summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* cve-check: no need to depend on the fetch taskRoss Burton2022-04-281-1/+1
| | | | | | | | | | The only part of the cve-check task which needs files is the patch examination, and typically these patches are local so fetch isn't needed. (From OE-Core rev: 2c9b3186d3b7c18cbea239ab9b06e85b7c243b54) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* llvm: update 14.0.0 -> 14.0.1Alexander Kanavin2022-04-282-3/+3
| | | | | | | (From OE-Core rev: 293638a800aadd59f35b732baa47774fa9d9b6fd) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* stress-ng: upgrade 0.13.12 -> 0.14.00Alexander Kanavin2022-04-282-2/+50
| | | | | | | | | Disable apparmor via empty config file creation. (From OE-Core rev: 2a80cb997aea02497ef359725b6f72536c904a2b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cmake: update 3.23.0 -> 3.23.1Alexander Kanavin2022-04-283-1/+1
| | | | | | | (From OE-Core rev: d3c0edfc460a326b723b8f33be4c54a0475e0c04) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgpg-error: 1.44 -> 1.45Alexander Kanavin2022-04-282-7/+8
| | | | | | | (From OE-Core rev: 519fe0b3fbfd7cc5a3b10fa38ef7aac06a76f920) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap-ng: update 0.8.2 -> 0.8.3Alexander Kanavin2022-04-284-63/+2
| | | | | | | | | Remove upstreamed patch. (From OE-Core rev: c96a3f3269ecadbb88011acca61902bbdc76522b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: update 3.18.1 -> 3.19.0Alexander Kanavin2022-04-287-480/+33
| | | | | | | | | | Dropped patches are either backports, were merged upstream, or upstream fixed the issue differently. (From OE-Core rev: 4c9b619eb7cd91e7ffc8db0f5571a4dbe6966ccc) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: update 70.1 -> 71.1Alexander Kanavin2022-04-281-3/+3
| | | | | | | | | License-Update: copyright years (From OE-Core rev: 85cbbe2da017b39a985e07bfeefb6aa83ddfea65) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meson: update 0.61.3 -> 0.62.1Alexander Kanavin2022-04-282-15/+14
| | | | | | | | | Rebase 0001-python-module-do-not-manipulate-the-environment-when.patch (From OE-Core rev: 65411c5d632adeac5eab322ae1a54ec8b6d3e5af) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: update 1.18 -> 1.18.1Alexander Kanavin2022-04-2816-4/+4
| | | | | | | | | Do not version patch directories; we carry only one version of go. (From OE-Core rev: f7a9f330f92d85612196d7a8d77893a1b0a870aa) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib: upgrade 2.72.0 -> 2.72.1Alexander Kanavin2022-04-285-158/+20
| | | | | | | (From OE-Core rev: e167060bfb105799e0931c06a6aa1275163bf261) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pyparsing: upgrade 3.0.7 -> 3.0.8Alexander Kanavin2022-04-281-2/+2
| | | | | | | | | Upstream has transitioned to flit from setuptools. (From OE-Core rev: 2087d8faa48879277111ab3eff9e01d099a5bb6b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-typing-extensions: upgrade 3.10.0.0 -> 4.2.0Alexander Kanavin2022-04-281-2/+2
| | | | | | | | | Upstream has transitioned to flit from setuptools. (From OE-Core rev: 2199a1274bf2801fee5e1818f4a57266bfe3025c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vulkan-samples: update to latest revisionAlexander Kanavin2022-04-281-1/+1
| | | | | | | (From OE-Core rev: 9b28d9e5bf170586e0c5dcdc3a1107ac3a1c160e) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* piglit: update to latest revisionAlexander Kanavin2022-04-281-1/+1
| | | | | | | (From OE-Core rev: db60825f4184069675137a29afdc7410c0bcb9f8) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go-helloworld: update to latest revisionAlexander Kanavin2022-04-281-1/+1
| | | | | | | (From OE-Core rev: 09197f0607e6bbc066110a00cf09fb0d8c7041f1) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnu-config: update to latest revisionAlexander Kanavin2022-04-281-3/+3
| | | | | | | | | License-Update: copyright years, formatting (From OE-Core rev: 884177ce7163f90b7cf4a4f44728528da3a6e028) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-psutil: submit patch upstreamAlexander Kanavin2022-04-281-1/+1
| | | | | | | | | | | I had to significantly rework it to make a set that's hopefully acceptable for the upstream: https://github.com/giampaolo/psutil/pull/2097 (From OE-Core rev: 4f3fb46645b39d1bf96c1a6d0067a32cd41e8ae8) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: update patch statusAlexander Kanavin2022-04-281-1/+3
| | | | | | | (From OE-Core rev: 2e21e1e5e2659b02a771ce986fc3194deeda9f4d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve_check: skip remote patches that haven't been fetched when searching for ↵Ross Burton2022-04-281-2/+3
