aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2021-06-27minifi-cpp: set CLEANBROKEN to 1Chen Qi
Rebuilding minifi-cpp in old build dir sometimes result in do_compile failure. So set CLEANBROKEN to "1" to workaround this problem. If further investigation is done and the underlying problem is addressed, this setting could be removed. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a9e17243875b82dba698924cf2f1d31408127521) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27dovecot: add CVE-2016-4983 to allowlistito-yuichi@fujitsu.com
CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist. Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 3613b50a84559ce771866cd1eef1141fa3e6d238) [mkcert.sh does mask 077 first] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27net-snmp: Support building for nativePeter Kjellerstedt
Due to the sed commands in do_install_append() that removed ${STAGING_DIR_HOST} and it being empty when building for native, it was impossible to add support for building this as native using a bbappend. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 74d58bc6e8f53bff15d2c06865591c325ebb6a7f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27net-snmp: A little clean upPeter Kjellerstedt
* Remove the explicit dependency on libnl as the libnl PACKAGECONFIG depends on it as necessary. * Add a PACKAGECONFIG for systemd to replace modifying EXTRA_OECONF directly. * Sort the PACKAGECONFIGs. * Some whitespace clean up. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 411c981ef01b9965c22b7c35549dc95023169ea7) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27rapidjson: remove stale LIB_INSTALL_DIRAndrea Adami
This was introduced with commit: 2e0fd78 rapidjson: fix cmake artifacts installation for non-default BASELIB case and should have been removed with commit: 5aa127a rapidjson: Remove unwanted patches NOTE: such multilib fixes are not needed after this commit in oe-core: 24f630c cmake.bbclass: Define LIB_SUFFIX Signed-off-by: Andrea Adami <andrea.adami@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0ceacaa68e212cc06ea7371a206bdbe21033cc05) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27initramfs-debug-image: support cases where machines override IMAGE_FSTYPESAndrea Adami
As done for initramfs-kexecboot-image we need to use python to get the desired value for IMAGE_FSTYPES. Signed-off-by: Andrea Adami <andrea.adami@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 93e139c998857048182ed4169f04cfe350eab013) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27initramfs-kexecboot-image: support cases where machines override IMAGE_FSTYPESAndrea Adami
test case: zaurus.inc IMAGE_FSTYPES ?= "tar.gz jffs2 jffs2.sum ubi ubifs" IMAGE_FSTYPES_collie ?= "tar.gz jffs2 jffs2.sum" INITRAMFS_FSTYPES ?= "cpio.gz cpio.xz" The last assignment IMAGE_FSTYPES = "${INITRAMFS_FSTYPES}" did in fact reset the value to IMAGE_FSTYPES_collie, thus not producing cpio.gz / cpio.xz. Signed-off-by: Andrea Adami <andrea.adami@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cdce92b4e9e82327fe2b3118384c424d7f08cc0c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27cyrus-sasl: add CVE-2020-8032 to allowlistito-yuichi@fujitsu.com
This affects only openSUSE, so add it to allowlist. Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 711e932b14de57a5f341124470b2f3f131615a25) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27add CVE-2011-2411 to allowlistSekine Shigeki
This affects only on HP NonStop Server, so add it to allowlist. Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit bb4a4f0ff8d9926137cb152fd3f2808bd9f961ce) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27minifi-cpp: set correct python processor directory in configure fileYi Zhao
Set an appropriate python processor directory in configure file to fix the minifi startup warning: [org::apache::nifi::minifi::python::PythonCreator] [error] Could not access /etc/minifi/minifi-python/ Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a86b772e31079231a04762ed49ec83d32005ca15) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27net-snmp: upgrade 5.9 -> 5.9.1zhengruoqin
Refresh the following patch: net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5411629c443d0d64b6d10f77d0622626e31a789d) [Bug fix only update - AK] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27libeigen: update LICENSE informationOvidiu Panait
