summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2019-04-03webkitgtk: 2.22.6 -> 2.22.7Kai Kang
webkitgtk 2.22.7 is a bug fix release in the stable 2.22 series. * Fix rendering of glyphs in Hebrew (and possibly other languages) when Unicode NFC normalization is used. * Fix several crashes and race conditions. See https://www.webkitgtk.org/2019/03/01/webkitgtk2.22.7-released.html Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-03avahi: fix CVE-2017-6519Kai Kang
Backport patch to fix CVE-2017-6519. CVE: CVE-2017-6519 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-03base.bbclass, staging.bbclass: Move prepare_recipe_sysroot task dependencyPeter Kjellerstedt
Move prepare_recipe_sysroot's task dependency on populate_sysroot from base.bbclass (where it was specified in the middle of do_configure's definition) to staging.bbclass (where the rest of do_prepare_recipe_sysroot is defined). This was a left-over from when recipe specific sysroots were introduced in commit 809746f5 and the task dependency on populate_sysroot was moved from do_configure to do_prepare_recipe_sysroot. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-03tzdata: Install everything by defaultPaul Barker
tzdata is converted to an empty meta package which pulls in all subpackages. The subpackages are defined in a TZ_PACKAGES variable so that we don't have to repeat ourselves. The timezones and conffiles which were in the tzdata package are moved to a new 'tzdata-core' package. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-02layer.conf: Update to warrior release name seriesRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-02busybox: fix CONFIG_RFKILL enable logicMatt Porter
Currently CONFIG_RFKILL is enabled only if both bluetooth *and* wifi distro features are present. It should be enabled when either feature is present. Fix this by switching to use of bb.utils.contains_any(). Signed-off-by: Matt Porter <mporter@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-01python: improve ptestRoss Burton
Add missing runtime dependencies: the test suite needs proper chmod from coreutils, and the Europe/Minsk timezone. Also change run-ptest to use -W (run verbosely on failure) instead of -v (always verbose) to hopefully reduce the noise in the ptest reports. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-01kernel-devsrc: fix /usr/src/kernel symlink to also work for SDKHenrik Nymann Jensen (HNJE)
If kernel-devsrc is used in a SDK context, the symlink from usr/src/kernel points to an absolute path '/lib/modules/${KERNEL_VERSION}/build', which ends up pointing to the local machine's build directory. To address this issue change the symlink to be realtive to ${D}/lib/modules/${KERNEL_VERSION}/build. Signed-off-by: Henrik Nymann Jensen <hnje@triax.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-01libsolv: use GNUInstallDirsRoss Burton
Backport a patch from upstream to use GNUInstallDirs instead of hand-coded path logic, so we have proper control over where files end up. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-01adwaita-icon-theme: depend on librsvgRoss Burton
adwaita-icon-theme uses gtk-encode-symbolic-svg to generate icons, so DEPEND on librsvg-native (and gtk+3-native, via gtk-icon-cache.bbclass) so that this tool exists and can load SVG files. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-01Revert "gtk+3: add librsvg to DEPENDS"Ross Burton
This was added so that adwaita-icon-theme can find the SVG loader for icon generation, but the fix is in the wrong place. GTK+ does not depend on librsvg at all, the tool in GTK+ which loads the icons uses gdk-pixbuf which uses loadable modules. This reverts commit 66828ff04d107b7719c9c8857d7c6c2ebf20a8bb. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29packagegroup-core-base-utils: remove lzipRoss Burton
lzip is pretty niche: people are typically either sticking with that they know (gzip, bzip) or using xz. Data point: only one recipe in oe-core is shipped as a .lz file. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29llvm: fix more places where '8.0' version of llvm was hardcodedAlexander Kanavin
So that it says '8.0.0' to reflect the recent PV change. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29binutils: set CVE_VERSIONRoss Burton
PV is 2.32.0 even though the actual release upstream is 2.32. To a human this is insignificant, but to automated tooling it matters. Specifically, cve-check-tool can't identify CVEs that are in 2.32. Set CVE_VERSION for now, which should be removed when PV and the upstream version match again. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29nasm: add CVE_PRODUCTChen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29xserver-xorg: set CVE_PRODUCTChen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29sqlite3: fix CVE-2019-9936 and CVE-2019-9937Ross Burton
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29machine: clean up config filesJon Mason
Beautify the machine config files by making the names and descriptions more uniform and verbose Signed-off-by: Jon Mason <jdmason@kudzu.us> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29llvm: support older toolchainsRoss Burton
