summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* wireshark: upgrade 4.2.4 -> 4.2.5Vijay Anusuri2024-07-171-1/+1
| | | | | | | | | | | | | | | The following vulnerabilities have been fixed: wnpa-sec-2024-07 MONGO and ZigBee TLV dissector infinite loops. Issue 19726. CVE-2024-4854. wnpa-sec-2024-08 The editcap command line utility could crash when chopping bytes from the beginning of a packet. Issue 19724. CVE-2024-4853. wnpa-sec-2024-09 The editcap command line utility could crash when injecting secrets while writing multiple files. Issue 19782. CVE-2024-4855. Release Notes: https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* v4l-utils: Install media ctrl header and library filesNeel Gandhi2024-07-172-0/+79
| | | | | | | | | | | | | Commit 9389d63fdddcab400cb0b243b74d47bf665aba18 removed a previous patch that caused the recipe to install the header and library files. Restore this behavior to the new meson based build system. Signed-off-by: Neel Gandhi <neel.gandhi@amd.com> Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5f453c3401e20eb5489fac4d3b54a5bf96d019ab) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdbd-mysql-perl: avoid invoking assert_lib at do_configure stageChen Qi2024-07-092-1/+43
| | | | | | | | | | | | | | | | The assert_lib from perl package will execute the generated binary. This is not suitable for cross compilation environment such as OE. In OE, if the libs are not available, the following do_compile task will just fail. So we should avoid invoking assert_lib at do_configure stage to avoid error message like below in log.do_configure: /usr/lib64/ld-linux-aarch64.so.1: No such file or directory Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatbuffers: adapt for cross-compilation environmentsBINDU2024-07-091-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | Flatbuffers contains a library and a schema compiler. The package contains cmake files to discover the libraries and the compiler tool. Currently, all of these cmake files are installed into the target sysroot. However, the compiler utility isn't installed into the sysroot (as it is not runnable on the build machine). When an application that depends on flatbuffers gets built, it uses flatbuffers' exported cmake targets to configure the project. One of the exported targets is FlatcTarget.cmake which expects to see flatc binary in /usr/bin of the sysroot. Since binaries for target don't end up in target sysroot, cmake configuration fails. This patch addresses this problem of flatbuffers' build infrastructure in cross-compiling environments. By removing FlatcTarget.cmake for target builds from the sysroot we essentially skip this step of flatbuffers' configuration. Signed-off-by: Ivan Stepic <Ivan.Stepic@bmw.de> Signed-off-by: Bhabu Bindu <bindudaniel1996@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit b97dbaac6629e22138f71ae19eb421d041447619) Signed-off-by: Akash Hadke <akash.hadke27@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pyyaml-include: support native and nativesdk buildRandy MacLeod2024-07-091-1/+1
| | | | | | | | | backport from master: 56e2e5df9 python3-pyyaml-include: support native and nativesdk build Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: upgrade 1.21.2 -> 1.21.3Vijay Anusuri2024-07-091-2/+2
| | | | | | | | | | | CVEs Fixed CVE-2024-37370, CVE-2024-37371 Release Notes: https://web.mit.edu/kerberos/krb5-1.21/krb5-1.21.3.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* thin-provisioning-tools: install missed thin_shrink and era_repairLibo Chen2024-07-091-3/+5
| | | | | | | Install missed thin_shrink and era_repair for thin provisioning Signed-off-by: Libo Chen <libo.chen.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apache2: Upgrade 2.4.59 -> 2.4.60Siddharth Doshi2024-07-091-1/+1
| | | | | | | | | | | | | | | | | | | CVE's Fixed by upgrade: CVE-2024-36387 apache2/httpd: DoS by null pointer in websocket over HTTP/2 CVE-2024-38472 apache2/httpd: UNC SSRF on WIndows CVE-2024-38473 apache2/httpd: Encoding problem in mod_proxy CVE-2024-38474 apache2/httpd: Substitution encoding issue in mod_rewrite CVE-2024-38475 apache2/httpd: Improper escaping of output in mod_rewrite CVE-2024-38476 apache2/httpd: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect CVE-2024-38477 apache2/httpd: null pointer dereference in mod_proxy CVE-2024-39573 apache2/httpd: Potential SSRF in mod_rewrite Other Changes between 2.4.59 -> 2.4.60 ====================================== https://github.com/apache/httpd/blob/2.4.60/CHANGES Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-oe/conf/layer.conf: remove libbpf from NON_MULTILIB_RECIPES for x86 and ↵Wentao Zhang2024-06-271-0/+3
