summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* kernel.bbclass: pass LD also in savedefconfigMartin Jansa2022-08-081-1/+1
| | | | | | | | | | | | | | | | | * similar to: https://git.openembedded.org/openembedded-core/commit/?id=66c1f4b0abd3483759f9e4141a80f982eaf8ccfd https://git.openembedded.org/openembedded-core/commit/?id=36fe2efc91fec5a52374a2dc4814a69076a2d28e but for savedefconfig task * otherwise with ld-is-gold it will fail with: gold linker is not supported as it is not capable of linking the kernel proper. (From OE-Core rev: 9d2f5c11c71a39db8d488644e9d3c338811e86d9) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f0c9e1bf35289afa63f040bbc13ca1755e4db0f9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firwmare: restore WHENCE_CHKSUM variableDmitry Baryshkov2022-08-081-1/+4
| | | | | | | | | | | | | | | | | | | | | | Restore WHENCE_CHKSUM variable which is used to hold the WHENCE file checksum. It is necessary to allow easily overriding it from local.conf if the devupstream version is selected: PREFERRED_VERSION_linux-firmware = "1:20220708+git%" SRCREV:class-devupstream = "${AUTOREV}" WHENCE_CHKSUM:class-devupstream:pn-linux-firmware = "abf1077491eeb261ecdcb680a34fc059" Without the WHENCE_CHECKSUM one would need to manually patch the LIC_FILES_CHKSUM variable to change the checksum of WHENC (e.g. using the anonymous python function or remove expression). (From OE-Core rev: 10bc3153effd8c74c541daa00c9c21d0d67165d6) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 554be2af1e0a03a2d23032d48afbbe0913a45409) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgcc: Fix standalone target builds with usrmerge distro featureKhem Raj2022-08-081-2/+6
| | | | | | | | | | | | | | Ignore the rmdir cmd if using usrmerge distro feature since the intention is to delete /lib or /lib64 but not libdir under /usr and base_libdir = libdir when usrmerge is enabled in distro (From OE-Core rev: 38fb876253e28577b8fcf4dd47fbb1d0673c6220) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3b7f6b0e0f1f16f89cd924aac001b4f661c145ca) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* package_manager/ipk: do not pipe stderr to stdoutShruthi Ravichandran2022-08-081-10/+13
| | | | | | | | | | | | | | | | | | | Some opkg commands print an error during cleanup when the tmp_dir does not exist and an attempt is made to delete it. The error messages are harmless and the opkg commands eventually succeed. When these commands are run and stderr is piped to stdout, the error messages may clobber the stdout and cause unexpected results while parsing the output of the command. Therefore, when parsing the output of a command, do not pipe stderr to stdout. Instead, capture stderr and stdout separately, and upon success, send stderr to bb.note(). (From OE-Core rev: fd5689696731fefa0d035fde86f27a0135dc31f1) Signed-off-by: Shruthi Ravichandran <shruthi.ravichandran@ni.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f2167ae80258253eb47a5b148546b265320284cc) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* binutils: stable 2.38 branch updatesSundeep KOKKONDA2022-08-081-1/+1
| | | | | | | | | | | | | | | Below commits on Binutils-2.38 development branch are updated. 5c0b4ee4060 i386: Don't allow GOTOFF relocation against IFUNC symbol for PIC 19892fedb7b x86: Properly check invalid relocation against protected symbol b8a2baa80b1 libctf: tests: prune warnings from compiler output 7f9a495a167 libctf: fix linking together multiple objects derived from the same source 97dd8079feb PowerPC64: fix assertion in ppc_build_one_stub with -Os code (From OE-Core rev: 4eb53b33bc46a8131653354bd077229ee7ee42ed) Signed-off-by: Sundeep KOKKONDA <sundeep.kokkonda@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initscripts: run umountnfs as a KILL scriptShruthi Ravichandran2022-08-041-1/+1
| | | | | | | | | | | | | | | | | | | | `rc` runs all the KILL scripts in a runlevel before the START scripts. The umountnfs script is currently configured as a START script, and runs after the networking KILL script. During shutdown, this causes a ~3 minute timeout after networking is shutdown when the system tries to connect to and unmount any mounted network shares. Fix this by changing the script configuration to "stop" so that it can run before networking is stopped and unmount any network shares safely. (From OE-Core rev: 3564ce3d9b2030dd420362c66147bd327090915c) Signed-off-by: Shruthi Ravichandran <shruthi.ravichandran@ni.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c419bd4537756e9f6c2fe6da3a9b798526e27eca) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: Remove legacy python3 PACKAGECONFIG codeAlex Kiernan2022-08-041-13/+0
| | | | | | | | | | | | | | | Python support was dropped upstream and removed in 8a9a5885995c ("bind: update 9.16.26 -> 9.18.1"), clean up the remaining pieces of python3 in the recipe. (From OE-Core rev: acda23e0d985049ae83e9516315c33afae763ad9) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ee4e4eb16a3729dcafad075c42aec1695b8ea15f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* efivar: fix import functionalitygr embeter2022-08-042-0/+31
