summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
...
* cve-update-db-native: update the CVE database once a day onlyMarta Rybczynska2022-05-031-2/+2
| | | | | | | | | | | | | | | | The update of the NVD database was expected to happen once per hour. However, the database file date changes only if the content was actually updated. In practice, the check worked for the first hour after the new download. As the NVD database changes usually only once a day, we can just update it less frequently. (From OE-Core rev: 35bccdedadeaba820d58b69fe74ce5e4c1f577e3) Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* volatile-binds: Remove TimeoutSec and allow DefaultTimeoutSec to be usedPortia2022-04-301-1/+0
| | | | | | | | | | Remove setting TimeoutSec and allow the DefaultTimeSec to be set for the volatile-binds services. (From OE-Core rev: 86aea324e423ce5f411a21afa18356339e3545a8) Signed-off-by: Portia Stephens <stephensportia@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* volatile-binds: Change DefaultDependencies from false to noPortia2022-04-301-1/+1
| | | | | | | | | | The systemd-unit parameter DefaultDependencies changed from true/false to yes/no. This changed in systemd in v242. (From OE-Core rev: add4dcb03dc7b034253db05f0023cb97cab8b26d) Signed-off-by: Portia Stephens <stephensportia@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-passwd: Disable shell for default usersJiaqing Zhao2022-04-302-0/+58
| | | | | | | | | | | | Change the shell of all global static users other than root (which retains /bin/sh) and sync (as /bin/sync is rather harmless) to /sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] (From OE-Core rev: ba3bc4d7a0a39a96f6e8d340e1b2654d47475f07) Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* eudev: Remove unused filesAlex Kiernan2022-04-306-395/+0
| | | | | | | | | | | | | These files appear to have been first commented out from do_install in 14cba802f2dd ("udev: Add 141") and then removed completely in 54daad852fc3 ("udev: remove commented code from init script (no code changes)"). (From OE-Core rev: 029821d0053059b967a1b5c66fd96e69ac747bac) Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl-locales: explicitly depend on gettext-nativeRoss Burton2022-04-301-4/+2
| | | | | | | | | | | | | | | | | The gettext class is designed for use by applications with optional NLS support: depending on the value of USE_NLS it will either depend on gettext-minimal-native (just the autoconf macros) or gettext-native, and will pass --enable-nls/--disable-nls as appropriate. However, musl-locales specifically needs to run msgfmt at runtime, so explicitly depend on gettext-native instead. Also remove the redundant EXTRA_OECMAKE assignment. (From OE-Core rev: 77ae1fe772f12677f9d86946d09d10534845723f) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib: upgrade 2.72.0 -> 2.72.1Alexander Kanavin2022-04-285-158/+20
| | | | | | | (From OE-Core rev: e167060bfb105799e0931c06a6aa1275163bf261) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: update patch statusAlexander Kanavin2022-04-281-1/+3
| | | | | | | (From OE-Core rev: 2e21e1e5e2659b02a771ce986fc3194deeda9f4d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: Create u-a symlink for findfs utilityKhem Raj2022-04-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | busybox also installs findfs but into base_sbindir which works out to be ok when sbindir != base_sbindir but with usrmerge distro feature enabled this starts to cause trouble because busybox's postinst is trying to create a symlink for findfs applet in base_sbindir which is same as sbindir now and there already is binary from util-linux and image fails to build do_rootfs: Postinstall scriptlets of ['busybox'] have failed. If the intention is to defer them to first boot, then please place them into pkg_postinst_ontarget:${PN} (). The real reason is burried in do_rootfs logs update-alternatives: Error: not linking /mnt/b/yoe/master/build/tmp/work/beaglebone-yoe-linux-gnueabi/yoe-sdk-image/1.0-r0/rootfs/usr/sbin/findfs to /usr/bin/busybox.suid since /mnt/b/yoe/master/build/tmp/work/beaglebone-yoe-linux-gnueabi/yoe-sdk-image/1.0-r0/rootfs/usr/sbin/findfs exists and is not a link Creating proper u-a for findfs in util-linux fixes the issue (From OE-Core rev: 211ae2db1ab8fec1ed678170f9d8cbca2cc27ef3) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wic: Add dependencies for erofs-utilsSean Anderson2022-04-271-1/+1
