summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
AgeCommit message (Collapse)Author
2024-02-29libmicrohttpd: upgrade 0.9.77 -> 1.0.1Wang Mingyu
Changelog: fixes and improves builds with non-default configure parameters. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-29libksba: upgrade 1.6.5 -> 1.6.6Wang Mingyu
Changelog: Fix a possible wrong error return from the DER builder. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-29libgpg-error: upgrade 1.47 -> 1.48Wang Mingyu
0001-Do-not-fail-when-testing-config-scripts.patch refreshed for 1.48 Changelog: =========== * New configure option --with-libtool-modification. * New option parser flag to detect commands given without a double dash. There is also the new meta command "command-mode" to set this flag via a config file. * Added an es_fopen mode flag "sequential" with support on Windows. * Added an es_fopen mode flag "wipe" to cleanup internal buffers at close time. * New function gpgrt_wipememory. * Improvements to setenv on Windows. * Fixed call to estream-printf string filters. * Many improvements to the yat2m tool. * Updates to the build system. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-29libffi: upgrade 3.4.5 -> 3.4.6Wang Mingyu
meta/recipes-support/libffi/libffi/not-win32.patch refreshed for 3.4.6 Changelog: =========== -chore: update version to 3.4.6 and fix long double regression on mips64 and alpha -Update sparc64 host -Update cfarm hostnames -Always define long double types -update copyright year in libffi.texi -Update version, copyright and testsuite info -Fix test filename reference Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-29bash-completion: upgrade 2.11 -> 2.12.0Wang Mingyu
License-Update: docs(COPYING): use unmodified upstream license file Changelog: https://github.com/scop/bash-completion/releases/tag/2.12.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-27libexif: remove unused version_underscoreRoss Burton
This function hasn't been used since the upgrade to 0.6.23 in 2021[1] [1] oe-core 65a54f72e15f59bdf9d8c4618f3ef8510541d134 Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-24meta: Remove some not needed CVE_STATUSSimone Weiß
CVE_STATUS was set for those components, but meanwhile databases are updated with corrected information, so setting the CVE_STATUS is not needed anymore. Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-21numactl: Upgrade 2.0.17 -> 2.0.18Richard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-18gnupg: disable tests to avoid running target binaries at build timeChen Qi
By default, the tests are built and run at do_compile and we can see errors like below in log.do_compile: gnupg-2.4.4/tests/cms/inittests: line 99: ../../sm/gpgsm: cannot execute binary file: Exec format error Note that the do_compile process still succeeds. However, we'd better avoid executing these target binaries at build time. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-18vim: upgrade from 9.0.2130 -> 9.1.0114Tim Orling
https://www.vim.org/vim-9.1-released.php Vim 9.1 is available The Vim project is happy to announce that Vim 9.1 has finally been released. This release is dedicated to Bram Moolenaar, Vim's lead developer for more than 30 years, who passed away half a year ago. The Vim project wouldn't exist without his work! Vim 9.1 is mainly a bug fix release, it contains hundreds of bug fixes, a few new features and there are many minor improvements. Changes: https://github.com/vim/vim/compare/v9.0.2130...v9.1.0114 CVE: CVE-2024-22667 (includes commit https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-18libgit2: update 1.7.1 -> 1.7.2Simone Weiß
Update libgit2 to pull in securtiy fixes. Changelog summary: - A bug in git_revparse_single is fixed that could cause a Denial of Service attack. This fixes CVE-2024-24575 - A bug in git_index_add is fixed that could lead to arbitrary code execution. This fixes CVE-2024-24577 - A bug in the smart transport negotiation could have caused an out-of-bounds read. Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-17libcap-ng: fix build with swig 4.2.0Anuj Mittal