LLVM is now warning if your host compiler is gcc <5.1, and some of our supported operating systems still only have 4.8.5. Set LLVM_TEMPORARILY_ALLOW_OLD_TOOLCHAIN so those builds continue to work, hopefully we retire the old operating systems before LLVM requires 5.1+. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29llvm: update from 8.0.0rc2 to 8.0.0 final releaseAlexander Kanavin
Also, update PV to match the version scheme used by upstream to tag releases (e.g. major.minor.patch). Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29mesa: update 19.0.0 -> 19.0.1Alexander Kanavin
x.0.0 releases are actually considered 'development' by the upstream, and true releases are x.0.1: https://www.mesa3d.org/relnotes/19.0.0.html Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29gcc-8.3: add back GLIBC_DYNAMIC_LINKER riscv changesRicardo Salveti
The riscv GLIBC_DYNAMIC_LINKER changes were dropped during the gcc 8.3 update, breaking usrmerge support. Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29cmake: 3.13.4 -> 3.14.0Pascal Bach
The copyright date changed in the license file, thus the hash change. CMake 3.14 fixes some issues with implicit include path that lead to errors with gcc not finding "stdlib.h" etc in include_next. Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29openssl: follow OE's rule for specifying CVE IDChen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29libarchive: fix up CVE IDs in patchesChen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29asciidoc: use Python 3 portRoss Burton
There's a sort-of-official port of asciidoc to Python 3. Whilst the official replacement is asciidoctor which is rewritten in Ruby, this is a fairly trivial swap and removes Python 2 from core-image-sato builds entirely. Moving forward we should evaluate asciidoctor, but that can wait. Change the RDEPENDS so that python3 is only a dependency for target and nativesdk builds, for native this can use the host python3. Remove redundant DESTDIR export that isn't needed. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29libexif: fix CVE-2016-6328 and CVE-2018-20030Ross Burton
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29target-sdk-provides-dummy: add more perl modules to avoid populate_sdk failureVincent Prince
Signed-off-by: Vincent Prince <vincent.prince.fr@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29systemd: Add pattern matching support to PACKAGECONFIGVincent Prince
libpcre2 is needed to enable grep option to journalctl. Signed-off-by: Vincent Prince <vincent.prince.fr@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29llvm: don't inherit perlnativeRoss Burton
This doesn't appear to be required at all. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29llvm: doesn't actually need pythonnativeRoss Burton
LLVM doesn't actually need pythonnative, the host Python2 is sufficient but cmake's executable searching currently isn't reliable in cross-compilations. Convince cmake by setting PYTHON_EXECUTABLE to point at python2 in the HOSTTOOLS directory. Note that currently LLVM *needs* python2 currently: https://github.com/llvm-mirror/llvm/blob/master/CMakeLists.txt#L670 Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29sysprof: drop obsolete no-update reasonAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-27binutils: fix upstream version checkAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-27sysklogd: switch SRC_URI to the new, maintained locationAlexander Kanavin
The previous SRC_URI seems to be gone, and sysklogd hasn't received any updates there for a long time. The new location says: Origin & References This is the continuation of the original sysklogd by Martin Schulze. Now maintained by Joachim Nilsson. Please file bug reports, or send pull requests for bug fixes and proposed extensions at GitHub. and generally seems credible: http://troglobit.com/ Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-27bmap-tools: fix upstream version checkAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-27blktool: remove a duplicate patchAlexander Kanavin
blktool-gnulib-makedev.patch is actually doing the same thing as 0004-fix-ftbfs-glibc-2.28.patch, so we end up including the same file twice. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-27blktool: update to 4-7.1Alexander Kanavin
This update adds a patch from Debian to match the latest version there. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-27syslinux: fix upstream version checkAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-27db: fix upstream version checkAlexander Kanavin
The new regex excludes the 5.3.28+dfsg1 which is a Debian repackaging of the original tarball: * Repack the .orig tarball to eliminate prebuilt binaries that need a Visual Studio plugin to build from source. (Closes: #898215) https://metadata.ftp-master.debian.org/changelogs/main/d/db5.3/unstable_changelog Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-26timezone: update to 2019aArmin Kuster
