Commit Graph

45 Commits

Author SHA1 Message Date
Vijay Anusuri
197002083a less: backport Debian patch for CVE-2024-32487
import patch from ubuntu to fix
 CVE-2024-32487

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/less/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
007521ac3c]

(From OE-Core rev: 1456b309963d3121e5ab2bc9de02b19663ee3a43)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-05-15 09:44:14 -07:00
Vijay Anusuri
3542ad6716 less: Fix for CVE-2022-48624
Upstream-Status: Backport [c6ac6de496]

(From OE-Core rev: 8d91ab209398a8415009bc3093d407bf8871dafd)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-03-07 08:32:54 -10:00
Hitendra Prajapati
358d319cf5 less: backport the fix for CVE-2022-46663
Upstream-Status: Backport from a78e135111

(From OE-Core rev: 6cec065d795a562460c422947ac70c4a6f3f3175)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-03-09 13:19:02 +00:00
Peter Kjellerstedt
83766c9fff meta, meta-selftest: Replace more non-SPDX license identifiers
In commit ceda3238 (meta/meta-selftest/meta-skeleton: Update LICENSE
variable to use SPDX license identifiers) all LICENSE variables were
updated to only use SPDX license identifiers.

This does the same for comments and other variables where it is
appropriate to use the official SPDX license identifiers. There are
still references to, e.g., "GPLv3", but they are then typically in
descriptive text where they refer to the license in a generic sense.

(From OE-Core rev: 165759dced7fbe73b1db2ede67047896071dc6d0)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-03-01 23:44:59 +00:00
Richard Purdie
b0130fcf91 meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
An automated conversion using scripts/contrib/convert-spdx-licenses.py to
convert to use the standard SPDX license identifiers. Two recipes in meta-selftest
were not converted as they're that way specifically for testing. A change in
linux-firmware was also skipped and may need a more manual tweak.

(From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-20 16:45:25 +00:00
wangmy
d91ce77d56 less: upgrade 598 -> 600
License-Update: year updated to 2022.

Changelog:
==========
Add the --header option.
Add the --no-number-headers option.
Add the --status-line option.
Add the --redraw-on-quit option.
Add the --search-options option.
Add 'H' color type to set color of header lines.
Add #version conditional to lesskey.
Add += syntax to variable section in lesskey files.
Allow option name in -- command to end with '=' in addition to '\n'.
Add $HOME/.config to possible locations of lesskey file.
Add $XDG_STATE_HOME and $HOME/.local/state to possible locations of history file.
Don't read or write history file in secure mode.
Fix display of multibyte and double-width chars in prompt.
Fix ESC-BACKSPACE command when BACKSPACE key does not send 0x08.
Add more \k codes to lesskey format.
Fix bug when empty file is modified while viewing it.
Fix bug when parsing a malformed lesskey file.
Fix bug scrolling history when --incsearch is set.
Fix buffer overflow when invoking lessecho with more than 63 -m/-n options.
Fix bug restoring color at end of highlighted text.
Fix bug in parsing lesskey file.
Defer moving cursor to lower left in some more cases.
Suppress TAB filename expansion in some cases where it doesn't make sense.

(From OE-Core rev: 30047fb4fcdef868c6d45cb6a71fbc9278600ba2)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-11 15:48:10 +00:00
Alexander Kanavin
63849aafa2 less: upgrade 590 -> 598
License-Update: http->https

(From OE-Core rev: 13ae6af462d06a3fb8eaca18e6a367a097778211)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-12-17 09:56:14 +00:00
Richard Purdie
bb6ddc3691 Convert to new override syntax
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py <oe-core directory>

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-02 15:44:10 +01:00
wangmy
e7d8ee28a4 less: upgrade 589 -> 590
(From OE-Core rev: 798f7c3cf5dcd531d16c426819147656c661dd2e)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-12 22:54:14 +01:00
wangmy
ade102f807 less: upgrade 586 -> 589
(From OE-Core rev: f209fceeeb4eabe7a0b4b016b538f911a51dd913)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-06-06 23:16:51 +01:00
Richard Purdie
cc5c4860fe less: upgrade 581 -> 586
(From OE-Core rev: 69b5b82498a00217a55a3781d636cdd3e280586b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18 12:43:00 +01:00
Alexander Kanavin
d158921a6f less: upgrade 563 -> 581
(From OE-Core rev: e19736b809cbc8c15808e75473a95117fbdb1468)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
b1702f130a less: upgrade 562 -> 563
(From OE-Core rev: 6f25ff8f413e47f285d8aa846c73f93377f9f0f0)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-11-03 08:21:11 +00:00
Wang Mingyu
a84b31f74f less: upgrade 551 -> 562
(From OE-Core rev: ab2125c07e76eed5352c6b5f67d9700888be3535)

