[OE-core] [zeus 00/31] zeus pull request

[Armin Kuster]

Please merge this series to zeus mainline.

The following changes since commit 5607d38af39294bf97a878b414a0212278b66b2c:

  connman: mark connman-wait-online as SYSTEMD_PACKAGE (2019-10-29 08:20:37 +0000)

are available in the git repository at:

  git://git.openembedded.org/openembedded-core-contrib stable/zeus-next
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/zeus-next

Adrian Bunk (1):
  python3: Upgrade 3.7.4 -> 3.7.5

Alexander Kanavin (1):
  selftest: skip virgl test on centos 7 entirely

Anuj Mittal (1):
  libsdl2: fix race when building in parallel

Bruce Ashfield (2):
  linux-yocto/4.19: update to v4.19.78
  linux-yocto/5.2: update to v5.2.20

Changqing Li (2):
  e2fsprogs: fix CVE-2019-5094
  mdadm: fix do_package failed when changed local.conf but not cleaned

Ferry Toth (1):
  sudo: Fix fetching sources

Haris Okanovic (1):
  initscripts/sysfs.sh: Mount /sys/firmware/efi/efivars when possible

He Zhe (1):
  ltp: Fix overcommit_memory failure

Jacob Kroon (1):
  rm_work: Promote do_image_qa stamps to setscene versions

Joe Slater (2):
  libtiff: fix CVE-2019-17546
  libxslt: fix CVE-2019-18197

Richard Purdie (2):
  pseudo: Drop static linking to sqlite3
  pseudo: Add statx support to fix fedora30 issues

Ross Burton (13):
  libpng: whitelist CVE-2019-17371
  procps: whitelist CVE-2018-1121
  libsndfile1: whitelist CVE-2018-13419
  libpam: set CVE_PRODUCT
  file: fix CVE-2019-18218
  file: run test suite when building natively
  cve-check: ensure all known CVEs are in the report
  qemu-helper-native: add missing option to getopt() call
  qemu-helper-native: showing help shouldn't be an error
  qemu-helper-native: pass compiler flags
  cve-check: failure to parse versions should be more visible
  recipeutils-test: use a small dependency in the dummy recipe
  patch: the CVE-2019-13638 fix also handles CVE-2018-20969

