[oe-commits] [openembedded-core] branch rocko updated (1b18cdf -> d20917f)

git at git.openembedded.org git at git.openembedded.org
Thu May 3 09:05:05 UTC 2018


This is an automated email from the git hooks/post-receive script.

rpurdie pushed a change to branch rocko
in repository openembedded-core.

    from 1b18cdf  libvorbis: CVE-2018-5146
     new 35ed47d  logging.bbclass: Enclose the tr string in quotes
     new 7f1029a  curl: 7.54.1 -> 7.57.0
     new f99e2ce  curl: upgrade to 7.58.0
     new 6a62f30  libxml2: 2.9.4 -> 2.9.5
     new 6ec8cb5  curl: DEPENDS on libidn2 (not libidn)
     new fd64bf2  ncurses: change SRC_URI from Debian anonscm to salsa
     new 127d1d6  ca-certificates: change SRC_URI from Debian anonscm to salsa
     new 407de0c  mirrors.bbclass: change Debian anonscm to salsa
     new f10c525  linux-yocto/4.12: update to v4.12.21
     new 8660345  linux-yocto/4.12: add ssl and utils native dependencies
     new 9e1bc0e  linux-yocto/meta: improve wifi driver granularity
     new 61e6adc  linux-yocto/4.12: intel-socfpga, intel-pmc-core and ish support for CoffeeLake board
     new 9c72ddb  package_rpm: set _builddir to B not S
     new 95b5ec1  openssl: refresh patches
     new d7f682f  openssl: drop openssl-1.0.2a-x32-asm.patch
     new 373763d  openssl: fix libdir logic to allow multiarch style paths
     new 9460cdd  openssl: update 1.0.2n -> 1.0.2o
     new a4f7a63  openssl: update 1.1.0g -> 1.1.0h
     new ebb6c4f  libpcre-ptest: skip locale test
     new 21ca542  package_manager.py: Skip gpgcheck while using dnf on target
     new ca52b8e  uninative: add variables to the whitelist so that it does not re-triger recipe parsing
     new 1c8c163  gio-module-cache.bbclass: pass in ${libexecdir}
     new cf029db  dhcp: Security Advisory - CVE-2017-3144
     new 6ecaabf  patch:2.7.5 -> 2.7.6
     new e628af8  patch: fix CVE-2018-6951
     new 413c54e  patch: fix CVE-2018-1000156
     new 46ddc11  package.bbclass: Add '-b' option to file call in isELF
     new 2b462bd  yocto-uninative: Update to version 1.9 (fedora28 compatible)
     new 2c72aa5  bitbake.conf: Set and export TZ envvar to UTC
     new 4545f54  uninative: Add allow-shlib-undefined to BUILD_LDFLAGS and drop other workarounds
     new cead3c4  uninative: Set the dynamic linker to use at compile time
     new ee3de1e  mpfr: Update SRC_URI to use gnu
     new 3f244c6  rsync: update to 3.1.3
     new 53eef48  perl: add patch to solve libcrypt incompatibility
     new d20917f  perl: Security fix CVE-2017-12883

