Commit Graph

105 Commits

Author SHA1 Message Date
Armin Kuster 3434c737b6 mariadb: update to 10.4.20
Source: mariadb.org
MR: 109670, 110757, 110768
Type: Security Fix
Disposition: Backport from mariadb
ChangeID: 82a82ba3623ff39ca17443d0117d36bcee73e612
Description:

LTS version

https://mariadb.com/kb/en/mariadb-10420-release-notes/
CVE-2021-2166: MariaDB 10.4.19
CVE-2021-2154: MariaDB 10.4.19
CVE-2021-27928: MariaDB 10.4.18

Signed-off-by: Armin kuster <akuster@mvista.com>
2021-07-21 09:25:14 -07:00
Armin kuster 10082fce3b postgresql: update to 12.7
Source: MontaVista Software, LLC
MR: 111582, 111965, 111974, 110084
Type: Security Fix
Disposition: Backport from postgres.org
ChangeID: f1e8c58bedd5dd60404e3a0eb120888ad83fdc42
Description:

Bug fix only update.
https://www.postgresql.org/docs/12/release-12-7.html

LIC_FILES_CHKSUM changed do to yr update

Includes these CVEs:
CVE-2021-32027
CVE-2021-32028
CVE-2021-32029

12.6:
CVE-2021-3393

Signed-off-by: Armin kuster <akuster@mvista.com>
2021-07-17 07:42:33 -07:00
Khem Raj 2b7f9d4b71 postgresql: Inherit python3targetconfig
it now ends up searching native python shared libraries and tries to
link with it and fails on non-host architectures

recipe-sysroot-native/usr/lib/libpython3.9.so: file not recognized: file format not recognized
collect2: error: ld returned 1 exit status

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c499aaeef8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 572d414826)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-19 07:17:12 -08:00
Dan Murphy 74c1298dfc mariadb: Fix 64bit builds if pam is enabled
Fix the installation of the pam.so for 64bit builds.
This is an indirect backport of commit

8fa0a3ace6 ("mariadb: upgrade to 10.5.4")

from the master branch.

Signed-off-by: Dan Murphy <dmurphy@ti.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-29 21:10:07 -08:00
Robert Joslyn 1f1a56f79f postgresql: Update to 12.5
Fixes the following CVEs:

CVE-2020-25694
CVE-2020-25695
CVE-2020-25696

Full release notes at:
https://www.postgresql.org/docs/12/release-12-5.html

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 6ff4bd4f34)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-18 08:21:36 -08:00
Armin Kuster aecc12c22e mariadb: update to 10.4.17 for cve fixes
Source: mariadb.org
MR: 107836, 107837, 107838, 107839, 107840, 107852, 106414, 106414, 107864, 107876, 107888
Type: Security Fix
Disposition: Backport from mariadb.org
ChangeID: 75fb83ced15990b94659af6e107c063d288cb037
Description:

refresh several patches
Drop 0001-Fix-build-breakage-from-lock_guard-error-6161.patch as fix included in update

Bugfix only update including these cves:

10.4.13
CVE-2020-2752
CVE-2020-2812
CVE-2020-2814
CVE-2020-2760
CVE-2020-13249

10.4.15
CVE-2020-15180

10.4.16
CVE-2020-14812
CVE-2020-14765
CVE-2020-14776
CVE-2020-14789
CVE-2020-28912 (MDEV-24040)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-12 12:45:12 -08:00
Robert Joslyn 0e752b8468 postgresql: Update to 12.4
createlang, droplang, and the tsearch2 module were all removed in the
10.0 release. More details are in the release notes:
https://www.postgresql.org/docs/10/release-10.html

The update from 12.3 to 12.4 is a minor release with bug and security
fixes:
https://www.postgresql.org/docs/current/release-12-4.html

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-19 11:21:19 -07:00
Wang Mingyu 666cc4c332 postgresql: 12.2 -> 12.3
0001-Use-pkg-config-for-libxml2-detection.patch
removed since it is not available in 12.3

