Commit Graph

18547 Commits

Author SHA1 Message Date
Qi.Chen@windriver.com
73dd8a4c83 python3-requests: upgrade to 2.25.0
The License checksum changes but the license remains the same, as
the change is only about copying apache2 license contents there.

This upgrade also solves the following issue on target.

root@qemux86-64:~# python3 -c 'import requests'
/usr/lib64/python3.9/site-packages/requests/_init_.py:89: RequestsDependencyWarning: urllib3 (1.26.2) or chardet (3.0.4) doesn't match a supported version!
warnings.warn("urllib3 ({}) or chardet ({}) doesn't match a supported "

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zheng Ruoqin
fa80193468 php: CVE-2020-7069
Security Advisory

References
https://nvd.nist.gov/vuln/detail/CVE-2020-7069
https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zheng Ruoqin
aff8a1fefb php: CVE-2020-7070
Security Advisory

References
https://nvd.nist.gov/vuln/detail/CVE-2020-7070
https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364
https://github.com/php/php-src/blob/master/main/php_variables.c

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zheng Ruoqin
baee1ebeaf samba: CVE-2020-14383 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zheng Ruoqin
1d44b4c03d samba: CVE-2020-14318 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Wang Mingyu
d259144422 zabbix: CVE-2020-15803 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15803

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zang Ruochen
9301b77e32 mcpp: Normalize the patch format of CVE
Because CVE-2019-14274.patch is included in ice-mcpp.patch, the cve-check-tool fails to correctly judge the CVE of the OSS. CVE-2019-14274.patch is separated from ice-mcpp.patch to fix the problem.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-14 10:47:56 -08:00
Khem Raj
9b4826fb52 redis: Update to 6.0.9
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-14 10:44:40 -08:00
Roland Hieber
37ffd25f88 openct: allow building as native package
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-14 10:44:35 -08:00
Roland Hieber
b79ab49b3e openct: clean up do_install
* Use sysconfdir and nonarch_libdir instead of hard-coded paths, and be
  consistent with the slashes after ${D}
* Install udev rules into /usr/lib/udev instead of /etc/udev so they can
  be overwritten in /etc, which has higher priority. Also use /usr/lib
  instead of /lib, latter of which isn't searched by udev [1].
* Don't create /usr/lib/udev, it is already created by install -D later
  with the default umask, which is fine
* Make use of do_install[cleandirs]

[1]: https://www.freedesktop.org/software/systemd/man/udev.html

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-13 22:05:00 -08:00
Roland Hieber
2757d6d1f6 openct: remove lines that resulted in a no-op
Also remove /run/openct/status from FILES_${PN}, which isn't being
created at all by the recipe – even openct's configure script references
it as /var/run/openct/.

Fixes: 387824f176 (2016-02-28, "openct: Fix rootfs creation errors")
Fixes: 8e61ff98e9 (2019-11-21, "openct: merge do_install and do_install_append")
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-13 22:05:00 -08:00
Khem Raj
62c2f4a48a networkmanager: Fix reallocarray check in meson and configure
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-12 16:41:59 -08:00
Khem Raj
4a171790a6 sdbus-c++-libsystemd: Fix reallocarray check in meson
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-12 16:40:13 -08:00
Khem Raj
99bc440104 pidgin-sipe: Do not add native libdir to pkgconfig search path
This works fine until valgrind is installed on build host but its not
selected as option to build in recipe, configure wrongly pokes at
/usr/lib and sees valgrind there and enables it but only to fail in
compile time where it does not find valgrind.h in recipe sysroot, since
OE's build environment add right guardrails to pkgconfig, there is no
need to add build staging area to pkgconfig search path which turns out
to be wrong for cross builds anyway

Fixes
../../../pidgin-sipe-1.25.0/src/core/sipe-cert-crypto-nss.c:34:10: fatal error: 'valgrind.h' file not found
         ^~~~~~~~~~~~

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-12 14:31:15 -08:00
Trevor Woerner
936f2380bb glmark2: revert to previous behaviour
- use "drm-gles2" as the default PACKAGECONFIG outside of any defined
  DISTRO_FEATURES
- use a version string that includes the full date of the latest git change
  (not just: <year>.<month>)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-10 22:33:58 -08:00
Robert Karszniewicz
38ef5f5bf0 firmwared: add recipe
This program is needed for loading external firmware via Linux' fallback
mechanism.

Signed-off-by: Robert Karszniewicz <r.karszniewicz@phytec.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-09 10:14:57 -08:00
Alexander Vickberg
6f1139a717 mbedtls: upgrade to 2.24.0
Download archives are no longer updated so fetch from Github. Add build
fix from upstream. The file LICENSE now contains the full Apache 2.0
license text.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-09 10:14:57 -08:00
Alexander Vickberg
fa8cbd8817 libwebsockets: upgrade to 4.1.6
Event lib support is now built into dynamically loaded plugins so
package them separately and include them in RDEPENDS if enabled.

