Commit Graph

1892 Commits

Author SHA1 Message Date
Wang Mingyu
6f17c76fc7 dnf-plugin-tui: Recover BBCLASSEXTEND variants
dnf-plugin-tui must work on nativesdk environment.
Now there's no warning when run the command "bitbake universe -c fetch".

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5211242d3f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-01-05 07:52:17 -05:00
Ross Burton
0f952d12b9 yajl: fix CVE-2017-16516, CVE-2022-24795, CVE-2023-33460
Take three CVE fixes from Fedora, as the upstream repository is now
dead.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 458fd00233)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-01-05 07:52:17 -05:00
Fabio Estevam
831f95bbf7 openocd: Use https for github
Per convert-srcuri.py script, github repos should be accessed
via https.

Change it accordingly.

Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4f69d8c198)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-01-05 07:52:01 -05:00
Richard Purdie
a5cb4cc7d4 meta-oe: Drop broken BBCLASSEXTEND variants
The command "bitbake universe -c fetch" currently throws a ton of warnings
as there are many 'impossible' dependencies.

In some cases these variants may never have worked and were just added by copy
and paste of recipes. In some cases they once clearly did work but became
broken somewhere along the way. Users may also be carrying local bbappend files
which add further BBCLASSEXTEND.

Having universe fetch work without warnings is desireable so clean up the broken
variants. Anyone actually needing something dropped here can propose adding it
and the correct functional dependencies back quite easily. This also then
ensures we're not carrying or fixing things nobody uses.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9962d57f7c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-11-01 08:16:30 -04:00
Wang Mingyu
2e56ecfd39 ipc-run: upgrade 20220807.0 -> 20231003.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cb154aca61)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-30 07:14:02 -04:00
Wang Mingyu
b82ff0f5be ctags: upgrade 6.0.20230917.0 -> 6.0.20231001.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4f385a203a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-30 07:14:02 -04:00
Martin Jansa
61c47294c9 nodejs: Revert io_uring support from bundled libuv-1.46.0
* Pseudo fails to intercept some of the syscalls used by the
  new version as documented in:
  https://github.com/shr-project/com.webos.app.minimal/tree/recipes

Now we have 3 options:

1) every use of nodejs-native where io_uring might be used (like in webpack)
   needs to export UV_USE_IO_URING=0 before using node, but be aware that
   the PR says it's only temporary and this variable might be removed in future.
   Unfortunately many people are lucky enough not to know what pseudo even is,
   so they might not realize that host-user-contamination QA issues or
   "KeyError: 'getpwuid(): uid not found" might be related to this (and they
   probably won't find this e-mail as well:
   https://lists.openembedded.org/g/openembedded-devel/message/105583

2) revert the io_uring changes from bundled libuv, to make sure it stays disabled.
   The changes are massive and it will be PIA to update them for every nodejs release
   I've already separated them for nodejs-20.3.0 where I've initialy tested this
   on top of libuv-1.45.0 and for 20.4.0 this need another patch for changes
   from libuv-1.46.0.
   Patch for keeping UV_USE_IO_URING support after it's removed from upstream libuv
   will be much smaller, but PIA to use UV_USE_IO_URING whenever using nodejs-native
   during build.

3) fix pseudo to correctly work with io_uring calls, definitely best long-term solution
   as more and more tools will now switch to io_uring, but without active maintainer
   of pseudo it might be _very_ difficult to implement this and there aren't many
   people willing to touch this beast.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d08453978c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-30 07:14:02 -04:00
Wang Mingyu
ef38c490da dnf-plugin-tui: create symlinks from /usr/ to /.
From Poky 4.3, by default, usrmerge has been enabled.
Some important binaries have been installed to /usr/sbin instead of
/sbin such as init. So it is necessary to create symlinks from /usr/
to /, such as /usr/sbin to /sbin, /usr/bin to /bin.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 129bcf4a7e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-30 07:14:02 -04:00
Leon Anavi
1d2cc95bee sip: upgrade 6.7.11 -> 6.7.12
Upgrade to version 6.7.12:

- Added sipPyTypeDictRef() to the v12 and v13 ABIs. sipPyTypeDict()
  is now deprecated and must not be used with Python v3.12 and later.
- Classes will automatically support being iterated over if they
  implement __getitem__() or operator[] and have a method annotated
  with __len__.
- The latest version of ABI v13 is v13.6.0.
- The latest version of ABI v12 is v12.13.0.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 560f573d9c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-30 07:14:02 -04:00
Martin Jansa
344427bf60 nodejs: update to latest v20 version 20.8.1
* updates to latest v20 version

* LIC_FILES_CHKSUM changed due to small Copyright update from:
  660da785e6

* this still doesn't resolve the issue with pseudo reported in:
  https://lists.openembedded.org/g/openembedded-devel/message/105308
  and further debugged in:
  https://github.com/shr-project/com.webos.app.minimal/tree/recipes
  which shows that it's easily reproducible with plain webpack "Hello world".

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fca128559b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-30 07:14:02 -04:00
David Pierret
486fa9a037 cjson: Add ptest
cjson use pure CMake test framework named CTest.
CMake generate CTestTestfile.cmake containing fully defined path.
This path need to be altered on install step to match the ptest directory.

The json_patch_tests doesn't works because of file access and is skip.

Signed-off-by: David Pierret <david.pierret@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4079e92284)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-30 07:13:42 -04:00
Clément Péron
35edaebc55 Revert "protobuf: stage protoc binary to sysroot"
This reverts commit a0557fe543.

As said by Ross[Ø]:
"Putting the _target_ protoc into the sysroot for executation at _build_
time isn't useful because even if it has the right architecture, the
tune might be incompatible.  Recipes which want protoc should just depend
on protobuf-native."

This has been reverted recently by Samuli[1]:
"If protoc is enabled for the build, recipes using protobuf will
fail when protoc is not available in the recipe sysroot"

Be the revert is incorret as This is an issue coming from qtgrpc
other recipes that use protobuf or gRPC compiler, proplery looks for
the binary in the correct sysroot folder.

Qtgrpc recipe should fix this issue at the recipe level, for example this
is what I've done for "etcd-cpp-apiv3" recipe[2] that doesn't need this
patch to properly compile.

So keeping this hack doesn't seems to be a correct fix.

Note that qtgrpc recipe isn't available on meta-oe nor any other public
layers.

0: https://patchwork.yoctoproject.org/project/oe/patch/20230904161230.377450-1-ross.burton@arm.com/
1: https://patchwork.yoctoproject.org/project/oe/patch/20230927051101.3088498-1-samuli.piippo@qt.io/
2: 47f0d9e032

CC: Samuli Piippo <samuli.piippo@gmail.com>
CC: Ross Burton <ross.burton@arm.com>
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit bfb626a230)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-12 09:58:05 -04:00
Markus Volk
ca6fc94aad pugixml: Update 1.13 -> 1.14
Improvements:

xml_attribute::set_name and xml_node::set_name now have overloads that accept pointer to non-null-terminated string and size
Implement parse_merge_pcdata parsing mode in which PCDATA contents is merged into a single node when original document had comments that were skipped during parsing
xml_document::load_file now returns a more consistent error status when given a path to a folder
Bug fixes:

Fix assertion in XPath number→string conversion when using non-English locales
Fix PUGIXML_STATIC_CRT CMake option to correctly select static CRT when using MSVC and recent CMake
Compatibility improvements:

Fix GCC 2.95/3.3 builds
Fix CMake 3.27 deprecation warnings
Fix XCode 14 sprintf deprecation warning when compiling in C++03 mode
Fix clang/gcc warnings -Wweak-vtables, -Wreserved-macro-identifier
Thanks to @DavidKorczynski, @jiangqucheng, @SoapGentoo, @asmaloney, @ArchXUser, @stefanroellin and @vineethkuttan for contributions!

- license checksum has changed because of copyright year

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4b59083f4c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-12 09:58:05 -04:00
Khem Raj
dbfe83d4c5 nodejs: Fix ptest result reporting
This fixes
  AssertionError:-
  ptests which had no test results:
  ['nodejs']

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cd629b722d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:49 -07:00
Alex Kiernan
0ee7bb86f6 jq: Upgrade 1.6+git -> 1.7
Move to new upstream, drop use of autotools-brokensep as the build now
works without it, drop local patches which have been merged, fix
buildpaths leakage.

