summaryrefslogtreecommitdiff
path: root/meta/recipes-support
AgeCommit message (Collapse)AuthorFiles
2016-09-23curl: security fix for CVE-2016-7141Sona Sarmadi2
Affected versions: Affected versions: libcurl 7.19.6 to and including 7.50.1 Not affected versions: libcurl >= 7.50.2 Reference to upstream patch: https://curl.haxx.se/CVE-2016-7141.patch Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-09-02curl: security fix for CVE-2016-5421Maxin B. John2
Affected versions: libcurl 7.32.0 to and including 7.50.0 Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-09-02curl: security fix for CVE-2016-5420Maxin B. John2
Affected versions: libcurl 7.1 to and including 7.50.0 Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-09-02curl: security fix for CVE-2016-5419Maxin B. John2
Affected versions: libcurl 7.1 to and including 7.50.0 Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-08-25lzop: Fix build with gcc-6Khem Raj2
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-08-01libproxy: use snapshot.debian.org for SRC_URIMaxin B. John1
Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will only contain releases that are currently in Debian. So, move all of SRC_URI to the .bb so it can use snapshot.debian.org instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues to work. [YOCTO #10040] Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-01serf: use snapshot.debian.org for SRC_URIMaxin B. John1
Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will only contain releases that are currently in Debian. So, move all of SRC_URI to the .bb so it can use snapshot.debian.org instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues to work. [YOCTO #10040] Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-07-27nss: fix build for gcc-6Tim Orling2
[YOCTO #9897] (Fedora-24 host is gcc-6) Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-06-29libpcre: Fix CVE-2016-3191Ismo Puustinen2
Fix workspace overflow for (*ACCEPT) with deeply nested parentheses. The patch is from libpcre version control at http://vcs.pcre.org/pcre?view=revision&revision=1631 with the ChangeLog part removed. Original author is Philip Hazel. (From OE-Core rev: 386534f968f4da376ba7778b5d436bad4ce8355b) Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-06-29popt: fix dependencies and QA IssueMaxin B. John1
Fix the following QA warning: WARNING: popt-1.16-r3 do_package_qa: QA Issue: popt rdepends on libiconv, but it isn't a build dependency, missing libiconv in DEPENDS or PACKAGECONFIG? [build-deps] (From OE-Core rev: 08aeb5a9e0067e2e9e0fba8614409102e5a0a00e) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-06-29libunwind: backport aarch64_be supportRuslan Bilovol3
Backport 2 patches from v1.2-rc1 tag of libunwind git repo. These patches add aarch64_be support to this package. (From OE-Core rev: 396353c3127b20244c4c5cc321adad7d4e48f544) Signed-off-by: Ruslan Bilovol <rbilovol@cisco.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-04-29boost: improve configureRoss Burton1
Instead of adding a custom task (do_boostconfig) simply use the existing do_configure. Ensure that there are no relative paths in do_configure. Instead of editing the user-config.jam sample file in the source tree (which is entirely comments) and extending it on every build, create a new user-config.jam in ${WORKDIR}. Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-29boost: delete the build directory before rebuildingRoss Burton1
If there is an existing build directory when do enter do_compile() then delete it, as it contains the previous build. If the rebuild was caused because dependencies have changed we want to ensure that a rebuild actually happens. Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-18ca-certificates: support ToyboxPatrick Ohly2
"mktemp -t" is deprecated and does not work when using Toybox. Replace with something that works also with Toybox. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-04-11meta: remove redundant ac_cv_sizeof_off_t assignmentsRoss Burton1
ac_cv_sizeof_off_t was previously in the site cache files, which was breaking large file support and required a workaround in each recipe that actually wanted to use large files. Now that the entry has been removed from the site cache, we can remove the workarounds. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-08apr-util: fix path in rules.mk for nativesdkRobert Yang1
Fixed when build nativesdk-apr-util: | gawk: fatal: can't open source file `/opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/build-1/make_exports.awk' for reading (No such file or directory) The ${S} should be ${B}. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-08bdwgc: installed-vs-shipped for nativesdkRobert Yang1
