]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
7 years agotzdata: update to 2018c stable/jethro-lts
Armin Kuster [Thu, 25 Jan 2018 16:33:43 +0000 (08:33 -0800)] 
tzdata: update to 2018c

The 2018c release of the tz code and data is available. It follows on the 2018a and 2018b releases, which were published but were not announced until now, due to problems discovered late in their release processes. 2018a had a build-failure typo, and 2018a and 2018b both had problems with ICU and Java, downstream packages which do not support a feature (negative DST offsets) used in 2018a and 2018b. The typo has been fixed, and data changes using negative DST offsets have been reverted pending development of a mechanism to export data to platforms lacking support for such data.

  Briefly:
  São Tomé and Príncipe switched from +00 to +01.
  Brazil's DST will now start on November's first Sunday.
  Use Debian-style installation locations, instead of 4.3BSD-style.
  New zic option -t.

  Changes to past and future time stamps

    São Tomé and Príncipe switched from +00 to +01 on 2018-01-01 at
    01:00.  (Thanks to Steffen Thorsen and Michael Deckers.)

  Changes to future time stamps

    Starting in 2018 southern Brazil will begin DST on November's
    first Sunday instead of October's third Sunday. (Thanks to
    Steffen Thorsen.)

  Changes to past time stamps

    Japanese DST transitions (1948-1951) were Sundays at 00:00, not
    Saturdays or Sundays at 02:00.  (Thanks to Takayuki Nikai.)

    A discrepancy of 4 s in timestamps before 1931 in South Sudan has
    been corrected.  The 'backzone' and 'zone.tab' files did not agree
    with the 'africa' and 'zone1970.tab' files.  (Problem reported by
    Michael Deckers.)

    The abbreviation invented for Bolivia Summer Time (1931-2) is now
    BST instead of BOST, to be more consistent with the convention
    used for Latvian Summer Time (1918-9) and for British Summer Time.

  Changes to build procedure

    The default installation locations have been changed to mostly
    match Debian circa 2017, instead of being designed as an add-on to
    4.3BSD circa 1986.  This affects the Makefile macros TOPDIR,
    TZDIR, MANDIR, and LIBDIR.  New Makefile macros TZDEFAULT, USRDIR,
    USRSHAREDIR, BINDIR, ZDUMPDIR, and ZICDIR let installers tailor
    locations more precisely.  (This responds to suggestions from
    Brian Inglis and from Steve Summit.)

    The default installation procedure no longer creates the
    backward-compatibility link US/Pacific-New, which causes
    confusion during user setup (e.g., see Debian bug 815200).
    Use 'make BACKWARD="backward pacificnew"' to create the link
    anyway, for now.  Eventually we plan to remove the link entirely.

    tzdata.zi now contains a version-number comment.
    (Suggested by Tom Lane.)

    The Makefile now quotes values like BACKWARD more carefully when
    passing them to the shell.  (Problem reported by Zefram.)

    Builders no longer need to specify -DHAVE_SNPRINTF on platforms
    that have snprintf and use pre-C99 compilers. (Problem reported
    by Jon Skeet.)

    The build procedure now works around mawk 1.3.3's lack of support
    for character class expressions.  (Problem reported by Ohyama.)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 97927956a6629381b54973d01e16c5f039f5e5bb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit f266d17095441dd136c490578d7aae824ab16870)
(cherry picked from commit 1683b26b5940a2514a963d78146b9a591148f73c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzcode: update to 2018c
Armin Kuster [Thu, 25 Jan 2018 16:33:42 +0000 (08:33 -0800)] 
tzcode: update to 2018c

removed patches now included in update.

The 2018a through 2018c releases reflect the following changes, which were either circulated on the tz mailing list or are relatively minor technical or administrative changes. This announcement has merged the set of changes made by the three releases, to make it easier to see the difference between 2017c and 2018c; please see the 2018c NEWS file for more details about intermediate versions.

Release 2018c - 2018-01-22 23:00:44 -0800
Release 2018b - 2018-01-17 23:24:48 -0800
Release 2018a - 2018-01-12 22:29:21 -0800

Changes to code

    zic has a new option -t FILE that specifies the location of the
    file that determines local time when TZ is unset. The default for
    this location can be configured via the new TZDEFAULT makefile
    macro, which defaults to /etc/localtime.

    Diagnostics and commentary now distinguish UT from UTC more
    carefully; see theory.html for more information about UT vs UTC.

    zic has been ported to GCC 8's -Wstringop-truncation option.
    (Problem reported by Martin Sebor.)

  Changes to documentation and commentary

    The zic man page now documents the longstanding behavior that
    times and years can be out of the usual range, with negative times
    counting backwards from midnight and with year 0 preceding year 1.
    (Problem reported by Michael Deckers.)

    The theory.html file now mentions the POSIX limit of six chars
    per abbreviation, and lists alphabetic abbreviations used.

    The files tz-art.htm and tz-link.htm have been renamed to
    tz-art.html and tz-link.html, respectively, for consistency with
    other file names and to simplify web server configuration.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit aae1131225b92d2f984a2de35b2e21592ae8195d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 017bbce4101e90388cf662e12157a788112e0727)
(cherry picked from commit 4957d4d5fbd655c2b5e01d79b0ed6a68d14c3a1a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzdata: update 2017c
Armin Kuster [Fri, 3 Nov 2017 19:54:36 +0000 (12:54 -0700)] 
tzdata: update 2017c

LICENSE changed do to rewording
https://github.com/eggert/tz/commit/7097a652778d35acf747d14f8bf7b3ced479bbc0#diff-9879d6db96fd29134fc802214163b95a

  Briefly:
  Northern Cyprus switches from +03 to +02/+03 on 2017-10-29.
  Fiji ends DST 2018-01-14, not 2018-01-21.
  Namibia switches from +01/+02 to +02 on 2018-04-01.
  Sudan switches from +03 to +02 on 2017-11-01.
  Tonga likely switches from +13/+14 to +13 on 2017-11-05.
  Turks & Caicos switches from -04 to -05/-04 on 2018-11-04.
  A new file tzdata.zi now holds a small text copy of all data.
  The zic input format has been regularized slightly.

  Changes to future time stamps

    Northern Cyprus has decided to resume EU rules starting
    2017-10-29, thus reinstituting winter time.

    Fiji ends DST 2018-01-14 instead of the 2018-01-21 previously
    predicted.  (Thanks to Dominic Fok.)  Adjust future predictions
    accordingly.

    Namibia will switch from +01 with DST to +02 all year on
    2017-09-03 at 02:00.  This affects UT offsets starting 2018-04-01
    at 02:00.  (Thanks to Steffen Thorsen.)

    Sudan will switch from +03 to +02 on 2017-11-01.  (Thanks to Ahmed
    Atyya and Yahia Abdalla.)  South Sudan is not switching, so
    Africa/Juba is no longer a link to Africa/Khartoum.

    Tonga has likely ended its experiment with DST, and will not
    adjust its clocks on 2017-11-05.  Although Tonga has not announced
    whether it will continue to observe DST, the IATA is assuming that
    it will not.  (Thanks to David Wade.)

    Turks & Caicos will switch from -04 all year to -05 with US DST on
    2018-03-11 at 03:00.  This affects UT offsets starting 2018-11-04
    at 02:00.  (Thanks to Steffen Thorsen.)

  Changes to past time stamps

    Namibia switched from +02 to +01 on 1994-03-21, not 1994-04-03.
    (Thanks to Arthur David Olson.)

    Detroit did not observe DST in 1967.

    Use railway time for Asia/Kolkata before 1941, by switching to
    Madras local time (UT +052110) in 1870, then to IST (UT +0530) in
    1906.  Also, treat 1941-2's +0630 as DST, like 1942-5.