License-Update: Fix misspellings [5cebe86a7b]
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3f378f7924)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Archana Polampalli
470af9d6bb nodejs: upgrade 18.17.1 -> 20.5.1
Update to latest release of latest LTS 20 release

    * node v20 introduces several new features and fixes many bugs and CVEs as shown in [1]

    * Refresh 0001-liftoff-Correct-function-signatures.patch against 20.5.1

    * License-Update:
       - Change zlib version 1.2.13, October 13th, 2022 to version 1.2.13.1, October xxth, 2022 [2]
       - Change Copyright 2023 from Ada authors to Yagiz Nizipli and Daniel Lemire [4]

    * Remove big-endian.patch as it is merged in v20.x [5] [6]

    * Remove below list of patches since mips32 is deleted from v8 as part of update V8 to 10.7.193.13 [7] [8]
       - mips-less-memory.patch
       - 0001-mips-Use-32bit-cast-for-operand-on-mips32.patch

    * Update Using-native-binaries.patch for node_js2c, it resolved below do_compile error [9]
       Error:
       /bin/sh: line 1: build/tmp/work/core2-64-poky-linux/nodejs/20.5.1/node-v20.5.1/out/Release/node_js2c: No such file or directory

    * Remove obsolete dtrace & etw configure options (we had: --without-<feature>) from the recipe [10]

https://github.com/nodejs/node/releases/tag/v20.5.1

[1] https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V20.md
[2] f100732575
[3] 900ae1bda7
[4] d246536924
[5] 3cea5d5425
[6] f226350fcb
[7] a26ca5ed14
[8] 6bd756d7c6
[9] 4da7bc915c
[10] aa3a572e6b

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 13e83bd009)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Martin Jansa
78bd023a62 gnome-tweaks, networkmanager-fortisslvpn, libesmtp, json-schema-validator, python3-pybluez, python3-pynetlinux, apache2: Fix Malformed Upstream-Status
* Accepted was replaced with Backport in gatesgarth:
  https://docs.yoctoproject.org/migration-guides/migration-3.2.html#miscellaneous-changes

* as detected with oe-core/scripts/contrib/patchreview.py:

meta-openembedded $ grep -A 3 Malformed *qa-patches
meta-gnome.qa-patches:Malformed Upstream-Status 'Malformed Upstream-Status in patch
meta-gnome.qa-patches-/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch
meta-gnome.qa-patches-Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status :
meta-gnome.qa-patches-Upstream-Status: Accepted [dc9701e187]' (/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a1c3c7f4e8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Clément Péron
8b5395f2b0 protobuf-c: bump to next release to support protobuf 4.23.x
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f22a9adb44)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Clément Péron
729147cdc9 protobuf: upgrade 4.22.2 -> 4.23.4
Bump protobuf to 4.23.4 to fix build with musl.

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 39d8b9b7e6)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Clément Péron
7f3cb3b69e devtools: grpc: bump to 1.56.2
Remove merged patch that export plugin to a separate targets

Remove no more applicatable patch

Remove CVE patch already present

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8b3cc547b7)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Xiangyu Chen
bcde8d7905 protobuf-c: add support of protobuf 4.22.x
Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 802925894a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Xiangyu Chen
32901e95b8 protobuf: upgrade 3.21.12 -> 4.22.2
Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fb34c7e3fa)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Samuli Piippo
08e40ab325 protobuf: stage protoc binary to sysroot
If protoc is enabled for the build, recipes using protobuf will
fail when protoc is not available in the recipe sysroot:

|   The imported target "protobuf::protoc" references the file
|
|      ".../recipe-sysroot/usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-pokysdk-linux/usr/bin/protoc-3.21.5.0"
|
|   but this file does not exist.  Possible reasons include:
|
|   * The file was deleted, renamed, or moved to another location.
|
|   * An install or uninstall procedure did not complete successfully.
|
|   * The installation package was faulty and contained
|
|      ".../recipe-sysroot/usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-pokysdk-linux/usr/lib/cmake/protobuf/protobuf-targets.cmake"
|
|   but not all the files it references.