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-05-30 12:32:48 +01:00
Yi Zhao
83be3e8fa1 less: upgrade 550 -> 551
(From OE-Core rev: be110d5edb3162db3452653956dc3040e4c30b44)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-06-19 12:46:43 +01:00
Andreas Müller
0c2353d96a less: upgrade 549 (terribly broken) -> 550
Test case:

* open xfce4-terminal
* run 'echo | less'
* press arrow up/down few times
* exit less with 'q'
=> From now on all mouse(wheel) buttons create strange inputs on terminal

Release note says [1]: "Sometimes the terminal was left in mouse-reporting mode
after exiting less."

http://www.greenwoodsoftware.com/less/index.html

(From OE-Core rev: 4cefbf492d98ec14b8bb323c92d987b795addaf2)

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-03-29 08:28:53 +00:00
Richard Purdie
c6f7f3fe0d less: upgrade 530 -> 549
The license checksum changed due to a change in copyright years.

(From OE-Core rev: ee3057bf109b2d11ecb0089c2c424e9b6033932e)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-02-25 10:43:07 +00:00
Yi Zhao
e5d1c61093 less: update to 530
(From OE-Core rev: 4229cdca14d5cd6b6ab3628c8e31aff5f1fe27a8)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:01 +01:00
Huang Qiyu
ab65d87dca less: 527 -> 529
Upgrade less from 527 to 529.

(From OE-Core rev: c2056d1b83f66d494c15e72a953aeb05eeec6a65)

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-01-29 08:49:50 +00:00
Robert Yang
3b439ef177 less: 487 -> 527
(From OE-Core rev: 14620d2882cfb59aac260136bb43568108ab8cf0)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-11-21 13:06:13 +00:00
Huang Qiyu
49cbc76aab less: 481 -> 487
Upgrade less from 481 to 487.

License checksum changes are not related to license changes.

(From OE-Core rev: 5d8be59d2f3430439868926d1424420d6a78a1b5)

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-12-08 10:31:29 +00:00
Robert Yang
38aa0fc8fb less: 479 -> 481
(From OE-Core rev: 6638c366b7db67ab59de6aa5d8d8f0e3af2ba707)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-15 11:54:50 +00:00
Alexander Kanavin
976f0e35c6 package_regex.inc: split the rest of the entries to their recipes
(From OE-Core rev: 73e2555cc7d529a93362b3fcfea3fbc7a4c60ca1)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-08 10:20:52 +00:00
Robert Yang
2b9dca169d less: 478 -> 479
(From OE-Core rev: 448f658d758174b64891e552fd88ff0a10afbf5e)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-31 10:32:41 +01:00
Robert Yang
d32b383c3a less: 471 -> 478
* Remove backport patch 0001-Fix-possible-buffer-overrun-with-invalid-UTF-8.patch.
* The LICENSE's checksum changed because of year changed, the contents
  are the same.

(From OE-Core rev: 505f351ede9dd1eb0e6f01080ea24080697dadf4)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-09 18:00:18 +01:00
Junling Zheng
0a6e3a9d69 less: fix CVE-2014-9488
An out of bounds read access in the UTF-8 decoding can be triggered with
a malformed file in the tool less. The access happens in the function
is_utf8_well_formed due to a truncated multibyte character in the sample
file.

The bug does not crash less, it can only be made visible by running less
with valgrind or compiling it with Address Sanitizer.

Version 475 of less contains a fix for this issue. The file version.c
contains some entry mentioning this issue (without any credit):

 - v475 3/2/15 Fix possible buffer overrun with invalid UTF-8

The fix is in the file line.c. We derive this patch from:

https://blog.fuzzing-project.org/3-less-out-of-bounds-read-access-TFPA-0022014.html

Thank Claire Robinson for validating it on Mageia 4 i586. Refer to:

https://bugs.mageia.org/show_bug.cgi?id=15567

(From OE-Core rev: 68994284f3c059b737bfc5afc2600ebd09bdf47f)

Signed-off-by: Junling Zheng <zhengjunling@huawei.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-28 07:56:56 +01:00
Chong Lu
5734086bfa less: Upgrade to 471
(From OE-Core rev: 0218dc4cb7a796e0e9653c9676beedbc7bf14542)

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-12-23 10:18:16 +00:00
Saul Wold
b166d5cd74 less: Upgrade to 470
(From OE-Core rev: f1fdcee974e04ece1830ecd539c7f217802df973)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-11-09 10:21:21 +00:00
Saul Wold
864fdbba5b less: Upgrade to 466
(From OE-Core rev: e0b9c83ade46f0f5332f4aef6a13dfa32733b387)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-08-31 23:40:48 +01:00
Saul Wold
1831cbbb14 less: Update to 458
(From OE-Core rev: dd4f419413cf6ae1f8a069ae8a8cceae6ce02453)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-04-29 14:45:08 +01:00
Saul Wold
abbb4e178a less: Update to 457
(From OE-Core rev: 8b4b9c1329c4bfd265ad4962aa61f5e61e10d1e7)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-12-19 17:55:05 +00:00
Saul Wold
7b90941c9d less: Update to 456
(From OE-Core rev: 601338d8efce91ac89aa1d1fabd4d953f4f36f4b)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-12-03 14:47:56 +00:00
Saul Wold
ad0ea7e939 less: Update to 451
LICENSE file was changed to match the BSD-2 Clause

