summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* nftables: change ptest output formatJiaying Song2024-07-231-2/+6
| | | | | | | | | This change adds a simple format for the skip results. The format selected is the automake "simple test" format: "result: testname" Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* giflib: fix build with gold and avoid imagemagick-native dependencyMartin Jansa2024-07-233-45/+39
| | | | | | | | | * avoid imagemagick-native like upstream did in: https://sourceforge.net/p/giflib/code/ci/d54b45b0240d455bbaedee4be5203d2703e59967/ Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bolt: package systemd_system_unitdir correctlyMartin Jansa2024-07-231-2/+2
| | | | | | | | | | | | | | | * ${libdir}/systemd doesn't work on multilib builds, where libdir might be something else than ${nonarch_base_libdir} fixes: ERROR: QA Issue: lib32-bolt: Files/directories were installed but not shipped in any package: /usr/lib/systemd /usr/lib/systemd/system /usr/lib/systemd/system/bolt.service Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* rrdtool: Fix do_populate_sysroot QA issuesJiaying Song2024-07-231-0/+5
| | | | | | | | | | | | | | | | | | | | | This commit addresses the shebang size issue encountered in the do_populate_sysroot task of the rrdtool-native recipe. The issue was caused by the shebang line in the cgi-demo.cgi file exceeding the maximum allowed length of 128 characters. The following error was observed: ERROR: rrdtool-native-1.8.0-r0 do_populate_sysroot: QA Issue: : /work/x86_64-linux/rrdtool-native/1.8.0/sysroot-destdir/work/x86_64-linux/rrdtool-native/1.8.0/recipe-sysroot-native/usr/share/rrdtool/examples/cgi-demo.cgi maximum shebang size exceeded, the maximum size is 128. [shebang-size] ERROR: rrdtool-native-1.8.0-r0 do_populate_sysroot: do_populate_sysroot for this recipe installed files with QA issues  The solution implemented involves modifying the shebang line in the cgi-demo.cgi file to use '/usr/bin/env rrdcgi', ensuring it adheres to the length limit. Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 05c17b63fe0bbc7f94154017f2c54237576df94c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* opencl-clhpp: add native and nativesdkRandolph Sapp2024-07-171-0/+2
| | | | | | | | | This is a header only package. It may be useful to the native machine but it is definitely useful for the nativesdk machine. Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openbox: fix crash on alt+tab with fullscreen appAlexandre Videgrain2024-07-172-0/+57
| | | | | | | | | | | | | | Apply an openbox patch to openbox recipe to fix crashes on alt+tab with fullscreen app. Github issue: https://github.com/openembedded/meta-openembedded/issues/837 Signed-off-by: Alexandre Videgrain <alexandre.videgrain@smile.fr> Suggested-by: Ludovic Jozeau <ludovic.jozeau@smile.fr> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 85132c16210d1bdf83e8be5b3da4f430ce7b4b91) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-meta-oe: fix lvgl inclusionYoann Congal2024-07-171-1/+1
| | | | | | | | | | | | | | | | | | | Since commit f7fedd156374 ("lvgl: Upgrade to LVGL 9 series"): * lv-drivers and lv-lib-png packages do not exist anymore * lvgl does not depend on "wayland" being in DISTRO_FEATURES This fixes these warnings (e.g. from AB[0]): Nothing RPROVIDES 'lv-lib-png' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) Nothing RPROVIDES 'lv-drivers' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cda9ade9fb9662d11b6e956844db7c8202b9902b) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* wireshark: upgrade 4.2.4 -> 4.2.5Vijay Anusuri2024-07-171-1/+1
| | | | | | | | | | | | | | | The following vulnerabilities have been fixed: wnpa-sec-2024-07 MONGO and ZigBee TLV dissector infinite loops. Issue 19726. CVE-2024-4854. wnpa-sec-2024-08 The editcap command line utility could crash when chopping bytes from the beginning of a packet. Issue 19724. CVE-2024-4853. wnpa-sec-2024-09 The editcap command line utility could crash when injecting secrets while writing multiple files. Issue 19782. CVE-2024-4855. Release Notes: https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* v4l-utils: Install media ctrl header and library filesNeel Gandhi2024-07-172-0/+79
