summaryrefslogtreecommitdiff
path: root/meta/recipes-extended
AgeCommit message (Collapse)AuthorFiles
2017-07-06ltp: syscalls/add_key02: fix for nonempty NULL payloadFathi Boudra2
Add upstream patch to fix syscalls/add_key02 test for nonempty NULL payload: https://github.com/linux-test-project/ltp/commit/25045624e941ee76a13febd36187e23c6c435507 Signed-off-by: Milosz Wasilewski <milosz.wasilewski@linaro.org> Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-06grep: upgrade to 3.1Dengke Du1
Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-06sysstat:11.5.5 -> 11.5.6susanbian1
Upgrade sysstat from 11.5.5 to 11.5.6. Signed-off-by: susanbian <bianyq@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28slang: add ptestStefan Strogin3
This patch adds ptest for slang, it uses `make runtests` to run tests. The Makefile runs runtests.sh for each *.sl and *.slc tests. runtests.sh is patched for printing test results in a common format, Makefile is patched in order not to compile any dependencies. Changes v2->v3: rebased on the latest master (1d9a88f6). Signed-off-by: Stefan Strogin <sstrogin@cisco.com> Cc: xe-linux-external@cisco.com Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28iptables: Apply 0001-fix-build-with-musl.patch unconditionallyKhem Raj1
This patch is generic enough, That it can be applied universally and makes maintainence easier Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28tzcode-native: quote ${CC}Enrico Scholz1
build fails else with | + make -j 8 -l 6 cc=ccache gcc | make: *** No rule to make target 'gcc'. Stop. Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28cups: don't change permissions of /var/run/cups/certs in do_packageRoss Burton1
This directory is deleted by do_install, so luckily the lack of error checking meant this didn't break. Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28ltp: use upstream patch to fix faccessat/fchmodat build warningsFathi Boudra3
Use 0037-faccessat-and-fchmodat-Fx-build-warnings.patch instead of 0012-fix-faccessat01.c-build-fails-with-security-flags.patch. The new patch has been merged upstream and will be available in next LTP release. Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28logrotate: fix upstream version checkAlexander Kanavin1
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-28mailx: remove the recipeAlexander Kanavin11
This recipe was carried only for LSB compatibility, with upstream being defunct for a long time; if there is a need for a modern, supported implementation of mail/mailx, then s-nail (http://sdaoden.eu/code.html) or mailutils (http://mailutils.org/) should be used. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-28recipes-lsb4/perl: remove the recipesAlexander Kanavin1
These were required by LSB 4.1 tests; there's no other reason to continue carrying them in oe-core. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-28libpng12: remove the recipeAlexander Kanavin1
It was only in oe-core because of LSB; let's remove it. Current libpng is 1.6.x. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-28packagegroup-core-lsb: do not include Qt4 anymoreAlexander Kanavin1
Last version of qt4 was released 2 years ago, and Qt4 was officially EOLd at the end of 2015. On the other hand, LSB is no longer being developed, and so will 'require' Qt4 until the end of time. Let's pull the plug. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-27meta: Add/fix missing Upstream-Status to patchesRichard Purdie24
This adds or fixes the Upstream-Status for all remaining patches missing it in OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-27meta: Fix malformed Upstream-Status tagsRoss Burton2
Fix a variety of spelling and format mistakes to improve the ease of reading the tags programatically. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-23texi2html: Add a dependency on perlPeter Kjellerstedt1
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-23ghostscript: add X11 PACKAGECONFIG infoJoe Slater1
Add information necessary to build for x11, but do not enable that option. Fix parallel build directory creation issue. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-23ghostscript: move to version 9.21Joe Slater11
Eliminate CVE patches that are now in source. Add CUPSCONFIG to configure options. Signed-off-by: Joe Slater <jslater@windriver.com> to be scrunched Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-23libnewt: 0.52.19 -> 0.52.20Huang Qiyu2
