Commit Graph

3314 Commits

Author SHA1 Message Date
Trevor Gamblin
f987dac6a2 diffoscope: upgrade 243 -> 244
Changelog: https://diffoscope.org/news/diffoscope-244-released/

* Address compatibility with python-libarchive-c version 5.
  (Closes: reproducible-builds/diffoscope#344)
* Testsuite changes:
  - Mark that test_dex::test_javap_14_differences requires procyon.
  - Fix "test skipped" textual reason generation in the case of a required
    version being outside of the required range.
  - Temporarily mark some Android-related as XFAIL due to Debian bugs
    #1040941 and #1040916.

(From OE-Core rev: e7ab92360cb9515c28197b809bdc8b112e23bb57)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-21 11:52:26 +01:00
Wang Mingyu
3237d11404 debianutils: upgrade 5.7 -> 5.8
License-Update: Convert to machine-readable format

Changelog:
=============
  * Remove constraints unnecessary since buster (oldstable)
  * Salvage package (Closes: #1038553)
  * Apply quilt patches from NMUs

(From OE-Core rev: 635bc9aafc81c419eb5c9df1ac993d55301df486)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-21 11:52:25 +01:00
Wang Mingyu
54830959bc nghttp2: upgrade 1.54.0 -> 1.55.1
Changelog:
============
    doc: Bump boringssl
    Fix memory leak
    Fix build error without libev
    Bump go to 1.20
    Bump go package dependencies
    mruby: Support cross build for autotools
    h2load, nghttpx: Add UDP_GRO support
    Bump ngtcp2
    nghttpx: Randomize initial QUIC packet number
    Bump llhttp to a0e744f850d8101a51284868ffdf745bcfe4fbcc
    Bump macos to 12

(From OE-Core rev: 5049566d6edaa1c3df8db5a0df1ea8d015e64d17)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-21 11:52:25 +01:00
Wang Mingyu
ed2dc8a229 libproxy: upgrade 0.5.2 -> 0.5.3
Changelog:
=========
-Fix crash querying URLs without a host
-Web: Update application page
-Add appplication info about apt and python requests
-Bump version to 0.5.3

(From OE-Core rev: 102d1e8c24bb1cbd6e80d296d179378879d4e106)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-21 11:52:25 +01:00
Trevor Gamblin
be9fa59b67 icu: upgrade 72-1 -> 73-2
Changelog: https://github.com/unicode-org/icu/releases/tag/release-73-2

ICU moved to a common LICENSE file in the project root. The only actual
change was an update to the copyright year.

(From OE-Core rev: 7fc8d0bb1f237140d9b4070eb8cc9413f809361f)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-19 18:00:32 +01:00
Richard Purdie
191bb1e95f ptest-runner: Pull in parallel test fixes and output handling
Pull in the commits:

    Flush stdout and stderr after test
    Remove _child_reader singleton
    Report test failure on timeout
    Only collect system state on timeout
    Revert "Change test timeout to be total elapsed time"
    Change test timeout to be total elapsed time
    Report if child dies from a signal
    Recreate pipe for each test
    Revert "runner: Correctly handle running parallel tests"
    runner: Correctly handle running parallel tests

(From OE-Core rev: 8de47e5f3837a9c87c3cbf8dc45f9e90110eda1e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-19 09:48:39 +01:00
Trevor Gamblin
e6c8248f34 diffoscope: add missing RDEPENDS and alphabetize
(From OE-Core rev: afe7f5ad6b3e4fb532f064c3993d0d612b503fbe)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-19 09:48:39 +01:00
Trevor Gamblin
75eafd65b1 p11-kit: upgrade 0.24.1 -> 0.25.0
Changelog:

- add PKCS#11 3.0 support
- add support for profile objects
- add ability to adjust module and config paths at run-time via system environmental exports
- make terminal output nicer
- p11-kit: add command to print merged configuration
- p11-kit: add commands to list, add and delete profiles of a token
- trust: add command to check format of .p11-kit files
- virtual: fix libffi type signatures for PKCS#11 3.0 functions
- server: fix umask setting when --group is specified
- server: check SHELL only when neither --sh nor --csh is specified
- rpc: use space string in C_InitToken
- rpc: fix two off-by-one errors identified by asan
- modules: make logging message more translatable
- pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
- pkcs11.h: add IBM specific mechanism and attributes
- pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
- pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
- po: update translations from Transifex
- bug and build fixes
- test fixes

(From OE-Core rev: 9bba4570f0ea626ee4f991bac00da0441fc54a75)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-14 17:31:06 +01:00
Wang Mingyu
5c3430d98e taglib: upgrade 1.13 -> 1.13.1
Changelog:
===========
 * Fixed parsing of TXXX frames without description.
 * Detect MP4 atoms with invalid length or type.
 * Do not miss ID3v2 frames when an extended header is present.
 * Use property "DISCSUBTITLE" for ID3v2 "TSST" frame.
 * Build system improvements: Use absolute path for macOS dylib install name,
   support --define-prefix when using pkg-config, fixed minimum required
   CppUnit version.
 * Code clean up using clang-tidy.