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 04dc1ffc16)
[Bug fix only update]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:00:22 -07:00
Khem Raj e8214f1113 rocksdb: Link with pthreads on riscv
Fixes
 librocksdb.so.6.6.4: undefined reference to `__atomic_compare_exchange_1'
collect2: error: ld returned 1 exit status

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-21 22:52:58 -07:00
Mingli Yu 4ebfa9afa4 mariadb: clean the empty /lib dir
When usrmerge is enabled in DISTRO_FEATURES, there
comes below error:
ERROR: mariadb-10.4.12-r0 do_package_qa: QA Issue: mariadb-leftovers package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge]
ERROR: mariadb-10.4.12-r0 do_package_qa: QA run found fatal errors. Please consider fixing them.

It is because empty /lib dir exists in mariadb-leftovers
as below:
 $ rpm -qpl mariadb-leftovers-10.4.12-r0.core2_64.rpm |grep ^/lib
 /lib

Considering the empty /lib dir is introduced when pam
is enabled in DISTRO_FEATURES, so remove the empty /lib
dir when pam is enabled to fix the above error.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-16 08:43:06 -07:00
Mingli Yu 9cfdcdda1b mariadb: Upgrade to 10.4.12
* Fixes for the following security vulnerabilities:
  CVE-2020-2574
  CVE-2020-7221

* Rework fix-arm-atomic.patch to remove fuzz warnings

* Fix the warning when pam is enabled in DISTRO_FEATURES:
  WARNING: mariadb-10.4.12-r0 do_package_qa: QA Issue: mariadb-dbg: found library in wrong location: /lib/security/.debug/pam_user_map.so
  mariadb-leftovers: found library in wrong location: /lib/security/pam_user_map.so [libdir]

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-09 21:05:59 -07:00
Khem Raj 42676e9501 rocksdb: Fix build on platforms not having all atomic intrinsics
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18 15:33:49 -07:00
Wang Mingyu 6adacfcdbb rocksdb: upgrade 6.5.2 -> 6.6.4
0001-Fix-build-breakage-from-lock_guard-error-6161.patch
removed since it is included in 6.6.4

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-17 19:46:35 -07:00
Wang Mingyu 99793bee6b postgresql: 12.1 -> 12.2
-License-Update: Copyright year updated to 2020.

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-13 21:27:53 -07:00
Changqing Li d178745cbf conf/layer.conf: add BBFILES_DYNAMIC and dynamic layers
some recipes under meta-oe have dependency on meta-python,
and test_world of yocto-check-layer will failed with error
like:

ERROR: test_world (common.CommonCheckLayer)
ERROR: Nothing PROVIDES 'python3-pytoml-native' (but
/meta-openembedded/meta-oe/recipes-extended/mozjs/mozjs_60.9.0.bb
DEPENDS on or otherwise requires it). Close matches:
  python3-numpy-native
  python3-pycairo-native
  python3-rpm-native
ERROR: Required build target 'meta-world-pkgdata' has no buildable
providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata',
'mozjs', 'python3-pytoml-native']

fix by make these recipes only active when identified layers are
present

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-11 08:58:57 -07:00
Jeremy A. Puhlman c90be40eb9 mariadb: Add pam_auth to server package.
When pam is enabled, the pam plugin in pulled into the
server package but not the auth tool which results in
following error on boot:

Starting to install database for mariadb
chown: cannot access '/usr/lib/plugin/auth_pam_tool_dir': No such file
or directory
Cannot change ownership of the '/usr/lib/plugin/auth_pam_tool_dir'
directory
 to the 'mysql' user. Check that you have the necessary permissions and
try again.

