summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
...
* opencl-clhpp: add native and nativesdkRandolph Sapp2024-07-171-0/+2
| | | | | | | | | This is a header only package. It may be useful to the native machine but it is definitely useful for the nativesdk machine. Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openbox: fix crash on alt+tab with fullscreen appAlexandre Videgrain2024-07-172-0/+57
| | | | | | | | | | | | | | Apply an openbox patch to openbox recipe to fix crashes on alt+tab with fullscreen app. Github issue: https://github.com/openembedded/meta-openembedded/issues/837 Signed-off-by: Alexandre Videgrain <alexandre.videgrain@smile.fr> Suggested-by: Ludovic Jozeau <ludovic.jozeau@smile.fr> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 85132c16210d1bdf83e8be5b3da4f430ce7b4b91) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-meta-oe: fix lvgl inclusionYoann Congal2024-07-171-1/+1
| | | | | | | | | | | | | | | | | | | Since commit f7fedd156374 ("lvgl: Upgrade to LVGL 9 series"): * lv-drivers and lv-lib-png packages do not exist anymore * lvgl does not depend on "wayland" being in DISTRO_FEATURES This fixes these warnings (e.g. from AB[0]): Nothing RPROVIDES 'lv-lib-png' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) Nothing RPROVIDES 'lv-drivers' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cda9ade9fb9662d11b6e956844db7c8202b9902b) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* v4l-utils: Install media ctrl header and library filesNeel Gandhi2024-07-172-0/+79
| | | | | | | | | | | | | Commit 9389d63fdddcab400cb0b243b74d47bf665aba18 removed a previous patch that caused the recipe to install the header and library files. Restore this behavior to the new meson based build system. Signed-off-by: Neel Gandhi <neel.gandhi@amd.com> Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5f453c3401e20eb5489fac4d3b54a5bf96d019ab) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdbd-mysql-perl: avoid invoking assert_lib at do_configure stageChen Qi2024-07-092-1/+43
| | | | | | | | | | | | | | | | The assert_lib from perl package will execute the generated binary. This is not suitable for cross compilation environment such as OE. In OE, if the libs are not available, the following do_compile task will just fail. So we should avoid invoking assert_lib at do_configure stage to avoid error message like below in log.do_configure: /usr/lib64/ld-linux-aarch64.so.1: No such file or directory Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatbuffers: adapt for cross-compilation environmentsBINDU2024-07-091-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | Flatbuffers contains a library and a schema compiler. The package contains cmake files to discover the libraries and the compiler tool. Currently, all of these cmake files are installed into the target sysroot. However, the compiler utility isn't installed into the sysroot (as it is not runnable on the build machine). When an application that depends on flatbuffers gets built, it uses flatbuffers' exported cmake targets to configure the project. One of the exported targets is FlatcTarget.cmake which expects to see flatc binary in /usr/bin of the sysroot. Since binaries for target don't end up in target sysroot, cmake configuration fails. This patch addresses this problem of flatbuffers' build infrastructure in cross-compiling environments. By removing FlatcTarget.cmake for target builds from the sysroot we essentially skip this step of flatbuffers' configuration. Signed-off-by: Ivan Stepic <Ivan.Stepic@bmw.de> Signed-off-by: Bhabu Bindu <bindudaniel1996@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit b97dbaac6629e22138f71ae19eb421d041447619) Signed-off-by: Akash Hadke <akash.hadke27@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: upgrade 1.21.2 -> 1.21.3Vijay Anusuri2024-07-091-2/+2
| | | | | | | | | | | CVEs Fixed CVE-2024-37370, CVE-2024-37371 Release Notes: https://web.mit.edu/kerberos/krb5-1.21/krb5-1.21.3.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* thin-provisioning-tools: install missed thin_shrink and era_repairLibo Chen2024-07-091-3/+5
| | | | | | | Install missed thin_shrink and era_repair for thin provisioning Signed-off-by: Libo Chen <libo.chen.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-oe/conf/layer.conf: remove libbpf from NON_MULTILIB_RECIPES for x86 and ↵Wentao Zhang2024-06-271-0/+3
