summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Revert "gcab: ignore buildpaths error from sources"Martin Jansa2024-09-091-3/+0
| | | | | | | | | | | | | | | | | | | | | This reverts commit e11df061339051eda38750fa75429778d3d8dbb4. This isn't needed in scarthgap where buildpaths aren't in default ERROR_QA and it's not a correct fix anyway, see https://lists.openembedded.org/g/openembedded-devel/message/112048 This doesn't work with multilib where the package is named ${PN}-src (e.g. lib32-gcab-src) and it's better to just lower buildpaths from ERROR_QA to WARN_QA instead of skipping it completely, because it's still an issue which should be fixed (at least to improve hashserv efficiency if you don't care about reproducibility itself) and commits in master: https://git.openembedded.org/meta-openembedded/commit/?id=154f5bb1342739d88185ac0cce9c15b7b2958187 https://git.openembedded.org/meta-openembedded/commit/?id=6644c4a420db82da1ce71697ff889e7b1b6e41ad Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-flask-cors: Fix CVE-2024-6221Soumya Sambu2024-09-092-0/+114
| | | | | | | | | | | | | | | | | | A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions. References: https://nvd.nist.gov/vuln/detail/CVE-2024-6221 Upsteam-Patch: https://github.com/corydolphin/flask-cors/commit/7ae310c56ac30e0b94fb42129aa377bf633256ec Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-flatbuffers: provide nativesdk supportakash hadke2024-09-091-1/+1
| | | | | | | | nativesdk support is needed in some of the projects for codegeneration Signed-off-by: Nisha Parrakat <nisha.m.parrakat@bmw.de> Signed-off-by: Akash Hadke <akash.hadke27@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-twisted: Fix CVE-2024-41671Soumya Sambu2024-08-253-0/+345
| | | | | | | | | | | | | | | | | Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1. References: https://nvd.nist.gov/vuln/detail/CVE-2024-41671 Upstream-patches: https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8914df33 https://github.com/twisted/twisted/commit/4a930de12fb67e88fefcb8822104152f42b27abc Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gtk+: Fix CVE-2024-6655Soumya Sambu2024-08-252-0/+41
| | | | | | | | | | | | | | A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory. References: https://nvd.nist.gov/vuln/detail/CVE-2024-6655 Upstream-patch: https://gitlab.gnome.org/GNOME/gtk/-/commit/3bbf0b6176d42836d23c36a6ac410e807ec0a7a7 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2024-26458 and CVE-2024-26461Yogita Urade2024-08-252-0/+208
| | | | | | | | | | | | | | | | | | | | CVE-2024-26458: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26461: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2024-26458 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 Upstream Patch: https://github.com/krb5/krb5/commit/c5f9c816107f70139de11b38aa02db2f1774ee0d Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* poppler: CVE-2024-6239Yogita Urade2024-08-213-0/+1388
| | | | | | | | | | | | | | | | | | | | A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service. CVE-2024-6239-0002 is the CVE fix and CVE-2024-6239-0001 is dependent commit to fix the CVE. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-6239 Upstream patch: https://gitlab.freedesktop.org/poppler/poppler/-/commit/0554731052d1a97745cb179ab0d45620589dd9c4 https://gitlab.freedesktop.org/poppler/poppler/-/commit/fc1c711cb5f769546c6b31cc688bf0ee7f0c1dbc Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nginx: Backport fix for CVE-2024-7347Ashish Sharma2024-08-213-0/+88
| | | | | | | Upstream-Status: Backport [https://github.com/nginx/nginx/commit/88955b1044ef38315b77ad1a509d63631a790a0f and https://github.com/nginx/nginx/commit/7362d01658b61184108c21278443910da68f93b4] Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* netplan: add missing runtime dependenciesEsben Haabendal2024-08-211-0/+1
