summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
...
* base-passwd: upgrade 3.6.3 -> 3.6.4Wang Mingyu2024-07-163-7/+7
| | | | | | | | | | | | 0001-Add-a-shutdown-group.patch 0005-Add-kvm-group.patch refreshed for 3.6.4 (From OE-Core rev: 096175565182eb92daee8fc7b92d12aa90c68d6b) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Patch CVE-2023-42363Peter Marko2024-07-132-0/+68
| | | | | | | | | Backport patch for CVE-2023-42363. (From OE-Core rev: 814f97922e1d6c24a36b03ee0e865f2210ff6d7c) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Patch CVE-2021-42380Peter Marko2024-07-133-0/+194
| | | | | | | | | | Backport patch for CVE-2021-42380. Additionally backport clang regression fix caused by this patch. (From OE-Core rev: 66543769ff79d81508bb703bd2fc34871a16e2c7) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* classes-recipe: nospdx: Add classJoshua Watt2024-07-132-6/+2
| | | | | | | | | Adds a class that allows recipes to opt out of generating SPDX (From OE-Core rev: 170277da0dc34e3f797451473ebfbde82922f593) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: reconfigure wget https support by default for securityRichard Purdie2024-07-131-3/+3
| | | | | | | | | | | | | | | | | | | | | The default busybox wget https support is suboptimal, it silently ignores checking certificate validity which isn't great for security. Switch our defaults to disable the internal busybox tls code and the https support using it and configure the openssl backend instead. This this is done by spawning an openssl command, we don't need dependencies on openssl for build. For runtime, we can assume people would install openssl if they need/want this. These changes put our default busybox configuration in a more secure initial set of settings. [YOCTO #14125] (From OE-Core rev: 5d4ad13462f12355ff0f2bc1773ab4b1814b165a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake.conf: Further cleanup compiler optimization flagsRichard Purdie2024-07-131-1/+1
| | | | | | | | | | | | | | Move the -pipe option out of the optimization flags and directly into the flags variables since we always use it now. Also move the debug prefix mapping there to match the nativesdk case which already does this. Fix the documentation and two recipe usages to match the change. (From OE-Core rev: 9badf68d78d995f7d5d4cf27e045f029fc6d4044) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux/util-linux-libuuid: upgrade from 2.39.3 to 2.40.1Chen Qi2024-07-139-136/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: =============== GPL-2.0 is changed to GPL-2.0-only in README.licensing. The following two patches are removed as they've been there in new release: 0001-login-utils-include-libgen.h-for-basename-API.patch mit-license.patch Other existing patches are refreshed to avoid patch-fuzz error. A new PACKAGECONFIG, lastlog2, is added, which serves as a switch to build Y2038 safe lastlog pam module. This is a new functionality added in 2.40. This 2.40.1 version has the problem of unnecessary remake, causing intermmittent errors at parallel make. The do_compile:prepend is a workaround for this. Upstream issue and PR are: https://github.com/util-linux/util-linux/issues/3061 https://github.com/util-linux/util-linux/pull/3064 do_install is changed to do_install:append, the legacy codes are removed. They've been there since the born of oe-core. I tested with ccache, there's no error. A new dependency, diffutils, is added to ptest. Because the mkswap-offset test case needs 'cmp' from diffutils. The tests/ts/misc/enosys test case is deleted for musl. This is because the test case is comparing error description output and that's libc specific. Results below can demonstrate the case. ''' root@qemux86-64:/usr/lib/util-linux/ptest# cat /usr/lib/util-linux/ptest/tests/expected/misc/enosys-ioctl test_enosys: ioctl r=0 errno=Success test_enosys: ioctl r=-1 errno=Function not implemented test_enosys: ioctl r=-1 errno=Inappropriate ioctl for device test_enosys: ioctl r=-1 errno=Inappropriate ioctl for device test_enosys: ioctl r=-1 errno=Function not implemented root@qemux86-64:/usr/lib/util-linux/ptest# cat /usr/lib/util-linux/ptest/tests/output/misc/enosys-ioctl test_enosys: ioctl r=0 errno=No error information test_enosys: ioctl r=-1 errno=Function not implemented test_enosys: ioctl r=-1 errno=Not a tty test_enosys: ioctl r=-1 errno=Not a tty test_enosys: ioctl r=-1 errno=Function not implemented ''' (From OE-Core rev: 2c5f70e7e73362502a7d8d0773fbd04520b26eef) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot: upgrade from 255.6 to 256Chen Qi2024-07-133-0/+34