    Europe/Dublin's 1946 and 1947 fallback transitions occurred at
    02:00 standard time, not 02:00 DST.  (Thanks to Michael Deckers.)

    Pacific/Apia and Pacific/Pago_Pago switched from Antipodean to
    American time in 1892, not 1879.  (Thanks to Michael Deckers.)

    Adjust the 1867 transition in Alaska to better reflect the
    historical record, by changing it to occur on 1867-10-18 at 15:30
    Sitka time rather than at the start of 1867-10-17 local time.
    Although strictly speaking this is accurate only for Sitka,
    the rest of Alaska's blanks need to be filled in somehow.

    Fix off-by-one errors in UT offsets for Adak and Nome before 1867.
    (Thanks to Michael Deckers.)

    Add 7 s to the UT offset in Asia/Yangon before 1920.

  Changes to zone names

    Remove Canada/East-Saskatchewan from the 'backward' file, as it
    exceeded the 14-character limit and was an unused misnomer anyway.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 77a8256d9cbfe24d470aac9b4cc2910a41ca0ee8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 2ea37fd4fad2e5ef21c119b03f09bcf2b0e7266e)
(cherry picked from commit 80dcc2ef7801396b647e2b9fa797fe702d364161)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzcode-native: update to 2017c
Armin Kuster [Fri, 3 Nov 2017 19:54:35 +0000 (12:54 -0700)] 
tzcode-native: update to 2017c

LICENSE changes do to rewording
https://github.com/eggert/tz/commit/7097a652778d35acf747d14f8bf7b3ced479bbc0#diff-9879d6db96fd29134fc802214163b95a

Backported to fixes from upstream too.

Changes to code

    zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch.
    As a result, support for double leap seconds, which was
    obsolescent and undocumented, has been removed.  Double leap
    seconds were an error in the C89 standard; they have never existed
    in civil timekeeping.  (Thanks to Robert Elz and Bradley White for
    noticing glitches in the code that uncovered this problem.)

    zic now warns about use of the obsolescent and undocumented -y
    option, and about use of the obsolescent TYPE field of Rule lines.

    zic now allows unambiguous abbreviations like "Sa" and "Su" for
    weekdays; formerly it rejected them due to a bug.  Conversely, zic
    no longer considers non-prefixes to be abbreviations; for example,
    it no longer accepts "lF" as an abbreviation for "lastFriday".
    Also, zic warns about the undocumented usage with a "last-"
    prefix, e.g., "last-Fri".

    Similarly, zic now accepts the unambiguous abbreviation "L" for
    "Link" in ordinary context and for "Leap" in leap-second context.
    Conversely, zic no longer accepts non-prefixes such as "La" as
    abbreviations for words like "Leap".

    zic no longer accepts leap second lines in ordinary input, or
    ordinary lines in leap second input.  Formerly, zic sometimes
    warned about this undocumented usage and handled it incorrectly.

    The new macro HAVE_TZNAME governs whether the tzname external
    variable is exported, instead of USG_COMPAT.  USG_COMPAT now
    governs only the external variables "timezone" and "daylight".
    This change is needed because the three variables are not in the
    same category: although POSIX requires tzname, it specifies the
    other two variables as optional.  Also, USG_COMPAT is now 1 or 0:
    if not defined, the code attempts to guess it from other macros.

    localtime.c and difftime.c no longer require stdio.h, and .c files
    other than zic.c no longer require sys/wait.h.

    zdump.c no longer assumes snprintf.  (Reported by Jonathan Leffler.)

    Calculation of time_t extrema works around a bug in GCC 4.8.4
    (Reported by Stan Shebs and Joseph Myers.)

    zic.c no longer mistranslates formats of line numbers in non-English
    locales.  (Problem reported by Benno Schulenberg.)

    Several minor changes have been made to the code to make it a
    bit easier to port to MS-Windows and Solaris.  (Thanks to Kees
    Dekker for reporting the problems.)

  Changes to documentation and commentary

    The two new files 'theory.html' and 'calendars' contain the
    contents of the removed file 'Theory'.  The goal is to document
    tzdb theory more accessibly.

    The zic man page now documents abbreviation rules.

    tz-link.htm now covers how to apply tzdata changes to clients.
    (Thanks to Jorge Fábregas for the AIX link.)  It also mentions MySQL.

    The leap-seconds.list URL has been updated to something that is
    more reliable for tzdb.  (Thanks to Tim Parenti and Brian Inglis.)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 74af497f8d6b4e28d97c0f2cdb4ece90c2a6b8b5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 12a538bbbc8d04e875f81bd65e9754d749273aac)
(cherry picked from commit d741a2caf51970ea540393e6f7db5c43dfc2e599)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzcode-native: quote ${CC}
Enrico Scholz [Fri, 23 Jun 2017 11:19:12 +0000 (13:19 +0200)] 
tzcode-native: quote ${CC}

build fails else with

| + make -j 8 -l 6 cc=ccache gcc
| make: *** No rule to make target 'gcc'.  Stop.

Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 5729c1563359e12ebb4451bb1ce7ba3fff4ed2d4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 11c40ed7230efe5b928da482c18c3fb2c791430b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzdata: Install zone1970.tab
Jan Kiszka [Fri, 16 Jun 2017 07:28:05 +0000 (09:28 +0200)] 
tzdata: Install zone1970.tab

The modern version of zone.tab is required by tzselect e.g.

(From OE-Core rev: de467998ecfa5fa1d2e9dd43a4a3d828cf9ccade)

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 3a8cd69722aacf2f5bf376df682e7f5da2f79252)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzdata: update to 2017b
Armin Kuster [Fri, 24 Mar 2017 16:01:14 +0000 (09:01 -0700)] 
tzdata: update to 2017b

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fdc98a435352f181aa33f1f253b0b88bdc379d07)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzcode: update to 2017b
Armin Kuster [Fri, 24 Mar 2017 16:01:13 +0000 (09:01 -0700)] 
tzcode: update to 2017b

 Briefly: Haiti has resumed DST.

  Changes to past and future time stamps

    Haiti resumed observance of DST in 2017.  (Thanks to Steffen Thorsen.)

  Changes to past time stamps

    Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.

    Use "MMT" to abbreviate Liberia's time zone before 1972, as "-004430"
    is one byte over the POSIX limit.  (Problem reported by Derick Rethans.)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3b778b337bf2cb525f025978201a49a91088f005)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzcode-native: Set cc to ${CC}
Richard Purdie [Thu, 9 Mar 2017 09:48:44 +0000 (09:48 +0000)] 
tzcode-native: Set cc to ${CC}

Building on a system without "cc" showed this recipe doesn't respect
the $CC variable. Fix this by passing the right option to the makefile.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 402080c0a77443f541fa3d658b79f3fba327279d)
(cherry picked from commit 313d977fdfe571ad6edf65c6ed20bbb0110dc320)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzdata: update to 2017a
Armin Kuster [Wed, 1 Mar 2017 03:48:31 +0000 (19:48 -0800)] 
tzdata: update to 2017a

 Briefly: Southern Chile moves from -04/-03 to -03, and Mongolia
  discontinues DST.

  Changes to future time stamps

    Mongolia no longer observes DST.  (Thanks to Ganbold Tsagaankhuu.)

    Chile's Region of Magallanes moves from -04/-03 to -03 year-round.
    Its clocks diverge from America/Santiago starting 2017-05-13 at
    23:00, hiving off a new zone America/Punta_Arenas.  Although the
    Chilean government says this change expires in May 2019, for now
    assume it's permanent.  (Thanks to Juan Correa and Deborah
    Goldsmith.)  This also affects Antarctica/Palmer.

  Changes to past time stamps

    Fix many entries for historical time stamps for Europe/Madrid
    before 1979, to agree with tables compiled by Pere Planesas of the
    National Astronomical Observatory of Spain.  As a side effect,
    this changes some time stamps for Africa/Ceuta before 1929, which
    are probably guesswork anyway.  (Thanks to Steve Allen and
    Pierpaolo Bernardi for the heads-ups, and to Michael Deckers for
    correcting the 1901 transition.)

