1253 Commits

Author SHA1 Message Date
Changqing Li
279838afb9 redis: add back missing patch
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-27 14:44:57 -08:00
Otto Esko
93befa6cf5 Use old override syntax
- can-utils and dstat recipes were using the colon override syntax
  introduced in honister
- revert back to underline override notation

Signed-off-by: Otto Esko <otto.esko@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-16 05:30:44 -08:00
Armin Kuster
7fbb276718 recipes: Update SRC_URI branch and protocols
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-13 07:45:48 -08:00
Changqing Li
d3f0dddd64 redis: upgrade 6.2.2 -> 6.2.6
refer https://redis.io/, this upgrade container sereval CVE
fixes.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-01 20:29:40 -07:00
Changqing Li
43004de1bf redis: fix sereval CVEs
Fixes CVEs:
CVE-2021-32626
CVE-2021-32627
CVE-2021-32628
CVE-2021-32675
CVE-2021-32687
CVE-2021-32762
CVE-2021-41099

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-28 21:14:44 -07:00
Alexander Kanavin
62a8dfa754 can-utils: rrecommend iproute2 to make it possible to configure can interfaces
This replicates the fix from canutils.bb, for the same issue. See the link
in the comment for details.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 020b87add3368b259662c5994a5a9d7edaa58085)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-26 16:12:02 -07:00
Joe Slater
cea26b8482 redis: fix CVE-2021-32761
Backport from version 6.2.5.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-07 12:53:53 -07:00
Gianfranco
7bd7e1da90 dlt-daemon: update from 2.18.6 to 2.18.7
- add an upstream proposed patch 317.patch to fix a build failure with enabled systemd binding

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 01fa60898c2fe65f327bea2f84aaca00aef3f371)
[Stable version, bug fix only]
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-04 10:39:29 -07:00
Mingli Yu
cef3e037ac polkit: fix CVE-2021-3560
Backport a patch [1] to fix CVE-2021-3560.

[1] a04d13affe

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b65c646b25a2652de02ba2adbbef942b5b475e7f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-21 10:40:27 -07:00
Tony Tascioglu
acf5769aff redis: fix CVE-2021-32625
CVE: CVE-2021-32625
Upstream-Status: Backport [e9a1438ac4c52aa68dfa2a8324b6419356842116]

Fix integer overflow in STRALGO LCS (CVE-2021-32625) (#9011)
An integer overflow bug in Redis version 6.0 or newer can be exploited using the
STRALGO LCS command to corrupt the heap and potentially result with remote code
execution. This is a result of an incomplete fix by CVE-2021-29477.

Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-14 11:43:12 -07:00
Tony Tascioglu
ffb3fbb6fe redis: fix CVE-2021-29478
This patch backports the fix for CVE-2021-29478

CVE: CVE-2021-29478
Upstream-Status: Backport
[29900d4e6b]

An integer overflow bug in Redis 6.2 could be exploited to corrupt the heap and
potentially result with remote code execution.

The vulnerability involves changing the default set-max-intset-entries
configuration value, creating a large set key that consists of integer values
and using the COPY command to duplicate it.

The integer overflow bug exists in all versions of Redis starting with 2.6,
where it could result with a corrupted RDB or DUMP payload, but not exploited
through COPY (which did not exist before 6.2).

Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-17 16:14:06 -07:00
Tony Tascioglu
5865a76847 redis: fix CVE-2021-29477
This patch backports the fix for CVE-2021-29477.

CVE: CVE-2021-29477
Upstream-Status: Backport
[f0c5f920d0]

An integer overflow bug in Redis version 6.0 or newer could be exploited using
the STRALGO LCS command to corrupt the heap and potentially result with remote
code execution.

Signed-off-by: Tony Tascioglu <tony.tascioglu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-17 16:14:02 -07:00
Chen Qi
22f613b047 minifi-cpp: set CLEANBROKEN to 1
Rebuilding minifi-cpp in old build dir sometimes result
in do_compile failure. So set CLEANBROKEN to "1" to workaround
this problem. If further investigation is done and the underlying
problem is addressed, this setting could be removed.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a9e17243875b82dba698924cf2f1d31408127521)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27 07:35:58 -07:00
Yi Zhao
6926d7b3f0 minifi-cpp: set correct python processor directory in configure file
Set an appropriate python processor directory in configure file to fix
the minifi startup warning:
[org::apache::nifi::minifi::python::PythonCreator] [error] Could not access /etc/minifi/minifi-python/

