Commit Graph

6645 Commits

Author SHA1 Message Date
Richard Purdie
29c0c3da49 python3-numpy: upgrade 1.20.2 -> 1.20.3
(From OE-Core rev: 759bd9cfcf753c4ef2c20411aee0301ac8b45469)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18 12:43:00 +01:00
Richard Purdie
e6b682534f python3-hypothesis: upgrade 6.9.1 -> 6.12.0
(From OE-Core rev: 4499ec65592df456c60d7f0ff690a50ca55c9c01)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18 12:43:00 +01:00
Richard Purdie
7965967d09 btrfs-tools: upgrade 5.12 -> 5.12.1
(From OE-Core rev: f75c02e3e067473d85b4b57d36250098ddb99dbd)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18 12:43:00 +01:00
Richard Purdie
b34e16f839 vala: upgrade 0.52.2 -> 0.52.3
(From OE-Core rev: 8416c85539ac7ac4e13e873773f00e67304aacfa)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18 12:43:00 +01:00
Richard Purdie
016af160c1 python3-git: upgrade 3.1.14 -> 3.1.17
(From OE-Core rev: b56ef3af9d6afdb2208b4d3d1813241e77fe2fd8)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-18 12:42:59 +01:00
Ross Burton
fb26a7c9b8 meson: update patch status
(From OE-Core rev: 87f0b45a307bb47df5a68d6649fe5625f2dd0775)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-17 09:53:15 +01:00
Richard Purdie
09a5d1e444 python3-jinja2: Upgrade 2.11.3 -> 3.0.0
(From OE-Core rev: 1e520a7d0602059101646f24e7e347e4117697e9)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-16 08:29:59 +01:00
Richard Purdie
6e58a59f31 python3-markupsafe: Upgrade 1.1.1 -> 2.0.0
(From OE-Core rev: def6184a8f24fe8965db77511bbc65edb38942c2)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-16 08:29:59 +01:00
Richard Purdie
d9aa32dbf9 qemu: Upgrade 5.2.0 -> 6.0.0
Building without PIE support seems broken upstream, enable it by default
to match the configuration others evidently use.

Tweak git submodule option to match upstream.

Drop backported/merged patches, refresh others.

(From OE-Core rev: ede1b86e663f1cafccc8aa8c35fa13ebd3f55d11)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-16 08:29:59 +01:00
wangmy
f8019df2b9 python3-six: upgrade 1.15.0 -> 1.16.0
(From OE-Core rev: c27ede9d77edc0a0ca71707642f19e43fe9c4e7d)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-16 08:29:59 +01:00
wangmy
eb83c19d97 python3-attrs: upgrade 20.3.0 -> 21.2.0
(From OE-Core rev: f6e624046afbbf6853c7fe409f77ecd2ab802f21)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-16 08:29:59 +01:00
Alexander Kanavin
436662bc4d nativesdk-meson: correctly set cpu_family
This was a warning before, but with the patch
that turns it into an error, it needs to be properly addressed.

(From OE-Core rev: b6257f3b88e788af3ee748a8a6366aab819dce3f)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-14 07:57:28 +01:00
Alexander Kanavin
74fbe5578a qemu: backport a patch to fix meson 0.58 builds
(From OE-Core rev: fe6889ed05edf2f1e4ac7b06debd4cc43ebb9607)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-14 07:57:28 +01:00
Alexander Kanavin
2077235f35 meson: update 0.57.2 -> 0.58.0
Rebase patches; dropped chunks (and cross-prop-default.patch)
have been removed upstream.

Move native-only patches to all-patches, as they're a pain to rebase
separately.

(From OE-Core rev: cb2a7dcc86d784cb9903f69570ddc05e23d36529)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-14 07:57:28 +01:00
wangmy
ec94923ec7 go: upgrade 1.16.3 -> 1.16.4
(From OE-Core rev: 1e280a596293976ac835b557dcaaa56972682480)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-14 07:57:27 +01:00
Trevor Gamblin
b9f5a890a5 python3: upgrade 3.9.4 -> 3.9.5
Version 3.9.5 includes a fix for CVE-2021-29921.

(From OE-Core rev: be23351f97c1a7362c0ddd240a6de0cddfca1b01)

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-14 07:57:27 +01:00
Robert Joslyn
899da712ae btrfs-tools: Update to 5.12
Add PACKAGECONFIG for zoned block devices. Leave disabled by default, as
this requires a recent kernel.

License-Update: libbtrfsutil was relicensed to LGPLv2.1+: https://git.kernel.org/pub/scm/linux/kernel/git/kdave/btrfs-progs.git/commit/?id=9e30f779e3cbf12a88ebe309ee371851fdfd3aa0

(From OE-Core rev: d10b62f54c6e0f19af02bab024680462d9e4418a)

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-13 11:34:15 +01:00
Martin Jansa
e7ce28c8b0 binutils: backport DWARF-5 support for gold
* DWARF-5 is now used by default with gcc-11, causing
  11.1.0/ld: internal error in format_file_lineno, at ../../gold/dwarf_reader.cc:2278
  collect2: error: ld returned 1 exit status
  in various projects (runc-opencontainers, libhybris, collada-dom)

* https://gcc.gnu.org/gcc-11/changes.html

  For targets that produce DWARF debugging information GCC now defaults to DWARF version 5
  (with the exception of VxWorks and Darwin/Mac OS X which default to version 2 and
  AIX which defaults to version 4). This can produce up to 25% more compact debug
  information compared to earlier versions.