    Ecuador observed DST from 1992-11-28 to 1993-02-05.
    (Thanks to Alois Treindl.)

    Asia/Atyrau and Asia/Oral were at +03 (not +04) before 1930-06-21.
    (Thanks to Stepan Golosunov.)

  Changes to past and future time zone abbreviations

    Switch to numeric time zone abbreviations for South America, as
    part of the ongoing project of removing invented abbreviations.
    This avoids the need to invent an abbreviation for the new Chilean
    new zone.  Similarly, switch from invented to numeric time zone
    abbreviations for Afghanistan, American Samoa, the Azores,
    Bangladesh, Bhutan, the British Indian Ocean Territory, Brunei,
    Cape Verde, Chatham Is, Christmas I, Cocos (Keeling) Is, Cook Is,
    Dubai, East Timor, Eucla, Fiji, French Polynesia, Greenland,
    Indochina, Iran, Iraq, Kiribati, Lord Howe, Macquarie, Malaysia,
    the Maldives, Marshall Is, Mauritius, Micronesia, Mongolia,
    Myanmar, Nauru, Nepal, New Caledonia, Niue, Norfolk I, Palau,
    Papua New Guinea, the Philippines, Pitcairn, Qatar, Réunion, St
    Pierre & Miquelon, Samoa, Saudi Arabia, Seychelles, Singapore,
    Solomon Is, Tokelau, Tuvalu, Wake, Vanuatu, Wallis & Futuna, and
    Xinjiang; for 20-minute daylight saving time in Ghana before 1943;
    for half-hour daylight saving time in Belize before 1944 and in
    the Dominican Republic before 1975; and for Canary Islands before
    1946, for Guinea-Bissau before 1975, for Iceland before 1969, for
    Indian Summer Time before 1942, for Indonesia before around 1964,
    for Kenya before 1960, for Liberia before 1973, for Madeira before
    1967, for Namibia before 1943, for the Netherlands in 1937-9, for
    Pakistan before 1971, for Western Sahara before 1977, and for
    Zaporozhye in 1880-1924.

    For Alaska time from 1900 through 1967, instead of "CAT" use the
    abbreviation "AST", the abbreviation commonly used at the time
    (Atlantic Standard Time had not been standardized yet).  Use "AWT"
    and "APT" instead of the invented abbreviations "CAWT" and "CAPT".

    Use "CST" and "CDT" instead of invented abbreviations for Macau
    before 1999 and Taiwan before 1938, and use "JST" instead of the
    invented abbreviation "JCST" for Japan and Korea before 1938.

  Change to database entry category

    Move the Pacific/Johnston link from 'australasia' to 'backward',
    since Johnston is now uninhabited.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 784a8379260759700ab8482b1699c9567d6e9f3f)
(cherry picked from commit 697ea2e2776e54b5cac70461b8aafa2c9b7a0bc3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzcode-native: update to 2017a
Armin Kuster [Wed, 1 Mar 2017 03:48:30 +0000 (19:48 -0800)] 
tzcode-native: update to 2017a

  Changes to code

    zic no longer mishandles some transitions in January 2038 when it
    attempts to work around Qt bug 53071.  This fixes a bug affecting
    Pacific/Tongatapu that was introduced in zic 2016e. localtime.c
    now contains a workaround, useful when loading a file generated by
    a buggy zic.  (Problem and localtime.c fix reported by Bradley
    White.)

    zdump -i now outputs non-hour numeric time zone abbreviations
    without a colon, e.g., "+0530" rather than "+05:30".  This agrees
    with zic %z and with common practice, and simplifies auditing of
    zdump output.

    zdump is now buildable again with -DUSE_LTZ=0.
    (Problem reported by Joseph Myers.)

    zdump.c now always includes private.h, to avoid code duplication
    with private.h.  (Problem reported by Kees Dekker.)

    localtime.c no longer mishandles early or late timestamps
    when TZ is set to a POSIX-style string that specifies DST.
    (Problem reported by Kees Dekker.)

    date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone abbreviation
    begins with "-".

  Changes to documentation and commentary

    The 'Theory' file now better documents choice of historical time
    zone abbreviations.  (Problems reported by Michael Deckers.)

    tz-link.htm now covers leap smearing, which is popular in clouds.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 6c95fbf51ec538e29083a4a890d106b732c1b182)
(cherry picked from commit 064457dd47cff339ae442c29ce23648a83a695b9)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzcode-native: update to 2016j
Armin Kuster [Thu, 15 Dec 2016 15:21:44 +0000 (07:21 -0800)] 
tzcode-native: update to 2016j

Changes to code

    zic no longer mishandles file systems that lack hard links, fixing
    bugs introduced in 2016g.  (Problems reported by Tom Lane.)
    Also, when the destination already contains symbolic links, zic
    should now work better on systems where the 'link' system call
    does not follow symbolic links.

Changes to documentation and commentary

    tz-link.htm now documents the relationship between release version
    numbers and development-repository commit tags.  (Suggested by
    Paul Koning.)

    The 'Theory' file now documents UT.

    iso3166.tab now accents "Curaçao", and commentary now mentions
the names "Cabo Verde" and "Czechia". (Thanks to Jiří Boháč.)

(From OE-Core rev: 3fb5ddce97af1d4ada0dcc7f9c0ceef6ac392918)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f9d6b482f2275c054dff91b81ac901b612f9c9b4)
(cherry picked from commit b83b3565554c923468049ea1fdc9bb5dcec631aa)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agotzdata: update to 2016j
Armin Kuster [Thu, 15 Dec 2016 15:21:45 +0000 (07:21 -0800)] 
tzdata: update to 2016j

Briefly: Saratov, Russia moves from +03 to +04 on 2016-12-04.

  Changes to future time stamps

    Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    This hives off a new zone Europe/Saratov from Europe/Volgograd.
    (Thanks to Yuri Konotopov and Stepan Golosunov.)

  Changes to past time stamps

    The new zone Asia/Atyrau for Atyraū Region, Kazakhstan, is like
    Asia/Aqtau except it switched from +05/+06 to +04/+05 in spring
    1999, not fall 1994.  (Thanks to Stepan Golosunov.)

  Changes to past time zone abbreviations

    Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
summer time before 1948. The old use of "EET" was a typo.

(From OE-Core rev: a0b389b5f3effad5194109f9914dec6125b3569d)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 147d7802926153ef0abb12d5e738576d8dfd02d7)
(cherry picked from commit 5e117f4250d6155d3014f85dd1cbbfad0afdf282)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: update to 2.4.3
Armin Kuster [Mon, 19 Feb 2018 21:06:35 +0000 (13:06 -0800)] 
ruby: update to 2.4.3

This fixes a segfault in arm64 multilib.

Drop CVE-2017-14064.patch

Additional CVE included are 2.4.3:
CVE-2017-17405: Command injection vulnerability in Net::FTP

Additional CVE included are 2.4.2:
CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf
CVE-2017-10784: Escape sequence injection vulnerability in the Basic authentication of WEBrick
CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 decode
CVE-2017-14064: Heap exposure in generating JSON

Ruby Gems:
DNS request hijacking vulnerability. (CVE-2017-0902)
ANSI escape sequence vulnerability. (CVE-2017-0899)
DoS vulnerability in the query command. (CVE-2017-0900)
vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files. (CVE-2017-0901)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 4ba60ef149da41b1adc48f7a6c0aa1a14905a4e3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: update to 2.4.0
Alexander Kanavin [Fri, 12 Jan 2018 16:20:01 +0000 (18:20 +0200)] 
ruby: update to 2.4.0

Existing version of ruby-native (2.2.5) was crashing on my machine (and others' too),
yet a functional ruby is necessary to upgrade webkit to a version that less vulnerable
to Spectre.