| | | | | | | | | | | | | | | | | | | | | | "efivar --import" is broken in v38: # efivar -i /8be4df61-93ca-11d2-aa0d-00e098032b8c-Timeout free(): invalid pointer Aborted Backport upstream patch to fix it. Upstream issue: https://github.com/rhboot/efivar/issues/173 (From OE-Core rev: 7d63a9d4f482276a4431c47cc4407ac2ad855b42) Signed-off-by: Grygorii Tertychnyi <grygorii.tertychnyi@leica-geosystems.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 27f263a9c69b711f39287c0dc8970ad41758fbb9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base/reproducible: Change Source Date Epoch generation methodsRichard Purdie2022-08-042-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | In bc, we found that there are files newer than Changelog (e.g. scan.l) which means after install runs, the timestamp is clamped to SDE which means "bitbake bc -C compile" would then try and regenerate generated files and complain flex was missing. Rather than assuming Changelog/NEWS are magic for dates, drop that scan method and scan all unpacked files. This shouldn't be that slow as they'd be in the disk cache already after an unpack. For bc, this changes SDE by about two minutes and avoids the problems rebuilding. Add a version comment to the task definition as changes in python library code won't trigger a rebuild and we need one here. (From OE-Core rev: 400ed3bc77232b9d67594fa012b1278a6c8be3c6) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 32dda0ad91a9e7946351c897578b4c97ae142341) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* perf: fix reproduciblity in older releases of LinuxRoss Burton2022-08-041-0/+3
| | | | | | | | | | | | | | | | | If you build perf from Linux 5.4 it still contains buildpaths (pointing to the sysroot's Python) as the existing fixes don't apply to the lines in that old release. Add further expressions to remove the final buildpaths. (From OE-Core rev: a4326da742c41f69c2d1d49cc8fdc2fda74aaa0d) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6783c1e295e5afafd73a02fd986ca8956a89dda7) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* udev-extraconf:mount.sh: fix a umount issueMing Liu2022-08-041-1/+1
| | | | | | | | | | | | | | Only touching /tmp/.automount-$name is not good enough, it must contain the mount name, otherwise umount could not get the path from it. (From OE-Core rev: aa6621dc1bc37d3e9a2aae3819619bf4e6c33bc4) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ccea69032329f3ba43c727d9eb71b1d063b89824) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Added base_bindir into pkg_postinst:udev-hwdb.leimaohui2022-08-041-1/+1
| | | | | | | | | | | | | Otherwise in sdk environment, the base_bindir is empty and the path of UDEVADM="${base_bindir}/udevadm" is not correct. (From OE-Core rev: abff988d33dd6ac03eedb34c1f48c83b4502ee1b) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 235b6fccd2a9ce4eb9bfb3be8ac271cff0ea5fea) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wic/plugins/rootfs: Fix NameError for 'orig_path'Mihai Lindner2022-08-041-1/+1
| | | | | | | | | | | | | | Fix "NameError: name 'orig_path' is not defined". It's a typo from when this error was handled outside this function. (From OE-Core rev: 15015dda2cfccb9d2894f8d9d8f04043604b7a5e) Signed-off-by: Mihai Lindner <mihai.lindner@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2124ec0d9f9de2da476f0024a0ccf70da987420f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/runtime: add test that the kernel has CONFIG_PREEMPT_RT enabledRoss Burton2022-08-041-0/+17
| | | | | | | | | | | | | | This is the absolute bare minimum for testing the RT patches, but it does mean we if we build and boot a RT kernel we can verify that it is what we expect. (From OE-Core rev: de7bd5b616b9af3a88d718c79e85a4b53efb3280) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0301d5845115d09299f87683b3efa46f3b4c7be9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* epiphany: upgrade 42.2 -> 42.3Alexander Kanavin2022-08-041-1/+1
| | | | | | | | | | | | | | | | Changes: * Fix crash when deleting all passwords (#1773) * Fix memory corruption caused by Sync failure (!1115) (From OE-Core rev: 492e5659220c1d1cd90810749ca9bac2356cb916) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 34ebcfe23c065718be4e392673f6e1b489d2eb98) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xwayland: upgrade 22.1.2 -> 22.1.3Alexander Kanavin2022-08-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changes: os: print <signal handler called> if unw_is_signal_frame() os: print registers in the libunwind version of xorg_backtrace() xwayland/present: Do not send two idle notify events for flip pixmaps xwayland: Fix check logic in sprite_check_lost_focus() xkb: switch to array index loops to moving pointers xkb: swap XkbSetDeviceInfo and XkbSetDeviceInfoCheck xkb: add request length validation for XkbSetGeometry xwayland: Change randr_output status when call xwl_output_remove() (From OE-Core rev: df37259b600a3458957ddc7c90418d85021a107b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 229e3ad289a5e2c890b25497857140952acc3d67) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xwayland: upgrade 22.1.1 -> 22.1.2Richard Purdie2022-08-041-1/+1
