2579 Commits

Author SHA1 Message Date
Mikko Rapeli 3685e6a827 giflib: apply patch for CVE-2019-15133 and set CVE_PRODUCT
Backport upstream patch for CVE-2019-15133.
Set CVE_PRODUCT to "giflib_project:giflib" which is used
in NVD. https://nvd.nist.gov/vuln/detail/CVE-2019-15133

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Mikko Rapeli e3c4c4ffb5 flatbuffers: whitelist CVE-2020-35864
CVE-2020-35864 is for the rust crate for flatbuffers, not
flatbuffers itself.

https://security-tracker.debian.org/tracker/CVE-2020-35864

"NOT-FOR-US: flatbuffers rust crate"

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Harpritkaur Bhandari 04d9ea0ba7 rapidjson: Upgrade SRCREV to latest
Upgrade SRCREV to latest as it fixes the below issue:
Running UndefinedBehaviorSanitizer on projects that use
rapidjson triggers 'applying non-zero offset <NN> to null
pointer' findings in 'internal/stack.h' which are hard
to suppress by library users.
Removed "0001-CMake-remove-hardcoded-CMAKECONFIG_INSTALL_DIR-path.patch"
as the changes are already incorporated in the latest
codebase.
As per abi-compliance-checker report the source compatibility
and binary compatibility between previous SRCREV
6a905f9311f82d306da77bd963ec5aa5da07da9c and current
SRCREV 0ccdbf364c577803e2a751f5aededce935314313
is 100% and this patch is already tested on 64bit
ARM (aarch64) in a product with on target CI tests.

Signed-off-by: Harpritkaur Bhandari <Harpritkaur.Bhandari@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:49:09 -08:00
Adrian Herrera b7f255216e protobuf: apply fix for pkg-config pthread flags
This upstream fix solves an issue by which the protobuf pkg-config
linker flags did not provide -pthread. This can result in segmentation
faults due to no available pthread library.

See https://github.com/protocolbuffers/protobuf/issues/8059 for details
on the issue.

Signed-off-by: Adrian Herrera <adrian.herrera@arm.com>
Change-Id: I628be3b352a2e3bd70a046c8c3b3fe1f10fb9669
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 10:11:15 -08:00
Sean Nyekjaer cde1019804 nodejs: 12.19.1 -> 12.20.1
Signed-off-by: Sean Nyekjaer <sean@geanix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-07 22:57:45 -08:00
Chen Qi 583fbb4775 tclap: fix branch
Upstream has deleted the 'master' branch, so use the 1.2 branch.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 21:32:55 -08:00
Dmitry Baryshkov 3935fcbc0b android-tools-conf: fix android-tools build-deps warning
If PREFERRED_PROVIDER_android-tool-conf is set, build-deps checker will
incorrectly resolve android-tools-conf runtime dependency to
android-tools-conf recipe rather than the selected recipe. To fix the
following warning, make android-tools-conf recipe raise SkipRecipe if it
is not the preferred android-tools-conf provider.

WARNING: android-tools-5.1.1.r37-r0 do_package_qa: QA Issue: android-tools-adbd rdepends on android-tools-conf, but it isn't a build dependency, missing android-tools-conf in DEPENDS or PACKAGECONFIG? [build-deps]

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 13:02:20 -08:00
Dmitry Baryshkov f371896070 android-tools-conf-configfs: add an alternative to anrdoid-tools-conf
The package android-tools-conf depends on presence of
/sys/class/android_usb, which is not present in default (mainline)
kernels. Add a set of scripts that will use ConfigFS to configure USB
gadget rather than using non-standard device class.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 13:02:20 -08:00
lumag d00a1f363d android-tools: split adbd to the separate package
Usually one would install adbd on a device, where adb and mkbootimg are
of little use. Split adbd to the separate package.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-20 22:19:33 -08:00
lumag d36e527a40 android-tools: fix package split
"${PN}-fstools" was added to the end of PACKAGES list, so it received no
files. Move the package name to the beginning of PACKAGES list to fix
packages split ending up with non-empty android-tools-fstools package.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-20 22:19:33 -08:00
zhengruoqin 94fe89bbaf pugixml: upgrade 1.11 -> 1.11.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18 08:23:14 -08:00
Hongxu Jia 9df2c2daa8 flatbuffers: add python3 support
Add package flatbuffers-python3 to install python3 scripts

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-16 12:03:57 -08:00
Stacy Gaikovaia a440154082 nodejs: 12.19.0 -> 12.19.1
Uprev nodejs in order to fix CVE-2020-8277.
This CVE allows an attacker to trigger a DNS request for a host
of their choice, which could trigger a Denial of Service in
nodejs versions < 12.19.1.

