summaryrefslogtreecommitdiffstats
path: root/meta/recipes-devtools
AgeCommit message (Collapse)Author
2019-08-21binutils: fix CVE-2019-14250 CVE-2019-14444Anuj Mittal
(From OE-Core rev: abdc51527988afdcfd2db6dc08ebb6083a341be9) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21git: update to 2.23.0Oleksandr Kravchuk
(From OE-Core rev: f70d00ff6120602d92fdb353231e763b23a3f42a) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21python3: fix the test_locale output formatMingli Yu
Before this patch: # python3 -m test -v test_locale [snip] test_getsetlocale_issue1813 (test.test_locale.TestMiscellaneous) ... testing with ('tr_TR', 'ISO8859-9') ok [snip] After this patch: # python3 -m test -v test_locale [snip] test_getsetlocale_issue1813 (test.test_locale.TestMiscellaneous) ... testing with ('tr_TR', 'ISO8859-9')... ok [snip] Make the test ended with "... ok" is common in python unittest world, we should make it keep consistent with other test cases in case it may be ignored to record in the report if we use the common filter "... ok". [YOCTO #13298] (From OE-Core rev: 4e698cf8f3a9c661f5b67c6001ad4d92b574d136) Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21nativesdk-qemu: support aarch64_be.Lei Maohui
Otherwise, there will be "no aarch64_be-softmmu" error. (From OE-Core rev: 237b677f2501752d3ec339e87aa9f31fc6926afd) Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21qemu: Upgrade to version 4.1Alistair Francis
(From OE-Core rev: 50a7dec95618080962e56fd347f505e691b7ad6f) Signed-off-by: Alistair Francis <alistair.francis@wdc.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21python3-scons: update to 3.1.1Oleksandr Kravchuk
(From OE-Core rev: ae2869c82af3a826c9eedf5207c5d6f61f0df5e8) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21python-setuptools: update to 41.1.0Oleksandr Kravchuk
(From OE-Core rev: 841d458f01c8c2d3e67775bad7d018b047604f75) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21gcc-9: Upgrade to 9.2Khem Raj
BugFix only release see [1] for details [1] https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&resolution=FIXED&target_milestone=9.2 (From OE-Core rev: d00fac5bb9c479b5709ce73ae7fc0a14474a69c9) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-14librepo: update to 1.10.5Oleksandr Kravchuk
Also cleanedup the recipe. (From OE-Core rev: 565aae4b4c1302a8a962a9f444d5382ea1043f40) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-14python3-git: update to 3.0.0Oleksandr Kravchuk
(From OE-Core rev: 8b9ea2defbaf6c22058bd97bfea50360fdd3e3c8) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-14git: update to 2.22.1Oleksandr Kravchuk
(From OE-Core rev: 5b6e7d98f0d1be392d6c1efe2c69fef296d960c0) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-14gdb: Do not set musl specific CFLAGSKhem Raj
These settings are no longer needed because we define gl_cv_func_gettimeofday_clobber=no already and stat issue is alrwady fixed via [1] [1] https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=3c025cfe5efc44eb4dfb03b53dca28e75096dd1e (From OE-Core rev: c3f04bd4df3c67fc6c840fe0dd8e194e6663b02c) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-14gcc-cross-canadian: Drop obsolete shlibs exclusionRichard Purdie
This is a very old change as and be inferred from the name in the comment. We've since had many changes to pkgdata including separating it to its own sysroot now so the reasons for this blanket exclusion are likely long gone. If the shlib provides were really the problem I'd much rather have a dedicated variable for that too. Removing this fixes missing dependencies on nativesdk-libc and other libs which would then happen automatically. (From OE-Core rev: 096fa15efbcb704451b2f38ceab36508ef64f07e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-14gcc-runtime: Move content from gcclibdir into libdirKhem Raj
OE does not use the traditional /usr/lib/gcc prefix to store gcc-runtime it basically is moved into libdir, however some newer files were installed by newer versions of gcc especially libgomp ( omp.h openacc.h ) into gcclibdir, so we have content in both directories, this confuses other tools which are trying to guess the gcc installation and its runtime location, since now we have two directories, the tools either choose one or other and we get inconsistent behavior, e.g. clang for aarch64 uses /usr/lib but same clang for riscv64 chose /usr/lib/gcc This change ensures that OE ends up with single valid location for gcc runtime files Move more common bits into common inc file (From OE-Core rev: e9e5744ba8b0d43c8b874d365f83071ce20bf0a1) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-14meson: backport fix for builds with -Werror=return-typeMartin Jansa