| | | | | | | | | | | | | | | | Changes: Olivier Fourdan (3): randr: Add "RANDR Emulation" property xwayland/output: Set the "RANDR Emulation" property xwayland: Fix invalid pointer access in drm_lease_device_handle_released. (From OE-Core rev: d626b8cc6483bd92229d8a0807eebef0e361fd26) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0fd8934f51080313f54326b634593d11385b3338) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* webkitgtk: upgrade 2.36.3 -> 2.36.4Alexander Kanavin2022-08-041-1/+1
| | | | | | | | | | | | | | | | | | | | Changes: Fix the new ATSPI accessibility implementation to add the missing Collection interface for the loaded document. Fix the MediaSession implementation to make the MPRIS object names more sandbox friendly, which plays better with Flatpak and WebKit’s own Bubblwrap-based sandboxing. Fix leaked Web Processes in some particular situations. Fix the build with media capture support enabled. Fix cross-compilation when targeting 64-bit ARM. Fix several crashes and rendering issues. (From OE-Core rev: fde20b5b6bb030b6c5538938ac9a6e178576d9dd) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2396f8de9b6b9690dd70961084514da7d237f2ad) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vala: upgrade 0.56.1 -> 0.56.2Alexander Kanavin2022-08-042-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Changes in 0.56.2 LTS release: - codegen: Correctly set array-length for NoAccessorMethods properties [#1316] - codegen: Detect usage of static type-parameter in runtime context [#1326] - vala: Avoid critical in SourceFile.get_mapped_length() [#1330] - codegen: Make sure to initialize static collections - codegen: Split reserved identifiers for C and Vala - codegen: Check cname of fields and methods against reserved identfiers [#1329] - glib2.0: Add abs() to int8/int16/int32/ssize_t [#1328] - Add initial wayland-client binding - Add geocode-glib-2.0 binding - Add rest-1.0 bindings (From OE-Core rev: b29546561f8e518cd59043a563f8783ada6f3053) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 21913b732953a1b85ae89721f8337eb9f75d1798) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vala: upgrade 0.56.0 -> 0.56.1Alexander Kanavin2022-08-042-3/+3
| | | | | | | | | | | | | | | | | | | | | | Changes in 0.56.1 LTS relase: - vala: Improve accessibility check inside member initializer [#1300] - vala: Don't allow nullable enum value as real GObject property [#1074] - valadoc: Include path to doclet in error message - manual: Update from wiki.gnome.org - gtk4: Fix GLib.Value parameter in ContentProvider.get_value() - gtk4: Split out gtk4-wayland and gtk4-x11 into separate bindings [#1308] - gstreamer: Update from 1.21+ git main - vapi: Update GIR-based bindings (From OE-Core rev: b19e2022184c567b53858981c77ebf3b1d283a8b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0d78d6d6122b776f9abac27e3a71a3196999bebd) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* log4cplus: upgrade 2.0.7 -> 2.0.8Alexander Kanavin2022-08-041-1/+1
| | | | | | | | | | | | | | | | | | | | Changes: Add CMake alias libraries Add an option to disable tests to configure script Fix C++11 compatibility: C++11 does not have basic_string_view. Look for Android's log library Fix handling of ,aux extension for FileAppender filename should not be empty for TimeBasedRollingFileAppender (From OE-Core rev: 1dae5b5482b0d8c1c7832fc69d9e2998e5311dca) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e09ffe4ec692329502165282ac80cf552113a4d5) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libuv: upgrade 1.44.1 -> 1.44.2Alexander Kanavin2022-08-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Important bugs fixed loop: better align order-of-events behavior between platforms #3598 zos: fix fs event not fired if the watched file is moved/removed/recreated #3540 win: Fix pipe resource leak if closed during connect (and other bugs) #3611 zos: don't error when killing a zombie process #3625 Regressions fixed macos: avoid posix_spawnp() cwd bug #3597 kqueue: skip EVFILT_PROC events when invalidating events for an fd. #3629 (From OE-Core rev: c785f1d3a7f8ef2c7047fad7a2a483c5ebd658e0) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ccd589604c2d7648dcd3541c61a2b48e692ca258) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: update 20220610 -> 20220708Alexander Kanavin2022-08-041-11/+2