Use SYSROOT_DIRS to stage the binary to sysroot so it's always
available for other recipes.

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a0557fe543)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-04 07:52:48 -07:00
Wang Mingyu
14cd90c9d4 ctags: upgrade 6.0.20230827.0 -> 6.0.20230917.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-20 15:34:02 -07:00
Enrico Jorns
2aa8abc917 microcom: add new recipe
A minimalistic terminal program for communicating with devices over a
serial connection.

It features connection via RS232 serial interfaces (including setting of
transfer rates):

  microcom --speed=115200 --port=/dev/ttyS0

as well as in `telnetmode' as specified in rfc2217

  microcom --telnet=somehost:port

and a (Linux specific) can mode:

  microcom --can=interface:rx_id:tx_id

Signed-off-by: Enrico Jorns <ejo@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-07 10:31:19 -07:00
Wang Mingyu
12094dd818 debootstrap: upgrade 1.0.131 -> 1.0.132
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-07 08:22:43 -07:00
Wang Mingyu
4025736ffd ctags: upgrade 6.0.20230820.0 -> 6.0.20230827.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-07 08:22:43 -07:00
Ross Burton
6ce4546d84 Revert "protobuf: stage protoc binary to sysroot"
Putting the _target_ protoc into the sysroot for executation at _build_
time isn't useful because even if it has the right architecture, the
tune might be incompatible.  Recipes which want protoc should just depend
on protobuf-native.

This reverts commit d7f46fa816.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-07 08:22:43 -07:00
Martin Jansa
9b37c1cc88 json-schema-validator: restore 0004-cmake-Use-GNUInstallDirs.patch
* it was removed in:
  https://git.openembedded.org/meta-openembedded/commit/?id=0697d52777cd530dc59bb05a506327c365bc78a2

* but the patch wasn't applied upstream yet
  and now fails in multilib builds with:
ERROR: lib32-json-schema-validator-2.2.0-r0 do_package: QA Issue: lib32-json-schema-validator: Files/directories were installed but not shipped in any package:
  /usr/lib/libnlohmann_json_schema_validator.so.2
  /usr/lib/libnlohmann_json_schema_validator.so.2.2.0
  /usr/lib/libnlohmann_json_schema_validator.so
  /usr/lib/cmake
  /usr/lib/cmake/nlohmann_json_schema_validator
  /usr/lib/cmake/nlohmann_json_schema_validator/nlohmann_json_schema_validatorConfig.cmake
  /usr/lib/cmake/nlohmann_json_schema_validator/nlohmann_json_schema_validatorConfigVersion.cmake
  /usr/lib/cmake/nlohmann_json_schema_validator/nlohmann_json_schema_validatorTargets.cmake
  /usr/lib/cmake/nlohmann_json_schema_validator/nlohmann_json_schema_validatorTargets-noconfig.cmake
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
lib32-json-schema-validator: 9 installed and not shipped files. [installed-vs-shipped]

https://github.com/pboettch/json-schema-validator/pull/197 was closed due to branch rename, but I don't see this change applied in:
https://github.com/pboettch/json-schema-validator/commits/main/CMakeLists.txt
so I guess the .patch is still needed.

* adjust the patch to apply on new version and restore it

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-30 14:45:47 -07:00
Archana Polampalli
77efa60d5b nodejs: upgrade 18.17.0 -> 18.17.1
This is a security release.
The following CVEs are fixed in this release:
    CVE-2023-32002
    CVE-2023-32006
    CVE-2023-32559

https://github.com/nodejs/node/releases/tag/v18.17.1

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-28 08:55:26 -07:00
Willy Tu
2703a7ca79 abseil-cpp: upgrade 20230125.3 -> 20230802.0
Release notes in
https://github.com/abseil/abseil-cpp/releases/tag/20230802.0

Signed-off-by: Willy Tu <wltu@google.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-26 17:32:45 -07:00
Petr Chernikov
c17f9f2fac Fix empty 0.0.0-0-g0 jemalloc version by adding --with-version
Empty "0.0.0-0-g0" jemalloc version may affect build and usage
of some applications. For example, it affects folly build and
usage and leads segmentation fault in some cases.