(From OE-Core rev: de623085039111d9988918ae95e07e48108a9ff1) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-14go-runtime: remove conflict files from -dev packagesChangqing Li
fix below error: file /usr/lib64/go/src/cmd/cgo/zdefaultcc.go conflicts between attempted installs of go-dev-1.12.6-r0.core2_64 and go-runtime-dev-1.12.6-r0.core2_64 file /usr/lib64/go/src/cmd/go/internal/cfg/zdefaultcc.go conflicts between attempted installs of go-dev-1.12.6-r0.core2_64 and go-runtime-dev-1.12.6-r0.core2_64 these 2 files existed in both go-dev and go-runtime-dev remove it from go-runtime-dev to fix the problem (From OE-Core rev: 60dcae509a210f2cae8eda525a1b006663aef9bf) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-13cmake: 3.15.1 -> 3.15.2Pascal Bach
I rebuilt all cmake recipes from poky and meta-oe without issue. (From OE-Core rev: b1ebf9122a5670044998adb83ca7a5a6c5454eaa) Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-13patch: fix CVE-2019-13638Trevor Gamblin
(From OE-Core rev: b59b1222b3f73f982286222a583de09c661dc781) Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-13ruby: Adding zlib-native to native dependenciesJohann Fridriksson
(From OE-Core rev: c558da63d6ec16a5b0c09a2e558ce72606b33436) Signed-off-by: Jóhann Friðriksson <jofr@foss.dk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-13python3-dbus: Add native and nativesdk variantsAaron Chan
(From OE-Core rev: c7b057ee871bd691615c489390c72406108931f7) Signed-off-by: Aaron Chan <aaron.chun.yew.chan@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12e2fsprogs: 1.44.5 -> 1.45.3Kai Kang
Update e2fsprogs from 1.44.5 to 1.45.3: * rebase ptest.patch * remove 0001-create_inode-fix-copying-large-files.patch which merged by upstream * add new sub-package e2fsprogs-e2scrub and disable cron support (From OE-Core rev: e5f8c1facfc3507710d7111951fe075e01c58e4e) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12python3-pygobject: Add missing pkgutil RDEPENDSRichard Purdie
With the removal of setuputils, there was a missing runtime dependency on pkgutil which was breaking the selftests for gobject-introspection at runtime. Fix this. (From OE-Core rev: 50048ff2da2cc209fe6bf1452dc2cf2a545fe886) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12python3-pygobject: remove python3-setuptools from RDEPENDSLuca Boccassi
python3-setuptools is an optional build-dependency of pygobject but it is not necessary to run it, as also documented by the upstream packaging guide: https://gitlab.gnome.org/GNOME/pygobject/blob/master/docs/packagingguide.rst Remove it from RDEPENDS to shrink the runtime dependency chain, as setuptools includes scripts to download other packages, which might not be desired on a minimal image. (From OE-Core rev: 3054791e62c6ac1b03b7658f9c59761b254fa05c) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12python-nose: remove the python 2.x version of the recipeAlexander Kanavin
With removal of python 2.x numpy, nothing needs it anymore. (From OE-Core rev: 9f07b2836405d86e869780f8f1ae00843eadc409) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12python-scons: remove the python 2.x version of the recipeAlexander Kanavin
Nothing in oe-core or meta-oe is using it (scons.bbclass is set to use 3.x version). (From OE-Core rev: cd2205677fd167be51dc92436fe8f3a5aa440851) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12python-numpy: remove the python 2.x version of the recipeAlexander Kanavin
The 1.17.0 release of NumPy no longer supports Python 2.x. (From OE-Core rev: 4e9659f24e2f699effadcbe378b6a746d77ccdbd) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12dpkg: Provide update-alternative for start-stop-daemonJason Wessel
When using DISTRO_FEATURE usrmerge, busybox and something that requires dpkg-start-stop there is a conflict which prints the following error. === ERROR: core-image-minimal-1.0-r1 do_rootfs: Postinstall scriptlets of ['busybox'] have failed. If the intention is to defer them to first boot, then please place them into pkg_postinst_ontarget_${PN} (). Deferring to first boot via 'exit 1' is no longer supported. Details of the failure are in /build/tmp-glibc/work/intel_x86_64-linux/core-image-minimal/1.0-r1/temp/log.do_rootfs. ERROR: core-image-minimal-1.0-r1 do_rootfs: Function failed: do_rootfs === Looking at the log file, it shows the problem: update-alternatives: Error: not linking /build/tmp-glibc/work/intel_x86_64-linux/core-image-minimal/1.0-r1/rootfs/usr/sbin/start-stop-daemon to /usr/bin/busybox.nosuid since /build/tmp-glibc/work/intel_x86_64-linux/core-image-minimal/1.0-r1/rootfs/usr/sbin/start-stop-daemon exists and is not a link === The solution is to add an update-alternative to start-stop-daemon for dpkg. (From OE-Core rev: e6d51c9472dab6cbec313ba51f9e8b9271f02eb8) Signed-off-by: Jason Wessel <jason.wessel@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12python3-mako: 1.0.14 -> 1.1.0Zheng Ruoqin
