Commit Graph

3314 Commits

Author SHA1 Message Date
Alexander Kanavin
7e3f095a82 nghttp2: update 1.56.0 -> 1.57.0
This release has a fix to mitigate CVE-2023-44487: HTTP/2 Rapid Reset:

https://nghttp2.org/blog/2023/10/10/nghttp2-v1-57-0/

(From OE-Core rev: c24b75f027f2609dac935e8981f2eb58394b1cc6)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-12 07:53:40 +01:00
Jose Quaresma
ba7b606636 curl: 8.3.0 -> 8.4.0
curl and libcurl 8.4.0

 Public curl releases:         252
 Command line options:         258
 curl_easy_setopt() options:   303
 Public functions in libcurl:  93
 Contributors:                 2995

This release includes the following changes:

 o curl: add support for the IPFS protocols via HTTP gateway [46]
 o curl_multi_get_handles: get easy handles from a multi handle [20]
 o mingw: delete support for legacy mingw.org toolchain [45]

This release includes the following bugfixes:

 o acinclude.m4: Document proper system truststore on FreeBSD [83]
 o appveyor: fix yamlint issues, indent [67]
 o appveyor: rewrite batch in PowerShell + CI improvements [109]
 o autotools: adjust `CURL_CA_PATH` value to CMake [53]
 o autotools: restore `HAVE_IOCTL_*` detections [111]
 o base64: also build for curl [78]
 o bufq: remove Curl_bufq_skip_and_shift (unused) [47]
 o build: delete checks for C89 standard headers [65]
 o build: do not publish `HAVE_BORINGSSL`, `HAVE_AWSLC` macros [114]
 o cf-socket: simulate slow/blocked receives in debug [120]
 o cmake, configure: also link with CoreServices [32]
 o cmake: add check for suseconds_t [91]
 o cmake: add feature checks for `memrchr` and `getifaddrs` [57]
 o cmake: add missing checks [86]
 o cmake: delete old `HAVE_LDAP_URL_PARSE` logic [105]
 o cmake: detect `HAVE_CLOCK_GETTIME_MONOTONIC_RAW` [75]
 o cmake: detect `HAVE_GETADDRINFO_THREADSAFE` [76]
 o cmake: detect `sys/wait.h` and `netinet/udp.h` [61]
 o cmake: detect TLS-SRP in OpenSSL/wolfSSL/GnuTLS [93]
 o cmake: disable unity mode with Windows Unicode + TrackMemory [108]
 o cmake: fix `HAVE_LDAP_SSL`, `HAVE_LDAP_URL_PARSE` on non-Windows [110]
 o cmake: fix `HAVE_WRITABLE_ARGV` detection [77]
 o cmake: fix duplicate symbols when linking tests [73]
 o cmake: fix missing `zlib.h` when compiling `libcurltool` [72]
 o cmake: fix stderr initialization in unity builds [71]
 o cmake: fix the help text to the static build option in CMakeLists.txt [10]
 o cmake: fix unity builds for more build combinations [96]
 o cmake: fix unity symbol collisions in h2 builds [48]
 o cmake: fix unity with Windows Unicode + TrackMemory [107]
 o cmake: improve OpenLDAP builds [92]
 o cmake: lib `CURL_STATICLIB` fixes (Windows) [74]
 o cmake: move global headers to specific checks [58]
 o cmake: pre-cache `HAVE_BASENAME` for mingw-w64 and MSVC [85]
 o cmake: pre-cache `HAVE_POLL_FINE` on Windows [36]
 o cmake: tidy-up `NOT_NEED_LBER_H` detection
 o cmake: validate `CURL_DEFAULT_SSL_BACKEND` config value [50]
 o configure: check for the capath by default [63]
 o configure: remove unused checks [87]
 o configure: replace adhoc domain with `localhost` in tests [79]
 o configure: sort AC_CHECK_FUNCS
 o connect: expire the timeout when trying next [54]
 o connect: only start the happy eyeballs timer when needed [95]
 o cookie: do not store the expire or max-age strings [16]
 o cookie: remove unnecessary struct fields [17]
 o cookie: set ->running in cookie_init even if data is NULL [5]
 o create-dirs.d: clarify it also uses --output-dirs [66]
 o curl.h: mark CURLSSLBACKEND_NSS as deprecated since 8.3.0 [18]
 o curl_easy_pause.3: mention h2/h3 buffering [113]
 o curl_easy_pause.3: mention it works within callbacks [112]
 o curl_easy_pause: set "in callback" true on exit if true [100]
 o CURLOPT_DEBUGFUNCTION.3: warn about internal handles [122]
 o docs/libcurl/opts/Makefile.inc: add missing manpage files
 o docs: adapt SEE ALSO sections to new requirements [52]
 o docs: explain how PINNEDPUBLICKEY is independent of VERIFYPEER [68]
 o docs: replace made up domains with example.com [82]
 o docs: update curl man page references [89]
 o docs: use CURLSSLBACKEND_NONE [19]
 o doh: inherit DEBUGFUNCTION/DATA [12]
 o escape: replace Curl_isunreserved with ISUNRESERVED [2]
