Saul Wold
433603cb7d
sysdig: disable building for ppc
...
Sysdig depends on tbb which no longer builds for powerpc
Signed-off-by: Saul Wold <saul.wold@windriver.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 18:39:35 -07:00
Saul Wold
e0581ad12f
opencv: remove tbb packageconfig for powerpc
...
Since tbb does not build for powerpc remove it from the enabled list
Signed-off-by: Saul Wold <saul.wold@windriver.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 18:39:35 -07:00
Leon Anavi
34277b5ac9
surf: Upgrade 2.0 -> 2.1
...
Upgade Surf browser to release 2.1:
- Remove accelerated canvas parameter
- Remove external plugin handling
License-Update: Update contributors in file LICENSE
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
Andreas Müller
0fa836b69c
nano: upgrade 5.6 -> 5.7
...
Full changelog is found at [1]
[1] https://www.nano-editor.org/dist/latest/ChangeLog
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
Andreas Müller
abc5d296dd
portaudio-v19: upgrade 19.6.0 -> 19.7.0
...
* development continues on github
* build with CMake
* examples is a configure option -> replace (always empty) extra package by
PACKAGECONFIG
From announcement:
* support for latest Mac OS APIs
* Jack - fixes for device names that allows use on Linux systems with PipeWire
* WASAPI - numerous improvements
* OSS - better format support
* ALSA - various fixes for hangs and crashes
* WDMKS - improved performance and fixes
* updated build scripts
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
wangmy
57ae91d291
libsdl: Fix CVE-2019-13616
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13616
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read
in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
Upstream-Status: Backport [https://github.com/libsdl-org/SDL/commit/97fefd050976bbbfca9608499f6a7d9fb86e70db ]
CVE: CVE-2019-13616
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
wangmy
a9aecd2c32
exiv2: Fix CVE-2021-29473
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29473
The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
if they can trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1587/commits/e6a0982f7cd9282052b6e3485a458d60629ffa0b ]
CVE: CVE-2021-29473
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
wangmy
bb1400efda
exiv2: Fix CVE-2021-29470
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29470
The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
if they can trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1581/commits/6628a69c036df2aa036290e6cd71767c159c79ed ]
CVE: CVE-2021-29470
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
wangmy
8c9470bdfa
exiv2: Fix CVE-2021-29464
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29464
The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to gain code execution, if they can
trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54 ]
CVE: CVE-2021-29464
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
wangmy
9e7c2c9713
exiv2: Fix CVE-2021-3482
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3482
Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp
can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1523/commits/22ea582c6b74ada30bec3a6b15de3c3e52f2b4da ]
CVE: CVE-2021-3482
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
wangmy
8e63ac6c86
exiv2: Fix CVE-2021-29463
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29463
The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
if they can trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b ]
CVE: CVE-2021-29463
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
wangmy
f0d83c14d9
exiv2: Fix CVE-2021-29458
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29458
The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
if they can trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1536/commits/06d2db6e5fd2fcca9c060e95fc97f8a5b5d4c22d ]
CVE: CVE-2021-29458
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
wangmy
5be7269309
exiv2: Fix CVE-2021-29457
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29457
The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to gain code execution, if they can
trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/0230620e6ea5e2da0911318e07ce6e66d1ebdf22 ]
CVE: CVE-2021-29457
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
Alexander Vickberg
d6ef417074
hostapd: fix building with CONFIG_TLS=internal
...
The patch recently added for CVE-2021-30004 broke compilation with
CONFIG_TLS=internal. This adds the necessary function to let it
compile again.
Signed-off-by: Alexander Vickberg <wickbergster@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-17 09:15:23 -07:00
William A. Kennington III
05b8c9578d
span-lite: upgrade 0.8.1 -> 0.9.2
...
Signed-off-by: William A. Kennington III <wak@google.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-17 09:15:23 -07:00
Nuno Sá
a41f4277cd
libiio: mark libxml2 as depends for usb_backend
...
When usb_backend is configured, libxml2 is set as a RDEPEND. But, in
reality we want it to be part of the DEPENDS list.