  To take full advantage of DWARF version 5 GCC needs to be build against binutils version 2.35.2 or higher.
  When GCC is build against earlier versions of binutils GCC will still emit DWARF version 5 for
  most debuginfo data, but will generate version 4 debug line tables (even when explicitly given -gdwarf-5).

  The following debug information consumers can process DWARF version 5:

  GDB 8.0, or higher
  valgrind 3.17.0
  elfutils 0.172, or higher (for use with systemtap, dwarves/pahole, perf and libabigail)
  dwz 0.14
  Programs embedding libbacktrace are urged to upgrade to the version shipping with GCC 11.

  To make GCC 11 generate an older DWARF version use -g together with -gdwarf-2, -gdwarf-3 or -gdwarf-4.

(From OE-Core rev: d07d4d739ae17787017f771dd2068fda0e836722)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-13 11:34:15 +01:00
Richard Purdie
b77802fb05 rpm: Exclude CVE-2021-20271 from cve-check
This is included in the release we have, it was the reason for the last rpm
point release.

(From OE-Core rev: 117feb358c81b6b852dee24268eac0a1a47c1701)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-13 11:34:14 +01:00
Alexander Kanavin
3127ef1b43 Revert "go: Use dl.google.com for SRC_URI"
This reverts commit 4118415d4b.

This was found to be unnecessary, and broke upstream version checks.

(From OE-Core rev: cee436d1eb94663f3604c80b6ad87292f6901498)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-12 23:06:03 +01:00
Richard Purdie
8a6a71ea4d jquery: Exclude CVE-2007-2379 from cve-check
The CVE is non-specific and depends on the users of jquery, doesn't
make sense to have this flagged against jquery as there is nothing we can
do about it.

(From OE-Core rev: 1f82843584f6d2843c5bbd2fe5dcbc654a0fbcfb)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11 11:54:26 +01:00
Richard Purdie
d2708c0b5b qemu: Exclude CVE-2018-18438 from cve-check
The issues were investigated and found not to be an issue therefore
exclude from checks.

(From OE-Core rev: ee6ee9bd489c126b99d15c1011560df2f840a6e9)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11 11:54:26 +01:00
Richard Purdie
ae3527372f qemu: Exclude CVE-2007-0998 from cve-check
The CVE applies to the built-in VNC server but we don't enable this by default.

(From OE-Core rev: d62b9974a5f3a0f462434ce2763c28a4b4bbcfc6)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11 11:54:26 +01:00
Richard Purdie
458f5d026e qemu: Exclude CVE-2017-5957 from cve-check
The CVE applies to virglrender before 0.6.0 which we don't have.

(From OE-Core rev: 9b5355375d028577de0b98e05992de6a088cb972)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11 11:54:26 +01:00
Bastian Krause
4638576d10 ccache: version bump 4.2.1 -> 4.3
Instead of [1] a very similar PR [2] was merged that allows
enabling/disabling documentation builds. So drop the patch here and use
the upstream cmake option ENABLE_DOCUMENTATION instead.

[1] https://github.com/ccache/ccache/pull/844
[2] https://github.com/ccache/ccache/pull/842

(From OE-Core rev: 1eedc5f822933928ed7861350ad47ff9c096552a)

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11 11:54:26 +01:00
Alexander Kanavin
9427f6f92a swig: fix upstream version check
(From OE-Core rev: 4e9f4dca48e853a794331a75200fd7450176eeb2)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11 11:54:26 +01:00
Martin Jansa
17535c15b7 gcc-sanitizers: Package up static hwasan files as well
* introduced with gcc-11, other hwasan files were already packaged in:
  3df4a25465 gcc-sanitizers: Package up hwasan files
  but static library was still triggering installed-vs-shipped

(From OE-Core rev: 49aec04aa8ac98545b48c41382ebf1a1c3be1118)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-11 11:54:26 +01:00
Khem Raj
03a3fddb50 python3-markdown: Upgrade to 3.3.4
meta-python is carrying 3.3.4, once we upgrade it in core
we can safely drop it from meta-python, helps with layer-compatibility
checks

(From OE-Core rev: 88c11b0a45b3fd310288325f97c16ca2c9e0006e)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:16 +01:00
Romain Naour
4523af6c1d dejagnu: needs expect at runtime
runtest return an error due to missing expect on the target.
Add expect as runtime dependency.

