summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* binutils: stable 2.42 branch updatesDeepthi Hemraj2024-07-231-1/+1
| | | | | | | | | | | | | | | Below commits on binutils-2.42 stable branch are updated. 29ae8b8ea71 x86-64: Skip -z mark-plt tests on MUSL 92cc764e58f hppa: Fix handling of relocations that apply to data c439c1e1f56 elf: Add glibc version dependency only if needed 68ae8e2a849 ld: pass -g for ld-elf tests a1e3cb45c67 aarch64: Enable +cssc for armv8.9-a (From OE-Core rev: f5a56716b40bb8911e5bb31d5dc49b434e733a9a) Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* go: upgrade 1.22.4 -> 1.22.5Jose Quaresma2024-07-2316-66/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - refresh patches with devtool Upgrade to latest 1.22.x release [1]: $ git --no-pager log --oneline go1.22.4..go1.22.5 8e1fdea831 (tag: go1.22.5, origin/release-branch.go1.22) [release-branch.go1.22] go1.22.5 c2d4f852ce [release-branch.go1.22] cmd/link: handle dynamic import variables on Darwin in plugin mode 3222951439 [release-branch.go1.22] net/http: send body or close connection on expect-100-continue requests ceaf26ecce [release-branch.go1.22] cmd/compile: mark pointer to noalg type as noalg dfe4dbf8c0 [release-branch.go1.22] os/exec: on Windows look for extensions in Run if not already done 3560cf0afb [release-branch.go1.22] runtime: always update stack bounds on cgocallback 5159a7193a [release-branch.go1.22] cmd/compile: put constants before variables in initialization order 11b861e459 [release-branch.go1.22] go/types, types2: report error for floating-point iteration variable 81fc616267 [release-branch.go1.22] crypto/tls: don't call tlsrsakex.IncNonDefault with FIPS 14f0251867 [release-branch.go1.22] cmd/cgo/internal/swig: force use of lld for LTO tests on the builders ab60a7bc18 [release-branch.go1.22] cmd/cgo/internal/testsanitizers: make the libfuzzer tests all short 4c97e883b5 [release-branch.go1.22] cmd/link: put runtime.end in the last section of data segment 179ccb7042 [release-branch.go1.22] cmd/go: fix go list -u -m all with too new retractions dependency fe9b3c3399 [release-branch.go1.22] net: add GODEBUG=netedns0=0 to disable sending EDNS0 header b515c5208b [release-branch.go1.22] go/internal/gccgoimporter: recognize "any" as a builtin type [1] https://github.com/golang/go/compare/go1.22.4...go1.22.5 (From OE-Core rev: 8786cb9cdda93545315f79927f933a261ed3cb31) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0a1d4a42282bd9f0bdc8dd53c7865aa81d4a5821) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssh: fix CVE-2024-39894Vijay Anusuri2024-07-232-0/+36
| | | | | | | | | | | | | | | | | ssh(1) in OpenSSH versions 9.5p1 to 9.7p1 (inclusive). Logic error in ObscureKeystrokeTiming option. A logic error in the implementation of the ssh(1) ObscureKeystrokeTiming option rendered the feature ineffective and additionally exposed limited keystroke timing information when terminal echo was disabled, e.g. while entering passwords to su(8) or sudo(8). This condition could be avoided for affected versions by disabling the feature using ObscureKeystrokeTiming=no. References: https://www.openssh.com/security.html https://www.openssh.com/txt/release-9.8 Upstream-Status: Backport [https://github.com/openssh/openssh-portable/commit/146c420d29d055cc75c8606327a1cf8439fe3a08] (From OE-Core rev: 644716564d8c223c71be635e2f1794c74ae23d7f) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* less: fix CVE-2024-32487Archana Polampalli2024-07-232-0/+75
| | | | | | | (From OE-Core rev: bd1c48510a01cd368955e0b8707022e3427e00db) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* vte: fix CVE-2024-37535Hitendra Prajapati2024-07-233-1/+153
| | | | | | | | | Upstream-Status: Backport from https://gitlab.gnome.org/GNOME/vte/-/commit/036bc3ddcbb56f05c6ca76712a53b89dee1369e2 && https://gitlab.gnome.org/GNOME/vte/-/commit/c313849c2e5133802e21b13fa0b141b360171d39 (From OE-Core rev: dd5482d64587124bd5060c7b3532f0e90b94c367) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* busybox: Patch CVE-2023-42363Peter Marko2024-07-232-0/+68
| | | | | | | | | | | Backport patch for CVE-2023-42363. (From OE-Core rev: 9c52dadd06fd9132c6efc1d06b6fc4a4517be6c3) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 814f97922e1d6c24a36b03ee0e865f2210ff6d7c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* busybox: Patch CVE-2021-42380Peter Marko2024-07-233-0/+194
