summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* python3-nmap: Fix LICENSE and LIC_FILES_CHKSUMNiko Mauno2024-08-261-2/+2
| | | | | | | | | | | | In the source code repository the LICENSE file is GPL-3.0-only: https://github.com/nmmapper/python3-nmap/blob/1.5.2/LICENSE https://github.com/nmmapper/python3-nmap/blob/1.7.0/LICENSE Also change the LIC_FILES_CHKSUM reference to the GPLv3.0 license containing LICENSE file in the downloaded archive. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fann2: Fix LICENSENiko Mauno2024-08-261-1/+1
| | | | | | | | | | According to https://github.com/FutureLinkCorporation/fann2/tree/1.1.2?tab=readme-ov-file#license and https://github.com/FutureLinkCorporation/fann2/blob/1.1.2/LICENSE this project is subject to LGPL-2.1-only license. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-colorama: Fix LICENSENiko Mauno2024-08-261-1/+1
| | | | | | | | | https://github.com/tartley/colorama?tab=readme-ov-file#license and https://github.com/tartley/colorama/blob/0.4.6/LICENSE.txt declare that this project is subject to BSD-3-Clause license. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-platformdirs: Fix LICENSENiko Mauno2024-08-261-1/+1
| | | | | | | | | According to https://pypi.org/project/platformdirs/ and https://github.com/platformdirs/platformdirs/blob/4.2.2/LICENSE the project is subject to MIT license. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pillow: Fix LICENSE and change SUMMARY to DESCRIPTIONNiko Mauno2024-08-261-2/+2
| | | | | | | | | | | | According to https://pypi.org/project/pillow/ and https://github.com/python-pillow/Pillow/blob/10.4.0/LICENSE the project is subject to HPND license. Also change SUMMARY to DESCRIPTION as it's value is clearly over 72 characters long. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-parse-type: Cosmetic fixesNiko Mauno2024-08-261-10/+9
| | | | | | | | Apply some changes to recipe content ordering and indentation style from oe-stylize.py. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-parse-type: Fix LICENSENiko Mauno2024-08-261-1/+1
| | | | | | | | | According to https://pypi.org/project/parse-type/ and https://github.com/jenisys/parse_type/blob/v0.6.2/LICENSE the project is subject to MIT license. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-mock: Fix LICENSENiko Mauno2024-08-261-1/+1
| | | | | | | | | | According to https://github.com/testing-cabal/mock/blob/5.1.0/LICENSE.txt the project is subject to BSD-2-Clause license. (Also https://pypi.org/project/mock/ states 'BSD License'.) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-lru-dict: Fix LICENSE and change SUMMARY to DESCRIPTIONNiko Mauno2024-08-261-2/+2
| | | | | | | | | | | | According to https://pypi.org/project/lru-dict/ and https://github.com/amitdev/lru-dict/blob/v1.3.0/LICENSE the project is licensed under MIT. Also change SUMMARY to DESCRIPTION as it's value is clearly over 72 characters long. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-email-validator: Fix LICENSENiko Mauno2024-08-261-1/+1
| | | | | | | | | | | | | Both https://pypi.org/project/email-validator/ and https://github.com/JoshData/python-email-validator/blob/v2.2.0/LICENSE declare this project is subject to 'Unlicense'. For additional reference, see upstream commit https://github.com/JoshData/python-email-validator/commit/5d72f53412821189ebc826100fb2a673530c5ac6 ("Relicense under the Unlicense (instead of CC0)") Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-crc32c: Amend LICENSE declarationNiko Mauno2024-08-261-1/+1
| | | | | | | | | According to https://github.com/ICRAR/crc32c/blob/v2.3/LICENSE and https://github.com/ICRAR/crc32c?tab=readme-ov-file#license change 'LGPL-2.0-or-later' in LICENSE value to 'LGPL-2.1-or-later'. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cbor2: Sanitize recipe contentNiko Mauno2024-08-261-13/+8
| | | | | | | | | Apply suggestions to recipe content ordering and indentation style from oe-stylize.py and also remove the duplicate DEPENDS line for python3-setuptools-scm-native. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cbor2: Fix LICENSE and LIC_FILES_CHKSUMNiko Mauno2024-08-261-2/+2
| | | | | | | | | | | Both project pypi page: https://pypi.org/project/cbor2/ as well as https://github.com/agronholm/cbor2/blob/5.6.4/LICENSE.txt state that it is subject to MIT rather than Apache-2.0 license. Also update LIC_FILES_CHKSUM value to reference the LICENSE.txt file from the downloaded archive. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ansi2html: Fix HOMEPAGE and LICENSENiko Mauno2024-08-261-2/+2
| | | | | | | | | | | | | Update HOMEPAGE to the url which old homepage address redirects to, and change LICENSE value to match what is stated in the README file: https://github.com/pycontribs/ansi2html?tab=readme-ov-file#license as well as source code comment: https://github.com/pycontribs/ansi2html/blob/v1.9.2/src/ansi2html/converter.py#L9-L12 also LICENSE file is 'LESSER' variant: https://github.com/pycontribs/ansi2html/blob/v1.9.2/LICENSE#L1 Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-xlsxwriter: Fix LICENSENiko Mauno2024-08-261-1/+1