| | | | | | | | | | | | | Commit 9389d63fdddcab400cb0b243b74d47bf665aba18 removed a previous patch that caused the recipe to install the header and library files. Restore this behavior to the new meson based build system. Signed-off-by: Neel Gandhi <neel.gandhi@amd.com> Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5f453c3401e20eb5489fac4d3b54a5bf96d019ab) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdbd-mysql-perl: avoid invoking assert_lib at do_configure stageChen Qi2024-07-092-1/+43
| | | | | | | | | | | | | | | | The assert_lib from perl package will execute the generated binary. This is not suitable for cross compilation environment such as OE. In OE, if the libs are not available, the following do_compile task will just fail. So we should avoid invoking assert_lib at do_configure stage to avoid error message like below in log.do_configure: /usr/lib64/ld-linux-aarch64.so.1: No such file or directory Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatbuffers: adapt for cross-compilation environmentsBINDU2024-07-091-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | Flatbuffers contains a library and a schema compiler. The package contains cmake files to discover the libraries and the compiler tool. Currently, all of these cmake files are installed into the target sysroot. However, the compiler utility isn't installed into the sysroot (as it is not runnable on the build machine). When an application that depends on flatbuffers gets built, it uses flatbuffers' exported cmake targets to configure the project. One of the exported targets is FlatcTarget.cmake which expects to see flatc binary in /usr/bin of the sysroot. Since binaries for target don't end up in target sysroot, cmake configuration fails. This patch addresses this problem of flatbuffers' build infrastructure in cross-compiling environments. By removing FlatcTarget.cmake for target builds from the sysroot we essentially skip this step of flatbuffers' configuration. Signed-off-by: Ivan Stepic <Ivan.Stepic@bmw.de> Signed-off-by: Bhabu Bindu <bindudaniel1996@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit b97dbaac6629e22138f71ae19eb421d041447619) Signed-off-by: Akash Hadke <akash.hadke27@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pyyaml-include: support native and nativesdk buildRandy MacLeod2024-07-091-1/+1
| | | | | | | | | backport from master: 56e2e5df9 python3-pyyaml-include: support native and nativesdk build Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: upgrade 1.21.2 -> 1.21.3Vijay Anusuri2024-07-091-2/+2
| | | | | | | | | | | CVEs Fixed CVE-2024-37370, CVE-2024-37371 Release Notes: https://web.mit.edu/kerberos/krb5-1.21/krb5-1.21.3.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* thin-provisioning-tools: install missed thin_shrink and era_repairLibo Chen2024-07-091-3/+5
| | | | | | | Install missed thin_shrink and era_repair for thin provisioning Signed-off-by: Libo Chen <libo.chen.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apache2: Upgrade 2.4.59 -> 2.4.60Siddharth Doshi2024-07-091-1/+1
| | | | | | | | | | | | | | | | | | | CVE's Fixed by upgrade: CVE-2024-36387 apache2/httpd: DoS by null pointer in websocket over HTTP/2 CVE-2024-38472 apache2/httpd: UNC SSRF on WIndows CVE-2024-38473 apache2/httpd: Encoding problem in mod_proxy CVE-2024-38474 apache2/httpd: Substitution encoding issue in mod_rewrite CVE-2024-38475 apache2/httpd: Improper escaping of output in mod_rewrite CVE-2024-38476 apache2/httpd: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect CVE-2024-38477 apache2/httpd: null pointer dereference in mod_proxy CVE-2024-39573 apache2/httpd: Potential SSRF in mod_rewrite Other Changes between 2.4.59 -> 2.4.60 ====================================== https://github.com/apache/httpd/blob/2.4.60/CHANGES Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-oe/conf/layer.conf: remove libbpf from NON_MULTILIB_RECIPES for x86 and ↵Wentao Zhang2024-06-271-0/+3
| | | | | | | | | | | | x86-64 libbpf supports x86_64 and i.86, remove libbpf from NON_MULTILIB_RECIPES for x86 and x86-64 Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d06a9c504928f3369568e8db3b53be368f465e1d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade to 8.2.20Soumya Sambu2024-06-261-1/+1
| | | | | | | | | | Includes fix for CVE-2024-5458, CVE-2024-2408 and other bugs Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vulkan-cts: add workaround for createMeshShaderMiscTestsEXTRandolph Sapp2024-06-261-0/+3