| | | | | | | | | | | The json module is used in several cli commands. The fcntl module is used in terminal input handling. Signed-off-by: Esben Haabendal <esben@geanix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cb50c930964bac0394020949c7efe0a4a06f3b89) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* networkmanager: remove modemmanager rdependsAdrian Freihofer2024-08-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | This reverts commit: 5edb8335dc46450fd6bcdbb3fcf55336b32bd422 The Networkmanager package must not depend on ModemManager. Only the Networkmanager-wwan package should depend on the ModemManager package. The mobile-broadband-provider-info is fully optional and it is often not required for embedded devices. Let the user choose if it gets installed or not. Adding it explicitely to IMAGE_INSTALL is simple. Adding an RRECOMMENS would work as well. But adding an RDEPENDS is bad. In general, NetworkManager packaging is intended to provide a set of binary packages suitable for building many different images. NetworkManager is designed to be used for binary packages distributions where it is not possible to rebuild NetworkManager just to install Modemmanager. Also for OE, where a rebuilding is possible, a rebuild is a disadvantage. So please do not destroy this flexibility by adding RDEPENDS, which are firstly wrong and secondly only suitable for your specific needs. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* squid: patch CVE-2024-37894Peter Marko2024-08-212-0/+37
| | | | | | | Reference: https://github.com/squid-cache/squid/security/advisories/GHSA-wgvf-q977-9xjg Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libndp: Patch CVE-2024-5564Peter Marko2024-08-212-0/+49
| | | | | | | Pick https://github.com/jpirko/libndp/commit/05e4ba7b0d126eea4c04387dcf40596059ee24af.patch Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cjson: upgrade 1.7.17 -> 1.7.18Wang Mingyu2024-08-211-1/+1
| | | | | | | | | | | | | | | | Changelog: ============ * Add NULL check to cJSON_SetValuestring()(CVE-2024-31755) * Remove non-functional list handling of compiler flags * Fix heap buffer overflow * remove misused optimization flag -01 * Set free'd pointers to NULL whenever they are not reassigned immediately after Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (From meta-openembedded rev: 535822eff7647b6363225bb8f04d2d7d59a71204) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libjs-jquery-icheck: Correct LIC_FILES_CHKSUMPeter Kjellerstedt2024-08-141-1/+1
| | | | | | | | | Only include the lines from icheck.js that cover the copyright and the license text. License-Update: Only include the relevant parts of icheck.js Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hostapd: Only include the relevant parts from README in LIC_FILES_CHKSUMPeter Kjellerstedt2024-08-141-1/+1
| | | | | | | | | Only include the lines from the README that cover the copyright and the license text. License-Update: Only include the relevant parts of the README Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hostapd: Support running "devtool modify hostapd"Peter Kjellerstedt2024-08-141-8/+5
| | | | | | | For "devtool modify" to work correctly, ${B} needs to match ${S}. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pydantic-core: add missing RDEPENDS for ptestFrank de Brabander2024-08-141-0/+2
| | | | | | | | | | | | | | Signed-off-by: Frank de Brabander <debrabander@gmail.com> Add missing RDEPENDS for ptest: - python3-zoneinfo - tzdata Similar to fixes in Styhead 110b636836348530ec4965ebd3ee753928f21b44 but for 2.18.4 and without needing to add the python3-tzdata recipe. Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pydantic-core: fix TMPDIR path referenceFrank de Brabander2024-08-142-2/+49
| | | | | | | | | | | | | | | | | | | | Backport a new upstream fix to remove the TMPDIR reference from the rust code. Signed-off-by: Frank de Brabander <debrabander@gmail.com> We've seen TMPDIR [build-paths] contamination in the built pydantic_core/_pydantic_core.cpython-*-*-linux-gnu.so See discussion upstream in: https://github.com/pydantic/pydantic-core/issues/1365 Backport fix from: https://github.com/pydantic/pydantic-core/commit/e07c41b3bad75948201a2201387225694c2fb501 Similar to Styhead 6f0a41130c0dcf80e22f6f3fd93d39369c235693, but for 2.18.4 Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pydantic: upgrade 2.7.3 -> 2.7.4Tim Orling2024-08-141-1/+1