| | | | | | | | | | | | x86-64 libbpf supports x86_64 and i.86, remove libbpf from NON_MULTILIB_RECIPES for x86 and x86-64 Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d06a9c504928f3369568e8db3b53be368f465e1d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade to 8.2.20Soumya Sambu2024-06-261-1/+1
| | | | | | | | | | Includes fix for CVE-2024-5458, CVE-2024-2408 and other bugs Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vulkan-cts: add workaround for createMeshShaderMiscTestsEXTRandolph Sapp2024-06-261-0/+3
| | | | | | | | | | | | | | | | | | Remove the CXX flag "-O2" for GCC 13 and 14. There's a bug with ARM GCC that breaks the iteration of "types" in the createMeshShaderMiscTestsEXT function. This issue is not present for clang or x86_64 GCC 14. It seems that the array is not initialized before the first iteration. In testing this can result in a random value being used. This can manifest in LINES type being processed twice, resulting in the following error: FATAL ERROR: Failed to initialize dEQP: Test case with non-unique name 'no_lines' added to group 'misc'. Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cjson: fix buildpath warningsPeter Marko2024-06-261-0/+5
| | | | | | | | | | | | | | | Following warning occurs when building with ptests enabled: WARNING: cjson-1.7.17-r0 do_package_qa: QA Issue: File /usr/lib/cjson/ptest/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR File /usr/lib/cjson/ptest/tests/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR File /usr/lib/cjson/ptest/fuzzing/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR [buildpaths] The cmake files also contain full paths to original CMakeLists.txt file in _BACKTRACE_TRIPLES property; These are not needed for successful ptests as we don't install the CMakeLists.txt files anyway. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tipcutils: Add systemd supportVijay Anusuri2024-06-262-1/+11
| | | | | | | | | | | | Install tipc kernel module explictly. tipcutils.conf is added to modules-load.d to load the required tipc kernel module. Ref: http://tipc.io/getting_started.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 93a0667456b978ce9317fdadd2f38880b1f5494e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* jemalloc: add +git to versionPeter Marko2024-06-241-1/+3
| | | | | | | | | | | jemalloc was switched from tag to development branch 171 commit ahead. Adapt PV accordingly. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 53f608235a20793324ad9d0587392d26079f7cc6) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hiredis: change ptest output formatZhang Peng2024-06-171-1/+16
| | | | | | | | | | This change consolidates the output format of the ptest command into a single common format. The format selected is the automake "simple test" format: "result: testname" Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* re2: rework solibs handlingPeter Marko2024-06-171-1/+2
| | | | | | | | This is cleaner way how to package unversioned libraries which was suggested during review of the last commit. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* re2: remove dev dependencies from main packagePeter Marko2024-06-171-4/+1
| | | | | | | | | | | | | It's a bad idea to add dev dependencies to main package. It's pulling build dependencies including toolchain items. The dependencies "were needed" because main package contains packageconfig file. This can be fixed by correct packaging. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwebsockets: remove STAGING_LIBDIR with /Martin Jansa2024-06-171-2/+2
| | | | | | | | | | | | | | | | | | | * after buildpath warnings fix from: https://git.openembedded.org/meta-openembedded/commit/?id=eeef1fddd9052bed4b1a91565260518eb042fed2 the LibwebsocketsTargets.cmake ends with: INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/libcap.so;-lpthread" instead of: INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/OE/build/.../libwebsockets/4.3.3/lib32-recipe-sysroot/usr/lib/libcap.so;-lpthread" which causes e.g. mosquitto to fail in do_compile with: ninja: error: '/libcap.so', needed by 'src/mosquitto', missing and no known rule to make it * this happens only when libwebsocket is built with libcap enabled (by libcap in DEPENDS) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwebsockets: fix buildpath warningsGerard Salvatella2024-06-171-0/+2