The 35 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 meta/classes/gio-module-cache.bbclass              |   1 +
 meta/classes/logging.bbclass                       |   2 +-
 meta/classes/mirrors.bbclass                       |   2 +-
 meta/classes/package.bbclass                       |   2 +-
 meta/classes/package_rpm.bbclass                   |   2 +-
 meta/classes/uninative.bbclass                     |   6 +
 meta/conf/bitbake.conf                             |   1 +
 meta/conf/distro/include/yocto-uninative.inc       |   6 +-
 meta/lib/oe/package.py                             |   2 +-
 meta/lib/oe/package_manager.py                     |   2 +-
 .../dhcp/dhcp/CVE-2017-3144.patch                  |  74 +++
 meta/recipes-connectivity/dhcp/dhcp_4.3.6.bb       |   1 +
 .../openssl-1.0.2n/openssl-1.0.2a-x32-asm.patch    |  46 --
 ...build-with-clang-using-external-assembler.patch |   0
 ...penssl-force-soft-link-to-avoid-rare-race.patch |   0
 .../Makefiles-ptest.patch                          |   0
 .../Use-SHA256-not-MD5-as-default-digest.patch     |   0
 .../configure-musl-target.patch                    |   0
 .../configure-targets.patch                        |   0
 .../debian/c_rehash-compat.patch                   |  10 +-
 .../debian/ca.patch                                |   0
 .../debian/debian-targets.patch                    |  14 +-
 .../debian/man-dir.patch                           |   0
 .../debian/man-section.patch                       |   0
 .../debian/no-rpath.patch                          |   0
 .../debian/no-symbolic.patch                       |   0
 .../debian/pic.patch                               |   0
 .../debian1.0.2/block_digicert_malaysia.patch      |   0
 .../debian1.0.2/block_diginotar.patch              |   0
 .../debian1.0.2/soname.patch                       |   0
 .../debian1.0.2/version-script.patch               |   0
 .../engines-install-in-libdir-ssl.patch            |   0
 .../{openssl-1.0.2n => openssl-1.0.2o}/find.pl     |   0
 .../oe-ldflags.patch                               |   0
 .../openssl-c_rehash.sh                            |   0
 .../openssl-fix-des.pod-error.patch                |   0
 .../openssl-util-perlpath.pl-cwd.patch             |   0
 .../openssl_fix_for_x32.patch                      |   0
 .../parallel.patch                                 |   0
 .../ptest-deps.patch                               |   0
 .../ptest_makefile_deps.patch                      |   0
 .../reproducible-cflags.patch                      |   0
 .../reproducible-mkbuildinf.patch                  |   0
 .../{openssl-1.0.2n => openssl-1.0.2o}/run-ptest   |   0
 .../shared-libs.patch                              |   0
 ...ve-test-that-requires-running-as-non-root.patch |  49 --
 ...-armv4-bsaes-armv7-.pl-make-it-work-with-.patch |  88 ---
 meta/recipes-connectivity/openssl/openssl10.inc    |   3 +-
 .../{openssl_1.0.2n.bb => openssl_1.0.2o.bb}       |   7 +-
 .../{openssl_1.1.0g.bb => openssl_1.1.0h.bb}       |  13 +-
 meta/recipes-core/expat/expat.inc                  |   3 +-
 meta/recipes-core/expat/expat/no_getrandom.patch   |  23 -
 .../libxml/libxml2/libxml-m4-use-pkgconfig.patch   |   2 +-
 .../libxml/libxml2/libxml2-CVE-2016-4658.patch     | 269 ----------
 .../libxml/libxml2/libxml2-CVE-2016-5131.patch     | 180 -------
 .../libxml/libxml2/libxml2-CVE-2017-0663.patch     |  40 --
 .../libxml/libxml2/libxml2-CVE-2017-5969.patch     |  62 ---
 .../libxml/libxml2/libxml2-CVE-2017-8872.patch     |  37 --
 .../libxml2-CVE-2017-9047_CVE-2017-9048.patch      | 103 ----
 .../libxml2-CVE-2017-9049_CVE-2017-9050.patch      | 291 ----------
 .../libxml2/libxml2-fix_NULL_pointer_derefs.patch  |  45 --
 ...ibxml2-fix_and_simplify_xmlParseStartTag2.patch | 590 ---------------------
 .../libxml2/libxml2-fix_node_comparison.patch      |  67 ---
 meta/recipes-core/libxml/libxml2/runtest.patch     |  34 +-
 .../libxml/{libxml2_2.9.4.bb => libxml2_2.9.5.bb}  |  18 +-
 meta/recipes-core/ncurses/ncurses.inc              |   2 +-
 .../util-linux/util-linux/no_getrandom.patch       |  21 -
 meta/recipes-core/util-linux/util-linux_2.30.bb    |   1 -
 ...02-Fix-segfault-with-mangled-rename-patch.patch |  35 ++
 ...-files-to-be-missing-for-ed-style-patches.patch |  38 ++
 ...ry-command-execution-in-ed-style-patches-.patch | 215 ++++++++
 meta/recipes-devtools/patch/patch_2.7.5.bb         |  15 -
 meta/recipes-devtools/patch/patch_2.7.6.bb         |  19 +
 meta/recipes-devtools/perl/perl-native_5.24.1.bb   |   1 +
 .../perl/perl/CVE-2017-12883.patch                 |  44 ++
 .../perl/perl-5.26.1-guard_old_libcrypt_fix.patch  |  28 +
 meta/recipes-devtools/perl/perl_5.24.1.bb          |   2 +
 .../python/python3-native_3.5.3.bb                 |   2 +-
 .../rsync/{rsync_3.1.2.bb => rsync_3.1.3.bb}       |   4 +-
 meta/recipes-kernel/linux/linux-yocto-rt_4.12.bb   |   6 +-
 meta/recipes-kernel/linux/linux-yocto-tiny_4.12.bb |   6 +-
 meta/recipes-kernel/linux/linux-yocto_4.12.bb      |  22 +-
 .../ca-certificates/ca-certificates_20170717.bb    |   2 +-
 .../curl/curl/CVE-2017-1000099.patch               |  41 --
 .../curl/curl/CVE-2017-1000100.patch               |  51 --
 .../curl/curl/CVE-2017-1000101.patch               |  99 ----
 .../curl/curl/CVE-2017-1000254.patch               | 138 -----
 .../curl/curl/reproducible-mkhelp.patch            |  32 --