 o FAQ: How do I upgrade curl.exe in Windows? [84]
 o GHA/linux: run singleuse to detect single-use global functions [35]
 o GHA: add workflow to compare configure vs cmake outputs [102]
 o h2-proxy: remove left-over mistake in drain_tunnel() [7]
 o h2: testcase and fix for pausing h2 streams [49]
 o h3: add support for ngtcp2 with AWS-LC builds [103]
 o http2: refused stream handling for retry [121]
 o http: fix CURL_DISABLE_BEARER_AUTH breakage [28]
 o http: h1/h2 proxy unification [21]
 o http: remove wrong comment for http_should_fail [55]
 o http: use per-request counter to check too large headers [6]
 o http_aws_sigv4: fix sorting with empty parts [13]
 o idn: fix WinIDN null ptr deref on bad host [90]
 o idn: if idn2_check_version returns NULL, return error [27]
 o inet_ntop: add typecast to silence Coverity [51]
 o lib: disambiguate Curl_client_write flag semantics [24]
 o lib: enable hmac for digest as well [26]
 o lib: failf/infof compiler warnings [8]
 o lib: let the max filesize option stop too big transfers too [44]
 o lib: move handling of `data->req.writer_stack` into Curl_client_write() [97]
 o lib: provide and use Curl_hexencode [62]
 o lib: remove TIME_WITH_SYS_TIME [88]
 o lib: use wrapper for curl_mime_data fseek callback [30]
 o libssh2: fix error message on failed pubkey-from-file [22]
 o libssh: cap SFTP packet size sent [14]
 o Makefile.mk: always set `CURL_STATICLIB` for lib (Windows) [42]
 o MANUAL.md: change domain to example.com [11]
 o misc: better random strings [15]
 o MQTT: improve receive of ACKs [125]
 o multi: do CURLM_CALL_MULTI_PERFORM at two more places [99]
 o multi: fix small timeouts [70]
 o multi: remove Curl_multi_dump [37]
 o multi: round the timeout up to prevent early wakeups [98]
 o multi: set CURLM_CALL_MULTI_PERFORM after switch to DOING_MORE [115]
 o openssl: improve ssl shutdown handling [69]
 o openssl: use X509_ALGOR_get0 instead of reaching into X509_ALGOR [104]
 o pytest: exclude test_03_goaway in CI runs due to timing dependency [23]
 o quic: set ciphers/curves the same way regular TLS does [43]
 o quiche: fix build error with --with-ca-fallback [1]
 o RELEASE-PROCEDURE.md: updated coming release dates
 o runtests: display the test status if tests appear hung [81]
 o runtests: eliminate a warning on old perl versions
 o socks: return error if hostname too long for remote resolve [118]
 o src/mkhelp: make generated code pass `checksrc` [59]
 o test1056: disable on Windows
 o test1474: disable test on NetBSD, OpenBSD and Solaris 10 [31]
 o test1592: greatly increase the maximum test timeout
 o test1903: actually verify the cookies after the test [116]
 o test1906: set a lower timeout since it's hit on Windows [117]
 o test2600: remove special case handling for USE_ALARM_TIMEOUT [3]
 o test650: fix an end tag typo
 o test661: return from test early in case of curl error
 o test: add missing <feature>s
 o tests: close the shell used to start sshd [41]
 o tests: fix a race condition in ftp server disconnect [101]
 o tests: fix compiler warnings [38]
 o tests: Fix zombie processes left behind by FTP tests. [80]
 o tests: improve SLOWDOWN test reliability by reducing sent data
 o tests: increase lib571 timeout from 3s to 30s [106]
 o tests: log the test result code after each libtest
 o tests: propagate errors in libtests
 o tests: set --expect100-timeout to improve test reliability
 o tests: show which curl tool `runtests.pl` is using [60]
 o tests: stop overriding the lock timeout
 o tftpd: always use curl's own tftp.h [25]
 o tool: use our own stderr variable [94]
 o tool_cb_wrt: fix debug assertion [4]
 o tool_getparam: accept variable expansion on file names too [123]
 o tool_setopt: remove unused function tool_setopt_flags [56]
 o upload-file.d: describe the file name slash/backslash handling [9]
 o url: fall back to http/https proxy env-variable if ws/wss not set [119]
 o url: fix netrc info message [39]
 o warnless: remove unused functions [33]
 o wolfssh: do cleanup in Curl_ssh_cleanup [40]
 o wolfssl: allow capath with CURLOPT_CAINFO_BLOB [29]
 o wolfssl: if CURLOPT_CAINFO_BLOB is set, ignore the CA files [34]
 o wolfssl: ignore errors in CA path [64]

