License-Update: copyright years
(From OE-Core rev: 6a0cb6e129d5602808f34fd2a9460fc05d9520d6)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: copyright years
(From OE-Core rev: 913212724c5a8437678e0f07795e8a894d6f43bc)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The bmaptool (previously: bmap-tools, bmap-tool, bmaptool) has been moved
to be under the Yocto Project umbrella and is now hosted at:
github.com/yoctoproject/bmaptool
[RP: Added a couple of missing renames]
(From OE-Core rev: 7a036b1a1ec7dcd27dbe18d4c2e703bd2a8af182)
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update:
===============
doc/libunistring.texi (Conventions):
Explain the (resultbuf, lengthp) return value convention from the user's point of view.
doc/libunistring.texi (Include files):
Fix documentation of _LIBUNISTRING_VERSION and _libunistring_version (incorrect since 2010-05-14).
Add documentation of _libunistring_unicode_version.
Changelog:
=============
* The data tables and algorithms have been updated to Unicode version 15.1.0.
* New functions u8_pcpy, u16_pcpy, u32_pcpy, similar to mempcpy.
* New functions uc_indic_conjunct_break_name, uc_indic_conjunct_break_byname,
uc_indic_conjunct_break.
* New functions
uc_is_property_prepended_concatenation_mark,
uc_is_property_id_compat_math_start, uc_is_property_id_compat_math_continue,
uc_is_property_ids_unary_operator
and new constants
UC_PROPERTY_PREPENDED_CONCATENATION_MARK,
UC_PROPERTY_ID_COMPAT_MATH_START, UC_PROPERTY_ID_COMPAT_MATH_CONTINUE,
UC_PROPERTY_IDS_UNARY_OPERATOR.
* New constant _libunistring_unicode_version.
* The UTF-8 decoder functions, especially u8_mbtouc, are now more Unicode
Standard compliant.
* The *printf functions no longer support the %n directive, for security
reasons.
* Fixed a bug in the *printf functions: In the %U, %lU, %llU directives, a
negative width given as an argument did not trigger left-justification.
* The functions u16_strstr and u32_strstr now operate in worst-case linear
time.
(From OE-Core rev: f9be1e083df6b2621271a2683eddb84bdf34270a)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
Fix a possible wrong error return from the DER builder.
(From OE-Core rev: f476d845feb03e54c93df31291f11c82b9a07487)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
0001-Do-not-fail-when-testing-config-scripts.patch
refreshed for 1.48
Changelog:
===========
* New configure option --with-libtool-modification.
* New option parser flag to detect commands given without a double
dash. There is also the new meta command "command-mode" to set
this flag via a config file.
* Added an es_fopen mode flag "sequential" with support on Windows.
* Added an es_fopen mode flag "wipe" to cleanup internal buffers at
close time.
* New function gpgrt_wipememory.
* Improvements to setenv on Windows.
* Fixed call to estream-printf string filters.
* Many improvements to the yat2m tool.
* Updates to the build system.
(From OE-Core rev: e484b0dda40d00f6272970c9e8a5c9cd6b879301)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-support/libffi/libffi/not-win32.patch
refreshed for 3.4.6
Changelog:
===========
-chore: update version to 3.4.6 and fix long double regression on mips64 and alpha
-Update sparc64 host
-Update cfarm hostnames
-Always define long double types
-update copyright year in libffi.texi
-Update version, copyright and testsuite info
-Fix test filename reference
(From OE-Core rev: 0ea9b851f3d7ca568b536c7980730ea03333d037)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This function hasn't been used since the upgrade to 0.6.23 in 2021[1]
[1] oe-core 65a54f72e15f59bdf9d8c4618f3ef8510541d134
(From OE-Core rev: 3f8da47b54ffa1b0a9feb971a7324a52a325b5e1)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
CVE_STATUS was set for those components, but meanwhile databases are updated
with corrected information, so setting the CVE_STATUS is not needed anymore.
(From OE-Core rev: 5ec6057cfa66ceeb33bec013e320f8e3fa7d7ecf)
Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
By default, the tests are built and run at do_compile and we can see
errors like below in log.do_compile:
gnupg-2.4.4/tests/cms/inittests: line 99: ../../sm/gpgsm: cannot execute binary file: Exec format error
Note that the do_compile process still succeeds. However, we'd better avoid
executing these target binaries at build time.
(From OE-Core rev: 74d48497470ce209bc6bdf49c2e2cfda67dce6ae)
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
https://www.vim.org/vim-9.1-released.php
Vim 9.1 is available
The Vim project is happy to announce that Vim 9.1 has finally been released.