| | | | | | | | | | In order to remove absolute paths from the cmake artifacts, paths from the `$lib` folder should also be stripped off, otherwise internally linked libraries (e.g. libz) may appear. Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* uriparser: upgrade 0.9.7 -> 0.9.8Wang Mingyu2024-06-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== * Protect against integer overflow in ComposeQueryEngine * Protect against integer overflow in ComposeQueryMallocExMm * Require CMake >=3.5.0 * CMake option URIPARSER_SHARED_LIBS=(ON|OFF) to control, whether to produce a shared or static library for uriparser and that alone, falls back to standard BUILD_SHARED_LIBS if available, else defaults to "ON" * Document that scheme-based normalization a la section 6.2.3 of RFC 3986 is a responsibility of the application using uriparser * Document supported code points for functions uriEscape(Ex)W * Update Clang from 15 to 18 * Adapt to breaking changes in Clang packaging * Get sanitizer CFLAGS and LDFLAGS back in sync * Pin GitHub Actions to specific commits for security Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libgpiod: update to v2.1.2Bartosz Golaszewski2024-06-171-1/+1
| | | | | | | | | | | | This is a small bugfix release that fixes a build issue with slibtool (not relevant to meta-oe ATM), makes the licensing of C++ bindings less restrictive and preemptively fixes an issue that will be triggered with linux v6.9 when running gpio-tools ptest suite. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libfido2: remove non-functional native and nativesdk BBCLASSEXTENDYoann Congal2024-06-171-2/+0
| | | | | | | | | | | | | | | | | | | | | | | libfido2 depends on udev and libcbor which do not exist for native and nativesdk targets. Remove native & nativesdk from BBCLASSEXTEND to avoid hitting these in world/universe builds. Fixes these warnings (as seen on AB[0]): WARNING: Nothing PROVIDES 'nativesdk-udev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'nativesdk-libcbor' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'libcbor-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'udev-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing RPROVIDES 'nativesdk-libfido2-dev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it) WARNING: Nothing RPROVIDES 'nativesdk-libfido2' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Cc: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1a3d194eb3552eb948ca61dffcb9dbe2710f516b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* giflib: upgrade to version 5.2.2nikhil2024-06-172-3/+48
| | | | | | | | | | | | | | | | | | | Upgrade to latest version giflib v5.2.2. This version fixes bugs listed in link below: Link: https://sourceforge.net/p/giflib/code/ci/5.2.2/tree/NEWS Fixes for CVE-2023-48161, CVE-2022-28506, CVE-2023-39742 Link: https://clients.neighbourhood.ie/yocto/1-40.html#:~:text=CVE%2D2023%2D39742%3A%20giflib%3Agiflib%2Dnative Added dependency on ImageMagick which includes "convert" utility, to ensure availability of required tool during compilation process. Add patch to rename binary used in Makefile from "convert" to "convert.im7" as installed by imagemagick package. Signed-off-by: Bhabu Bindu <bhabubindu@kpit.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nano: Security fix for CVE-2024-5742Siddharth Doshi2024-06-172-1/+104
| | | | | | | | | | Upstream-Status: Backport from [https://git.savannah.gnu.org/cgit/nano.git/commit/?id=5e7a3c2e7e118c7f12d5dfda9f9140f638976aa2] CVE's Fixed: CVE-2024-5742 nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* abseil-cpp: backport RISC-V fixScott Murray2024-06-172-0/+83
| | | | | | | | | | | Backport upstream fix[1] for SIGILL crash on RISC-V with 6.6 and newer kernels. The patch has been tweaked to apply on top of the existing stack. [1]: https://github.com/abseil/abseil-cpp/commit/7335a36d Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: Update SRC tarball pathVijay Anusuri2024-06-171-1/+1
| | | | | | | Fix WARNING: Failed to fetch URL https://c-ares.org/download/c-ares-1.27.0.tar.gz Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* unixodbc: Fix CVE-2024-1013Soumya Sambu2024-06-172-0/+54
| | | | | | | | | | | | | An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken. References: https://nvd.nist.gov/vuln/detail/CVE-2024-1013 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pcapplusplus: Fix build with gcc14Khem Raj2024-06-023-1/+73
| | | | | | | | | | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> ---- v2] Scarthgap has the same error as master: initialize timespec variable. pcapplusplus/23.09/git/Packet++/src/RawPacket.cpp:23:18: error: 'nsec_time.timespec::<anonymous>' is used uninitialized [-Werror=uninitialized] | 23 | timespec nsec_time; | | ^~~~~~~~~ | cc1plus: all warnings being treated as errors
* postgresql: upgrade 16.2 -> 16.3Wang Mingyu2024-06-023-3/+3
| | | | | | | | | | | | 0003-configure.ac-bypass-autoconf-2.69-version-check.patch refreshed for 16.3 Changelog: https://www.postgresql.org/docs/release/16.3/ Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatpak: update 1.15.6 -> 1.15.8Markus Volk2024-06-023-64/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - remove included patches - set path for fusermount3 to avoid requirement for fuse3-native. This is needed since: https://github.com/flatpak/flatpak/commit/2cb17b4eb82ecedaa98b5b7f954cf3e52fa95682 Changes in 1.15.8 ~~~~~~~~~~~~~~~~~ Security fixes: * Don't allow an executable name to be misinterpreted as a command-line option for bwrap(1). This prevents a sandbox escape where a malicious or compromised app could ask xdg-desktop-portal to generate a .desktop file with access to files outside the sandbox. (CVE-2024-32462) Other bug fixes: * Pass the -export-dynamic linker option as -Wl,-export-dynamic, fixing build failures with clang 18 and lld 18 (#5760) * Fix a double-free when installation is cancelled (#5763) * Fix installed-tests failure with "FUSERMOUNT: unbound variable" (#5751) * Translation updates: pt_BR (#5762), tr (#5761) Changes in 1.15.7 ~~~~~~~~~~~~~~~~~ Released: 2024-03-27 Dependencies: * The Meson build system is now required. Compiling with Autotools is no longer possible. * In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.9.0 is recommended. Several of the bug fixes listed below will not be active if an older version is used. * In distributions that compile Flatpak to use a separate xdg-dbus-proxy executable, version 0.1.5 is recommended. * If libmalcontent (parental controls) is enabled, it must be version 0.5.0 or later. New features: * Automatically remove obsolete driver versions and other autopruned refs (#5632) * `--socket=inherit-wayland-socket` (#5614) * Automatically reload D-Bus session bus configuration after installing or upgrading apps, to pick up any exported D-Bus services (#3342) Bug fixes: * Update included copy of bubblewrap to version 0.9.0: * `--symlink` is now idempotent, meaning it succeeds if the symlink already exists and already has the desired target (#2387, #3477, #5255) * Report a better error message if `mount(2)` fails with `ENOSPC` * Fix a double-close on error reading from `--args`, `--seccomp` or `--add-seccomp-fd` argument * Improve memory allocation behaviour * Silence various compiler warnings * Update included copy of bubblewrap to version 0.1.5: * Fix handling of long object paths * Don't parse `<developer><name/></developer>` as the application name (#5700) * Don't refuse to start apps when there is no D-Bus system bus available (#5076) * Don't try to repeat migration of apps whose data was migrated to a new name and then deleted (#5668) * Improve handling of mixed locales on systems with systemd-localed (#5497) * Improve display of ellipsized columns in wide terminals (#5722) * Make `flatpak info -e` look for extensions in all installations (#5670) * Fix warnings from newer GLib versions (#5660, #5737) * Always set the `container` environment variable (#5610) * Always let the app inherit redirected file descriptors (#5626) * In `flatpak ps`, add xdg-desktop-portal-gnome to the list of backends we'll use to learn which apps are running in the background (#5729) * Don't use `WAYLAND_SOCKET` unless given `--socket=inherit-wayland-socket` (#5614) * Use `fusermount3` if compiled with FUSE 3, overridable with `-Dsystem_fusermount` compile-time option (#5104) * Avoid leaking a temporary variable from /etc/profile.d/flatpak.sh into the shell environment (#5574) * Improve async-signal safety (#5687) * Fix various memory leaks (#5683, #5690, #5691) * Avoid undefined behaviour of signed left-shift when storing object IDs in a hash table (#5738) * Detect the correct gtk-doc when cross-compiling (#5650) * Detect the correct wayland-scanner when cross-compiling (#5596) * Documentation improvements (#5659, #5677, #5682, #5664, #5719) * Skip more tests when FUSE isn't available (#5611) * Translation updates (#5602, #5707) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdeflate: fix build with -mcpu=cortex-a76+crypto without ↵Martin Jansa2024-06-022-2/+60