| | | | | | | | | | | | In order to build erofs filesystems, wic must have the erofs-utils package installed into its sysroot. Fixes: 30375ce97 ("Add support for erofs filesystems") (From OE-Core rev: 68e364340c439a1341d37c3f7a2b0e6aad8e1e56) Signed-off-by: Sean Anderson <sean.anderson@seco.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zlib: Add patch to fix building icedtea7-native from meta-javaJacob Kroon2022-04-272-0/+55
| | | | | | | | (From OE-Core rev: e20a382f10df9d975ad0e7a0a1f3f45a7a8d8ae0) Signed-off-by: Jacob Kroon <jacob.kroon@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl-locales: Add packageKhem Raj2022-04-261-0/+75
| | | | | | | | | | | | | | | | | | | | | | | | | | | This package will provide a limited set of localedata for musl based systems. It will fill in into images when IMAGE_LINGUAS variable is set however the choice is limited to the given 13 locales as of now. e.g. IMAGE_LINGUAS ?= "de-de fr-fr en-gb" would work fine Default locale can be set by exporting LANG=<locale> in /etc/profile or some such file e.g. export LANG=de_DE.UTF-8 This will also help in ptest coverage with musl where some test packages expect locales e.g. pango to name one. Do not empty out IMAGE_LINGUAS forcibly for musl anymore (From OE-Core rev: 5643f9722db250ac9eb4f955b02500420cb29556) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Use base_bindir instead of hardcoding /bin pathKhem Raj2022-04-261-1/+1
| | | | | | | | | | | | This symlink is not valid when using usrmerge and ptest packaging would fail Exception: FileExistsError: [Errno 17] File exists: '/usr/bin/busybox.suid' -> '/mnt/b/yoe/master/build/tmp/work/ppc64p9le-yoe-linux-musl/busybox/1.35.0-r0/package/usr/lib/busybox/ptest/bin/login' (From OE-Core rev: 238fd30689054c7b44176dce7180fb6dac4e1b6f) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Update to latest 2.35 tipKhem Raj2022-04-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Brings in below changes * 499a601796 Default to --with-default-link=no (bug 25812) * 70f1eecdc1 scripts: Add glibcelf.py module * d3feff2232 m68k: Handle fewer relocations for RTLD_BOOTSTRAP (#BZ29071) * 68d3a9a696 nptl: Fix pthread_cancel cancelhandling atomic operations * 8e8d46d598 mips: Fix mips64n32 64 bit time_t stat support (BZ#29069) * bd415684df hurd: Fix arbitrary error code * ba9c42ac0e nptl: Handle spurious EINTR when thread cancellation is disabled (BZ#29029) * 6583d53445 S390: Add new s390 platform z16. * cc9a4a664f elf: Fix memory leak in _dl_find_object_update (bug 29062) * db03235895 NEWS: Move PLT tracking slowdown to glibc 2.35. * 9be62976af hppa: Use END instead of PSEUDO_END in swapcontext.S * 01d5214bb4 hppa: Implement swapcontext in assembler (bug 28960) * 123bd1ec66 nss: Protect against errno changes in function lookup (bug 28953) * c54c5cd8e3 nss: Do not mention NSS test modules in <gnu/lib-names.h> * 3149f47b80 io: Add fsync call in tst-stat * e30c1c73da nptl: Fix cleanups for stack grows up [BZ# 28899] * ca0570fee3 hppa: Fix warnings from _dl_lookup_address * d82d9cdff4 hppa: Revise gettext trampoline design * 2631d3b3a6 hppa: Fix swapcontext * 1f77081178 Fix elf/tst-audit2 on hppa * c60e6a458b hppa: Fix bind-now audit (BZ #28857) * 90797f4972 localedef: Handle symbolic links when generating locale-archive * 732dd3a63d localedata: Do not generate output if warnings were present. * 3feecd8001 localedef: Update LC_MONETARY handling (Bug 28845) * a787325e83 NEWS: Add a bug fix entry for BZ #28688 * 264ad5d7d6 resolv: Fix tst-resolv tests for 2.35 ABIs and later * e247a3b118 elf: Replace tst-audit24bmod2.so with tst-audit24bmod2 * 1dd783fafd elf: Check invalid hole in PT_LOAD segments [BZ #28838] * 3226ffde07 NEWS: Add a bug fix entry for BZ #28896 * 676f85759c