summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-04-06openssh: update 6.7p1 -> 7.4p1V2.5-nextMarcel Ziswiler
This is basically a back port of the following commits from the openembedded-core master branch: openssh: upgrade to 7.4p1 openssh: fix CVE-2016-8858 openssh: fix potential signed overflow to enable compilation with -ftrapv openssh: Upgrade 7.2p2 -> 7.3p1 openssh: add ed25519 host key location to read-only sshd config openssh: conditional compile DES code. openssh: fix init script restart with read-only-rootfs openssh: update homepage and summary openssh: Backport fix for CVE-2015-8325 openssh: Upgrade 7.1p2 -> 7.2p2 openssh: change URI to http: openssh: Security Fix CVE-2016-3115 openssh: Properly skip ptrace test if tools are missing openssh: Fix regex that sets sftp-server path for tests openssh: CVE-2016-1907 openssh: update to 7.1p2 openssh: redesign ssh-agent.sh regression test case openssh: enable X11Forwarding if distro feature x11 is set openssh: fix file permission for /etc/pam.d/sshd openssh: fix sshd key generation when systemd is in use and rootfs is readonly openssh: Upgrade 7.0p1 -> 7.1p1 openssh: build regression test binaries openssh: Upgrade 6.9p1 -> 7.0p1 openssh: Upgrade 6.8p1 -> 6.9p1 openssh: fix login fails for ssh -o Batchmode=yes with empty passwords openssh: Upgrade 6.7 - > 6.8 Revert "openssh: CVE-2015-6563 CVE-2015-6564 CVE-2015-6565" Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2017-04-06openssh: clean-up double folder nestingMarcel Ziswiler
Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2017-04-06openssl: update 1.0.2d -> 1.0.2kMarcel Ziswiler
This is basically a back port of the following commits from the openembedded-core master branch: openssl: actually apply Use-SHA256-not-MD5-as-default-digest.patch openssl: Fix symlink creation openssl: Updgrade 1.0.2j -> 1.0.2k openssl: Use linux-aarch64 target for aarch64 openssl-native: Compile with -fPIC openssl: Security fix CVE-2016-7055 OpenSSL: CVE-2004-2761 replace MD5 hash algorithm openssl: fix bashism in c_rehash shell script openssl: rehash actual mozilla certificates inside rootfs openssl: Upgrade 1.0.2i -> 1.0.2j openssl.inc: avoid random ptest failures openssl: update to 1.0.2i (CVE-2016-6304 and more) openssl: fix do_configure error when cwd is not in @INC openssl: fix add missing dependencies building for test directory openssl: Security fix CVE-2016-2178 openssl: Security fix CVE-2016-2177 openssl: prevent warnings from openssl-c_rehash.sh openssl: fix the dangling libcrypto.a symlink openssl: Ensure SSL certificates are stored on sysconfdir openssl: Add Shell-Script based c_rehash utility openssl: Security fix via update to 1.0.2h openssl.inc: minor packaging cleanup openssl: don't move libcrypto to base_libdir openssl: add a patch to fix parallel builds openssl: Security fix Drown via 1.0.2g update openssl.inc: drop obsolete mtx-1 and mtx-2 over-rides openssl: Explicitly set EXTRA_OEMAKE as required openssl: update 1.0.2e -> 1.0.2f ( CVE-2016-0701 CVE-2015-3197 ) openssl: Add musl configuration support openssl: update to 1.0.2e openssl: enable parallel make openssl: fix ptest issues openssl: use subdir= instead of moving files in do_configure_prepend() openssl: sanity check that the bignum module is present openssl: fix ptest failures Note that this requires a complete image rebuild due to ABI breakage. If that is not desired something along those lines would need to be integrated as well: http://cgit.openembedded.org/openembedded-core/commit?id=480db6be99f9a53d8657b31b846f0079ee1a124f Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2016-03-23Added missing Thumb feeds to known issuesStefan Agner
Some packages are only built in plain ARM architecture (non-Thumb). Those packages are currently not in the feeds, which leads at non resolveable dependencies (e.g. for gst-plugins-base-meta). Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
2016-03-21linux-toradex-fsl-rt: Added a real-time kernel recipeBrandon Shibley
New real-time iMX6 machine configurations were added along with a real-time kernel recipe with a modified PREEMPT_RT patch to accomodate the backports applied to our kernel. To select the kernel use a preferred provider variable in your configuration files (e.g. local.conf): PREFERRED_PROVIDER_virtual/kernel = "linux-toradex-fsl-rt" Signed-off-by: Brandon Shibley <brandon.shibley@toradex.com> [removed -rt machines] Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
2016-03-14python: add a PACKAGECONFIG for _tkinterMax Krummenacher
Currently _tkinter is only built when tcl/tk is available before the python do_configure task is built. Make this deterministic by providing a PACKAGECONFIG for it. If tkinter is in PACKAGECONFIG add the needed dependencies, if not force that tkinter is not built. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com>
2016-03-14images: trdx-extra: Enable USB suspend resume fix for VybridSanchayan Maity
Enable USB suspend resume fix for Vybrid. Signed-off-by: Sanchayan Maity <maitysanchayan@gmail.com> Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
2016-03-14recipes-support: usb-suspend-resume: Add USB suspend resume fix for VybridSanchayan Maity
Add systemd service which utilises systemd's suspend resume hooks to excute scripts which take care of unbinding and binding the necessary configurations and usb driver during suspend and resume respectively. Signed-off-by: Sanchayan Maity <maitysanchayan@gmail.com> Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
2016-03-14gdk-pixbuf_%.bbappend: build for x11 dependend on DISTROFEATURESMax Krummenacher
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2016-03-14Apalis_iMX6_LinuxReleaseNotesV2.x.txt: document update_it bugMax Krummenacher
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2016-03-14flash_eth.scr: allow image sizes > 640M for eMMC modulesMax Krummenacher