(From OE-Core rev: aeab27305b3f207530ad1c749f6668c0df6cbed1)

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-10-12 07:53:40 +01:00
Robert Joslyn
2be637e323 curl: Skip tests marked flaky
Some tests can fail intermittently and upstream has marked these as
flaky so they can easily be skipped. At present there are 12 tests
marked flaky with 10 of them running in the default recipe
configuration. Skip them to avoid the failures.

(From OE-Core rev: 34f37de80928bb23a594268b0e996beb575ca51b)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-29 23:11:59 +01:00
Wang Mingyu
c5bf34523d enchant2: upgrade 2.5.0 -> 2.6.1
Changelog:
==========
-This version tweaks normalization of language tags so that only the part of
 the tag that specifies country and language is altered; any extra that is
 not removed is left alone.
-This version removes validation of language tags; dictionary names no longer
 have to be valid language tags.
-Debug output now uses GLib's debug system, and can be enabled at run-time by
 setting the environment variable G_MESSAGES_DEBUG to 'libenchant'.
-The Aspell back-end has a fix to let it work with language variants such as
 "en_GB-ize".
-There's more code clean-up, build system updates, and a couple of null
-pointer dereference fixes

(From OE-Core rev: a0aa3a7211a44b6d152efd1c576dd78e313424b1)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28 12:37:46 +01:00
Wang Mingyu
d73e8796c6 at-spi2-core: upgrade 2.48.4 -> 2.50.0
Changelog:
===========
* Fix at-spi2-atk test when running under a non-English locale.
* collection: Avoid locking up if an object has a very large child count
* Fix possible NULL pointer dereference when deregistering an event listener.
* Various fixes for the new key grabbing API.
* Don't wait for a reply when registering or deregistering keystroke
  listeners.
* Add a meson option to exclude the gtk2 atk-bridge module.
* Fix a test failure/timeout.
* Add atspi_get_version() to return the runtime version of the library.
* Collection: fix match testing for attributes.
* Fix a NULL pointer dereference when deregistering an event listener that
  doesn't include a detail.
* Fix the documentation for interfaces in collection match rules.
* Add an AtspiLive enum to specify the politeness level for live regions,
  and document that this should be used for Announcement signals. Also add a
  notification signal in atk to replace the announcement signal that lacks
  the politeness information.
* Add an asynchronous version of atspi_generate_mouse_event.
* TableCell.xml: Add Get{Column,Row}HeaderCells methods
* atspi_accessible_get_localized_role_name: Use internal names when possible.
* Add a non-recursive function to clear a single object's cache.
* Code clean-ups.

(From OE-Core rev: 12912febdd5490c283576be36284f90e99eecff3)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28 12:37:46 +01:00
Alexander Kanavin
08471afec7 sqlite3: upgrade 3.43.0 -> 3.43.1
(From OE-Core rev: 4274ac35c178392837919f3b8b068e05fccd3a08)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:27 +01:00
Alexander Kanavin
b630120a0b diffoscope: upgrade 244 -> 249
(From OE-Core rev: df810ca20643480ddccd9d27ad5d2307b40378ea)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:27 +01:00
Alexander Kanavin
f813f84007 debianutils: upgrade 5.12 -> 5.13
(From OE-Core rev: 5175516f784604beece27412c187006c48e29512)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:27 +01:00
Alexander Kanavin
c1bb523bf7 boost: upgrade 1.82.0 -> 1.83.0
(From OE-Core rev: 549c4203956afb4ac91d15031c63f01adafb383a)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:35:27 +01:00
Robert Joslyn
c63c48b9e4 curl: Update from 8.2.1 to 8.3.0
NSS support was removed, so adjust PACKAGECONFIG options.