| | | | | | | | | | | | | | License-Update: a few obsolete firmware were dropped (particularly i2400m and tda7706), file list updates. (From OE-Core rev: c74c2658e5451488fe3c38c7787bdfee075ab52c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e89fb37e13fcb832ee7d35e7d92d45eaca20689e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xserver-xorg: update 21.1.3 -> 21.1.4Alexander Kanavin2022-08-042-94/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security update CVE fixed in this release: CVE-2022-2319/ZDI-CAN-16062: X.Org Server ProcXkbSetGeometry Out-Of-Bounds Access CVE-2022-2320/ZDI-CAN-16070: X.Org Server ProcXkbSetDeviceInfo Out-Of-Bounds Access Changes: present: Check for NULL to prevent crash rootless: Dead code removal (ROOTLESS_REDISPLAY_DELAY is already defined) X11Application: Ensure TIS operations are done on the main thread os/connection: Improve abstraction for launchd secure sockets xquartz: Create a separate category for organizing user preferences xquartz pbproxy: Adopt NSUserDefaults+XQuartzDefaults for preferences xquartz: Fold spaces related preferences into NSUserDefaults+XQuartzDefaults XQuartz: Ensure scroll events are delivered to a single window (not both X11 and AppKit) meson: Bump requirement to meson-0.50.0 xquartz: Update Sparkle configuration to use SUPublicEDKey xquartz: Update copyright for 2022 meson: Provide options to set CFBundleVersion and CFBundleVersionString in XQuartz Revert "meson: Bump requirement to meson-0.50.0" xquartz: Update autotools-based builds of XQuartz to account for recent changes print_edid: Fix a format string error xf86-input-inputtest: Fix build on systems without SOCK_NONBLOCK tests: Fix build failure from missing micmap.c meson: Support building Xnest and Xorg on darwin XQuartz: Build the bundle trampoline when using meson XQuartz: Add TCC reason keys to Info.plist xquartz: Use correct defines when building to support Sparkle updates xquartz: Fix a possible crash when editing the Application menu due to mutaing immutable arrays XQuartz: Improve type safety for X11Controller's application menu editor xquartz: Add missing files to distribution tarball render: Fix build with gcc 12 xkb: switch to array index loops to moving pointers xkb: swap XkbSetDeviceInfo and XkbSetDeviceInfoCheck xkb: add request length validation for XkbSetGeometry Revert "os: Try to discover the current seat with the XDG_SEAT var first" dix: Correctly save replayed event into GrabInfoRec dix: Don't send touch end to clients that do async grab without touches xfree86: Fix event data alignment in inputtest driver xkb: fix XkbSetMap when changing a keysym without changing a keytype (From OE-Core rev: 75503a13cb2a2266f311477a605389bbac7676e2) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d683f2a1fbe65b52d82f55a2e38aa75fc105a338) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* font-util: update 1.3.2 -> 1.3.3Alexander Kanavin2022-08-041-2/+3
| | | | | | | | | | | | | | | | | | | Changes: ucs2any: avoid segfaults if SLANT property is missing ucs2any: handle NULL returns from zquotedcpy() gitlab CI: add a basic build test Build xz tarballs instead of bzip2 Fix spelling/wording issues (From OE-Core rev: cf4e2a091ea18fff45a4444759fe3d70f751887f) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 461b464eafa14719e1dbc087aad8cfbc8d1cf62e) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* encodings: update 1.0.5 -> 1.0.6Alexander Kanavin2022-08-043-8/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CHanges: gitlab CI: add a basic build test Build xz tarballs instead of bzip2 adjust descriptions for the Unicode mapping to match the Unicode.org data file. add mapping for 0x80-0x9f, as per Unicode.org data files. use descriptions from UnicodeData.txt except for two obsolete or incorrect maps correct a typo (in original), and use appropriate description use Armenian eternity symbol from Unicode 6. whitespace-only changes for consistency, using luit's annotate-enc script add descriptions from UnicodeData.txt, using annotate-enc add descriptions from UnicodeData.txt, using annotate-enc add descriptions from UnicodeData.txt, using annotate-enc add descriptions from UnicodeData.txt, with annotate-enc add descriptions from UnicodeData.txt, with annotate-enc whitespace-only, reformat with annotate-enc Add ability to tweak compressor suffix in filenames, similar to xorg apps and drivers. (From OE-Core rev: 73ca8c3e8639929ed78a3c605056f7fd42e500cf) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b1fb0fbfbf0bcf50906a26421435d7165be64281) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xf86-input-synaptics: update 1.9.1 -> 1.9.2Alexander Kanavin2022-08-042-55/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: Convert remaining source files from ISO-8859-1 to UTF-8 gitlab CI: add a basic build test Fix spelling/wording issues Build xz tarballs instead of bzip2 synclient: allow negative/large values for AreaLeftEdge etc. eventcomm: fix compile with pre-time64 kernels eventcomm: use 64-bit time safe accessors instead of timeval directly Use fabs() instead of abs() on double values. Update configure.ac bug URL for gitlab migration Update README for gitlab migration Drop 64bit_time_t_support.patch as issue fixed upstream: https://github.com/freedesktop/xorg-xf86-input-synaptics/commit/073b1b40bde9935928758c3452176c0d8dc67370 (From OE-Core rev: d083da164ddd8ebe73db5b97e4e4b8b7078ba21a) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9d4d2c176cf33ced4d7d5c20178066abe1e9c4d3) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xmodmap: update 1.0.10 -> 1.0.11Alexander Kanavin2022-08-041-2/+3