Upgrade python3-mako from 1.0.14 to 1.1.0. (From OE-Core rev: cdde0265b196def4633ece64d798e576362e7b61) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-12cmake: 3.14.5 -> 3.15.1Pascal Bach
The patches were refreshed with devtool. I rebuilt all cmake recipes from poky and meta-oe without issue. (From OE-Core rev: 022d642b0c8f464b451c543db50bb93012bce607) Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-08apt: add a missing perl runtime dependencyAlexander Kanavin
/usr/lib/dpkg/methods/apt/setup is a perl script. (From OE-Core rev: a96de885e122bd31e3382d6ecf6f665680e9db71) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-08elfutils: use PRIVATE_LIBS for the ptest packageAlexander Kanavin
EXCLUDE_PACKAGES_FROM_SHLIBS is too broad: it suppresses both generation of required and provided shlibs. We need to suppress only the provided shlibs (to avoid clashes with the main package providing the same shlibs), and run the required shlib dependencies generator as usual. (From OE-Core rev: 7d342fd04266bedc12706c111c5b83d952566bca) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-08python-scons:upgrade 3.0.5 -> 3.1.0Zang Ruochen
(From OE-Core rev: 322ff31d811bd8142af93574b10c91c611df93bd) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-08python3-pbr:upgrade 5.4.1 -> 5.4.2Yuan Chao
(From OE-Core rev: 83ffc20637abd275bc3037935d629f5a716b4614) Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-08mesa,llvm,meson: Update llvm to 8.0.1 plus define and use LLVM version globallyKhem Raj
- Add missing dependency on libedit - Define LLVMVERSION on the same lines as GCCVERSION and other tools - Use LLVMVERSION in mesa and meson.bbclass to get llvm version instead of hardcoding it - Use llvm patches unmodified from meta-clang, helps in keeping them in sync - Define PREFERRED_VERSION for llvm, llvm-native, nativesdk-llvm (From OE-Core rev: 3c08b638348abd543fc92baf56c28ca16ae6aac6) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-07pseudo: Fix openat() with a symlink pointing to a directoryJason Wessel
While working with ostree disk generation in conjunction with wic, I found a problem with pseudo where it tried to resolve a symlink when it shouldn't, based on openat() flags. A C program has been constructed to test pseudo to show that it is working properly with the correct behavior around openat(). #include <stdio.h> #include <stdlib.h> #include <sys/types.h> #include <sys/stat.h> #include <dirent.h> #include <unistd.h> #include <fcntl.h> int main() { /* * Tested with: gcc -Wall -o app app.c ; echo "no pseudo" ; * ./app ; echo "pseudo"; pseudo ./app */ system("rm -rf tdir tlink"); system("mkdir tdir"); system("ln -s tdir tlink"); DIR *dir = opendir("."); int dfd = dirfd(dir); int target_dfd = openat (dfd, "tlink", O_RDONLY | O_NONBLOCK | O_DIRECTORY | O_CLOEXEC | O_NOFOLLOW); if (target_dfd == -1) { printf("Test 1 good\n"); } else { printf("Test 1 failed\n"); close(target_dfd); } target_dfd = openat (dfd, "tlink", O_RDONLY | O_NONBLOCK | O_DIRECTORY | O_CLOEXEC); if (target_dfd == -1) { printf("Test 2 failed\n"); } else { printf("Test 2 good\n"); close(target_dfd); } /* Test 3 make sure the owner of the link is root */ struct stat sbuf; if (!lstat("tlink", &sbuf) && sbuf.st_uid == 0) { printf("Test 3 good\n"); } else { printf("Test 3 failed\n"); } /* Test 4 tests open with the "rb" flag, owner should not change */ int ofd = openat(dfd,"./tlink", O_RDONLY|O_CLOEXEC); if (ofd >= 0) { if (fstat(ofd, &sbuf) != 0) printf("ERROR in fstat test 4\n"); else if (sbuf.st_uid == 0) printf("Test 4 good\n"); close(ofd); } else { printf("Test 4 failed with openat()\n"); } /* Test pseudo db to see the fstat() above did not delete the DB entry */ if (!lstat("tlink", &sbuf) && sbuf.st_uid == 0) printf("Test 5 good\n"); else printf("Test 5 failed... tlink is owned by %i and not 0\n", sbuf.st_uid); return 0; } int main() { /* Tested with: gcc -Wall -o app app.c ; echo "no pseudo" ; ./app ; echo "pseudo"; pseudo ./app */ system("rm -rf tdir tlink"); system("mkdir tdir"); system("ln -s tdir tlink"); DIR *dir = opendir("."); int