x86: Fix TEST_NAME to make it a string in tst-strncmp-rtm.c * d001088e22 x86: Test wcscmp RTM in the wcsncmp overflow case [BZ #28896] * fd412fff6d x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case [BZ #28896] * a30807b7db string: Add a testcase for wcsncmp with SIZE_MAX [BZ #28755] * f055faf801 linux: Use socket-constants-time64.h on tst-socket-timestamp-compat * 491f2ef1f0 linux: fix accuracy of get_nprocs and get_nprocs_conf [BZ #28865] (From OE-Core rev: f199c89a9b94ba371d3c6b9a9b5afe06d9a7fb9b) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcompat: Fix build when usrmerge distro feature is enabledKhem Raj2022-04-221-4/+4
| | | | | | | | (From OE-Core rev: b1154d5fe7e75bb46132165b13ed76ce95413b25) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Fix build when usrmerge distro feature is enabledKhem Raj2022-04-221-3/+3
| | | | | | | | (From OE-Core rev: 02fd8e760cac1d2e0e25a4e3dbea3f2844b9fd01) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* seatd: Disable overflow warning as error on ppc64/muslKhem Raj2022-04-201-0/+3
| | | | | | | | | | | | | | Disabling the warning is easier fix then trying to fix it in musl which results in ABI breakage and disabling the Werror gets us along by doing minimal change, also see [1] [1] https://todo.sr.ht/~kennylevinsen/seatd/10 (From OE-Core rev: 381cf11b994d2bf40ac8781e18b5eac17b3b6cb0) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dropbear: upgrade 2020.81 -> 2022.82wangmy2022-04-205-26/+21
| | | | | | | | | | | | | | | | refresh the following patches for new version: 0001-urandom-xauth-changes-to-options.h.patch 0005-dropbear-enable-pam.patch dropbear-disable-weak-ciphers.patch Changelog: https://github.com/mkj/dropbear/releases/tag/DROPBEAR_2022.82 (From OE-Core rev: d5f9c44ede9babd0f48306cfefe4a16065e8ea30) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: ptest: Fix glibc-tests package issuePgowda2022-04-201-1/+2
| | | | | | | | | | Run glibc-tests only when its enabled in the DISTRO_FEATURES. (From OE-Core rev: 5555e7cf935b047a3dc3228d26bf0fd52eb425e5) Signed-off-by: pgowda <pgowda.cve@gmail.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* update_udev_hwdb: fix multilib issue with systemdKai Kang2022-04-192-9/+0
| | | | | | | | | | | | | | | | | | | | | | | | It duplicates udevadm in systemd recipe to make it could run update_udev_hwdb with multilib enabled. Since systemd last update, it deploys a shared library libsystemd-shared-250.so in /lib/systemd/. The library will be overwritten when multilib enabled. Then if both udev-hwdb and lib32-udev-hwdb are installed, it fails to run the multilib version postinstall intercept update_udev_hwdb: | /path/to/build/tmp-glibc/work/intel_x86_64-wrs-linux/wrlinux-image-small/1.0-r1/rootfs/usr/libexec/lib32-udevadm: error while loading shared libraries: libsystemd-shared-250.so: wrong ELF class: ELFCLASS64 `udevadm hwdb --update` just concatenates .hwdb files in dirs /etc/udev/hwdb.d and /lib/udev/hwdb.d. The output file hwdb.bin is identical with the one created by lib32-udevadm. So do NOT duplicate lib32-udevadm in systemd and eudev. And update intercept script update_udev_hwdb that re-run udevadm with same arch qemuwrapper if run ${binprefix}qemuwrapper failed. (From OE-Core rev: 3dba872a42c2be7d0865a30118984ab013850292) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: use COPYING fileKonrad Weihmann2022-04-191-1/+1
| | | | | | | | | | which has the same info as the in-file header used in before (From OE-Core rev: 8618589c10f85b7a92de01d93180751a804837ea) Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools: Add standalone make tarballRichard Purdie2022-04-191-0/+15
| | | | | | | | | Some versions of make have bugs. Add a way to provide a make tarball that can be used on it's own in these cases. (From OE-Core rev: 4f1f6743fa252405075192633e19b9d2b03b7303) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-tarball: Only add cert envvars if certs are includedRichard Purdie2022-04-191-2/+4