| | | | | | | | | | | | | | | | | | | Changes: gitlab CI: add a basic build test Build xz tarballs instead of bzip2 handle.c: avoid leaks when realloc() fails PrintModifierMapping: stop leaking the map returned by XGetKeyboardMapping Fix warning about number of mouse buttons (From OE-Core rev: 571736f7f1065674b8a90285868934d0a4ff1e51) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 162f117428be2da12f2599870e980cbbc12ac2c4) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xev: update 1.2.4 -> 1.2.5Alexander Kanavin2022-08-041-1/+3
| | | | | | | | | | | | | | | | | | Changes: gitlab CI: add a basic build test Build xz tarballs instead of bzip2 man page: remove out-of-date reference to X(7) xev: fix KeymapNotify event printing (From OE-Core rev: 2f9ab1a77a170fe7d1d493470a448e42b1750c19) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 83c9b5aead195d933a43a4782428fdfa3eb51967) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xorg-app: Tweak handling of compression changes in SRC_URIRichard Purdie2022-08-044-7/+5
| | | | | | | | | | | Rather than duplicating SRC_URI, change the compression to a variable. (From OE-Core rev: 5f3d70970746ee6d9ad68f16419a016331b45df4) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 21547dd5319f27a8f7f20a80e39478f816b4bbe0) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xdpyinfo: upgrade 1.3.2 -> 1.3.3wangmy2022-08-041-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: xdpyinfo: Fix printing the X.Org release version for xserver >= 21 Update README for gitlab migration Update configure.ac bug URL for gitlab migration Only check for XFree86 if vendor string doesn't match X.Org Add explicit casts to clear implicit conversion warnings Disable DMX support by default, leave --with-dmx to enable it gitlab CI: add a basic build test Build xz tarballs instead of bzip2 Fix spelling/wording issues gitlab CI: stop requiring Signed-off-by in commits autogen.sh: use quoted string variables autogen: add default patch prefix autogen.sh: use exec instead of waiting for configure to finish fix -Wunused-[...] compiler warnings temporarily override SRC_URI which is hard-coded in xorg-app-common.inc since new versions of packages use a new compression format - .tar.xz (From OE-Core rev: cde61983f3cdae55c78466d6e9975a19bff04ccf) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 712552b5cc427d7be1258c45886de9b57f7272c9) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mkfontscale: upgrade 1.2.1 -> 1.2.2wangmy2022-08-041-2/+3
| | | | | | | | | | | | | | | | | | | | | | CHanges: Fix spelling/wording issues gitlab CI: add a basic build test Build xz tarballs instead of bzip2 Use case insensitive comparison for T1 font weight Add "ExtraBold" as a valid T1 font weight. temporarily override SRC_URI which is hard-coded in xorg-app-common.inc since new versions of packages use a new compression format - .tar.xz (From OE-Core rev: 01f6eff02b872c9179b654a87857ba573a194f8a) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 7ac5e224fe55db17651988435a569a8a25b6b09f) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libtirpc: CVE-2021-46828 DoS vulnerability with lots of connectionsHitendra Prajapati2022-08-042-1/+158
| | | | | | | | | | | | | | | | Source: http://git.linux-nfs.org/?p=steved/libtirpc.git; MR: 120225 Type: Security Fix Disposition: Backport from http://git.linux-nfs.org/?p=steved/libtirpc.git;a=commit;h=86529758570cef4c73fb9b9c4104fdc510f701ed ChangeID: 29c32ee171a6a47e06c788e5c608fac9bb3a64b2 Description: CVE-2021-46828 libtirpc: DoS vulnerability with lots of connections. (From OE-Core rev: 7eeaf4e400bf57fc9d0a376085d1788bc5c146b3) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* qemu: CVE-2022-35414 can perform an uninitialized read on the translate_fail ↵Hitendra Prajapati2022-08-042-0/+54
| | | | | | | | | | | | | | | | | | path, leading to an io_readx or io_writex crash Source: https://github.com/qemu/qemu MR: 119830 Type: Security Fix Disposition: Backport from https://github.com/qemu/qemu/commit/418ade7849ce7641c0f7333718caf5091a02fd4c ChangeID: 41d6646e06319e629da574b9b2e8a3a197a73441 Description: CVE-2022-35414 qemu: can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. (From OE-Core rev: 5f236e744b5b528bdf8d95c9580c273f63c04452) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc-runtime: Pass -nostartfiles when building dummy libstdc++.soKhem Raj2022-08-011-2/+1
