Commit Graph

18333 Commits

Author SHA1 Message Date
Khem Raj 4cdd3b13d5 pidgin-sipe: Do not add native libdir to pkgconfig search path
This works fine until valgrind is installed on build host but its not
selected as option to build in recipe, configure wrongly pokes at
/usr/lib and sees valgrind there and enables it but only to fail in
compile time where it does not find valgrind.h in recipe sysroot, since
OE's build environment add right guardrails to pkgconfig, there is no
need to add build staging area to pkgconfig search path which turns out
to be wrong for cross builds anyway

Fixes
../../../pidgin-sipe-1.25.0/src/core/sipe-cert-crypto-nss.c:34:10: fatal error: 'valgrind.h' file not found
         ^~~~~~~~~~~~

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 99bc440104)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:10:03 -08:00
Kai Kang f7a7fce115 colord: fix installed-vs-shipped error
When multilib is enabled, tmpfiles.d is created in /usr/lib rather than
${libdir} which is /usr/lib64. It causes installed-vs-shipped error:

| ERROR: colord-1.4.4-r0 do_package: QA Issue: colord:
         Files/directories were installed but not shipped in any package:
|   /usr/lib/tmpfiles.d
|   /usr/lib/tmpfiles.d/colord.conf

Fix the path in FILES to fix the issue.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f147cbab5d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:07:50 -08:00
Roland Hieber f091dc42d1 openct: use upstream SRC_URI
The Debian pool URLs are not permanent, and the package is no longer
included in any active Debian release. It is also not available through
any of the default Debian snapshot mirrors. Instead of adding a new
Debian snapshot mirror, use the upstream URL directly.

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5265de84b3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:06:10 -08:00
Roland Hieber 197b47c450 fbset: use DEBIAN_MIRROR in SRC_URI
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 155e7d6b3d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:05:34 -08:00
Roland Hieber 817c4aeb33 liboop: use upstream SRC_URI
The Debian pool URLs are not permanent and the package might vanish as
soon as the version is no longer part of any Debian release. Use the
upstream URL directly.

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2e1a32a474)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:04:47 -08:00
Vyacheslav Yurkov 89d0acd967 python3-aiohttp: added missing RDEPENDs
aiohttp implicitly RDEPENDs on html, json, and socketserver modules,
which are part of python3 recipe. They can't be properly imported if
they are missing from RDEPENDS

Signed-off-by: Vyacheslav Yurkov <uvv.mail@gmail.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8e7c57bd8f)
[Fixup for Gatesgarth context]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:02:51 -08:00
Roland Hieber db892b5e62 lockfile-progs: use DEBIAN_MIRROR in SRC_URI
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7b8efbbd0f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:59:08 -08:00
Yi Zhao f5324e4cd8 ebtables: do not install /etc/ethertypes
The /etc/ethertypes is provided by netbase since 6.0[1].
Do not instal the file in ebtables, otherwise there would be a conflict:
Error: Transaction test error:
  file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64

[1] https://salsa.debian.org/md/netbase/-/commit/316680c6a2c3641b6abc76b3eebf88781f609d35

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit af6f068632)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:57:12 -08:00
Joe Slater d6d0ef5cae multipath-tools: fix error handling for udev_monitor_set_receive_buffer_size
Since systemd v246.5[1], udev_monitor_set_receive_buffer_size() will
return 0 or 1 if successful. We only need to check a negative value for
the failure.

[1] https://github.com/systemd/systemd-stable/commit/4dcae666889ae9469e4406c0bcaffadbc01c4f66
    https://github.com/systemd/systemd-stable/commit/fe9b92e566f837665cc06c82374e4e42f9295c99
    https://github.com/systemd/systemd-stable/commit/5dd4cc4b10daea5d2ba969425ba02d2098dd06a4

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 60a95ba16e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:55:33 -08:00
Stacy Gaikovaia 387f40ce80 nodejs: 12.19.0 -> 12.19.1
Uprev nodejs in order to fix CVE-2020-8277.
This CVE allows an attacker to trigger a DNS request for a host
of their choice, which could trigger a Denial of Service in
nodejs versions < 12.19.1.

See https://nvd.nist.gov/vuln/detail/CVE-2020-8277 for details.