| | | | | | | | | | According to homepage https://xlsxwriter.readthedocs.io/license.html and pypi page https://pypi.org/project/XlsxWriter/ as well as https://github.com/jmcnamara/XlsxWriter/blob/RELEASE_3.2.0/LICENSE.txt the module is licensed under BSD-2-Clause. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* protobuf: version bump 4.25.3 -> 4.25.4Jan Vermaete2024-08-251-1/+3
| | | | | | | | + adding UPSTREAM_CHECK_GITTAGREGEX because `devtool latest-version` was going to the 28 release (what still in rc) Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gtk+: Fix CVE-2024-6655Soumya Sambu2024-08-252-0/+41
| | | | | | | | | | | | | | A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory. References: https://nvd.nist.gov/vuln/detail/CVE-2024-6655 Upstream-patch: https://gitlab.gnome.org/GNOME/gtk/-/commit/3bbf0b6176d42836d23c36a6ac410e807ec0a7a7 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cpuset: Add recipe for cpuset tool 1.6.2Michael Trimarchi2024-08-251-0/+13
| | | | | | | | | | | | | | | | | | Cpuset is a Python application that forms a wrapper around the standard Linux filesystem calls to make using the cpusets facilities in the Linux kernel easier. This can be used on linux realtime or standard linux Example cset shield --cpu 2-3 echo c > /proc/irq/287/smp_affinity irq=`ps | grep -m 1 "irq/287" | awk '{ print $1 }'` cset shield -s -p $irq --force chrt -f -p 75 $irq Signed-off-by: Michael Trimarchi <michael@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bluealsa: Fix build on muslKhem Raj2024-08-252-1/+90
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libblockdev: Fix build with latest e2fsprogsKhem Raj2024-08-242-0/+93
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libspatialite: Upgrade to 5.1Khem Raj2024-08-244-23/+37
| | | | | | | - Drop the libtool patch its already fixed in this version - Add a patch to support libxml2 2.13+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgsf: Fix build with libxml2 2.13+Khem Raj2024-08-242-1/+107
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* raptor2: Do not use curl-config to detect curlKhem Raj2024-08-242-3/+76
| | | | | | it fails in cross build environment, use pkg-config instead Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pycocotools: Remove absolute paths from commentsKhem Raj2024-08-241-0/+4
| | | | | | | | | _mask.c is generated by cython and encodes sourcepaths into comments which are absolute. Edit them out. Fixes buildpaths QA errors Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pycocotools: Downgrade numpy version needed to 1.xKhem Raj2024-08-242-0/+28
| | | | | | | This is needed for it to build with PEP-517 backend, older backend ignored the version Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pycocotools: Use build pep517-backendKhem Raj2024-08-241-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pandas: Downgrade version check for numpy to 1.xKhem Raj2024-08-242-0/+28
| | | | | | Helps it build with PEP-517 backend Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pandas: upgrade 2.0.3 -> 2.2.2Trevor Gamblin2024-08-232-2/+43
| | | | | | | | | | | | | | | | | pandas 2.2.2 is the first version compatible with numpy 2.0.x. The package now uses meson as the build backend, so change the recipe to inherit that. Its pyproject.toml pins required versions for Cython and meson, but newer upstream pandas releases are using different versions and compatibility strings, so just add an OE-specific patch to relax the requirements a bit for us. Changelog: https://pandas.pydata.org/pandas-docs/version/2.2.2/whatsnew/v2.2.2.html Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zsh: update 5.8 -> 5.9Jörg Sommer2024-08-234-290/+13
| | | | | | | | | | The patches for CVE-2021-45444 were applied upstream on 2022-02-12. The snipped for do_install was taken from https://salsa.debian.org/debian/zsh/-/blob/8cc745c38fba1d4ec3e5d66cffbeadd8b492c2ce/debian/rules#L132 Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-psycopg: add v3.2.1Tim Orling2024-08-231-0/+14
| | | | | | | Psycopg 3 is a modern implementation of a PostgreSQL adapter for Python. Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-automat: upgrade 22.10.0 -> 24.8.1Guðni Már Gilbert2024-08-231-7/+2
| | | | | | | | | | There is no changelog but there are few improvements relevant for the build: - python3-six and python3-attrs are no longer dependencies - We can start using python_setuptools_build_meta - PYPI_PACKAGE doesn't need to be overridden since the default is now the correct ('automat' instead of 'Automat') Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* krb5: fix CVE-2024-26458 and CVE-2024-26461Yogita Urade2024-08-232-0/+208