The --enable-crypto-auth option was removed and split into separate
options for basic-auth, bearer-auth, digest-auth, kerberos-auth,
negotiate-auth, and aws. Enable these new options since upstream enables
them by default.

Disable test 1279 since this requires libcurl and hangs the tests.

(From OE-Core rev: 148de08220c0ad390ec533e452cbaad7a9338204)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26 10:25:42 +01:00
Richard Purdie
1b94ea8b25 recipes: Drop remaining PR values from recipes
We've been removing PR values from recipes at upgrade time for a while. In general
anyone maintaining a binary distro would end up having to curate these themselves
so the values in OE-Core aren't really that useful anymore. In many ways it makes
sense to clear out the remaining ones (which are mostly for 'config' recipes that
are unlikely to increase in PV) and leave a clean slate for anyone implementing
a binary distro config.

References are left in meta-selftest since the tests there do involve them and
their removal upon upgrade.

(From OE-Core rev: d4c346e8ab8f3cae25d1b01c7331ed9f6d4f96ef)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-22 07:45:17 +01:00
Michael Opdenacker
800061dcdb libevent: fix patch Upstream-Status
(From OE-Core rev: 8c987afb2054f24d9bf86305774c186a6e015a8f)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-20 23:51:11 +01:00
Markus Volk
3be4d2d4cd appstream: import recipe from meta-oe
libadwaita 1.4.0 has a dependency on it

(From OE-Core rev: 913f1b0f17374bb20cc3e2bc80c47a1548faa202)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-20 08:57:26 +01:00
Peter Kjellerstedt
084c70344f libsoup: Only specify --cross-file when building for target
The soup.cross file is only created when building for target so only
tell meson to read it when it exists. This allows libsoup-native to be
built again.

(From OE-Core rev: ae1893565bdd2597a08df6ac41db40641da66712)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-20 08:57:26 +01:00
Peter Kjellerstedt
90b51331ad libsoup-2.4: Only specify --cross-file when building for target
The soup.cross file is only created when building for target so only
tell meson to read it when it exists. This allows libsoup-2.4-native to
be built again.

(From OE-Core rev: 4acbd2269931b500846d56885c3304d244e514f8)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-20 08:57:26 +01:00
Alexander Kanavin
4ef31c91ca curl: build and run the full set of ptests
Not running make in the top level tests/ directory
excluded about a third of them (those that consisted
of running small test binaries).

Also, run tests in parallel, which reduces total time
from five minutes to about 75 seconds.

(From OE-Core rev: ff88f275f5f8d52da2967726d8880cbbfdfc8f19)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-18 08:53:10 +01:00
Wang Mingyu
7e81d56e1a nghttp2: upgrade 1.55.1 -> 1.56.0
(From OE-Core rev: a044b921c7a1f576e0ac787ab9945e153a196c44)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-14 09:19:37 +01:00
Wang Mingyu
7eb5354fc3 libnl: upgrade 3.7.0 -> 3.8.0
(From OE-Core rev: c2fd3f88c8c0eaf4a636843ad8671faf24faf503)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-14 09:19:37 +01:00
Wang Mingyu
b20e82e395 debianutils: upgrade 5.8 -> 5.12
Changelog:
===========
  * d/control:
    - Add myself as maintainer and Niels Thykier as uploader
    - Bump standards version from 4.6.0 to 4.6.2.
  * d/prerm: Make script executable.
  * d/postinst: Use 'set -e' in the body of the script.
  * d/tests/smoke: Use 'set -e' in the body of the script.
  * d/source/lintian-overrides: Ignore upstream metadata warning for Debian
    native package.
  * ischroot.c: Add missing newline in version output.
  * ischroot.1: Fix to say detection is possible for exit status 0.
  * postinst: Remove the bogus links that were created in 5.9 and 5.10
  * On non-usrmerged systems, correct run-parts/tmpfile links
  * ischroot: Do not claim it does not run as non-root
  * Align the cron file regex with the documentation
  * debian/postinst: add DPKG_ROOT prefix to paths in usrmerge()
  * Partial translation of which(1) into hungarian
  * Run autoreconf during the build
  * Drop obsolete dpkg-gencontrol flag -isp
  * Drop unnecessary CI config file
  * Revert the package to be format 3.0 (native)
  * Update /etc/shells micropolicy to recommend declarative use
  * Correct manpage macros
  * Update German manpage translation
  * Update Portuguese manpage translation
  * Modify post{inst,rm} in order to comply with UsrMerge