| | | | | | | | | | | -march=armv8.2-a+crypto * fixes: https://github.com/ebiggers/libdeflate/issues/369 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade to 8.2.18Soumya Sambu2024-06-022-10/+13
| | | | | | | | | | | | Includes fixes for CVE-2024-3096, CVE-2024-2756 and other bugs. Changelog: https://www.php.net/ChangeLog-8.php#8.2.18 Rebase 0001-ext-opcache-config.m4-enable-opcache.patch to new version Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fwupd: fix uefi capsule update build errorMikko Rapeli2024-06-021-1/+1
| | | | | | | | | | | | | | plugin_uefi_capsule_splash does not provide "enabled" or "disabled" options but only basic bool "true" and "false". Fixes do_configure() failure with PACKAGECONFIG:append = " plugin_tpm plugin_uefi_pk plugin_uefi_capsule ": | ../fwupd-1.9.18/meson.build:1:0: ERROR: Value disabled is not boolean (true or false). Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs-oe-cache: fix offline install of dependenciesMartin Hundebøll2024-05-221-1/+1
| | | | | | | | | | | | | | | | | | | Apparently, npm has changed its request accept header, so that cache lookup misses. This causes an ENOTCACHED error when doing the offline install in do_compile() from npm.bbclass. Fix it by updating the fake cache entry to match the newest behaviour from npm. Note that npm doesn't agree with itself, as it still uses the previous header value when doing `npm cache add <pkg>`, but the new value when doing `npm install <pkg>`. Bug submitted upstream: https://github.com/npm/cli/issues/7465 Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* renderdoc: remove vim-native DEPENDSRoss Burton2024-04-301-1/+1
| | | | | | | | | This need for this was removed in 2016[1] [1] https://github.com/baldurk/renderdoc/commit/fff93a4bcc036f8288fd31dcdd1209fea36b9b58 Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* procmail: Update status for CVE-1999-0475Ninette Adhikari2024-04-301-0/+2
| | | | | | | | Current version 3.22 is not affected by the issue. Affected versions: Up to (excl.) 3.2.1 Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* st: Update status for CVE-2017-16224Ninette Adhikari2024-04-301-0/+2
| | | | | | | | | | The recipe used in the meta-openembedded is a different st package compared to the one which has the CVE issue. Package used in meta-embedded: https://st.suckless.org/ Package with CVE issue: https://www.npmjs.com/package/st No action required. Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* reproducibility: move repro excludes from AB config.json to meta-oeYoann Congal2024-04-301-0/+107
| | | | | | | | | | | | | | For now, the known non-reproducible packages list is stored inside the autobuilder config.json file. This is not ideal. Let's move this list into each layers of meta-openembedded. These lists can be used with, in local.conf: include conf/include/non-repro-meta-oe.inc OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES = "${KNOWN_NON_REPRO_META_OE}" Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Acked-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fwupd: Upgrade to 1.9.18 releaseKhem Raj2024-04-302-87/+46
| | | | | | Drop patch which is already upstreamed in this release Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: upgrade 20.11.1 -> 20.12.2Archana Polampalli2024-04-303-2/+2
| | | | | | | | | | | | | | | | | | License-Update: Copyright year updated zlib version updated GN files License update https://github.com/nodejs/node/commit/b5bc597871ca701bab750c46d31ed626decd7f89 https://github.com/nodejs/node/commit/c8233912e9fd7464898b549d6762130722bf0bf4 Changelog: https://github.com/nodejs/node/releases/tag/v20.12.2 https://github.com/nodejs/node/releases/tag/v20.12.1 https://github.com/nodejs/node/releases/tag/v20.12.0 Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chore(sdbus-c++): upgrade to 2.0.0 releaseStanislav Angelovic2024-04-302-6/+6
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* soci: update build optionsPeter Marko2024-04-301-9/+8