| | | | | | | | | | | | Backport patch for CVE-2021-42380. Additionally backport clang regression fix caused by this patch. (From OE-Core rev: 9f5c683b6cadae6228096deb36d7d6fb6de94ad1) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 66543769ff79d81508bb703bd2fc34871a16e2c7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* webkitgtk: fix do_compile errors on beaglebone-yoctoChangqing Li2024-07-173-0/+111
| | | | | | | | | | | | | | | | Backport 2 patches to fix following compile errors: webkitgtk-2.44.1/Source/WebCore/platform/graphics/cpu/arm/filters/FELightingNeonParallelApplier.cpp:545:37: error: 'LS_POINT' was not declared in this scope; did you mean 'WebCore::LightType::LS_POINT'? 545 | if (data.lightSource->type() == LS_POINT) { | ^~~~~~~~ | WebCore::LightType::LS_POINT webkitgtk-2.44.1/Source/WebCore/platform/graphics/filters/FELighting.h:73:41: error: 'LightingData' does not name a type 73 | inline void platformApplyNeon(const LightingData&, const LightSource::PaintingData&); (From OE-Core rev: bf3fe8c01c5cc00ada22049f4f0abb485e2a626f) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* webkitgtk: fix do_configure error on beaglebone-yoctoChangqing Li2024-07-171-12/+0
| | | | | | | | | | | | | | | | | | | | | | | | * According to latest comment [1] and the mentioned pull request [2], build an ENABLE(WEBASSEMBLY) && !ENABLE(JIT) configuration is supported, so original issue already fixed in current version, the EXTRA_OECMAKE setting is not needed anymore. * This EXTRA_OECMAKE setting causes following configure error on beaglebone-yocto, remove the setting to let the configure process decide the configuration: CMake Error at Source/cmake/WebKitFeatures.cmake:312 (message): ENABLE_JIT conflicts with ENABLE_C_LOOP. You must disable one or the other. [YOCTO #15254] [1] https://github.com/WebKit/WebKit/pull/17447 [2] https://github.com/WebKit/WebKit/pull/17688 (From OE-Core rev: feeadc65bdae8ad9ba6f5e5fefa7a2466479fe87) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cve-exclusion: Drop the version comparision/warningRichard Purdie2024-07-171-9/+9
| | | | | | | | | | | Since the CVE repository is no longer being updated, drop the warning comparision since it is no longer valid. (From OE-Core rev: 7eef8839d131861cca04e1424f0682e81638ca0a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* iptables: submit ↵Alexander Kanavin2024-07-171-18/+26
| | | | | | | | | | | | 0001-configure-Add-option-to-enable-disable-libnfnetlink.patch upstream (From OE-Core rev: 20276890b2e08512bb04206d6cc6be5867d5f8a4) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 67f6c3534a18520f3b7c5eed27dc2744c5bf44c2) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* perl: submit the rest of determinism.patch upstreamAlexander Kanavin2024-07-171-3/+3
| | | | | | | | | | (From OE-Core rev: 35675cd8104151d23b2a64cd5093939fa3d2b8ea) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5c00500618fa50eeb5e3e956e1fb5f4af562c1a7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* grub: mark grub-module-explicitly-keeps-symbole-.module_license.patch as a ↵Alexander Kanavin2024-07-171-1/+1
| | | | | | | | | | | | workaround (From OE-Core rev: 8c03f8c4916c802e0e6ad483a019fcaa7b09f509) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6307adb5b0644845f4062c21ac5717eb62a61dd3) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* vorbis: mark patch as Inactive-UpstreamAlexander Kanavin2024-07-171-1/+1
| | | | | | | | | | (From OE-Core rev: 1b3da78af1ea569ac8cbf135159a3f6e7f4f471c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 618bb8994d66d7d24cca2fb6885a510d69406437) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* kexec-tools: submit ↵Alexander Kanavin2024-07-171-1/+1
| | | | | | | | | | | | 0003-kexec-ARM-Fix-add_buffer_phys_virt-align-issue.patch upstream (From OE-Core rev: 2a83956abfa3cc4b39aa7682c03b551222c85dcb) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d28861326dd8d23914571dc0be8e70899927deea) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* dnf/mesa: Fix missing leading whitespace with ':append'Niko Mauno2024-07-172-2/+2