(From OE-Core rev: c5d73598f2f8ae74e5bbe35b1403dcb19fcc784a)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-14 09:19:37 +01:00
Wang Mingyu
5f0ac6f2f3 at-spi2-core: upgrade 2.48.3 -> 2.48.4
Changelog:
=========
* Add atspi_get_version() to return the runtime version of the AT-SPI library.
* collection: Fix match testing for attributes.
* collection: Avoid locking up if an object has a very large child count
* Fix possible NULL pointer dereference when deregistering an event listener.
* Various fixes for the new key grabbing API.

(From OE-Core rev: 33447452f8f117db39fa33d31a325ee4298a4b75)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-14 09:19:37 +01:00
Richard Purdie
0a99a509a9 vim: Upgrade 9.0.1664 -> 9.0.1894
This includes multiple CVE fixes.

The license change is due to changes in maintainership, the license
itself is unchanged.

(From OE-Core rev: 91e66b93a0c0928f0c2cfe78e22898a6c9800f34)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-12 07:45:52 +01:00
Khem Raj
32c98e6a8c apr: Fix ptests on musl
musl does not implement dlclose [1] the way apr tests it will always
fail, even though it is per posix. Backport a relevant fix

[1] https://wiki.musl-libc.org/functional-differences-from-glibc.html#Unloading-libraries

(From OE-Core rev: cc694b2dcaa8df255f39feff0b99b8b10090bc4f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-09 22:14:41 +01:00
Archana Polampalli
fb80dc894d vim: upgrade 9.0.1592 -> 9.0.1664
Fixes:
https://nvd.nist.gov/vuln/detail/CVE-2023-3896
8154e642a (tag: v9.0.1664) patch 9.0.1664: divide by zero when scrolling with 'smoothscroll' set

(From OE-Core rev: 4a1ab744142c9229f03a359b45e5e89a1fbae0d3)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-08 22:59:47 +01:00
Ross Burton
a5f386f7de libsoup: update PACKAGECONFIG
Add explicit PACKAGECONFIGs for brotli,ntlm, and sysprof.

libsoup needs to be told where ntlm_auth will be on the target, so write
a cross file to do so.

Also explicitly disable more of the test suites as we don't build them
yet.

(From OE-Core rev: 945071cc31280d3bd164478b50e2970b6a42fd02)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Ross Burton
bd07b05d6e libsoup-2.4: update PACKAGECONFIG
Add explicit PACKAGECONFIGs for brotli,ntlm, and sysprof.

libsoup needs to be told where ntlm_auth will be on the target, so write
a cross file to do so.

(From OE-Core rev: 54b6ea078daeb58a3bb20bb4275d1140640a77d2)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Alexander Kanavin
ebb1b629d2 gnutls: update 3.8.0 -> 3.8.1
(From OE-Core rev: 5f08d833669e96df5236773ae5a70bfb22f90b6b)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Alexander Kanavin
a469cdcd34 gnupg: upgrade 2.4.2 -> 2.4.3
(From OE-Core rev: 0c2365540ae61fe6fab61fb076ddb976ca26ce47)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Alexander Kanavin
bb0d11cd06 gpgme: upgrade 1.20.0 -> 1.22.0
Drop patch and --disable-lang-python-test option (upstream fixed the issue).

(From OE-Core rev: b82836dd4bcfe017c66b26c44430f6aa7671e7ce)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-07 14:36:30 +01:00
Benjamin Bara
b295f256b4 nettle: avoid neon on unsupported machines
Disable neon if the machine does not support it. --enable-fat also
includes the neon assembler code, therefore also disable it.

(From OE-Core rev: 768c6bb46e1cc4a1d8c12c6f30408bb821ec4534)

Signed-off-by: Benjamin Bara <benjamin.bara@skidata.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-04 20:14:14 +01:00
Changqing Li
03d23dca92 sqlite3: set CVE_STATUS for CVE-2023-36191
The error is a bug. It has been fixed upstream. But it is not a
vulnerability. You may safely ignore the CVE.