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-18 18:17:20 -08:00
Khem Raj 46951201fc postgresql: Add python3 to depends
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-24 09:25:34 -08:00
Vincent Prince f2b84ddfc5 mongodb: bump version to r4.2.2
Signed-off-by: Vincent Prince <vincent.prince.fr@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-23 14:16:25 -08:00
Khem Raj e4a2593a21 recipes: Replace using BBPATH with BBFILE_COLLECTIONS for meta-python2 check
BBPATH check actually does not work

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22 19:21:39 -08:00
Khem Raj 8c0c7f0a37 recipes: Turn inherit classes from meta-py2 to conditional constructs
helps parsing without meta-py2 in mix

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22 14:20:35 -08:00
Khem Raj e47f8dfd83 mysql-python: Enable only when meta-py2 is present
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22 09:56:35 -08:00
Khem Raj 5057746583 meta-oe: Remove using python2
This change makes the parsing go though, we still might have build
issues, which will be reported in world builds seprately

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22 09:56:34 -08:00
Sumit Garg 0e18982b1a mariadb: fix library LZ4 lookup
While cross-compiling mariadb package it tries to link lz4 library
present in the target sysroot and if not found it tries to link host
lz4 library which is incorrect leading to linker errors. So fix that
via restricting lz4 library lookup to target sysroot only.

Signed-off-by: Sumit Garg <sumit.garg@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-13 18:34:32 -08:00
Khem Raj b21b5d3c6f rocksdb: Disable Werror
Using newer compilers e.g. gcc10/clang10 it spews new warnings so its
better to disable warning as errors for now

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-11 08:39:34 -08:00
Robert Yang f88060d8a6 rocksdb: Fix compile error for DEBUG_BUILD
Fixed do_compile error when DEBUG_BUILD = "1":
db/write_thread.cc:183:14: error: 'state' may be used uninitialized in this function [-Werror=maybe-uninitialized]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-09 14:05:37 -08:00
Khem Raj 8107206163 mariadb: Upgrade to 10.4.11
Backport a rocksdb patch to fix clang error
Refresh existing patches as needed
Switch SRC_URI to downloads.mariadb.org since archive.mariadb.org is too
slow if no mirrors are used

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-29 10:32:10 -08:00
Khem Raj 8b80ce4fdd rocksdb: Upgrade to 6.5.2
Backport an upstream patch to fix build
Delete patches which are either upstreamed or not required

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-29 10:32:10 -08:00
Wang Mingyu 287625a640 postgresql: 12.0 -> 12.1
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-05 23:01:06 -08:00
Alex Kiernan 661d7dea5a leveldb: Upgrade 1.20 -> 1.22
Upstream has moved to cmake, so drop the build patches which are no
longer relevant. Add run-ptest and PACKAGECONFIG support.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-24 07:18:11 -08:00
Kai Kang b69e4d8b2e mariadb: replace dependency readline with libedit
Because readline changed its license to GPLv3 from version 6.0, if
build mariadb for distribution, it skips readline and turns to libedit.
If no libedit available, it uses bundled readline in the source code
finally. There is readline 8.0 in oe-core, so remove dependency readline
and use libedit instead.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-20 06:57:27 -08:00
Zheng Ruoqin 0e88ca24d6 postgresql: upgrade 11.5 -> 12.0
Update 0001-Use-pkg-config-for-libxml2-detection.patch for new version.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-07 17:43:44 -08:00
Zheng Ruoqin bf561c4d6c mariadb: upgrade 10.3.16 -> 10.3.18
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-07 17:43:44 -08:00
Christophe PRIOUZEAU f29988781f postgresql: Clarify BSD license variant
The License of postgresql is BSD-0-Clause.

Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25 10:29:51 -07:00
Khem Raj 31161b5fee mongodb: Turn system libpcre support into packageconfig
when libpcre is built with clang and mongodb with gcc then they dont
link well, in such cases its better to use in-tree pcre, this paves a
way to achieve that if needed

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-08 00:54:56 -07:00
Denys Dmytriyenko 35a85e1f78 mariadb: update SRC_URI to use archive.mariadb.org
archive.mariadb.org does not go 404 on releases over time

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-05 09:53:30 -07:00
Khem Raj 1458e86911 mongodb: Remove non building arches from COMPATIBLE_HOST
c++17 is default now so we don't need to edit out c++11 options

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-25 11:58:25 -07:00
Khem Raj bf0c72662f mongodb: Fix build on musl/aarch64
one impl of strerror_r is glibc specific, therefore check for __GLIBC__
also before using it