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a86b772e31079231a04762ed49ec83d32005ca15)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27 06:49:10 -07:00
Saul Wold
bf945de831 sysdig: disable building for ppc
Sysdig depends on tbb which no longer builds for powerpc

Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 433603cb7dd0243856509a552ff354dbc0fccd95)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-23 08:27:16 -07:00
Martin Jansa
bbe3855ec7 ostree: switch from default master branch to main to fix do_fetch failure
* branch was renamed in upstream repo

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-13 21:37:32 -07:00
Sinan Kaya
ef6adcba6f zram: add support for mem_limit
Some targets might be interested in limiting how big
zram can grow. If the variable is set in /etc/default/zram file,
configure it in mem_limit sysfs attribute.

Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cb1cf053785bcb5670b2eca7051aa11f29ef80b1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-25 15:12:19 -07:00
zangrc
085332dcd2 redis: upgrade 6.2.1 -> 6.2.2
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4b04112fddb7b2ef5d4b61975d385b386bbd9f5b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-25 15:09:18 -07:00
Yi Fan Yu
34c6ad05d2 redis: upgrade 6.0.9 -> 6.2.1
Refresh 3 patches.

Removed Patch:
ilp32.patch fixed by upstream 0719388cfb1a79160204314beb1de1f9c29a3684

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0c006765426bc41c1344e856528b499637574f97)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Martin Jansa
e516ff377b uml-utilities: fix installed-vs-shipped with usrmerge
* fixes:
  ERROR: uml-utilities-20040406-r1 do_package: QA Issue: uml-utilities: Files/directories were installed but not shipped in any package:
    /usr/lib/uml/port-helper
  Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
  uml-utilities: 1 installed and not shipped files. [installed-vs-shipped]

* pass LIB_DIR instead of using default value from Makefile:
  $ grep LIB_DIR.*= tools/port-helper/Makefile
  LIB_DIR ?= /usr/lib/uml

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ccba1eb6a8b4c850e26e5814adfb5136ca4865a8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-07 09:37:36 -07:00
zangrc
4fd44de9a8 ostree: upgrade 2020.8 -> 2021.1
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7d2604942cebea24e090f11186d0aa43a61be037)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-03 07:46:03 -07:00
Yi Fan Yu
872701edb6 rsyslog: fix some of the ptests
Run test as non-root 'tester'.
Add more rdepends for ptest.

Introduce a patch to skip checking for a libc header:
    sys/inotify

Python scripts no longer called with ./script.
Remove the need to add the correct shebang.
Ptest results:

    8.2102.0
===============
TOTAL: 424
PASS:  417
SKIP:  5
XFAIL: 0
FAIL:  2
XPASS: 0
ERROR: 0

Remaining failure related to relp:
* imrelp-tls-cfgcmd
* sndrcv_relp_tls-cfgcmd

the test expects an error "relp connect failed with return 10031",
but the connection seems to be established and working.

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9dda6b9608f3d8a06806b595a909d44bc00c377b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-03 07:46:03 -07:00
Khem Raj
d8053b7e2b sysdig: Depend on system libb64
avoid using vendored version

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-28 12:12:58 -07:00
Khem Raj
81ab62c975 sysdig: Upgrade to 0.27.1
Drop upstreamed patches

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-28 12:12:58 -07:00
Marius Kriegerowski
8ac832ceb9 tmate: add recipe version 2.4.0
Add a recipe for tmate, a fork of tmux that provides remote terminal
sharing.

Signed-off-by: Marius Kriegerowski <marius.kriegerowski@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-28 12:12:58 -07:00
zhengruoqin
78c7eba008 dialog: upgrade 1.3-20210306 -> 1.3-20210319
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-28 12:12:57 -07:00
Martin Jansa
046e7067bf mysql-python, lio-utils, openlmi-tools: add conditional PNBLACKLIST like meta-python2 does
* it depends on target python(2) recipes from meta-python2 which are restricted with this
  conditional since:
  https://git.openembedded.org/meta-python2/commit/?h=hardknott&id=10c65fc18998d302f34634ffceaf31ab335056dd

* telepathy-idle and cherokee from:
  meta-oe/recipes-connectivity/telepathy/telepathy-idle_0.2.0.bb
  meta-webserver/recipes-httpd/cherokee/cherokee_git.bb
  also depend on meta-python2, but use only pythonnative from there, so they aren't blacklisted.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-28 12:12:57 -07:00
zangrc
bf42dff971 dialog: upgrade 1.3-20210117 -> 1.3-20210306
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-16 21:37:14 -07:00
Randy MacLeod
92356deff0 zstd: remove the recipe since it moved to oe-core
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-14 09:19:05 -07:00
Yi Fan Yu
bd09abe3e3 rsyslog: Fix rsyslog systemd service not starting
$(sbindir) -> ${sbindir}