| | | | | | | | | | | | x86-64 libbpf supports x86_64 and i.86, remove libbpf from NON_MULTILIB_RECIPES for x86 and x86-64 Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d06a9c504928f3369568e8db3b53be368f465e1d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade to 8.2.20Soumya Sambu2024-06-261-1/+1
| | | | | | | | | | Includes fix for CVE-2024-5458, CVE-2024-2408 and other bugs Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vulkan-cts: add workaround for createMeshShaderMiscTestsEXTRandolph Sapp2024-06-261-0/+3
| | | | | | | | | | | | | | | | | | Remove the CXX flag "-O2" for GCC 13 and 14. There's a bug with ARM GCC that breaks the iteration of "types" in the createMeshShaderMiscTestsEXT function. This issue is not present for clang or x86_64 GCC 14. It seems that the array is not initialized before the first iteration. In testing this can result in a random value being used. This can manifest in LINES type being processed twice, resulting in the following error: FATAL ERROR: Failed to initialize dEQP: Test case with non-unique name 'no_lines' added to group 'misc'. Signed-off-by: Randolph Sapp <rs@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cjson: fix buildpath warningsPeter Marko2024-06-261-0/+5
| | | | | | | | | | | | | | | Following warning occurs when building with ptests enabled: WARNING: cjson-1.7.17-r0 do_package_qa: QA Issue: File /usr/lib/cjson/ptest/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR File /usr/lib/cjson/ptest/tests/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR File /usr/lib/cjson/ptest/fuzzing/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR [buildpaths] The cmake files also contain full paths to original CMakeLists.txt file in _BACKTRACE_TRIPLES property; These are not needed for successful ptests as we don't install the CMakeLists.txt files anyway. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tcpdump: fix CVE-2024-2397Hitendra Prajapati2024-06-262-0/+130
| | | | | | | Upstream-Status: Backport from https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tipcutils: Add systemd supportVijay Anusuri2024-06-262-1/+11
| | | | | | | | | | | | Install tipc kernel module explictly. tipcutils.conf is added to modules-load.d to load the required tipc kernel module. Ref: http://tipc.io/getting_started.html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 93a0667456b978ce9317fdadd2f38880b1f5494e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* jemalloc: add +git to versionPeter Marko2024-06-241-1/+3
| | | | | | | | | | | jemalloc was switched from tag to development branch 171 commit ahead. Adapt PV accordingly. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 53f608235a20793324ad9d0587392d26079f7cc6) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* daq: fix incompatible pointer type errorKai Kang2024-06-242-0/+32
| | | | | | | | | | | | | | | | Fix incompatible pointer type error for daq: | ../../daq-2.0.7/os-daq-modules/daq_nfq.c: In function 'SetPktHdr': | ../../daq-2.0.7/os-daq-modules/daq_nfq.c:394:37: error: passing argument 2 of 'nfq_get_payload' from incompatible pointer type [-Wincompatible-pointer-types] | 394 | int len = nfq_get_payload(nfad, (char**)pkt); | | ^~~~~~~~~~~ | | | | | char ** Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hiredis: change ptest output formatZhang Peng2024-06-171-1/+16
| | | | | | | | | | This change consolidates the output format of the ptest command into a single common format. The format selected is the automake "simple test" format: "result: testname" Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* re2: rework solibs handlingPeter Marko2024-06-171-1/+2
| | | | | | | | This is cleaner way how to package unversioned libraries which was suggested during review of the last commit. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* re2: remove dev dependencies from main packagePeter Marko2024-06-171-4/+1
