Commit Graph

38708 Commits

Author SHA1 Message Date
Khem Raj
f24ef905ed sysvinit: Include sys/sysmacros.h for major/minor definitions on musl too
Fixes musl issue

implicit declaration of function 'minor' is invalid in C99 [-Wimplicit-function-declaration]
which eventually ends up with a linker error

(From OE-Core rev: 6b603924e50a5694421b9142494315799422928d)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Khem Raj
bbd5d098ec mdadm: Include sys/sysmacros.h for major/minor definitions
Fixes
implicit declaration of function 'minor' is invalid in C99 [-Wimplicit-function-declaration]

which eventually ends up with a linker error

(From OE-Core rev: 5841e52e79274b2da17bf7dbd1224d0a3dca2d6f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Khem Raj
2ebc15672c musl: Upgrade to 1.1.23+
License-Update: Added contributor list and copyright years
https://git.musl-libc.org/cgit/musl/commit/COPYRIGHT?id=7a6c8a0df1b685d788fd4d3763681bb3018806d7
https://git.musl-libc.org/cgit/musl/commit/COPYRIGHT?id=d6dcd4185bddff34724d6d539f834e9daf7dcf3d

- include release 1.1.23
- Add riscv support
- Add syscall numbers upto 5.1 kernel

Detailed log
https://git.musl-libc.org/cgit/musl/log/?qt=range&q=ac304227bb3ea1787d581f17d76a5f5f3abff51f..0ce49d0a301b4142741b32773492af90f66ed3ca

(From OE-Core rev: 31a08144f9c739b8d4f0a968860a5de8af44fdce)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Oleksandr Kravchuk
cc83f20acc xinput: update to 1.6.3
(From OE-Core rev: f34b852b342cb28fa27a2267ffb211ffec1fa219)

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Anuj Mittal
0f05352b69 piglit: fix SRC_URI
Fixes build for older versions of git (like on CentOS 7) which don't
follow redirects properly if the .git suffix is missing and cause
errors:

| error: RPC failed; result=22, HTTP code = 404
| fatal: The remote end hung up unexpectedly

(From OE-Core rev: f5c6b2d54449d5ea4f65e18e89e40794530e20aa)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Anuj Mittal
f7e07e4acd iptables: upgrade 1.8.2 -> 1.8.3
Remove upstreamed patches and manually package symlinks which aren't
handled by do_split_package.

Changelog:
http://git.netfilter.org/iptables/log/?qt=range&q=v1.8.3...v1.8.2

(From OE-Core rev: 845af88f86f143ca0b119f0489397cd505571cae)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Khem Raj
c46f497dbb Revert "unzip: fix CVE-2019-13232"
See [1]

This reverts commit 4df4de2ac8bc0e80446e1ad0ce67eb244e2d2a32.

[1] http://lists.openembedded.org/pipermail/openembedded-core/2019-July/284859.html

(From OE-Core rev: 14655b3a54d086cbbd702adf9446fabf57ce51b0)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Oleksandr Kravchuk
0bebaa64c6 python3-pbr: update to 5.4.1
(From OE-Core rev: e59c6720271be8e3f1e93c301078a580ffdaafe0)

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Oleksandr Kravchuk
ff44852a7b udev-extraconf: do not mount swap partitions
Swap is a special filesystem that cannot be mounted, so do not try to,
otherwise we will have service that tries and fails to mount it with
the following error:

systemd[1]: Mounting /run/media/nvme0n1p3...
mount[1229]: mount: /run/media/nvme0n1p3: unknown filesystem type 'swap'.

(From OE-Core rev: 7a2c56da85326043f0663c29535ac3fb555d96fe)

Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-23 22:26:28 +01:00
Stefan Agner
dda8f1bab2 psplash: create psplash tmpfs mount directory in psplash-init
The psplash binary uses TMPDIR as directory to store the FIFO to
communicate with the psplash tools. This directory can be in any
location an init system determines to be suitable, psplash-init
uses /mnt/ for it. Rather than creating the mount directory in
the recipe, just create it in the init script itself. This allows
other init scripts to use a different location without having
an unnecessary .psplash directory in /mnt.

(From OE-Core rev: dd8c7f2466d94fd8326b962e9bcfc4f42a35da38)

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:04 +01:00
Khem Raj
fc497907ce mpeg2dec: Fix PIE build and avoid relocation in text section on ARM
This a backport from upstream

Fixes package_qa on arm

ERROR: QA Issue: ELF binary 'TOPDIR/build/tmpfs/work/armv7vet2hf-neon-yoe-linux-gnueabi/mpeg2dec/0.5.1-r0/packages-split/libmpeg2/usr/lib/libmpeg2.so.0.1.0' has relocations in .text [textrel]

(From OE-Core rev: 190531943ab43758f83ff021caef1f68dbdc3840)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:04 +01:00
Ross Burton
c3aaa4b54e ffmpeg: upgrade to 4.1.4
Add a PACKAGECONFIG for the use of XCB and enable by default if X11 is in
DISTRO_FEATURES.