| | | | | | | | | | | | | | | | | | Remove the CXX flag "-O2" for GCC 13 and 14. There's a bug with ARM GCC that breaks the iteration of "types" in the createMeshShaderMiscTestsEXT function. This issue is not present for clang or x86_64 GCC 14. It seems that the array is not initialized before the first iteration. In testing this can result in a random value being used. This can manifest in LINES type being processed twice, resulting in the following error: FATAL ERROR: Failed to initialize dEQP: Test case with non-unique name 'no_lines' added to group 'misc'. Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cjson: fix buildpath warningsPeter Marko2024-06-261-0/+5
| | | | | | | | | | | | | | | Following warning occurs when building with ptests enabled: WARNING: cjson-1.7.17-r0 do_package_qa: QA Issue: File /usr/lib/cjson/ptest/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR File /usr/lib/cjson/ptest/tests/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR File /usr/lib/cjson/ptest/fuzzing/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR [buildpaths] The cmake files also contain full paths to original CMakeLists.txt file in _BACKTRACE_TRIPLES property; These are not needed for successful ptests as we don't install the CMakeLists.txt files anyway. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tcpdump: fix CVE-2024-2397Hitendra Prajapati2024-06-262-0/+130
| | | | | | | Upstream-Status: Backport from https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tipcutils: Add systemd supportVijay Anusuri2024-06-262-1/+11
| | | | | | | | | | | | Install tipc kernel module explictly. tipcutils.conf is added to modules-load.d to load the required tipc kernel module. Ref: http://tipc.io/getting_started.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 93a0667456b978ce9317fdadd2f38880b1f5494e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* jemalloc: add +git to versionPeter Marko2024-06-241-1/+3
| | | | | | | | | | | jemalloc was switched from tag to development branch 171 commit ahead. Adapt PV accordingly. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 53f608235a20793324ad9d0587392d26079f7cc6) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* daq: fix incompatible pointer type errorKai Kang2024-06-242-0/+32
| | | | | | | | | | | | | | | | Fix incompatible pointer type error for daq: | ../../daq-2.0.7/os-daq-modules/daq_nfq.c: In function 'SetPktHdr': | ../../daq-2.0.7/os-daq-modules/daq_nfq.c:394:37: error: passing argument 2 of 'nfq_get_payload' from incompatible pointer type [-Wincompatible-pointer-types] | 394 | int len = nfq_get_payload(nfad, (char**)pkt); | | ^~~~~~~~~~~ | | | | | char ** Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hiredis: change ptest output formatZhang Peng2024-06-171-1/+16
| | | | | | | | | | This change consolidates the output format of the ptest command into a single common format. The format selected is the automake "simple test" format: "result: testname" Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* re2: rework solibs handlingPeter Marko2024-06-171-1/+2
| | | | | | | | This is cleaner way how to package unversioned libraries which was suggested during review of the last commit. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* re2: remove dev dependencies from main packagePeter Marko2024-06-171-4/+1
| | | | | | | | | | | | | It's a bad idea to add dev dependencies to main package. It's pulling build dependencies including toolchain items. The dependencies "were needed" because main package contains packageconfig file. This can be fixed by correct packaging. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwebsockets: remove STAGING_LIBDIR with /Martin Jansa2024-06-171-2/+2
| | | | | | | | | | | | | | | | | | | * after buildpath warnings fix from: https://git.openembedded.org/meta-openembedded/commit/?id=eeef1fddd9052bed4b1a91565260518eb042fed2 the LibwebsocketsTargets.cmake ends with: INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/libcap.so;-lpthread" instead of: INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/OE/build/.../libwebsockets/4.3.3/lib32-recipe-sysroot/usr/lib/libcap.so;-lpthread" which causes e.g. mosquitto to fail in do_compile with: ninja: error: '/libcap.so', needed by 'src/mosquitto', missing and no known rule to make it * this happens only when libwebsocket is built with libcap enabled (by libcap in DEPENDS) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwebsockets: fix buildpath warningsGerard Salvatella2024-06-171-0/+2