The 2019a release of the tz code and data is available. It reflects the following changes, which were either circulated on the tz mailing list or are relatively minor technical or administrative changes: Briefly: Palestine "springs forward" on 2019-03-30 instead of 2019-03-23. Metlakatla "fell back" to rejoin Alaska Time on 2019-01-20 at 02:00. Changes to past and future timestamps Palestine will not start DST until 2019-03-30, instead of 2019-03-23 as previously predicted. Adjust our prediction by guessing that spring transitions will be between 24 and 30 March, which matches recent practice since 2016. (Thanks to Even Scharning and Tim Parenti.) Metlakatla ended its observance of Pacific standard time, rejoining Alaska Time, on 2019-01-20 at 02:00. (Thanks to Ryan Stanley and Tim Parenti.) Changes to past timestamps Israel observed DST in 1980 (08-02/09-13) and 1984 (05-05/08-25). (Thanks to Alois Treindl and Isaac Starkman.) Changes to time zone abbreviations Etc/UCT is now a backward-compatibility link to Etc/UTC, instead of being a separate zone that generates the abbreviation "UCT", which nowadays is typically a typo. (Problem reported by Isiah Meadows.) Changes to code zic now has an -r option to limit the time range of output data. For example, 'zic -r @1000000000' limits the output data to timestamps starting 1000000000 seconds after the Epoch. This helps shrink output size and can be useful for applications not needing the full timestamp history, such as TZDIST truncation; see Internet RFC 8536 section 5.1. (Inspired by a feature request from Christopher Wong, helped along by bug reports from Wong and from Tim Parenti.) Changes to documentation Mention Internet RFC 8536 (February 2019), which documents TZif. tz-link.html now cites tzdata-meta <https://tzdata-meta.timtimeonline.com/>. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-26less: upgrade 549 (terribly broken) -> 550Andreas Müller
Test case: * open xfce4-terminal * run 'echo | less' * press arrow up/down few times * exit less with 'q' => From now on all mouse(wheel) buttons create strange inputs on terminal Release note says [1]: "Sometimes the terminal was left in mouse-reporting mode after exiting less." http://www.greenwoodsoftware.com/less/index.html Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-26adwaita-icon-theme: do not delete symbolic svg but pack them in ${PN}-symbolicAndreas Müller
This fixes: * gtk-icon-browser: for symbolic view almost all icons were missing * xfce's thunar: 'home' and 'up' icons were missing. Had a long discussion with XFCE-people [1] and asked here [2]. How could I overlook the most obvious... [1] https://bugzilla.xfce.org/show_bug.cgi?id=14443 [2] http://lists.openembedded.org/pipermail/openembedded-core/2018-November/275815.html Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-26gtk+3: add librsvg to DEPENDSAndreas Müller
adwaita-icon-themes failes to create symbolic icons. In log.do_install when calling gtk-encode-symbolic-svg there many complaints | Can't load file: Unrecognized image file format We fail her now due to: commit 7f6c57635ff4e1edf7a46c49af34846ad0a4bf73 Author: Alexander Kanavin <alex.kanavin@gmail.com> Date: Wed Jan 30 11:59:25 2019 +0100 gtk+3: remove the gtk-icon-utils-native recipe gtk-icon-utils-native had librsvg in its DEPENDS. We do not add librsvg-native because same issue would occure for gtk-encode-symbolic-svg on target. Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-26sysvinit: consolidate patchesRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-26zlib: clean up ptestRoss Burton
Instead of patching and sedding the makefile, just install test/example and execute it in run-ptest. example is the bulk of the test suite, as minimal as it is. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-26glib: do a build check for strlcpy before runtimeRoss Burton
There's no need to do a runtime check for the behaviour of strlcpy if it doesn't even exist. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-26glib: set glib-specific cross propertiesRoss Burton
GLib wants to execute code to identify several properties of the system, for example is vsprintf() broken and what direction does the stack grow. In cross-compiled environments these fallback to the default values which are not always correct (our vsprintf() is fine, but the test assumes it isn't) so set these properties explicitly. Ideally this happens magically by meson.bbclass using the same logic as siteinfo.bbclass, but we need to fix glib now. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-25libsndfile1: fix CVE-2019-3832Ross Burton
The previous fix for CVE-2018-19758 wasn't complete, so backport another patch to solve it properly. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-25bluez5: fix CVE-2018-10910Ross Burton
Fix this CVE (Bluetooth discoverability may be enabled with no agents to handle requests) by backporting a number of patches from upstream. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-25run-ptest: use error handling for useradd and userdelAditya Tayade
Error handling in shell scripts is too easy to forget and get wrong. It is possible to check every external command for return values but it is better to use a generic setting which halts execution of the script on any failures. Upstream-Status: Pending Signed-off-by: Aditya Tayade <Aditya.Tayade@kpit.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>