| | | | | | | | | Users may or may not include the certificates in buildtools. Only set the appropriate variables if they're present. (From OE-Core rev: 0945a2a5d7c41af22e222a116aafacb4beee54d2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysvinit: upgrade 3.01 -> 3.02wangmy2022-04-193-6/+35
| | | | | | | | | | | | | | pidof-add-m-option.patch refreshed for new version. Add 0001-Fixed-compile-error-on-GNU-Hurd.patch to fix compile error on GNU Hurd due to missing MAX_PATH definition. (From OE-Core rev: cd75cb56ef30d68f82ec7406f3529afd163e7f92) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot: remove outdated EFI_LD commentMartin Jansa2022-04-191-1/+0
| | | | | | | | | | | | | | | | * efi-ld meson option was changed in systemd 250: https://github.com/systemd/systemd/commit/fe330f02dfebbaa462e0f4590de1049e47da54b9 the value was changed with the systemd upgrade in: https://git.openembedded.org/openembedded-core/commit/?id=e22188e47d2fce2406d9db9c95289b3878eda69f but the comment originally from: https://git.openembedded.org/openembedded-core/commit/?id=603e50f3db224a0e36a65decb9a98df41b9e22b3 no longer makes any sense, remove it (From OE-Core rev: c14dbe3d3c1abf5f95310162288f861bfd312900) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* expat: upgrade 2.4.7 -> 2.4.8zhengruoqin2022-04-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Other changes: #587 pkg-config: Move "-lm" to section "Libs.private" #587 CMake|MSVC: Fix pkg-config section "Libs" #55 #582 CMake|macOS: Start using linker arguments "-compatibility_version <version>" and "-current_version <version>" in a way compatible with GNU Libtool #590 #591 Version info bumped from 9:7:8 to 9:8:8; see https://verbump.de/ for what these numbers do Infrastructure: #589 CI: Upgrade Clang from 13 to 14 Special thanks to: evpobr Kai Pastor Sam James (From OE-Core rev: 9c98d47dd5415c3b9428cc85e0a8daed14f2a91f) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zlib: upgrade to 1.2.12Ross Burton2022-04-194-363/+43
| | | | | | | | | | | | | | | | | | | | | | First upstream release since 2017! - Fix a deflate bug when using the Z_FIXED strategy that can result in out-of-bound accesses. - Fix a deflate bug when the window is full in deflate_stored(). - Speed up CRC-32 computations by a factor of 1.5 to 3. - Use the hardware CRC-32 instruction on ARMv8 processors. - Speed up crc32_combine() with powers of x tables. - Add crc32_combine_gen() and crc32_combine_op() for fast combines. Drop CVE-2018-25032 as this is in the .12 release. Rebase 0001-configure-Pass-LDFLAGS-to-link-tests.patch to apply cleanly. Backport cc.patch to fix compilation with our CC. (From OE-Core rev: 4055d9fc81661d375c1721ffd502536c1ba74e02) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: fix CVE-2022-28391Steve Sakoman2022-04-193-0/+112
| | | | | | | | | | | | | BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. https://nvd.nist.gov/vuln/detail/CVE-2022-28391 (From OE-Core rev: 3e17df4cd17c132dc7732ebd3d1c80c81c85bcc4) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionyocto-4.0kirkstone-4.0Richard Purdie2022-04-161-1/+1
| | | | | | (From OE-Core rev: 92fcb6570bddd0c5717d8cfdf38ecf3e44942b0f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2022-04-141-1/+1
| | | | | | (From OE-Core rev: 24e3b2ee56e0b59aa280191bd00fdfc773f0a973) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2022-04-141-1/+1
| | | | | | (From OE-Core rev: d5585ff062099412074901eeab9f44b7c7f8e351) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2022-04-141-1/+1
| | | | | | (From OE-Core rev: c6ebc3ef3045ecd7cb66b5a94777eb7a3c9f48a0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gettext: add MIT conditional as licenseKonrad Weihmann2022-04-141-0/+9
| | | | | | | | | | | | | | depending on the actual PACKAGECONFIG some internal vendor copies of libxml, libcroco and glib will be used. In the case of libxml this adds MIT to the license. Reference the license statements based on the actual choosen PACKAGECONFIG (From OE-Core rev: faa513a5270b376508fe8d3553020d58460d0d05) Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Move to 1.2.3 release tagKhem Raj2022-04-121-2/+2