| | | | | | | | | | In order to remove absolute paths from the cmake artifacts, paths from the `$lib` folder should also be stripped off, otherwise internally linked libraries (e.g. libz) may appear. Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* uriparser: upgrade 0.9.7 -> 0.9.8Wang Mingyu2024-06-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== * Protect against integer overflow in ComposeQueryEngine * Protect against integer overflow in ComposeQueryMallocExMm * Require CMake >=3.5.0 * CMake option URIPARSER_SHARED_LIBS=(ON|OFF) to control, whether to produce a shared or static library for uriparser and that alone, falls back to standard BUILD_SHARED_LIBS if available, else defaults to "ON" * Document that scheme-based normalization a la section 6.2.3 of RFC 3986 is a responsibility of the application using uriparser * Document supported code points for functions uriEscape(Ex)W * Update Clang from 15 to 18 * Adapt to breaking changes in Clang packaging * Get sanitizer CFLAGS and LDFLAGS back in sync * Pin GitHub Actions to specific commits for security Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libgpiod: update to v2.1.2Bartosz Golaszewski2024-06-171-1/+1
| | | | | | | | | | | | This is a small bugfix release that fixes a build issue with slibtool (not relevant to meta-oe ATM), makes the licensing of C++ bindings less restrictive and preemptively fixes an issue that will be triggered with linux v6.9 when running gpio-tools ptest suite. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libfido2: remove non-functional native and nativesdk BBCLASSEXTENDYoann Congal2024-06-171-2/+0
| | | | | | | | | | | | | | | | | | | | | | | libfido2 depends on udev and libcbor which do not exist for native and nativesdk targets. Remove native & nativesdk from BBCLASSEXTEND to avoid hitting these in world/universe builds. Fixes these warnings (as seen on AB[0]): WARNING: Nothing PROVIDES 'nativesdk-udev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'nativesdk-libcbor' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'libcbor-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'udev-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing RPROVIDES 'nativesdk-libfido2-dev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it) WARNING: Nothing RPROVIDES 'nativesdk-libfido2' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Cc: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1a3d194eb3552eb948ca61dffcb9dbe2710f516b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* giflib: upgrade to version 5.2.2nikhil2024-06-172-3/+48
| | | | | | | | | | | | | | | | | | | Upgrade to latest version giflib v5.2.2. This version fixes bugs listed in link below: Link: https://sourceforge.net/p/giflib/code/ci/5.2.2/tree/NEWS Fixes for CVE-2023-48161, CVE-2022-28506, CVE-2023-39742 Link: https://clients.neighbourhood.ie/yocto/1-40.html#:~:text=CVE%2D2023%2D39742%3A%20giflib%3Agiflib%2Dnative Added dependency on ImageMagick which includes "convert" utility, to ensure availability of required tool during compilation process. Add patch to rename binary used in Makefile from "convert" to "convert.im7" as installed by imagemagick package. Signed-off-by: Bhabu Bindu <bhabubindu@kpit.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nano: Security fix for CVE-2024-5742Siddharth Doshi2024-06-172-1/+104
| | | | | | | | | | Upstream-Status: Backport from [https://git.savannah.gnu.org/cgit/nano.git/commit/?id=5e7a3c2e7e118c7f12d5dfda9f9140f638976aa2] CVE's Fixed: CVE-2024-5742 nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* abseil-cpp: backport RISC-V fixScott Murray2024-06-172-0/+83
| | | | | | | | | | | Backport upstream fix[1] for SIGILL crash on RISC-V with 6.6 and newer kernels. The patch has been tweaked to apply on top of the existing stack. [1]: https://github.com/abseil/abseil-cpp/commit/7335a36d Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: Update SRC tarball pathVijay Anusuri2024-06-171-1/+1
| | | | | | | Fix WARNING: Failed to fetch URL https://c-ares.org/download/c-ares-1.27.0.tar.gz Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pytest-html: add missing runtime dependenciesgr embeter2024-06-171-0/+2