I've performed the update by copying the ruby recipe directory over from the current
pyro tree; if you want to see the list of specific commits, issue this command:

git log 99656fecf4fa6e24ba49ecb7f26f893e733818a0 meta/recipes-devtools/ruby
(up to commit e593d3aeb2ea5f08d6e0753133fe89e345b339e8)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4734a4b41898e3df252b6234ed1270a915fd1f68)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Security fix for CVE-2017-14064
Rajkumar Veer [Sat, 4 Nov 2017 17:45:58 +0000 (10:45 -0700)] 
ruby: Security fix for CVE-2017-14064

Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit 8d53b03e8fa1bc20c0d77d6cd7869bd7f7325987)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Security fix for CVE-2017-14033
Rajkumar Veer [Sat, 4 Nov 2017 17:43:01 +0000 (10:43 -0700)] 
ruby: Security fix for CVE-2017-14033

affects ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1

Signed-off-by: Rajkumar Veer <rveer@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit 6033983453ff7b39d9d0d0a64353611128e26fae)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Security fix for CVE-2017-9229
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:41:02 +0000 (10:41 -0700)] 
ruby: Security fix for CVE-2017-9229

affects ruby < 2.4.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit a636bf8cb5063f349b2af6594b131af6852b3076)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Secruity fix for CVE-2017-9226
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:39:42 +0000 (10:39 -0700)] 
ruby: Secruity fix for CVE-2017-9226

affects ruby < 2.4.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit 0c1eec0c6a789e1e9dbfcc66c3fb8c7d1d8b4e99)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Security fix for CVE-2017-9228
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:37:48 +0000 (10:37 -0700)] 
ruby: Security fix for CVE-2017-9228

affects ruby < 2.4.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit cdfb60a7b573c034868ef27d8eb2c667f2a7ad1d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Security fix for CVE-2017-9227
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:35:54 +0000 (10:35 -0700)] 
ruby: Security fix for CVE-2017-9227

affects ruby < 2.4.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit d83f18936a0eb470e8faf7adbd7c580c23fa3370)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Security fix for CVE-2016-7798
Thiruvadi Rajaraman [Sat, 4 Nov 2017 17:30:06 +0000 (10:30 -0700)] 
ruby: Security fix for CVE-2016-7798

affectes ruby < 2.3.1

Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit 6af2319008dc16c61092f71ff227c285aac51288)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: fix build of ruby-native with gcc7
Joshua Lock [Fri, 27 Oct 2017 14:49:41 +0000 (15:49 +0100)] 
ruby: fix build of ruby-native with gcc7

Marsalling is broken when ruby-2.2.x is built with gcc7, backport the change
fix  in Ruby SVN r57410 to apply to ruby 2.2.5:

https://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=57410

Fixes [YOCTO #12271]

Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit b9de98cdc816904583970369848181c2c79f1dc5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: obey LDFLAGS for the link of libruby
Christopher Larson [Thu, 5 May 2016 19:30:54 +0000 (12:30 -0700)] 
ruby: obey LDFLAGS for the link of libruby

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8da33111c924be0bef8e175c53dbd3a439dc9788)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: Upgrade to 2.2.5
Khem Raj [Wed, 11 May 2016 17:35:43 +0000 (10:35 -0700)] 
ruby: Upgrade to 2.2.5

This is latest in 2.2 series, helps with compile
using clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9f1a8cc84105b077cb5896997b220f1f583075b5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agoruby: break out ri-docs and rdoc into separate packages
Ioan-Adrian Ratiu [Mon, 15 Feb 2016 15:32:48 +0000 (17:32 +0200)] 
ruby: break out ri-docs and rdoc into separate packages

The ri (Ruby Interactive) documentation for the Ruby standard library
consumes a significant amount of space on disk. It is useful to
developers, but is usually not necessary for users who just want to run
applications written in Ruby.  Break it out into a separate package so
Ruby can be installed without it.

Also break out the rdoc documentation generator in its own package.

Signed-off-by: Ben Shelton <ben.shelton@ni.com>
Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit adc53d40932151b4822ce2ac74cb31306684ba95)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
7 years agowpa_supplicant: fix WPA2 key replay security bug
Ross Burton [Tue, 17 Oct 2017 11:17:29 +0000 (12:17 +0100)] 
wpa_supplicant: fix WPA2 key replay security bug

WPA2 is vulnerable to replay attacks which result in unauthenticated users
having access to the network.

* CVE-2017-13077: reinstallation of the pairwise key in the Four-way handshake

* CVE-2017-13078: reinstallation of the group key in the Four-way handshake

* CVE-2017-13079: reinstallation of the integrity group key in the Four-way
handshake

* CVE-2017-13080: reinstallation of the group key in the Group Key handshake

* CVE-2017-13081: reinstallation of the integrity group key in the Group Key
handshake

* CVE-2017-13082: accepting a retransmitted Fast BSS Transition Reassociation
Request and reinstalling the pairwise key while processing it

* CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS)
PeerKey (TPK) key in the TDLS handshake

* CVE-2017-13087: reinstallation of the group key (GTK) when processing a
Wireless Network Management (WNM) Sleep Mode Response frame

* CVE-2017-13088: reinstallation of the integrity group key (IGTK) when
processing a Wireless Network Management (WNM) Sleep Mode Response frame

Backport patches from upstream to resolve these CVEs.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 years agobuild-appliance-image: Update to jethro head revision
Richard Purdie [Tue, 6 Dec 2016 22:48:36 +0000 (22:48 +0000)] 
build-appliance-image: Update to jethro head revision

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 years agotzdata: update to 2016i
Armin Kuster [Fri, 4 Nov 2016 05:53:28 +0000 (22:53 -0700)] 
tzdata: update to 2016i

  Briefly: Cyprus split into two time zones on 2016-10-30, and Tonga
  reintroduces DST on 2016-11-06.

  Changes to future time stamps

    Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00.  Assume future observances in Tonga will be
    from the first Sunday in November through the third Sunday in
    January, like Fiji.  (Thanks to Pulu ʻAnau.)  Switch to numeric
    time zone abbreviations for this zone.

  Changes to past and future time stamps

    Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta.  (Thanks to Even Scharning and Matt Johnson.)

    Antarctica/Casey switched from +08 to +11 on 2016-10-22.
    (Thanks to Steffen Thorsen.)

  Changes to past time stamps

    Several corrections were made for pre-1975 time stamps in Italy.
    These affect Europe/Malta, Europe/Rome, Europe/San_Marino, and
    Europe/Vatican.

    First, the 1893-11-01 00:00 transition in Italy used the new UT
    offset (+01), not the old (+00:49:56).  (Thanks to Michael
    Deckers.)

    Second, rules for daylight saving in Italy were changed to agree
    with Italy's National Institute of Metrological Research (INRiM)
    except for 1944, as follows (thanks to Pierpaolo Bernardi, Brian
    Inglis, and Michael Deckers):

      The 1916-06-03 transition was at 24:00, not 00:00.

      The 1916-10-01, 1919-10-05, and 1920-09-19 transitions were at
      00:00, not 01:00.

      The 1917-09-30 and 1918-10-06 transitions were at 24:00, not
      01:00.

      The 1944-09-17 transition was at 03:00, not 01:00.  This
      particular change is taken from Italian law as INRiM's table,
      (which says 02:00) appears to have a typo here.  Also, keep the
      1944-04-03 transition for Europe/Rome, as Rome was controlled by
      Germany then.

      The 1967-1970 and 1972-1974 fallback transitions were at 01:00,
      not 00:00.