See https://nvd.nist.gov/vuln/detail/CVE-2020-8277 for details.

CVE: CVE-2020-8277
Signed-off-by: Stacy Gaikovaia <Stacy.Gaikovaia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 21:29:34 -08:00
Chencheng Zhang f03ad4971e tclap: align version to tag v1.2.2
This is to update the tclap v1.2.2 with several bug fixes.
See:
https://sourceforge.net/p/tclap/bugs/23/

Signed-off-by: Chencheng Zhang <chencheng@wittra.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 15:25:17 -08:00
Zheng Ruoqin fa80193468 php: CVE-2020-7069
Security Advisory

References
https://nvd.nist.gov/vuln/detail/CVE-2020-7069
https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zheng Ruoqin aff8a1fefb php: CVE-2020-7070
Security Advisory

References
https://nvd.nist.gov/vuln/detail/CVE-2020-7070
https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364
https://github.com/php/php-src/blob/master/main/php_variables.c

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zang Ruochen 9301b77e32 mcpp: Normalize the patch format of CVE
Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-14 10:47:56 -08:00
Thomas Perrot 64bc3a36e4 openocd: disable the support of ccache
Otherwise, when ccache is enabled the following error occurs, by adding
CCACHE_DISABLE = "1" in the recipe this is avoided.

| No installed jimsh or tclsh, building local bootstrap jimsh0
| Host System...x86_64-pc-linux-gnu
| Build System...x86_64-pc-linux-gnu
| C compiler...ccache ccache gcc  -isystem/src/build/tmp/work/x86_64-linux/openocd-native/0.10+gitrAUTOINC+ded6799025-r0/recipe-sysroot-native/usr/include -O2 -pipe
| C++ compiler...ccache ccache g++  -isystem/src/build/tmp/work/x86_64-linux/openocd-native/0.10+gitrAUTOINC+ded6799025-r0/recipe-sysroot-native/usr/include -O2 -pipe
| Build C compiler...ccache gcc
| Checking for stdlib.h...not found
| Error: Compiler does not work. See config.log
| Try: 'configure --help' for options
| configure: error: ./configure.gnu failed for jimtcl
| WARNING: exit code 1 from a shell command.
|

Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
2020-12-08 10:38:57 -08:00
Zang Ruochen 9099626c21 pugixml: upgrade 1.10 -> 1.11
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Martin Jansa 4678e22475 nanopb: move to dynamic-layers
* depends on python3-protobuf from meta-python:
* fixes:
  ERROR: Nothing RPROVIDES 'python3-protobuf' (but meta-oe/recipes-devtools/nanopb/nanopb_0.4.3.bb RDEPENDS on or otherwise requires it)
  NOTE: Runtime target 'python3-protobuf' is unbuildable, removing...
  Missing or unbuildable dependency chain was: ['python3-protobuf']
  ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
  Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'nanopb', 'python3-protobuf']

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-02 11:21:18 -08:00
zangrc 3b2a8d7541 cloc: upgrade 1.84 -> 1.88
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
zangrc 0e8e4ee499 cjson: upgrade 1.7.13 -> 1.7.14
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
Max Kellermann 5cd29d53b3 php: remove the failing ${D}/${TMPDIR} code
Appending ${TMPDIR} to ${D} doesn't make any sense, because both are
absolute paths.  And additionally, the code fails:

 rmdir: failed to remove '/usr/src/oe/tmp-musl/work/core2-64-oe-linux-musl/php/7.1.9-r0/image//usr': Directory not empty

Signed-off-by: Max Kellermann <max.kellermann@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 20:44:40 -08:00
zhengruoqin dc58ca7c75 dnf-plugin-tui: Update to the latest version
dnf-plugin-tui now needs to clean up the pseudo directory before starting.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
2020-11-23 20:43:37 -08:00
Khem Raj dee0d6f3e9 heaptrack: Mark RISCV host incompatible
Depends on libunwind, which is not yet supported on riscv architecture

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Sinan Kaya <okaya@kernel.org>
2020-11-23 20:43:32 -08:00
Khem Raj 3e6f82dd54 heaptrack: Fix build on musl
Improve upon summary and description fields
Add PV to the recipe

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Sinan Kaya <okaya@kernel.org>
2020-11-23 15:43:06 -08:00
Sinan Kaya 771647922b heaptrack: add bitbake recipe
Add this useful tool to the devtools list.