| | | | | | | | | | | | | | | | | | | | CVE-2024-26458: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26461: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2024-26458 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 Upstream Patch: https://github.com/krb5/krb5/commit/c5f9c816107f70139de11b38aa02db2f1774ee0d Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bluealsa: upgrade 4.0.0+git -> 4.3.0Jörg Sommer2024-08-231-13/+25
| | | | | | | | | | | The change in the license file was the update of the year in the copyright line. glib-2.0-native and python3-packaging-native (with python3native) is required to have gdbus-codegen at build time. Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Upgrade to 10.1 releaseKhem Raj2024-08-221-2/+2
| | | | | | | | Changes are here [1] [1] https://github.com/FRRouting/frr/commit/14c29f83a0dfbc4023cdfff34ed38cf43dca409c Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ftgl: Switch to maintained forkKhem Raj2024-08-222-3/+3
| | | | | | | | | As per [1], this repo is not being actively maintained therefore rebase to a fork and pull request is also redirected. [1] https://github.com/frankheckenbach/ftgl/pull/19#issuecomment-2306010295 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-twisted: add python3-attrs to RDEPENDSGuðni Már Gilbert2024-08-221-0/+1
| | | | | | | | | | | | | | | | | | This fixes the following issue: python3[677]: Traceback (most recent call last): python3[677]: File "/usr/lib/python3.12/site-packages/myownscript.py", line 9, in <module> python3[677]: from twisted.internet import defer python3[677]: File "/usr/lib/python3.12/site-packages/twisted/internet/defer.py", line 44, in <module> python3[677]: import attr python3[677]: ModuleNotFoundError: No module named 'attr' Currently python3-attrs is provided indirectly by python3-automat. But when python3-automat is updated to >= 24.8.1, python3-attrs is no longer indirectly provided. The twisted recipe must declare the dependency on python3-attrs. Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drgn: add new recipeJamin Lin2024-08-221-0/+80
| | | | | | | | | | | | | | | | | | | | | | | | | drgn is a debugger with an emphasis on programmability drgn exposes the types and variables in a program for easy, expressive scripting in Python. Drgn depends on: 1. python3 2. elfutils 3. openmp a. clang toolchain should use libomp(openmp) from meta-clang b. gnu gcc toolchain should use libgomp(gcc-runtime) from openembedded-core The build requires: 1. setuptools 2. automake 3. autoconf 4. libtool 5. pkgconf Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vdpauinfo: add recipeThomas Perrot2024-08-221-0/+16
| | | | | | | | vdpauinfo is a command-line tool that can query the capabilities of the system's VDPAU implementation. Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: support cross compile without qemu user conditionallyHongxu Jia2024-08-222-45/+126
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to the scope of supported BSPs by qemu-user is limited, such as a segment fault on armv9 after qemu apply commit [target/arm: Convert LDAPR/STLR (imm) to decodetree][1] ``` |tmp-glibc/work/neoversen2-crypto-wrs-linux/nodejs/20.5.1/node-v20.5.1/out/ Release/v8-qemu-wrapper.sh: line 7: 3179613 Segmentation fault (core dumped) PSEUDO_UNLOAD=1 qemu-aarch64 -r 5.15 -L tmp-glibc/work/neoversen2-crypto-wrs-linux/ nodejs/20.5.1/recipe-sysroot -E LD_LIBRARY_PATH=tmp-glibc/work/neoversen2-crypto-wrs-linux/ nodejs/20.5.1/recipe-sysroot/usr/lib64:tmp-glibc/work/neoversen2-crypto-wrs-linux/ nodejs/20.5.1/recipe-sysroot/usr/lib64 "$@" ``` Upstream nodejs have cross compile support, but it needs host and target have same bit width (e.g. a x86_64 host targeting arrch64 to produce a 64-bit binary). So: 1. If host and target have different bit width, build with QEMU user as usual; 2. If host and target have same bit width, enable notejs cross compile support: - The build tools of nodejs is GYP[2], set CC_host, CFLAGS_host, CXX_host, CXXFLAGS_host, LDFLAGS_host, AR_host for host build which is separated with target build [3] - Satisfy layer compatibility, set GYP variables in prefuncs of do_configure, do_compile and do_install other than in recipe parsing - Add missing native packages to fix library missing on host build - Rework libatomic.patch, explicitly link to libatomic for clang conditionally [1] https://github.com/qemu/qemu/commit/2521b6073b7b4b505533a941d4f9600f7585dc78 [2] https://github.com/nodejs/node-gyp [3] https://github.com/nodejs/node-gyp/blob/main/gyp/docs/UserDocumentation.md#cross-compiling Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mariadb: File conflicts for multilibGuocai He2024-08-221-2/+5