 .../curl/{curl_7.54.1.bb => curl_7.58.0.bb}        |  16 +-
 meta/recipes-support/libpcre/libpcre_8.41.bb       |   4 +
 meta/recipes-support/mpfr/mpfr_3.1.5.bb            |   2 +-
 91 files changed, 545 insertions(+), 2396 deletions(-)
 create mode 100644 meta/recipes-connectivity/dhcp/dhcp/CVE-2017-3144.patch
 delete mode 100644 meta/recipes-connectivity/openssl/openssl-1.0.2n/openssl-1.0.2a-x32-asm.patch
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/0001-Fix-build-with-clang-using-external-assembler.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/0001-openssl-force-soft-link-to-avoid-rare-race.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/Makefiles-ptest.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/Use-SHA256-not-MD5-as-default-digest.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/configure-musl-target.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/configure-targets.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/c_rehash-compat.patch (88%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/ca.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/debian-targets.patch (93%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/man-dir.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/man-section.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/no-rpath.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/no-symbolic.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian/pic.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/block_digicert_malaysia.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/block_diginotar.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/soname.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/debian1.0.2/version-script.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/engines-install-in-libdir-ssl.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/find.pl (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/oe-ldflags.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl-c_rehash.sh (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl-fix-des.pod-error.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl-util-perlpath.pl-cwd.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/openssl_fix_for_x32.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/parallel.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/ptest-deps.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/ptest_makefile_deps.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/reproducible-cflags.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/reproducible-mkbuildinf.patch (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/run-ptest (100%)
 rename meta/recipes-connectivity/openssl/{openssl-1.0.2n => openssl-1.0.2o}/shared-libs.patch (100%)
 delete mode 100644 meta/recipes-connectivity/openssl/openssl/0001-Remove-test-that-requires-running-as-non-root.patch
 delete mode 100644 meta/recipes-connectivity/openssl/openssl/0001-aes-asm-aes-armv4-bsaes-armv7-.pl-make-it-work-with-.patch
 rename meta/recipes-connectivity/openssl/{openssl_1.0.2n.bb => openssl_1.0.2o.bb} (90%)
 rename meta/recipes-connectivity/openssl/{openssl_1.1.0g.bb => openssl_1.1.0h.bb} (89%)
 delete mode 100644 meta/recipes-core/expat/expat/no_getrandom.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-CVE-2016-4658.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-CVE-2016-5131.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-CVE-2017-0663.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-CVE-2017-5969.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-CVE-2017-8872.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-CVE-2017-9047_CVE-2017-9048.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-CVE-2017-9049_CVE-2017-9050.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-fix_NULL_pointer_derefs.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-fix_and_simplify_xmlParseStartTag2.patch
 delete mode 100644 meta/recipes-core/libxml/libxml2/libxml2-fix_node_comparison.patch
 rename meta/recipes-core/libxml/{libxml2_2.9.4.bb => libxml2_2.9.5.bb} (86%)
 delete mode 100644 meta/recipes-core/util-linux/util-linux/no_getrandom.patch
 create mode 100644 meta/recipes-devtools/patch/patch/0002-Fix-segfault-with-mangled-rename-patch.patch
 create mode 100644 meta/recipes-devtools/patch/patch/0003-Allow-input-files-to-be-missing-for-ed-style-patches.patch
 create mode 100644 meta/recipes-devtools/patch/patch/0004-Fix-arbitrary-command-execution-in-ed-style-patches-.patch
 delete mode 100644 meta/recipes-devtools/patch/patch_2.7.5.bb
 create mode 100644 meta/recipes-devtools/patch/patch_2.7.6.bb
 create mode 100644 meta/recipes-devtools/perl/perl/CVE-2017-12883.patch
 create mode 100644 meta/recipes-devtools/perl/perl/perl-5.26.1-guard_old_libcrypt_fix.patch
 rename meta/recipes-devtools/rsync/{rsync_3.1.2.bb => rsync_3.1.3.bb} (86%)
 delete mode 100644 meta/recipes-support/curl/curl/CVE-2017-1000099.patch
 delete mode 100644 meta/recipes-support/curl/curl/CVE-2017-1000100.patch
 delete mode 100644 meta/recipes-support/curl/curl/CVE-2017-1000101.patch
 delete mode 100644 meta/recipes-support/curl/curl/CVE-2017-1000254.patch
 delete mode 100644 meta/recipes-support/curl/curl/reproducible-mkhelp.patch
 rename meta/recipes-support/curl/{curl_7.54.1.bb => curl_7.58.0.bb} (84%)

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the Openembedded-commits mailing list