| | | | | | | | | | | | | | | | | | https://docs.pydantic.dev/latest/changelog/#v274-2024-06-12 What's Changed * Packaging - Bump pydantic.v1 to v1.10.16 reference by @sydney-runkle in #9639 * Fixes - Specify recursive_guard as kwarg in FutureRef._evaluate by @vfazio in #9612 Full commit log: https://github.com/pydantic/pydantic/compare/v2.7.3...v2.7.4 Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pydantic-core: fix incompatible versionFrank de Brabander2024-08-145-201/+82
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The recipe for pydantic currently is at version 2.7.3. This project specifies in its pyproject.toml that it depends on pydantic-core version 2.18.4. Because an older 2.16.3 version of pydantic-core was used now, a simple bit of code will break. from enum import Enum from pydantic import BaseModel class Color(str, Enum): RED = "RED" BLUE = "BLUE" class Car(BaseModel): color: Color print(Car(color=Color.RED)) This will upgrade the python3-pydantic-core recipe to make it compatible with python3-pydantic, so that the above snippet of code will no longer fail. Two patches are removed, these backports are now included in the upstream code. A new patch is added to set the required rust compiler from 1.76 to 1.75. Version 1.76 is not actually needed. File python3-pydantic-core-crates.inc is regenerated by running 'bitbake -c update_crates python3-pydantic-core'. The recipes RDEPENDS now includes python3-compression. The pydantic schema validator imports 'importlib.metadata' which wants to import 'zipfile'. The buildpaths QA check is skipped. This should be fixed at some point, but it was already failing before this change. Signed-off-by: Frank de Brabander <debrabander@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Backport from Styhead bee8b9bbc48e5ee9a4b67aed09027e62143eb34c as part of the overall scarthgap fix Fix typo in python3-pydantic version, it was 2.7.3 not 2.7.2 Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pydantic: Upgrade to 2.7.3Khem Raj2024-08-141-1/+1
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> For full changelog, see: https://github.com/pydantic/pydantic/compare/v2.7.1...v2.7.3 Highlights: v2.7.3 (2024-06-03) Bump pydantic-core to v2.18.4 by @sydney-runkle in #9550 v2.7.2 (2024-05-28) Bump pydantic-core to v2.18.3 by @sydney-runkle in #9515 Backport from Styhead a45050c6433818e2196bc9e9ceaf2fb9ceec7095 as part of the overall scarthgap fix Fix typo in version number, it was upgraded to 2.7.3, not 2.7.2 Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pydantic: upgrade 2.7.0 -> 2.7.1Wang Mingyu2024-08-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ -Bump pydantic-core to v2.18.2 -Ftp and Websocket connection strings support -Use field description for RootModel schema description when there is no docstring -Fix validation_alias behavior with model_construct for AliasChoices and AliasPath -Revert typing.Literal and import it outside the TYPE_CHECKING block -Fix Secret serialization schema, applicable for unions -Fix strict application to function-after with use_enum_values -Address case where model_construct on a class which defines model_post_init fails with AttributeError -Fix model_json_schema with config types -Support multiple zeros as an int -Fix validation of ints with leading unary plus -Fix interaction between extra != 'ignore' and from_attributes=True -Handle error from Enum's missing function as ValidationError -Fix memory leak with Iterable validation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Backport from Styhead 6112eb064ccaf7b9c74b285e3fc070bab0343340 as part of the overall scarthgap fix Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* jsonrpc: Fix contains reference to TMPDIR [buildpaths] warningalperak2024-08-141-0/+4
| | | | | | | | | WARNING: jsonrpc-1.4.1-r0 do_package_qa: QA Issue: File /usr/lib/libjson-rpc-cpp/cmake/libjson-rpc-cppTargets.cmake in package jsonrpc-dev contains reference to TMPDIR [buildpaths] Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cb2e8f98b4d758bd7b7f399c529d6d96e7594b97) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* exiv2: Upgrade 0.28.2 to 0.28.3 for CVE fixalperak2024-08-101-1/+1