Backport an upstream patch to remove Python exception handler which is deprecated and also removed from swig. https://github.com/swig/swig/commit/736c052d7de3685be9d5c4aecee6b36273e8c319 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-17sqlite3: upgrade 3.44.2 -> 3.45.1Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-17libproxy: upgrade 0.5.3 -> 0.5.4Anuj Mittal
This includes a fix to include complete library version. Release notes: https://github.com/libproxy/libproxy/releases/tag/0.5.4 Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-17enchant2: upgrade 2.6.5 -> 2.6.7Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-17libffi: upgrade to 3.4.5Ross Burton
Drop the clang/VFP patch, merged in 00116b6. Drop the FILES for ${libdir}/libffi-${PV}, this file isn't installed. License-Update: Copyright year updated to 2024. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-15ptest-runner: Bump to 2.4.3 (92c1b97)Anibal Limon
Pull small fixed related to secure builds, handling of rc in every ptest and better tests output when timeout. Changes, 92c1b97 Do not reset error counter before each test 7de7e2b utils: run_child fix security flags build 6a9fba2 utils.c: get_available_ptests fix security flags compilation 5b8ad9a tests: Ensure that timeouts still print ERROR d939217 SECURITY.md: Add file Signed-off-by: Anibal Limon <anibal@limonsoftware.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2024-02-13bmap-tools: Add missing runtime dependencyVikas Katariya
Python3 module netrc is required by bmap-tools (v3.7), therefore add `python3-misc` as runtime dependency. Signed-off-by: Vikas Katariya <vikas.katariya@arm.com>
2024-02-09Revert "lzop: remove recipe from oe-core"Marek Vasut
This reverts commit dea5e8863792dc7bb3324b543e04da4c94a060aa. The original commit claims that lzop is unused in OE-core. That is not correct, the following places still use it and became unbuildable now: " meta/classes-recipe/image_types.bbclass:CONVERSION_CMD:lzo = "lzop -9 ${IMAGE_NAME}.${type}" meta/classes-recipe/image_types.bbclass:CONVERSION_DEPENDS_lzo = "lzop-native" meta/classes-recipe/kernel-uboot.bbclass: lzop -9 linux.bin meta/classes-recipe/kernel.bbclass:DEPENDS += "${@bb.utils.contains("INITRAMFS_FSTYPES", "cpio.lzo", "lzop-native", "", d)}" meta/classes-recipe/kernel.bbclass: lzop -df ${B}/usr/${INITRAMFS_IMAGE_NAME}.$img " Furthermore, LZO is the best compromise between kernel decompression time and size on low end ARM systems, that is why it is often used with e.g.: FIT_KERNEL_COMP_ALG = "lzo" FIT_KERNEL_COMP_ALG_EXTENSION = ".lzo" Reinstate the package to avoid breaking this use case. [RP: For me, the real reason to justify this is fact that several SoC/BSP layers do want this as a dependency] Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-08gnutls: print log if ptest failsSimone Weiß
There are AB-INT issues with the gnutls tests and the test for naked-alerts is failing. Tweak the run-ptest script to save the error log to obtain more infos for debugging. Related to [YOCTO #15352]. Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-05curl: Update to 8.6.0Robert Joslyn
This is a bug fix and feature update. Release notes are available at: https://curl.se/changes.html#8_6_0 Disable test 1478, it's comparing help output to documentation. License-Update: Copyright year updated Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03nghttp2: upgrade 1.58.0 -> 1.59.0Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03gnupg: upgrade 2.4.3 -> 2.4.4Wang Mingyu
fix-ldap.patch removed since it's included in 2.4.4. 0001-configure.ac-use-a-custom-value-for-the-location-of-.patch 0004-autogen.sh-fix-find-version-for-beta-checking.patch relocate.patch refreshed for 2.4.4 Changelog: https://dev.gnupg.org/T6578 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03dos2unix: upgrade 7.5.1 -> 7.5.2Wang Mingyu
License-Update: Copyright year updated to 2024 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03iso-codes: upgrade 4.15.0 -> 4.16.0Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03at-spi2-core: upgrade 2.50.0 -> 2.50.1Wang Mingyu
Changelog: atk-adaptor: Fix critical when no table cell array is returned. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03numactl: upgrade 2.0.16 -> 2.0.17Richard Purdie
Drop two backported patches, refresh others. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-30gnutls: Upgrade 3.8.2 -> 3.8.3Simone Weiß