Signed-off-by: Petr Chernikov <p.chernikov@yadro.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-26 17:32:45 -07:00
Wang Mingyu
739e880b21 php: upgrade 8.2.8 -> 8.2.9
Changelog:
===========
- Build:
  . Fixed bug GH-11522 (PHP version check fails with '-' separator).
- CLI:
  . Fix interrupted CLI output causing the process to exit.
- Core:
  . Fixed oss-fuzz #60011 (Mis-compilation of by-reference nullsafe operator).
  . Fixed line number of JMP instruction over else block.
  . Fixed use-of-uninitialized-value with ??= on assert.
  . Fixed oss-fuzz #60411 (Fix double-compilation of arrow-functions).
  . Fixed build for FreeBSD before the 11.0 releases.
- Curl:
  . Fix crash when an invalid callback function is passed to
    CURLMOPT_PUSHFUNCTION.
- Date:
  . Fixed bug GH-11368 (Date modify returns invalid datetime).
  . Fixed bug GH-11600 (Can't parse time strings which include
    non-breaking space characters).
  . Fixed bug GH-11854 (DateTime:createFromFormat stopped parsing datetime with
    extra space).
- DOM:
  . Fixed bug GH-11625 (DOMElement::replaceWith() doesn't replace node with
    DOMDocumentFragment but just deletes node or causes wrapping <></>
    depending on libxml2 version).
- Fileinfo:
  . Fixed bug GH-11298 (finfo returns wrong mime type for xz files).
- FTP:
  . Fix context option check for "overwrite".
  . Fixed bug GH-10562 (Memory leak and invalid state with consecutive
    ftp_nb_fget).
- GD:
  . Fix most of the external libgd test failures.
- Intl:
  . Fix memory leak in MessageFormatter::format() on failure.
- Libxml:
  . Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading
    in XML without enabling it). (CVE-2023-3823)
- MBString:
  . Fix GH-11300 (license issue: restricted unicode license headers).
- Opcache:
  . Fixed bug GH-10914 (OPCache with Enum and Callback functions results in
    segmentation fault).
  . Prevent potential deadlock if accelerated globals cannot be allocated.
- PCNTL:
  . Fixed bug GH-11498 (SIGCHLD is not always returned from proc_open).
- PDO:
  . Fix GH-11587 (After php8.1, when PDO::ATTR_EMULATE_PREPARES is true
    and PDO::ATTR_STRINGIFY_FETCHES is true, decimal zeros are no longer
    filled).
- PDO SQLite:
  . Fix GH-11492 (Make test failure: ext/pdo_sqlite/tests/bug_42589.phpt).
- Phar:
  . Add missing check on EVP_VerifyUpdate() in phar util.
  . Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()).
- PHPDBG:
  . Fixed bug GH-9669 (phpdbg -h options doesn't list the -z option).
- Session:
  . Removed broken url support for transferring session ID.
- Standard:
  . Fix serialization of RC1 objects appearing in object graph twice.
- Streams:
  . Fixed bug GH-11735 (Use-after-free when unregistering user stream wrapper
    from itself).
- SQLite3:
  . Fix replaced error handling in SQLite3Stmt::__construct.
- XMLReader:
  . Fix GH-11548 (Argument corruption when calling XMLReader::open or
    XMLReader::XML non-statically with observer active).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-26 17:32:44 -07:00
Wang Mingyu
70123f70fa debootstrap: upgrade 1.0.128 -> 1.0.131
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-26 17:32:44 -07:00
Wang Mingyu
30b09dcdc9 ctags: upgrade 6.0.20230813.0 -> 6.0.20230820.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-26 17:32:44 -07:00
Mark Hatle
3ebcdae36e kconfig-frontends: Avoid using hard coded /usr/include paths
The system could end up using an include path that points to the host
system instead of the sysroot.  Force the system to use the sysroot.