Refer:
[1] https://www.sqlite.org/forum/forumpost/19f55ef73b

(From OE-Core rev: 34874433c1e6c9e21d45d9ba686e4bb15479659d)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-04 20:14:14 +01:00
Khem Raj
40f215c0d6 dos2unix: upgrade 7.5.0 -> 7.5.1
(From OE-Core rev: 67c287c8131c7e896f6992d32a26d097cbd6414e)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-03 10:34:21 +01:00
Wang Mingyu
84bd7580d4 sqlite3: upgrade 3.42.0 -> 3.43.0
Changelog:
==========
-Add support for Contentless-Delete FTS5 Indexes.
-Enhancements to the date and time functions:
-Added the octet_length(X) SQL function.
-Added the sqlite3_stmt_explain() API.

(From OE-Core rev: d398efb21ec8a67f6b52ba27fd5eb8e85e851b15)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:06 +01:00
Wang Mingyu
6d96fc1f42 mpfr: upgrade 4.2.0 -> 4.2.1
Changelog:
===========
- Bug fixes (see <https://www.mpfr.org/mpfr-4.2.0/#fixed> and/or the
  ChangeLog file).
- Improved MPFR manual.
- Configure tests: replaced the test of the link with GMP, in order to
  avoid the use of a function without a prototype (Autoconf issue), as
  this is obsolescent in ISO C. The new test should be more robust.

(From OE-Core rev: 7d0699e176ad1b50c26c5981c0ee976615994729)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:05 +01:00
Wang Mingyu
8c88b32f3c libgit2: upgrade 1.7.0 -> 1.7.1
Changelog:
===========
Bug fixes
-----------
    proxy: Return an error for invalid proxy URLs instead of crashing.
    ssh: fix known_hosts leak in _git_ssh_setup_conn
    repository: make cleanup safe for re-use with grafts
    fix: Add missing include for oidarray.
    Revert "CMake: Search for ssh2 instead of libssh2."

Compatibility improvements
--------------------------
    stransport: macOS: replace errSSLNetworkTimeout, with hard-coded value

(From OE-Core rev: 2f919229df9248b91c4a3be2ea4d267163044978)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-02 18:23:05 +01:00
Richard Purdie
65318019cd recipes/classes/scripts: Drop SRCPV usage in OE-Core
Now that SRCPV isn't needed we can simplify things in a few places...

(From OE-Core rev: 843f82a246a535c353e08072f252d1dc78217872)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-24 16:50:24 +01:00
Etienne Cordonnier
844dd42d1f vim: update obsolete comment
vim 8.3 has been out for a long time, so this comment is obsolete.
However we still need UPSTREAM_VERSION_UNKNOWN, since we ignore
the last digit of the upstream version number.

Test result:
$ devtool check-upgrade-status vim
  ...
  INFO: vim                       9.0.1592        UNKNOWN         Tom Rini <trini@konsulko.com> c0370529c027abc5b1698d53fcfb8c02a0c515da

(From OE-Core rev: 65f5de85c3f488136d1ec2b1f7fe8d8426d6c5b3)

(From OE-Core rev: 868a19357841470eb55fb7f1c4ab1af09dea99ed)

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-22 15:13:54 +01:00
Ross Burton
48e174c386 p11-kit: fix build without qemu-usermode
If qemu-usermode is not available then p11-kit fails to configure:

  meson.build:313:24: ERROR: Can not run test applications in this cross environment.

This has already been fixed upstream, so backport the patches.

(From OE-Core rev: 3de715feaaaab9ac1e882a6913e2202203178170)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-21 11:34:12 +01:00
Wang Mingyu
79e79ba645 re2c: upgrade 3.0 -> 3.1
Changelog:
==========
- Added capturing groups with leftmost greedy semantics:
- Added non-capturing groups:
- Regenerated Unicode include header to support a newer standard
- Published TDFA paper: https://arxiv.org/abs/2206.01398, co-authored with
  Angelo Borsotti
- Removed experimental algorithms that are superseded by TDFA(1) and
  generally less efficient:
- Fixed parsing of raw UTF-8 characters in Flex compatibility mode
- Added header file to the dependencies generated with "--depfile" option
- Fixed stack overflow on large regular expressions by rewriting recursive
    functions in iterative form and limited stack to 256K on GithubActions CI
- Added minimal http://bazel.build integration
- Added configure option "--enable-parsers" that regenerates bison parsers
- Added CMake option "RE2C_REBUILD_PARSERS"
- Moved the entire codebase to C++11.
- Added uniform error handling (return codes are now properly checked and
 returned to the caller).
- Reorganized codegen subsystem in four well-defined phases (analyze,
 generate, fixup, render) and separated codegen from parsing phase.
- Improved memory allocation by using slab allocators instead of global free
 lists.
- Moved to pure API for bison parsers.
- Unified code style.
- Added "--verbose" flag to run_tests.py and suppressed verbose output by
 default.
- Multiple improvements of continuous testing with GithubActions.