Signed-off-by: Nuno Sá <nuno.sa@analog.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-17 09:00:36 -07:00
Nuno Sá
31c3d52888
libiio: add serial backend support
...
This patch adds the serial backend to the PACKAGECONFIG list.
Signed-off-by: Nuno Sá <nuno.sa@analog.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-17 09:00:36 -07:00
Khem Raj
ea0af875ca
libraw: Move from meta-qt5-extra to meta-oe
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Cc: Andreas Müller <schnitzeltony@gmail.com >
2021-05-17 09:00:36 -07:00
Khem Raj
f701ffa95d
googletest: Update to tip of trunk
...
Check the top level license for checksums, as it is now available and is
BSD-3-Clause
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-17 09:00:35 -07:00
Ross Burton
7fa165e0df
nss: remove -march vs -mcpu workaround
...
NSS's build tries to be clever and passes for example -march=armv8-a+crypto
explicitly, instead of relying on the person doing the compilation to
set the right flags.
This conflicts with our compiler flags which typically pass the ideal
tune for the target, for example -mcpu=cortex-a55+crc+crypto.
When this happens GCC warns that the flags conflict (which was promoted
to an error, now fixed) and -march takes precedence over -mcpu.
As there's a huge number of potential tune flags to remove to avoid the
conflict, now that warnings are not fatal we can stop removing the flags
and let GCC warn as the generated code is the same.
Signed-off-by: Ross Burton <ross.burton@arm.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:27:26 -07:00
Ross Burton
c16459a2e6
nss: disable -Werror
...
-Werror should be used by developers and not packagers, because new
compiler flags or GCC versions can use new warnings.
Signed-off-by: Ross Burton <ross.burton@arm.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:27:26 -07:00
zhengruoqin
087223d8b0
libxmlb: upgrade 0.3.0 -> 0.3.1
...
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:26:46 -07:00
zhengruoqin
357f1992e3
libjcat: upgrade 0.1.6 -> 0.1.7
...
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:26:46 -07:00
zhengruoqin
363370a846
libdivecomputer: upgrade 0.6.0 -> 0.7.0
...
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:26:46 -07:00
zangrc
fec704f62c
iwd: upgrade 1.13 -> 1.14
...
Refresh the following patch:
0001-build-Use-abs_top_srcdir-instead-of-abs_srcdir-for-e.patch
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:26:46 -07:00
zangrc
4cd13e9108
gensio: upgrade 2.2.4 -> 2.2.5
...
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:26:46 -07:00
zangrc
6d125a8db5
cloc: upgrade 1.88 -> 1.90
...
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:26:46 -07:00
wangmy
54feab11a1
uftrace: Fix a plthook crash on aarch64 with binutils2.35.1 and later versions on aarch64
...
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-14 07:26:46 -07:00
Armin Kuster
7967b8ee00
packagegroup-meta-oe: add audit to pkg grp
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-12 20:45:50 -07:00
Armin Kuster
e4ea756eeb
audit: migrate from meta-selinux
...
Move audit to a more common layer to simplify integration.
Signed-off-by: Armin Kuster <akuster808@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-12 20:45:50 -07:00
Martin Jansa
9975c11e4a
ostree: switch from default master branch to main to fix do_fetch failure
...
* branch was renamed in upstream repo
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-12 07:11:41 -07:00
Khem Raj
42e2ec56c7
breakpad: Fix type mismatch for SIGSTKSZ
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 11:16:03 -07:00
Khem Raj
e9a53d389a
tbb: Fix build with GCC 11
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 11:07:08 -07:00
Khem Raj
c04080a703
mongodb: Do not use MINSIGSTKSZ
...
glibc 2.34 has made MINSIGSTKSZ non-constant
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 11:07:08 -07:00
Alexander Kanavin
026638c292
remmina: make avahi support optional and off by default
...
This requires gtk support enabled in avahi, which was
disabled on oe-core.
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:28 -07:00
Gianfranco
319490178b
vboxguestdrivers: upgrade 6.1.20 -> 6.1.22
...
