summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
AgeCommit message (Collapse)Author
2017-08-16libtasn1: CVE-2017-10790Yue Tao
The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack. References: https://nvd.nist.gov/vuln/detail/CVE-2017-10790 http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commit; h=d8d805e1f2e6799bb2dff4871a8598dc83088a39 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-16nspr: 4.14 -> 4.16Huang Qiyu
Upgrade nspr from 4.14 to 4.16 Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-11ca-certificates: update to 20170717Alexander Kanavin
Upstream lacks a tag for this release, so make it a PR bump. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-08-09libcap: fix build with gperf 3.1Alexander Kanavin
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-08-09libproxy: Remove PIE flags from SECURITY_PIE_CFLAGSKhem Raj
External compilers will explicitly pass -fPIE -pie flags unlike internal toolchain which does not use them, so the build fails with external toolchains because, its passing these flags to linker when building shared library, which is not correct it should just use -fPIC Fixes errors e.g. | /mnt/a/oe/build/tmp/work/corei7-64-bec-linux/libproxy/0.4.14-r0/recipe-sysroot-native/usr/bin/x86_64-bec-linux/x86_64-bec-linux-ld: ../libmodman/libmodman.a(module_manager.cpp.o): relocation R_X86_64_PC32 against symbol `_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_St6vectorIPN9libmodman14base_extensionESaISB_EEESt10_Select1stISE_ESt4lessIS5_ESaISE_EE8_M_eraseEPSt13_Rb_tree_nodeISE_E' can not be used when making a shared object; recompile with -fPIC Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-08-09ossp-uuid, libffi, libgcrypt: Pass --tag=CC option to libtoolKhem Raj
libtool tries to guess the --tag value based on CC/CXX environment variables and the compile commandline generated by makefiles. This heuristics however fails when we construct CC variables in OE and add security flags to it, especially -fPIE -pie which are added by external compilers e.g. clang particularly. It fails because libtool removed PIE flags from compiler cmdline intelligently if it figures out that its building a library, which means that the CC variable passed from cmdline does not match with the compiler cmdline constructed by libtool and we end up with errors like | arm-bec-linux-musleabi-libtool: compile: unable to infer tagged configuration | arm-bec-linux-musleabi-libtool: error: specify a tag with '--tag' This works with internal gcc toolchain because we configure gcc for PIE when hardening is selected and dont pass -fPIE -pie options explicitly but this is not an option for clang, and some external gcc toolchains using older gcc This patch adds the --tag option to help libtool set correct tags in packages where it cant get it right via its heuristics Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-08-01re2c: fix build raceRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-31re2c: Transfer recipe from meta-oe and upgrade to 0.16Khem Raj
ninja needs it. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2017-07-30libpcre: upgrade 8.40 -> 8.41Andrej Valek
Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-30debianutils: set higher priority than busybox for run-partsJackie Huang
debianutils-run-parts should have higher priority than busybox (which is 50), so set the priority to 60 for debianutils-run-parts. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-27bash-completion: upgrade to 2.7Alexander Kanavin
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-27icu: update to 59.1Alexander Kanavin
License checksum change due to copyright year update. Latest icu will not compile with anything less than C++11, so drop the enforcement of an earlier C++ version. This should be okay, as there is now a fix in place for the problem of mixing native gcc 4/5 compiled code: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=c21cec84886d9c70396e9be0ceb9a8ef300b54be Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-24sqlite3.inc: set CVE_PRODUCT to sqliteMikko Rapeli
It is used in NVD for CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2016-6153 Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24nspr_4.14.bb: set CVE_PRODUCT to netscape_portable_runtimeMikko Rapeli
This is used in NVD database entries like CVE: https://nvd.nist.gov/vuln/detail/CVE-2016-1951 Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24libpcre2_10.23.bb: set CVE_PRODUCT to pcre2Mikko Rapeli
It is used in NVD as product name for CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2017-8786 Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24libpcre_8.40.bb: set CVE_PRODUCT to prceMikko Rapeli
It is used in NVD for CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2017-7246 Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24icu.inc: set CVE_PRODUCT to international_components_for_unicodeMikko Rapeli
NVD uses it for CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2014-8146 Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24libffi: Support musl-x32 buildsweeaun
Added target musl-x32 in configure.ac to support musl-x32 build in libffi. Signed-off-by: sweeaun <swee.aun.khor@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-21sqlite3: upgrade to 3.19.3Maxin B. John
3.19.2 -> 3.19.3 Fixes a bug associated with auto_vacuum that can lead to database corruption. Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-21acl: reduce local pending patchesDengke Du
Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-19libgcrypt: upgrade to 1.7.8Ross Burton
Fixes CVE-2017-7526, 'flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster"'. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-19libgcrypt: merge bb and inc fileRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-17libgcrypt: upgrade to 1.7.7Ross Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-17libbsd: 0.8.3 -> 0.8.5Robert Yang
* The LIC_FILES_CHKSUM is changed becauses the files updated the date, and added a BSD-3-clause-John-Birrell for man/timeradd.3bsd, this license is already there for other files. * Update 0002-Remove-funopen.patch * Remove 0003-Fix-build-breaks-due-to-missing-a.out.h.patch, the a.out code is gone in the source, so this patch is not needed any more. Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2017-07-17apr: 1.5.2 -> 1.6.2Fan Xin