(From OE-Core rev: 43e646a99f8be07fd410fd4af19a31fc98508a76)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-14 12:51:21 +01:00
Wang Mingyu
9d7f2fb80f xxhash: upgrade 0.8.1 -> 0.8.2
Changelog:
==========
- fix  : XXH3 S390x vector implementation
- fix  : PowerPC vector compilation with IBM XL compiler
- perf : improved WASM speed by x2/x3 using SIMD128
- perf : improved speed (+20%) for XXH3 on ARM NEON
- cli  : Fix filename contain /LF character
- cli  : Support # comment lines in --check files
- cli  : Support commands --binary and --ignore-missing
- build: fix -Og compilation
- build: fix pkgconfig generation with cmake
- build: fix icc compilation
- build: fix cmake install directories
- build: new build options XXH_NO_XXH3, XXH_SIZE_OPT and XXH_NO_STREAM to reduce binary size
- build: dedicated install targets
- build: support DISPATCH mode in cmake
- portability: fix x86dispatch when building with Visual + clang-cl
- portability: SVE vector implementation of XXH3
- portability: compatibility with freestanding environments, using XXH_NO_STDLIB
- portability: can build on Haiku
- portability: validated on m68k and risc-v
- doc  : XXH3 specification
- doc  : improved doxygen documentation
- misc : dedicated sanity test binary

License-Update: Copyright year updated to 2021

(From OE-Core rev: e3286a35139b22e0744ff9a98021de1ec4598d12)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-14 12:51:21 +01:00
Wang Mingyu
c707605642 gmp: upgrade 6.2.1 -> 6.3.0
cve-2021-43618.patch
removed since it's included in 6.3.0

Changelog:
============
  BUGS FIXED
  * A possible overflow of type int is avoided for mpz_cmp on huge operands.

  * A possible error condition when a malformed file is read with
    mpz_inp_raw is now correctly handled.

  FEATURES
  * New public function mpz_prevprime, companion of the existing
    mpz_nextprime.

  * New documented pointer types mpz_ptr, mpz_srcptr, and similar for
    other GMP types. Refer to the manual for full list and suggested
    usage. These types have been present in gmp.h at least since
    GMP-4.0, but previously not advertised to users.

  * Support for 64-bit Arm under Macos.

  * Support for the loongarch64 CPU family.

  * Support for building with LTO, link-time optimisations.

  SPEEDUPS
  * New special code for base = 2 in mpz_powm reduces the average time
    for the functions that test primality.

  * Speedup for the function mpz_nextprime on large operands.

  * Speedup for multiplications (some sizes only) thanks to new
    internal functions to compute small negacyclic products.

  * Special assembly code for IBM z13 and later "mainframe" CPUs, resulting in
    a huge speedup.

  * Improved assembly for several 64-bit x86 CPUs, Risc-V, 64-bit Arm.

(From OE-Core rev: 49b625116b67a19abfd17670431ba3f96031b86e)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-14 12:51:21 +01:00
Wang Mingyu
c6bbb1c8c1 curl: upgrade 8.2.0 -> 8.2.1
Changelog:
=========
   amigaos: fix sys/mbuf.h m_len macro clash
   amissl: add missing signal.h include
   amissl: fix AmiSSL v5 detection
   cfilters: rename close/connect functions to avoid clashes
   ciphers.d: put URL in first column
   cmake: add `libcurlu`/`libcurltool` for unit tests
   cmake: update ngtcp2 detection
   configure: check for nghttp2_session_get_stream_local_window_size
   CONTRIBUTE: drop mention of copyright year ranges
   CONTRIBUTE: fix syntax in commit message description
   curl_multi_wait.3: fix arg quoting to doc macro .BR
   docs: mark two TLS options for TLS, not SSL
   docs: provide more see also for cipher options
   hostip: return IPv6 first for localhost resolves
   http2: fix regression on upload EOF handling
   http: VLH, very large header test and fixes
   libcurl-errors.3: add CURLUE_OK
   os400: correct EXPECTED_STRING_LASTZEROTERMINATED
   quiche: fix lookup of transfer at multi
   quiche: fix segfault and other things
   rustls: update rustls-ffi 0.10.0
   socks: print ipv6 address within brackets
   src/mkhelp: strip off escape sequences
   tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T
   transfer: do not clear the credentials on redirect to absolute URL
   unittest: remove unneeded *_LDADD
   websocket: rename arguments/variables to match docs