| | | | | | | | | | | | | | | | | CVE tags If a remote patch is compressed we need to have run the unpack task for the file to exist locally. Currently cve_check only depends on fetch so instead of erroring out, emit a warning that this file won't be scanned for CVE references. Typically, remote compressed patches won't contain our custom tags, so this is unlikely to be an issue. (From OE-Core rev: cefc8741438c91f74264da6b59dece2e31f9e5a5) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* staging: Ensure we filter out ourselvesRichard Purdie2022-04-281-1/+1
| | | | | | | | | | | Adding a dependency on ourselves in this function doesn't make sense, the hash may change after hash equivalence is applied. Other code using BB_TASKDEPDATA does handle the self reference correctly (which is there for a reason), update this code to do likewise. (From OE-Core rev: d98b06c9c6f480de1e5167bfe8392e39300fc02c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* releases: update to include 3.3.6Michael Halstead2022-04-271-0/+1
| | | | | | | | | Adding 3.3.6 to release list. (From yocto-docs rev: 1f845c499bbf78809cb4155c3e72db53b7ed2021) Signed-off-by: Michael Halstead <mhalstead@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: Create u-a symlink for findfs utilityKhem Raj2022-04-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | busybox also installs findfs but into base_sbindir which works out to be ok when sbindir != base_sbindir but with usrmerge distro feature enabled this starts to cause trouble because busybox's postinst is trying to create a symlink for findfs applet in base_sbindir which is same as sbindir now and there already is binary from util-linux and image fails to build do_rootfs: Postinstall scriptlets of ['busybox'] have failed. If the intention is to defer them to first boot, then please place them into pkg_postinst_ontarget:${PN} (). The real reason is burried in do_rootfs logs update-alternatives: Error: not linking /mnt/b/yoe/master/build/tmp/work/beaglebone-yoe-linux-gnueabi/yoe-sdk-image/1.0-r0/rootfs/usr/sbin/findfs to /usr/bin/busybox.suid since /mnt/b/yoe/master/build/tmp/work/beaglebone-yoe-linux-gnueabi/yoe-sdk-image/1.0-r0/rootfs/usr/sbin/findfs exists and is not a link Creating proper u-a for findfs in util-linux fixes the issue (From OE-Core rev: 211ae2db1ab8fec1ed678170f9d8cbca2cc27ef3) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sanity: skip make 4.2.1 warning for debianNicolas Dechesne2022-04-271-1/+1
| | | | | | | | | | | | | | | | | | | This is a follow up patch of: ad5829aa1f8a (sanity: Show a warning that make 4.2.1 is buggy on non-ubuntu systems) Debian10 has the exact same version/sources for make as Ubuntu (focal), e.g. https://packages.debian.org/source/buster/make-dfsg and https://packages.ubuntu.com/source/focal/make-dfsg. As per the corresponding changelog, the patch mentioned in ad5829aa1f8a, is included in both Debian and Ubuntu in make 4.2.1-1.1. So it's safe to use make 4.2.1 in Debian10. (From OE-Core rev: 1d5d5278ff4f620cd786b85e880e8429a04a1548) Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wic: Add dependencies for erofs-utilsSean Anderson2022-04-273-2/+3
| | | | | | | | | | | | In order to build erofs filesystems, wic must have the erofs-utils package installed into its sysroot. Fixes: 30375ce97 ("Add support for erofs filesystems") (From OE-Core rev: 68e364340c439a1341d37c3f7a2b0e6aad8e1e56) Signed-off-by: Sean Anderson <sean.anderson@seco.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* neard: Switch SRC_URI to git repoRahul Kumar2022-04-271-6/+7
| | | | | | | | | | | | | | | | | | The tarball (neard-0.16.tar.xz) fetched by the recipe is incomplete. Few plugins (e.g. tizen) and tests scripts (e.g. Test-channel, test-see, neard-ui.py, ndef-agent etc) are missing. Since neard did not release latest tarballs, so as per community recommendation switching the recipe SRC_URI to git repo. Community Discussion: https://lists.openembedded.org/g/openembedded-core/topic/90058043#163681 (From OE-Core rev: b563f40ebf4461d9c35df72bd7599ea11e97da9c) Signed-off-by: Rahul Kumar <rahul.kumar_3@philips.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zlib: Add patch to fix building icedtea7-native from meta-javaJacob Kroon2022-04-272-0/+55
| | | | | | | | (From OE-Core rev: e20a382f10df9d975ad0e7a0a1f3f45a7a8d8ae0) Signed-off-by: Jacob Kroon <jacob.kroon@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust: update 1.59.0 -> 1.60.0Pgowda2022-04-2716-24/+51
| | | | | | | | | | | | | | Rust has been upgraded to rust-1.60.0 that uses LLVM 14. Please refer the following link for more detailed features. https://blog.rust-lang.org/2022/04/07/Rust-1.60.0.html https://github.com/rust-lang/rust/blob/master/RELEASES.md (From OE-Core rev: 786a9a66486cf179ee4c9e295569fcd8c37fef78) Signed-off-by: pgowda <pgowda.cve@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* migration-guides: release-notes-4.0: mention LTS releaseMichael Opdenacker2022-04-271-0/+2