(From OE-Core rev: d9a3a08edc1efcbe7b02e80be98370792d3c6cc2)

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:16 +01:00
Khem Raj
3f93502b27 swig: Upgrade to 4.0.2
Drop backports and refresh patches to apply on 4.x series

(From OE-Core rev: 5c7923e79c2411a0a36e540a8b894d399ad04aa7)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:16 +01:00
Alexander Kanavin
341796ff8c python3-setuptools-scm: upgrade 5.0.1 -> 6.0.1
(From OE-Core rev: a95aab10c662dda99867c2cffd4e6fcfe33cebe0)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:16 +01:00
Alexander Kanavin
b18df94122 python3-pytest: upgrade 6.2.2 -> 6.2.3
(From OE-Core rev: a49c3ee159164dbea35fdae51584ce8c2abb488b)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:16 +01:00
Alexander Kanavin
ac7fdbe558 python3-importlib-metadata: upgrade 3.4.0 -> 3.10.1
(From OE-Core rev: 68ec69e4c135ce49956a50698f681cd317cf96c7)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:16 +01:00
Alexander Kanavin
922ebe04b6 python3-hypothesis: upgrade 6.2.0 -> 6.9.1
(From OE-Core rev: 549b395e0fcc59e01a48b91d33cf72b7501c41df)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:16 +01:00
Alexander Kanavin
5e164fcba6 pkgconf: upgrade 1.7.3 -> 1.7.4
(From OE-Core rev: a7cb5f9160fa1575adf10d4a0b679478cfa585ef)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:16 +01:00
Alexander Kanavin
3ac289eb81 e2fsprogs: upgrade 1.46.1 -> 1.46.2
(From OE-Core rev: 89ed9395b247e741fe667e7321be996b27d4e0c0)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
21bd255395 dnf: upgrade 4.6.0 -> 4.7.0
(From OE-Core rev: 432352dddc97eb19cefacd8644fb59b1f10bc2d3)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
f5dbb6b815 createrepo-c: upgrade 0.17.0 -> 0.17.2
(From OE-Core rev: 0013f8195c046031aad5156d889b86676144e74b)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
85a6dffc87 bison: upgrade 3.7.5 -> 3.7.6
License-Update: http links -> https

(From OE-Core rev: d3072372c95f327d38581e0f29f3d3329e0ecaae)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
d112d5bee6 libdnf: upgrade 0.58.0 -> 0.62.0
(From OE-Core rev: 87f9e745998be322cf13952f8d914139185b9d8c)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
ec0e1d4fb9 meson: update 0.57.1 -> 0.57.2
(From OE-Core rev: 85345697c6e492598c882eb452b999b8a05f97a9)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
25fdd28161 cmake: update 3.19.5 -> 3.20.1
Remove 0002-cmake-Prevent-the-detection-of-Qt5.patch
(patch purpose and failing scenarios unclear; disabling
is better done through configuration options which
are available for all of these items).

License-Update: copyright years

(From OE-Core rev: 6f3a4f224931866ab2e9758530efdb81d7ddb63d)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
73b4bf301e dpkg: update 1.20.7.1 -> 1.20.9
(From OE-Core rev: 2000040d92a41ef5ae594aed2482a7b33d17dda9)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:15 +01:00
Alexander Kanavin
9fbf28b1d9 vala: upgrade 0.50.4 -> 0.52.2
(From OE-Core rev: 25c6b77d2ab914dc7a38e7bf6171d66bd3be85d3)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:14 +01:00
wangmy
0fe48bb863 python3-pygments: upgrade 2.8.1 -> 2.9.0
(From OE-Core rev: cd0b5ecccccb5b77aee77e3eb4547fd342fbabaf)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:14 +01:00
Alexander Kanavin
13e4ff2250 python3: add markdown/smartypants/typogrify modules
This is needed to enable gi-docgen, a successor to gtk-doc

(From OE-Core rev: b557ea3cc61da326bb7783a2ac8e4080c4bf79e5)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-09 23:30:14 +01:00
Alexander Kanavin
5ac0965479 gnu-config: update to latest revision
(From OE-Core rev: 2f13632a0b573f635c91efee3fd6ce2215f407cf)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-06 12:12:58 +01:00
Vinay Kumar
f628b052f6 binutils: Fix CVE-2021-20197
Source: git://sourceware.org/git/binutils-gdb.git
Tracking -- https://sourceware.org/bugzilla/show_bug.cgi?id=26945

Backported upstream commit d3edaa91d4cf7202ec14342410194841e2f67f12 to
binutils-2.36 source along with commit id dependencies
(8e03235147a9e774d3ba084e93c2da1aa94d1cec and 8b69e61d4be276bb862698aaafddc3e779d23c8f).

(From OE-Core rev: 395812c345cb510471e264c6f5bb83eed61d79df)

Signed-off-by: Vinay Kumar <vinay.m.engg@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-06 08:41:26 +01:00
Anuj Mittal
e3d054cd62 qemu: fix CVE-2021-3392
(From OE-Core rev: a0257aee7d80fc67c92877e2de1e4b98ece54174)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-06 08:41:26 +01:00
Anuj Mittal
db4d9619aa Revert "qemu: fix CVE-2021-3392"
This reverts commit 5e8e08df8b.

This is an incomplete fix.

(From OE-Core rev: 2e7494cd388c5d03a95d8a54d6231e7fe7fd46ef)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-06 08:41:26 +01:00