(From OE-Core rev: 4b6a70e60790a32d89e2e5cdded4af83e9d303ae)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-11-18 16:42:08 +00:00
Saul Wold
a260a6ed1b less: cleanup update-alternatives deprecated code
(From OE-Core rev: a8ad6529b214c1c7b12dffb557d9f7afa3ee1f04)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-08-15 14:26:33 +01:00
Mark Hatle
4547096a41 less: use BPN for alternatives
(From OE-Core rev: 3361ebfd61dc0d5914a506b1a06b92bd80734114)

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-05-30 12:04:39 +01:00
Scott Garman
1eac51a76c PR bump for all recipes that DEPEND on ncurses
The packaging changes to ncurses could break package feeds,
so bump the PR on everythong that DEPENDS on ncurses.

(From OE-Core rev: be92256917c157284ef8370bb93bbf443849b2e1)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-03-15 00:11:40 +00:00
Elizabeth Flanagan
cde25845a7 less_444.bb: Adding license email from author
This slipped off my plate. Adding the email response from the
author of less which allows us to use a generic BSD instead of
the less license.

(From OE-Core rev: fa7bdf96b8eb8b5078db38249c5c60ec511c35c6)

Signed-off-by: Elizabeth Flanagan <elizabeth.flanagan@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-02-24 23:25:51 +00:00
Beth Flanagan
bd66d229c9 less: Correcting generic license
I've asked and received permission from Mark Nudelman, the author
of less, to utilize a generic BSD 2 clause license for less, instead
of creating a common "less" license file.

(From OE-Core rev: 37c8c2c5f6937520eaf9f5d981f9315e36eba4bb)

Signed-off-by: Beth Flanagan <elizabeth.flanagan@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-12-21 17:16:29 +00:00
Elizabeth Flanagan
5eeea9e170 OECore license fixes: meta/*
This is a quick audit of only the most obviously wrong licenses
found within OECore. These fixes fall into four areas:

- LICENSE field had incorrect format so that the parser choked
- LICENSE field has a license with no version
- LICENSE field was actually incorrect
- LICENSE field has an imaginary license that didn't exist

This fixes most of the LICENSE warnings thrown, along with my prior
commit adding additional licenses to common-licenses and additional
SPDXLICENSEMAP entries.

HOWEVER..... there is much to be done on the license front.
For a list of recipes with licenses that need obvious fixing see:

https://wiki.yoctoproject.org/wiki/License_Audit

That said, I would suggest another license audit as I've found
enough inconsistencies. A good suggestion is when in doubt, look at
how openSuse or Gentoo or Debian license the package.

(From OE-Core rev: 3083dd70b3a9fa01fcc3cf00373b05502505996e)

Signed-off-by: Elizabeth Flanagan <elizabeth.flanagan@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-12-08 15:24:32 +00:00
Saul Wold
26ce75d707 less: Update to 444
(From OE-Core rev: ee1242197c1458e690ffb4c70e28bf8a0339eb0f)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-12-02 15:14:02 +00:00
Saul Wold
cb7b483afc less: update to 443
(From OE-Core rev: 52bf0c629cddfefe8c8731f8f9a6ce20aa599d64)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-06-01 18:34:30 +01:00
Richard Purdie
257a9edb4b Update SRC_URIs to use BPN instead of PN
[YOCTO #860]

(From OE-Core rev: 09ed5de9624be38c0fa5cb3f943691c3b4a50686)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-03-14 22:36:25 +00:00
Mark Hatle
f992d6b434 recipes-extended: Add Summary information
Add Summary information and update descriptions as necessary.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2010-12-16 15:53:08 +00:00
Saul Wold
3d08b9f2c6 SRC_URI Checksums Additionals
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2010-12-09 08:18:17 -08:00
Richard Purdie
29d6678fd5 Major layout change to the packages directory
Having one monolithic packages directory makes it hard to find things
and is generally overwhelming. This commit splits it into several
logical sections roughly based on function, recipes.txt gives more
information about the classifications used.

The opportunity is also used to switch from "packages" to "recipes"
as used in OpenEmbedded as the term "packages" can be confusing to
people and has many different meanings.

Not all recipes have been classified yet, this is just a first pass
at separating things out. Some packages are moved to meta-extras as
they're no longer actively used or maintained.

Signed-off-by: Richard Purdie <rpurdie@linux.intel.com>
2010-08-27 15:29:45 +01:00