Commit Graph

18389 Commits

Author SHA1 Message Date
Martin Jansa 353578d304 packagegroup-meta-oe: include nodejs without meta-python2 conditional
* it doesn't depend on meta-python2 since:
  commit eaf9cfb018
  Author: Martin Jansa <martin.jansa@gmail.com>
  Date:   Thu Jan 23 17:44:06 2020 +0100

    nodejs: use python3native

    Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
    Signed-off-by: Khem Raj <raj.khem@gmail.com>

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-28 21:50:31 -07:00
Martin Jansa fc92568064 ceres-solver: prevent fetching git hook during do_configure
* today I've found 2 jenkins jobs stuck way too long sitting in this do_configure
  Bitbake still alive (5000s)
  Bitbake still alive (10000s)
  Bitbake still alive (15000s)
  Bitbake still alive (20000s)
  Bitbake still alive (25000s)
  Bitbake still alive (30000s)
  ... manually killed, the CMake ...
  ERROR: ceres-solver-1.14.0-r0 do_configure: Execution of 'ceres-solver/1.14.0-r0/temp/run.do_configure.39438' failed with exit code 143:
  ...
  | -- Detected Ceres being used as a git submodule, adding commit hook for Gerrit to: ceres-solver/1.14.0-r0/git/.git
  | ceres-solver/1.14.0-r0/temp/run.do_configure.39438: line 213: 39485 Terminated              cmake -G 'Ninja' -DCMAKE_MAKE_PROGRAM=ninja ...

  I've seen it with dunfell and gatesgarth, but master has the same
  ADD_GERRIT_COMMIT_HOOK function (just in newer ceres-solver release),
  so probably needs the same.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-28 21:50:26 -07:00
Aditya.Tayade ac235c6cee neon: Add ptest
Reused below test suites from neon source package:
BASIC_TESTS:
auth
basic
request
session
socket
string-tests
stubs
uri-tests
util-tests

DAV_TESTS:
acl3744
lock
oldacl
props
xml
xmlreq

Overall execution time of above test suite is approximately 15sec.

Signed-off-by: Neetika.Singh <Neetika.Singh@kpit.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-28 21:50:20 -07:00
Harpritkaur Bhandari e191da81b2 rapidjson: Remove unwanted patches
rapidjson is upgraded to latest SRCREV so
removing the below patches which are not
applicable:
1.0001-CMake-remove-hardcoded-CMAKECONFIG_INSTALL_DIR-path.patch
2.remove-march-native-from-CMAKE_CXX_FLAGS.patch

