Commit Graph

9270 Commits

Author SHA1 Message Date
Saul Wold 433603cb7d sysdig: disable building for ppc
Sysdig depends on tbb which no longer builds for powerpc

Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 18:39:35 -07:00
Saul Wold e0581ad12f opencv: remove tbb packageconfig for powerpc
Since tbb does not build for powerpc remove it from the enabled list

Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 18:39:35 -07:00
Leon Anavi 34277b5ac9 surf: Upgrade 2.0 -> 2.1
Upgade Surf browser to release 2.1:

- Remove accelerated canvas parameter
- Remove external plugin handling

License-Update: Update contributors in file LICENSE

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
Andreas Müller 0fa836b69c nano: upgrade 5.6 -> 5.7
Full changelog is found at [1]

[1] https://www.nano-editor.org/dist/latest/ChangeLog

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
Andreas Müller abc5d296dd portaudio-v19: upgrade 19.6.0 -> 19.7.0
* development continues on github
* build with CMake
* examples is a configure option -> replace (always empty) extra package by
  PACKAGECONFIG

From announcement:

* support for latest Mac OS APIs
* Jack - fixes for device names that allows use on Linux systems with PipeWire
* WASAPI - numerous improvements
* OSS - better format support
* ALSA - various fixes for hangs and crashes
* WDMKS - improved performance and fixes
* updated build scripts

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
wangmy 57ae91d291 libsdl: Fix CVE-2019-13616
References
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13616

  SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read
  in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

  Upstream-Status: Backport [https://github.com/libsdl-org/SDL/commit/97fefd050976bbbfca9608499f6a7d9fb86e70db]
  CVE: CVE-2019-13616

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
wangmy a9aecd2c32 exiv2: Fix CVE-2021-29473
References
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29473

      The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
      An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
      if they can trick the victim into running Exiv2 on a crafted image file.

      Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1587/commits/e6a0982f7cd9282052b6e3485a458d60629ffa0b]
      CVE: CVE-2021-29473

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
wangmy bb1400efda exiv2: Fix CVE-2021-29470
References
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29470

      The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
      An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
      if they can trick the victim into running Exiv2 on a crafted image file.

      Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1581/commits/6628a69c036df2aa036290e6cd71767c159c79ed]
      CVE: CVE-2021-29470

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
wangmy 8c9470bdfa exiv2: Fix CVE-2021-29464
References
          https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29464

          The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file.
          An attacker could potentially exploit the vulnerability to gain code execution, if they can
          trick the victim into running Exiv2 on a crafted image file.

          Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54]
          CVE: CVE-2021-29464

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
wangmy 9e7c2c9713 exiv2: Fix CVE-2021-3482
References
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3482

      Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp
      can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.

      Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1523/commits/22ea582c6b74ada30bec3a6b15de3c3e52f2b4da]
      CVE: CVE-2021-3482

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
wangmy 8e63ac6c86 exiv2: Fix CVE-2021-29463
References
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29463

      The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
      An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
      if they can trick the victim into running Exiv2 on a crafted image file.

      Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b]
      CVE: CVE-2021-29463

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
wangmy f0d83c14d9 exiv2: Fix CVE-2021-29458
References
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29458

      The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
      An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
      if they can trick the victim into running Exiv2 on a crafted image file.

      Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1536/commits/06d2db6e5fd2fcca9c060e95fc97f8a5b5d4c22d]
      CVE: CVE-2021-29458

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
wangmy 5be7269309 exiv2: Fix CVE-2021-29457
References
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29457

  The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file.
  An attacker could potentially exploit the vulnerability to gain code execution, if they can
  trick the victim into running Exiv2 on a crafted image file.

  Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/0230620e6ea5e2da0911318e07ce6e66d1ebdf22]
  CVE: CVE-2021-29457

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
Alexander Vickberg d6ef417074 hostapd: fix building with CONFIG_TLS=internal
The patch recently added for CVE-2021-30004 broke compilation with
CONFIG_TLS=internal. This adds the necessary function to let it
compile again.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-17 09:15:23 -07:00
William A. Kennington III 05b8c9578d span-lite: upgrade 0.8.1 -> 0.9.2
Signed-off-by: William A. Kennington III <wak@google.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-17 09:15:23 -07:00
Nuno Sá a41f4277cd libiio: mark libxml2 as depends for usb_backend
When usb_backend is configured, libxml2 is set as a RDEPEND. But, in
reality we want it to be part of the DEPENDS list.

Signed-off-by: Nuno Sá <nuno.sa@analog.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-17 09:00:36 -07:00
Nuno Sá 31c3d52888 libiio: add serial backend support
This patch adds the serial backend to the PACKAGECONFIG list.

Signed-off-by: Nuno Sá <nuno.sa@analog.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-17 09:00:36 -07:00
Khem Raj ea0af875ca libraw: Move from meta-qt5-extra to meta-oe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andreas Müller <schnitzeltony@gmail.com>
2021-05-17 09:00:36 -07:00
Khem Raj f701ffa95d googletest: Update to tip of trunk
Check the top level license for checksums, as it is now available and is
BSD-3-Clause

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-17 09:00:35 -07:00
Ross Burton 7fa165e0df nss: remove -march vs -mcpu workaround
NSS's build tries to be clever and passes for example -march=armv8-a+crypto
explicitly, instead of relying on the person doing the compilation to
set the right flags.

This conflicts with our compiler flags which typically pass the ideal
tune for the target, for example -mcpu=cortex-a55+crc+crypto.

When this happens GCC warns that the flags conflict (which was promoted
to an error, now fixed) and -march takes precedence over -mcpu.

As there's a huge number of potential tune flags to remove to avoid the
conflict, now that warnings are not fatal we can stop removing the flags
and let GCC warn as the generated code is the same.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:27:26 -07:00
Ross Burton c16459a2e6 nss: disable -Werror
-Werror should be used by developers and not packagers, because new
compiler flags or GCC versions can use new warnings.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:27:26 -07:00
zhengruoqin 087223d8b0 libxmlb: upgrade 0.3.0 -> 0.3.1
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zhengruoqin 357f1992e3 libjcat: upgrade 0.1.6 -> 0.1.7
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zhengruoqin 363370a846 libdivecomputer: upgrade 0.6.0 -> 0.7.0
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc fec704f62c iwd: upgrade 1.13 -> 1.14
Refresh the following patch:
0001-build-Use-abs_top_srcdir-instead-of-abs_srcdir-for-e.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc 4cd13e9108 gensio: upgrade 2.2.4 -> 2.2.5
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc 6d125a8db5 cloc: upgrade 1.88 -> 1.90
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
wangmy 54feab11a1 uftrace: Fix a plthook crash on aarch64 with binutils2.35.1 and later versions on aarch64
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
Armin Kuster 7967b8ee00 packagegroup-meta-oe: add audit to pkg grp
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-12 20:45:50 -07:00
Armin Kuster e4ea756eeb audit: migrate from meta-selinux
Move audit to a more common layer to simplify integration.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-12 20:45:50 -07:00
Martin Jansa 9975c11e4a ostree: switch from default master branch to main to fix do_fetch failure
* branch was renamed in upstream repo

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-12 07:11:41 -07:00
Khem Raj 42e2ec56c7 breakpad: Fix type mismatch for SIGSTKSZ
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 11:16:03 -07:00
Khem Raj e9a53d389a tbb: Fix build with GCC 11
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 11:07:08 -07:00
Khem Raj c04080a703 mongodb: Do not use MINSIGSTKSZ
glibc 2.34 has made MINSIGSTKSZ non-constant

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 11:07:08 -07:00
Alexander Kanavin 026638c292 remmina: make avahi support optional and off by default
This requires gtk support enabled in avahi, which was
disabled on oe-core.