| | | | | | | | | | | | | | This is a dummy shared object therefore reduce dependencies further by not requiring the C startup files, we wont use this shared library for anything useful anyway (From OE-Core rev: 2bc86c029fb82ae572f6a89407ccfe332972568c) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc: Backport a fix for gcc bug 105039Naveen2022-08-012-1/+93
| | | | | | | | | | | | | Backport a fix from: https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=9234cdca6ee88badfc00297e72f13dac4e540c79 which fixes rust recursion issues in the demangler. (From OE-Core rev: 943760dfb8036bd2f5e075bf0696f820fd6dc79d) Signed-off-by: Naveen <naveen.gowda@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gobject-introspection-data: Disable cache for g-ir-scannerTom Hochstein2022-08-012-3/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | An intermittent failure occurs in libical-native do_compile: | Traceback (most recent call last): | File "/.../build/tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/python3.10/shutil.py", line 813, in move | os.rename(src, real_dst) | OSError: [Errno 18] Invalid cross-device link: '/tmp/g-ir-scanner-cache-adxo_2bq' -> '/home/bamboo/.cache/g-ir-scanner/bab9a83d2cd93e62ed005a2c1d4f89ae75c67251' | | During handling of the above exception, another exception occurred: | | Traceback (most recent call last): | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/bin/g-ir-scanner", line 99, in <module> | sys.exit(scanner_main(sys.argv)) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/gobject-introspection/giscanner/scannermain.py", line 590, in scanner_main | transformer = create_transformer(namespace, options) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/gobject-introspection/giscanner/scannermain.py", line 409, in create_transformer | transformer.register_include(include_obj) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/gobject-introspection/giscanner/transformer.py", line 140, in register_include | self._parse_include(filename) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/gobject-introspection/giscanner/transformer.py", line 230, in _parse_include | self._parse_include(dep_filename) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/gobject-introspection/giscanner/transformer.py", line 225, in _parse_include | self._cachestore.store(filename, parser) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/gobject-introspection/giscanner/cachestore.py", line 153, in store | shutil.move(tmp_filename, store_filename) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/python3.10/shutil.py", line 833, in move | copy_function(src, real_dst) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/python3.10/shutil.py", line 435, in copy2 | copystat(src, dst, follow_symlinks=follow_symlinks) | File "/.../tmp/work/x86_64-linux/libical-native/3.0.14-r0/recipe-sysroot-native/usr/lib/python3.10/shutil.py", line 374, in copystat | lookup("utime")(dst, ns=(st.st_atime_ns, st.st_mtime_ns), | FileNotFoundError: [Errno 2] No such file or directory A similar issue is described in a fix for gobject-introspection-native. https://github.com/openembedded/openembedded-core/commit/d3c48ff7d19e86b2338b1778f9563969bba3d336 The problem was fixed there by setting the environment variable GI_SCANNER_DISABLE_CACHE to disable the use of $HOME/.cache. Extend the fix to users of gobject-instropection by promoting the fix to the bbclass. (From OE-Core rev: bb1dc2bbfe268e73008dc37d6b1f83a861b48915) Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 35d5f707f6bb2ce5e9ab908e66e1ea9eeac754b1) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rootfs-postcommands.bbclass: move host-user-contaminated.txt to ${S}Ming Liu2022-08-011-1/+1
| | | | | | | | | | | | | | | This is to ensure host-user-contaminated.txt would be removed before do_rootfs runs, since ${S} is in cleandirs of do_rootfs, otherwise, a host-user-contaminated.txt file that generated from previous builds could be used which is wrong. (From OE-Core rev: 96215d6d45d2cae59c9e36e6a77bbbada410b259) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 54a3fd63e684d070fad962be97e549f3af7ac111) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sstatesig: Include all dependencies in SPDX task signaturesJoshua Watt2022-08-011-0/+9
| | | | | | | | | | | | | | | | | | | SDPX generation involves looking through BB_TASKDEPDATA for dependencies, then linking to the generated documents for those dependencies. These document links use a checksum to validate the document, which means that if a upstream document changes, all downstream documents must be regenerated to get the new checksum, otherwise the compendium of documents produced by the build will have broken links; therefore all dependent task should be included in the signature (even from "ABI safe" recipes). (From OE-Core rev: 7549429fc93218dee33b216010b2c36a9f814091) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 5fe543b9ceec971cf0297ff0ae3b0ccc4703cece) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* git: upgrade v2.35.3 -> v2.35.4Sakib Sajal2022-08-011-1/+1