Upgrade libnewt from 0.52.19 to 0.52.20. Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-23tzdata: Install zone1970.tabJan Kiszka1
The modern version of zone.tab is required by tzselect e.g. Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-16meta: Drop remnants of uclibc supportRichard Purdie10
uclibc support was removed a while ago and musl works much better. Start to remove the various overrides and patches related to uclibc which are no longer needed. uclibc support in a layer would still be possible. I have strong reasons to believe nobody is still using uclibc since patches are missing and I doubt the metadata even parses anymore. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14sed: changes to support merged /usrAmarnath Valluri1
Few of the perl scripts referring '#!/bin/sed' inside the script. But when 'usrmerge' feature is enabled this path would be /usr/bin/sed. So to satisfy build dependency add '/bin/sed' to it's providers list. Signed-off-by: Amarnath Valluri <amarnath.valluri@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14bash: changes to support merged /usrAmarnath Valluri1
Most of shell scripts refer to '#!/bin/{sh,bash}' inside the script. But when 'usrmege' feature is enabled this path will be /usr/bin/{sh, bash}. so to satisify build dependency add '/bin/{sh,bash}' to its providers list. Signed-off-by: Amarnath Valluri <amarnath.valluri@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-13libnsl2: Include stdint.hKhem Raj2
uintptr_t is defined in stdint.h Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-13ltp: Include stdint.h for uintptr_tKhem Raj2
Fixes build with musl and upcoming glibc Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-12diffutils: prevent host path leaks, set pr pathJussi Kukkonen1
Note that this just removes a host path leakage: diffutils still doesn't depend on coreutils so 'pr' might not actually be there on image (this only breaks "diff -l" so no big deal). Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-12gzip: add ptestDenys Zagorui3
Signed-off-by: Denys Zagorui <denys.zagorui@globallogic.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-09libtirpc: Fix CVE-2017-8779Fan Xin2
This vulnerability is also called "rpcbomb". Backport upstream patch to fix this vulnerability. CVE: CVE-2017-8779 Signed-off-by: Fan Xin<fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-09hdparm: Upgrade to 9.52Fan Xin1
1. Upgrade hdparm from 9.51 to 9.52 2. Update the checksum of LIC_FILES_CHKSUM The following content is appended to LICENSE.TXT, the licence is still BSD & GPLv2. The apt.c file is Copyright (c) 2009 Jan Friesse <jfriesse@gmail.com>. You may use/distribute apt.c freely, under the terms of either (your choice) the GNU General Public License version 2, or a BSD style license. Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-09man-pages: Upgrade to 4.11Fan Xin1
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-09sysstat: upgrade to 11.5.5Chen Qi1
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06lsbinitscripts: Upgrade to 9.72Fan Xin2
1. Upgrade lsbinitscripts from 9.68 to 9.72 2. Rebase the following patch file. functions.patch Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06logrotate: Support system dates back to the year 1970Zhenbo Gao2
backport commit bdbfea3 from logrotate upstream. Signed-off-by: Zhenbo Gao <zhenbo.gao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06libxml-namespacesupport-perl: Upgrade 1.11 -> 1.12Fan Xin1
1. Upgrade libxml-namespacesupport-perl from 1.11 to 1.12 2. Update the checksum of licence file because the author and contributors's name list is deleted. The content of licence has no change. Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06acpica: Upgrade 20150515 -> 20170303Fan Xin2
1. Upgrade acpica from 20150515 to 20170303 2. Rebase the patch file for 20170303 Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06ltp: upgrade to 20170516Dengke Du3
1. rebase patch 0034-periodic_output.patch This patch can't apply, because in memcg_stress_test.sh, it used a different value for RUN_TIME: 15*60, we can check it here: https://github.com/linux-test-project/ltp/blob/20170516/testcases/kernel/controllers/memcg/stress/memcg_stress_test.sh#L40 Previous is 60*60, we can check it here: https://github.com/linux-test-project/ltp/blob/20170116/testcases/kernel/controllers/memcg/stress/memcg_stress_test.sh#L40 2. delete patch 0039-fcntl-fix-the-time-def-to-use-time_t.patch This patch didn't need any more, because the upstream has remove the unneeded time() declaration. We can check it here: https://github.com/linux-test-project/ltp/commit/f8c96804e5e89d360707c9670b18221b11cf3858 Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06cups: Upgrade 2.2.2 -> 2.2.3Fan Xin2