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-23 18:35:16 -07:00
Vincent Prince 1849429a79 mongodb: bump to version 4.2.0+git18ce5c9
MongoDB v4.2.0 adds python3 support that is needed by scons upgrade [44f303b scons: inherit python3native].
 - mongodb git commit 18ce5c9 was needed to fix https://jira.mongodb.org/browse/SERVER-42787
 - Add PREFIX and prefix to scons environment to fix unknown variable check (SConstruct#L1073)
 - fix musl compilation (strerror_r)
 - Remove compatibility for clang/x86 due to missing "Hardware interference size"
 - Previous patches are refreshed

Signed-off-by: Vincent Prince <vincent.prince.external@saftbatteries.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-22 08:13:17 -07:00
Kai Kang 22486241fd mariadb: fix file conflictions when multilib enabled
When multilib is enabled, it complains file conflictions of
/usr/bin/mysql_install_db and /usr/bin/mysqld_safe.

Inherit multilib_script to solve the issues.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-04 08:56:30 -07:00
Changqing Li eb2b608cf9 postgresql: 11.4 -> 11.5
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-02 12:52:45 -07:00
Vincent Prince a6043b70a8 mongodb: add mongo shell as a PACKAGECONF option
Signed-off-by: Vincent Prince <vincent.prince.fr@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-11 08:58:05 -07:00
Zang Ruochen 48e7943e85 postgresql: upgrade 11.3 -> 11.4
-Upgrade from postgresql_11.3.bb to postgresql_11.4.bb.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Hongxu Jia a2597811c9 mongodb: add to PNBLACKLIST
Since commit [44f303b scons: inherit python3native] applied in oe-core,
but mongodb v4.0 requires python2 to build

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-25 14:21:48 -07:00
Mingli Yu 52a326728a mariadb: Upgrade to 10.3.16
License-Update:
The address of Free Software Foundation updated

Bug fixes:
 MDEV-19490: show tables fails when selecting the information_schema database
 MDEV-19541: InnoDB crashes when trying to recover a corrupted page

More details check:
 https://jira.mariadb.org/browse/MDEV-19490
 https://jira.mariadb.org/browse/MDEV-19541

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-17 08:17:12 -07:00
Pascal Bach caa50b113e rocksdb: 5.18.3 -> 6.0.2
Also add support for gflags as these are enabled by default
and recipes are available in meta-oe. They can still be disabled via
PACKAGECONFIG.

zstd is also added as an PACKAGECONFIG but currently the zstd recipe is not in
meta-oe so it stays disabled for the moment.

This also includes a patch that fixes GCC9 compatibility, it's currently submitted
upstream but not yet accepted due to style issues.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Hongxu Jia 6a160e340d postgresql: improve reproducibility
- Make pg_config not record var-CC, var-CFLAGS, and configure
  which contains build paths

- Split pgxs in which Makefile.global contains build path from
  package postgresql to postgresql-server-dev, it refers ubuntu
Here is we got from Ubuntu 18.04
$ dpkg -c /var/cache/apt/archives/postgresql-server-dev-10_10.8-0ubuntu0.18.04.1_amd64.deb
-rwxr-xr-x root/root     30792 2019-05-07 17:20 ./usr/lib/postgresql/10/bin/pg_config
drwxr-xr-x root/root         0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/
drwxr-xr-x root/root         0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/
drwxr-xr-x root/root         0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/config/
drwxr-xr-x root/root         0 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/src/
-rw-r--r-- root/root     31309 2019-05-07 17:20 ./usr/lib/postgresql/10/lib/pgxs/src/Makefile.global

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Mingli Yu 7341b7f796 mariadb: Upgrade to 10.3.15
Fixes for the following security vulnerabilities:
 CVE-2019-2614
 CVE-2019-2627
 CVE-2019-2628

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-24 10:11:28 -07:00
Adrian Bunk 52b384f783 rocksdb: Upgrade 5.18.2 -> 5.18.3
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10 09:19:21 -07:00
Adrian Bunk fbdb7d48c1 postgresql: Upgrade 11.2 -> 11.3
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10 09:19:21 -07:00
Vincent Prince e6d2464e41 mongodb: Fix build with gcc
Signed-off-by: Vincent Prince <vincent.prince.fr@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-06 08:32:04 -07:00