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:28 -07:00
Gianfranco 319490178b vboxguestdrivers: upgrade 6.1.20 -> 6.1.22
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:28 -07:00
Changqing Li 8cf040ac76 nmap: change shebang to python3
upstream nmap is python2 compatiable now, but this recipe
supports python3.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:28 -07:00
Hongxu Jia f6b4cb0231 cdrkit: add nativesdk support
- Fix an absolute path symlink issue, replace with a relative link

- Fix installed-vs-shipped QA Issue of nativesdk package
  ...
  |ERROR: nativesdk-cdrkit-1.1.11-r0 do_package: QA Issue: nativesdk-cdrkit:
   Files/directories were installed but not shipped in any package:
  |  /opt/windriver/wrlinux-graphics/21.18/sysroots/x86_64-wrlinuxsdk-linux/usr/sbin/netscsid
  ...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Andreas Müller c7f8fc0200 poppler: upgrade 21.04.0 -> 21.05.0
Release 21.05.0

core:
 * Fix crashes in malformed files
 * Export SplashFont* symbols used by Scribus
 * Minor code improvements

qt5/qt6:
 * Make sure new signatures are always properly oriented
 * Allow to pass the border width when signing

glib:
 * Enhance find to support multi-line matching

utils:
 * pdftoppm: Fix regression when using single scaleTo. Issue #1062

build system:
 * Allow to disable building manual tests

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Khem Raj 259e6d305a apitrace: Upgrade to 0.10
apitrace: Fix build with musl

Changes are here [1] which fixed musl build

[1] https://github.com/apitrace/apitrace/releases/tag/10.0

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Khem Raj 2183f08941 mariadb: Upgrade to 10.5.10
Drop fix-a-building-failure.patch because upstream has made is narrower
to apply to emulator builds and not just any cross compiling builds

Add missing dependency on boost

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Andreas Müller ca18e276d6 mariadb: Fix configure
Assume recent CMake upgrade made this pop up.

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Khem Raj af43242a22 minicoredumper: Replace pthread_mutexattr_setrobust_np with pthread_mutexattr_setrobust
Remove unused patch 0001-minicoredumper-Initialize-pointer-to-config-struct-t.patch

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Khem Raj 61bf4cdf50 grpc: Upgrade to 1.37.1
Changes are here [1]

[1] https://github.com/grpc/grpc/releases/tag/v1.37.1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Khem Raj 8691de2580 abseil-cpp: Upgrade to lts_2021_03_24
Fix build with glibc 2.34 while here
Forward patches to this version
Let system package the libraries

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Khem Raj dcb8ab6169 sdbus-c++-libsystemd: Avoid hard dependency on rsync
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11 08:27:27 -07:00
Khem Raj 3c259f977e icewm: Upgrade to 2.3.3
Do not check for C++11, since it is a runtime check, wont work during
cross compile, in anycase our compilers do support C++11 and default to
c++ or newer std, so this check is redundant for OE toolchains

Add new required build time deps on fribidi and imlib2

Changes are [1]

[1] https://github.com/ice-wm/icewm/releases/tag/2.3.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-06 20:57:44 -07:00
Bruce Mitchell 5f3f162145 makedumpfile: Bump srcrev
supports for kernel 5.10, prior to 1.6.9 release

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-06 20:56:59 -07:00
Romain Naour fee0672979 packagegroup-meta-oe: Add poke to packagegroup-meta-oe-devtools
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-06 12:26:05 -07:00
Romain Naour a0f8491b49 poke: add optional json-c dependency
From [1]:
"The poke machine-interface uses a protocol to communicate with
clients, which is based on JSON.  poke uses the json-c library to
parse and build JSON strings.
If this library is not found, poke will build without machine-interface
support."

[1] https://git.savannah.nongnu.org/cgit/poke.git/tree/DEPENDENCIES?h=releases/poke-1.2#n55

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-05 17:41:38 -07:00