| | | | | | | File conflicts between attempted installs of mariadb and lib32-mariadb Signed-off-by: Guocai He <guocai.he.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* android-toold-adbd: Fix inconsistency between selinux configurationsquic-raghuvar2024-08-221-1/+1
| | | | | | | | | | ConditionPathExists is set to /etc/usb-debugging-enabled as part of meta-oe/recipes-devtools/android-tools/android-tools/android-tools-adbd.service file. However, in meta-oe/dynamic-layers/selinux/recipes-devtool/android-tools/android-tools/android-tools-adbd.service file ConditionPathExists is set to /var/usb-debugging-enabled This causes an internal inconsistency between selinux-enabled and -disabled configurations. Hence, change ConditionPathExists=/var/usb-debugging-enabled to ConditionPathExists=/etc/usb-debugging-enabled Reported-by: @lumag
* ftgl: Upgrade to 2.4.0Khem Raj2024-08-216-141/+53
| | | | | | | - Switch to git fork which has all the patches - Fix build with freetype 2.13.3 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: fix pep517-backend warningQuentin Schulz2024-08-211-6/+6
| | | | | | | | | | | | | | | | | | | | | | | nftables has a pyproject.toml file since v1.0.9, c.f. https://git.netfilter.org/nftables/commit/?id=8e603e0f7eec7c0000344a004228a30fbf0ece5c Styhead has started to complain when a recipe inherits setuptools3 and a proper pyproject.toml is provided in sources. This uses python_pep517 functions instead of the setuptools3 ones, inherits the proper class (still using setuptools3 but through pep517 process). Notably, the python PACKAGECONFIG has its build dependency on python3-setuptools-native removed as it's brought in by python_setuptools_build_meta inherit, which is performed whenever the python PACKAGECONFIG is selected. This avoids a "duplicate" but no change in behavior is expected. This was only build tested. Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensc: Cosmetic fixesNiko Mauno2024-08-211-4/+3
| | | | | | | | | Apply some suggestions from oe-stylize.py and sort configure options alphabetically, and remove stale version comment line which has not been updated for some time. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensc: Fix LICENSE declarationNiko Mauno2024-08-211-1/+1
| | | | | | | | | According to https://github.com/OpenSC/OpenSC/wiki#license OpenSC is licensed under LGPL-2.1 or later, which seems to be affirmed also by the comments in the source code files, as well as the COPYING file. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensc: Drop virtual/libiconv from DEPENDSNiko Mauno2024-08-211-1/+1
| | | | | | | | | According to https://github.com/OpenSC/OpenSC/blob/0.25.1/NEWS#L1124-L1125 since version 0.12.0 the iconv dependency has been removed. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensc: Add 'readline' PACKAGECONFIG optionNiko Mauno2024-08-211-2/+1
| | | | | | | | | This helps us to also get rid of associated RDEPENDS declaration which implicitly pulled readline to rootfs, even configure resolved readline as not enabled. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensc: Amend FILES:${PN} declarationNiko Mauno2024-08-211-1/+0
| | | | | | | | | Commit da68f807bd718fb848acc792fd9326df719e0880 added the symlink .so path to FILES:${PN}-dev to fix QA error, complement the operation by removing identical line from FILES:${PN} Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* poppler: CVE-2024-6239Yogita Urade2024-08-213-0/+1388
| | | | | | | | | | | | | | | | | | | | A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service. CVE-2024-6239-0002 is the CVE fix and CVE-2024-6239-0001 is dependent commit to fix the CVE. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-6239 Upstream patch: https://gitlab.freedesktop.org/poppler/poppler/-/commit/0554731052d1a97745cb179ab0d45620589dd9c4 https://gitlab.freedesktop.org/poppler/poppler/-/commit/fc1c711cb5f769546c6b31cc688bf0ee7f0c1dbc Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* flatpak: update 1.15.9 -> 1.15.10Markus Volk2024-08-211-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Dependencies: In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.10.0 is required. This version adds a new feature which is required by the security fix in this release. Security fixes: Don't follow symbolic links when mounting persistent directories (--persist option). This prevents a sandbox escape where a malicious or compromised app could edit the symlink to point to a directory that the app should not have been allowed to read or write. (CVE-2024-42472, GHSA-7hgv-f2j8-xw87) Documentation: Mark the 1.12.x and 1.10.x branches as end-of-life (#5352) Other bug fixes: Fix several memory leaks (#5883, #5884) Internal changes: Record a log file when running build-time tests with AddressSanitizer (#5884) Add initial suppressions file for AddressSanitizer (#5884) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 20:51:10 +0000