| | | | | | | (From yocto-docs rev: ff1fe93313410242eaecf97b84d1214f68fb79fd) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* migration-guides: stop including documents with ".. include"Nicolas Dechesne2022-04-275-10/+19
| | | | | | | | | | | This prevented variables from being substituted through the code in yocto-vars.py, at least in the files included this way. Reviewed-by: Michael Opdenacker <michael.opdenacker@bootlin.com> (From yocto-docs rev: b7375ea4380e716a02c736e4231aaf7c1d868c6b) Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* manuals: refer to "YP Compatible" layers instead of "curated" onesMichael Opdenacker2022-04-273-5/+5
| | | | | | | (From yocto-docs rev: dce5dd78d3bc7510e06cf5748033ee9c2888a405) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* manuals: correct and improve descriptions of AutotoolsMichael Opdenacker2022-04-272-5/+6
| | | | | | | (From yocto-docs rev: c7cb693673566ec12b95c568945b514ed0e18522) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* overview-manual: licensing section fixesMichael Opdenacker2022-04-271-6/+2
| | | | | | | | | | | | | | | | | | Remove the reference to the GPL license, unnecessary in this part of the manual and pointing to a wrong link (LGPL instead of GPL). Anyway, we have no authority to say that the MIT license is compatible with the GPL. Also provide details about the MIT license through Wikipedia, instead of just the raw license text with no explanations through opensource.org. (From yocto-docs rev: a09fcd9d850d2b52f40d953b11412c9568a77db7) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: fetch2/ssh.py: decode path back for sshRobert Yang2022-04-271-2/+4
| | | | | | | | | | | | | | The path has been encoded by urllib.parse.quote(), so decode it back for ssh. Fixed when fetch from PREMIRRORS via ssh: $ bitbake bonnie++ libsigc++-2.0 -cfetch scp: /path/to/downloads/libsigc%2B%2B-2.10.7.tar.xz: No such file or directory (Bitbake rev: c1c8fc678eb4783cea3974328a5fa8d1b79f1266) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake: fetch2/osc: Add missing parameterRichard Purdie2022-04-271-1/+1
| | | | | | | | | This probably means the osc fetcher isn't being used but fix the missing parameter. (Bitbake rev: a23c201cb6efc5c0abf763c26f905442f0eebb68) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake.conf: mark all directories as safe for git to readRoss Burton2022-04-271-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | Recent git releases containing [1] have an ownership check when opening repositories, and refuse to open a repository if it is owned by a different user. This breaks any use of git in do_install, as that is executed by the (fake) root user. Whilst not common, this does happen. Setting the git configuration safe.directories=* disables this check, so that git is usable in fakeroot tasks. This can be set globally via the internal environment variable GIT_CONFIG_PARAMETERS, we can't use GIT_CONFIG_*_KEY/VALUE as that isn't present in all the releases which have the ownership check. We already set GIT_CEILING_DIRECTORIES to ensure that git doesn't recurse up out of the work directory, so this isn't a security issue. [1] https://github.com/git/git/commit/8959555cee7ec045958f9b6dd62e541affb7e7d9 (From OE-Core rev: 8bed8e6993e7297bdcd68940aa0d47ef47120117) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base: Drop git interceptRichard Purdie2022-04-271-1/+0
| | | | | | | | We're going to use the environment approach for solving this issue. (From OE-Core rev: 0982977dc052ad4e65608f6853f930121d08837a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* layer.conf: Post release codename changesRichard Purdie2022-04-273-4/+4
| | | | | | | | Post release add langdale to the series names. (From OE-Core rev: dc3b319a5fc47372bc111da5bc26d7dda1b17598) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta-poky: update conf-notes.txtMichael Opdenacker2022-04-261-1/+1
| | | | | | | | | | | | | | Now suggesting to run 'runqemu qemux86-64', aligning with conf-notes.txt in openembedded-core 'runqemu qemux86' doesn't work any more. The "Quick Build" documentation has already been updated but not this message that we get when sourcing "oe-init-build-env" (From meta-yocto rev: d0d39a9057b3da3de339b8fa81545be9800478e8) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go.bbclass: disable the use of the default configuration fileChen Qi2022-04-261-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | We need to disable the use the default configuration file. This is to ensure that user settings do not mess things up when building go recipes. For example, if I set 'GOBIN=./relative/path' in $HOME/.config/go/env, then go-runtime fails to build with error like below: cannot install, GOBIN must be an absolute path According to `go help environment', """ Setting GOENV=off in the environment disables the use of the default configuration file. """ We can explicitly disable the configuration file by setting GOENV to off. (From OE-Core rev: 711b41744ab08ee62c71cdccca335a7828ec0ba1) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* create-spdx: delete virtual/kernel dependency to fix FreeRTOS buildDavide Gardenal2022-04-261-2/+0