| | | | | | | | | | | | | | | | | | Release Notes: * https://github.com/Exiv2/exiv2/issues/3008 * https://github.com/Exiv2/exiv2/milestone/14?closed=1 This release also fixes a low-severity security issue in asfvideo.cpp: * [CVE-2024-39695](https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh): out-of-bounds read in AsfVideo::streamProperties. This vulnerability is in a new feature (ASF video) that was added in version 0.28.0, so earlier versions of Exiv2 are not affected. Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9f4361418d58941d058fb94a3671b9d0904b6300) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* exiv2: update 0.28.0 -> 0.28.2Markus Volk2024-08-102-19/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Remove outdated comment - Switch to git fetcher. Otherwise the official download location leads to: WARNING: exiv2-0.28.2-r0 do_recipe_qa: QA Issue: exiv2: SRC_URI uses unstable GitHub/GitLab archives, convert recipe to use git protocol [src-uri-bad] - Remove reproducibility hack. Theres no buildpath leakage in exiv2Config.cmake anymore. Changes from version 0.28.1 to 0.28.2 ------------------------------------- Release Notes: * https://github.com/Exiv2/exiv2/issues/2914 * https://github.com/Exiv2/exiv2/milestone/13?closed=1 This release also fixes two low-severity security issues in quicktimevideo.cpp: * [CVE-2024-24826](https://github.com/Exiv2/exiv2/security/advisories/GHSA-g9xm-7538-mq8w): out-of-bounds read in QuickTimeVideo::NikonTagsDecoder. * [CVE-2024-25112](https://github.com/Exiv2/exiv2/security/advisories/GHSA-crmj-qh74-2r36): denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder. These vulnerabilities are in a new feature (quicktime video) that was added in version 0.28.0, so earlier versions of Exiv2 are not affected. Changes from version 0.28.0 to 0.28.1 ------------------------------------- Release Notes: https://github.com/Exiv2/exiv2/issues/2813 This release also fixes [CVE-2023-44398](https://github.com/Exiv2/exiv2/security/advisories/GHSA-hrw9-ggg3-3r4r), an out-of-bounds write in `BmffImage::brotliUncompress`. The vulnerability is in new code that was added in version 0.28.0, so earlier versions of Exiv2 are not affected. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 3a9fc5ba68d8c121e70c018d4f4a782693def40b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* imagemagick: Update status for CVENinette Adhikari2024-08-101-1/+41
| | | | | | | | | | | | Update status for: CVE-2016-7532, CVE-2014-9822, CVE-2014-9823, CVE-2014-9824, CVE-2014-9825, CVE-2014-9826, CVE-2014-9827, CVE-2014-9828, CVE-2014-9829, CVE-2014-9830, CVE-2014-9831, CVE-2014-9848, CVE-2014-9852, CVE-2014-9853, CVE-2014-9854, CVE-2014-9907, CVE-2016-10062, CVE-2016-10144, CVE-2016-10145, CVE-2016-10146, CVE-2016-5118, CVE-2016-7513, CVE-2016-7514, CVE-2016-7515, CVE-2016-7516, CVE-2016-7517, CVE-2016-7518, CVE-2016-7519, CVE-2016-7520, CVE-2016-7521, CVE-2016-7522, CVE-2016-7523, CVE-2016-7524, CVE-2016-7525, CVE-2016-7526, CVE-2016-7527, CVE-2016-7528, CVE-2016-7529, CVE-2016-7530, CVE-2016-7533 CPE is incorrect, the current version is not affected. Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f8c70167e6a00ad1d2d8ee5675e2c84d59f2dfd5) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* imagemagick: Update status for CVENinette Adhikari2024-08-101-0/+10
| | | | | | | | | | | | Update status for: CVE-2016-7534, CVE-2016-7535, CVE-2016-7536, CVE-2016-7537, CVE-2016-7538, CVE-2017-5506, CVE-2017-5509, CVE-2017-5510, CVE-2017-5511, CVE-2007-1667 CPE is incorrect, the current version (7.1.1) is not affected. Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9f2e9daef1891d373792d5b1bcc36719349ba843) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* imagemagick: Update status for CVENinette Adhikari2024-08-101-0/+20
| | | | | | | | | | | | Update status for: CVE-2014-9804, CVE-2014-9805, CVE-2014-9806, CVE-2014-9807, CVE-2014-9808, CVE-2014-9809, CVE-2014-9810, CVE-2014-9811, CVE-2014-9812, CVE-2014-9813, CVE-2014-9814, CVE-2014-9815, CVE-2014-9816, CVE-2014-9817, CVE-2014-9818, CVE-2014-9819, CVE-2014-9820, CVE-2014-9821, CVE-2016-7531 CPE is incorrect, the current version (7.1.1) is not affected. Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 388b8017f9c86428d5965f8c45d64f4477984ac0) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* etcd-cpp-apiv3: Fix contains reference to TMPDIR [buildpaths] warningalperak2024-08-101-0/+4