Reviewed-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:34 -08:00
Khem Raj d67b8e191e musl-nscd: Add missing deps on flex and bison during build
Fix check for flex

Fails in do_compile at times see below

cp dist/src/nsswitch.yy.c obj/src/nsswitch.yy.c
cp: cannot create regular file 'obj/src/nsswitch.yy.c': No such file or directory
Makefile:78: recipe for target 'obj/src/nsswitch.yy.c' failed
make: *** [obj/src/nsswitch.yy.c] Error 1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Armin Kuster <akuster808@gmail.com>
2020-11-23 07:09:34 -08:00
Khem Raj bb956f0605 musl-nscd: Replace -fcommon with code patch
The patch fixes the need for -fcommon

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Armin Kuster <akuster808@gmail.com>
2020-11-23 07:09:34 -08:00
zangrc dd731c9c88 protobuf: upgrade 3.13.0.1 -> 3.14.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:34 -08:00
Khem Raj 44bd7e632e capnproto: Fix build on 32bit arches with 64bit time_t defaults
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:26:38 -08:00
Khem Raj 92441f9d6a meta-oe: Add leading whitespace for append operator
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:25:53 -08:00
zangrc 950d8b1aa8 libio-pty-perl: upgrade 1.14 -> 1.15
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-12 21:03:29 -08:00
Khem Raj f3a2338978 suitesparse: Exclude from world
It needs lapack which needs fortran
Move suitesparse into packagegroup-meta-oe-fortran-packages

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-11 10:14:00 -08:00
Gregory Anders b7274c62b3 Add suitesparse
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Khem Raj b6740733bc musl-nscd: Update to latest
Get fix
https://github.com/pikhq/musl-nscd/commit/ce81a80e30c2041d8260115fac86831ff64c354a

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Jasper Orschulko 24a8d440c5 upgrade and de-blacklist nanopb recipe
The current nanopb recipe is blacklisted due to python2 dependencies.
However, newer releases of nanopb use python3 by default.

This commit updates the used nanopb version to 0.4.3 and removes the
recipe from the blacklist.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Khem Raj a10f894a8e nodejs: Update to 12.19.0
This perhaps is last release in 12.x LTS

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Khem Raj 45a2dfdd0f nodejs: Fix arm32/thumb builds with clang
Backport a patch from upstream to take care of build failure e.g.

| ../deps/v8/src/codegen/arm/cpu-arm.cc:38:16: error: write to reserved register 'R7'
|   asm volatile("svc 0\n"
|                ^
| 1 error generated.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Luca Boccassi 4c3a471dcd Add new recipe for squashfs-tools-ng
The main difference with squashfs-tools is the availability
of a shared library and a programmatic interface, rather
than just command-line tools.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-27 08:39:09 -07:00
zangrc 2493507916 protobuf: upgrade 3.13.0 -> 3.13.0.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-23 10:20:24 -07:00
Khem Raj 3b989a03ad apitrace: Disable secuirty flags for clang
Add apitrace to relevant packagegroup

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Michael Tretter <m.tretter@pengutronix.de>
2020-10-19 23:49:22 -07:00
Michael Tretter 13eacba213 apitrace: add new recipe
apitrace consists of a set of tools to:

 - trace OpenGL, OpenGL ES, Direct3D, and DirectDraw APIs calls to a file;

 - replay OpenGL and OpenGL ES calls from a file;

 - inspect OpenGL state at any call while retracing;

 - visualize and edit trace files.

Signed-off-by: Michael Tretter <m.tretter@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 23:49:22 -07:00
Qi.Chen@windriver.com 75d7f48c66 php: use /run instead /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-16 09:21:54 -07:00
Armin Kuster 585f3e4fe0 musl-nscd: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-09 04:33:59 +00:00
Zheng Ruoqin 5dbeb9298e dnf-plugin-tui: upgrade 1.1 -> 1.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-29 13:05:28 -07:00
Slater, Joseph 433d887dbf luajit: advance SRCREV to fix two CVE's
Fix CVE-2020-15890 and CVE-2020-24372.

Also change PV format because the reference to 2.1.0-beta3
was already far behind the SRCREV.  Now, base PV on a tag
and date of SRCREV commit if it is later.  Sort order is
2.1.0~beta3 -> 2.1.0~beta-yymmdd -> 2.1.0 -> 2.1.0-yymmdd.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-15 09:28:34 -07:00
Andreas Müller 1053380fe1 geany: add source-code-pro-fonts to RRECOMMENDS
Same: having source-code-pro-fonts around is like a bugfix

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-12 13:40:36 -07:00
Khem Raj ad26afac60 android-tools: Support libselinux to build with musl which now has gettid
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-10 09:58:12 -07:00
Wenlin Kang 7471618778 lua: fix CVE-2020-24371
Fix CVE-2020-24371

Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-07 11:28:04 -07:00