Signed-off-by: Harpritkaur Bhandari <Harpritkaur.Bhandari@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5aa127af2d)
Signed-off-by: Harpritkaur Bhandari <Harpritkaur.Bhandari@kpit.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-28 21:50:04 -07:00
Harpritkaur Bhandari 910ac74e68 rapidjson: Upgrade SRCREV to latest
Upgrade SRCREV to latest as it fixes the below issue:
Running UndefinedBehaviorSanitizer on projects that use
rapidjson triggers 'applying non-zero offset <NN> to null
pointer' findings in 'internal/stack.h' which are hard
to suppress by library users.
Removed "0001-CMake-remove-hardcoded-CMAKECONFIG_INSTALL_DIR-path.patch"
as the changes are already incorporated in the latest
codebase.
As per abi-compliance-checker report the source compatibility
and binary compatibility between previous SRCREV
6a905f9311f82d306da77bd963ec5aa5da07da9c and current
SRCREV 0ccdbf364c577803e2a751f5aededce935314313
is 100% and this patch is already tested on 64bit
ARM (aarch64) in a product with on target CI tests.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 04d9ea0ba7)
Signed-off-by: Harpritkaur Bhandari <Harpritkaur.Bhandari@kpit.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-28 21:48:01 -07:00
Mingli Yu 04e4adcae0 netkit-telnet: Update SRC_URI
Fix the below do_fetch warning:
WARNING: netkit-telnet-0.17-r0 do_fetch: Failed to fetch URL http://ftp.linux.org.uk/pub/linux/Networking/netkit/netkit-telnet-0.17.tar.gz, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f555f9d34f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:12:04 -07:00
Mingli Yu ddc258df40 bridge-utils: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: bridge-utils-1.7-r0 do_fetch: Failed to fetch URL git://git.kernel.org/pub/scm/linux/kernel/git/shemminger/bridge-utils.git, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f1bb995a05)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:11:42 -07:00
Mingli Yu 88d8df41d0 geoip-perl: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: geoip-perl-1.51-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-perl.git;protocol=https;, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2e97d3bd11)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:11:12 -07:00
Mingli Yu 182ee4b68c geoip: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: geoip-1.6.12-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-c.git, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit df3ef15834)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:10:52 -07:00
Mingli Yu f03e3e31be quagga: Update SRC_URI
Update the SRC_URI as the previous is unaccessible to fix the below
warning:
WARNING: quagga-1.2.4-r0 do_fetch: Failed to fetch URL https://download.savannah.gnu.org/releases/quagga/quagga-1.2.4.tar.gz;, attemptin MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a1e3dd6a31)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:08:26 -07:00
Sana Kazi fee2024d74 mdns: Whitelisted CVE-2007-0613 for mdns
CVE-2007-0613 is not applicable as it only affects Apple products
i.e. ichat,mdnsresponder, instant message framework and MacOS.
Also, https://www.exploit-db.com/exploits/3230 shows the part of code
affected by CVE-2007-0613 which is not preset in upstream source code.
Hence, CVE-2007-0613 does not affect other Yocto implementations and
is not reported for other distros can be marked whitelisted.
Links:
https://vulmon.com/vulnerabilitydetails?qid=CVE-2007-0613
https://www.incibe-cert.es/en/early-warning/vulnerabilities/cve-2007-0613
https://security-tracker.debian.org/tracker/CVE-2007-0613
https://ubuntu.com/security/CVE-2007-0613
https://vulmon.com/vulnerabilitydetails?qid=CVE-2007-0613

Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f37e5423da)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-11 21:13:43 -08:00
Andrei Gherzan be89766e7b nss: Fix warnings generated by getcwd
getcwd() conforms to POSIX.1-2001 which leaves the behaviour when the
buf argument is NULL, undefined. This makes gcc 10+ throw the following
warning:

argument 1 is null but the corresponding size argument 2 value is 4096

Initially, this was fixed by disabling NSS_ENABLE_WERROR. This patch
re-enables NSS_ENABLE_WERROR (by leaving it to its default value) and
takes advantage of the existing functionality in nss that wraps the
getcwd call into a function making sure that the buf argument is always
properly allocated.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit dad2aef6be)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-07 07:48:59 -08:00
akuster 945f062ff0 meta-oe/README: add Ubuntu prerequisite information
When building on Ubuntu 20.04, luajit needs 32bit support
so install 'gcc-multilib'

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 973fe410d2)
[Minor fixup for Gategarth]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-15 08:19:35 -08:00
Khem Raj fbe2e79ab0 python3-pykwalify: Do not unset _PYTHON_SYSCONFIGDATA_NAME
its been shoved out of setuptools3 in oe-core now

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 50bbf80abf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-15 08:13:54 -08:00
Khem Raj c3a9e5b990 python-grpcio-tools: Add missing space for append
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 6b3e3bdaf8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-15 08:13:51 -08:00
Khem Raj 572d414826 postgresql: Inherit python3targetconfig
it now ends up searching native python shared libraries and tries to
link with it and fails on non-host architectures

recipe-sysroot-native/usr/lib/libpython3.9.so: file not recognized: file format not recognized
collect2: error: ld returned 1 exit status