Update apr from 1.5.2 to 1.6.2 Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-17debianutils: 4.8.1 -> 4.8.1.1Robert Yang
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-11libiconv: remove 0001-Fix-link-error-when-compiling-with-gcc-O0.patchRobert Yang
The recipe and patches (including this patch) had been moved into meta-mingw, this dangling patch is useless here, so should be removed. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-08libunwind: We set -fPIE in security flags now if gcc is not configured for ↵Khem Raj
default PIE Signed-off-by: Khem Raj <raj.khem@gmail.com>
2017-07-06icu: Fix build with glibc 2.26Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28lz4: Add patch to fix re-buildsJussi Kukkonen
Configure fails when rebuilding lz4 as LIBDIR is used in two different places for two different things and we override it with a environment variable. Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28pinentry: update to 1.0.0Armin Kuster
add pkg-config support for libassuan and gpg-error updated config options (From OE-Core rev: 032f91850d2df819a0b8f2762f12d952cc64284e) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28curl: update to 7.54.1Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28libcroco: Upgrade 0.6.11 -> 0.6.12Fan Xin
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28libpcre2: 10.22 -> 10.23Fan Xin
1. Upgrade libpcre2 from 10.22 to 10.23 2. Update the checksum of LIC_FILES_CHKSUM The copyright time of LICENCE is updated to 2017, the content of LICENCE has no change. Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28npth: update to 1.5Alexander Kanavin
Licensing has changed to LGPLv2+. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-28liburcu: update to 0.10.0Alexander Kanavin
Drop backported patch. Update paths to files that establish the licensing. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-28bdwgc: remove the recipeAlexander Kanavin
It will be moved to meta-oe, but nothing needs it in oe-core anymore. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-28libiconv: remove recipeAlexander Kanavin
It was in use by oe-core only when uclibc was used, and so serves no purpose anymore. Both glibc and musl provide their own implementation. However, meta-mingw still depends on it, and so the recipe has been moved there. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-27gnupg: fix floating dependancy on gnutlsSaul Wold
gunpg added TLS support to the dirmngr for 2.1.0, mostly we linked with gnutls and had the RDEPENDS for gnutls. Since we had TLS support continue enabling it by default. Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-27meta: Add/fix missing Upstream-Status to patchesRichard Purdie
This adds or fixes the Upstream-Status for all remaining patches missing it in OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-27meta: Fix malformed Upstream-Status tagsRoss Burton
Fix a variety of spelling and format mistakes to improve the ease of reading the tags programatically. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-16meta: Remove further uclibc remnants (inc. patches and site files)Richard Purdie
Some of these are clearly dead, e.g. one binutils patch reverts the effects of the earlier one. This also removes the uclibc site files. We now have mechanisms to allow these to be extended from another layer should someone ever wish to do that. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-16meta: Drop remnants of uclibc supportRichard Purdie
uclibc support was removed a while ago and musl works much better. Start to remove the various overrides and patches related to uclibc which are no longer needed. uclibc support in a layer would still be possible. I have strong reasons to believe nobody is still using uclibc since patches are missing and I doubt the metadata even parses anymore. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14attr: Fix build failure when image includes man-pages pkgMark Asselstine
If you attempt to build an image with both attr(-doc) and man-pages packages your rootfs might fail to assemble. The error will be something like: Error: Transaction check error: file /usr/share/man/man2/fgetxattr.2 from install of \ attr-doc-2.4.47-r0.core2_64 conflicts with file from \ package man-pages-4.11-r0.core2_64 (the error is usually only seen on builders which don't have manpages installed, if you have /usr/share/man/man1/man.1.gz your build will complete but you will have duplicate manpages, just one zipped and one not) Backporting changes from upstream attr removes the conflicted files in favour of those in the man-pages package. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14libpcre: switch from ftp to httpsMaxin B. John
For the same reasons as Debian: https://www.debian.org/News/2017/20170425 Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-12rng-tools: Fix textrels on 32bit x86Khem Raj
When testing core-image-sato with hardening flags, it fails with SIGSEGV in libc.so during relocation time This is due to relocations in .text [textrel] build QA points it out clearly during qemux86 build as well AssertionError: 2 != 0 : Log: /mnt/a/oe/build/tmp/work/qemux86-bec-linux-musl/core-image-sato/1.0-r0/dmesg_output.log ----------------------- Central error: [ 19.043597] rngd[525]: segfault at 80098bb7 ip b77b14fc sp bfe9b380 error 7 in libc.so[b774c000+97000] Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-12gnutls: Upgrade to 3.5.13Fan Xin
1. Upgrade gnutls from 3.5.9 to 3.5.13 2. Rebase the following patch file. use-pkg-config-to-locate-zlib.patch Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-09libunwind: don't mess around with ARM atomic detectionRoss Burton
This recipe explictly sets -DAO_USE_PTHREAD_DEFS on ARM, but with libunwind 1.2 this causes the linker to fail: hidden symbol `__sync_synchronize' in libgcc.a(linux-atomic.o) is referenced by DSO Removing these defines lets configure do the right thing and build libunwind. Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06libunwind: fix build failure on MIPSRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06lzo: Upgrade 2.09 -> 2.10Fan Xin
1. Upgrade lzo from 2.09 to 2.10 2. Update the license checksum due to the date change, not license change. 3. Add a patch to fix the undefined error. Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-26 03:31:18 +0000