From COPYING.README: """ Eigen is primarily MPL2 licensed. See COPYING.MPL2 and these links: http://www.mozilla.org/MPL/2.0/ http://www.mozilla.org/MPL/2.0/FAQ.html Some files contain third-party code under BSD or LGPL licenses, whence the other COPYING.* files here. All the LGPL code is either LGPL 2.1-only, or LGPL 2.1-or-later. For this reason, the COPYING.LGPL file contains the LGPL 2.1 text. """ The upstream repository contains multiple COPYING files (various 3rd party code is under different licenses), so update the LICENSE information accordingly. Also, add MINPACK to meta-oe/licenses. Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9efdb6799ed45cf04acde9b435aeb8ccd1f2843c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27wireshark: upgrade 3.4.5 -> 3.4.6zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1c3701018ba2d251a72111f1159c9605dbff3992) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27libpfm4 4.10.1 : enable arm64 host platformOlivier Georget
libpfm4 is only enabled for powerpc arch as of now. This enables the lib on Arm 64bit platform as well. Signed-off-by: Olivier Georget <olivier.georget@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d02bd486736ba7cc552312849cea4fa33b1e1259) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-13thunar: fix CVE-2021-32563Stefan Ghinea
An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution. References: https://nvd.nist.gov/vuln/detail/CVE-2021-32563 Upstream patches: https://gitlab.xfce.org/xfce/thunar/-/commit/9165a61f95e43cc0b5abf9b98eee2818a0191e0b https://gitlab.xfce.org/xfce/thunar/-/commit/3b54d9d7dbd7fd16235e2141c43a7f18718f5664 Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit baa9453d57aa06554c823b5c7bd9c029e1858f89) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-13mongodb: Change PV to 4.4.6Khem Raj
4.4.6 has been released from same SHA which was used for rc0 Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e17fc085c025550be08353319983f9b89b11831b) [Bug fix only updates: Issues fixed: SERVER-53604: Include original aws iam arn in authenticate audit logs SERVER-52564: Deadlock between step down and MongoDOperationContextSession WT-7442: RTS to open dhandle only when the dhandle has unstable updates WT-7426: Set write generation number when the page image gets created WT-7373: Improve slow random cursor operations on oplog] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-13mongodb: Update to 4.4.6-rc0Khem Raj
Drop upstreamed patch Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 44664a2d66ea848d927164685c283f0ea8d3d12f) [Bug fix only update: Issues fixed: SERVER-55298: Reproduce and Investigate BSONObjectTooLarge error SERVER-53566: Investigate and reproduce "opCtx != nullptr && _opCtx == nullptr" invariant SERVER-51281: mongod live locked SERVER-46686: Explain does not respect maxTimeMS SERVER-45836: Provide more LDAP details (like server IP) at default log level All JIRA issues closed in 4.4.5 4.4.5 Changelog] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06nss: Fix build on Centos 7Marek Vasut
Centos 7 has glibc 2.18 and nss-native build fails due to implicit declaration of function putenv during build. This is because of the Feature Test Macro Requirements for glibc (see feature_test_macros(7)): putenv(): _XOPEN_SOURCE || /* Glibc since 2.19: */ _DEFAULT_SOURCE || /* Glibc versions <= 2.19: */ _SVID_SOURCE and because nss coreconf/Linux.mk only defines -D_DEFAULT_SOURCE -D_BSD_SOURCE -D_POSIX_SOURCE So on such system with glibc 2.18, neither macro makes putenv() available. Add -D_XOPEN_SOURCE for the Centos 7 and glibc 2.18 native build case. Signed-off-by: Marek Vasut <marex@denx.de> Cc: Armin Kuster <akuster808@gmail.com> Cc: Armin Kuster <akuster@mvista.com> Cc: Khem Raj <raj.khem@gmail.com> Cc: Richard Purdie <richard.purdie@linuxfoundation.org> Cc: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 30148b33b5d750702d7749ac59d8d740d8cb7024) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06squid: upgrade 4.14 -> 4.15Andrej Kozemcak
Changes are found at: http://www.squid-cache.org/Versions/v4/changesets Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 77e614754553e64c4bc554ae802dc09e56eb6209) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-23libgtop: fix do_compile errorChangqing Li
On some distros, such as fedora32, cross compile failed with following error since host library is used. undefined reference to `stat64@GLIBC_2.33' According doc of ld, set searchdir begins with "=", but not hardcoded locations. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a6d1ddf7a9972008261bb84ff4196446d182c683) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-23libgtop: tidy up recipeAndreas Müller
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 55c0d740bc3553005b8a9e79b172231142c30d20) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-23opencv: Disable tbb on riscv/muslKhem Raj
getcontext|setcontext functionality is provided via libucontext for musl but this library is not yet ported to RISCV Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a116630318789f08ebc6f350c37ef43f0884cb30) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-23postgresql: upgrade 13.2 -> 13.3zangrc
Refresh the following patch: 0001-configure.in-bypass-autoconf-2.69-version-check.patch Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 48cb359db26f4fa0efb811c24a6306a56bf60483) [Bug fix update] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-23trace-cmd: Conflict resolutionwangmy