Samuli Piippo (1):
  linux-firmware: update packaging for brcm files

Trevor Gamblin (1):
  libgcrypt: fix CVE-2019-13627

Zhixiong Chi (1):
  libtirpc: create the symbol link for rpc header files

 meta-selftest/lib/oeqa/runtime/cases/virgl.py      |   5 -
 .../recipeutils/recipeutils-test_1.2.bb            |   2 +-
 meta/classes/cve-check.bbclass                     |  13 +-
 meta/classes/rm_work.bbclass                       |   9 +
 meta/conf/distro/include/no-static-libs.inc        |   4 -
 meta/lib/oeqa/selftest/cases/runtime_test.py       |   2 +
 .../initscripts/initscripts-1.0/sysfs.sh           |   4 +
 .../e2fsprogs/e2fsprogs/CVE-2019-5094.patch        | 217 +++++++++++++++++++++
 .../recipes-devtools/e2fsprogs/e2fsprogs_1.45.3.bb |   1 +
 .../file/file/CVE-2019-18218.patch                 |  55 ++++++
 meta/recipes-devtools/file/file_5.37.bb            |   7 +-
 ...ke-ed-directly-instead-of-using-the-shell.patch |   4 +-
 .../pseudo/files/0001-Add-statx.patch              | 106 ++++++++++
 meta/recipes-devtools/pseudo/pseudo.inc            |  17 +-
 meta/recipes-devtools/pseudo/pseudo_git.bb         |   1 +
 ...code-lib-as-location-for-site-packages-an.patch |   2 +-
 ...55-Dont-parse-domains-containing-GH-13079.patch | 132 -------------
 ...-cc_basename-to-replace-CC-for-checking-c.patch |   2 +-
 .../python/{python3_3.7.4.bb => python3_3.7.5.bb}  |   5 +-
 .../qemu/qemu-helper-native_1.0.bb                 |   2 +-
 meta/recipes-devtools/qemu/qemu-helper/tunctl.c    |  16 +-
 meta/recipes-extended/libtirpc/libtirpc_1.1.4.bb   |  14 ++
 ...memory-update-for-mm-fix-false-positive-O.patch |  57 ++++++
 meta/recipes-extended/ltp/ltp_20190517.bb          |   1 +
 meta/recipes-extended/mdadm/mdadm_4.1.bb           |   5 +-
 meta/recipes-extended/pam/libpam_1.3.1.bb          |   2 +
 meta/recipes-extended/procps/procps_3.3.15.bb      |   9 +-
 meta/recipes-extended/sudo/sudo_1.8.27.bb          |   2 +-
 ...heck-for-build-dir-when-building-version-.patch |  45 +++++
 meta/recipes-graphics/libsdl2/libsdl2_2.0.10.bb    |   1 +
 .../linux-firmware/linux-firmware_20190815.bb      |  18 +-
 meta/recipes-kernel/linux/linux-yocto-rt_4.19.bb   |   6 +-
 meta/recipes-kernel/linux/linux-yocto-rt_5.2.bb    |   6 +-
 meta/recipes-kernel/linux/linux-yocto-tiny_4.19.bb |   8 +-
 meta/recipes-kernel/linux/linux-yocto-tiny_5.2.bb  |   8 +-
 meta/recipes-kernel/linux/linux-yocto_4.19.bb      |  20 +-
 meta/recipes-kernel/linux/linux-yocto_5.2.bb       |  22 +--
 meta/recipes-multimedia/libpng/libpng_1.6.37.bb    |   3 +
 .../libsndfile/libsndfile1_1.0.28.bb               |   4 +
 .../libtiff/tiff/CVE-2019-17546.patch              | 103 ++++++++++
 meta/recipes-multimedia/libtiff/tiff_4.0.10.bb     |   1 +
 ...dsa-ecdsa-Fix-use-of-nonce-use-larger-one.patch | 128 ++++++++++++
 ...-ecc-Add-mitigation-against-timing-attack.patch |  70 +++++++
 meta/recipes-support/libgcrypt/libgcrypt_1.8.4.bb  |   2 +
 .../libxslt/files/CVE-2019-18197.patch             |  33 ++++
 meta/recipes-support/libxslt/libxslt_1.1.33.bb     |   1 +
 46 files changed, 949 insertions(+), 226 deletions(-)
 create mode 100644 meta/recipes-devtools/e2fsprogs/e2fsprogs/CVE-2019-5094.patch
 create mode 100644 meta/recipes-devtools/file/file/CVE-2019-18218.patch
 create mode 100644 meta/recipes-devtools/pseudo/files/0001-Add-statx.patch
 delete mode 100644 meta/recipes-devtools/python/python3/0001-bpo-34155-Dont-parse-domains-containing-GH-13079.patch
 rename meta/recipes-devtools/python/{python3_3.7.4.bb => python3_3.7.5.bb} (98%)
 create mode 100644 meta/recipes-extended/ltp/ltp/0001-overcommit_memory-update-for-mm-fix-false-positive-O.patch
 create mode 100644 meta/recipes-graphics/libsdl2/libsdl2/0001-configure-check-for-build-dir-when-building-version-.patch
 create mode 100644 meta/recipes-multimedia/libtiff/tiff/CVE-2019-17546.patch
 create mode 100644 meta/recipes-support/libgcrypt/files/0001-dsa-ecdsa-Fix-use-of-nonce-use-larger-one.patch
 create mode 100644 meta/recipes-support/libgcrypt/files/0001-ecc-Add-mitigation-against-timing-attack.patch
 create mode 100644 meta/recipes-support/libxslt/files/CVE-2019-18197.patch

-- 
2.7.4