Signed-off-by: Mark Hatle <mark.hatle@amd.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-22 18:02:46 -07:00
Parian Golchin
0697d52777 json-schema-validator: Updrade to 2.2.0
Upgrade and add important patches to the release

Signed-off-by: Parian Golchin <par.golchin@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-22 13:12:38 -07:00
Sourav Pramanik
eec3c65b81 nlohmann-json: Avoid usage of nobranch=1
The usage of nobranch=1 in SRC_URI allows using unprotected branches.

This change updates the real branch name in place of nobranch=1.

Signed-off-by: Sourav Kumar Pramanik <pramanik.souravkumar@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-21 08:46:50 -07:00
Sourav Pramanik
8e212f5a1a rapidjson: Avoid usage of nobranch=1
The usage of nobranch=1 in SRC_URI allows using unprotected branches.

This change updates the real branch name in place of nobranch=1.

Signed-off-by: Sourav Kumar Pramanik <pramanik.souravkumar@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-21 08:46:50 -07:00
Soumya
76912f22d8 yasm: fix CVE-2023-37732
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c
and /elf/elf.c, which allows the attacker to cause a denial of service via a
crafted file.

References:
https://github.com/yasm/yasm/issues/233
https://nvd.nist.gov/vuln/detail/CVE-2023-37732

Signed-off-by: Soumya <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-19 10:46:14 -07:00
Wang Mingyu
435273cf36 ctags: upgrade 6.0.20230730.0 -> 6.0.20230813.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-15 20:07:54 -07:00
Khem Raj
331fd95146 jemalloc: Unbolt clang workaroud
This works well with clang 15+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-15 14:21:17 -07:00
Khem Raj
403938ce85 perfetto: Add SRCREV_FORMAT
Recipe uses multiple SRC_URIs therefore its required to define
SRCREV_FORMAT so it can fetch on changes

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-11 09:36:03 -07:00
Chen Qi
491b7592f4 grpc: fix CVE-2023-32732
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-09 09:29:10 -07:00
Chi Xu
b160fcf882 lapack: Add ptest support
103 test cases in all.
Test results on qemu with kvm:
root@qemux86-64:~# ptest-runner lapack
START: ptest-runner
2023-08-07T07:10
BEGIN: /usr/lib64/lapack/ptest
PASS: BLAS-xblat1s
PASS: BLAS-xblat2s
...
PASS: LAPACK-xeigtstz_lse_in
PASS: LAPACK-xlintstds_dstest_in
PASS: LAPACK-xlintstzc_zctest_in
DURATION: 55
END: /usr/lib64/lapack/ptest
2023-08-07T07:11
STOP: ptest-runner
TOTAL: 1 FAIL: 0

If build lapack with lapacke, following test cases will be
included in ptest.
PASS: example_DGESV_rowmajor
PASS: example_DGESV_colmajor
PASS: example_DGELS_rowmajor
PASS: example_DGELS_colmajor

Signed-off-by: Chi Xu <chi.xu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-07 09:01:00 -07:00
Khem Raj
976ccae201 nodejs: Upgrade to 18.17.0
Update to latest release of latest LTS 18 release

License-Update: [1] [2] [3]

[1] 0cfdb3affa
[2] 2ea6e03003
[3] 261e1d23d1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-05 13:40:26 -07:00
Khem Raj
7a1365b224 sip: upgrade 6.7.10 -> 6.7.11
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-05 09:29:56 -07:00
Khem Raj
8a407d58a3 ply: Pass LD via environment to configure
This sets is correctly across all following tasks e.g. compile/install

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-05 09:29:56 -07:00
Michael Opdenacker
6b2b98e52d remove unused AUTHOR variable
No longer used in generating packages
Also creates a possible confusion with the recipe maintainer
name.

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-03 09:14:20 -07:00
Wang Mingyu
fc2f3e39e2 sip: upgrade 6.7.9 -> 6.7.10
Changelog:
===========
  - Added the --minimum-glibc-version command line option to sip-wheel.
  - The latest version of ABI v13 is v13.5.2.
  - The latest version of ABI v12 is v12.12.2.
  - Bug fixes.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-01 08:46:48 -07:00