This release is dedicated to Bram Moolenaar, Vim's lead developer for more
than 30 years, who passed away half a year ago. The Vim project wouldn't
exist without his work!
Vim 9.1 is mainly a bug fix release, it contains hundreds of bug fixes, a
few new features and there are many minor improvements.
Changes:
https://github.com/vim/vim/compare/v9.0.2130...v9.1.0114
CVE: CVE-2024-22667
(includes commit b39b240c38)
(From OE-Core rev: 9f7e9c0f4360469b9775372272e0a442c7cc06c8)
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Update libgit2 to pull in securtiy fixes.
Changelog summary:
- A bug in git_revparse_single is fixed that could cause a Denial of
Service attack. This fixes CVE-2024-24575
- A bug in git_index_add is fixed that could lead to arbitrary code execution.
This fixes CVE-2024-24577
- A bug in the smart transport negotiation could have caused an out-of-bounds
read.
(From OE-Core rev: 7191dcae3853728dbb95c4901c2fdb73f9066a66)
Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Backport an upstream patch to remove Python exception handler which is
deprecated and also removed from swig.
736c052d7d
(From OE-Core rev: 970db363039ab1c9d3cc5eb33eb834865ac340c4)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Drop the clang/VFP patch, merged in 00116b6.
Drop the FILES for ${libdir}/libffi-${PV}, this file isn't installed.
License-Update: Copyright year updated to 2024.
(From OE-Core rev: e3ea7c0ae99171ebaa273f0a1f6d4fa49ed1b257)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Pull small fixed related to secure builds, handling of rc in every ptest
and better tests output when timeout.
Changes,
92c1b97 Do not reset error counter before each test
7de7e2b utils: run_child fix security flags build
6a9fba2 utils.c: get_available_ptests fix security flags compilation
5b8ad9a tests: Ensure that timeouts still print ERROR
d939217 SECURITY.md: Add file
(From OE-Core rev: 1d8a8487d300332c796a7555644bb370fc858f6f)
Signed-off-by: Anibal Limon <anibal@limonsoftware.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This reverts commit dea5e8863792dc7bb3324b543e04da4c94a060aa.
The original commit claims that lzop is unused in OE-core.
That is not correct, the following places still use it and
became unbuildable now:
"
meta/classes-recipe/image_types.bbclass:CONVERSION_CMD:lzo = "lzop -9 ${IMAGE_NAME}.${type}"
meta/classes-recipe/image_types.bbclass:CONVERSION_DEPENDS_lzo = "lzop-native"
meta/classes-recipe/kernel-uboot.bbclass: lzop -9 linux.bin
meta/classes-recipe/kernel.bbclass:DEPENDS += "${@bb.utils.contains("INITRAMFS_FSTYPES", "cpio.lzo", "lzop-native", "", d)}"
meta/classes-recipe/kernel.bbclass: lzop -df ${B}/usr/${INITRAMFS_IMAGE_NAME}.$img
"
Furthermore, LZO is the best compromise between kernel decompression
time and size on low end ARM systems, that is why it is often used
with e.g.:
FIT_KERNEL_COMP_ALG = "lzo"
FIT_KERNEL_COMP_ALG_EXTENSION = ".lzo"
Reinstate the package to avoid breaking this use case.
[RP: For me, the real reason to justify this is fact that several SoC/BSP
layers do want this as a dependency]
(From OE-Core rev: 6e8a0d66e05387d55c49a275faa7f4aa2bf6f2ac)
Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
There are AB-INT issues with the gnutls tests and the test for naked-alerts is
failing. Tweak the run-ptest script to save the error log to obtain more infos
for debugging. Related to [YOCTO #15352].
(From OE-Core rev: 9665d272df34bcb2811a2f7a1afccabe4bebc9d1)
Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This is a bug fix and feature update. Release notes are available at:
https://curl.se/changes.html#8_6_0
Disable test 1478, it's comparing help output to documentation.
License-Update: Copyright year updated
(From OE-Core rev: efebd6a8824769137a21674e2bfe1c059a41758a)
Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Drop two backported patches, refresh others.
(From OE-Core rev: 63c7bf399f31420374866dc050a52e9c0700cdbd)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Upgrade version to adress recent CVE findings.
Changelog
=========
** libgnutls: Fix more timing side-channel inside RSA-PSK key exchange
[GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553]
** libgnutls: Fix assertion failure when verifying a certificate chain with a
cycle of cross signatures
[GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567]
** libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token
certtool was unable to handle Ed25519 keys generated on PKCS#11
with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2.