(From OE-Core rev: daf95f7fd9f7ab65685d7b764d8e50df8d00d308)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotzcode: update to 2016i
Armin Kuster [Fri, 4 Nov 2016 05:53:27 +0000 (22:53 -0700)] 
tzcode: update to 2016i

Changes to code

  The code should now be buildable on AmigaOS merely by setting the
  appropriate Makefile variables.  (From a patch by Carsten Larsen.)

(From OE-Core rev: d2b8c4ee535684f5d874082a7f76efbda1907ea5)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotzdata: Update to 2016h
Armin Kuster [Mon, 24 Oct 2016 03:00:16 +0000 (20:00 -0700)] 
tzdata: Update to 2016h

Changes to future time stamps

    Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.  (Thanks to Sharef Mustafa.)  Predict that
    future fall transitions will be on the last Saturday of October
    at 01:00, which is consistent with predicted spring transitions
    on the last Saturday of March.  (Thanks to Tim Parenti.)

Changes to past time stamps

    In Turkey, transitions in 1986-1990 were at 01:00 standard time
    not at 02:00, and the spring 1994 transition was on March 20, not
    March 27.  (Thanks to Kıvanç Yazan.)

Changes to past and future time zone abbreviations

    Asia/Colombo now uses numeric time zone abbreviations like "+0530"
    instead of alphabetic ones like "IST" and "LKT".  Various
    English-language sources use "IST", "LKT" and "SLST", with no
    working consensus.  (Usage of "SLST" mentioned by Sadika
    Sumanapala.)

(From OE-Core rev: ff11ca44fec8e4b2aa523e032bd967e3ab8339a8)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotzcode-native: update to 2016h
Armin Kuster [Mon, 24 Oct 2016 03:00:15 +0000 (20:00 -0700)] 
tzcode-native: update to 2016h

Changes to code

zic no longer mishandles relativizing file names when creating
symbolic links like /etc/localtime, when these symbolic links
are outside the usual directory hierarchy.  This fixes a bug
introduced in 2016g.  (Problem reported by Andreas Stieger.)

(From OE-Core rev: 9c5de646e01a83219be74e99dcf7c1e56ba38b53)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agopython-2.7: Security fix CVE-2016-1000110
Armin Kuster [Sun, 6 Nov 2016 18:54:52 +0000 (10:54 -0800)] 
python-2.7: Security fix CVE-2016-1000110

affects python-2.7 < 2.7.12

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agopython-2.7: Security fix CVE-2016-5699
Armin Kuster [Sun, 6 Nov 2016 18:39:35 +0000 (10:39 -0800)] 
python-2.7: Security fix CVE-2016-5699

affect python-2.7 < 2.7.10

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agopython-2.7: Security fix CVE-2016-5636
Armin Kuster [Sun, 6 Nov 2016 18:36:07 +0000 (10:36 -0800)] 
python-2.7: Security fix CVE-2016-5636

Affects python-2.7 < 2.7.12

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agopython-2.7: Security fix CVE-2016-0772
Armin Kuster [Sun, 6 Nov 2016 18:27:08 +0000 (10:27 -0800)] 
python-2.7: Security fix CVE-2016-0772

Affects python < 2.7.12

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssl: Security fix CVE-2016-8610
Armin Kuster [Sun, 6 Nov 2016 15:33:27 +0000 (07:33 -0800)] 
openssl: Security fix CVE-2016-8610

affects openssl < 1.0.2i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssl: Security fix CVE-2016-2179
Armin Kuster [Sun, 6 Nov 2016 14:54:25 +0000 (06:54 -0800)] 
openssl: Security fix CVE-2016-2179

affects openssl < 1.0.2i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agobind: Security fix CVE-2016-2776
Armin Kuster [Mon, 3 Oct 2016 00:52:11 +0000 (17:52 -0700)] 
bind: Security fix CVE-2016-2776

affect bind < 9.10.4-p3

Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agobind: Security fix CVE-2016-2775
Armin Kuster [Mon, 3 Oct 2016 00:49:24 +0000 (17:49 -0700)] 
bind: Security fix CVE-2016-2775

affect bind < 9.10.4-p2

Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agognutils: Security fix CVE-2016-7444
Armin Kuster [Mon, 3 Oct 2016 00:11:14 +0000 (17:11 -0700)] 
gnutils: Security fix CVE-2016-7444

affects gnutls < 3.3.24

Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agognupg: fix find-version for beta checking
Wenzong Fan [Wed, 28 Oct 2015 05:53:37 +0000 (01:53 -0400)] 
gnupg: fix find-version for beta checking

find-version always assumes that gnupg is beta if autogen.sh is run
out of git-repo. This doesn't work for users whom just take release
tarball and re-run autoconf in their local build dir.

This fixes runtime issue:

  $gpg --list-sigs
  gpg: NOTE: THIS IS A DEVELOPMENT VERSION!
  gpg: It is only intended for test purposes and should NOT be
  gpg: used in a production environment or with production keys!

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
8 years agoperl: fix CVE-2016-1238
Mingli Yu [Mon, 26 Sep 2016 06:00:42 +0000 (14:00 +0800)] 
perl: fix CVE-2016-1238

Backport patch to fix CVE-2016-1238 from perl upstream:
http://perl5.git.perl.org/perl.git/commitdiff/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab

(From OE-Core rev: 7d06ffcbcd0c71dc6dc9efde02bf0cd8d7c7d7e3)

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Fixed up to apply to 5.20.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agoperl: fix CVE-2015-8607
Mingli Yu [Wed, 21 Sep 2016 09:47:32 +0000 (17:47 +0800)] 
perl: fix CVE-2015-8607

Backport patch to fix CVE-2015-8607 from perl upstream:
http://perl5.git.perl.org/perl.git/commitdiff/0b6f93036de171c12ba95d415e264d9cf7f4e1fd

(From OE-Core rev: e2289647ace9ef96e6a7e4aae201fd9149e56678)

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
fixed up to apply to 5.22.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agoperl: fix CVE-2016-6185
Mingli Yu [Wed, 21 Sep 2016 09:47:31 +0000 (17:47 +0800)] 
perl: fix CVE-2016-6185

Backport patch to fix CVE-2016-6185 from perl upstream:
http://perl5.git.perl.org/perl.git/commitdiff/08e3451d7

(From OE-Core rev: 81e550d0c23c9842b85207cdfa73bbe9102e01fb)

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
fixed up to apply against 5.22.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agoperl: fix CVE-2016-2381
Kai Kang [Thu, 14 Jul 2016 08:53:08 +0000 (16:53 +0800)] 
perl: fix CVE-2016-2381

Backport patch to fix CVE-2016-2381 from perl upstream:

http://perl5.git.perl.org/perl.git/commitdiff/ae37b791a73a9e78dedb89fb2429d2628cf58076

(From OE-Core rev: 07ca8a0131f43e9cc2f720e1cdbcb7ba7c074886)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Fixed up to apply again 5.22.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotzdata: update to 2016g
Armin Kuster [Wed, 28 Sep 2016 23:42:35 +0000 (16:42 -0700)] 
tzdata: update to 2016g

LICENSE md5sum changed do to rewording some text not released to the license.
see https://github.com/eggert/tz/commit/8c143a2b65fdfd43a7911be6fdb700c9c4553f58

  Changes to future time stamps

    Turkey switched from EET/EEST (+02/+03) to permanent +03,
    effective 2016-09-07.  (Thanks to Burak AYDIN.)  Use "+03" rather
    than an invented abbreviation for the new time.

    New leap second 2016-12-31 23:59:60 UTC as per IERS Bulletin C 52.
    (Thanks to Tim Parenti.)

  Changes to past time stamps

    For America/Los_Angeles, spring-forward transition times have been
    corrected from 02:00 to 02:01 in 1948, and from 02:00 to 01:00 in
    1950-1966.