(From OE-Core rev: 69477347a21cc810851fd231659f73c6b4661d03)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-14 17:31:06 +01:00
Trevor Gamblin
691b387042 diffoscope: upgrade 242 -> 243
Changelog:

[ Chris Lamb ]
* Drop Jenkins build reference in README.rst.

[ Ed Maste ]
* Update FreeBSD package names

[ Mattia Rizzolo ]
* Improve the documentation on to produce that binary blob that in the arsc
  comparator.

(From OE-Core rev: 8781670bfc04cf9abef7dd9364f5e83e2c52d311)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-14 17:31:06 +01:00
Sudip Mukherjee
be72174002 libssh2: disable rpath to fix curl-native build
When curl is built with PACKAGECONFIG:append = " libssh2", the build fails
with the error:
gcc: error: unrecognized command-line option '-R'

It was trying to set the rpath for libssh2.

(From OE-Core rev: c213d8579951e168a19231cf5b2f81d55e059a22)

Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Anuj Mittal
4e03a07549 vte: upgrade 0.72.1 -> 0.72.2
(From OE-Core rev: 034ab8fdb2d1df0eabcdf15806200b9ec238c749)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Anuj Mittal
9832a5b466 sqlite3: upgrade 3.41.2 -> 3.42.0
(From OE-Core rev: 6613920d4058afacfde7000cad9feba7ee5562b9)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-07-10 11:36:34 +01:00
Richard Purdie
326c854035 ptest-runner: Pull in "runner: Remove threads and mutexes" fix
This fix simplifies the code to drop the pthread and mutexs which should
address some of the buffering issues we were seeing in some test case
failures.

(From OE-Core rev: bffa6d381d7ea0a6aad19d61cd973c82aadef070)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-30 10:03:20 +01:00
Wang Mingyu
caa560be7e nghttp2: upgrade 1.53.0 -> 1.54.0
Changelog:
==========
  nghttpx: Consistent error handling and use of high-level API
  h2load: Fix http3 upload stall
  h2load: Use std::chrono::steady_clock for quic timestamp
  Avoid ev_now by @tatsuhiro-t in #1907
  Remove unused macro bswap64
  Bump ngtcp2 and nghttp3
  Bump libbpf to v1.2.0
  Avoid copies

(From OE-Core rev: f3b440805cafa525bed0e8512f5fcaa9e1359bfb)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
e614c7822d nettle: upgrade 3.9 -> 3.9.1
Bug fixes:
==========
* Fix OCB loop for processing messages of size 272 bytes or
  larger.
* Fix alignment bug in the new x86_64 non-pclmul assembly
  implementation of ghash.
* Fix build-time memory leak in eccdata.

(From OE-Core rev: 7595367022b2a0226a3996bf2e6152a452e92715)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
48bfad9595 libmd: upgrade 1.0.4 -> 1.1.0
(From OE-Core rev: a907f4b704367e85456616de060d30fb023589dd)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
b17eee0241 libksba: upgrade 1.6.3 -> 1.6.4
Changelog:
Correctly detect CMS write errors.

(From OE-Core rev: 0296cf63007542c1cb209a4288be1c82aa2ba843)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Wang Mingyu
d79211c866 libassuan: upgrade 2.5.5 -> 2.5.6
Changelog:
===========
 * Fix logging of confidential data.  [rA0fc31770fa]
 * Fix memory wiping.  [T5977]
 * Fix macOS build problem.  [T5440,T5610]
 * Upgrade autoconf stuff.

(From OE-Core rev: 90126be6dc32170c08eb90223b6a6cc06c2133ce)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-28 07:56:33 +01:00
Alexander Kanavin
681b43a6a7 libssh2: update 1.10.0 -> 1.11.0
License-update: copyright years

Enable static libs as some tests need them.

Fix up ptests; the set being run is the same.
test_simple is statically linked, hence DISABLE_STATIC is overriden.