(From OE-Core rev: bc868329c4bac1d5d3831a7d86b561849ca533a3)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-14 12:51:21 +01:00
Richard Purdie
2850991c37 gnupg: Fix reproducibility failure
yat2m can be found within the build or from the recipe-sysroot-native if
runtime dependencies are present. The sysroot version has version differences
to the in tree copy. Specify the one we want to make the build determinstic.

(From OE-Core rev: 1feb5274db6e985e10f58359b148dabb4076917a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-11 09:36:05 +01:00
Julien Stephan
c610b8dcd9 libexif: add ptest support
adds ptest support for libexif

Ptest was executed on a core-image-minimal:
root@qemux86-64:~# ptest-runner libexif
START: ptest-runner
2023-07-12T15:45
BEGIN: /usr/lib/libexif/ptest
[...]
i====================
All 13 tests passed
(1 test was not run)
====================
[...]
DURATION: 35
END: /usr/lib/libexif/ptest
2023-07-12T15:45
STOP: ptest-runner
TOTAL: 1 FAIL: 0

(From OE-Core rev: 4e2340dfecdfbe22b07161e89de4e25d466820bb)

Signed-off-by: Julien Stephan <jstephan@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-10 09:18:54 +01:00
Sudip Mukherjee
afeb3baa8a libgit2: upgrade to v1.7.0
(From OE-Core rev: 02f34e608197a9a270704dd76e460df8ee0bf6f0)

Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-10 09:18:53 +01:00
Michael Opdenacker
a26970fa3a recipes: remove unused AUTHOR variable
No longer used in generating packages
Also creates a possible confusion with the recipe maintainer
name.

(From OE-Core rev: 9d5edd124b7dddb995ceddd79f8a7fc8cf44badf)

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-10 09:18:53 +01:00
Alexander Kanavin
5020abf342 curl: ensure all ptest failures are caught
Piping results through sed is masking failures that aren't
picked up by sed expressions.

One such failure probes the source tree, and so isn't
relevant for target testing, and can be disabled.

(From OE-Core rev: 86c96cbf68d986b44fdb45e988343ce29d6b8cc7)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-08-09 12:44:52 +01:00
Richard Purdie
f35b5f5d20 autoconf: Upgrade to 2.72c
2.72c is a prerelease version of autoconf 2.73. It contains largefile and y2038 64 bit
time_t improvements for 32 bit architectures.

Rather than work on the older codebase, this brings us to work with the recent
autoconf upstream with the 64 bit changes. It is unclear when upstream will release
2.73 but it is easier for us to be aligned now we've done the bulk of the work needed
to update.

Upstream added several patches which fixed several common failures OE builds ran
into (backported in the next commit). In general testing has otherwise been good for us.

There is an unfortunate gnulib largefile.m4 bug. This change patches various software
to workaround it, next time they update new versions of the gnulib code will be pulled
in which address the issue with the official fix.

There are also a couple of ordering related fixes for apr and libarchive.

(From OE-Core rev: bb74a03e927b4867d885ad3539b097f0e7ed108c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-30 07:54:44 +01:00
Robert Joslyn
be48b99874 curl: Refine ptest perl RDEPENDS
RDEPEND on the specific perl modules required for the tests rather than
the perl-modules meta package.

(From OE-Core rev: 0c13dac8fe3f432b7756c57a5892f8ab99d43166)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-25 15:27:33 +01:00
Robert Joslyn
5a3e63f513 curl: Update from 8.1.2 to 8.2.0
This is a feature and bugfix update. Full release notes available at:
https://curl.se/changes.html#8_2_0

(From OE-Core rev: 5cfdcc722c7b7a153bedcf2f490c892565a87cfa)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-25 15:27:33 +01:00
Andrej Valek
c15e506a46 cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Reviewed-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-21 11:52:26 +01:00