    For zones using Soviet time on 1919-07-01, transitions to UT-based
    time were at 00:00 UT, not at 02:00 local time.  The affected
    zones are Europe/Kirov, Europe/Moscow, Europe/Samara, and
    Europe/Ulyanovsk.  (Thanks to Alexander Belopolsky.)

  Changes to past and future time zone abbreviations

    The Factory zone now uses the time zone abbreviation -00 instead
    of a long English-language string, as -00 is now the normal way to
    represent an undefined time zone.

    Several zones in Antarctica and the former Soviet Union, along
    with zones intended for ships at sea that cannot use POSIX TZ
    strings, now use numeric time zone abbreviations instead of
    invented or obsolete alphanumeric abbreviations.  The affected
    zones are Antarctica/Casey, Antarctica/Davis,
    Antarctica/DumontDUrville, Antarctica/Mawson, Antarctica/Rothera,
    Antarctica/Syowa, Antarctica/Troll, Antarctica/Vostok,
    Asia/Anadyr, Asia/Ashgabat, Asia/Baku, Asia/Bishkek, Asia/Chita,
    Asia/Dushanbe, Asia/Irkutsk, Asia/Kamchatka, Asia/Khandyga,
    Asia/Krasnoyarsk, Asia/Magadan, Asia/Omsk, Asia/Sakhalin,
    Asia/Samarkand, Asia/Srednekolymsk, Asia/Tashkent, Asia/Tbilisi,
    Asia/Ust-Nera, Asia/Vladivostok, Asia/Yakutsk, Asia/Yekaterinburg,
    Asia/Yerevan, Etc/GMT-14, Etc/GMT-13, Etc/GMT-12, Etc/GMT-11,
    Etc/GMT-10, Etc/GMT-9, Etc/GMT-8, Etc/GMT-7, Etc/GMT-6, Etc/GMT-5,
    Etc/GMT-4, Etc/GMT-3, Etc/GMT-2, Etc/GMT-1, Etc/GMT+1, Etc/GMT+2,
    Etc/GMT+3, Etc/GMT+4, Etc/GMT+5, Etc/GMT+6, Etc/GMT+7, Etc/GMT+8,
    Etc/GMT+9, Etc/GMT+10, Etc/GMT+11, Etc/GMT+12, Europe/Kaliningrad,
    Europe/Minsk, Europe/Samara, Europe/Volgograd, and
    Indian/Kerguelen.  For Europe/Moscow the invented abbreviation MSM
    was replaced by +05, whereas MSK and MSD were kept as they are not
    our invention and are widely used.

  Changes to zone names

    Rename Asia/Rangoon to Asia/Yangon, with a backward compatibility link.
    (Thanks to David Massoud.)

(From OE-Core rev: d1341aeda6d9fa5d7f13afabadae60a6fc295b87)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotzcode-native: Update to 2016g
Armin Kuster [Wed, 28 Sep 2016 23:42:34 +0000 (16:42 -0700)] 
tzcode-native: Update to 2016g

LICENSE file checksum changed do to a verbage change.

  Changes to code

    zic no longer generates binary files containing POSIX TZ-like
    strings that disagree with the local time type after the last
    explicit transition in the data.  This fixes a bug with
    Africa/Casablanca and Africa/El_Aaiun in some year-2037 time
    stamps on the reference platform.  (Thanks to Alexander Belopolsky
    for reporting the bug and suggesting a way forward.)

    If the installed localtime and/or posixrules files are symbolic
    links, zic now keeps them symbolic links when updating them, for
    compatibility with platforms like OpenSUSE where other programs
    configure these files as symlinks.

    zic now avoids hard linking to symbolic links, avoids some
    unnecessary mkdir and stat system calls, and uses shorter file
    names internally.

    zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format.  This option is
    experimental, and the output format may change in future versions.
    (Thanks to Jon Skeet for suggesting that an option was needed,
    and thanks to Tim Parenti and Chris Rovick for further comments.)

  Changes to build procedure

    An experimental distribution format is available, in addition
    to the traditional format which will continue to be distributed.
    The new format is a tarball tzdb-VERSION.tar.lz with signature
    file tzdb-VERSION.tar.lz.asc.  It unpacks to a top-level directory
    tzdb-VERSION containing the code and data of the traditional
    two-tarball format, along with extra data that may be useful.
    (Thanks to Antonio Diaz Diaz, Oscar van Vlijmen, and many others
    for comments about the experimental format.)

    The release version number is now more accurate in the usual case
    where releases are built from a Git repository.  For example, if
    23 commits and some working-file changes have been made since
    release 2016g, the version number is now something like
    '2016g-23-g50556e3-dirty' instead of the misleading '2016g'.
    Official releases uses the same version number format as before,
    e.g., '2016g'.  To support the more-accurate version number, its
    specification has moved from a line in the Makefile to a new
    source file 'version'.

    The experimental distribution contains a file to2050.tzs that
    contains what should be the output of 'zdump -i -c 2050' on
    primary zones.  If this file is available, 'make check' now checks
    that zdump generates this output.

    'make check_web' now works on Fedora-like distributions.

  Changes to documentation and commentary

    tzfile.5 now documents the new restriction on POSIX TZ-like
    strings that is now implemented by zic.

    Comments now cite URLs for some 1917-1921 Russian DST decrees.
    (Thanks to Alexander Belopolsky.)

    tz-link.htm mentions JuliaTime (thanks to Curtis Vogt) and Time4J
    (thanks to Meno Hochschild) and ThreeTen-Extra, and its
    description of Java 8 has been brought up to date (thanks to
    Stephen Colebourne).  Its description of local time on Mars has
    been updated to match current practice, and URLs have been updated
    and some obsolete ones removed.

(From OE-Core rev: 19c365b23c3b835dcb5595aba598f35bf16a6d81)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotzcode-native: update to 2016f
Armin Kuster [Thu, 7 Jul 2016 01:35:13 +0000 (18:35 -0700)] 
tzcode-native: update to 2016f

changes done in data

(From OE-Core rev: 29377fa91a5f679909d582317c2b53d1f2e5da88)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotzdata: update to 2016f
Armin Kuster [Thu, 7 Jul 2016 01:35:14 +0000 (18:35 -0700)] 
tzdata: update to 2016f

 Changes affecting future time stamps

    The Egyptian government changed its mind on short notice, and
    Africa/Cairo will not introduce DST starting 2016-07-07 after all.
    (Thanks to Mina Samuel.)

    Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 at 02:00.
    (Thanks to Stepan Golosunov.)

  Changes to past and future time stamps

    Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time zone
    abbreviations instead of invented ones.

  Changes affecting past time stamps

    Europe/Minsk's 1992-03-29 spring-forward transition was at 02:00 not 00:00.
    (Thanks to Stepan Golosunov.)