(From OE-Core rev: 69b0f94c117b3ab922e0061255a1814e69b16435)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:04 +01:00
Ross Burton
560549ba58 ffmpeg: don't use hardcoded lookup tables
ffmpeg can generate lookup tables at build time instead of runtime, but this is
no longer a recommended option.  The size impact is significant (12% of the
total libavcodec size, nearly 2MB), the runtime impact of dynamic tables isn't
too costly, and only a few codecs actually use the pre-generated tables (MP3,
notably).

(From OE-Core rev: 51f13afe669638dbf72f464f243adccb22be3d21)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:04 +01:00
Ross Burton
24015adec8 meson.bbclass: export STRIP=${BUILD_STRIP}
In Meson the environment variables are always the native tools, so export
STRIP=${BUILD_STRIP} along with CC et al to silence this Meson warning:

WARNING: Env var STRIP seems to point to the cross compiler.
This is probably wrong, it should always point to the native compiler.

(From OE-Core rev: 8d1557356d2c7d94eeef2a9b61d3c9622e337a9e)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:04 +01:00
Joe Slater
c68d44cd0c libtool: remove host information from libtool
Import patch from Debian.

(From OE-Core rev: b2e0b383a17a3cd450adb3d86f7f818729438375)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:04 +01:00
Ross Burton
e23c103434 unfs3: set upstream tag regex to avoid false-positives
(From OE-Core rev: 4663d06a79c6608127413488676a6e7dfbefb3e1)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:04 +01:00
Ross Burton
fa103d3481 freetype: upgrade to 2.10.1
Also switch SRC_URI to the nongnu mirrors as they're more reliable than
Sourceforge.

(From OE-Core rev: 18875698e182d5eb5a9bc1f95abdc2348f66cedc)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:03 +01:00
Ross Burton
82b5ed6acf cve-update-db-native: clean up JSON fetching
Currently the code fetches the compressed JSON, writes it to a temporary file,
uncompresses that with gzip and passes the fake file object to update_db().

Instead, uncompress the gzip'd data in memory and pass the JSON directly to
update_db().

(From OE-Core rev: 9422745979256c442f533770203f62ec071c18fb)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:03 +01:00
Ross Burton
297605eec0 cve-update-db-native: improve metadata parsing
The metadata parser is fragile: first it coerces a bytes() to a str() (so the
string is b'LastModifiedDate:2019...'), assumes the first line is the date, and
then uses a regex to parse (which then includes the trailing quote as part of
the date).

Clean this up by parsing the bytes as UTF-8 (ASCII is probably fine, but this is
safer), iterate through the lines and split on colons to find the right
key/value pair.

(From OE-Core rev: bb4e53af33d6ca1e9346464adbdc1b39c47530f3)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:03 +01:00
Ross Burton
8ec4cd3e2a cve-update-db-native: use executemany() to optimise CPE insertion
Instead of calling execute() repeatedly, rewrite the function to be a generator
and use executemany() for performance.

(From OE-Core rev: b309840b6aa3423b909a43499356e929c8761318)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:03 +01:00
Bonnans, Laurent
ffcf23f5f2 openssl: fix valgrind errors on v1.1.1c
Running valgrind against code using Openssl v1.1.1c reports a large number of
uninitialized memory errors. This fix from upstream solves this problem.

(From OE-Core rev: 8081d645353ed934a0158329f2f36ea49d663e19)

Signed-off-by: Laurent Bonnans <laurent.bonnans@here.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:03 +01:00
Chen Qi
1c7a734922 runtime_test.py: use track_for_cleanup for temp dir
Use track_for_cleanup for temp dir to avoid such temp
dir being not cleaned up when something goes wrong, e.g.,
building image failure.

(From OE-Core rev: 7105c9bcceda3e4defbb6aa9fb3e8fd38c1e00a2)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-22 17:31:03 +01:00
Ross Burton
047de6962f cve-update-db: actually inherit native
The recipe was called -native but didn't inherit native.