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it >
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:28 -07:00
Changqing Li
8cf040ac76
nmap: change shebang to python3
...
upstream nmap is python2 compatiable now, but this recipe
supports python3.
Signed-off-by: Changqing Li <changqing.li@windriver.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:28 -07:00
Hongxu Jia
f6b4cb0231
cdrkit: add nativesdk support
...
- Fix an absolute path symlink issue, replace with a relative link
- Fix installed-vs-shipped QA Issue of nativesdk package
...
|ERROR: nativesdk-cdrkit-1.1.11-r0 do_package: QA Issue: nativesdk-cdrkit:
Files/directories were installed but not shipped in any package:
| /opt/windriver/wrlinux-graphics/21.18/sysroots/x86_64-wrlinuxsdk-linux/usr/sbin/netscsid
...
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Andreas Müller
c7f8fc0200
poppler: upgrade 21.04.0 -> 21.05.0
...
Release 21.05.0
core:
* Fix crashes in malformed files
* Export SplashFont* symbols used by Scribus
* Minor code improvements
qt5/qt6:
* Make sure new signatures are always properly oriented
* Allow to pass the border width when signing
glib:
* Enhance find to support multi-line matching
utils:
* pdftoppm: Fix regression when using single scaleTo. Issue #1062
build system:
* Allow to disable building manual tests
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Khem Raj
259e6d305a
apitrace: Upgrade to 0.10
...
apitrace: Fix build with musl
Changes are here [1] which fixed musl build
[1] https://github.com/apitrace/apitrace/releases/tag/10.0
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Khem Raj
2183f08941
mariadb: Upgrade to 10.5.10
...
Drop fix-a-building-failure.patch because upstream has made is narrower
to apply to emulator builds and not just any cross compiling builds
Add missing dependency on boost
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Andreas Müller
ca18e276d6
mariadb: Fix configure
...
Assume recent CMake upgrade made this pop up.
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Khem Raj
af43242a22
minicoredumper: Replace pthread_mutexattr_setrobust_np with pthread_mutexattr_setrobust
...
Remove unused patch 0001-minicoredumper-Initialize-pointer-to-config-struct-t.patch
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Khem Raj
61bf4cdf50
grpc: Upgrade to 1.37.1
...
Changes are here [1]
[1] https://github.com/grpc/grpc/releases/tag/v1.37.1
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Khem Raj
8691de2580
abseil-cpp: Upgrade to lts_2021_03_24
...
Fix build with glibc 2.34 while here
Forward patches to this version
Let system package the libraries
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Khem Raj
dcb8ab6169
sdbus-c++-libsystemd: Avoid hard dependency on rsync
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-11 08:27:27 -07:00
Khem Raj
3c259f977e
icewm: Upgrade to 2.3.3
...
Do not check for C++11, since it is a runtime check, wont work during
cross compile, in anycase our compilers do support C++11 and default to
c++ or newer std, so this check is redundant for OE toolchains
Add new required build time deps on fribidi and imlib2
Changes are [1]
[1] https://github.com/ice-wm/icewm/releases/tag/2.3.3
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-06 20:57:44 -07:00
Bruce Mitchell
5f3f162145
makedumpfile: Bump srcrev
...
supports for kernel 5.10, prior to 1.6.9 release
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-06 20:56:59 -07:00
Romain Naour
fee0672979
packagegroup-meta-oe: Add poke to packagegroup-meta-oe-devtools
...
Signed-off-by: Romain Naour <romain.naour@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-06 12:26:05 -07:00
Romain Naour
a0f8491b49
poke: add optional json-c dependency
...
From [1]:
"The poke machine-interface uses a protocol to communicate with
clients, which is based on JSON. poke uses the json-c library to
parse and build JSON strings.
If this library is not found, poke will build without machine-interface
support."
[1] https://git.savannah.nongnu.org/cgit/poke.git/tree/DEPENDENCIES?h=releases/poke-1.2#n55
Signed-off-by: Romain Naour <romain.naour@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-05 17:41:38 -07:00