Building minimal-examples with generated SDK failed due to cmake
configuration had static enabled but not included into SDK. Solve
this by adding static as PACKAGECONFIG option and adding
${PN}-staticdev to RDEPENDS_${PN}-dev if enabled.

Remove CFLAGS_append with -Wno-error added for fixing building with
Os. This looks like it's fixed in upstream.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
2020-12-08 10:38:57 -08:00
Wang Mingyu
6f803d0e8f ser2net: 4.2.0 -> 4.3.0
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
2020-12-08 10:38:57 -08:00
Thomas Perrot
64bc3a36e4 openocd: disable the support of ccache
Otherwise, when ccache is enabled the following error occurs, by adding
CCACHE_DISABLE = "1" in the recipe this is avoided.

| No installed jimsh or tclsh, building local bootstrap jimsh0
| Host System...x86_64-pc-linux-gnu
| Build System...x86_64-pc-linux-gnu
| C compiler...ccache ccache gcc  -isystem/src/build/tmp/work/x86_64-linux/openocd-native/0.10+gitrAUTOINC+ded6799025-r0/recipe-sysroot-native/usr/include -O2 -pipe
| C++ compiler...ccache ccache g++  -isystem/src/build/tmp/work/x86_64-linux/openocd-native/0.10+gitrAUTOINC+ded6799025-r0/recipe-sysroot-native/usr/include -O2 -pipe
| Build C compiler...ccache gcc
| Checking for stdlib.h...not found
| Error: Compiler does not work. See config.log
| Try: 'configure --help' for options
| configure: error: ./configure.gnu failed for jimtcl
| WARNING: exit code 1 from a shell command.
|

Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
2020-12-08 10:38:57 -08:00
Fabio Berton
646a9ebf6d linuxconsole: Add recipe for version 1.7.0
Add linuxconsole and inputattach-config recipes. The inputattach-config
recipe is intend to use as machine configuration file for inputattach.

Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
2020-12-08 10:38:57 -08:00
Michael Vetter
7474478d41 jasper: upgrade 2.0.22 -> 2.0.23
Fix CVE-2020-27828, heap-overflow in cp_create() in jpc_enc.c
2020-12-08 10:38:57 -08:00
Fabio Berton
becf870ee9 beep: Add recipe for version 1.2.2
Based on this recipe:
https://github.com/kraj/meta-slugos/blob/master/recipes-slugos/beep/beep_1.2.2.bb

Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
2020-12-08 10:38:57 -08:00
Wang Mingyu
2bbafdd7a0 gensio: 2.1.4 -> 2.2.0
0001-Modify-parameter-of-function-sctp_gensio_alloc.patch
added to resolve compile error.

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-07 22:49:09 -08:00
Kai Kang
f147cbab5d colord: fix installed-vs-shipped error
When multilib is enabled, tmpfiles.d is created in /usr/lib rather than
${libdir} which is /usr/lib64. It causes installed-vs-shipped error:

| ERROR: colord-1.4.4-r0 do_package: QA Issue: colord:
         Files/directories were installed but not shipped in any package:
|   /usr/lib/tmpfiles.d
|   /usr/lib/tmpfiles.d/colord.conf

Fix the path in FILES to fix the issue.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-07 22:49:09 -08:00
Roland Hieber
5265de84b3 openct: use upstream SRC_URI
The Debian pool URLs are not permanent, and the package is no longer
included in any active Debian release. It is also not available through
any of the default Debian snapshot mirrors. Instead of adding a new
Debian snapshot mirror, use the upstream URL directly.

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-07 21:55:47 -08:00
Roland Hieber
2e1a32a474 liboop: use upstream SRC_URI
The Debian pool URLs are not permanent and the package might vanish as
soon as the version is no longer part of any Debian release. Use the
upstream URL directly.

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-07 21:55:47 -08:00
Roland Hieber
155e7d6b3d fbset: use DEBIAN_MIRROR in SRC_URI
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-07 21:55:47 -08:00
Roland Hieber
7b8efbbd0f lockfile-progs: use DEBIAN_MIRROR in SRC_URI
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-07 21:55:47 -08:00
Vyacheslav Yurkov
8e7c57bd8f python3-aiohttp: added missing RDEPENDs
aiohttp implicitly RDEPENDs on html, json, and socketserver modules,
which are part of python3 recipe. They can't be properly imported if
they are missing from RDEPENDS

Signed-off-by: Vyacheslav Yurkov <uvv.mail@gmail.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-07 11:19:28 -08:00
Khem Raj
2beb56814f packagegroup-meta-python: Remove packages moved to core
These packages are not in meta-python anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Acked-by: Tim Orling <ticotimo@gmail.com>
2020-12-03 22:32:56 -08:00
Zang Ruochen
ed9c6f8022 nanopb: upgrade 0.4.3 -> 0.4.4
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Trevor Woerner
9fe11cc8a9 glmark2: add support for dispmanx
Upstream glmark2 includes support for running glmark2 on a RaspberryPi via the
dispmanx interface, as is provided by "userland".

The build depends on x11, but this is a quirk of the upstream sources. One
can easily build a minimal image without any x11/wayland on which to run
dispmanx applications directly (including glmark2).