Fixed: ERROR: nativesdk-bdwgc-7.4.2-r0 do_package: QA Issue: nativesdk-bdwgc: Files/directories were installed but not shipped in any package: /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc/porting.html /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc/gcinterface.html /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc/gcdescr.html /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc/README.solaris2 [snip] This was caused by hardcode of datadir. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-05bdwgc: use github repo for source locationBill Randle1
The Yocto Autobuilder has been unable to fetch the release package from the developer's website at www.hboehm.info, so change recipe to fetch from the developer's github repo instead. Signed-off-by: Bill Randle <william.c.randle@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-01libassuan: use package specific licensingAndre McCurdy1
- The main libassuan.so library is LGPLv2.1+ - Test apps (in tests sub directory) and documentation are GPLv3+ - Windows CE specific binaries (gpgcedev.dll and gpgcemgr) are GPLv3+ When building the current OE recipe, the test apps are compiled but not installed. The Windows CE specific binaries are not compiled. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-30recipes-support/rng-tools: Change runlevel start from S to 2, 3, 4, 5.Aníbal Limón1
When using systemd as init rng-tools is causing a circular dependency between units, [ 7.706250] systemd[1]: basic.target: Found ordering cycle on basic.target/start [ 7.706934] systemd[1]: basic.target: Found dependency on sysinit.target/start [ 7.707795] systemd[1]: basic.target: Found dependency on rng-tools.service/start [ 7.708692] systemd[1]: basic.target: Found dependency on basic.target/start [ 7.709461] systemd[1]: basic.target: Breaking ordering cycle by deleting job rng-tools.service/start [ 7.710404] systemd[1]: rng-tools.service: Job rng-tools.service/start deleted to break ordering cycle starting with basic.target/start The problem is related to systemd running sysvinit scripts by default add dependency of basic.target for sysvinit script so when sysvscript is at rcS is added also as dependency of sysinit.target causing a cirular dependency in this case: basic.target -> sysinit.target -> rng-tools.service -> basic.target. Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-30ptest-runner_2.0.bb: Update recipe to point git.yoctoproject.org repo.Aníbal Limón1
Since ptest-runner is a Yocto Project tool is better to have hosted into git.yoctoproject.org. Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-28libunwind: Fix build on mips/mips64 for musl targetsKhem Raj2
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-24libunwind: Fix build with fstack-protector on muslKhem Raj4
libunwind makery inserts -nostdlib during linking which fails the build on musl when security flags are enabled since it remove ssp from linking, so add them explicitly to SECURITY_LDFLAGS disable tests for musl targets, tests use obsolete posix APIs e.g. getcontext patchout x86_local_resume() on x86, gets a working linunwind on x86, it seems that it wont work even in glibc case but lets leave it as it is for glibc and apply the patch only for musl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-03-20bdgwc: Backport nios2 supportMarek Vasut2
Backport patch from bdwgc mainline which adds initial support for nios2 architecture. Signed-off-by: Marek Vasut <marex@denx.de> Cc: Ley Foon Tan <lftan@altera.com> Cc: Richard Purdie <richard.purdie@linuxfoundation.org> Cc: Ross Burton <ross.burton@intel.com> Cc: Thomas Chou <thomas@wytron.com.tw> Cc: Walter Goossens <waltergoossens@home.nl> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-03-20libatomic-ops: Backport nios2 supportMarek Vasut2
Backport a patch adding nios2 support into libatomic-ops Signed-off-by: Marek Vasut <marex@denx.de> Cc: Ley Foon Tan <lftan@altera.com> Cc: Richard Purdie <richard.purdie@linuxfoundation.org> Cc: Ross Burton <ross.burton@intel.com> Cc: Thomas Chou <thomas@wytron.com.tw> Cc: Walter Goossens <waltergoossens@home.nl> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-03-20bdwgc: Check for getcontext() API during configureKhem Raj2
This helps in compiling dependent components like guile where it shows the problem of missing getcontext API when using libc which dont implement it e.g. musl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-03-12recipes-gnome: fix introspection supportAlexander Kanavin4
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-12libsoup-2.4: enable gobject introspectionAlexander Kanavin1
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-11nettle: The variable named p in the patch file was incorrectly named.ngutzmann1
The variable in question should have been called ecc->p. The patch has been updated so that the compilation of the nettle recipe would complete successfully. The backport originated from this commit https://git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d Signed-off-by: ngutzmann <nathangutzmann@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-03-10nettle: disable static for 2.7.1Ross Burton1