| | | | | | | | | | Patch 0001-src-boot-efi-meson.build-ensure-VERSION_TAG-exists-i.patch is added to resolve build time error. (From OE-Core rev: c3f53f641d04109bf88e51e44debb6c74582b5d0) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: upgrade from 255.6 to 256Chen Qi2024-07-1331-1027/+564
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 'cgroupv2' PACKAGECONFIG is dropped as systemd now only supports cgroupv2. The 'kmod' PACKAGECONFIG is now added 'libkmod' as a runtime dependency. This is because systemd 256 uses dlopen to make use of libkmod, and there's no way for our library detection codes to know this and add such dependency automatically. So we add it explicitly. mime is now inherited because ${datadir}/mime/packages/io.systemd.xml is a mime type file. For musl specific patches, most are refreshed. One old patch is dropped, and four new ones are added. Newly added: build-path.c: avoid boot time segfault for musl adjust header inclusion order to avoid redeclaration undef stdin for references using stdin as a struct member include signal.h to avoid the 'undeclared' error Dropped: src/basic/missing.h: check for missing strndupa (drop reason: systemd does not use strndupa any more) (From OE-Core rev: 89b75b46371d5e9172cb496b461824d8551a2af5) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* native/nativesdk: Stop overriding unprefixed *FLAGS variablesRichard Purdie2024-07-011-2/+2
| | | | | | | | | | | | | | | | | | | | We're currently encouraging an "arms race" with the FLAGS variables since a recipe might want to set a specific flag for all variants but to do so, += won't work due to the assignment in the native/nativesdk class files. This means recipes are using append. Since the default variables are constructed out of TARGET_XXX variables and we redefine these, there is no need to re-define the un-prefixed variables. If we drop that, the += appends and similar work and recipes don't have to resort to append. Change the classes and cleanup a number of recipes to adapt to the change. This change will result in some flags appearing to some native/nativesdk variants but that is probably what was originally expected anyway. (From OE-Core rev: a157b2f9d93428ca21265cc860a3b58b3698b3aa) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: fix fortran header file conflict for armKai Kang2024-06-261-1/+7
| | | | | | | | | | | | | | | | | There is a file conflict for arm when multilib enabled: | Error: Transaction test error: | file /usr/include/finclude/math-vector-fortran.h conflicts between attempted installs of lib32-libc6-dev-2.39+git0+312e159626-r0.armv7at2hf_neon and libc6-dev-2.39+git0+312e159626-r0.cortexa72 Install math-vector-fortran.h to the gfortran default search directory which is arch specific to avoid the conflict. (From OE-Core rev: d2165543e796d4558c632af24eb7b115bca45969) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* os-release: Fix VERSION_CODENAME in case it is emptyDaniel Semkowicz2024-06-251-1/+1
| | | | | | | | | | | | | | | | | | If DISTRO_CODENAME was not set, VERSION_CODENAME field was populated with unparsed string. This resulted in the following line in os-release file: VERSION_CODENAME="${DISTRO_CODENAME}" According to systemd documentation, this field is optional. Fix the problem by setting VERSION_CODENAME conditionally, only if DISTRO_CODENAME was set. (From OE-Core rev: 70a0b8bc1d846c857be90ce2e97e60c5ee32558e) Signed-off-by: Daniel Semkowicz <dse@thaumatec.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-framework: fix typosUlrich Ölmann2024-06-252-2/+2
| | | | | | | | | | Fix typos in debugging and error messages. (From OE-Core rev: 4995e222ebdc9b5508c2f03a11868f184e4629a0) Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ttyrun: upgrade 2.32.0 -> 2.33.1Wang Mingyu2024-06-251-1/+1
| | | | | | | | | | | | Bug Fixes: - s390-tools: Fix formatting and typos in README.md - s390-tools: Fix release string (From OE-Core rev: 9dd58c3b42b50604e79b59d93564260d0c6f892c) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: bpf-framework: pass 'recipe-sysroot' to BPF compilerJohannes Schneider2024-06-251-0/+4
| | | | | | | | | | | | Pass the "recipe-sysroot" path via the CFLAGS=--sysroot= to the compiler used by systemd to build the BPF, so that it can find the needed system includes. (From OE-Core rev: 25560c19ac7629615adb2b1a71b05d36b0d157d5) Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: bpf-framework: 'propagate' the '--sysroot=' for crosscompilationJohannes Schneider2024-06-252-0/+32