NOTE: unlike with other flavours, one can only build the dispmanx-eglv2
      flavour on its own (this is a constraint of the glmark2 build)

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Trevor Woerner
5958cfcf99 glmark2: update to latest
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Trevor Woerner
09008b389d glmark2: update information
According to https://launchpad.net/glmark2 the preferred "home" and bugtracker
for the project are on github.

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Zang Ruochen
db08067ebd satyr: upgrade 0.31 -> 0.35
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Zang Ruochen
9099626c21 pugixml: upgrade 1.10 -> 1.11
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Zang Ruochen
1df71a454c opensc: upgrade 0.20.0 -> 0.20.1
-License-Update: The address is updated as follows
You should have received a copy of the GNU Lesser General Public
License along with this library; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Zang Ruochen
df24d95793 hidapi: upgrade 0.10.0 -> 0.10.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Zang Ruochen
2df804d55a fmt: upgrade 7.1.2 -> 7.1.3
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Zang Ruochen
a1a088e893 dialog: upgrade 1.3-20200327 -> 1.3-20201126
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 22:32:56 -08:00
Senthil Selvaganesan
3a71d93ee5 fcgiwrap: add recipe
fcgiwrap is a simple server for running CGI applications over FastCGI.
It hopes to provide clean CGI support to Nginx and other web servers
that may need it. Homepage: https://github.com/gnosek/fcgiwrap.

Signed-off-by: Senthil Selvaganesan <SenthilKumaran.Selvaganesan@garmin.com>
Signed-off-by: Joshua Watt <Joshua.Watt@garmin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 14:49:27 -08:00
Philip Balister
010cd128e7 spdlog: Fix recipe so other recipes can use spdlog with external fmt.
* I enabled the shared library option to eliminate linker issues
   with a package that used spdlog.
 * Edited the tweak.h file so programs use the external fmt library
   headers, not the oners in spdlog.

Signed-off-by: Philip Balister <philip@opensdr.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 14:49:27 -08:00
Luca Boccassi
ca5977699e dbus-broker: upgrade 24 -> 25
See full changelog https://github.com/bus1/dbus-broker/releases/tag/v25

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 14:49:27 -08:00
Martin Jansa
4678e22475 nanopb: move to dynamic-layers
* depends on python3-protobuf from meta-python:
* fixes:
  ERROR: Nothing RPROVIDES 'python3-protobuf' (but meta-oe/recipes-devtools/nanopb/nanopb_0.4.3.bb RDEPENDS on or otherwise requires it)
  NOTE: Runtime target 'python3-protobuf' is unbuildable, removing...
  Missing or unbuildable dependency chain was: ['python3-protobuf']
  ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
  Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'nanopb', 'python3-protobuf']

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-02 11:21:18 -08:00
Gianfranco
a039c0ed2c dlt-daemon: add upstream patch to fix CVE-2020-29394
More information on: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976228
| A buffer overflow in the dlt_filter_load function in dlt_common.c in
| dlt-daemon 2.8.5 (GENIVI Diagnostic Log and Trace) allows arbitrary
| code execution because fscanf is misused (no limit on the number of
| characters to be read in a format argument).

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-02 11:21:18 -08:00
Roland Hieber
fb5e3d44d0 pcsc-lite: provide pcsc-lite-lib-native explicitly for native build
Commits e2180b00b3 and 8edd760e66 added support for
native builds for the opensc and pcsc-lite recipes, but building
opensc-native fails after commit 40b3a51231 (2019-12-04,
"opensc: fix RDEPENDS in pcsc PACKAGECONFIG") with:

    ERROR: Required build target 'opensc-native' has no buildable providers.
    Missing or unbuildable dependency chain was: ['opensc-native', 'pcsc-lite-lib-native']

The commit in question is correct for target builds, but native builds
don't have packages, therefore there is no pcsc-lite-lib-native package
to depend on – the -lib part is also provided in pcsc-lite-native.

Ideally we would fix this in the opensc recipe. However, using syntax
like "PACKAGECONFIG_class-native[pcsc]" in the opensc recipe is
apparently not possible to overwrite the dependency for a native build,
and using RDEPENDS_remove has no effect either – apparently dependencies
from PACKAGECONFIG are added after RDEPENDS_remove is evaluated.
Therefore let pcsc-lite provide the missing package name for native
builds, even if fixing this unrelated package is not the most elegant
solution.

Fixes: 40b3a51231 (2019-12-04, "opensc: fix RDEPENDS in pcsc PACKAGECONFIG")
Signed-off-by: Roland Hieber <rhi@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-01 14:56:49 -08:00
zhengruoqin
a6d9a4adb8 libconfig-autoconf-perl: upgrade 0.318 -> 0.319
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-30 22:42:20 -08:00
zhengruoqin
139eeb4f74 zchunk: upgrade 1.1.6 -> 1.1.7
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-30 22:42:20 -08:00
zhengruoqin
03d68a3ce1 xserver-xorg-cvt-native: upgrade 1.20.5 -> 1.20.9
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-30 22:42:20 -08:00