packages list is stored inside the autobuilder config.json file. This is not ideal. Let's move this list into each layers of meta-openembedded. These lists can be used with, in local.conf: include conf/include/non-repro-meta-oe.inc OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES = "${KNOWN_NON_REPRO_META_OE}" Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Acked-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fwupd: Upgrade to 1.9.18 releaseKhem Raj2024-04-302-87/+46
| | | | | | Drop patch which is already upstreamed in this release Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: upgrade 20.11.1 -> 20.12.2Archana Polampalli2024-04-303-2/+2
| | | | | | | | | | | | | | | | | | License-Update: Copyright year updated zlib version updated GN files License update https://github.com/nodejs/node/commit/b5bc597871ca701bab750c46d31ed626decd7f89 https://github.com/nodejs/node/commit/c8233912e9fd7464898b549d6762130722bf0bf4 Changelog: https://github.com/nodejs/node/releases/tag/v20.12.2 https://github.com/nodejs/node/releases/tag/v20.12.1 https://github.com/nodejs/node/releases/tag/v20.12.0 Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-07 12:49:16 +0000