| | | | | | | | | | | | | | | | The eBPFs are pre-compiled during the systemd-build with a different compiler than the cross-compiler used to build systemd itself. This is either a 'clang-native' or a gcc (bpf-unknown-none) which do not see the BUILD_CFLAGS, that point to the correct include search patch. To address this have systemd's meson.build "propagate" the --system from the C_FLAGS into the BPF compiler call. (From OE-Core rev: 3a4d5b06f8e4ebf7b4738a99fe6b352bb03a64ae) Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: add PACKAGECONFIG for bpf-frameworkJohannes Schneider2024-06-251-0/+1
| | | | | | | | | | | | | | | | | | The bpf-framework is used to pre-compile eBPFs that required for the systemd.resource-control features RestrictFileSystems=[1] and RestrictNetworkInterfaces=[2] to work. Apart from 'clang-native' to compile the eBPFs, the required kernel switches are described in [3]. Link: https://www.freedesktop.org/software/systemd/man/latest/systemd.resource-control.html#RestrictFileSystems= Link: https://www.freedesktop.org/software/systemd/man/latest/systemd.resource-control.html#RestrictNetworkInterfaces= Link: https://kinvolk.io/blog/2021/04/extending-systemd-security-features-with-ebpf/ (From OE-Core rev: 6f90320bf3028a67d1fd444dfaa62f3888066ea4) Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxcrypt: correct the check for a working libucontext.hRoss Burton2024-06-242-1/+41
| | | | | | | | | | | The test fails with GCC 14.1 due to an incompatible pointer assignment, take a patch submitted upstream to fix this. (From OE-Core rev: 054304ecb3a8a8ed523bd149f70ed468cf613178) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-networking: submit eagain.patch upstreamAlexander Kanavin2024-06-241-1/+1
| | | | | | | | (From OE-Core rev: eb3958bab8e1a7307f4de7615ddac8222aaae5b0) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: Upgrade 2.12.7 -> 2.12.8Siddharth Doshi2024-06-241-1/+1
| | | | | | | | | | | | Changes between 2.12.7 -> 2.12.8 ================================ Regression Fixed: parser: Fix performance regression when parsing namespaces (From OE-Core rev: 15eb0b6531a97f85c1b098fb51de9126f2221248) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: fix wrong path of tmp.mountChangqing Li2024-06-131-2/+2
| | | | | | | | | | | | | According to meson.build, tmp.mount is installed under "prefixdir/'lib/systemd/system'", but for 64bit system, rootlibdir is /usr/lib64/systemd/system, this make tmp.mount not removed, and /tmp still mounted as tmpfs filesystem. Fixed by using rootlibexecdir, which is /usr/lib/systemd/system. (From OE-Core rev: b44734c889b1b09fbbaea4d9195026707c55cbee) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ell: update 0.65 -> 0.66Markus Volk2024-06-111-1/+1
| | | | | | | | | | | | ver 0.66: Fix issue with handling event callback when stopping ACD. Fix issue with handling ICMPv6 DNS and domain lists. Add support for notification lists. (From OE-Core rev: 560bd2f0f02bbb0791fc03496266f9ff77c2aa77) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils: split out coreutils-getlimitsChen Qi2024-06-071-2/+9
| | | | | | | | | | | | | Previously, the noinst_PROGRAM getlimits is put in coreutils-ptest package in order to execute the ptest. However, this command might also be needed by other ptest packages. As an example, findutils 4.10.0 ptest pacakge would need this command. So we split it out into a new package. (From OE-Core rev: 7bc06eed72ceb55d2c5342e9130e39bd15c04b9a) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revision5.1_M1Richard Purdie2024-06-041-1/+1
| | | | | | (From OE-Core rev: e068ba7d6b91237f9dabc2050c9473bed311690c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* siteconfig: Drop siteconfig class/code/supportRichard Purdie2024-05-313-8/+0