(From OE-Core rev: f0d822fad2a163d1ee32ed3b4c0359245140e19b)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Ross Burton
3cd004128d cve-update-db-native: use os.path.join instead of +
(From OE-Core rev: 4b301030cf9cf7a981dcff85a50e915c045e3130)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Anuj Mittal
2a11ee3ad2 gdb: fix CVE-2017-9778
(From OE-Core rev: 4fa03fa14f8facb134ecd772a99c25184d8a4cbd)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Anuj Mittal
0176b556fa python: include CVE patches for python-native as well
Also avoids maintaining a different set of patches for both.

(From OE-Core rev: b3b1c00cc46b33ddbf7e008267032220e1e298af)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Anuj Mittal
f53f82fc89 unzip: fix CVE-2019-13232
Include the fix by Mark Adler which has also been adopted by Debian.

(From OE-Core rev: 4df4de2ac8bc0e80446e1ad0ce67eb244e2d2a32)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Anuj Mittal
47732ab6e9 glibc: CVE-2018-20796 is same as CVE-2019-9169
See:
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141
https://www.securityfocus.com/bid/107160

(From OE-Core rev: 7e90506534ed2a70680382cf28614f02fdb98409)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Anuj Mittal
db32c9bda3 rsync: fix CVEs for included zlib
rsync includes its own copy of zlib and doesn't recommend linking with
the system version [1].

Import CVE fixes that impact zlib version 1.2.8 [2] that is currently used
by rsync.

[1] https://git.samba.org/rsync.git/?p=rsync.git;a=blob;f=zlib/README.rsync
[2] https://nvd.nist.gov/vuln/search/results?form_type=Advanced&cves=on&cpe_version=cpe%3a%2fa%3agnu%3azlib%3a1.2.8

(From OE-Core rev: a55fbb4cb489853dfb0b4553f6e187c3f3633f48)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Li Zhou
f56e1ffb1e iptables: Security Advisory - iptables - CVE-2019-11360
Porting patch from <https://git.netfilter.org/iptables/commit/iptables/
xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e> to solve
CVE-2019-11360.

(From OE-Core rev: 5a38ef7eef9ecef2d27ae89f01691072bb94a25e)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Yi Zhao
a921c2f9db ltp: upgrade 20190115 -> 20190517
Drop the following patches since the issues have been fixed upstream:
  0001-file01.sh-Fix-in-was-not-recognized.patch
  0001-lapi-Define-TST_ABI-32-64-to-detect-target-type.patch
  0001-syscalls-setrlimit03.c-read-proc-sys-fs-nr_open-for-.patch
  0007-fix-__WORDSIZE-undeclared-when-building-with-musl.patch
  0009-fix-redefinition-of-struct-msgbuf-error-building-wit.patch
  0021-Define-_GNU_SOURCE-for-MREMAP_MAYMOVE-definition.patch
  0023-ptrace-Use-int-instead-of-enum-__ptrace_request.patch
  0024-rt_sigaction-rt_sigprocmark-Define-_GNU_SOURCE.patch
  0026-crash01-Define-_GNU_SOURCE.patch
  0028-rt_sigaction.h-Use-sighandler_t-instead-of-__sighand.patch
  0034-periodic_output.patch
  0039-commands-ar01-Fix-for-test-in-deterministic-mode.patch
  define-sigrtmin-and-sigrtmax-for-musl.patch
  setregid01-security-string-formatting.patch

Refresh the following patches:
  0004-build-Add-option-to-select-libc-implementation.patch
  0005-kernel-controllers-Link-with-libfts-explicitly-on-mu.patch
  0008-Check-if-__GLIBC_PREREQ-is-defined-before-using-it.patch
  0018-guard-mallocopt-with-__GLIBC__.patch
  0020-getdents-define-getdents-getdents64-only-for-glibc.patch
  0035-fix-test_proc_kill-hang.patch
  0036-testcases-network-nfsv4-acl-acl1.c-Security-fix-on-s.patch
  0001-open_posix_testsuite-mmap24-2-Relax-condition-a-bit.patch
  0001-shmctl01-don-t-use-hardcoded-index-0-for-SHM_STAT-te.patch
  0001-diotest4-Let-kernel-pick-an-address-when-calling-mma.patch
  0001-getrlimit03-adjust-a-bit-of-code-to-compatiable-with.patch