| | | | | | | | | WARNING: etcd-cpp-apiv3-0.15.4-r0 do_package_qa: QA Issue: File /usr/lib/cmake/etcd-cpp-api/etcd-targets.cmake in package etcd-cpp-apiv3-dev contains reference to TMPDIR [buildpaths] Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a70cacd0c25dbeb641e364ecc0e28fc4b924e59b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tayga: Fix contains reference to TMPDIR [buildpaths] warningalperak2024-08-101-0/+3
| | | | | | | | | | | WARNING: tayga-0.9.2-r0 do_package_qa: QA Issue: File /usr/sbin/.debug/tayga in package tayga-dbg contains reference to TMPDIR [buildpaths] Make sure that the OE provided CFLAGS are passed to the compiler. Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d1bf2db7cc2bcb8b6ac45bb382c3f2b6bb762053) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* log4cpp: Fix buildpaths QA errorKhem Raj2024-08-101-0/+4
| | | | | | | | | Fixes do_package_qa: QA Issue: File /usr/bin/log4cpp-config in package log4cpp contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 78a69186be5db3f6995101e0f94a1d11e1155421) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* znc: Fix buildpaths QA errorsJ. S.2024-08-101-0/+1
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 28d77dddad1c86ac5771859e59504e662eb68813) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libjcat: skip buildpaths checkMikko Rapeli2024-08-101-0/+2
| | | | | | | | | | Test binary has embedded build time paths. Ignore for now. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e02e22063433adb1b4fbba562f9efd6e68941309) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gcab: ignore buildpaths error from sourcesMikko Rapeli2024-08-101-0/+3
| | | | | | | | | | | | | gcab-src has some meson generated files which embed absolute paths from build environment. meson seems ot do this on purpose to fix other issues. Ignored those issues for now. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit db91757e7bd98494666ca00bc7727a7607b6004f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fwupd: skip buildpaths errorsMikko Rapeli2024-08-101-0/+2
| | | | | | | | | | | Test binaries are embeddding build paths and can't easily figure out why. Thus ignore the errors in these binaries for now. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e77f9f2feb6b9b9c86e3d815415e4bb521444538) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-grpcio: backport abseil-cpp RISC-V fixScott Murray2024-08-102-0/+83
| | | | | | | | | | | | | | Backport upstream abseil-cpp fix[1] for SIGILL crash on RISC-V with 6.6 and newer kernels. The patch has been tweaked to apply on top of the existing patch stack to the vendored copy of abseil-cpp. [1]: https://github.com/abseil/abseil-cpp/commit/7335a36d (cherry-picked from 080287ebe1f6958088871194f8ae5674edd41589) Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-grpcio: Fix build with gcc-14Scott Murray2024-08-102-0/+75
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * crypto: use _Generic only if !defined(__cplusplus) * fixes build with gcc-14 which has __builtin_addc and __builtin_subc with gcc-13 it was already using the #else branch because of missing builtins * fixes https://github.com/grpc/grpc/issues/35945 http://errors.yoctoproject.org/Errors/Details/766916/ * _Generic was introduced in boringssl with: https://boringssl.googlesource.com/boringssl/+/70ca6bc24be103dabd68e448cd3af29b929b771d%5E%21/#F4 * but e.g. third_party/boringssl-with-bazel/src/ssl/d1_both.cc includes this internal.h and from the .cc extension gcc will process it as C++ where _Generic isn't available, causing: In file included from third_party/boringssl-with-bazel/src/ssl/d1_both.cc:125: third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h: In function 'uint32_t CRYPTO_addc_u32(uint32_t, uint32_t, uint32_t, uint32_t*)': third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h:1159:7: error: expected primary-expression before 'unsigned' 1159 | unsigned: __builtin_addc, \ | ^~~~~~~~ third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h:1166:10: note: in expansion of macro 'CRYPTO_GENERIC_ADDC' 1166 | return CRYPTO_GENERIC_ADDC(x, y, carry, out_carry); | ^~~~~~~~~~~~~~~~~~~ third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h:1160:7: error: expected primary-expression before 'unsigned' 1160 | unsigned long: __builtin_addcl, \ | ^~~~~~~~ third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h:1166:10: note: in expansion of macro 'CRYPTO_GENERIC_ADDC' 1166 | return CRYPTO_GENERIC_ADDC(x, y, carry, out_carry); | ^~~~~~~~~~~~~~~~~~~ third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h:1161:7: error: expected primary-expression before 'unsigned' 1161 | unsigned long long: __builtin_addcll))((x), (y), (carry), (out_carry)) | ^~~~~~~~ third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h:1166:10: note: in expansion of macro 'CRYPTO_GENERIC_ADDC' 1166 | return CRYPTO_GENERIC_ADDC(x, y, carry, out_carry); | ^~~~~~~~~~~~~~~~~~~ third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h:1158:4: error: '_Generic' was not declared in this scope 1158 | (_Generic((x), \ | ^~~~~~~~ third_party/boringssl-with-bazel/src/ssl/../crypto/internal.h:1166:10: note: in expansion of macro 'CRYPTO_GENERIC_ADDC' 1166 | return CRYPTO_GENERIC_ADDC(x, y, carry, out_carry); | ^~~~~~~~~~~~~~~~~~~ (cherry picked from commit 5778e32eae201072c5dc37c9db67dc1848ffb9de) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libatasmart: Update SRC_URIChangqing Li2024-08-101-1/+1
| | | | | | | Update SRC_URI to fix do_fetch warning Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pavucontrol: update SRC_URIChangqing Li2024-08-101-1/+1
| | | | | | | | | | Server's https certificate isn't valid for freedesktop.org without www prefix, refer [1]. Update SRC_URI to fix do_fetch warning [1] https://gitlab.freedesktop.org/freedesktop/freedesktop/-/issues/1537 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pydantic-core: Fix build with python 3.12.4Khem Raj2024-08-032-1/+31
| | | | | | | | | | This needs to be upgraded to 2.19+ but until then backport a fix to keep it building. Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Tim Orling <ticotimo@gmail.com> (cherry picked from commit 39d164f0c33d24f40e676aac152dfe50f2c00695) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hdf5: upgrade to 1.14.4Yogita Urade2024-08-032-40/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release notes: https://github.com/HDFGroup/hdf5/blob/hdf5_1.14.4.3/release_docs/RELEASE.txt License update: link update from https://raw.githubusercontent.com/hdfgroup/hdf5/develop/COPYING_LBNL_HDF5 to https://raw.githubusercontent.com/hdfgroup/hdf5/hdf5_1_14/COPYING_LBNL_HDF5. Upstream has only Released tar file extension is .gz so SRC_URI tar file extension changed from .bz2 to .gz Fixes File /usr/lib/libhdf5.settings in package hdf5 contains reference to TMPDIR File /usr/src/debug/hdf5/1.14.4-3/src/H5build_settings.c in package hdf5-src contains reference to TMPDIR [buildpaths] - Running H5make_libsettings is no longer required for cross-compiling The functionality of H5make_libsettings is now handled via template files, so H5make_libsettings has been removed. - Running H5detect is no longer required for cross-compiling The functionality of H5detect is now exercised at library startup, so H5detect has been removed Rework the patch 0001-cmake-remove-build-flags.patch to fix the build path issue. Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: Break perl RDEPENDSBarry Grussling2024-08-031-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | Currently, any non-native recipes that inherits cpan-base ends up with an image RDEPENDS on perl (via https://git.yoctoproject.org/poky/tree/meta/classes-recipe/cpan-base.bbclass?h=scarthgap#n14) If you are building an image and desire to have Postgresql installed but NOT perl, this creates a problem. This changeset attempts to fix this shortcoming by not inheriting cpan-base directly. Note this work is a continuation of attempts to change cpan-base: https://bugzilla.yoctoproject.org/show_bug.cgi?id=15563 The Postgresql build system uses perl, so add it as a DEPENDS. This happened previously via the "inherit cpan-base" directive. I've validated this recipe successfully packages with and without the perl PACKAGECONFIG in Scarthgap. Signed-off-by: Barry Grussling <mr.scada@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f311f1f01c19924d8cced61fa915f1387f92455b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tree: fix broken linksBenjamin Szőke2024-08-031-2/+2
