summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2020-11-25build-appliance-image: Update to dunfell head revision2020-04.4-dunfellRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-19qemu: fix CVE-2020-24352Lee Chee Yang
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-19python3: fix CVE-2020-27619Lee Chee Yang
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-19python3: whitelist CVE-2020-15523Lee Chee Yang
This CVE is issue on _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath. Since it is .dll issue (on windows only), hence whitelist it. https://bugs.python.org/issue29778 Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-19bison: update to 3.5.4 for CVE-2020-14150Lee Chee Yang
Release notes: https://lists.gnu.org/archive/html/info-gnu/2020-04/msg00000.html Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-19libproxy: fix CVE-2020-26154Lee Chee Yang
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-17python3: add ldconfig rdepends for python3-ctypesMingli Yu
The ctypes module needs to use "ldconfig -p" to find the library path and it simply has below logic if no ldconfig installed. except OSError: pass Before the patch: >>> from ctypes.util import find_library >>> lib_path = find_library('archive') >>> print(lib_path) None After the patch: >>> from ctypes.util import find_library >>> lib_path = find_library('archive') >>> print(lib_path) libarchive.so.13 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ddb96902a124a6e1f035f0fd868b0139989bc1bc) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-17glib-2.0: correct build with latest mesonAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6a91d2b7d463abfd8f39a9f9d5ddde40a939d6e3) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-16ptest-runner: Backport patch to fix inappropriate ioctl errorKhem Raj
The srcrev bump is actually bring single commit [1] on top of 2.4.0 which fixes ptest runs with messges like ERROR: Unable to detach from controlling tty, Inappropriate ioctl for device [1] https://git.yoctoproject.org/cgit/cgit.cgi/ptest-runner2/commit/?id=834670317bd3f6e427e1ac461c07ada6b8936dfd Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 791da075619139fa55751f8013c73d2fbf0cf64c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-16ptest-runner: fix upstream version checkAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit fd180d21ec907726b2fcd7709b93cb8e464390d5) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-16ptest-runner: Bump to 2.4.0Anibal Limon
Add support for un ptests in multiple directories, useful in multilib builds. Changes, 1e9a845 Add support to specify multiple folder for ptest-runner 287ba30 Makefile: Fix TEST_LDFLAGS gcc cmdline position [YOCTO #12604] Signed-off-by: Aníbal Limón <anibal.limon@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1203ee86e3cf4d73f6ba513452717f1c4f78c501) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-14lib/oe/reproducible.py: Fix git HEAD checkJoshua Watt
The check for a git HEAD still wasn't quite correct because it was using the .git directory as the current working directory. Instead, it should be passed as the --git-dir argument when running git. Running `git rev-parse HEAD` in a .git directory with no HEAD reports 'HEAD' and exits with success but then 'git log' will fail, which is not what we want. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit cdbd47dd7e1657b91b65a0940b7cbf119764240f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-14lib/oe/reproducible: Fix error when no git HEADJoshua Watt
Fixes an error that occurs when attempting to get the timestamp of the latest commit when there is no HEAD in the git repository. The easiest way to trigger this condition is to use the 'subdir=' option when specifying a 'git://' SRC_URI. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a64caca5b5dbe4a76acd0b5709b2c3e75b245863) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-14classes/reproducible: Move to library codeJoshua Watt
Moves most of the python code used for dealing with the source date epoch to library code. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a7ede90955bc0c8bec1cbb3cab498ef2583b2f4e) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-13libbsd: Remove BSD-4-Clause from main packageMark Jonas
libbsd contains a multitude of licenses. For (commercial) projects the 3rd clause of the BSD-4-Clause license can be problematic. But only a few man pages use this license. This means that the main package containing the binary library itself is not under BSD-4-Clause ruling. Signed-off-by: Mark Jonas <toertel@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9c3e3f83b5fb162d161a7b9773d426418a22c05f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-13freetype: fix CVE-2020-15999, backport from 2.10.4Diego Santa Cruz
Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-13openssh: whitelist CVE-2014-9278Steve Sakoman
The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of that user, which might bypass intended authentication requirements that would force a local login. Whitelist the CVE since this issue is Redhat specific. Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 309132e50d23b1e3f15ef8db1a101166b35f7ca4) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-12binutils: reproducibility: reuse debug-prefix-map for stabsDenys Zagorui
powerpc 32bit Linux Kernel widely uses .stabs pseudo-op to produce debugging information in stabs format. Faced an issue that during Linux Kernel build with Yocto build system for 32bit powerpc platform resulting vmlinux contains absolute path in .stabstr section that cannot be remapped with -fdebug-prefix-map option. Yocto uses scripts/mkmakefile Linux Kernel build approach that allows to store all generated files outside of kernel source tree. With this approach each compilier invocation is performed with an absolute path to a file that will be compiled and this absolute path is recorded in init stab. There is no way to remap this path. Reuse remap_debug_filename api to make -fdebug-prefix-map flag aplicable for init stab. Signed-off-by: Denys Zagorui <dzagorui@cisco.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-11testimage: print results for interrupted runsKonrad Weihmann
When a run is ended by overall timeout, print the already executed testcases, to provide some hints which testcase might made the test suite reach global timeout. Nonetheless make the testrun exit with an error Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2bcc643195a3b3c66d698fac8b7af037c08545ac) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-11oeqa/core/context: initialize _run_end_timeKonrad Weihmann
with _run_start_time as value. For partial results of interrupted runs, this info might be otherwise missing for at least one testcase Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1c5e8baf57fa2a33b9ef507b11d9ea9acaa77238) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-11oeqa/core/context: expose results as variableKonrad Weihmann
register an unittest handler for testresults and expose it as variable result. With this even partial results from an interrupted test suite run can be made available Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a97ae47525157871b6c098ffc352293e365a4335) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-10systemd: udev SECLABEL{selinux} crash fixakash hadke
Adding SECLABEL{selinux}="some value" causes systemd-udev to crash. So applied below available patch to fix the issue. systemd-udev-seclabel-options-crash-fix.patch Link: https://github.com/systemd/systemd/commit/0335d110afc08baf47d76b7011ce02510dfdd524.patch Signed-off-by: akash hadke <akash.hadke@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09gstreamer1.0: warn the user when something is wrong with GstBufferPoolJose Quaresma
This is not a critical bug fix but it can be usefull in some BSP with exotic drivers like on nvidia tegra bsp. Signed-off-by: Jose Quaresma <quaresma.jose@gmail.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09clutter-gst-3.0: do not call out to host gstreamer plugin scannerAlexander Kanavin
This is host contamination and can also fail for all kinds of reasons when running under usermode qemu. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit fb60d0920b660dffb346b2212dc6f8ba2a0b9fde) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09diffstat: add nativesdk to BBCLASSEXTENDNathan Rossi
The diffstat tool is part of HOSTTOOLS. To support hosts that do not have it installed with buildtools-tarball it must be enabled for nativesdk. Signed-off-by: Nathan Rossi <nathan@nathanrossi.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 0ed002422bc46539f1d71ed19ee17358b6691bf0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09syslinux: add link to upstream discussion in patchRoss Burton
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit dfc2b114e9d62f0eee04129009a24a8edb2a8dd1) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09kernel-module-split.bbclass: identify kernel modconf files as configuration ↵Gratian Crisan