CVE: CVE-2020-8277
Signed-off-by: Stacy Gaikovaia <Stacy.Gaikovaia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a440154082)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:53:13 -08:00
Zheng Ruoqin 992e09f09a php: CVE-2020-7069
Security Advisory

References
https://nvd.nist.gov/vuln/detail/CVE-2020-7069
https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fa80193468)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:47:08 -08:00
Zheng Ruoqin 09f5a2ac5a php: CVE-2020-7070
Security Advisory

References
https://nvd.nist.gov/vuln/detail/CVE-2020-7070
https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364
https://github.com/php/php-src/blob/master/main/php_variables.c

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit aff8a1fefb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:46:53 -08:00
Zheng Ruoqin 81d14a8635 samba: CVE-2020-14383 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit baee1ebeaf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:46:15 -08:00
Zheng Ruoqin 38beb6fe98 samba: CVE-2020-14318 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1d44b4c03d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:46:15 -08:00
Wang Mingyu d9911b087c zabbix: CVE-2020-15803 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15803

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d259144422)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:45:36 -08:00
Zang Ruochen 81874b2392 mcpp: Normalize the patch format of CVE
Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9301b77e32)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:44:53 -08:00
Armin Kuster dba54c19f8 Revert "gnome-calendar: update to 3.38.1, add libhandy 1.x support"
This change causes build failure:

 Found CMake: NO
 | Run-time dependency libhandy-1 found: NO (tried pkgconfig)
 |
 | ../gnome-calendar-3.38.1/meson.build:166:0: ERROR: Dependency "libhandy-1" not found, tried pkgconfig

 Gategarth Core version of libandy is 0.0.13 so this patch is puzzling

This reverts commit 46ac17595b.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-20 08:49:12 -08:00
Roland Hieber 1f4b2a1af5 pcsc-lite: provide pcsc-lite-lib-native explicitly for native build
Commits e2180b00b3 and 8edd760e66 added support for
native builds for the opensc and pcsc-lite recipes, but building
opensc-native fails after commit 40b3a51231 (2019-12-04,
"opensc: fix RDEPENDS in pcsc PACKAGECONFIG") with:

    ERROR: Required build target 'opensc-native' has no buildable providers.
    Missing or unbuildable dependency chain was: ['opensc-native', 'pcsc-lite-lib-native']

The commit in question is correct for target builds, but native builds
don't have packages, therefore there is no pcsc-lite-lib-native package
to depend on – the -lib part is also provided in pcsc-lite-native.

Ideally we would fix this in the opensc recipe. However, using syntax
like "PACKAGECONFIG_class-native[pcsc]" in the opensc recipe is
apparently not possible to overwrite the dependency for a native build,
and using RDEPENDS_remove has no effect either – apparently dependencies
from PACKAGECONFIG are added after RDEPENDS_remove is evaluated.
Therefore let pcsc-lite provide the missing package name for native
builds, even if fixing this unrelated package is not the most elegant
solution.

Fixes: 40b3a51231 (2019-12-04, "opensc: fix RDEPENDS in pcsc PACKAGECONFIG")
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-14 21:25:32 -08:00
Gianfranco a82e2fbdfa dlt-daemon: add upstream patch to fix CVE-2020-29394
More information on: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976228
| A buffer overflow in the dlt_filter_load function in dlt_common.c in
| dlt-daemon 2.8.5 (GENIVI Diagnostic Log and Trace) allows arbitrary
| code execution because fscanf is misused (no limit on the number of
| characters to be read in a format argument).

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-14 21:25:32 -08:00
viatsk 5e4601a3f9 tcpdump: Patch for CVE-2020-8037
Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-14 21:25:32 -08:00
Max Kellermann f6338892d9 php: remove the failing ${D}/${TMPDIR} code
Appending ${TMPDIR} to ${D} doesn't make any sense, because both are
absolute paths.  And additionally, the code fails:

 rmdir: failed to remove '/usr/src/oe/tmp-musl/work/core2-64-oe-linux-musl/php/7.1.9-r0/image//usr': Directory not empty

Signed-off-by: Max Kellermann <max.kellermann@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-14 21:25:32 -08:00
Yi Zhao f798436418 minifi-cpp: depend on nettle and lz4
Add nettle and lz4 to DEPENDS to make the minifi extension archive
support crypto and lz4.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-14 21:24:17 -08:00
Hongxu Jia 699e85e565 lvm2.inc: switch branch master to main
Keep sync with upstream

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-09 19:52:05 -08:00
Martin Jansa b9dcf17700 Revert "numactl: Remove the recipe"
This reverts commit e5d9133800.