(From OE-Core rev: 705d2972b38efc9f331e3635c07ca92f8812b365)
Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
It fails occasionally with missing generated header files:
| ../git/common/asn1.c:42:10: fatal error: openssl.asn.h: No such file or directory
| 42 | #include "openssl.asn.h"
| | ^~~~~~~~~~~~~~~
| compilation terminated.
According to meson manual page:
https://mesonbuild.com/Wrap-best-practices-and-tips.html#declare-generated-headers-explicitly
'asn_h_dep' should be a dependency of static_library target 'libp11_asn1'
to make sure that required header files generated before compile
common/asn1.c.
(From OE-Core rev: 523ae4ba677ee9d9925182689b2d70af6d3df7a8)
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Backport the upstream fix for CVE-2023-48795.
(From OE-Core rev: 314fa19c5e07fa632ff0434a6adbb97de1319a02)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
============
-permits error messages from spelling providers not to be valid UTF-8.
-The --with-hunspell-dir configure option is removed (along with all the
other ---with-PROVIDER-dir options, which did nothing).
-Doxygen API documentation is now included in the release tarball
(From OE-Core rev: 34eb325aa8fa22454c5a706845140a6c43cfbd6c)
Signed-off-by: Jiang Kai <jiangkai@fujitsu.com>
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
============
-Fix build error when both clock_gettime and GetTickCount64 are available
-nghttpx: Shutdown h3 stream write if reset by a remote endpoint
-Bump golang.org/x/net from 0.15.0 to 0.17.0
-cmake: speed up warning option detection
-Update doc
-ngtcp2 has merged BBR and BBRv2 under BBR (fixes issue #1955)
-Bump ngtcp2
-Integration servertester h3
-Refactor character comparison
-nghttpx: Stricter transfer-encoding checks
-Configure cygwin
-windows: Fix warnings
-Prefer clock_gettime if CYGWIN defined
-Bump neverbleed
-Bump ngtcp2
-Bump neverbleed
(From OE-Core rev: 9b40ffc9766673111214c6a0551c3291032cfd8e)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: Switch arc4random(3bsd) man page from OpenBSD to NetBSD
0001-funopen-Replace-off64_t-with-off_t-in-funopen_seek.patch
removed since it's included in 0.11.8
(From OE-Core rev: c5709bb67c14f7ba829803cf1dc3f1c564376168)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This reverts commit d2b445384d.
Revert this commit since:
- some systems using oe-core master may still be using kernels from
before 5.6 pulled in the rng-tools algorithm, and
- some hardware platforms may not have a hardware random number generator
and could therefore need to run rngd to avoid long boot-time initialization
due to a depleted entropy pool.
(From OE-Core rev: 828afafb3bff54079fcba9bdab2ec87ac13e4ce6)
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Add a PACKAGECONFIG for the support for zlib-compressed debuginfo.
There's no need to explicitly enable reading of .debug_frame segments as
this is enabled automatically for arm/aarch64.
Enable static globally, there's not much to gain by making this
musl-specific.
Don't disable the tests on musl as they verify that libunwind can link,
which is important with external libucontext libraries.
No need to disable documentation on musl, as it's already disabled out
of the box.
(From OE-Core rev: 2752f6a4f8a45afff3366e5aa75672ba6f994a23)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
0001-src-Gtrace-remove-unguarded-print-calls.patch has been merged, so
update the Upstream-Status.
0003-x86-Stub-out-x86_local_resume.patch has been hopefully obsoleted by
the use of libucontext, remove.
Split 004-Fix-build-on-mips-musl.patch into two, as there's two
independent issues here.
0006-Fix-for-X32.patch appears to have been fixed with 31738a upstream,
in 1.6.0.
musl-header-conflict.patch was obsoleted by recipe-specific-sysroots,
remove it.
(From OE-Core rev: 916c67e3e16c5c355ce6f2a88f3f2a7506af4980)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
There's no need to these to be split, so merge them together.
(From OE-Core rev: e0d7f27e7da8c2d052e3c761d41305348d898458)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Now that bitbake supports the use of inherit_defer, switch all conditional
(variable based) inherits to use this instead. This leads to more a more
deterministic user experience since there is no longer an immediate expansion
and later changes to the variables in question (e.g. a bbappend) are
accounted for.
This patch tries to ensure the behaviour before/after remains as unchanged
as it reasonably can, e.g. by always inherting populate_sdk_base. native
and nativesdk continue to need to be inherited last, hence being used
with inherit_defer in a handful of very specific cases.
(From OE-Core rev: 451363438d38bd4552d5bcec4a92332f5819a5d4)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