When using TFTP update, the rootfs must be in decimal numbered chunks on the tftp server. U-Boot reads the chunks, but does count hexadecimal thus limiting the number of chunks to 10. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2016-03-14Apalis iMX6 IT: fix U-Boot flash scriptMax Krummenacher
The U-Boot binary for the IT temperature range changed names from u-boot-it.imx to u-boot.imx-it. The flash_*.scr scripts did still use the old name resulting in the U-Boot not being found on the SD card or TFTP server. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2016-03-14gpioconfig: add binary for colibri-imx6Max Krummenacher
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2016-03-14gpioconfig: add dummy binary for unsupported machinesMax Krummenacher
Avoids WARNING: Unable to get checksum for gpioconfig SRC_URI entry GPIOConfig: file could not be found during recipe parse by providing a dummy GPIOConfig. The dummy displays a popup with a button that says that the program is not available on this machine. (cherry picked from commit e6959294ac99c87c7aabe2334d6582618ea3a825) Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-17Updated release notes.V2.5Marcel Ziswiler
Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com> Acked-by: Max Krummenacher <max.krummenacher@toradex.com>
2015-12-15feeds: use new Toradex feed as default feed URIColibri_iMX6_LinuxImageV2.5Beta3_20151215Colibri_VF_LinuxImageV2.5Beta3_20151215Colibri_T30_LinuxImageV2.5Beta3_20151215Colibri_T20_LinuxImageV2.5Beta3_20151215Apalis_iMX6_LinuxImageV2.5Beta3_20151215Apalis_T30_LinuxImageV2.5Beta3_20151215Stefan Agner
Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15Apalis iMX6: flash scripts, add update_uboot_itMax Krummenacher
This has been missing since our move to boot from the eMMC boot partition. While at it clarify update.sh help. _it applies only to Apalis iMX6 IT modules. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15linux-firmware: backport rtl8192cx: Add latest available firmwareMax Krummenacher
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15Update all U-Boot versions to latestMax Krummenacher
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15linux-toradex_4.1: update to latest revisionMax Krummenacher
Update to latest revision which contains a SPI bugfix and the latest upstream stable release v4.1.15. Also synchronize the VF defconfig. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15linux-toradex-fsl: update to latest revisionMax Krummenacher
Update to latest revision which fixes Colibri iMX6D not powerering off but creating a stacktrace. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15linux-toradex: update to latest revisionMax Krummenacher
Update to latest revision. While at it remove the module specific override of SRCREV and PR and set the git branch with its own variable. While at it use 4 spaces to indent code as customary in recipes. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15linux-toradex_4.1: convert recipe to bbappendMax Krummenacher
We have this recipe in meta-fsl-arm-extra. Convert it to a bbappend and only keep the changes to the bb files. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15Apalis iMX6: U-Boot: change name for IT modulesMax Krummenacher
Change the name form u-boot-it.imx to u-boot.imx-it. This prepares for the upcomming move of the i.MX 6 based modules BSP to meta-fsl-arm-extra. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15colibri-imx6 flash scripts: move partconf setting to be lastMax Krummenacher
The command 'mmc partconf 0 1 1 0' seems to have no effect when it is in the middle of our migration cmdline resulting in U-Boot still being loaded from the user partition. Putting it as the last command seems to solve the issue. http://developer.toradex.com/software-resources/arm-family/linux/linux/release-details?view=all&issue=14774 Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15Colibri iMX6: updated release notesMax Krummenacher
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15README: Add README with dependency and contribution informationStefan Agner
Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15colibri_vf: updated defconfig enables RTL8192CU driverStefan Agner
Enable RTL8192CU driver to support LM006 USB WiFi adapter. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15images: add rtl8192cu firmware for LM006 USB WiFi adapterBhuvanchandra DV
The LM006 USB WiFi adapter uses a Realtek RTL8188CUS chipset, which requires the compatible firmware RTL8192CU. Signed-off-by: Bhuvanchandra DV <bhuvanchandra.dv@toradex.com> Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
2015-12-15libusbg: make sure USB RNDIS Gadget is started before networkdStefan Agner
Despite the reordering of when to load the USB Gadget configuration with commit fadb16f153aa ("libusbg: enable USB Gadgets after Connman to avoid interference") the network device ended up to be down after startup. It seems that there is a race condition in systemd-networkd which triggers especially in combination with USB Gadget, a issue on the systemd issue tracker has been created: https://github.com/systemd/systemd/issues/1784 There have been various changes related to link handling between systemd 219 and the latest version 227. It is possible that the issue is already solved. Until this has been resolved, explicitly load the USB Gadget before starting systemd-networkd seems to get around the issue. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-12-15create_configblock.sh: remove from deployment tarballMax Krummenacher
With the cfgblock command in U-Boot we now have a better solution. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Acked-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-11-10glibc_2.21: force memcpy_arm to improve memcpy performanceMax Krummenacher
A meta-toolchain build or a build which does not use the angstrom distro builds glibc_2.21 rather than glibc_linaro-2.20. The patch to not use the slower memcpy implemented for NEON does not apply cleanly for both versions of glibc. This adds a bbappend for glibc_2.21 forcing memcpy_arm.