Upgrade version to adress recent CVE findings. Changelog ========= ** libgnutls: Fix more timing side-channel inside RSA-PSK key exchange [GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553] ** libgnutls: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures [GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567] ** libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token certtool was unable to handle Ed25519 keys generated on PKCS#11 with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2. Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-26p11-kit: fix parallel build failuresKai Kang
It fails occasionally with missing generated header files: | ../git/common/asn1.c:42:10: fatal error: openssl.asn.h: No such file or directory | 42 | #include "openssl.asn.h" | | ^~~~~~~~~~~~~~~ | compilation terminated. According to meson manual page: https://mesonbuild.com/Wrap-best-practices-and-tips.html#declare-generated-headers-explicitly 'asn_h_dep' should be a dependency of static_library target 'libp11_asn1' to make sure that required header files generated before compile common/asn1.c. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-24libssh2: backport fix for CVE-2023-48795Ross Burton
Backport the upstream fix for CVE-2023-48795. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-24libpsl: upgrade 0.21.2 -> 0.21.5Anuj Mittal
License-Update: Copyright dates changed Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-21enchant2: upgrade 2.6.4 -> 2.6.5Jiang Kai
Changelog: ============ -permits error messages from spelling providers not to be valid UTF-8. -The --with-hunspell-dir configure option is removed (along with all the other ---with-PROVIDER-dir options, which did nothing). -Doxygen API documentation is now included in the release tarball Signed-off-by: Jiang Kai <jiangkai@fujitsu.com> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-21debianutils: upgrade 5.15 -> 5.16Jiang Kai
Changelog: Upload to unstable per request of Chris Hofstaedtler. Signed-off-by: Jiang Kai <jiangkai@fujitsu.com> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19vte: upgrade 0.74.1 -> 0.74.2Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19nghttp2: upgrade 1.57.0 -> 1.58.0Wang Mingyu
Changelog: ============ -Fix build error when both clock_gettime and GetTickCount64 are available -nghttpx: Shutdown h3 stream write if reset by a remote endpoint -Bump golang.org/x/net from 0.15.0 to 0.17.0 -cmake: speed up warning option detection -Update doc -ngtcp2 has merged BBR and BBRv2 under BBR (fixes issue #1955) -Bump ngtcp2 -Integration servertester h3 -Refactor character comparison -nghttpx: Stricter transfer-encoding checks -Configure cygwin -windows: Fix warnings -Prefer clock_gettime if CYGWIN defined -Bump neverbleed -Bump ngtcp2 -Bump neverbleed Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19libbsd: upgrade 0.11.7 -> 0.11.8Wang Mingyu
License-Update: Switch arc4random(3bsd) man page from OpenBSD to NetBSD 0001-funopen-Replace-off64_t-with-off_t-in-funopen_seek.patch removed since it's included in 0.11.8 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19rng-tools: Revert "rng-tools: move to meta-oe"Randy MacLeod
This reverts commit d2b445384da3f3e6dab8577b6c56648b5244a788. Revert this commit since: - some systems using oe-core master may still be using kernels from before 5.6 pulled in the rng-tools algorithm, and - some hardware platforms may not have a hardware random number generator and could therefore need to run rngd to avoid long boot-time initialization due to a depleted entropy pool. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19libunwind: clean up configurationRoss Burton
Add a PACKAGECONFIG for the support for zlib-compressed debuginfo. There's no need to explicitly enable reading of .debug_frame segments as this is enabled automatically for arm/aarch64. Enable static globally, there's not much to gain by making this musl-specific. Don't disable the tests on musl as they verify that libunwind can link, which is important with external libucontext libraries. No need to disable documentation on musl, as it's already disabled out of the box. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19libunwind: refresh patchesRoss Burton
