[OE-core] [PATCH 00/21] Warrior-next pull request

[Armin Kuster]

please merge these changes to warrior

cover leter only

The following changes since commit ba36b0c5c1db632dd849f3f28f83c272530f67b6:

  Revert "acpica: use update-alternatives for acpidump" (2019-06-01 14:48:32 -0700)

are available in the git repository at:

  git://git.openembedded.org/openembedded-core-contrib stable/warrior-next
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/warrior-next

Alexander Kanavin (2):
  linux-firmware: upgrade to latest revision
  python: update to 2.7.16

Andrej Valek (1):
  dropbear: update to 2019.78

Armin Kuster (1):
  Tar: Security fix CVE-2019-0023

Jean-Marie LEMETAYER (3):
  npm: get npm package name from npm pack
  npm: fix node and npm default directory conflict
  npm: remove some temporary build files

Mariano López (1):
  util-linux: Add missing ptest dependencies

Martin Jansa (1):
  python: add a fix for CVE-2019-9948 and CVE-2019-9636

Richard Purdie (11):
  openssh: Avoid PROVIDES warning from rng-tools dependency
  ptest: Add RDEPENDS frpm PN-ptest to PN package
  gettext/flex/m4/bzip2/gzip/parted/slang/attr: Add make to -ptest
    packages
  apr/apr-util: Add ptest dependency on libgcc
  perl-rdepends: Add missing module dependencies
  bash: Fix bash-ptest dependencies
  openssh: Add sudo dependency for ptest
  libpcre: Add make dependency for ptest
  perl/modules: Add various missing ptest perl module dependencies
  strace: Tweak ptest disk space management
  util-linux: Fix ptest dependencies

Ross Burton (1):
  glib-2.0: add missing libgcc dependency to glib-2.0-ptest

 meta/classes/npm.bbclass                           |  11 +-
 meta/classes/ptest.bbclass                         |   1 +
 meta/recipes-connectivity/openssh/openssh_7.9p1.bb |   4 +-
 meta/recipes-core/dropbear/dropbear_2019.77.bb     |   4 -
 meta/recipes-core/dropbear/dropbear_2019.78.bb     |   4 +
 meta/recipes-core/glib-2.0/glib.inc                |   1 +
 meta/recipes-core/util-linux/util-linux.inc        |   3 +-
 meta/recipes-devtools/flex/flex_2.6.0.bb           |   2 +-
 .../perl-sanity/files/perl-rdepends.txt            |   7 ++
 meta/recipes-devtools/perl/liburi-perl_1.74.bb     |   2 +-
 .../perl/libxml-parser-perl_2.44.bb                |   2 +
 meta/recipes-devtools/perl/libxml-perl_0.08.bb     |   1 +
 ...on-native_2.7.15.bb => python-native_2.7.16.bb} |   2 -
 meta/recipes-devtools/python/python.inc            |  11 +-
 ...23-Use-XML_SetHashSalt-in-_elementtree-GH.patch |  96 ----------------
 ...ix-test_ssl-when-a-filename-cannot-be-enc.patch |  55 ---------
 ...LS-1.3-ciphers-for-OpenSSL-1.1.1-GH-6976-.patch | 120 -------------------
 ...34540-Convert-shutil._call_external_zip-t.patch |  67 -----------
 ...dd-missing-closing-wrapper-in-test_tls1_3.patch |  37 ------
 ...ix-test_ssl.test_options-to-account-for-O.patch |  37 ------
 ...ix-test_default_ecdh_curve-needs-no-tlsv1.patch |  34 ------
 .../python/bpo-35907-cve-2019-9948-fix.patch       |  55 +++++++++
 .../python/python/bpo-35907-cve-2019-9948.patch    |  55 +++++++++
 .../python/bpo-36216-cve-2019-9636-fix.patch       |  28 +++++
 .../python/python/bpo-36216-cve-2019-9636.patch    | 111 ++++++++++++++++++
 .../python/{python_2.7.15.bb => python_2.7.16.bb}  |  58 +++++-----
 .../strace/strace/ptest-spacesave.patch            |  19 +++
 meta/recipes-devtools/strace/strace_4.26.bb        |   1 +
 meta/recipes-extended/bash/bash.inc                |   4 +-
 meta/recipes-extended/gzip/gzip_1.10.bb            |   2 +
 meta/recipes-extended/parted/parted_3.2.bb         |   2 +-
 .../recipes-extended/perl/libtimedate-perl_2.30.bb |   1 +
 .../perl/libxml-sax-base-perl_1.09.bb              |   2 +
 meta/recipes-extended/perl/libxml-sax-perl_1.00.bb |   2 +
 meta/recipes-extended/slang/slang_2.3.2.bb         |   2 +
 meta/recipes-extended/tar/tar/CVE-2019-9923.patch  |  38 ++++++
 meta/recipes-extended/tar/tar_1.31.bb              |   1 +
 .../linux-firmware/linux-firmware_git.bb           | 128 +++++++++++----------
 meta/recipes-support/apr/apr-util_1.6.1.bb         |   1 +
 meta/recipes-support/apr/apr_1.6.5.bb              |   2 +
 meta/recipes-support/attr/attr.inc                 |   2 +-
 meta/recipes-support/libpcre/libpcre_8.43.bb       |   2 +
 42 files changed, 452 insertions(+), 565 deletions(-)
 delete mode 100644 meta/recipes-core/dropbear/dropbear_2019.77.bb
 create mode 100644 meta/recipes-core/dropbear/dropbear_2019.78.bb
 rename meta/recipes-devtools/python/{python-native_2.7.15.bb => python-native_2.7.16.bb} (96%)
 delete mode 100644 meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch
 delete mode 100644 meta/recipes-devtools/python/python/0001-bpo-33354-Fix-test_ssl-when-a-filename-cannot-be-enc.patch
 delete mode 100644 meta/recipes-devtools/python/python/0001-bpo-33570-TLS-1.3-ciphers-for-OpenSSL-1.1.1-GH-6976-.patch
 delete mode 100644 meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch
 delete mode 100644 meta/recipes-devtools/python/python/0002-bpo-34818-Add-missing-closing-wrapper-in-test_tls1_3.patch
 delete mode 100644 meta/recipes-devtools/python/python/0003-bpo-34834-Fix-test_ssl.test_options-to-account-for-O.patch
 delete mode 100644 meta/recipes-devtools/python/python/0004-bpo-34836-fix-test_default_ecdh_curve-needs-no-tlsv1.patch
 create mode 100644 meta/recipes-devtools/python/python/bpo-35907-cve-2019-9948-fix.patch
 create mode 100644 meta/recipes-devtools/python/python/bpo-35907-cve-2019-9948.patch
 create mode 100644 meta/recipes-devtools/python/python/bpo-36216-cve-2019-9636-fix.patch
 create mode 100644 meta/recipes-devtools/python/python/bpo-36216-cve-2019-9636.patch
 rename meta/recipes-devtools/python/{python_2.7.15.bb => python_2.7.16.bb} (85%)
 create mode 100644 meta/recipes-devtools/strace/strace/ptest-spacesave.patch
 create mode 100644 meta/recipes-extended/tar/tar/CVE-2019-9923.patch

-- 
2.7.4