[OE-core][dunfell 00/20] Patch review

Steve Sakoman
2020-11-06T14:36:19Z

Please review this next set of patches for dunfell and have comments back
by end of day Tuesday.

Passed a-full on autobuilder with exception of known intermittent failure on
oe-selftest-centos (Unable to start bitbake server)

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/1547

Passed on susequent oe-selftest-centos build:

https://autobuilder.yoctoproject.org/typhoon/#/builders/79/builds/1532

The following changes since commit 5f644082fc3c2bbd89b898d5ca7cd4414cda4a64:

nasm: update 2.14.02 -> 2.15.03 for CVE fixes (2020-11-02 04:05:13 -1000)

are available in the Git repository at:

git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut

Andrey Zhizhikin (1):
insane: add GitLab /archive/ tests

Changqing Li (1):
timezone: upgrade to 2020d

Chee Yang Lee (1):
bluez5: update to 5.55 to fix CVE-2020-27153

Joshua Watt (1):
jquery: Upgrade 3.4.1 -> 3.5.0 to fix CVE-2020-11022 and
CVE-2020-11023

Mark Jonas (4):
Add license text for PSF-2.0
Map license names PSF and PSFv2 to PSF-2.0
libsdl2: Fix directfb syntax error
libsdl2: Fix directfb SDL_RenderFillRect

Martin Jansa (3):
lib/oe/patch: prevent applying patches without any subject
lib/oe/patch: GitApplyTree: save 1 echo in commit-msg hook
Revert "lib/oe/patch: fix handling of patches with no header"

Richard Leitner (1):
xcb-proto: backport fix for python gcd function

Richard Purdie (1):
sstatesig: Log timestamps for hashequiv in reprodubile builds for
do_package

Steve Sakoman (5):
sqlite3: fix CVE-2020-13434
sqlite3: fix CVE-2020-13435
sqlite3: fix CVE-2020-13630
sqlite3: fix CVE-2020-13631
sqlite3: fix CVE-2020-13632

Yann E. MORIN (2):
common-licenses: add bzip2-1.0.4
recipes-core/busybox: fixup licensing information

meta/classes/insane.bbclass | 4 +-
meta/conf/licenses.conf | 6 +-
meta/files/common-licenses/PSF-2.0 | 49 ++++
meta/files/common-licenses/bzip2-1.0.4 | 43 ++++
meta/lib/oe/patch.py | 13 +-
meta/lib/oe/sstatesig.py | 6 +
.../bluez5/{bluez5_5.54.bb => bluez5_5.55.bb} | 4 +-
meta/recipes-core/busybox/busybox.inc | 7 +-
.../{jquery_3.4.1.bb => jquery_3.5.0.bb} | 8 +-
meta/recipes-extended/timezone/timezone.inc | 6 +-
.../libsdl2/directfb-renderfillrect-fix.patch | 33 +++
...ectfb-spurious-curly-brace-missing-e.patch | 49 ++++
.../libsdl2/libsdl2_2.0.12.bb | 2 +
...1-xcbgen-use-math-gcd-for-python-3-5.patch | 40 ++++
.../xorg-proto/xcb-proto_1.13.bb | 3 +-
.../sqlite/files/CVE-2020-13434.patch | 48 ++++
.../sqlite/files/CVE-2020-13435.patch | 219 ++++++++++++++++++
.../sqlite/files/CVE-2020-13630.patch | 32 +++
.../sqlite/files/CVE-2020-13631.patch | 99 ++++++++
.../sqlite/files/CVE-2020-13632.patch | 34 +++
meta/recipes-support/sqlite/sqlite3_3.31.1.bb | 5 +
21 files changed, 684 insertions(+), 26 deletions(-)
create mode 100644 meta/files/common-licenses/PSF-2.0
create mode 100644 meta/files/common-licenses/bzip2-1.0.4
rename meta/recipes-connectivity/bluez5/{bluez5_5.54.bb => bluez5_5.55.bb} (91%)
rename meta/recipes-devtools/jquery/{jquery_3.4.1.bb => jquery_3.5.0.bb} (73%)
create mode 100644 meta/recipes-graphics/libsdl2/libsdl2/directfb-renderfillrect-fix.patch
create mode 100644 meta/recipes-graphics/libsdl2/libsdl2/directfb-spurious-curly-brace-missing-e.patch
create mode 100644 meta/recipes-graphics/xorg-proto/xcb-proto/0001-xcbgen-use-math-gcd-for-python-3-5.patch
create mode 100644 meta/recipes-support/sqlite/files/CVE-2020-13434.patch
create mode 100644 meta/recipes-support/sqlite/files/CVE-2020-13435.patch
create mode 100644 meta/recipes-support/sqlite/files/CVE-2020-13630.patch
create mode 100644 meta/recipes-support/sqlite/files/CVE-2020-13631.patch
create mode 100644 meta/recipes-support/sqlite/files/CVE-2020-13632.patch

--
2.17.1