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-06lzip: Upgrade 1.18 -> 1.19Fan Xin1
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-05recipes: Replace "cp -a" with "cp -R --no-dereference --preserve=mode, links"Martin Jansa1
* Using "cp -a" leaks UID of user running the builds, causing many QA warnings. * See this thread for details: http://lists.openembedded.org/pipermail/openembedded-core/2015-November/112904.html Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-30ghostscript: CVE-2016-7977, CVE-2016-7978, CVE-2016-7979, CVE-2017-9216Catalin Enache5
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document. Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice. Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser. libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file. References: https://nvd.nist.gov/vuln/detail/CVE-2016-7977 https://nvd.nist.gov/vuln/detail/CVE-2016-7978 https://nvd.nist.gov/vuln/detail/CVE-2016-7979 https://nvd.nist.gov/vuln/detail/CVE-2017-9216 Upstream patches: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8abd22010eb4db0fb1b10e430d5f5d83e015ef70 http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=6f749c0c44e7b9e09737b9f29edf29925a34f0cf http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=875a0095f37626a721c7ff57d606a0f95af03913 http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=3ebffb1d96ba0cacec23016eccb4047dab365853 Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-29lsof: clear setuidKai Kang1
Having 'lsof' as a +s (setuid) binary could lead to security issues if a compromise in the binary is found. It is better that it be -s by default as a precaution. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-25rpcbind: Fix CVE-2017-8779Fan Xin2
This vulnerability is also called "rpcbomb". Backport upstream patch to fix this vulnerability. CVE: CVE-2017-8779 Signed-off-by: Fan Xin<fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-05-25libnsl2: Add recipeKhem Raj3
NIS functionality has been split out into independent library from glibc Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-05-25libtirpc: Fix build error due to missing stdint.h> includeKhem Raj2
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-05-25libidn: Fix hardened build with muslKhem Raj2
Re-introduce the patch that was deemed to be not needed but it infact is still needed with musl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-05-23ed: update to 1.14.2Alexander Kanavin1
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-05-18ghostscript: check for incompatible hostChang Rebecca Swee Fun1
The following warning occurs when building with meta-zephyr with MACHINE set to arduino-101-sss: WARNING: /srv/sdc/builds/11319/meta/recipes-extended/ghostscript/ghostscript_9.20.bb: Unable to get checksum for ghostscript SRC_URI entry objarch.h: file could not be found This is due to the the TARGET_ARCH = "arc" for meta-zephyr is not supported by ghostscript and causing bitbake unable to locate the correct config file during recipe parse. Adding checker in the recipe to raise an exception if the target architecture is "arc". This would then only display an error if someone specifically tries to build the recipe: ERROR: ghostscript was skipped: incompatible with host arc-yocto-elf (not in COMPATIBLE_HOST) [YOCTO #11344] Signed-off-by: Chang Rebecca Swee Fun <rebecca.swee.fun.chang@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-05-18man-pages: upgrade from 4.09 to 4.10Yeoh Ee Peng1
Signed-off-by: Yeoh Ee Peng <ee.peng.yeoh@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-05-18ghostscript: CVE-2016-8602, CVE-2017-7975Catalin Enache3
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack. Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code. References: https://nvd.nist.gov/vuln/detail/CVE-2016-8602 https://nvd.nist.gov/vuln/detail/CVE-2017-7975 Upstream patches: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=f5c7555c303 http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5e57e483298 Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-05-18libsolv: upgrade to 0.6.27Maxin B. John1
Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-04 20:16:13 +0000