| | | | | | | | | | | | | | | Mitigate occurrences where ':append' operator is used and leading whitespace character is obviously missing, risking inadvertent string concatenation. (From OE-Core rev: 314041fd126a4800a5a5d9fcd84c525319479256) (From OE-Core rev: eb06788f3abef4af727da7399e7e97830b2f7c8c) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0b6ca9beeff927bbb6158c71596ac475550559d8) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* mesa: remove obsolete ↵Alexander Kanavin2024-07-172-43/+0
| | | | | | | | | | | | | | | | | | 0001-meson.build-check-for-all-linux-host_os-combinations.patch The patch was submitted upstream https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/28895 but further investigation revealed that the problem had been solved properly in meson.class: https://git.yoctoproject.org/poky/commit/?id=6bf674374d568b2419a4c6eef00d893028878881 (From OE-Core rev: 5dabb17313ed5e4e143708f0c7703cac663e9647) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 020345d63f0ffd3ed2b046bbb5e09b5359b24dd6) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* curl: skip FTP tests in run-ptestRoss Burton2024-07-171-1/+3
| | | | | | | | | | | | | | | | It looks like something related to FTP in curl, be it the protocol itself or the harness, is unstable under load. We've been seeing random failures in automated QA, and Debian does too. Until this issue is resolved, disable all of the FTP tests on the hope that this is the underlying common factor. (From OE-Core rev: 49ae51c05e470523d3b818aa5fe7b54c3274a17d) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 28035987fad5a673e35b346e043e66d04f64ef5d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* meson: don't use deprecated pkgconfig variableRoss Burton2024-07-171-2/+2
| | | | | | | | | | | | | | As with a previous change to the class[1], the "pkgconfig" entry is now deprecated and "pkg-config" should be used instead. [1] oe-core d64b307891422e290bbe821d4303b3af526bbe17 (From OE-Core rev: 14ee7a2310b5d3da5e7af442454f7957c6c090b7) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3e441544f1aa7258718a1cadd6836d9cd9dc65ab) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ncurses: switch to new mirrorPeter Marko2024-07-172-3/+3
| | | | | | | | | | | | | | | | | | | github.com/mirror/ncurses is not updated for over a year. Switch to new mirror from Thomas Dickey (ncurses maintainer). Sources are identical. Updated upstream check regex by: * changed dot to underscore as this repo is tagged like this * added v prefix to not propose updates to some old tags * removed third part to not propose updates to development snapshots (From OE-Core rev: 506673555fb4dcf06606e2b49c2268ece33a71d5) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ea801be31d051b558fde52f7d6dccf2cd416afb9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* selftest/cases/runtime_test: Exclude centos-9 from virgl testsRichard Purdie2024-07-171-1/+1
| | | | | | | | | | | Similarly to centos 8, centos 9 doesn't support the render device we need for this test. (From OE-Core rev: 37ddcbd51ec39e5df94b307085cec2a045fea4a1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c2be3afabf84f287c90b61ae2509728a6634fb8f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* sdk: Fix path length limit to match reserved sizeRobert Kovacsics2024-07-172-1/+5
| | | | | | | | | | There were two different interpreter lengths in use, make them match. (From OE-Core rev: 98119e3f452ebf6cb5f17049aef3a9a3ef7116c8) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b175f9cdc3d87bef5c89cc337c2a7e2674732b29) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* populate_sdk_ext.bbclass: Fix undefined variable errorJookia2024-07-171-0/+2
| | | | | | | | | | | The variable uninative_checksum is returned without being set, causing a build error. Set it to None by default instead. (From OE-Core rev: 5726348e04381d5c656a530c318775702136ec8c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 69ead1f2d403e6a0e5365ce4e89288f846d3ef33) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* linux-yocto: Enable team net driverKhem Raj2024-07-171-0/+2
| | | | | | | | | | | | Its needed to run libteam ptests (From OE-Core rev: 35be70c8c7f4044b5ad3cbb8ed32a6c648a5ac65) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 7cd8e04b23b562746665577174799d42ded45d93) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libportal: fix rare build raceRoss Burton2024-07-172-1/+51