0001-src-Gtrace-remove-unguarded-print-calls.patch has been merged, so update the Upstream-Status. 0003-x86-Stub-out-x86_local_resume.patch has been hopefully obsoleted by the use of libucontext, remove. Split 004-Fix-build-on-mips-musl.patch into two, as there's two independent issues here. 0006-Fix-for-X32.patch appears to have been fixed with 31738a upstream, in 1.6.0. musl-header-conflict.patch was obsoleted by recipe-specific-sysroots, remove it. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19libunwind: merge .inc and .bbRoss Burton
There's no need to these to be split, so merge them together. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-18classes/recipes: Switch to use inherit_deferRichard Purdie
Now that bitbake supports the use of inherit_defer, switch all conditional (variable based) inherits to use this instead. This leads to more a more deterministic user experience since there is no longer an immediate expansion and later changes to the variables in question (e.g. a bbappend) are accounted for. This patch tries to ensure the behaviour before/after remains as unchanged as it reasonably can, e.g. by always inherting populate_sdk_base. native and nativesdk continue to need to be inherited last, hence being used with inherit_defer in a handful of very specific cases. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-15bmaptool: add 3 fixesTrevor Woerner
I found a couple issues with bmaptool, including a race condition, which I have fixed and submitted upstream. This patch adds these fixes to the project now while waiting for feedback and a new release: BmapCopy.py: fix error message CLI.py: fix block device udev race condition BmapCopy.py: tweak suggested udev rule Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-15rng-tools: move to meta-oeRandy MacLeod
Nothing in oe-core depends on rng-tools anymore: e7e1bc43ca rng-tools: splitting the rng-tools systemd/sysvinit serivce as a package so move it to meta-oe for people who still want to run rngd as a service for some reason or for those who want to run rng-test. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-10rng-tools: remove obsolete build time dependency on sysfsutilsdavid d zuhn
This package used to use libsysfs, but has been modified to read the /sys file system directly. This build dependency is no longer needed. Signed-off-by: david d zuhn <david.zuhn@sonos.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2024-01-10libpcre2: fix upstream version checkAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2024-01-10taglib: fix upstream version checkAlexander Kanavin
Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2024-01-09libusb1: Do not match on -rc versionsFabio Estevam
Currently, the upstream check gives incorrect results: $ devtool latest-version libusb1 ... INFO: Current version: 1.0.26 INFO: Latest version: 1.0.27 There is no 1.0.27 release yet, only 1.0.27-rc1. Anuj Mittal has submitted the fix in v2: https://lists.openembedded.org/g/openembedded-core/message/192683 but the original version was applied instead. Fix it by passing "$" to make an exact match on the version. With this change applied, devtool reports the correct latest version: INFO: Current version: 1.0.26 INFO: Latest version: 1.0.26 Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-07libcap-ng-python: upgrade 0.8.3 -> 0.8.4Yi Zhao
ChangeLog: - In capng_change_id, clear PR_SET_KEEPCAPS if returning an error - pscap: add -p option for reporting a specified process - Annotate function prototypes to warn if results are unused - Drop python2 support * Remove "--with-python" option as python2 support was dropped. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-07libcap-ng: upgrade 0.8.3 -> 0.8.4Yi Zhao
ChangeLog: - In capng_change_id, clear PR_SET_KEEPCAPS if returning an error - pscap: add -p option for reporting a specified process - Annotate function prototypes to warn if results are unused - Drop python2 support * Remove "--with-python" option as python2 support was dropped. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-03bmap-tools: Upgrade to 3.7Fabio Estevam
Upgrade to version 3.7. The COPYING file has been renamed as LICENSE, so adapt LIC_FILES_CHKSUM accordingly. Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>