| | | | | | | | | | | | | This actually are just 2 patches on top of what we have thus far * 7a43f6fe release 1.2.3 * 01b14242 accept null pointer as message argument to gettext functions (From OE-Core rev: bb0d9815a8e47b28836ab0eb13ebe236d745b253) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2022-04-051-1/+1
| | | | | | (From OE-Core rev: 62851965fc180f33ed6feb62ff5ac14706e4732a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* os-release: add os-release-initrd packageClaudius Heine2022-04-051-1/+6
| | | | | | | | | | | | | | | | | | When systemd is used inside an initramfs, it uses the presence of `/etc/initrd-release` to detect when the system is in the initrd phase. Otherwise `/etc/initrd-release` has the same format as `/etc/os-release`. Add `os-release-initrd` package to provide `/etc/initrd-release` as a symlink to the os-release file. To avoid adding this file to the `os-release` package, explicitly only add `/etc/os-release` to the `os-release` package. (From OE-Core rev: 6311fb6f412ef923cc0b34a821e875990fc043f5) Signed-off-by: Claudius Heine <ch@denx.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: Backport patches C++ variant of g_atomic_int_compare_and_exchange()Khem Raj2022-04-033-0/+136
| | | | | | | | | | This fixes a regression when glib-2.0 was used with clang. (From OE-Core rev: a963f71e882e11c8e41dadf77944de408ad12acb) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Exclude .debug from depmodSaul Wold2022-04-032-0/+33
| | | | | | | | | | | | As with the kmod version of depmod, exclude .debug from being searched. Since busybox does not use the depmod.d and any configuration file option is ignored we just hardcode it. (From OE-Core rev: c082752c06d5723433886cbf7ce2d88a51fb64f1) Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-tarball: include nativesdk-python3-pyyamlRoss Burton2022-04-011-3/+2
| | | | | | | | | | | | | BitBake can optionally 'import yaml' if BB_LOGCONFIG specifies a yaml file. This is a 3rd party module, so that this works out of the box when buildtools is used -- either explicitly via buildtools-tarball or implicitly via eSDK -- we can add pyyaml to the buildtools. (From OE-Core rev: 6be90f884bb3fc87d9aa21cb882a835d6bc583a9) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initscripts: Clean up license handling/identifiersRichard Purdie2022-04-0126-349/+94
| | | | | | | | | | | The license is clear, add an SPDX license identification headers to the scripts and drop the weird patch, we don't need it. (From OE-Core rev: 540041ac80cfc91df61b45d48f9c9ebbc9b2e71e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zlib: backport the fix for CVE-2018-25032Ross Burton2022-03-302-0/+348
| | | | | | | | (From OE-Core rev: 6dd0012846c22478c96655216a8bce44147956f8) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* volatile-binds: add recipe variable to allow disabling OverlayFSLuca Boccassi2022-03-292-0/+5
| | | | | | | | | | | | | Use the new MOUNT_COPYBIND_AVOID_OVERLAYFS flag provided by mount-copybind. When SELinux is enabled, processes accessing OverlayFS mounts will get a denial if the process setting up the mount doesn't have all the permissions that the accessor has. (From OE-Core rev: 6002bdc77643c363a8326bf163baecba8b36e3e0) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-networking: upgrade 2.70.1 -> 2.72.0wangmy2022-03-291-1/+1
| | | | | | | | (From OE-Core rev: 17e15809a0689eb4ce99e950d4e088ddb09435eb) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: Remove a leftover commentPeter Kjellerstedt2022-03-291-1/+0
| | | | | | | | | | | The system-pcre PACKAGECONFIG was removed in commit e359ee75 (glib-2.0: update 2.68.4 -> 2.70.0), but a comment was left behind. (From OE-Core rev: a08655f3d97d947fb29c4b669790f68d661aae96) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mount-copybind: add MOUNT_COPYBIND_AVOID_OVERLAYFS env var to skip OverlayFSLuca Boccassi2022-03-261-1/+4