(From OE-Core rev: c3c5b74e428a13335f8c09bf4cc74dd009c8bc06)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
2475c80201 libproxy: update 0.4.18 -> 0.5.2
License-update: formatting, years

Upstream has completely overhauled the build system
(cmake -> meson) and available options. Add the most
important ones that require external dependencies;
there's plenty more if someone finds them useful.

(From OE-Core rev: bbcfef76c3d412f1a79c77f8712aff36190bf7fa)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Alexander Kanavin
fec3664012 libproxy: fetch from git
Upstream no longer provides tarballs for newer versions.

(From OE-Core rev: e971f27cb4ad78b4df3c3bca2948f3cb60d0d5cf)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-27 16:23:40 +01:00
Richard Purdie
55b0208c33 ptest-runner: Ensure data writes don't race
Currently the code can race as there is a read/write thread handling the stdio but
there is no guarantee that when the process exits, the thread has handled all the
data. This results in output where "END:" isn't actually at the end of the logs
but somewhere in the middle of the output.

Update to a revision with this fix.

(From OE-Core rev: 6608ee551ed7e8864cdeabfb09832621313d3191)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-20 23:24:26 +01:00
Richard Purdie
8502913bd3 ptest-runner: Pull in sync fix to improve log warnings
Pulls in:

    utils: Ensure buffers are flushed after child exits

    We currently wait for the child to exit but we don't flush the buffers.
    This can mean the output ends up out of sync and the END: line isn't at
    the end of the logs.

    We've recently seen a lot of issues related to this on the autobuilder.
    Add in a flush call for all fds to ensure buffers are in sync. This
    does appear to improve warnings on the autobuilder now we started detecting
    the issue.

(From OE-Core rev: f051de5d5da7e9a2f4137013e24589b594ff6d35)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-19 13:18:56 +01:00
Alexander Kanavin
98ed91039a serf: upgrade 1.3.9 -> 1.3.10
As serf is undead, we need to reassess all the remaining patches.

(From OE-Core rev: 775cbcc876edcb6c339f342a3253f5afcf6ef163)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-16 15:40:11 +01:00
Alexander Kanavin
3dd8e28829 nghttp2: upgrade 1.52.0 -> 1.53.0
(From OE-Core rev: cc7fb8330059fb632bf55a28875e38c3190470c9)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-16 15:40:11 +01:00
Alexander Kanavin
404bf4c7ca nettle: upgrade 3.8.1 -> 3.9
(From OE-Core rev: 8d99440fb81b09724b236107c9ab2c30efab821d)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-16 15:40:11 +01:00
Alexander Kanavin
3e4f53be00 libxslt: upgrade 1.1.37 -> 1.1.38
(From OE-Core rev: 1fc95356b016303b9333741cf8fd1e374931ead2)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-16 15:40:10 +01:00
Alexander Kanavin
3217009b14 gnupg: upgrade 2.4.0 -> 2.4.2
(From OE-Core rev: c9eddfded59819a2a375b6f5518bf2c3184237d2)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-16 15:40:10 +01:00
Alexander Kanavin
76b7834c1f diffoscope: upgrade 236 -> 242
(From OE-Core rev: 2fb5f18a066d8ac1bd73e73ef381784ab3777fec)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-15 21:25:42 +01:00
Alexander Kanavin
ee6305bdd0 attr: package /etc/xattr.conf with the library that consumes it
This matters for example with latest coreutils where cp
wouldn't copy extended attributes by default if the config
file specifying that policy is not there, and so ptest fails.

(From OE-Core rev: 90818d87eaa7f2bf6cec6200c727c1bd10b4fdd8)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-15 21:25:42 +01:00
Alexander Kanavin
6881acad8a at-spi2-core: upgrade 2.48.0 -> 2.48.3
(From OE-Core rev: be78cd5cfbdefecd4b1a3d873661eb2fd50d9902)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-15 21:25:42 +01:00
Alexander Kanavin
87dccf731c apr: upgrade 1.7.3 -> 1.7.4
(From OE-Core rev: 3db1d7fc97415f1d2af3f694723222ad81de13af)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-15 21:25:42 +01:00
Ross Burton
03b693fd48 nettle: inherit lib_package
Nettle is primarily a library that ships some tools, so inherit the
lib_package class to package the tools in nettle-bin, and add a
dependency on it to nettle-ptest.