files Currently the modconf fragments representing the configuration for kernel modules are written out to appropriate .conf files and added to the FILES variable. However they are not identified as 'configuration files' and installing a new version of a kernel module results in a conflict and a failed installed because the respective .conf file is already in place from a previous install. Add the generated .conf files to the CONFFILES variable denoting their true nature. Signed-off-by: Gratian Crisan <gratian.crisan@ni.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1a70a92d1f1006be115429a4262259c9084f484d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09alsa-utils: Fix license to GPLv2 onlyRichard Purdie
Parts of alsa-utils are v2 only, parts are v2 or later. The effect is the end result is GPLv2 and there seems little value in marking everything as being a mixture of both. Fix LICENSE to match reality. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit a9a17a991174b732597e21045763ea851f486a01) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09libdnf: Fix license as it contains 'or later' clauseRichard Purdie
The license headers are clear that the code is "or later", fix LICENSE to match. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e565e0b908c71ad5106d1c6c73d269b819787e55) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09ptest-runner: Fix license as it contains 'or later' clauseRichard Purdie
The license headers are clear that the code is "or later", fix LICENSE to match. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 5f0b5cdfcb104ac50222a47652e090ad8770e49f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-09dosfstools: add mkfs.vfat to ALTERNATIVERicardo Salveti
The mkfs.vfat tool can also be provided by busybox via the CONFIG_MKFS_VFAT configuration (not enabled by default in OE but can be enabled on systems avoiding components based on GPLv3). Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 1227a29974671fd52014deaca7ac859a037cdeb5) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-08grub: clean up CVE patchesYongxin Liu
Clean up several patches introduced in commit 6732918498 ("grub:fix several CVEs in grub 2.04"). 1) Add CVE tags to individual patches. 2) Rename upstream patches and prefix them with CVE tags. 3) Add description of reference to upstream patch. Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bcb8b6719beaf6625e6b703e91958fe8afba5819) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07grub: fix several CVEs in grub 2.04Yongxin Liu
Backport patches from https://git.savannah.gnu.org/git/grub.git to fix some CVEs. Here is the list. CVE-2020-14308: 0001-calloc-Make-sure-we-always-have-an-overflow-checking.patch 0002-lvm-Add-LVM-cache-logical-volume-handling.patch 0003-calloc-Use-calloc-at-most-places.patch CVE-2020-14309, CVE-2020-14310, CVE-2020-14311: 0004-safemath-Add-some-arithmetic-primitives-that-check-f.patch 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch CVE-2020-15706: 0006-script-Remove-unused-fields-from-grub_script_functio.patch 0007-script-Avoid-a-use-after-free-when-redefining-a-func.patch CVE-2020-15707: 0008-linux-Fix-integer-overflows-in-initrd-size-handling.patch Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 67329184985a03534f11f95e9df5f9fb2305a261) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07ruby: fix CVE-2020-25613Chee Yang Lee
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07netbase: bump PE to purge bogus hash equivalence from autobuilderSteve Sakoman
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07netbase: update SRC_URI to reflect new file nameSteve Sakoman
The netbase_6.1.tar.xz file was removed and replaced with netbase_6.1_bpo10+1.tar.xz. File contents are identical except for the changelog: $ diff -rup netbase-6.1 netbase-6.1~bpo10+1/ diff -rup netbase-6.1/debian/changelog netbase-6.1~bpo10+1/debian/changelog --- netbase-6.1/debian/changelog 2020-02-16 13:22:04.000000000 -1000 +++ netbase-6.1~bpo10+1/debian/changelog 2020-08-26 23:10:59.000000000 -1000 @@ -1,3 +1,9 @@ +netbase (6.1~bpo10+1) buster-backports; urgency=medium + + * Rebuild for buster-backports. (Closes: #969058) + + -- Arturo Borrero Gonzalez <arturo@debian.org> Thu, 27 Aug 2020 11:10:59 +0200 + netbase (6.1) unstable; urgency=medium * services: added isakmp (500/udp) which was removed by mistake in [YOCTO #14084] Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d8a09c2fcf2f8c91b7e3fea16f5c484e56187bbf) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07linux-firmware: upgrade 20200817 -> 20201022Alexander Kanavin