| | | | | | | | | | | | | It's a bad idea to add dev dependencies to main package. It's pulling build dependencies including toolchain items. The dependencies "were needed" because main package contains packageconfig file. This can be fixed by correct packaging. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwebsockets: remove STAGING_LIBDIR with /Martin Jansa2024-06-171-2/+2
| | | | | | | | | | | | | | | | | | | * after buildpath warnings fix from: https://git.openembedded.org/meta-openembedded/commit/?id=eeef1fddd9052bed4b1a91565260518eb042fed2 the LibwebsocketsTargets.cmake ends with: INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/libcap.so;-lpthread" instead of: INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/OE/build/.../libwebsockets/4.3.3/lib32-recipe-sysroot/usr/lib/libcap.so;-lpthread" which causes e.g. mosquitto to fail in do_compile with: ninja: error: '/libcap.so', needed by 'src/mosquitto', missing and no known rule to make it * this happens only when libwebsocket is built with libcap enabled (by libcap in DEPENDS) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwebsockets: fix buildpath warningsGerard Salvatella2024-06-171-0/+2
| | | | | | | | | | In order to remove absolute paths from the cmake artifacts, paths from the `$lib` folder should also be stripped off, otherwise internally linked libraries (e.g. libz) may appear. Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* uriparser: upgrade 0.9.7 -> 0.9.8Wang Mingyu2024-06-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== * Protect against integer overflow in ComposeQueryEngine * Protect against integer overflow in ComposeQueryMallocExMm * Require CMake >=3.5.0 * CMake option URIPARSER_SHARED_LIBS=(ON|OFF) to control, whether to produce a shared or static library for uriparser and that alone, falls back to standard BUILD_SHARED_LIBS if available, else defaults to "ON" * Document that scheme-based normalization a la section 6.2.3 of RFC 3986 is a responsibility of the application using uriparser * Document supported code points for functions uriEscape(Ex)W * Update Clang from 15 to 18 * Adapt to breaking changes in Clang packaging * Get sanitizer CFLAGS and LDFLAGS back in sync * Pin GitHub Actions to specific commits for security Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libgpiod: update to v2.1.2Bartosz Golaszewski2024-06-171-1/+1
| | | | | | | | | | | | This is a small bugfix release that fixes a build issue with slibtool (not relevant to meta-oe ATM), makes the licensing of C++ bindings less restrictive and preemptively fixes an issue that will be triggered with linux v6.9 when running gpio-tools ptest suite. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libfido2: remove non-functional native and nativesdk BBCLASSEXTENDYoann Congal2024-06-171-2/+0
| | | | | | | | | | | | | | | | | | | | | | | libfido2 depends on udev and libcbor which do not exist for native and nativesdk targets. Remove native & nativesdk from BBCLASSEXTEND to avoid hitting these in world/universe builds. Fixes these warnings (as seen on AB[0]): WARNING: Nothing PROVIDES 'nativesdk-udev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'nativesdk-libcbor' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'libcbor-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing PROVIDES 'udev-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches: WARNING: Nothing RPROVIDES 'nativesdk-libfido2-dev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it) WARNING: Nothing RPROVIDES 'nativesdk-libfido2' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Cc: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1a3d194eb3552eb948ca61dffcb9dbe2710f516b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* giflib: upgrade to version 5.2.2nikhil2024-06-172-3/+48
| | | | | | | | | | | | | | | | | | | Upgrade to latest version giflib v5.2.2. This version fixes bugs listed in link below: Link: https://sourceforge.net/p/giflib/code/ci/5.2.2/tree/NEWS Fixes for CVE-2023-48161, CVE-2022-28506, CVE-2023-39742 Link: https://clients.neighbourhood.ie/yocto/1-40.html#:~:text=CVE%2D2023%2D39742%3A%20giflib%3Agiflib%2Dnative Added dependency on ImageMagick which includes "convert" utility, to ensure availability of required tool during compilation process. Add patch to rename binary used in Makefile from "convert" to "convert.im7" as installed by imagemagick package. Signed-off-by: Bhabu Bindu <bhabubindu@kpit.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nano: Security fix for CVE-2024-5742Siddharth Doshi2024-06-172-1/+104