dfd = dirfd(dir); int target_dfd = openat (dfd, "tlink", O_RDONLY | O_NONBLOCK | O_DIRECTORY | O_CLOEXEC | O_NOFOLLOW); if (target_dfd == -1) { printf("This is right\n"); } else { printf("This is broken\n"); } return 0; } Many thanks to Peter Seebach for fixing the problem in the pseudo code to use the same logic which was already there for the AT_SYMLINK_NOFOLLOW. Also updated is the license MD5 checksum since the master branch of pseudo has had the SPDX data updated. (From OE-Core rev: a98ea4be5ce19ff380ca500ba1ef3da490ec4556) Signed-off-by: Jason Wessel <jason.wessel@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-07syslinux: Override hardcoded toolnames in MakefileKhem Raj
makefile assumes native toolnames e.g. ar, as, nm etc. which causes build fails on non-x86 build hosts objcopy: Unable to recognise the format of the input file `libcom32.elf' (From OE-Core rev: ee9afb34fb95409148734fda1eea1fe8f81983fd) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-06qemu: fix patch Upstream-StatusRoss Burton
(From OE-Core rev: ee31907d25bc89dcb6566368aae651920564980c) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-06libedit: fix upstream verison checkAlexander Kanavin
The default works fine; not sure why the line was added. (From OE-Core rev: 66bb9fd36128bb5ce12c7a5e224cfcd69dc2cd06) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03grub/libmpc/gdb: Use GNU_MIRROR in more recipesAdrian Bunk
(From OE-Core rev: 2f13b063f64c500f144a70d23a343223b5c70907) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03python3-git: update to 2.1.13Oleksandr Kravchuk
(From OE-Core rev: 4669839edbac8e1d3a8267d32ebf259a44938ec7) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03libedit: Move from meta-oeKhem Raj
libedit is needed by llvm on linux and this makes it useful for both oe-core and clang layer among other users Thanks to various contributors in maintaing it in meta-oe (From OE-Core rev: cbbfac2a330ad5577a56b5d0fe74300acff287f8) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03python3: split out the Windows distutils installer stubsRoss Burton
Needing the Windows distutils installer stubs is quite a niche requirement, so put them into a separate package and just recommend it. This can save both space and legal pain, as the installers embed an old zlib that has known CVEs. (From OE-Core rev: 617331a42fc5bde0c2d8d0f4dd8df652daa28778) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03python3: support recommends in manifestRoss Burton
Add support for runtime recommends along with runtime depends to the manifest. (From OE-Core rev: 16cc9a2ca559d978c6d0e648c18c297255b69dcc) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03python3: remove empty python3-distutils-staticdevRoss Burton
distutils doesn't ship any static libraries, and the files this should pick up do not exist. Copy/paste gone wrong maybe? (From OE-Core rev: afbca8da4ddd6c3dd01bb44af43aee9e80cae512) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03meson: add a backported patch to address vala cross-compilation errorsAlexander Kanavin
(From OE-Core rev: c8ac42f5110c9b8e4f2c275332651df152013c0a) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03meson: update 0.50.1 -> 0.51.1Alexander Kanavin
Drop backports. Rebase other patches. (From OE-Core rev: 3251ce439ea164fcf230dcede06da1a05b5c6775) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-31mtd-utils: Upgrade to 2.1.1Adrian Bunk
Add zstd PACKAGECONFIG to disable the zstd support that upstream enables by default, zstd is not in oe-core. (From OE-Core rev: a87cf6a1693bbeac0f03290c1cb0ddf0ad1cf9bd) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-31python: CVE-2019-9947 is same as CVE-2019-9740Anuj Mittal
See: https://bugs.python.org/issue30458 (From OE-Core rev: fa434cf1ae621f106d823c92f7e3a16172e7479f) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-31python: fix CVE-2018-20852Anuj Mittal
(From OE-Core rev: 04fc80b2c77a177601584500f0f3048d80095ad7) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-31perl: add PACKAGECONFIG for dbRoss Burton
perl-cross makes it easy to cleanly disable the use of Berkeley DB if desired, so add a PACKAGECONFIG for this. More of the dependencies (such as gdbm) can be controlled in the same way, but Berkeley DB is a prime contender: it's a large library which we have to ship an old release for due to licensing issues, so there are users who may want to strip it out of builds entirely. (From OE-Core rev: e3860098dadd0b1db97fb0414aae6abfc234b245) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>