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-08 14:11:59 -08:00
Khem Raj
053ffb0974 libleak: Add recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-06 18:47:15 -08:00
Khem Raj
e337dcc00b libbacktrace: Add recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-06 18:47:10 -08:00
Yi Fan Yu
47cdc51e50 librelp: update 1.6.0 -> 1.10.0
Now pulling from the stable branch

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-05 20:24:59 -08:00
zhengruoqin
a6c07fe69e sigrok-cli: upgrade 0.7.1 -> 0.7.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
Yi Fan Yu
768532675a rsyslog: Update 8.2012.0 -> 8.2102.0
Ptest Results: (Timeout 800) (qemux86-64)
           2012 2102
    ================
    TOTAL: 424  424
    PASS:  369  369
    SKIP:  41   41
    XFAIL: 0    0
    FAIL:  14   14
    XPASS: 0    0
    ERROR: 0    0

Many ptest failures are due to
busybox logger not having the `-d` flag.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-03 11:11:06 -08:00
Khem Raj
6d795ff511 minifi-cpp: include limits header for numeric_limits definition
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-03 11:08:29 -08:00
Wang Mingyu
75a9a09efd redis-plus-plus: upgrade 1.2.1 -> 1.2.2
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-28 10:20:43 -08:00
Yi Fan Yu
92e6767e05 rsyslog: Add imhttp to packageconfig
introduced in 8.2010.0
requires civetweb for http input module

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-24 14:18:30 -08:00
Oleksiy Obitotskyy
70f352c90c smartmontools: Improve reproducibility
Backport changes added to master smartmontools.
24838916b4

Signed-off-by: Oleksiy Obitotskyy <oobitots@cisco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-22 09:29:35 -08:00
Sean Nyekjaer
1b4da9f2ad can-utils: split into more packages
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-22 09:24:34 -08:00
Khem Raj
ed54f12e19 recipes: Update common-licenses references to match new names
The licenses were renamed to match their SPDX names, fix the
references in LIC_FILES_CHKSUM

Correct the checksums where they were wrong

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-21 23:37:54 -08:00
Sean Nyekjaer
308c901e86 zstd: split bin into separate package
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-20 10:40:53 -08:00
Yi Fan Yu
4f0166d871 rsyslog: upgrade 8.2006.0->8.2012.0
new version no longer includes rsyslog.service,
so I copied over the same from 8.2006.
(git version carries it now in ./platform)

referenced rsyslog (upstream) commit id:
cfd07503ba055100a84d75d1a78a5c6cceb9fdab

Ptest Results: (Timeout 800) (qemux86-64)
       2006 2012
================
TOTAL: 411  424
PASS:  361  372
SKIP:  39   41
XFAIL: 0    0
FAIL:  11   11
XPASS: 0    0
ERROR: 0    0

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-16 08:57:15 -08:00
Oleksandr Kravchuk
da8e144cb1 hexedit: update to 1.5
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-11 22:48:27 -08:00
Oleksandr Kravchuk
8b6e7ea4c6 libconfig add UPSTREAM_CHECK_URI
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-11 09:05:11 -08:00
Ramon Fried
8cb6756a83 fluentbit: Fix SIGSEGV caused by using flb_free instead of mk_mem_free
Signed-off-by: Ramon Fried <rfried.dev@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-09 23:45:05 -08:00
Ramon Fried
f4521965f6 fluentbit: fix systemd input plugin
Because of missing dependency of systemd, Cmake configure
step didn't find systemd and skipped the systemd input plugin.
Added necessary dependency if systemd is available.

Signed-off-by: Ramon Fried <rfried.dev@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-09 23:45:05 -08:00
Khem Raj
260c342157 boinc-client: Fix build with autotools 2.70+
On arches which are not same as build host it finds
ac_cv_c_undeclared_builtin_options = cannot detect
and errors out.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-08 10:17:23 -08:00
Khem Raj
3aa40ae9ed libstatgrab: Fix build with autoconf 2.70+
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-05 18:40:25 -08:00
Khem Raj
3cf7962581 boinc-client: Upgrade to 7.16.16 release
Drop upstreamed patch

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-04 15:29:01 -08:00