It exists in oe-core/master, but not in oe-core/gatesgarth, so this shouldn't
be included in meta-oe/gatesgarth.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-05 09:00:37 -08:00
Armin Kuster ec9065c822 README: updated Maintainers list for Gatesgarth
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 12:32:44 -08:00
Leon Anavi 1204ed0a0e python3-ipython: Upgrade 7.18.1 -> 7.19.0
Upgrade to release 7.19.0:

- Fix to restore the ability to specify more than one extension
  using command line flags when using traitlets 5.0
- Docs docs formatting that make the install commands work on zsh
- Always display the last frame in tracebacks even if hidden with
  __traceback_hide__
- Avoid an issue where a callback can be registered multiple times.
- Avoid an issue in debugger mode where frames changes could be
  lost.
- Never hide the frames that invoke a debugger, even if marked as
  hidden by __traceback_hide__
- Fix calling the debugger in a recursive manner

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:10:16 -08:00
Leon Anavi 9610511f35 python3-tornado: Upgrade 6.0.4 -> 6.1
Upgrade to release 6.1:

- Windows support has been improved. Tornado is now compatible
  with the proactor event loop (which became the default in Python
  3.8) by automatically falling back to running a selector in a
  second thread. This means that it is no longer necessary to
  explicitly configure a selector event loop, although doing so
  may improve performance. This does not change the fact that
  Tornado is significantly less scalable on Windows than on other
  platforms.
- Binary wheels are now provided for Windows, MacOS, and Linux
  (amd64 and arm64).
- This is the last release of Tornado to support Python 3.5.
  Future versions will require Python 3.6 or newer

License-Update:  Checksum change, lisense remains "Apache-2.0"

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:10:11 -08:00
Leon Anavi b32e97a451 python3-kiwisolver: Upgrade 1.3.0 -> 1.3.1
Upgrade to release 1.3.1:

- allow to avoid linking against VC2014_1 on windows
- do not mark move constructor / assignment operator of expression
  as noexcept. This is to circumvent a suspected bug in the GCC
  compiler in the manylinux1 image.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:10:02 -08:00
Mark Jonas 7fe65b887e python3-pyinotify: Add missing ctypes dependency
pyinotify 0.9.6 has a runtime dependency on ctypes.
See https://github.com/seb-m/pyinotify/blob/0.9.6/python3/pyinotify.py#L82

pyinotify prefers ctypes to inotify_syscalls. The latter is only a
fallback.
See https://github.com/seb-m/pyinotify/blob/0.9.6/python3/pyinotify.py#L129

Signed-off-by: Mark Jonas <toertel@gmail.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:57 -08:00
Leon Anavi 563033d0a1 python3-langtable: Upgrade 0.0.53 -> 0.0.54
Upgrade to release 0.0.54:

- Add list_common_languages derived from gnome-control-center

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:53 -08:00
Leon Anavi c808f9086b python3-dateparser: Upgrade 0.7.6 -> 1.0.0
Upgrade to release 1.0.0:

- Drop support for Python 2.7 and pypy
- Now DateDataParser.get_date_data() returns a DateData object
  instead of a dict
- From now wrong settings are not silenced and raise
  SettingValidationError
- Now dateparser.parse() is deterministic and doesn't try previous
  locales. Also, DateDataParser.get_date_data() doesn't try the
  previous locales by default
- Remove the 'base-formats' parser
- Extract the 'no-spaces-time' parser from the 'absolute-time'
  parser and make it an optional parser
- Remove numeral_translation_data
- Remove the undocumented SKIP_TOKENS_PARSER and FUZZY settings
- Remove support for using strings in date_formats
- The undocumented ExactLanguageSearch class has been moved to the
  private scope and some internal methods have changed
- Changes in dateparser.utils: normalize_unicode() doesn't accept
  bytes as input and convert_to_unicode has been deprecated
- Add Python 3.9 support
- Detect hours separated with a period/dot
- Add support for "decade"
- Add support for the hijri calendar in Python ≥ 3.6
- New logo!
- Improve the README and docs
- Fix the "calendars" extra
- Fix leap years when PREFER_DATES_FROM is set
- Fix STRICT_PARSING setting in no-spaces-time parser
- Consider RETURN_AS_TIME_PERIOD setting for relative-time parser
- Parse the 24hr time format with meridian info
- Other small improvements

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:47 -08:00
Leon Anavi 2ee827ff12 python3-regex: Upgrade 2020.10.23 -> 2020.10.28
Upgrade to release 2020.10.28:

- Added Apache 2.0 licence file to the files in the git repository

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:43 -08:00
Leon Anavi fd72a9d1dc python3-aiofiles: Upgrade 0.5.0 -> 0.6.0
Upgrade to release 0.6.0:

- aiofiles is now tested on ppc64le.
- Added name and mode properties to async file objects.
- Fixed a DeprecationWarning internally.
- Python 3.9 support and tests.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:39 -08:00
Leon Anavi 031c9344d4 python3-aiohttp: Upgrade 3.7.1 -> 3.7.2
Upgrade to release 3.7.2:

- Fixed static files handling for loops without .sendfile()
  support

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:35 -08:00
Leon Anavi c6965d9460 python3-kiwisolver: Upgrade 1.2.0 -> 1.3.0
Upgrade to release 1.3.0:

- add c++ benchmarks and run them on CIs
- modernize the c++ code by using more c++11 features
- introduce move semantic in some c++ constructors to improve
  performances
- add support for Python 3.9

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:31 -08:00
Leon Anavi 551e72b9d3 python3-sh: Upgrade 1.14.0 -> 1.14.1
Upgrade to release 1.14.1:

- bugfix where setting _ok_code to not include 0, but 0 was the
  exit code

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:26 -08:00
Leon Anavi 3a7670013b python3-markdown: Upgrade 3.3.2 -> 3.3.3
Upgrade to release 3.3.3:

- Unify all block-level tags
- Fix issue where some empty elements would have text rendered
  as None when using md_in_html
- Avoid catastrophic backtracking in hr regex
- Fix hr HTML handling

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:09:21 -08:00
Leon Anavi 9239ab9812 python3-pyexpect: Upgrade 1.0.20 -> 1.0.21
Upgrade to release 1.0.21:

- Ensure .includes() handles a generator correcly
- Also check python 3.8 and 3.9
- Ignore tox directory

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:08:50 -08:00
Leon Anavi 2506cf2d47 python3-cryptography-vectors: Upgrade 3.1.1 -> 3.2
Upgrade to release 3.2:

- SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more
  constant time, to protect against Bleichenbacher vulnerabilities.
  Due to limitations imposed by our API, we cannot completely
  mitigate this vulnerability and a future release will contain a
  new API which is designed to be resilient to these for contexts
  where it is required. Credit to Hubert Kario for reporting the
  issue. CVE-2020-25659
- Support for OpenSSL 1.0.2 has been removed. Users on older
  version of OpenSSL will need to upgrade.
- Added basic support for PKCS7 signing (including SMIME) via
  :class:`~cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder`.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:08:45 -08:00
Leon Anavi 19cb4a8e3a python3-luma-oled: Upgrade 3.6.0 -> 3.7.0
Upgrade to release 3.7.0:

- Drop support for Python 3.5, only 3.6 or newer is supported now
- Add support for SSD1351 128x96 display
- Pin luma.core to 1.x.y line only, in anticipation of performance
  improvements in upcoming major release

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 11:08:21 -08:00
Khem Raj e051b0f08b kernel-selftest: Disable vm packageconfig for riscv
it now needs libhugetlbfs which is not ported to riscv yet

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 09:57:18 -08:00
Khem Raj 517998abcd geoclue: Use git fetcher
gitlab archives are not consistent and can be regenerated as well like
github, its therefore better to use git fetcher directly

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:42:27 -08:00
Khem Raj a57f2a5e97 networkd-dispatcher: Upgrade to 2.1
Drop gitlab archives and use git fetcher directly instead

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:41:03 -08:00
Khem Raj 5752f9954e ibus: Update to 1.5.3 plus fix for vala 0.50
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Khem Raj 33f7a3b3a1 mdbus2: Fix build with vala 0.50
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Khem Raj fbe5bc9fd6 remmina: Update to 1.4.8
Use git fetcher instead of gitlab archives

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Khem Raj b6740733bc musl-nscd: Update to latest
Get fix
https://github.com/pikhq/musl-nscd/commit/ce81a80e30c2041d8260115fac86831ff64c354a

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Yi Zhao dccecd1411 quagga: unify volatiles file name
Make the volatiles file name starts with digital.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Jasper Orschulko 24a8d440c5 upgrade and de-blacklist nanopb recipe
The current nanopb recipe is blacklisted due to python2 dependencies.
However, newer releases of nanopb use python3 by default.

This commit updates the used nanopb version to 0.4.3 and removes the
recipe from the blacklist.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Randy Witt e5d9133800 numactl: Remove the recipe
The numactl recipe now exists in openembedded-core, as of commit
dda815792b0939b2f233aa3ec7c140fc114a37d1 to oe-core. It was moved to
facilitate the requirement rt-tests now has on libnuma.

Signed-off-by: Randy Witt <randy.e.witt@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00