| | | | | | | | | | | The siteconfig code was only used for 5 cache values. The complexity added to sstate to support this code was considerable and the runtime much more significant than any benefit the cache files would have added. Drop the support for this which was only used minimally for ncurses and zlib. (From OE-Core rev: f3766dc038f7ba9780ddaf5eb8d27385ea31d7d0) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gettext: fix a parallel build issueChangqing Li2024-05-302-0/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Occasionally, gettext will build failed with error: In file included from ../../../gettext-0.22.5/gettext-runtime/intl/gettextP.h:71, from ../../../gettext-0.22.5/gettext-runtime/intl/log.c:24: ./libgnuintl.h:98:1: error: unterminated comment 98 | /* The user can define _INTL_RE | ^ ./libgnuintl.h:17: error: unterminated #ifndef 17 | #ifndef _LIBINTL_H In file included from ../../../gettext-0.22.5/gettext-runtime/intl/gettextP.h:71, from ../../../gettext-0.22.5/gettext-runtime/intl/langprefs.c:25: ./libgnuintl.h:98:1: error: unterminated comment 98 | /* The user can define _INTL_RE | ^ ./libgnuintl.h:17: error: unterminated #ifndef 17 | #ifndef _LIBINTL_H It is a parallel build issue caused by missing dependencies, backport patch to fix it. (From OE-Core rev: e18fc96f9d4c0a0525c21371d3f36e8dfe008b35) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgloss: Do not apply non-existent patchRobert Joslyn2024-05-301-1/+0
| | | | | | | | | | | | | | When newlib and libgloss were updated to 4.3.0, SRC_URI was updated to append a fix-rs6000-cflags.patch file when building on PowerPC, but this file was not added to the repo. Remove appending the missing patch. (From OE-Core rev: 64561d8b81233a19df5f51d26dfbcd15835bec1f) Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: upgrade 2.12.6 -> 2.12.7Wang Mingyu2024-05-281-1/+1
| | | | | | | | | | | | | | Changelog: ========= - Fix buffer overread with 'xmllint --htmlout' - xmllint: Fix --pedantic option - save: Handle invalid parent pointers in xhtmlNodeDumpOutput (From OE-Core rev: 64e16e2ca71a4dcf285f3dc36789077aa3beaf50) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ell: upgrade 0.64 -> 0.65Martin Hundeb?ll2024-05-281-5/+1
| | | | | | | | | | | Remove do_configure:prepend() that creates build-aux, as that isn't needed. (From OE-Core rev: ada7c35c17866d4f22918dd75c5fd75a2fad2b88) Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-framework: support force reboot if fatal error occursIgor Opaniuk2024-05-281-10/+13
| | | | | | | | | | | | | | | | Add support for force reboot in the case of fatal error. In some cases it's better to force reboot (especially when hw watchdog is not engaged) instead of waiting for 3600 seconds, for example in order to trigger some recovery procedure during next boot procedure (after unsuccessful OTA update etc). ALso fix indendation issues in the fatal() function implementation. (From OE-Core rev: 6990855e91f2d5891e95995f3f4a1c3b5891c619) Signed-off-by: Igor Opaniuk <igor.opaniuk@foundries.io> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* newlib: Use mcmodel=medany for RISCV64Alejandro Hernandez Samaniego2024-05-281-0/+8
| | | | | | | | | | | | | | | | | | It was previously discovered that mcmodel=medany should be used for RISCV64, however this was only being set for the applications themselves, but not for newlib, this meant that we ended up with C library that used a code model and an application that used another one which is not something we want. Pass mcmodel=medany when building newlib for RISCV64 as well. Also, s/CFLAGS/TARGET_CFLAGS to standarize across recipes, the variable expansion provides no functional difference at this point. (From OE-Core rev: 3ed0a2fab5dbc37dd352ead8846da6aae5de5c20) Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: stable 2.39 branch updates.Sundeep KOKKONDA2024-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Below commits on glibc-2.39 stable branch are updated. c7c3f5bf80 LoongArch: Fix undefined `__memset_aligned` reference in ld.so linking. 32969a2b36 socket: Add new test for connect 2db79c96ba libsupport: Add xgetpeername ab4ef4421f x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4) 97bb89668d Force DT_RPATH for --enable-hardcoded-path-in-tests 71149c2a2e elf: Only process multiple tunable once (BZ 31686) f8e4623421 Add a test to check for duplicate definitions in the static library 8b005d7869 i686: Fix multiple definitions of __memmove_chk and __memset_chk 8323a83abd i586: Fix multiple definitions of __memcpy_chk and __mempcpy_chk 5141d4d83c Revert "i586: Fix multiple definitions of __memcpy_chk and __mempcpy_chk" c16871e662 Revert "i686: Fix multiple definitions of __memmove_chk and __memset_chk" fa616ea373 Revert "Add a test to check for duplicate definitions in the static library" ff110b2591 Add a test to check for duplicate definitions in the static library ad92c483a4 i686: Fix multiple definitions of __memmove_chk and __memset_chk 3148714ab6 i586: Fix multiple definitions of __memcpy_chk and __mempcpy_chk (From OE-Core rev: b33b29cc6a41ce5ce8c8648bbb6799e323c77b8b) Signed-off-by: Sundeep KOKKONDA <sundeep.kokkonda@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: remove obsolete ↵Alexander Kanavin2024-05-282-81/+0