| | | | | | | | | | | | | New tarball location is: http://oldmanprogrammer.net/tar/tree/ Homepage is: http://oldmanprogrammer.net/source.php?dir=projects/tree Signed-off-by: Benjamin Szőke <egyszeregy@freemail.hu> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0c4079fc28cc36cb2dbfe48093f2cf64106f8b5d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* uutils-coreutils: upgrade 0.0.26 -> 0.0.27Etienne Cordonnier2024-08-032-89/+123
| | | | | | | | See https://github.com/uutils/coreutils/releases/tag/0.0.27 Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* uutils-coreutils: upgrade 0.0.25 -> 0.0.26Etienne Cordonnier2024-08-032-41/+67
| | | | | | | | See https://github.com/uutils/coreutils/releases/tag/0.0.26 Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-email-validator: upgrade 2.1.0 -> 2.1.1Wang Mingyu2024-08-031-2/+2
| | | | | | | | | | | | | | | | | | | | Changelog: ========== - Fixed typo 'marking' instead of 'marketing' in case-insensitive mailbox name list. - When DNS-based deliverability checks fail, in some cases exceptions are now thrown with raise ... from for better nested exception tracking. - Fixed tests to work when no local resolver can be configured. - This project is now licensed under the Unlicense (instead of CC0). - Minor improvements to tests. - Minor improvements to code style. License-Update: Relicense under the Unlicense (instead of CC0) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0dd1264a9499b213ff9edd3618ea2a3e8fae9c56) Signed-off-by: Richard Leitner <dev@g0hl1n.net> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* graphviz: fix CVE-2023-46045Yogita Urade2024-08-034-0/+111
| | | | | | | | | | | | | | | | | | | | Graphviz 2.36 before 10.0.0 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root. CVE-2023-46045-0003.patch is the CVE fix and CVE-2023-46045-0001.patch, CVE-2023-46045-0002.patch are dependent commits to fix the CVE. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-46045 Upstream patches: https://gitlab.com/graphviz/graphviz/-/commit/361f274ca901c3c476697a6404662d95f4dd43cb https://gitlab.com/graphviz/graphviz/-/commit/3f31704cafd7da3e86bb2861accf5e90c973e62a https://gitlab.com/graphviz/graphviz/-/commit/a95f977f5d809915ec4b14836d2b5b7f5e74881e Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-werkzeug: upgrade 3.0.1 -> 3.0.3Soumya Sambu2024-08-031-2/+2
| | | | | | | | | | | | | | Includes fix for CVE-2024-34069 The license didn't change but the file was renamed. Changelog: ========== https://github.com/pallets/werkzeug/blob/3.0.3/CHANGES.rst https://github.com/pallets/werkzeug/blob/3.0.2/CHANGES.rst Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-sqlparse: Fix CVE-2024-4340Soumya Sambu2024-08-032-0/+49
| | | | | | | | | | | | | | Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. References: https://nvd.nist.gov/vuln/detail/CVE-2024-4340 Upstream-patch: https://github.com/andialbrecht/sqlparse/commit/b4a39d9850969b4e1d6940d32094ee0b42a2cf03 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-protobuf: remove useless and problematic .pth fileChen Qi2024-08-031-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Our python3-protobuf is installed in standard site-packages location, there's no need for an extra .pth file. So this .pth is useless. What's worse, this .pth file is problematic for python 3.12 ptest. It will cause the following test case to hang forever: test.test__xxsubinterpreters.CreateTests.test_in_thread I've filed an issue[1] for cpython. Until the problem is resolved there, we should avoid packaging this .pth file. In fact, Debian also removes this file in the rules file, though their reason for removal is likely that the file is useless. rules: find $(CURDIR)/debian/python3-protobuf -name 'protobuf-*-nspkg.pth' -delete Some more information below, just for better tracking: 1. That .pth file is way too complicated according to .pth design[2]. 2. The subinterpreter is not offically part of python, at least for 3.12. The PEP[3][4] has not been accepted. The test__xxsubinterpreter is a preparation for it. [1] https://github.com/python/cpython/issues/122220 [2] https://docs.python.org/3/library/site.html [3] https://peps.python.org/pep-0554/ [4] https://peps.python.org/pep-0554/ Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 22:47:01 +0000