| | | | | | | | | | | | | | | | There is a build race where the libportal.vapi is not always generated before it is needed to build libportal-gtk*.vapi. Backport the fix from upstream. [ YOCTO #15479 ] (From OE-Core rev: d7019c20a6516b1b98c1ce92eae8a536eddf379a) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2d984e52cded09647b210bd79cfec9deb4b7b589) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* gstreamer1.0: skip another known flaky testRoss Burton2024-07-171-2/+7
| | | | | | | | | | | | | | | The baseparse:parser_pull_short_read test is known to be unreliable, according to the list of known bad tests in gst-devtools. Also clean up an incorrect comment. (From OE-Core rev: 5b00a8efdf0794af46e8240582799ea008172215) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit be58657b3ee32af5a00f6bfecb9264751915dabd) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* wic: engine.py: use raw string for escape sequenceEnrico Jörns2024-07-171-1/+1
| | | | | | | | | | | | | Fixes: | poky/scripts/lib/wic/engine.py:362: SyntaxWarning: invalid escape sequence '\/' (From OE-Core rev: ab3ed4270af1c8d4a4dd15b8c6998182801d4bce) Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e33d7241f6c2897e930aff41e18b154891197ab9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* llvm: upgrade 18.1.5 -> 18.1.6Wang Mingyu2024-07-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Fixes issues where LLVM is either generating the incorrect thunk for a function with aligned parameters or didn't correctly pass through the return value when StructRet was used. - -Xclang -target-feature -Xclang +unaligned-scalar-mem can be used to enable unaligned scalar memory accesses for CPUs that do not support unaligned vector accesses. -mno-strict-align will enable unaligned scalar and vector memory accesses. - Don't replace an aliasee with an alias that has weak linkage. This avoids incorrect linkage that can lead to using the wrong symbols during linking time. - This patch fixes build failures when compiling AVX512 code using -march=native on machines without AVX512. - Fixes crash in AArch64 backend when having true or false as operand for a fcmp instruction on IR level. - Fixes compiler crash when user specifies -mno-evex512 with AVX512 features but no AVX512VL. - Fixes a bug that tries to do VBROADCAST_LOAD for f16 without AVX2. (From OE-Core rev: 941474ed77f6f5397ff4f83a4e4dae1c3b9103d3) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3cd5c40f5736506b2cfc23b180fa915b01d8220c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ed: upgrade 1.20.1 -> 1.20.2Wang Mingyu2024-07-171-1/+1
| | | | | | | | | | | | | | | Changelog: ============= - main_loop.c (command_s): Fix g/x/s/x/x, which failed to skip the final newline, printing lines twice. (From OE-Core rev: 2c473a2cadf198262d06ec5131d111cfe15cb7ba) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d726710f7b1d707a55777d486bf06b0021f9dcfb) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* fribidi: upgrade 1.0.13 -> 1.0.14Ross Burton2024-07-171-1/+1
| | | | | | | | | | | | * Updated Unicode tables to version 15.1 (From OE-Core rev: 03828e381ef615ab4b1a30a8902b5eccbb5c98f8) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 332276679c9a004158929e03d9263e9ef66816e9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libcap-ng-python: upgrade 0.8.4 -> 0.8.5Yi Zhao2024-07-171-0/+0
| | | | | | | | | | | | | | | | Changelog: https://people.redhat.com/sgrubb/libcap-ng/ChangeLog - Remove python global exception handler since it's deprecated - Make the utilities link against just built libraries - Remove unused macro in cap-ng.h (From OE-Core rev: 32e8402f9fc71a8a66c48932ad9f88336afd98cd) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 98151fbd4864fb5c6728b7faed0ad83723f962ef) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libcap-ng: upgrade 0.8.4 -> 0.8.5Yi Zhao2024-07-174-34/+36
| | | | | | | | | | | | | | | | | | | Changelog: https://people.redhat.com/sgrubb/libcap-ng/ChangeLog - Remove python global exception handler since it's deprecated - Make the utilities link against just built libraries - Remove unused macro in cap-ng.h Drop backport patch fix-issues-with-swig-4-2.patch. Backport a patch to fix build for libcap-ng-python. (From OE-Core rev: 5eff01bbc58dcb1d51639ee4b43ee9a3e23e39ed) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0263fd8193e51e54a4598ea3811c3c0a6e781f85) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ruby: fix CVE-2024-27281Hitendra Prajapati2024-07-172-0/+98