| | | | | | | | | | | | | | | * make it possible to configure build without boost * build tests only when requested * disable build of IBM proprietary DB2 which does not have recipe (this creates some cmake warnings if enabled without dependency) * EXTRA_OECONF is empty with cmake build * remove SOCI_LIBDIR which was removed in upgrade to v4.0.2 * use WITH_* instedad of SOCI_* as SOCI defines still search for dependencies unnecessarily and WITH define automatically enables SOCI define, too Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add class for appending dm-verity hash data to block device imagesJan Luebbe2024-04-301-0/+137
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add support to generate a dm-verity image and the parameters required to assemble the corresponding table for the device-mapper driver. The latter will be stored in the file ${DEPLOY_DIR_IMAGE}/<IMAGE_LINK_NAME>.verity-params. Note that in the resulting image the hash tree data is appended to the contents of the original image without an explicit superblock to keep things simple and compact. The above mentioned parameter file can be sourced by a shell to finally create the desired blockdevice via "dmsetup" (found in meta-oe's recipe "libdevmapper"), e.g. . <IMAGE_LINK_NAME>.verity-params dmsetup create <dm_dev_name> --readonly --table "0 $VERITY_DATA_SECTORS verity \ 1 <dev> <hash_dev> \ $VERITY_DATA_BLOCK_SIZE $VERITY_HASH_BLOCK_SIZE \ $VERITY_DATA_BLOCKS $VERITY_DATA_BLOCKS \ $VERITY_HASH_ALGORITHM $VERITY_ROOT_HASH $VERITY_SALT \ 1 ignore_zero_blocks" As the hash tree data is found at the end of the image, <dev> and <hash_dev> should be the same blockdevice in the command shown above while <dm_dev_name> is the name of the to be created dm-verity-device. The root hash is calculated using a salt to make attacks more difficult. Thus, please grant each image recipe its own salt which could be generated e.g. via dd if=/dev/random bs=1k count=1 | sha256sum and assign it to the parameter VERITY_SALT. Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Rouven Czerwinski <r.czerwinski@pengutronix.de> Signed-off-by: Marco Felsch <m.felsch@pengutronix.de> Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sanlock: upgrade 3.9.1 -> 3.9.2Wang Mingyu2024-04-302-35/+2
| | | | | | | | 0001-include-libgen.h-for-basename.patch removed since it's included in 3.9.2 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pycups: upgrade 2.0.1 -> 2.0.4Wang Mingyu2024-04-301-1/+1
| | | | | | | | Changelog: removes install_requires from setup.py, which is used for generating OS requirements. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mpich: upgrade 4.2.0 -> 4.2.1Wang Mingyu2024-04-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changelog: ============= -Disable flat_namespace to build libmpifort on macOS by default -Prefix warning messages with "MPICH" -Add --disable-doc configure option -Fix support for building MPICH Fortran support with Xcode 15 on macOS -Fix bug in MPI_WIN_SHARED_QUERY when window is not shared -Fix bug in ch4/ofi gpu pipelining -Fixes for Intel GPU support -Fix memory leak in ch4/shm collectives -Fix bug in MPI_COMM_SPLIT with intercommunicators and non-zero root -Fix bug in DAOS ROMIO driver -Fix bug in cycling error code array -Return an error if there is failure to create a datatype in mpi_f08 module for noncontiguous user data -Return an error when shared memory segment creation fails Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gensio: upgrade 2.8.3 -> 2.8.4Wang Mingyu2024-04-301-1/+1
| | | | | | | | | | | Changelog: ========== -github: Don't run oomtest9 and oomtest11 on windows -sound: Fix a possible multiply overflow -gtlsshd: Don't use alloc_sprintf() to duplicate a string Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* asio: upgrade 1.28.0 -> 1.30.2Wang Mingyu2024-04-302-36/+3
| | | | | | | | | | License-Update: Copyright year updated to 2024. 0001-Add-the-pkgconfigdir-location.patch included in 1.30.2 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ydotool: Do not package systemd unit files on non-systemd distrosKhem Raj2024-04-211-0/+6
| | | | | | | | | | | | Fixes ERROR: ydotool-1.0.4+git-r0 do_package: QA Issue: ydotool: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/systemd /usr/lib/systemd/user /usr/lib/systemd/user/ydotoold.service Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sdbus-c++: Fix build and upgrade to latest gitKhem Raj2024-04-213-20/+11
| | | | | | Fix ptest run while here Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-05 03:25:58 +0000