Add patch:
  0006-rt_tgsigqueueinfo-disable-test-on-musl.patch

(From OE-Core rev: eb59546c83f4c217de6272a8d3b2fa65e3c84e7f)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Ricardo Ribalda Delgado
161d036569 systemd-bootconf: Mark as machine specific
APPEND is usually attached to a machine. This patch avoids multiconfig
errors such as:

| NOTE: Direct dependencies are ['multiconfig:qt5022:/workdir/repo/poky/meta/recipes-core/glibc/glibc_2.29.bb:do_populate_sysroot', 'multiconfig:qt5022:virtual:native:/workdir/repo/poky/meta/recipes-devtools/pseudo/pseudo_git.bb:do_populate_sysroot', 'multiconfig:qt5022:/workdir/repo/poky/meta/recipes-devtools/quilt/quilt-native_0.65.bb:do_populate_sysroot', 'multiconfig:qt5022:/workdir/repo/poky/meta/recipes-devtools/gcc/gcc-cross_8.3.bb:do_populate_sysroot', 'multiconfig:qt5022:/workdir/repo/poky/meta/recipes-devtools/gcc/gcc-runtime_8.3.bb:do_populate_sysroot']
| NOTE: Installed into sysroot: []
| NOTE: Skipping as already exists in sysroot: ['glibc', 'pseudo-native', 'quilt-native', 'gcc-cross-x86_64', 'gcc-runtime', 'libgcc', 'linux-libc-headers', 'libtool-native', 'texinfo-dummy-native', 'libmpc-native', 'flex-native', 'automake-native', 'zlib-native', 'mpfr-native', 'gmp-native', 'binutils-cross-x86_64', 'xz-native', 'autoconf-native', 'gnu-config-native', 'gettext-minimal-native', 'm4-native']
| DEBUG: Python function extend_recipe_sysroot finished
| DEBUG: Executing shell function do_install
| install: cannot stat 'loader.conf': No such file or directory
| WARNING: exit code 1 from a shell command.
| ERROR: Function failed: do_install (log file is located at /workdir/build/tmp/work/bobcat-poky-linux/systemd-bootconf/1.00-r0/temp/log.do_install.737)
NOTE: recipe systemd-bootconf-1.00-r0: task do_install: Failed
ERROR: Task (multiconfig:qt5022:/workdir/repo/poky/meta/recipes-core/systemd/systemd-bootconf_1.00.bb:do_install) failed with exit code '1'

(From OE-Core rev: 84d08b0bed9e1c5f223f9ec437bb8d96a2bda599)

Signed-off-by: Ricardo Ribalda Delgado <ricardo@ribalda.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Pierre Le Magourou
050a96fe03 cve-update-db-native: Remove hash column from database.
djb2 hash algorithm was found to do collisions, so the database was
sometime missing data. Remove this hash mechanism, clear and populate
elements from scratch in PRODUCTS table if the current year needs an
update.

(From OE-Core rev: 78de2cb39d74b030cd4ec811bf6f9a6daa003d19)

Signed-off-by: Pierre Le Magourou <pierre.lemagourou@softbankrobotics.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Pierre Le Magourou
4b8a6f4929 cve-check: Replace CVE_CHECK_CVE_WHITELIST by CVE_CHECK_WHITELIST
CVE_CHECK_WHITELIST does not contain version anymore, as it was not
used. This variable should be set per recipe.

(From OE-Core rev: 7069302a4ccbb5b72e1902f284cf078516fd7294)

Signed-off-by: Pierre Le Magourou <pierre.lemagourou@softbankrobotics.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Ulrich Ölmann
b4db437f11 squashfs-tools: upgrade to commit f95864afe883
The master branch's current tip commit as of this writing is [1], see the
squashfs-tool's repo at [0].

Because of commits [2]-[4] which are included in the master branch three
corresponding patches are dropped as they are not needed anymore. The single
remaining patch was rebased on top of [1] to apply cleanly.

Commits [5] & [6] introduced interesting features, namely zstd support and
reproducibility of created SquashFS images. They are reflected in two new
PACKAGECONFIG options now, but only the latter ("reproducible") is appended to
the default options as OE-core does not contain a recipe to build zstd at the
moment (a working zstd recipe can be found e.g. in meta-rauc, see [7]).

[0] https://github.com/plougher/squashfs-tools.git
[1] f95864afe883 ("unsquashfs-4: Add more sanity checks + fix CVE-2015-4645/6")
[2] 46bdc1726e5a ("mksquashfs: Make a load of functions static")
[3] b0ca8a5c98ff ("pseudo.c: add explicit <sys/stat.h> include")
[4] f95864afe883 ("unsquashfs-4: Add more sanity checks + fix CVE-2015-4645/6")
[5] 6113361316d5 ("squashfs-tools: Add zstd support")
[6] e0d74d07bb35 ("Add configuration and Mksquashfs build options for
                   reproducible builds")
[7] https://layers.openembedded.org/layerindex/recipe/79049/

(From OE-Core rev: 92f34fbe321040db3dc0431dd464747324058e2e)

Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Anuj Mittal
f06689bff2 curl: upgrade 7.65.1 -> 7.65.2
Changelog:
https://curl.haxx.se/changes.html#7_65_2

(From OE-Core rev: 54b91da2bd07e8c3a40e61d90af251a1bfbf50f4)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Yi Zhao
adf037eaf7 debianutils: upgrade 4.8.6.1 -> 4.8.6.3
(From OE-Core rev: bbde94e994f4904b983ee396b55eb68931de7d4c)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Anuj Mittal
67ff99f32a openssl: set CVE vendor to openssl
Differentiate it from openssl gem for Ruby.