perf(oe-core) also uses the doc included in plugins/, so package it in own subdirs of trace-cmd. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d8402fdd6f6710effd763a0a9c06c83255e39722) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-23sysdig: disable building for ppcSaul Wold
Sysdig depends on tbb which no longer builds for powerpc Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 433603cb7dd0243856509a552ff354dbc0fccd95) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-23opencv: remove tbb packageconfig for powerpcSaul Wold
Since tbb does not build for powerpc remove it from the enabled list Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e0581ad12f42427932e24abad97399c54f4b75f7) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22hostapd: fix building with CONFIG_TLS=internalAlexander Vickberg
The patch recently added for CVE-2021-30004 broke compilation with CONFIG_TLS=internal. This adds the necessary function to let it compile again. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d6ef4170747d6668fa940328334055eef3e1e1d6) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22libsdl: Fix CVE-2019-13616wangmy
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13616 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c. Upstream-Status: Backport [https://github.com/libsdl-org/SDL/commit/97fefd050976bbbfca9608499f6a7d9fb86e70db] CVE: CVE-2019-13616 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 57ae91d2914de96b1de69bfcb089a427ee3cb0ed) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22exiv2: Fix CVE-2021-29473wangmy
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29473 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1587/commits/e6a0982f7cd9282052b6e3485a458d60629ffa0b] CVE: CVE-2021-29473 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a9aecd2c32fc8f238f62ef70813e032b6b52c2f2) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22exiv2: Fix CVE-2021-29470wangmy
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29470 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1581/commits/6628a69c036df2aa036290e6cd71767c159c79ed] CVE: CVE-2021-29470 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit bb1400efda77a7289ca20782172bfbe1f457f161) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22exiv2: Fix CVE-2021-29464wangmy
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29464 The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54] CVE: CVE-2021-29464 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8c9470bdfaa1d33347ffaf25b3e18d2163667e18) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22exiv2: Fix CVE-2021-3482wangmy
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3482 Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1523/commits/22ea582c6b74ada30bec3a6b15de3c3e52f2b4da] CVE: CVE-2021-3482 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9e7c2c9713dc2824af2a33b0a3feb4f29e7f0269) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22exiv2: Fix CVE-2021-29463wangmy
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29463 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b] CVE: CVE-2021-29463 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8e63ac6c86852a12408c2415be073c71420758ff) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22exiv2: Fix CVE-2021-29458wangmy
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29458 The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1536/commits/06d2db6e5fd2fcca9c060e95fc97f8a5b5d4c22d] CVE: CVE-2021-29458 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f0d83c14d9064ce1ee19b92d95c8daf790fe7488) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22exiv2: Fix CVE-2021-29457wangmy
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29457 The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/0230620e6ea5e2da0911318e07ce6e66d1ebdf22] CVE: CVE-2021-29457 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5be72693096cef671bf54bf1dd6ee8125614d064) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22uftrace: Fix a plthook crash on aarch64 with binutils2.35.1 and later ↵wangmy
versions on aarch64 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 54feab11a1866435107df366005b50aba3b8d1cd) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22python3-pymongo: Upgrade 3.11.3 -> 3.11.4Leon Anavi
Upgrade to release 3.11.4: - Bug fix where a MongoClient would mistakenly attempt to create minPoolSize connections to arbiter nodes - Bug fix that prevented PyMongo from retrying writes after a writeConcernError on MongoDB 4.4+ Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> (cherry picked from commit dcb9ecc1e5720c9614b1cd27575e1e4886dff5c1) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22python3-rfc3339-validator: Upgrade 0.1.3 -> 0.1.4Leon Anavi
