Commit Graph

10063 Commits

Author SHA1 Message Date
Robert Yang
4de4fd2f11 glibmm: fix perl path
Fixed:
ERROR: QA Issue: /usr/lib/glibmm-2.4/proc/gmmproc contained in package glibmm-dev requires /path/to/tmp/hosttools/perl, but no providers found in RDEPENDS_glibmm-dev? [file-rdeps]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:03 +02:00
Yi Zhao
e11367b255 sthttpd: update to 2.27.1
* Fix CVE-2017-10671: Heap-based buffer overflow in the de_dotdot
  function in libhttpd.c

* Update SRC_URI because the original site can not access.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:03 +02:00
Fabio Berton
e11c66f01f python-requests: Update to version 2.18.4
Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
Huang Qiyu
6bf7b85db3 pcsc-lite: Update to 1.8.22
1) Upgrade pcsc-lite from 1.8.13 to 1.8.22.

2) License information has changed in pcsc-lite-1.8.22/COPYING  for src/strlcpy.3, src/strlcat.c and src/strlcpy.c have been removed in pcsc-lite-1.8.22, so modify the LIC_FILES_CHKSUM.

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
Jackie Huang
315aadd763 phpmyadmin: upgrade to 4.7.3
The license files and md5 are updated.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
Hongxu Jia
633ac957d6 xmlrpc-c: add perl to RDEPENDS
Fix the following file-rdeps QA issue:
...
|ERROR: xmlrpc-c-1.31.0-r0 do_package_qa: QA Issue:
/usr/bin/xml-rpc-api2txt contained in package xmlrpc-c requires
/usr/bin/perl, but no providers found in RDEPENDS_xmlrpc-c? [file-rdeps]
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
Hongxu Jia
24d91883bb python3-pykickstart: tweak shebang to python3
Fix the following file-rdeps QA issue:
...
|ERROR: python3-pykickstart-2.35-r0 do_package_qa: QA Issue:
/usr/bin/ksvalidator contained in package python3-pykickstart requires
/usr/bin/python, but no providers found in RDEPENDS_python3-pykickstart?
[file-rdeps]
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
Hongxu Jia
8d8a5e6be8 multipath-tools: add bash to RDEPENDS
Fix the following file-rdeps QA issue:
...
|ERROR: multipath-tools-0.7.1-r0 do_package_qa: QA Issue: /sbin/mpathconf
contained in package multipath-tools requires /bin/bash, but no
providers found in RDEPENDS_multipath-tools? [file-rdeps]
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
Tim Orling
c64238c764 python*-pexpect: add v4.2.1
The python2 version was dropped from oe-core.
Also add support for python3.

Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
Tim Orling
26ef409d08 python*-ptyprocess: add v0.5.2
The python2 version was dropped from oe-core.
Also add support for python3.

Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
Yi Zhao
a7f02b1fe5 gd: update to 2.2.4
* Remove the following patches which already merged in upstream:
    fix-gcc-unused-functions.patch
    .gitignore-the-new-test-case.patch
    CVE-2016-10166.patch
    CVE-2016-10167.patch
    CVE-2016-10168.patch
    CVE-2016-6906-1.patch
    CVE-2016-6906-2.patch
    Fix-290-TGA-RLE-decoding-is-broken.patch

* Update LICENSE's MD5 check sum.
  The COPYING file has been update with the following commits in
  upstream:

  commit f863b3c2d300ff5344f6752e5813b0d6985e79c4
    Resolve #282: COPYING vs. docs/naturaldocs/license.txt

  commit 9ccdaedbd9a2cfd1c8a9a258c09af161e796bd41
    Sync COPYING and docs/naturaldocs/license.txt

  These two commits updated the copyright statement regarding the
  authorship of gd and adjust the format.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:02 +02:00
dengke.du@windriver.com
2ee20c389a libvpx: upgrade to 1.6.1
Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Chen Qi
32a93e0d5a rsyslog: install logrotate configuration file into correct location
Previously we used update-alternatives to manage this configuration file,
creating link under /etc/logrotate.d/ directory.