| | | | | | | | | | | | | References: https://github.com/ruby/ruby/pull/10316 https://security-tracker.debian.org/tracker/CVE-2024-27281 Upstream-Status: Backport from https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d (From OE-Core rev: 16685f3b2d22eac20f0134cbd589c3b23a187084) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cpio: mark CVE-2023-7216 as disputedRoss Burton2024-07-171-0/+1
| | | | | | | | | | | | Upstream consider the behaviour described in this CVE as intentional, and provide an option to stop it. (From OE-Core rev: 0f2cd2bbaddba3b8c80d71db274bbcd941d0e60e) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6c99147037ba8ca424ee42520183bd2bd55c7056) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* migration-guides: add release notes for 5.0.2Lee Chee Yang2024-07-122-0/+246
| | | | | | | | (From yocto-docs rev: 09e321d7cbd5bd7071a0c138e6d0c424fb086269) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* migration-guides: add release notes for 4.0.19Lee Chee Yang2024-07-122-0/+160
| | | | | | | | | | | add release notes for 4.0.19. (From yocto-docs rev: ac201a70a5a5fd2c2e4549debbac84bc6aef662f) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Reviewed-by: Michael Opdenacker <michael@opdenacker.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* migration-notes: add release notes for 5.0.1Lee Chee Yang2024-07-122-0/+135
| | | | | | | | | | add release notes for 5.0.1 (From yocto-docs rev: 50b50d9680a49949a34371a45ae9dd1ff0755832) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* xz: Update LICENSE variable for xz packagesaszh072024-07-121-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Update LICENSE defined for xz packages to match the license information provided in the xz COPYING file. The License information from PACKAGERS file of xz mentions packages with lzma files are in public domain.They ask to use GPLv2+, if only it's not possible to mention "PD and GPLv2+". Include PD license with GPLv2 to packages with lzma content: xz-dev package contains lzma header xz-doc package contains lzma man pages xz packages contains lzma binaries Links: https://github.com/tukaani-project/xz/blob/v5.4.6/COPYING https://github.com/tukaani-project/xz/blob/v5.4.6/PACKAGERS (From OE-Core rev: d511c41dac048fbdd93a54136e93b0623a18a83d) Signed-off-by: Bhabu Bindu <bindu.bhabu@kpit.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4e5b955def5d9f305f5aba2c68b73287c03fd163) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* cargo: remove True option to getVar callsPeter Marko2024-07-122-11/+11
| | | | | | | | | | | | Layer cleanup similar to https://git.openembedded.org/openembedded-core/commit/?id=26c74fd10614582e177437608908eb43688ab510 (From OE-Core rev: f419d57e9605dc5430df6828c4b618265db1243f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9a2ed52473a3e4eb662509824ef8e59520ebdefb) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* flac: fix buildpaths warningsPeter Marko2024-07-121-0/+7
| | | | | | | | | | | | | | | | | Generated documentation (html) contain absolute paths cources using buildpaths warnings. Replace them with relative links. The file with root path to sources is in my build /usr/share/doc/flac/api/dir_c122f5d6544f32779f55e8358fb78605.html which does not looks as stable name, so replace it in all files. (From OE-Core rev: 860d4d6b54f61342f925ea522f9962555ae5d8ac) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c7d826c88933d53d550265f1cc382539c5c52994) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* apt: runtime error: filename too long (tmpdir length)Changqing Li2024-07-122-0/+41
| | | | | | | | | | | | | | | | | when the tmpdir dir is longer than 220, there is no files saved in tmp/sysroots/x86_64-linux/var/lib/apt/lists/ after run apt-get update, this is because apt-get uses the path as the file name, but the file name can't be longer than 255 according to /usr/include/linux/limits.h. [YOCTO #2688] (From OE-Core rev: dafdf9bb9e9d944b9f455c2be8cf698496200717) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Take back from https://git.openembedded.org/openembedded-core/commit/?id=9a0c0393871eda4bbcecfdd4b595f0c1b8e42edf Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* apt-native: don't let dpkg overwrite files by defaultChangqing Li2024-07-121-1/+1