Upgrade to release 0.1.4: - Fix test failure on darwin Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> (cherry picked from commit b5fb8390df11253fc7b20cd7a31db136f1d19a5c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22python3-django: upgrade 3.2 -> 3.2.2Trevor Gamblin
Version 3.2.2 includes a fix for CVE-2021-32052. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> (cherry picked from commit d97e1b7cfdcabc7d03e408c9888564551972e808) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22python3-django: upgrade 2.2.20 -> 2.2.22Trevor Gamblin
Version 2.2.22 includes a fix for CVE-2021-32052. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> (cherry picked from commit b26099fc156961ba252c3b6281f09799e91347ba) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22python3-robotframework: Upgrade 4.0.1 -> 4.0.2Leon Anavi
Upgrade to release 4.0.2: - Using Union containing generics as type hint causes an error - Libdoc does not anymore work with resource files in PYTHONPATH - Rebot removes sourcename attribute from <kw> in output.xml - Run Keyword If Test Failed does not work correctly if it is not first keyword in teardown and test is skipped - Argument conversion problems when type hint is ABC Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> (cherry picked from commit 73d63dd3fecc192695514aad00341020ca08066f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22python3-cerberus: Upgrade 1.3.3 -> 1.3.4Leon Anavi
Upgrade to release 1.3.4: - Reverts the unsatisfying fix for KeyError during import when running with python optimisation level of 2 - instead a RuntimeError is thrown when Python is running with optimization level 2 Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> (cherry picked from commit 87e6a453744180a0ddf31f47de96b47d8c47d677) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17xfce4-settings: upgrade 4.16.0 -> 4.16.1Andreas Müller
Release notes for 4.16.1 ======================== - display: Fix scale by rounding (Fixes #258) - Drop preferences-desktop-default-applications icon name - Also allocate terminating element - Translation Updates Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit eb5d3362d99f64d1dd006422b819b7f646254d20) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17packagegroup-meta-oe: conditional remove tbb for powerpcSaul Wold
Since tbb has a COMPATIBLE_MACHINE entry to prevent it from building for powerpcc, let's also remove it from the meta-oe-support package group. Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 564f7219544401b9bce545181a7e22000d3f7d40) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17zsh: reduce priority slightly to avoid conflict with bashAndreas Müller
| [log_check] Warn: update-alternatives: sh has multiple providers with the same priority, please check /workdir/raspberrypi4_64-mortsgna-linux/allgui-dev-image/1.0-r0/rootfs/usr/lib/opkg/alternatives/sh for details Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit df10c7bcc03d1a3eb0cd4d7e937bd935c8043c97) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17wireshark: upgrade 3.4.4 -> 3.4.5zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 37d8352d0d9c20e41f5b4085adf39fc615f412e5) [Bug fix update only & CVE-2021-22207] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17openvpn: upgrade 2.5.1 -> 2.5.2zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b12a2818b9fdaa0e9397c892c066b700ff20fbc3) [Bug fix update] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17fetchmail: upgrade 6.4.18 -> 6.4.19zangrc
-License-Update: Change distribition to distribution. Specific permission is granted for the GPLed code in this distribution to be linked to OpenSSL without invoking GPL clause 2(b). Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 902eea11f1618946932bbb9324beada0b103658c) [Bug fix update] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17python3-jinja2_2.%.bbappend: DeleteKhem Raj
These changes are moved to OE-Core Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> (cherry picked from commit d131aed9e16f50a38a09bd28e7f29b94a3766adb) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17libdevmapper,lvm2: Do not inherit licenseKhem Raj
inheriting license class which brings in AVAILABLE_LICENSES into do_configure task checksums class since it wants to enable thin-provisioning-tools if distro allows GPL-3 automatically, but this brings issues when other layers which have additional licenses are provided which ends up in signature mismatches so leave that setting to end-user and keep it disabled by default with a comment in recipes stating that if needed then the user should enable it via config metadata or bbappends. Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f592e81f11d455546447ddff35b2f89e18c0cc0c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-09-25 08:22:54 +0000