However, we later dropped the update-alternatives approach and explicitly
setting rsyslog to conflict with other syslog providers.

So we need to install the logrotate configuration file under /etc/logrotate.d
to make things right.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Chen Qi
e41be4b461 rsyslog: fix CVE-2017-12588
Backport a patch to fix CVE-2017-12588.

The zmq3 input and output modules in rsyslog before 8.28.0 interpreted
description fields as format strings, possibly allowing a format string
attack with unspecified impact.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-12588

CVE: CVE-2017-12588

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Yi Zhao
99d3175eac tipcutils: add runtime dependency for iproute2-tipc
The tipcutils 2.2 removed the tipc-config tool and recommended to use
the new configuration tool named "tipc" in iproute2 package for
configuring the tipc, which utilizes the new tipc netlink kernel API.

Add iproute2-tipc as a runtime dependency.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Yi Zhao
eb8994f44a iproute2: add bbappend for supporting tipc tool
The tipcutils 2.2 removed the tipc-config tool and recommended to use
the new configuration tool named "tipc" in iproute2 package for
configuring the tipc, which utilizes the new tipc netlink kernel API.

We supported tipc in iproute2 with PACKAGECONFIG in oe-core commit
944ef0de241de77429ab0e5cb1dd4a7f355cf3fd

Add iproute2 bbappend to enable tipc for tipcutils.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Huang Qiyu
8acf5ce943 openwsman: rename to 2.6.3
As openwsman has been upgrdaed to v2.6.3, but the name of recipe file still v2.6.2, so rename it.

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Chen Qi
dcdab9880d openobex: disable building documentation
When building openobex on a host without any connection to outside,
the configure fails as it tries to get some url from outside to build
the documentation.

Fix this problem by disabling building documentation.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Fabio Berton
aaca09b952 python-chardet: Extend to native and nativesdk
Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Peter Kjellerstedt
8023c64393 start-stop-daemon: Only create a link in ${base_sbindir} if necessary
If usrmerge is enabled in DISTRO_FEATURES, then ${base_sbindir} and
${sbindir} are set to the same path and the symbolic link from
${base_sbindir}/start-stop-daemon to ${sbindir}/start-stop-daemon can
(and should) not be created.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:06:01 +02:00
Wenzong Fan
d5e04a6b28 fontforge: update to 20170731 to fix CVEs
Fixed CVEs & Issues:
  CVE-2017-11577: #3088
  CVE-2017-11576: #3091
  CVE-2017-11575: #3096
  CVE-2017-11574: #3090
  CVE-2017-11572: #3092
  CVE-2017-11571: #3087
  CVE-2017-11569: #3093
  CVE-2017-11568: #3089

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:13 +02:00
Jackie Huang
f79465b9b4 vlock: add new recipe
vlock is a program to lock one or more
sessions on the Linux console.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:13 +02:00
Joe Slater
3cf117715f php: disable this version by default
There are many unaddressed CVEs which are fixed in 7.1.7
and later versions.  Allow the user to define php_5.6.26
to enable building the recipe.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:13 +02:00
Jason Wessel
c3dc3b6309 mailx: Force mailx to build with openssl10
The latest changes in oe-core switch to using openssl 1.1.  The
SSLv3_client_method and RAND_egd functions are removed in the openssl
1.1. This causes mailx to fail to compile.

For now we can use openssl10 in the same manner that openssh is doing.
At the point in time that openssl10 goes away the code for openssl in
mailx will have to be altered.

Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:13 +02:00
Huang Qiyu
e77a4b86f9 mailcap: upgrade to 2.1.48
Upgrade mailcap from 2.1.46 to 2.1.48.

Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:13 +02:00
Khem Raj
67e0ede9e9 caps: Mark ARCH empty
This is to ensure that if ARCH is set in Makefiles then
its not used. This variable is generated using uname which
is wrong for cross compile. So we dont want to set it accidently

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:13 +02:00
Khem Raj
767108e49e gsoap: Upgrade to 2.8.51
Fixes build with openssl 1.1
Add patch to fix out of tree build

License changes are due to restructing of license files
see https://sourceforge.net/p/gsoap2/code/123/

Add OpenSSL exception to LICENSE field which was
missing thus far.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Joe Slater
e64c1a5de1 php: move to version 7.1.8 from 7.1.7
Only change is source version.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Derek Straka
98a98604f9 python-pyro4: update to version 4.61
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Derek Straka
4e338ffdb9 python-pytest: update to version 3.2.1
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Derek Straka
03e3e82958 python-sqlalchemy: update to version 1.1.13
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Derek Straka
06f96888fc python-cmd2: update to version 0.7.6
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Derek Straka
b0dc6918a7 python-wrapt: update to version 1.10.11
Update license checksum for copyright year modification to 2017

Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Andreas Müller
3eb52242c3 geany-plugins: update 1.30 -> 1.31
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Andreas Müller
b3faa4e40c geany: update 1.30.1 -> 1.31
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:12 +02:00
Andreas Müller
04a1ba6546 upower: update 0.99.4 -> 0.99.5
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:11 +02:00
Ming Liu
1d594f18f6 librcf: Add -latomic to LDFLAGS
This fixes following errors when compiling with clang:
| src/librcf.so.2.2.0: error: undefined reference to '__atomic_load_4'
| src/librcf.so.2.2.0: error: undefined reference to '__atomic_compare_exchange_4'
| /usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp:36: error: undefined reference to '__atomic_fetch_sub_4'
| /usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp:31: error: undefined reference to '__atomic_fetch_add_4'

Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:11 +02:00
Hongxu Jia
6f4aae7cbc python3-blivetgui: add recipe 2.1.5
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:11 +02:00
Hongxu Jia
e311a05d2a python3-blivet: add recipe 2.2.0
Remove provides of `pykickstart' in python3-pykickstart

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:11 +02:00
Martin Jansa
66cce63d50 mpv: Update to version 0.26.0.
Updates the mpv package to version 0.26.0.
The patch that was previously necessary related to OpenGL has been added upstream.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-28 11:04:11 +02:00
Ming Liu
ac2a6d2b5d json-spirit: Add -latomic to LDFLAGS
This fixes following errors when compiling with clang:
| ../json_spirit/libjson_spirit.so.4.0.8: error: undefined reference to '__atomic_load_4'
| ../json_spirit/libjson_spirit.so.4.0.8: error: undefined reference to '__atomic_compare_exchange_4'
| ../json_spirit/libjson_spirit.so.4.0.8: error: undefined reference to '__atomic_fetch_sub_4'
| ../json_spirit/libjson_spirit.so.4.0.8: error: undefined reference to '__atomic_fetch_add_4'

Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:04 +02:00
Stefan Agner
c1dcc40915 rapidjson: avoid dependency to non-existing package
RapidJSON is a header only library. The automatic package split
leads to no 'rapidjson' package but a 'rapidjson-dev' package with
a dependency to the 'rapidjson' package, leading to errors like:
 * Solver encountered 1 problem(s):
 * Problem 1/1:
 *   - nothing provides rapidjson = 1.1.0+git0+e5635fb27f-r0 needed by rapidjson-dev-1.1.0+git0+e5635fb27f-r0.core2-64

Clear rapidjson-dev dependencies.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:04 +02:00
Derek Straka
1fa9c44ea3 python-pytest: update to version 3.2.0
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:04 +02:00
Derek Straka
dcd04e9613 python-prompt-toolkit: update to version 1.0.15
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:04 +02:00
Derek Straka
7a51a622cd python-django: update to version 1.11.4
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:04 +02:00
Derek Straka
f82565f4eb python-requests: update to version 2.18.3
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:04 +02:00
Derek Straka
b55f749c39 python-cryptography: update to version 2.0.3
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:04 +02:00
Derek Straka
d714cb4c67 python-cryptography-vectors: update to version 2.0.3
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:04 +02:00
Derek Straka
0f23ea1f33 python-pyasn1: update to version 0.3.2
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:03 +02:00
Derek Straka
1727f2542d python-pymongo: update to version 3.5.0
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-13 13:21:03 +02:00