| | | | | | | | | | | | | | | | | In some cases we don't want to even attempt to set up OverlayFS, for example because SELinux in enforcing mode would kill the process attempting to use the mount. See: https://lore.kernel.org/all/CA+FmFJBDwt52Z-dVGfuUcnRMiMtGPhK4cCQJ=J_fg0r3x-b6ng@mail.gmail.com/T/#mef98aa406324096d1889d3d467251f30456f403c If MOUNT_COPYBIND_AVOID_OVERLAYFS=1 is set, skip directly to copy and bind mount. (From OE-Core rev: a8e7dca69054798b1c9843a0de889cef3e261c4f) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mount-copybind: fix shellcheck warningLuca Boccassi2022-03-261-1/+1
| | | | | | | | | | | | | | | | | | | | $ shellcheck meta/recipes-core/volatile-binds/files/mount-copybind In meta/recipes-core/volatile-binds/files/mount-copybind line 54: mountcontext=",rootcontext=$(matchpathcon -n $mountpoint)" ^---------^ SC2086: Double quote to prevent globbing and word splitting. Did you mean: mountcontext=",rootcontext=$(matchpathcon -n "$mountpoint")" For more information: https://www.shellcheck.net/wiki/SC2086 -- Double quote to prevent globbing ... (From OE-Core rev: 56c7962a6c31acfe0e118f713954aeafd7e2d9c0) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: upgrade 2.70.4 -> 2.72.0Christian Eggers2022-03-264-65/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - 0001-gio-tests-resources.c-comment-out-a-build-host-only-.patch: dropped (integrated upstream) News ==== * Bugs fixed: - #2620 g_time_zone_new_offset() assertion failure if offset >= 25 hours - #2538 Various unit test fixes - #2542 fuzzing: Fix test failure with G_DISABLE_ASSERT - #2547 gprintf: Fix a memory leak with an invalid format in g_vasprintf() - #2548 tests: Various fixes to gdbus-auth, gdbus-non-socket, gdbus-connection-flush, spawn-multithreaded tests - #2551 tests: More flaky test fixes to converter-stream and test-printf - #2552 gtlsconnection: fix typo in docs * Translation updates: - Czech - French - Friulian - Hebrew - Hungarian - Italian - Kazakh - Polish - Romanian - Serbian - Swedish (From OE-Core rev: bf088d1e9d13eca5b0fb1a4ab1cb689daaf1ff80) Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Update to latest masterKhem Raj2022-03-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | brings following fixes * 6d8a5157 fix invalid free of duplocale object when malloc has been replaced * 760f5d7e fix __WORDSIZE on x32 sys/user.h * bdb54540 sys/ptrace.h: add PTRACE_GET_RSEQ_CONFIGURATION from linux v5.13 * aa3bab6c sys/prctl.h: add PR_PAC_{SET,GET}_ENABLED_KEYS from linux v5.13 * a8300f5d elf.h: add NT_ARM_PAC_ENABLED_KEYS from linux v5.13 * dda21f10 netinet/in.h: add INADDR_DUMMY from linux v5.13 * ee05b11b bits/syscall.h: add landlock syscalls from linux v5.13 * 1ee8109e netinet/tcp.h: add tcp_zerocopy_receive fields from linux v5.12 * bc89c311 netinet/tcp.h: add TCP_NLA_* values up to linux v5.12 * 9ffd1454 s390x: add ptrace requests from linux v5.12 * f7d3db5b bits/syscall.h: add mount_setattr from linux v5.12 * e99c4258 signal.h: add new sa_flags from linux v5.11 * 993cccce signal.h: add SYS_USER_DISPATCH si_code value from linux v5.11 * 3dcbd896 signal.h: add si_code values for SIGSYS * 30c8a145 netinet/tcp.h: add tcp zerocopy related changes from linux v5.11 * b54f481f netinet/if_ether.h: add ETH_P_CFM from linux v5.11 * c5ecaca7 sys/socket.h: add new SO_ socket options from linux v5.11 * f35b99b3 sys/prctl.h: add PR_SET_SYSCALL_USER_DISPATCH from linux v5.11 * b21f3ded bits/syscall.h: add epoll_pwait2 from linux v5.11 * 3aba2150 nice: return EPERM instead of EACCES * 74a28a8a protect stack canary from leak via read-as-string by zeroing second byte * 7c0c7a75 math: avoid runtime conversions of floating-point constants (From OE-Core rev: 56c0629caebd7f22a09925333c2dc800901d7794) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: fix CVE-2022-23308 regressionJoe Slater2022-03-262-0/+102
| | | | | | | | | | | The fix for the CVE in 2.9.13 caused a regression which was addressed after 2.9.13. We import that patch here. (From OE-Core rev: f7fd194feb4f7993518388160acd5199fcfc3b26) Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-docs-tarball: Add test for building documentation using sphinxRichard Purdie2022-03-182-2/+7
| | | | | | (From OE-Core rev: 26b224a1bbe27b5d9886be4552147e1d66e34519) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>