2015-11-10glibc: apply bbappend only to linaro_2.20Max Krummenacher
0001-memcpy-don-t-use-optimized-for-VFP-NEON-versions.patch applies not to oe glibc_2.21
2015-11-09Apalis/Colibri iMX6: updated release notesMax Krummenacher
2015-11-06Updated release notes.Marcel Ziswiler
Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-11-06Update Tegra Linux kernel to latest.Colibri_iMX6_LinuxImageV2.5Beta2_20151106Colibri_VF_LinuxImageV2.5Beta2_20151106Colibri_T30_LinuxImageV2.5Beta2_20151106Colibri_T20_LinuxImageV2.5Beta2_20151106Apalis_iMX6_LinuxImageV2.5Beta2_20151106Apalis_T30_LinuxImageV2.5Beta2_20151106Marcel Ziswiler
Signed-off-by: Marcel Ziswiler <marcel.ziswiler@toradex.com>
2015-11-05Apalis/Colibri iMX6: fix and unify update scriptsMax Krummenacher
Don't write the eMMC twice on Apalis in the not migrate case.
2015-11-04Apalis/Colibri iMX6: Update Linux kernel to latestMax Krummenacher
2015-11-04Apalis iMX6: modify update scripts to work also on V1.0 HWMax Krummenacher
2015-11-04linux: fix B != SMarcel Ziswiler
2015-11-04apalis/colibri_imx6/t20/t30: add version/git hash to KernelStefan Agner
Add LOCALVERSION and generate a scmversion file to annotate the Kernel with the Toradex release and a git hash.
2015-11-04libusbg: enable USB Gadgets after Connman to avoid interferenceStefan Agner
It seems that Connman disables ALL interfaces on startup, even if they are listed in NetworkInterfaceBlacklist. This leads to the following situation: networkd starts... usb0 gets created... networkd sets the device up (event triggered) connman starts... and sets the device down! networkd does not restart the device in this situation. To avoid the situation, create the USB Gadget functions after connman. It seems that if connman is up and running, it does not touch the device anymore.
2015-11-04apalis/colibri_imx6: update/load USB Gadget ConfigFS automaticallyStefan Agner
Since we use USB Gadget ConfigFS now use libusbg to load the USB Gadget configuration automatically.
2015-11-04local.conf: enable USB CDC ACM console for Vybrid based devicesStefan Agner
The Vybrid devices use a composite gadget device by default which offers a serial connection over USB on the USB peripheral port. This enables a serial console on that tty.
2015-11-03Update Linux kernel and U-Boot to latest.Marcel Ziswiler
2015-11-03apalis/colibri_t20/t30: change default tune to thumb-2Marcel Ziswiler
Change DEFAULTTUNE in machine configurations to Thumb-2.
2015-11-03local.conf: add Toradex source mirror as pre-mirrorStefan Agner
To download the sources mirrored on sources.toradex.com add the Toradex mirror as pre-mirror.
2015-11-03update.sh: set board_name for Colibri VF50/VF61Stefan Agner
Up until now, U-Boot for Colibri VF50/VF61 did not had an environment variable board_name. Use the soc environment variable to set the board_name.
2015-11-03update.sh: load fwd_blk from fwd_mmcStefan Agner
To avoid code duplication call fwd_blk from fwd_mmc. This adds one more indirection, but since flash_mmc.img is a compatibility script anyway it is not the common case...
2015-11-03update.sh: source update script only if loaded successfullyStefan Agner
Source the update script only if loading succeeded. This avoids loops if board_name is not set. Also add a test if board_name is really set since this variable is/was not available in older U-Boots.
generated by cgit v1.2.3 (git 2.0.4) at 2024-04-24 09:36:24 +0000