| | | | | | | | | | Minor upgrade which includes fix for CVE-2022-29187. (From OE-Core rev: 11943acaacd9b81b09ca378f40b17c393d33cb4b) Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: update v1.17.10 -> v1.17.12Sakib Sajal2022-08-018-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | go.git$ git log --oneline go1.17.10..go1.17.12 1ed3c127da (tag: go1.17.12) [release-branch.go1.17] go1.17.12 cd54600b86 [release-branch.go1.17] encoding/gob: add a depth limit for ignored fields 76f8b7304d [release-branch.go1.17] path/filepath: fix stack exhaustion in Glob 8c1d8c8362 [release-branch.go1.17] io/fs: fix stack exhaustion in Glob 0117dee7dc [release-branch.go1.17] compress/gzip: fix stack exhaustion bug in Reader.Read ba8788ebce [release-branch.go1.17] go/parser: limit recursion depth 2678d0c957 [release-branch.go1.17] encoding/xml: limit depth of nesting in unmarshal 58facfbe7d [release-branch.go1.17] encoding/xml: use iterative Skip, rather than recursive ed2f33e1a7 [release-branch.go1.17] net/http: preserve nil values in Header.Clone d13431c37a [release-branch.go1.17] net/http: don't strip whitespace from Transfer-Encoding headers ae2dfcc1c8 [release-branch.go1.17] runtime: add race annotations to cbs.lock fc07039e23 [release-branch.go1.17] runtime: add race annotations to metricsSema 9ef614f5aa [release-branch.go1.17] cmd/compile: allow 128-bit values to be spilled b1be664d64 [release-branch.go1.17] runtime: store consistent total allocation stats as uint64 77cc1c0def [release-branch.go1.17] cmd/go: pass --no-decorate when listing git tags for a commit 8d2935ab7c [release-branch.go1.17] cmd/dist: test cgo internal linking on darwin-arm64 651a8d81ba [release-branch.go1.17] cmd/dist: skip internal linking tests on arm64 26cdea3acc (tag: go1.17.11) [release-branch.go1.17] go1.17.11 4c69fd51a9 [release-branch.go1.17] path/filepath: do not remove prefix "." when following path contains ":". 909881db03 [release-branch.go1.17] misc/cgo/testsanitizers: buffer the signal channel in TestTSAN/tsan11 03c2e56f68 [release-branch.go1.17] crypto/tls: avoid extra allocations in steady-state Handshake calls c15a8e2dbb [release-branch.go1.17] crypto/tls: randomly generate ticket_age_add 590b53fac9 [release-branch.go1.17] os/exec: return clear error for missing cmd.Path 2be03d789d [release-branch.go1.17] crypto/rand: properly handle large Read on windows 65701ad2b4 [release-branch.go1.17] misc/cgo/testsanitizers: use buffered channel in tsan12.go e846f3f2d6 [release-branch.go1.17] runtime: skip TestGdbBacktrace flakes matching a known GDB internal error a9003376d5 [release-branch.go1.17] cmd/dist: consistently set PWD when executing a command in a different directory 0e7138a102 [release-branch.go1.17] runtime: mark TestGcSys as flaky (From OE-Core rev: 4c3591cd31b61c4008af80701dfc1bcd6339e0e8) Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 9.0.0021 -> 9.0.0063Richard Purdie2022-08-013-6/+66
| | | | | | | | | | | | | | | | Pulls in several CVE fixes. Added a patch to avoid timer_create cross compile issue (and submitted upstream). Also submit the race fix upstream. We disable timer_create in the native case since some systems have it and some don't so this makes us consistent. (From OE-Core rev: 8b42e405fc630537398116a1429a9bc7cb2152ab) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d0c1de084c7ce030d47a428e4bbfbc4ce2996057) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: upgrade to 2.3.7 to fix CVE-2022-34903Yue Tao2022-08-011-1/+1
| | | | | | | | | (From OE-Core rev: c0c7214f8bdc1942a53f9a86b937eb4977e09452) Signed-off-by: Yue Tao <yue.tao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: update 2.3.4 -> 2.3.6Alexander Kanavin2022-08-014-43/+13
| | | | | | | | | | | | | | Remove 0003-dirmngr-uses-libgpg-error.patch (upstream addressed the issue). (From OE-Core rev: 4e9c180baf5fea79a2ca472651b782038051b837) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Yue Tao <yue.tao@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.18.3 -> 9.18.4wangmy2022-08-0110-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== [func] Don't try to process DNSSEC-related and ZONEMD records in catz. [GL #3380] [func] Add some more dnssec-policy checks to detect weird policies. [GL #1611] [test] Add new set of unit test macros and move the unit tests under single namespace in /tests/. [GL !6243] [func] Key timing options for 'dnssec-settime' and related utilities now accept "UNSET" times as printed by 'dnssec-settime -p'. [GL #3361] [bug] When the fetches-per-server quota was adjusted because of an authoritative server timing out more or less frequently, it was incorrectly set to 1 rather than the intended value. This has been fixed. [GL #3327] [bug] Only write key files if the dnssec-policy keymgr has changed the metadata. [GL #3302] [func] Key timing options for 'dnssec-keygen' and 'dnssec-settime' now accept times as printed by 'dnssec-settime -p'. [GL !2947] (From OE-Core rev: 