(From OE-Core rev: 2ec481b19d6c9c20ce6573de77ae89e576d6b8cb)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Zang Ruochen
7ad1653264 libpciaccess:upgrade 0.14 -> 0.16
-Upgrade from libpciaccess_0.14.bb to libpciaccess_0.16.bb.

-libpciaccess/0004-Don-t-include-sys-io.h-on-arm.patch
 Removed since this is included in 0.16.

(From OE-Core rev: c2140b42c8516100c55c381d98e0f281b562d2db)

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Zang Ruochen
d1d2d45417 xwininfo:upgrade 1.1.4 -> 1.1.5
-Upgrade from xwininfo_1.1.4.bb to xwininfo_1.1.5.bb.

(From OE-Core rev: 7f34f3657568a0130aa31a481973509203984a06)

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Zang Ruochen
49c90ce762 libice:upgrade 1.0.9 -> 1.0.10
-Upgrade from libice_1.0.9.bb to libice_1.0.10.bb.

-libice/CVE-2017-2626.patch
 Removed since this is included in 1.0.10.

(From OE-Core rev: d3581b5d5562604ba31fc2b10873b3b0c9bf75fc)

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Anuj Mittal
3ef6ecd0d7 vte: upgrade 0.56.1 -> 0.56.3
(From OE-Core rev: 00c84fd2583022d6f11067cc0b2e8782a09abc26)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Anuj Mittal
130e8f041d glib-2.0: upgrade 2.60.4 -> 2.60.5
Changes:
https://github.com/GNOME/glib/blob/glib-2-60/NEWS

(From OE-Core rev: 7ab3b3d57df1bddf2241b75ae6ebec29ea288502)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Anuj Mittal
71eb7d07da bzip2: upgrade 1.0.7 -> 1.0.8
License-Update: Change in version and copyright year/date.

Changelog:
https://sourceware.org/git/?p=bzip2.git;a=blob;f=CHANGES

(From OE-Core rev: ad33d889ad551651d72cf1cdfdfffdd147ee91ac)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:40 +01:00
Anuj Mittal
58d3ca6c15 qemu: fix CVE-2019-12155
(From OE-Core rev: a0236a8f682ab0e897cd99555b9225bae4fb04ab)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:39 +01:00
Anuj Mittal
600b9df025 binutils: CVE-2019-9070 is same as CVE-2019-9071
See:

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89395

(From OE-Core rev: cef180de3684491f1ac4180ddbcc102121222181)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:39 +01:00
Kai Kang
74646729a4 defaultsetup.conf: enable select init manager
Introduce a new variable INIT_MANAGER and create 4 init-manager-*.inc
files to configure init manager settings. Available values of
INIT_MANAGER are sysvinit, systemd, mdev-busybox and a default of none.
'none' provides backwards compatibility.

The settings of various VIRTUAL-RUNTIME variables are moved into these
files from the packagegroups.

[YOCTO #13031]

[Modifications by RP for backwards compatibility]

(From OE-Core rev: 8d0b4704a526a48cd5e67df61b613424bbbdccde)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 08:41:39 +01:00
Richard Purdie
13881ed2bd staging: Drop clean_recipe_sysroot
With recent changes to runqueue, this fuction is unsafe as setscene tasks can run
at the same time as normal ones and doing things before do_fetch no longer
offers any guarantees.

There is other code which cleans out things from the sysroots as tasks rerun so
we should rely upon that instead.

(From OE-Core rev: 27ce69861edb7e52078b59ebf8fefc9201e9a228)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-18 23:34:39 +01:00
Ross Burton
d64c2ad24d pkgconf: upgrade 1.6.1 -> 1.6.3
(From OE-Core rev: 4a69bf5ae3328d124a7607a52333643ebf7ec0b3)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-18 12:16:19 +01:00
Ross Burton
1a2f9898f6 piglit: upgrade to latest revision
(From OE-Core rev: 6ee8d724bb7347a47395709df9d16e32abc9e06e)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-18 12:16:19 +01:00