| | | | | | | | | | | | | 0001-Set-host_machine-correctly-when-building-with-mingw3.patch This as well has been solved via https://git.yoctoproject.org/poky/commit/?id=f6a35934540e910794b8729ecc278189a39b710f (From OE-Core rev: a140f108eca447ea708bad80ece953adb2d6aa78) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dropbear: upgrade 2024.84 -> 2024.85Yi Zhao2024-05-285-26/+17
| | | | | | | | | | | | | | | | Changelog: https://matt.ucc.asn.au/dropbear/CHANGES This release fixes build regressions in 2024.84: - Fix build failure when SHA1 is disabled - Fix build failure when DROPBEAR_CLI_PUBKEY_AUTH disabled - Update debian/ directory with changed paths (From OE-Core rev: 62ad8e8217548d7f9aab506a3611ef41f4881cf3) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-files: profile: fix error sh: 1: unknown operandFelix Nilsson2024-05-221-1/+1
| | | | | | | | | Handle errors when SHLVL isn't set. (From OE-Core rev: 5df53fcfe3b70a5312fced3fcc1ba6290f2ee794) Signed-off-by: Felix Nilsson <felixn@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd/systemd-boot: upgrade from 255.4 to 255.6Chen Qi2024-05-2229-239/+111
| | | | | | | | | musl patches are refreshed to avoid 'patch-fuzz' error. (From OE-Core rev: 6bc5e3f3cd882c81c972dbd27aacc1ce00e5e59a) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: upgrade 2.80.0 -> 2.80.2Anuj Mittal2024-05-2215-21/+22
| | | | | | | (From OE-Core rev: edd83b608c2e86b3c0e7d2ce864786efeb1d0540) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Upgrade 6.4 -> 6.5Peter Marko2024-05-2210-1468/+16
| | | | | | | | | | | | Removed 4 backported patched included in this release. Updated patches by devtool. License-Update: copyright years refreshed (From OE-Core rev: e9962f7033f717591a168e694311523c82c67608) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: switch to new mirrorPeter Marko2024-05-222-3/+3
| | | | | | | | | | | | | | | | | github.com/mirror/ncurses is not updated for over a year. Switch to new mirror from Thomas Dickey (ncurses maintainer). Sources are identical. Updated upstream check regex by: * changed dot to underscore as this repo is tagged like this * added v prefix to not propose updates to some old tags * removed third part to not propose updates to development snapshots (From OE-Core rev: ea801be31d051b558fde52f7d6dccf2cd416afb9) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: fix build against 6.9 libc-headersBruce Ashfield2024-05-212-0/+54
| | | | | | | | | | | | | | | | | | When building against the 6.9 linux-libc-headrs the following build issue was hit: | Program check-filesystems.sh found: YES (build/tmp/work/cortexa57-poky-linux/systemd/255.4/git/src/basic/check-filesystems.sh) | | ../git/src/basic/meson.build:238:8: ERROR: Problem encountered: Unknown filesystems defined in kernel headers: | | Filesystem found in kernel header but not in filesystems-gperf.gperf: PID_FS_MAGIC Upstream already has this fixed, so we backport the commit. (From OE-Core rev: 5a8a116b270d26ce50429aa32f2883a9d2fd1206) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Remove warning about S not existingRichard Purdie2024-05-211-0/+5
| | | | | | | | | Disable the qe checks the cause a warning about S not existing as this recipe is special case where that doens't matter. (From OE-Core rev: 99db8d07c74e1580242add9fd9b6f77f1b893b27) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-conf: Convert to use a dedicated UNPACKDIRRichard Purdie2024-05-211-5/+8
| | | | | | | | | | | | | | | Avoid: WARNING: systemd-conf-1_1.0-r0 do_unpack: systemd-conf: the directory ${WORKDIR}/${BP} (tmp/work/genericarm64-poky-linux/systemd-conf/1.0/systemd-conf-1.0) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to by using a dedicated unpack directory for sources. (From OE-Core rev: 7804eb02bccc5f7f9f84f41ce782bfcfd94bfcc7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: Switch away from S = WORKDIRRichard Purdie2024-05-2125-32/+50
| | | | | | | | | | | | | Where recipes use S = ${WORKDIR}, change them to set UNPACKDIR to a subdir of WORKDIR and make S point at this instead. I've chosen not to force S into any standard UNPACKDIR we may pick in future just so the S = UNPACKDIR case is clearly visible by the directory naming under WORKDIR as that should aid usability. (From OE-Core rev: d9328e3b0b062f0621de3d114584b44f384a1c02) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: Start WORKDIR -> UNPACKDIR transitionRichard Purdie2024-05-215-13/+13
| | | | | | | | | Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. (From OE-Core rev: 1f18b9a512800860d5153d89eb82b56388efad6f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sdk: Fix path length limit to match reserved sizeRobert Kovacsics2024-05-141-0/+2
| | | | | | | | There were two different interpreter lengths in use, make them match. (From OE-Core rev: b175f9cdc3d87bef5c89cc337c2a7e2674732b29) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: correct deprecated man/gtk-doc optionsAlexander Kanavin2024-05-131-1/+3
| | | | | | | (From OE-Core rev: f5caef60b4e85134eef1f8398fa240f52d845770) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib/gobject-introspection: update 2.78.4 -> 2.80.0, 1.78.1 -> 1.80.0Alexander Kanavin2024-05-1325-559/+208
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With these versions, which need to be updated in lockstep, upstream has relocated glib introspection data from g-i tree to glib tree and made its generation a part of the overall glib build. This creates a circular dependency, where g-i tools are linked with glib, but glib needs the tools to build its g-i data. (I don't know why the two source trees couldn't be simply merged into one, or g-i data for glib couldn't be generated inside g-i build against sysroot glib). Upstream is suggesting building glib twice, first without building g-i data, then building g-i and linking it with that version, then building the final glib, and that's what is being done here (via the new glib-initial recipe, which is sysroot-only, and is not pulled in via indirect dependencies either). Other glib changes: 0001-Do-not-write-bindir-into-pkg-config-files.patch restores writing bindir variable into glib.pc file (meson only writes it out if other variables depend on it, and this custom patch removes that dependency). 0001-girepository-introspection-correctly-install-.gir-fi.patch ensures correct installation of .gir into something else than $datadir (useful in multilib). Merge previous glib .bb into .inc, so that glib and glib-initial recipes could be cleanly separated with no duplication. Convert from gtk-doc to gi-docgen, and manpages from xmlto to docutils. (From OE-Core rev: 57c307536f67dcfb5d4a5488ca1e77a943ba1368) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxcrypt-compat: Rename libcrypto.so.1 -> libcrypt.so.1Jordan Crouse2024-05-091-1/+1
| | | | | | | | | | The comment in libxcrypt-cmpat incorrectly mentions libcrypto instead of libcrypt which could be misleading to the unsuspecting grep user. (From OE-Core rev: 3400945ac94c37f335b1e500bdd91e6187ed20b1) Signed-off-by: Jordan Crouse <jorcrous@amazon.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Update to latest on stable 2.39 branchPeter Marko2024-05-093-11/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | Adresses CVEs: CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 Changes: 273a835fe7 time: Allow later version licensing. acc56074b0 nscd: Use time_t for return type of addgetnetgrentX 836d43b989 login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701) 9831f98c26 login: Check default sizes of structs utmp, utmpx, lastlog fd658f026f elf: Also compile dl-misc.os with $(rtld-early-cflags) a9a8d3eebb CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680) c99f886de5 CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678) 5a508e0b50 CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678) 1263d583d2 CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677) 2f8f157eb0 x86: Define MINIMUM_X86_ISA_LEVEL in config.h [BZ #31676] e701c7d761 i386: ulp update for SSE2 --disable-multi-arch configurations e828914cf9 nptl: Fix tst-cancel30 on kernels without ppoll_time64 support Since glibc introduced file sysdeps/arm/bits/wordsize.h our multilib patch needed to be updated. (From OE-Core rev: 8df8dcc37fd05551dcf89ff2ab5d73d7679cf6b6) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Fix CVE-2023-45918Soumya Sambu2024-05-092-0/+181
| | | | | | | | | | | | ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. References: https://nvd.nist.gov/vuln/detail/CVE-2023-45918 (From OE-Core rev: 6573995adf4cfd48b036f8463b39f3864fcfd85b) Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-05 15:33:35 +0000