2016-03-10nettle: Security fix CVE-2015-8804Armin Kuster2
(From OE-Core master rev: 7474c7dbf98c1a068bfd9b14627b604da5d79b67) minor tweak to get x86_64/ecc-384-modp.asm to apply (From OE-Core rev: d1903e264ab62d34daeb652c89c6fb67e7c9b42d) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Joshua Lock <joshua.g.lock@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-10nettle: Security fix CVE-2015-8803 and CVE-2015-8805Armin Kuster2
(From OE-Core master rev: f62eb452244c3124cc88ef01c14116dac43f377a) hand applied changes for ecc-256.c (From OE-Core rev: cb03397ac97bfa99df6b72c80e1e03214e059e6e) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Joshua Lock <joshua.g.lock@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-03-09db: remove the NO_UPDATE_REASON and replace it a comment about RPMMark Hatle1
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2016-03-06createrepo: Fix stat floating timestampsRichard Purdie2
When reading the mtime from disk, the system can get a floating point value. Convert this to an int for comparision purposes, else some packages always get reindexed as the value in the index is an int. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-06nspr: Fix build regression on musl from last upgradeKhem Raj2
This patch is no longer required as upstreamed has fixed the problem in more comprehensive way Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-06acl: Fix re pattern in test casesHe Zhe3
ls adds a '.' at the end of the permission field list on SELinux machines, filter this out so root tests work on SELinux machines. And backport one patch for other tests. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-28uclibc support for rng-toolsMaxin B. John2
Uclibc has its own argp implemented as libuargp. So, we add a new option --enable-uclibc to select it. Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28boost.inc: fix BJAM_OPTS --build-dir optionAndre McCurdy1
The correct syntax is --build-dir ( --builddir is silently ignored ). Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28shared-mime-info: update to 1.6Alexander Kanavin2
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28nettle: update to 3.2Alexander Kanavin1
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28gnupg: update to 2.1.11Alexander Kanavin1
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28nspr: update to 4.12Alexander Kanavin1
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28libfm: update to 1.2.4Alexander Kanavin2
LICENSE checksum change due to formatting changes, and 'how to apply those terms' section dropped from the GPL text. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28boost.inc: enable more verbose build logsAndre McCurdy1
The default build output is very terse. Add -d+2 (ie "Show commands as they are executed") to BJAM_OPTS to make the do_compile logs more informative. Also add -q (ie "Stop at first error") to BJAM_OPTS and fix typo in comments. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28boost.inc: limit ARM_INSTRUCTION_SET over-rides to armv4/armv5Andre McCurdy1
The original over-ride dates back to 2009: http://git.openembedded.org/openembedded-core/commit/?id=43e94412c45b4b79485a64010c76d89b245bb235 There are no obvious issues seen now when building boost in thumb2 for Cortex A15. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28apr-util: add ldap crypto and sqlite3 to PACKAGECONFIGIoan-Adrian Ratiu1
Enable apr-util's cryptographic routines so that the apache2 package can encrypt session data. Also add sqlite3 and ldap modules, disabled by default. Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28apr-util: fix loadable module packagingIoan-Adrian Ratiu1
A new QA check was introduced by 47d38d4d86ec6a which catches recipes which install loadable modules (*.so) inside -dev packages instead of symlinks. Install apr-util's modules into ${PN} and also skip the QA check [dev-so] because it is the reverse of the check introduced by 47d38d4d86ec6a (thus if a recipe passes one it fails the other). Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28liburcu: add support for aarch64_beTudor Florea2
Signed-off-by: Tudor Florea <tudor.florea@enea.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-21libsoup-2.4: disable libsoup-gnome by defaultAndre McCurdy1
libsoup-gnome is entirely deprecated and has just been stubs since 2.42. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-21libsoup-2.4: prevent PACKAGECONFIG dependant package renamingAndre McCurdy1
When built without gnome support, libsoup-2.4 will contain only one shared lib and will therefore become subject to renaming by debian.bbclass. Prevent renaming in order to keep the package name consistent regardless of whether gnome support is enabled or disabled. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>