| | | | | | | | | | | | Upstream toml file mentions Jinja2 and pytest-metadata as runtime dependencies. Link: https://github.com/pytest-dev/pytest-html/blob/cfd32d08488e2c6fb72f0617db94ab41d3fca8d0/pyproject.toml#L42 Signed-off-by: Grygorii Tertychnyi <grygorii.tertychnyi@leica-geosystems.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit ca28badd147afdb11b8ee785b277bc9797d012fe) Signed-off-by: Grygorii Tertychnyi <grembeter@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* unixodbc: Fix CVE-2024-1013Soumya Sambu2024-06-172-0/+54
| | | | | | | | | | | | | An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken. References: https://nvd.nist.gov/vuln/detail/CVE-2024-1013 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-twisted: remove obsolete python3-twisted-flowGuðni Már Gilbert2024-06-171-18/+0
| | | | | | | | | | | | | | The flow module was removed in Twisted 9.0.0 a long time and currently does not install anything. Let's remove it to cleanup the recipe. This commit also removes python3-twisted-news package because the source files were removed in Twisted 21.2.0. All other files which no longer exist in the source are also removed from FILES. Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-twisted: prepend split PACKAGESGuðni Már Gilbert2024-06-171-1/+1
| | | | | | | | | Fixes an issue where split packages were no populated since all the files were picked up by FILES:${PN} Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-grpcio: fix do_compile failure for qemuppc64/qemuppcChangqing Li2024-06-172-0/+38
| | | | | | | | | define proper macro for ppc/ppc64 to fix compile error Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pcapplusplus: Fix build with gcc14Khem Raj2024-06-023-1/+73
| | | | | | | | | | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> ---- v2] Scarthgap has the same error as master: initialize timespec variable. pcapplusplus/23.09/git/Packet++/src/RawPacket.cpp:23:18: error: 'nsec_time.timespec::<anonymous>' is used uninitialized [-Werror=uninitialized] | 23 | timespec nsec_time; | | ^~~~~~~~~ | cc1plus: all warnings being treated as errors
* squid: workaround a build failure with native gcc10Yoann Congal2024-06-021-0/+5
| | | | | | | | | | | | | | | | | | | | | When build on Debian 11 (gcc10), squid fails to build[0] because of a bug[1] in the configure step (it mixes options between old native compiler and recent target compiler: the former needs the std=c++17 option, the latter doesn't). The workaround is to force the "-std=c++17" option for the native build. NB: Our Buildroot friends have the same workaround[2]. [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/23/steps/28/logs/stdio [1]: https://bugs.squid-cache.org/show_bug.cgi?id=5376 Bug closed as invalid by upstream [2]: https://github.com/buildroot/buildroot/blob/932b52fad87d79d9f26a343edafe2981079de16e/package/squid/squid.mk#L24 Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: upgrade 16.2 -> 16.3Wang Mingyu2024-06-023-3/+3
| | | | | | | | | | | | 0003-configure.ac-bypass-autoconf-2.69-version-check.patch refreshed for 16.3 Changelog: https://www.postgresql.org/docs/release/16.3/ Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatpak: update 1.15.6 -> 1.15.8Markus Volk2024-06-023-64/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - remove included patches - set path for fusermount3 to avoid requirement for fuse3-native. This is needed since: https://github.com/flatpak/flatpak/commit/2cb17b4eb82ecedaa98b5b7f954cf3e52fa95682 Changes in 1.15.8 ~~~~~~~~~~~~~~~~~ Security fixes: * Don't allow an executable name to be misinterpreted as a command-line option for bwrap(1). This prevents a sandbox escape where a malicious or compromised app could ask xdg-desktop-portal to generate a .desktop file with access to files outside the sandbox. (CVE-2024-32462) Other bug fixes: * Pass the -export-dynamic linker option as -Wl,-export-dynamic, fixing build failures with clang 18 and lld 18 (#5760) * Fix a double-free when installation is cancelled (#5763) * Fix installed-tests failure with "FUSERMOUNT: unbound variable" (#5751) * Translation updates: pt_BR (#5762), tr (#5761) Changes in 1.15.7 ~~~~~~~~~~~~~~~~~ Released: 2024-03-27 Dependencies: * The Meson build system is now required. Compiling