| | | | | | | | | | | | | | | When building FreeRTOS this dependency generates an error because bitbake cannot find any provider for "virtual/kernel". >From a dependency analysis the task is executed independently from this so it can be safely removed. This patch has been discussed in this ML thread: https://lists.openembedded.org/g/openembedded-core/topic/90602531 (From OE-Core rev: 1c02b768a71ec88bfe1cc0c4443683de8b66056e) Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* set_versions: Add a getlatest command to obtain the latest release branch nameRichard Purdie2022-04-261-0/+5
| | | | | | | | | This will allow the autobuilder-helper run-docs-build script to obtain the latest release name. (From yocto-docs rev: 733b7f301e44010579e1315f19eff737628d635e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cases/buildepoxy.py: fix typoChen Qi2022-04-261-1/+1
| | | | | | | | (From OE-Core rev: 3a9b6e71d1e7e8e2ebc0ed047841e36f09300387) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl-locales: Add packageKhem Raj2022-04-263-2/+77
| | | | | | | | | | | | | | | | | | | | | | | | | | | This package will provide a limited set of localedata for musl based systems. It will fill in into images when IMAGE_LINGUAS variable is set however the choice is limited to the given 13 locales as of now. e.g. IMAGE_LINGUAS ?= "de-de fr-fr en-gb" would work fine Default locale can be set by exporting LANG=<locale> in /etc/profile or some such file e.g. export LANG=de_DE.UTF-8 This will also help in ptest coverage with musl where some test packages expect locales e.g. pango to name one. Do not empty out IMAGE_LINGUAS forcibly for musl anymore (From OE-Core rev: 5643f9722db250ac9eb4f955b02500420cb29556) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* devshell.bbclass: Allow devshell & pydevshell to use the networkPeter Kjellerstedt2022-04-261-0/+2
| | | | | | | | | | | | | Otherwise it will fail if using OE_TERMINAL = "xterm" with the not so helpful error: xterm: Xt error: Can't open display: localhost:0.0 (From OE-Core rev: ba53fc3bcecfe32401471dc1008c7ead96504150) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* terminal.py: Restore error output from TerminalPeter Kjellerstedt2022-04-261-1/+2
| | | | | | | | | | | | | In bitbake commit 1ecc1d94 (process: Do not mix stderr with stdout), bb.process.Popen() was changed to no longer combine stdout and stderr by default. However, the Terminal class was not updated to reflect this and subsequently only output stdout in case of failures. (From OE-Core rev: 116d0bb07ba044cf8847bf3d5c3996ad7e58b7ae) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0: Minor documentation additionCarlos Rafael Giani2022-04-262-0/+4
| | | | | | | | | | This clears up some confusing packageconfigs. (From OE-Core rev: b5b682f80fba4a62cb1ff7050c97f5b1e204d5a9) Signed-off-by: Carlos Rafael Giani <crg7475@mailbox.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gstreamer1.0-plugins-good: Fix libsoup dependencyCarlos Rafael Giani2022-04-261-1/+6
| | | | | | | | (From OE-Core rev: 7f66a3123c9ce77e9af538009fc51bf190703433) Signed-off-by: Carlos Rafael Giani <crg7475@mailbox.org> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: ignore CVE-2015-20107Ross Burton2022-04-261-0/+3
| | | | | | | | | | | | | | | | CVE-2015-20107 describes an arbitrary command execution in the mailcap module, but this is by design in mailcap and needs to be worked around by the calling application. Upstream Python will be documenting this flaw in the library reference, and it is likely that the mailcap module will be deprecated and removed in the future. (From OE-Core rev: 85fac8408baf92d8b71946f5bfea92952b7eab01) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* subversion: upgrade to 1.14.2Ross Burton2022-04-262-73/+1
| | | | | | | | | | | | | | | This release is primarily to fix two CVEs: - CVE-2021-28544 - CVE-2022-24070 It also rewrites the macOS autoconf macros to be cross-compile friendly, so we don't need to delete them anymore. (From OE-Core rev: ecfbc2ef45a76ab96d215954ca0a109545e6ff02) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>