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c499aaeef8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-14 15:48:09 -08:00
Khem Raj a0c26ca2b4 libplist: Inherit python3targetconfig
Fixes

configure: error:
  Could not link test program to Python. Maybe the main Python library has been
  installed in some non-standard library path. If so, pass it to configure,
  via the LIBS environment variable.
  Example: ./configure LIBS="-L/usr/non-standard-path/python/lib"

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit be7d2286bf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-14 15:48:01 -08:00
Khem Raj 59d3d64e90 openipmi: Inherit python3targetconfig
Fixes

configure: error:
  Could not link test program to Python. Maybe the main Python library has been
  installed in some non-standard library path. If so, pass it to configure,
  via the LIBS environment variable.
  Example: ./configure LIBS="-L/usr/non-standard-path/python/lib"

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 59f817bbe3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-14 15:47:53 -08:00
Khem Raj 4a5719ffb1 gedit: Inherit python3targetconfig
This is needed to find _PYTHON_SYSCONFIGDATA_NAME

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a06cdf5a4c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-13 12:29:38 -08:00
Martin Jansa f950286816 wireguard-module: remove PKG assignment
* it's not clear why it was added in first place and it's causing issues since:
  "package: get_package_mapping: avoid dependency mapping if renamed package provides original name"
  commit in oe-core as discussed in:
  https://lists.openembedded.org/g/openembedded-core/message/143672
  https://github.com/openembedded/meta-openembedded/issues/285

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 304f660f88)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 10:51:28 -08:00
Wang Mingyu 5eb538cd50 dnsmasq: upgrade 2.82 -> 2.84
Refresh the following patch:
lua.patch

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3e28a31bb4)
[ Bug fix only changes mostly CVEs
 CVE-2020-25681, CVE-2020-25682, CVE-2020-25683
 CVE-2020-25687, CVE-2020-25684, CVE-2020-25685
 CVE-2020-25686 ]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 10:35:43 -08:00
Qi.Chen@windriver.com 6950684345 minifi-cpp: set PSEUDO_CONSIDER_PATHS
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 252fd475e9)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:54:44 -08:00
Mingli Yu 3ebf00ee3a mariadb: upgrade to 10.5.8
Fixes for the following security vulnerabilities:
CVE-2020-14812
CVE-2020-14765
CVE-2020-14776
CVE-2020-14789
CVE-2020-28912 (MDEV-24040)

Rebase c11_atomics.patch to avoid fuzz warnings and add
a patch to fix below build error on musl.
/prj/tmp/work/cortexa57-poky-linux-musl/mariadb/10.5.8-r0/recipe-sysroot-native/usr/bin/aarch64-poky-linux-musl/../../libexec/aarch64-poky-linux-musl/gcc/aarch64-poky-linux-musl/10.2.0/ld.bfd: /usr/src/debug/mariadb/10.5.8-r0/mariadb-10.5.8/unittest/mysys/stacktrace-t.c:36: undefined reference to `my_safe_print_str'

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 486d0fa33e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:52:16 -08:00
Kai Kang e892991f8d mariadb: add package config zstd
Add package config zstd to fix file-rdeps issue when ccache is enabled:

| ERROR: mariadb-10.5.6-r0 do_package_qa: QA Issue:
|  /usr/lib64/plugin/ha_rocksdb.so contained in package mariadb-server
|  requires libzstd.so.1() (64bit), but no providers found in
|  RDEPENDS_mariadb-server? [file-rdeps]

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c1ac3cd7d9)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:51:58 -08:00
Khem Raj 5765b957ec mariadb: Fix build on 32bit arches with 64bit time_t
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 512712f9c4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:51:30 -08:00
Mario Schuknecht 83842c9150 dnsmasq: Fix systemd service
Systemd service file option 'ExecStopPre' is warned and ignored by
systemd. By replacing 'ExecStopPre' with 'ExecStop', the intended
behavior is realized. The 'ExecStop' commands are executed one after the
other.

Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 55c94cb319)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:49:07 -08:00
changqing.li@windriver.com 1de0f4c33b celt051: update SRC_URI
original SRC_URI is not valid now, offical CELT repository
moved to gitlab

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5450c958bf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:45:03 -08:00
Shlomi Vaknin 57d742a83b python3-sh: remove python3-tests from RDEPENDS
python3-tests installs the unit tests of python
as well as stuff that no one should care about
in its rootfs. Thus, it is not a runtime dependency
of python3-sh.

Signed-off-by: Shlomi Vaknin <shlomi.39sd@gmail.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2ed25eb4ef)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:37:36 -08:00
Armin Kuster 25c29224f4 lua: update to 5.3.6
LIC_FILES_CHKSUM changed to do year updates

This is the last 5.3.x update. This will give us the best
starting point for doing Maintence moving forward.

Its a bug fix only update. See http://www.lua.org/work/diffs-lua-5.3.5-lua-5.3.6.html

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 25d8d65eb5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:33:49 -08:00
akuster 11875c1f47 enca: Fix SRC_URI
The project appears to have moved.
Update HOMEPAGE and SRC_URI. bz2 is not available, use gz
Update HASH accordingly.

Fixes:
WARNING: enca-1.9-r0 do_fetch: Failed to fetch URL http://www.sourcefiles.org/Networking/Tools/Miscellanenous/enca-1.9.tar.bz2, attempting MIRRORS if available

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 460077d30f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:31:06 -08:00
zhengruoqin cef93b7b00 openldap: upgrade 2.4.56 -> 2.4.57
-License-Update: Copyright year updated to 2021.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0282b8ce6a)
[Maintance update only]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-02 10:18:22 -08:00
zangrc e615c6fcef openldap: upgrade 2.4.51 -> 2.4.56
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 768345053e)
[Maintenance update only]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-02 10:12:08 -08:00
Søren Andersen bdb79efaba zram: fix sourcing of zram parameters
Signed-off-by: Søren Andersen <san@skov.dk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3c8ad9192c)
Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
2021-01-28 17:19:28 -08:00
Mikko Rapeli 4e6de3045c giflib: apply patch for CVE-2019-15133 and set CVE_PRODUCT
Backport upstream patch for CVE-2019-15133.
Set CVE_PRODUCT to "giflib_project:giflib" which is used
in NVD. https://nvd.nist.gov/vuln/detail/CVE-2019-15133

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-28 17:17:52 -08:00
Mikko Rapeli b5b2f97772 flatbuffers: whitelist CVE-2020-35864
CVE-2020-35864 is for the rust crate for flatbuffers, not
flatbuffers itself.

https://security-tracker.debian.org/tracker/CVE-2020-35864

"NOT-FOR-US: flatbuffers rust crate"

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-28 17:16:56 -08:00
S. Lockwood-Childs ba3c1dcf19 sip3: simplify recipe
The custom configure block can be shared between target
and native if you just configure the sysroot option accordingly
and use STAGING_INCDIR to locate the python headers to build
against.

Signed-off-by: S. Lockwood-Childs <sjl@vctlabs.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5fe362171c)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-28 17:02:32 -08:00
zangrc 46ea93dc42 iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3
0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch
Removed since this is included in 2.1.3

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 46e30569e3)
[Bug fix only update. Includes several CVE fixes.
CVE-2020-17437
CVE-2020-17438
CVE-2020-13987
CVE-2020-13988 ]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-25 20:54:49 -08:00
Anatol Belski 027407dfdc xmlsec1: Fix configure QA error caused by host lookup path
The configure script contains hardcoded lookup paths to /usr and other
paths that might interfere with the host. These are overwritten with the
staging dir locations for Poky compatibility.

Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 74b66d1911)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-18 21:01:49 -08:00
Dmitry Baryshkov 2ed77abf13 xterm: provide virtual/x-terminal-emulator
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8826791d79)
2021-01-18 08:38:10 -08:00
Dmitry Baryshkov a653238398 xterm: install xterm and uxterm desktop files
Modify recipe to install application desktop files for xterm.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 593f21eda5)
2021-01-18 08:38:04 -08:00
Robert Joslyn 6ff4bd4f34 postgresql: Update to 12.5
Fixes the following CVEs:

CVE-2020-25694
CVE-2020-25695
CVE-2020-25696

Full release notes at:
https://www.postgresql.org/docs/12/release-12-5.html

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-18 08:20:58 -08:00
Mikko Rapeli fd7dc34871 fuse: set CVE_PRODUCT to "fuse_project:fuse"
Other products like "RedHat:fuse" introduce false CVE findings like:

https://nvd.nist.gov/vuln/detail/CVE-2018-10906
https://nvd.nist.gov/vuln/detail/CVE-2019-14860
https://nvd.nist.gov/vuln/detail/CVE-2020-25689

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-16 10:09:40 -08:00
Diego Santa Cruz 25285ded63 gupnp: Upgrade to 1.2.2 -> 1.2.4
gupnp 1.2.3 adds mitigation for CVE-2020-12695 (CallStranger)

Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-16 10:09:35 -08:00
Diego Santa Cruz e788d46738 gssdp: Upgrade to 1.2.2 -> 1.2.3
Dependency of gupnp 1.2.3

Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-16 10:09:19 -08:00
jabdoa2 27626b4eea libsdl2-mixer: set --disable-music-ogg-shared to link statically
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 69bae2a236)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-14 18:38:07 -08:00
jabdoa2 af0c3a62d6 libsdl2-mixer: Fix ogg/vorbis support in libsdl2-mixer
Remove --enable-music-ogg-tremor  as it broke vorbis support:

checking tremor/ivorbisfile.h usability... no
checking tremor/ivorbisfile.h presence... no
checking for tremor/ivorbisfile.h... no
checking for ov_open_callbacks in -lvorbisidec... no
configure: WARNING: *** Unable to find Ogg Vorbis Tremor library (http://www.xiph.org/)
configure: WARNING: Ogg Vorbis support disabled

With this change:

checking vorbis/vorbisfile.h usability... yes
checking vorbis/vorbisfile.h presence... yes
checking for vorbis/vorbisfile.h... yes
checking for ov_open_callbacks in -lvorbisfile... yes
-- dynamic libvorbisfile -> libvorbisfile.so.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 074c7d9a1e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-14 18:38:03 -08:00
Sean Nyekjaer ac6bc96e7d nodejs: 12.19.1 -> 12.20.1
Signed-off-by: Sean Nyekjaer <sean@geanix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cde1019804)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-13 08:06:35 -08:00
Armin Kuster a10ea62a1c wireshark: Several securtiy fixes
Source: Wireshark.org
MR: 106181, 106696, 107655, 107673, 107682
Type: Security Fix
Disposition: Backport from wireshark.org
ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a
Description:

Bugfix only update including these cves:
3.2.8
CVE-2020-26575
CVE-2020-28030

3.2.9
CVE-2020-26418
CVE-2020-26421
CVE-2020-26420

Signed-off-by: Armin Kuster <akuster@mvista.com>
2021-01-12 14:19:19 -08:00
He Zhe a5d1580a4d lmbench: Fix setting LDLIBS failure
scripts/build is interpreted as an sh script which may not recognize variable
assignment operator += and thus give the following error and fail to append
LDLIBS.

../scripts/build: 21: ../scripts/build: LDLIBS+=-lm: not found

Use the basic assignment instead.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a6a8fc75ba)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:27:48 -08:00
Chen Qi 6313a640ab tclap: fix branch
Upstream has deleted the 'master' branch, so use the 1.2 branch.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 583fbb4775)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:27:06 -08:00