(From OE-Core rev: dc80bf9b092a76f758d01474619cd9db46a1070d)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agoopenssl: Security fix CVE-2016-6306
Armin Kuster [Sat, 24 Sep 2016 06:18:57 +0000 (23:18 -0700)] 
openssl: Security fix CVE-2016-6306

affects openssl < 1.0.1i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssl: Security fix CVE-2016-6304
Armin Kuster [Sat, 24 Sep 2016 06:16:30 +0000 (23:16 -0700)] 
openssl: Security fix CVE-2016-6304

affects openssl < 1.0.1i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssl: Security fix CVE-2016-6303
Armin Kuster [Sat, 24 Sep 2016 06:14:36 +0000 (23:14 -0700)] 
openssl: Security fix CVE-2016-6303

affects openssl < 1.0.1i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssl: Security fix CVE-2016-6302
Armin Kuster [Sat, 24 Sep 2016 06:13:04 +0000 (23:13 -0700)] 
openssl: Security fix CVE-2016-6302

affects openssl < 1.0.1i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssl: Security fix CVE-2016-2182
Armin Kuster [Sat, 24 Sep 2016 06:11:28 +0000 (23:11 -0700)] 
openssl: Security fix CVE-2016-2182

affects openssl < 1.0.1i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssl: Security fix CVE-2016-2181
Armin Kuster [Sat, 24 Sep 2016 06:09:29 +0000 (23:09 -0700)] 
openssl: Security fix CVE-2016-2181

affects openssl < 1.0.1i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssl: Security fix CVE-2016-2180
Armin Kuster [Sat, 24 Sep 2016 06:06:10 +0000 (23:06 -0700)] 
openssl: Security fix CVE-2016-2180

affects openssl < 1.0.1i

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoinit-install.sh: fix disk_size
Robert Yang [Tue, 27 Sep 2016 14:15:36 +0000 (07:15 -0700)] 
init-install.sh: fix disk_size

It mis-matched "SanDisk" or "Disk Flags" before, which caused unexpected
error.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a68ac76c1b6ed4c1a2fbc944c5021c89fd26217f)
[YOCTO #10333]
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 years agoutil-linux: Security fix for CVE-2016-5011
Armin Kuster [Tue, 20 Sep 2016 04:51:14 +0000 (21:51 -0700)] 
util-linux: Security fix for CVE-2016-5011

affects util-linux < 2.28.2

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoqemu: Secuirty fix for CVE-2016-5403
Armin Kuster [Tue, 20 Sep 2016 03:01:16 +0000 (20:01 -0700)] 
qemu: Secuirty fix for CVE-2016-5403

affects qemu < 2.7.0-rc0

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoqemu: Security fix for CVE-2016-4002
Armin Kuster [Tue, 20 Sep 2016 02:56:19 +0000 (19:56 -0700)] 
qemu: Security fix for CVE-2016-4002

affects qemu < 2.6.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoqemu: Security fix CVE-2016-6351
Armin Kuster [Tue, 20 Sep 2016 02:52:57 +0000 (19:52 -0700)] 
qemu: Security fix CVE-2016-6351

affects qemu < 2.6.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoqemu: Security fix CVE-2016-4439
Armin Kuster [Tue, 20 Sep 2016 02:48:42 +0000 (19:48 -0700)] 
qemu: Security fix CVE-2016-4439

affects qemu < 2.6.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoqemu: Security Fix CVE-2016-3712
Armin Kuster [Tue, 20 Sep 2016 01:12:42 +0000 (18:12 -0700)] 
qemu: Security Fix CVE-2016-3712

affects qemu < 2.6.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoqemu: Security Fix CVE-2016-3710
Armin Kuster [Tue, 20 Sep 2016 01:02:55 +0000 (18:02 -0700)] 
qemu: Security Fix CVE-2016-3710

affects Qemu < 2.6.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agowget: Security fix CVE-2016-4971
Armin Kuster [Sun, 18 Sep 2016 05:33:07 +0000 (22:33 -0700)] 
wget: Security fix CVE-2016-4971

affects wget < 1.18.0

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssh: Security fix CVE-2015-8325
Armin Kuster [Sun, 18 Sep 2016 04:12:07 +0000 (21:12 -0700)] 
openssh: Security fix CVE-2015-8325

openssh <  7.2p2

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssh: Security fix CVE-2016-5615
Armin Kuster [Sun, 18 Sep 2016 04:09:43 +0000 (21:09 -0700)] 
openssh: Security fix CVE-2016-5615

openssh < 7.3

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agoopenssh: Security fix CVE-2016-6210
Armin Kuster [Sun, 18 Sep 2016 03:58:40 +0000 (20:58 -0700)] 
openssh: Security fix CVE-2016-6210

affects openssh < 7.3

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agogit: Security fix CVE-2016-2315 CVE-2016-2324
Armin Kuster [Sat, 17 Sep 2016 22:22:39 +0000 (15:22 -0700)] 
git: Security fix CVE-2016-2315 CVE-2016-2324

git versions < 2.5.5 & 2.7.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agobind: Security fix CVE-2016-2088
Armin Kuster [Sat, 17 Sep 2016 21:22:15 +0000 (14:22 -0700)] 
bind: Security fix CVE-2016-2088

Signed-off-by: Armin Kuster <akuster@mvista.com>
8 years agotiff: Security fix CVE-2016-5323
Yi Zhao [Wed, 10 Aug 2016 07:11:20 +0000 (15:11 +0800)] 
tiff: Security fix CVE-2016-5323

CVE-2016-5323 libtiff: a maliciously crafted TIFF file could cause the
application to crash when using tiffcrop command

External References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5323
http://bugzilla.maptools.org/show_bug.cgi?id=2559

Patch from:
https://github.com/vadz/libtiff/commit/2f79856097f423eb33796a15fcf700d2ea41bf31

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 4ad1220e0a7f9ca9096860f4f9ae7017b36e29e4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotiff: Security fix CVE-2016-5321
Yi Zhao [Wed, 10 Aug 2016 07:11:19 +0000 (15:11 +0800)] 
tiff: Security fix CVE-2016-5321

CVE-2016-5321 libtiff: a maliciously crafted TIFF file could cause the
application to crash when using tiffcrop command

External References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5321
http://bugzilla.maptools.org/show_bug.cgi?id=2558

Patch from:
https://github.com/vadz/libtiff/commit/d9783e4a1476b6787a51c5ae9e9b3156527589f0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 4a167cfb6ad79bbe2a2ff7f7b43c4a162ca42a4d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agotiff: Security fix CVE-2016-3186
Yi Zhao [Wed, 10 Aug 2016 07:11:18 +0000 (15:11 +0800)] 
tiff: Security fix CVE-2016-3186

CVE-2016-3186 libtiff: buffer overflow in the readextension function in
gif2tiff.c allows remote attackers to cause a denial of service via a
crafted GIF file

External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3186
https://bugzilla.redhat.com/show_bug.cgi?id=1319503

Patch from:
https://bugzilla.redhat.com/attachment.cgi?id=1144235&action=diff

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 3d818fc862b1d85252443fefa2222262542a10ae)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agolibpcre: Fix CVE-2016-3191
Ismo Puustinen [Wed, 4 May 2016 13:06:46 +0000 (16:06 +0300)] 
libpcre: Fix CVE-2016-3191

Fix workspace overflow for (*ACCEPT) with deeply nested parentheses.

The patch is from libpcre version control at
http://vcs.pcre.org/pcre?view=revision&revision=1631 with the ChangeLog
part removed. Original author is Philip Hazel.

Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 386534f968f4da376ba7778b5d436bad4ce8355b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agoopenssl: Security fix CVE-2016-2178
Armin Kuster [Sat, 16 Jul 2016 23:04:12 +0000 (16:04 -0700)] 
openssl: Security fix CVE-2016-2178

affects  openssl <=  1.0.2h
CVSS v2 Base Score: 2.1 LOW

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 5b3df0c5e8885ea34f66b41fcf209a9960fbbf5e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agoopenssl: Security fix CVE-2016-2177
Armin Kuster [Sat, 16 Jul 2016 23:04:11 +0000 (16:04 -0700)] 
openssl: Security fix CVE-2016-2177

Affects openssl <= 1.0.2h
CVSS v2 Base Score: 7.5 HIGH

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 2848c7d3e454cbc84cba9183f23ccdf3e9200ec9)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agoopenssl: add a patch to fix parallel builds
Ross Burton [Sat, 5 Mar 2016 00:12:02 +0000 (00:12 +0000)] 
openssl: add a patch to fix parallel builds

Apply a patch taken from Gentoo to hopefully fix the remaining parallel make
races.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 3d806d59a4c5e8ff35c7e7c5a3a6ef85e2b4b259)

Minor fixup to get patch to apply to jethro
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 years agocurl: security fix for CVE-2016-5421
Maxin B. John [Mon, 22 Aug 2016 08:39:33 +0000 (11:39 +0300)] 
curl: security fix for CVE-2016-5421

Affected versions: libcurl 7.32.0 to and including 7.50.0

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 years agocurl: security fix for CVE-2016-5420
Maxin B. John [Mon, 22 Aug 2016 08:39:32 +0000 (11:39 +0300)] 
curl: security fix for CVE-2016-5420

Affected versions: libcurl 7.1 to and including 7.50.0

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 years agocurl: security fix for CVE-2016-5419
Maxin B. John [Mon, 22 Aug 2016 08:39:31 +0000 (11:39 +0300)] 
curl: security fix for CVE-2016-5419

Affected versions: libcurl 7.1 to and including 7.50.0

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 years agoperl-ptest.inc: fix tar call to prevent objcopy failure
Enrico Jorns [Mon, 30 May 2016 13:04:05 +0000 (15:04 +0200)] 
perl-ptest.inc: fix tar call to prevent objcopy failure

With tar version 1.29, the tar call used to copy the ptest files will
not work anymore. While the call did not match the man page (but worked)
before, anyway, the latest update of tar seems to have a more strict argument
handling.