with Autotools is no longer possible. * In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.9.0 is recommended. Several of the bug fixes listed below will not be active if an older version is used. * In distributions that compile Flatpak to use a separate xdg-dbus-proxy executable, version 0.1.5 is recommended. * If libmalcontent (parental controls) is enabled, it must be version 0.5.0 or later. New features: * Automatically remove obsolete driver versions and other autopruned refs (#5632) * `--socket=inherit-wayland-socket` (#5614) * Automatically reload D-Bus session bus configuration after installing or upgrading apps, to pick up any exported D-Bus services (#3342) Bug fixes: * Update included copy of bubblewrap to version 0.9.0: * `--symlink` is now idempotent, meaning it succeeds if the symlink already exists and already has the desired target (#2387, #3477, #5255) * Report a better error message if `mount(2)` fails with `ENOSPC` * Fix a double-close on error reading from `--args`, `--seccomp` or `--add-seccomp-fd` argument * Improve memory allocation behaviour * Silence various compiler warnings * Update included copy of bubblewrap to version 0.1.5: * Fix handling of long object paths * Don't parse `<developer><name/></developer>` as the application name (#5700) * Don't refuse to start apps when there is no D-Bus system bus available (#5076) * Don't try to repeat migration of apps whose data was migrated to a new name and then deleted (#5668) * Improve handling of mixed locales on systems with systemd-localed (#5497) * Improve display of ellipsized columns in wide terminals (#5722) * Make `flatpak info -e` look for extensions in all installations (#5670) * Fix warnings from newer GLib versions (#5660, #5737) * Always set the `container` environment variable (#5610) * Always let the app inherit redirected file descriptors (#5626) * In `flatpak ps`, add xdg-desktop-portal-gnome to the list of backends we'll use to learn which apps are running in the background (#5729) * Don't use `WAYLAND_SOCKET` unless given `--socket=inherit-wayland-socket` (#5614) * Use `fusermount3` if compiled with FUSE 3, overridable with `-Dsystem_fusermount` compile-time option (#5104) * Avoid leaking a temporary variable from /etc/profile.d/flatpak.sh into the shell environment (#5574) * Improve async-signal safety (#5687) * Fix various memory leaks (#5683, #5690, #5691) * Avoid undefined behaviour of signed left-shift when storing object IDs in a hash table (#5738) * Detect the correct gtk-doc when cross-compiling (#5650) * Detect the correct wayland-scanner when cross-compiling (#5596) * Documentation improvements (#5659, #5677, #5682, #5664, #5719) * Skip more tests when FUSE isn't available (#5611) * Translation updates (#5602, #5707) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gnome-shell: correct regression with glib-2.0 2.78.5Peter Marko2024-06-022-0/+39
| | | | | | | | Backport fix to work with new glib-2.0. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samba: upgrade 4.19.5 -> 4.19.6Yi Zhao2024-06-021-1/+1
| | | | | | | | | ChangeLog: https://www.samba.org/samba/history/samba-4.19.6.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libtevent: upgrade 0.16.0 -> 0.16.1Yi Zhao2024-06-021-1/+1
| | | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdeflate: fix build with -mcpu=cortex-a76+crypto without ↵Martin Jansa2024-06-022-2/+60
| | | | | | | | | | | -march=armv8.2-a+crypto * fixes: https://github.com/ebiggers/libdeflate/issues/369 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade to 8.2.18Soumya Sambu2024-06-022-10/+13
| | | | | | | | | | | | Includes fixes for CVE-2024-3096, CVE-2024-2756 and other bugs. Changelog: https://www.php.net/ChangeLog-8.php#8.2.18 Rebase 0001-ext-opcache-config.m4-enable-opcache.patch to new version Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fwupd: fix uefi capsule update build errorMikko Rapeli2024-06-021-1/+1
| | | | | | | | | | | | | | plugin_uefi_capsule_splash does not provide "enabled" or "disabled" options but only basic bool "true" and "false". Fixes do_configure() failure with PACKAGECONFIG:append = " plugin_tpm plugin_uefi_pk plugin_uefi_capsule ": | ../fwupd-1.9.18/meson.build:1:0: ERROR: Value disabled is not boolean (true or false). Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 07:48:35 +0000