(From OE-Core rev: eacfc88e0efe534290205ca8e399629623d882aa)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-09 13:55:20 +01:00
Ross Burton
098df1bd77 nettle: rewrite ptest integration
Instead of patching a relative path to an unversioned libnettle.so to be
a bare filename which then needs nettle-dev to be installed, create a
symlink in the expected place which points to the actual library. This
means nettle-ptest no longer needs to depend on nettle-dev.

Explicitly skip symbols-test, it has been silently failing as nm isn't
available and also needs a static libnettle.a to run.

Install two rsa-* example binaries that are needed for pkcs1-conv-test
to pass.

(From OE-Core rev: dc5cd169e8b9a0f9d9881f116a8d83706460bb7c)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-09 13:55:20 +01:00
Wang Mingyu
75bd124bee libcap: upgrade 2.68 -> 2.69
(From OE-Core rev: a6c9f01098083de40666a920be5819aade635999)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-02 15:16:35 +01:00
Wang Mingyu
7f2da28eff libmicrohttpd: upgrade 0.9.76 -> 0.9.77
Changelog:
==========
 API changes:
-------------
 + Added new function MHD_get_version_bin().

 Improvements and enhancements:
-------------------------------
 * Digest Auth: changed algorithm identifiers in server generated
   headers from "md5" / "sha-256" to "MD5" / "SHA-256" to better match
   RFC (while clients should use caseless matching).
 * Improved Base64 decoding by new implementation with robust input
   data validation checks.
 * Improved configure for cross-compiling, for better compatibility
   with POSIX and for better compatibility with the latest compiler
   versions.
 * New internal tests: for Base64 decoding, Basic Auth and folded
   headers.
 * Supported new libcurl API in tests to mute deprecation warnings.
 * Supported ARM and ARM64 for VC compilers.

 Functionality changes:
------------------------
 * any negative number returned by response data generation callback
   function is treated as an error. Previously negative values except
   predefined error codes could produce undefined behaviour.
 * Added handling of "DEBUG" preprocessor macro as an alias of "_DEBUG".

 Fixes:
---------
 # Fixed functionality with blocking sockets.
 # Fixed very inefficient data pumping for upgraded TLS connections.
 # Fixed processing of folded headers in the requests.
 # Fixed data races when closing upgraded connection.
 # Removed duplication of "Connection: upgrade" header.
 # Digest auth: fixed thread sync to avoid "stale hash" results.
 # Fixed harmless unwanted extra data processing resulting in triggering
   of the assert.
 # Fixed tests for LTO.
 # Removed removed non-portable functions in examples.
 # Fixed delayed call of connection notification callback in
   thread-per-connection mode.
 # Fixed Address Sanitizer unpoison of memory when memory pool is
   destroyed. This fixed periodic ASAN error when used for a long time
   with the sanitizer.
 # Fixed compiler warnings in library code, examples, tests and configure
   checks.
 # New TLS certificates for test-suite: all with SAN fields and SHA-256
   hash.
 # Tests: fixed tests on Darwin 22.x (Ventura).
 # Tests: redesigned one tests group to avoid stress-testing of the OS.

(From OE-Core rev: bdc28b0262ad8a57d56f029b55b338478afb3a07)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-02 15:16:35 +01:00
Wang Mingyu
95f9caef1f fribidi: upgrade 1.0.12 -> 1.0.13
Changelog:
* Adding missing man pages to the tar release file.

(From OE-Core rev: 0f6da8601fd4d992550e8afe7b09ba7c491250fd)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-02 15:16:35 +01:00
Wang Mingyu
22eb71161c enchant2: upgrade 2.3.4 -> 2.5.0
Changelog:
=========
  * A new dictionary method remove_from_session() allows providers to stay
    in sync with Enchant's personal wordlist, by removing as well as adding
    words in the spelling session.
  * The public API enchant_dict_store_replacement() is deprecated, and no
    longer does anything. It only previously had an effect with the Aspell
    provider.
  * The APIs enchant_dict_add() and enchant_dict_remove() also respectively
    add the word to the session or remove it.

(From OE-Core rev: c21b5b930430f5fbf47866380f94c088dd809089)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-02 15:16:35 +01:00
Wang Mingyu
8728f950b6 dos2unix: upgrade 7.4.4 -> 7.5.0
Changelog:
===========
* New option -O, --to-stdout to write to standard output.
* New option -e, --add-eol to add a line break to the last
  line if there isn't one. Option --no-add-eol disables the
  feature.