License-Update: WHENCE file names updates Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit bca259699d79bb16a6f07afa80f2768f9c62ceec) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07linux-firmware: package nvidia firmwareMax Krummenacher
Add packages for the firmware required by the Nvidia chipsets. Split it in Tegra K1, all other Tegras and desktop GPU packages. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f03b7bc5f164afd9cbb0c2bd3a932bb85d968bf7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07linux-firmware: package marvel sdio 8997 firmwareMax Krummenacher
Add package for the firmware required by the Marvell 8997 chipset when connected over SDIO. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d8b69d826702db9f5a3482754db8967c924a156d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07linux-firmware: add Amlogic VDEC firmware packageNeil Armstrong
Add package for the Amlogic VDEC firmwares. Signed-off-by: Neil Armstrong <narmstrong@baylibre.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit aeb014b50433f254ced275711bee940cde9c1c8a) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07update_udev_hwdb: clean hwdb.binMingli Yu
Steps to reproduce: echo "IMAGE_INSTALL_append = \" udev-hwdb lib32-udev-hwdb\"" >> conf/local.conf When install both udev-hwdb and lib32-udev-hwdb as above, there comes below do_populate_sdk error: $ bitbake core-image-sato -c populate_sdk ERROR: Task (/path/core-image-sato.bb:do_populate_sdk) failed with exit code '134' NOTE: Tasks Summary: Attempted 5554 tasks of which 0 didn't need to be rerun and 1 failed. $ cat /path/tmp/work/qemux86_64-poky-linux/core-image-sato/1.0-r5/pseudo/pseudo.log [snip] inode mismatch: '/path/tmp/work/qemux86_64-poky-linux/core-image-sato/1.0-r5/sdk/image/usr/local/oecore-x86_64/sysroots/core2-64-poky-linux/lib/udev/hwdb.bin' ino 427383040 in db, 427383042 in request. [snip] It is because both udev-hwdb and lib32-udev-hwdb will generate ${SDK_OUTPUT}/${SDKTARGETSYSROOT}/lib/udev/hwdb.bin during do_populate_sdk and it triggers pseudo error. So clean hwdb.bin before generate hwdb.bin to avoid conflict to fix the above do_populate_sdk error. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c7472925feb53ce92c1799feba2b7a9104e3f38f) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07qemuboot.bbclass: Fix a typoKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2b5fb66344432390aa0cc199ad3f9ec2a4da26bb) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-07meta: fix some unresponsive homepages and bugtracker linksMaxime Roussin-Bélanger
remove some extra whitespaces Signed-off-by: Maxime Roussin-Bélanger <maxime.roussinbelanger@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 32ce3716761165b9df12306249418645724122cc) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-05sqlite3: fix CVE-2020-13632Steve Sakoman
CVE: CVE-2020-13632 Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-13632 Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-05sqlite3: fix CVE-2020-13631Steve Sakoman
CVE: CVE-2020-13631 Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-13631 Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-05sqlite3: fix CVE-2020-13630Steve Sakoman
CVE: CVE-2020-13630 Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-13630 Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-05sqlite3: fix CVE-2020-13435Steve Sakoman
CVE: CVE-2020-13435 Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-13435 Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-05sqlite3: fix CVE-2020-13434Steve Sakoman
CVE: CVE-2020-13434 Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-13434 Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-05bluez5: update to 5.55 to fix CVE-2020-27153Chee Yang Lee
Version 5.55 is a security/bug fix release Release note: https://github.com/bluez/bluez/commit/5a180f2ec9edfacafd95e5fed20d36fe8e077f07 CVE reference: https://nvd.nist.gov/vuln/detail/CVE-2020-27153 Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c2895e3e4eabca64cbcc8682e72d25026df5e5f0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
2020-11-05jquery: Upgrade 3.4.1 -> 3.5.0 to fix CVE-2020-11022 and CVE-2020-11023Joshua Watt
Version 3.5.0 is a security release Reference: https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ The primary purpose of the jquery recipe is to make the diffoscope output from the autobuilder easier to navigate. Master branch has been using 3.5.X for some time now so this should be a safe upgrade. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit d0f883c4cbdcf722767b437a69002244be4cf8d9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-30 15:45:34 +0000