| | | | | | | | | | | | | | | | | | | | | With --force-overwrite (implied by --force-all), dpkg will not abort when a package overwrites files from different packages. As this can also lead to "The following package disappeared from your system as all files have been overwritten by other packages: <package>" and subsequently broken dependencies, this makes the simple case of conflicting files hard to debug. Instead of finding all possibly required force options, only disable overwrite for now. (From OE-Core rev: 30cc69f094729e3d11dc6021daf77f5038c4de61) Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Take back from https://git.openembedded.org/openembedded-core/commit/?id=4292387ef6c4e80428bad6a07c844a288b27d9a1 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* qemu: Upgrade 8.2.1 -> 8.2.2Xiangyu Chen2024-07-125-93/+1
| | | | | | | | | | | | This was a bugfix release, this version fixed several important fixes according to upstream. Dropped CVE-2023-6683.patch since already contained the fix. (From OE-Core rev: f548a3a24f3fc26b09e2fcc8544065beb5293f91) Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* ghostscript: upgrade 10.02.1 -> 10.03.1Hitendra Prajapati2024-07-128-430/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | avoid-host-contamination.patch refreshed for 10.03.1 Below patches are no longer needed as it's included in this upgrade. 1. CVE-2024-29510.patch 2. CVE-2024-33869-0001.patch 3. CVE-2024-33869-0002.patch 4. CVE-2024-33870.patch 5. CVE-2024-33871.patch 6. configure.ac-add-option-to-explicitly-disable-neon.patch other patch release to address security bugs: CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511 (From OE-Core rev: 9a424fbcdc0c792ff3b99bf0e8a5e380582f53bc) (From OE-Core rev: 2a19132aca9d62be0d1e58444b0a8881456311dc) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* curl: locale-base-en-us isn't glibc-specificRoss Burton2024-07-091-1/+1
| | | | | | | | | | | | | The musl-locales package provides this too, so we can depend without a libc override. (From OE-Core rev: 1cab8d06ce5df7a8d00cff8531965a84d90d265a) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c8f1d51f4eb6df6c041707d38f60549d13ddab7f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3-pyopenssl: drop python3-six from RDEPENDSGuðni Már Gilbert2024-07-091-1/+0
| | | | | | | | | | | | | Python 2.7 support was dropped in version 22.0.0 python3-six was dropped as a dependency in 22.0.0 (From OE-Core rev: d7ad0495c543ec952817860595c047e5e4263978) Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6eab37a0cdcc6071f79aa5c8198df0b2ba23dd7a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* python3-bcrypt: drop python3-six from RDEPENDSGuðni Már Gilbert2024-07-091-1/+0
| | | | | | | | | | | | | Python 2.7 support was dropped in version 3.2.0 and python3-six dependency was subsequently dropped in version 3.2.1 (From OE-Core rev: 214d41b73d235176123fd78143747845aa9c951e) Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 50757cc95b3062f11a7455af33e7a7e74ea1d0f7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/selftest/devtool: Fix for usrmerge in DISTRO_FEATURESRichard Purdie2024-07-091-0/+2
| | | | | | | | | | | If usrmerge is in DISTRO_FEATURES, assumptions in one of the tests would fail. Improve the test so it works in both cases. (From OE-Core rev: 4dc35667143f19a369bdea9ce2f011a04132509c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit afa211746a2aa1993a54cc5a5e1937679341da8e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* oeqa/selftest/recipetool: Fix for usrmerge in DISTRO_FEATURESRichard Purdie2024-07-091-5/+11
| | | | | | | | | | | If usrmerge is in DISTRO_FEATURES, assumptions in one of the tests would fail. Improve the test so it works in both cases. (From OE-Core rev: 01ccccb949bd82e89dae4679ff5b30ada6672d9a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 68a27d307a7042e242c49cf3d069469f40e09902) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* devtool: ide-sdk: correct help typoAntonin Godard2024-07-091-1/+1
| | | | | | | | | (From OE-Core rev: 149f79c877f476eabafc667629f89af335fcae34) Signed-off-by: Antonin Godard <antoningodard@pm.me> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 50e043387a2f0f9a5c2f7a5f914c465c830d329b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-06 06:02:43 +0000