With the current version of the tar call, the copying of files still
works with latest tar version, but the excludes will not be handled
properly anymore.
This results in having binaries compiled with host GCC in the package.
When doing the strip_and_split files in do_package() with the target
objcopy, bitbake will fail with this error:

  ERROR: objcopy failed with exit code 256 (cmd was [...])
  [...]
  File format not recognized

Thus, the current argument issues and required changes are:

 * Options must be placed _before_ the pathnames.

 * --exclude must be followd by a '=' in order to work properly

 * 'f' options is for providing an archive file, which is unnecessary in
   this case

Note that this could also be a candidate for backporting.

(From OE-Core master rev: 2e498879098f7d84610aed7961d92433083d9a02)

Signed-off-by: Enrico Jorns <ejo@pengutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
9 years agogcc: make sure header path is set correctly
Anuj Mittal [Tue, 14 Jun 2016 09:10:20 +0000 (17:10 +0800)] 
gcc: make sure header path is set correctly

We're setting the native header paths in do_configure_prepend,
and don't need to set them again here.

This results in gcc-target not being able to locate the headers
and not being able to detect glibc version, which in turn
results in SSP support not getting detected even though it's available
in libc.

(From OE-Core master rev: 85630aa894278e7818c867179dc19ca2fbd994fc)

Signed-off-by: Anuj Mittal <anujx.mittal@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
9 years agotzdata: update to 2016e
Armin Kuster [Tue, 14 Jun 2016 21:50:22 +0000 (14:50 -0700)] 
tzdata: update to 2016e

Changes affecting future time stamps

Africa/Cairo observes DST in 2016 from July 7 to the end of October.
Guess October 27 and 24:00 transitions. (Thanks to Steffen Thorsen.)
For future years, guess April's last Thursday to October's last
Thursday except for Ramadan.

Changes affecting past time stamps

Locations while uninhabited now use '-00', not 'zzz', as a
placeholder time zone abbreviation.  This is inspired by Internet
RFC 3339 and is more consistent with numeric time zone
abbreviations already used elsewhere.  The change affects several
arctic and antarctic locations, e.g., America/Cambridge_Bay before
1920 and Antarctica/Troll before 2005.

Asia/Baku's 1992-09-27 transition from +04 (DST) to +04 (non-DST) was
at 03:00, not 23:00 the previous day.  (Thanks to Michael Deckers.)

(From OE-Core master rev: ddcf128e76ed0678ce42416531f4ecb309c57439)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
9 years agotzcode: update to 2016e
Armin Kuster [Tue, 14 Jun 2016 21:50:21 +0000 (14:50 -0700)] 
tzcode: update to 2016e

V2: typo in title (jet lagged)
Changes to code

zic now outputs a dummy transition at time 2**31 - 1 in zones
whose POSIX-style TZ strings contain a '<'.  This mostly works
around Qt bug 53071 <https://bugreports.qt.io/browse/QTBUG-53071>.
(Thanks to Zhanibek Adilbekov for reporting the Qt bug.)

Changes affecting documentation and commentary

tz-link.htm says why governments should give plenty of notice for
time zone or DST changes, and refers to Matt Johnson's blog post.
tz-link.htm mentions Tzdata for Elixir.  (Thanks to Matt Johnson.)

(From OE-Core master rev: 5f3340e5c966f4233e0cd4ec468b20a1fd5a7346)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
9 years agowic: fix path parsing, use last occurrence
George McCollister [Fri, 13 May 2016 14:22:53 +0000 (09:22 -0500)] 
wic: fix path parsing, use last occurrence

If the path contains 'scripts' more than once the first occurrence will be
incorrectly used. Use rfind instead of find to find the last occurrence.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
9 years agobluez5: move btmgmt to common READLINE section
Nicolas Dechesne [Wed, 25 May 2016 15:19:53 +0000 (17:19 +0200)] 
bluez5: move btmgmt to common READLINE section

Upstream in 5.33 btmgmt was moved from experimental to common READLINE section,
in commit e4f0c5582f1fe3451d5588243adba9de1ed68b80, but this was never updated
in the recipe.

This is a backport from master branch, commit
28777e593d3dd3a5d0ee2effcdca6a971e2887f9.

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
9 years agolibxml2: Security fix for CVE-2016-4448
Armin Kuster [Sat, 9 Jul 2016 22:20:50 +0000 (15:20 -0700)] 
libxml2: Security fix for CVE-2016-4448

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-4447
Armin Kuster [Sat, 9 Jul 2016 22:12:44 +0000 (15:12 -0700)] 
libxml2: Security fix for CVE-2016-4447

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-3627
Armin Kuster [Sat, 9 Jul 2016 22:06:40 +0000 (15:06 -0700)] 
libxml2: Security fix for CVE-2016-3627

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-1833
Armin Kuster [Sat, 9 Jul 2016 22:03:43 +0000 (15:03 -0700)] 
libxml2: Security fix for CVE-2016-1833

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-1835
Armin Kuster [Sat, 9 Jul 2016 22:02:26 +0000 (15:02 -0700)] 
libxml2: Security fix for CVE-2016-1835

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-1837
Armin Kuster [Sat, 9 Jul 2016 22:01:15 +0000 (15:01 -0700)] 
libxml2: Security fix for CVE-2016-1837

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-4449
Armin Kuster [Sat, 9 Jul 2016 21:59:57 +0000 (14:59 -0700)] 
libxml2: Security fix for CVE-2016-4449

Affects limbxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-1836
Armin Kuster [Sat, 9 Jul 2016 21:58:22 +0000 (14:58 -0700)] 
libxml2: Security fix for CVE-2016-1836

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-1839
Armin Kuster [Sat, 9 Jul 2016 21:57:08 +0000 (14:57 -0700)] 
libxml2: Security fix for CVE-2016-1839

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-1838
Armin Kuster [Sat, 9 Jul 2016 21:55:49 +0000 (14:55 -0700)] 
libxml2: Security fix for CVE-2016-1838

Affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-1840
Armin Kuster [Sat, 9 Jul 2016 21:54:21 +0000 (14:54 -0700)] 
libxml2: Security fix for CVE-2016-1840

affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-4483.patch
Armin Kuster [Sat, 9 Jul 2016 21:31:00 +0000 (14:31 -0700)] 
libxml2: Security fix for CVE-2016-4483.patch

affects libxml2 < 2.9.4

Signed-off-by: Armin Kuster <akuster@mvista.com>
9 years agolibxml2: Security fix for CVE-2016-1834.patch
Armin Kuster [Sat, 9 Jul 2016 21:29:54 +0000 (14:29 -0700)] 
libxml2: Security fix for CVE-2016-1834.patch

Signed-off-by: Armin Kuster <akuster@mvista.com>