summaryrefslogtreecommitdiffstats
path: root/meta
AgeCommit message (Collapse)Author
2021-09-03go: upgrade 1.16.5 -> 1.16.7Sakib Sajal
Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03xdg-utils: Add fix for CVE-2020-27748Richard Purdie
Backport an upstream patch for the CVE. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03default-distrovars.inc: Set BBINCLUDELOGS to empty to disable printing ↵Martin Jansa
failed task output multiple times * the output is shown 3 times with default configuration and 5 times when --verbose is being used with knotty, there might be other use-cases where we actually need this, but until the logging is resolved better, setting this to empty looks like more reasonable option (considering that e.g. log.do_compile from chromium-x11 can be over 50MB long, generating 150MB+ cooker log) * more details in: https://bugzilla.yoctoproject.org/show_bug.cgi?id=14542 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03hdparm: set correct licenseRoss Burton
The bulk of hdparm is under a unique license. Set the correct BSD version, and specify that the hdparm license is also used. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03ffmpeg: update LICENSERoss Burton
"BSD" is ambiguous, ffmpeg comprises of several licenses which are BSD-like. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03ppp: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise licenses BSD-3-Clause-Attribution and BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03ovmf: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause-Patent. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03shadow-sysroot: sync license with shadowRoss Burton
This recipe is just a single data file from shadow, but as we can't easily tell what license that specific file is under just copy the full license statement. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03valgrind: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03libxfont: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Note that the actual license text is BSD 4-Clause with clause 3 rescinded: https://gitlab.freedesktop.org/xorg/lib/libxfont/-/blob/master/COPYING#L157 Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03oeqa/recipeutils: update for license change to python-async-testRoss Burton
The python-async-test recipe is now BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03xinetd: correct LICENSERoss Burton
The xinetd license is superficially BSD-like, but it isn't BSD. Now that we have the full SPDX license set in oe-core, use the specific xinetd license. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03lsof: add upstream checkRoss Burton
Upstream has moved to GitHub. Whilst it's now too late to upgrade to the latest release, we can add upstream check variables so that we get notified we're out of date. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03lsof: correct LICENSERoss Burton
The lsof LICENSE is superficially BSD-like, but it isn't BSD. Now that we have the full SPDX license set in oe-core, use Spencer-94. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03tcl: Exclude CVE-2021-35331 from checksRichard Purdie
Upstream don't believe this is an issue. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03oeqa/runtime/parselogs: Make DVD ata error apply to all qemux86 machinesRichard Purdie
This log checking fix is needed for both qemux86 and qemux86-64 so move to the common section. [YOCTO #14528] Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03mirrors.bbclass: remove redundant server-specific mirrorsDaniel Wagenknecht
With the previously added general git repo fallback rule the server specific fallback mirrors for git.savannah.gnu.org and git.yoctoproject.org are redundant. Remove them. Signed-off-by: Daniel Wagenknecht <dwagenknecht@emlix.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03mirrors.bbclass: provide additional rule for git repo fallbacksDaniel Wagenknecht
Git hosting servers that require a slightly different URL when accessing repositories via https protocol instead of the git native protocol are not uncommon (servers using cgit as web UI). Provide a general rule to try HOST/git/PATH via https as git repo fallback. Signed-off-by: Daniel Wagenknecht <dwagenknecht@emlix.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03readline: correct pkg-config dependency for termcapDenys Dmytriyenko
readline uses ncurses for terminal capabilities database, but it fails to specify it correctly in the pkg-config .pc file, resulting in: Requires.private: termcap As ncurses by default provides newer terminfo instead of termcap, there's no termcap.pc in the system and pkg-config fails when linking with readline: readline.pc X-> termcap.pc Help configure script to set pkg-config to use ncurses for the correct terminal capabilities database: Requires.private: ncurses This fixes pkg-config dependency chain: readline.pc -> ncurses.pc -> tinfo.pc Signed-off-by: Denys Dmytriyenko <denis@denix.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Comment out placeholder license warningJoshua Watt
We don't want this warning causing problems on the AB, so leave it comment out for now Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Skip package processing for native recipesJoshua Watt
Native recipes do not produce packages and should not process them, otherwise it can trigger an error in read_subpackage_metadata Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Collect all task dependenciesJoshua Watt