(From OE-Core rev: a81874c8898ccd33c0c20260f2bfe9bcb2d75d69)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-02 15:16:35 +01:00
Wang Mingyu
426ddff18d curl: upgrade 8.1.1 -> 8.1.2
Changelog:
===========
- lib1560: verify more scheme guessing
- page-header: minor wording polish in the URL segment
- page-header: mention curl version and how to figure out current release
- RELEASE-NOTES: synced
- configure: without pkg-config and no custom path, use -lnghttp2
- curl: cache the --trace-time value for a second
- libcurl.m4: remove trailing 'dnl' that causes this to break autoconf
- http3: send EOF indicator early as possible
- scripts/contri*sh: no longer grep -v ' '
- cf-socket: restore Curl_sock_assign_addr()
- libssh: when keyboard-interactive auth fails, try password
- configure: fix build with arbitrary CC and LD_LIBRARY_PATH
- urlapi: remove superfluous host name check
- http2: fix EOF handling on uploads with auth negotiation
- lib: remove unused functions, make single-use static
- scripts/singleuse.pl: add more API calls
- configure: quote the assignments for run-compiler
- misc: fix spelling mistakes

(From OE-Core rev: db5773bf9c5e78affaaf0a21422bad07560eaa86)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-06-02 15:16:35 +01:00
Trevor Gamblin
1f32a9868d vim: upgrade 9.0.1527 -> 9.0.1592
Fixes:

https://nvd.nist.gov/vuln/detail/CVE-2023-2609
d1ae836 patch 9.0.1531: crash when register contents ends up being invalid
https://nvd.nist.gov/vuln/detail/CVE-2023-2610
ab9a2d8 patch 9.0.1532: crash when expanding "~" in substitute causes very long text

(From OE-Core rev: 1e4b4dfb4145bc00eb6937b5f54a41170e9a5b4c)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-31 16:53:04 +01:00
Richard Purdie
6c02a8628d Revert "sqlite3: Whitelist CVE-2022-21227"
This reverts commit cfc42fdabb3f12eb4ac5069a549ba5699385dfdc.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-30 13:25:47 +01:00
Sanjay Chitroda
4a4f2b6df0 sqlite3: Whitelist CVE-2022-21227
This CVE is applicable to "SQLite3 bindings for Node.js" only.

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-21227

(From OE-Core rev: cfc42fdabb3f12eb4ac5069a549ba5699385dfdc)

Signed-off-by: Sanjay Chitroda <schitrod@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-29 13:42:00 +01:00
Robert Joslyn
9e3a0a060f curl: Update from 8.1.0 to 8.1.1
This is a bugfix only release. Release notes:
https://curl.se/changes.html#8_1_1

(From OE-Core rev: 833191171181f11802a3e0ae8b91b8ca5892b067)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-29 13:42:00 +01:00
schitrod=cisco.com@lists.openembedded.org
934487d99a Revert "sqlite3: update CVE_PRODUCT"
This reverts commit 8800976e79d65956218ab462d9644d0661579301.

As per NVD database "ghost:sqlite3" product is specific to "node.js"
CVEs reported against above products are not applicable to us.

(From OE-Core rev: 7616b1d28cb119adb471b5268a77ec61d5dd555c)

Signed-off-by: Sanjay Chitroda <schitrod@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-29 13:42:00 +01:00
Ross Burton
a43a4ea686 gdbm: improve run-ptest
There's no need to use a sed to get the output we need, autotest can do
that itself if told.

(From OE-Core rev: fa74ffac2e9ecf1b30fd893a21a7d2f8531e558d)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-25 10:29:08 +01:00
Ross Burton
7ba5011adf libnl: clean up ptest
libnl builds lots of test-* binaries but these are for manual testing
purposes.  Instead, the test suite is entirely contained in the
check-all binary.

Clean up the compilation by simply building check-all, and install it
with libtool so the binary is installed correctly.

There is no need to RDEPEND on libcheck as that happens automatically,
and the rpath workaround appears to be obsolete.

Finally rewrite run-ptest to invoke the test directly, and use the new
automake-style output that has been added to libcheck.

(From OE-Core rev: d500c46754ad8e8e3736c64b5b2e29039019fe88)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-25 10:29:08 +01:00
Ross Burton
16b0f2d54e libcheck: add ghetto automake output
(From OE-Core rev: e1bf4c24697c72e9d3f58d6fa6f6f0d6fde982f6)

Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-25 10:29:08 +01:00
Anuj Mittal
2b9983587f libsoup: upgrade 3.4.0 -> 3.4.2
(From OE-Core rev: f7f8b47b17364cff94697b025671eacf5037e19e)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-05-22 10:53:49 +01:00