5bfb44bff5d296b8fd447acb7bdb29b544bd1c20) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d5a12d549209f01324d03963db96449ee43452eb) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.18.2 -> 9.18.3wangmy2022-08-0110-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== [security] Fix a crash in DNS-over-HTTPS (DoH) code caused by premature TLS stream socket object deletion. (CVE-2022-1183) [GL #3216] [bug] RPZ NSIP and NSDNAME rule processing didn't handle stub and static-stub zones at or above the query name. This has now been addressed. [GL #3232] Fixed a deadlock that could occur if an rndc connection arrived during the shutdown of network interfaces. [GL #3272] Refactor the fctx_done() function to set fctx to NULL after detaching, so that reference counting errors will be easier to avoid. [GL #2969] udp_recv() in dispatch could trigger an INSIST when the callback's result indicated success but the response was canceled in the meantime. [GL #3300] Work around a jemalloc quirk which could trigger an out-of-memory condition in named over time. [GL #3287] If there was a pending negative cache DS entry, validations depending upon it could fail. [GL #3279] dig returned a 0 exit status on UDP connection failure. [GL #3235] Fix an assertion failure when using dig with +nssearch and +tcp options by starting the next query in the send_done() callback (like in the UDP mode) instead of doing that recursively in start_tcp(). Also ensure that queries interrupted while connecting are detached properly. [GL #3144] Don't remove CDS/CDNSKEY DELETE records on zone sign when using 'auto-dnssec maintain;'. [GL #2931] [contrib] Avoid name space collision in dlz modules by prefixing functions with 'dlz_'. [GL !5778] dlz: Add FALLTHROUGH and UNREACHABLE macros. [GL #3306] [func] Add new named command-line option -C to print built-in defaults. [GL #1326] Introduce the concept of broken catalog zones described in the DNS catalog zones draft version 5 document. [GL #3224] Add DNS Extended Errors when stale answers are returned from cache. [GL #2267] Implement support for catalog zones change of ownership (coo) mechanism described in the DNS catalog zones draft version 5 document. [GL #3223] Implement support for catalog zones options new syntax based on catalog zones custom properties with "ext" suffix described in the DNS catalog zones draft version 5 document. [GL #3222] Implement reference counting for TLS contexts and allow reloading of TLS certificates on reconfiguration without destroying the underlying TCP listener sockets for TLS-based DNS transports. [GL #3122] Add support for remote TLS certificates verification, both to BIND and dig, making it possible to implement Strict and Mutual TLS authentication, as described in RFC 9103, Section 9.3. [GL #3163] [cleanup] Remove use of exclusive mode in ns_interfacemgr in favor of rwlocked access to localhost and localnets members of dns_aclenv_t structure. [GL #3229] Remove the task exclusive mode use in ns_clientmgr. [GL #3230] (From OE-Core rev: 1bbedc1c6f9b1d431a7d72b9e8e2871d0fe988f5) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d2ae8b85c71be2e9e332b1ef0a2d3083b30c63e6) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dpkg: fix CVE-2022-1664Sakib Sajal2022-08-012-0/+329
| | | | | | | | | | Backport patch to fix CVE-2022-1664. (From OE-Core rev: e22b7b2a30c4c688b9c4414824c93ae8a884496c) Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tiff: Security fixes CVE-2022-1354 and CVE-2022-1355Yi Zhao2022-08-013-0/+276
| | | | | | | | | | | | | | | | | | | | | | | References: https://nvd.nist.gov/vuln/detail/CVE-2022-1354 https://security-tracker.debian.org/tracker/CVE-2022-1354 https://nvd.nist.gov/vuln/detail/CVE-2022-1355 https://security-tracker.debian.org/tracker/CVE-2022-1355 Patches from: CVE-2022-1354: https://gitlab.com/libtiff/libtiff/-/commit/87f580f39011109b3bb5f6eca13fac543a542798 CVE-2022-1355: https://gitlab.com/libtiff/libtiff/-/commit/c1ae29f9ebacd29b7c3e0c7db671af7db3584bc2 (From OE-Core rev: 6c373c041f1dd45458866408d1ca16d47cacbd86) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lua: Backport fix for CVE-2022-33099Khem Raj2022-08-012-0/+62
| | | | | | | | | | | | Fixes stack overflow while handling recurring errors in Lua-stack (From OE-Core rev: 16be6e3b750c66aab3ef68eaa805b71abd50319a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit caad9d5f7184f0fa60fa7770e5d3da3f533647cb) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* pulseaudio: add m4-native to DEPENDSRoss Burton2022-07-251-1/+1
| | | | | | | | | | | | | | | | Normally m4-native ends up in the sysroot via the toolchain, but if a non-standard toolchain is used them m4-native may not be installed. However Pulseaudio explicitly checks for m4 in the meson.build, so add it to DEPENDS. (From OE-Core rev: f1c2e21a28f8ad5dc6ff7b0db877aa22e01a9e00) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ddf846635783923d43520c9dd6f63ca59ed6e3b8) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-17 01:16:14 +0000