Stop filtering the runtime dependencies based on do_create_sdpx (makes it only pick up things in DEPENDS) and instead include all task dependencies that are not the current PN. This allows other dependency methods to be picked up correctly, for example the dependency on the kernel used by kernel modules. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Add special exception for Public Domain licenseJoshua Watt
The Public Domain license (PD) needs a special exception in the license processing since there is no common license text to be extracted for these licenses. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Fix file:// in downloadLocationJoshua Watt
file:// URIs should not be included as the downloadLocation. Instead, loop until a non-file:// URI is found, or set the location to NOASSERTION if none is found Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Speed up hash calculationsJoshua Watt
Use the bb.utils.sha* utilities to hash files since they are much faster than the loops we were rolling ourselves Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Fix up license reportingJoshua Watt
Licenses reported in the SPDX documents should be either: A) A valid SPDX identifier cross referenced from the SPDX license database B) A "LicenseRef" to a license described in the SPDX document The licensing code will now add a placeholder extracted license with corresponding "LicenseRef" for any licenses that are not matched to the SPDX database Parenthesis in the license expression are now handled correctly Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: extend DocumentRef to include nameSaul Wold
This will create a more uniq DocumentRef, which will allow the individual spdx files to be merged into a single SBOM file reflecting the image. Do the same with the runtime dependencies also Signed-off-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Fix another creatorJoshua Watt
Fixes another creator that was missed earlier Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Add NOASSERTION for unknown debug sourcesJoshua Watt
If a debug source cannot be found, mark it as NOASSERTION so that other tools at least know we were unable to locate it. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Add runtime dependency mappingJoshua Watt
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Add index to DEPLOYDIRJoshua Watt
Add the index to DEPLOYDIR in addition to adding it to the SPDX archive Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Add SHA1 to index fileJoshua Watt
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Change creatorJoshua Watt
Update the creator name since this no longer lives in meta-doubleopen Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/create-spdx: Add classJoshua Watt
Adds a class as a first attempt to create SPDX SBoM documents during the build. This initial work was influenced by [meta-doubleopen][1], although almost completely rewritten. [1]: https://github.com/doubleopen-project/meta-doubleopen Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03classes/package: Add extended packaged dataJoshua Watt
Adds extended package data which is encoded as JSON which allows it to encode more structure than the "flat" package data files. The extended data might be much larger than the standard package data, so it is not read by default and instead requires oe.packagedata.read_subpkgdata_extended() to be called Currently, the file sizes and ELF debug sources are saved off into the extended package data Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Reviewed-by: Saul Wold <saul.wold@windriver.com> Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03Add SPDX licensesJoshua Watt
Adds the SPDX license database from https://github.com/spdx/license-list-data Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03common-licenses: add missing SPDX licencesRoss Burton
As part of the work to converge our license support with SPDX, ensure that we have all of the licenses that SPDX supports. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03wpebackend-fdo: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03libwpe: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03webkitgtk: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03libx11-compose-data: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise licenses BSD-2-Clause BSD-4-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03iputils: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03python3-packaging: fix license statementRoss Burton
This is licensed as Apache OR BSD, not AND. Also use the precise license BSD-2-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03openssh: remove redundant BSD licenseRoss Burton
The license statement already includes BSD-2-Clause and BSD-3-Clause, so remove the redundant and ambiguous BSD license. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03libevent: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03acpica: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03dtc: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-2-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03nfs-utils: set precise BSD licenseRoss Burton
"BSD" is ambiguous, use the precise license BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03quota: remove BSD licenseRoss Burton
Only the 'quot' tool was BSD licensed, and this was removed upstream in commit 5d30a29 (since 4.05). Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-09-03python3-numpy: remove redundant BSD licenseRoss Burton
The license list already includes BSD-2-Clause and BSD-3-Clause, so remove the redundant and ambiguous BSD license. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-13 23:18:21 +0000