| | | | | | | | | | Upstream-Status: Backport from [https://git.savannah.gnu.org/cgit/nano.git/commit/?id=5e7a3c2e7e118c7f12d5dfda9f9140f638976aa2] CVE's Fixed: CVE-2024-5742 nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* abseil-cpp: backport RISC-V fixScott Murray2024-06-172-0/+83
| | | | | | | | | | | Backport upstream fix[1] for SIGILL crash on RISC-V with 6.6 and newer kernels. The patch has been tweaked to apply on top of the existing stack. [1]: https://github.com/abseil/abseil-cpp/commit/7335a36d Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: Update SRC tarball pathVijay Anusuri2024-06-171-1/+1
| | | | | | | Fix WARNING: Failed to fetch URL https://c-ares.org/download/c-ares-1.27.0.tar.gz Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pytest-html: add missing runtime dependenciesgr embeter2024-06-171-0/+2
| | | | | | | | | | | | Upstream toml file mentions Jinja2 and pytest-metadata as runtime dependencies. Link: https://github.com/pytest-dev/pytest-html/blob/cfd32d08488e2c6fb72f0617db94ab41d3fca8d0/pyproject.toml#L42 Signed-off-by: Grygorii Tertychnyi <grygorii.tertychnyi@leica-geosystems.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit ca28badd147afdb11b8ee785b277bc9797d012fe) Signed-off-by: Grygorii Tertychnyi <grembeter@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* unixodbc: Fix CVE-2024-1013Soumya Sambu2024-06-172-0/+54
| | | | | | | | | | | | | An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken. References: https://nvd.nist.gov/vuln/detail/CVE-2024-1013 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-twisted: remove obsolete python3-twisted-flowGuðni Már Gilbert2024-06-171-18/+0
| | | | | | | | | | | | | | The flow module was removed in Twisted 9.0.0 a long time and currently does not install anything. Let's remove it to cleanup the recipe. This commit also removes python3-twisted-news package because the source files were removed in Twisted 21.2.0. All other files which no longer exist in the source are also removed from FILES. Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-twisted: prepend split PACKAGESGuðni Már Gilbert2024-06-171-1/+1
| | | | | | | | | Fixes an issue where split packages were no populated since all the files were picked up by FILES:${PN} Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-grpcio: fix do_compile failure for qemuppc64/qemuppcChangqing Li2024-06-172-0/+38
| | | | | | | | | define proper macro for ppc/ppc64 to fix compile error Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pcapplusplus: Fix build with gcc14Khem Raj2024-06-023-1/+73
| | | | | | | | | | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> ---- v2] Scarthgap has the same error as master: initialize timespec variable. pcapplusplus/23.09/git/Packet++/src/RawPacket.cpp:23:18: error: 'nsec_time.timespec::<anonymous>' is used uninitialized [-Werror=uninitialized] | 23 | timespec nsec_time; | | ^~~~~~~~~ | cc1plus: all warnings being treated as errors
* squid: workaround a build failure with native gcc10Yoann Congal2024-06-021-0/+5
| | | | | | | | | | | | | | | | | | | | | When build on Debian 11 (gcc10), squid fails to build[0] because of a bug[1] in the configure step (it mixes options between old native compiler and recent target compiler: the former needs the std=c++17 option, the latter doesn't). The workaround is to force the "-std=c++17" option for the native build. NB: Our Buildroot friends have the same workaround[2]. [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/23/steps/28/logs/stdio [1]: https://bugs.squid-cache.org/show_bug.cgi?id=5376 Bug closed as invalid by upstream [2]: https://github.com/buildroot/buildroot/blob/932b52fad87d79d9f26a343edafe2981079de16e/package/squid/squid.mk#L24 Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: upgrade 16.2 -> 16.3Wang Mingyu2024-06-023-3/+3
| | | | | | | | | | | | 0003-configure.ac-bypass-autoconf-2.69-version-check.patch refreshed for 16.3 Changelog: https://www.postgresql.org/docs/release/16.3/ Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* flatpak: update 1.15.6 -> 1.15.8Markus Volk2024-06-023-64/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - remove included patches - set path for fusermount3 to avoid requirement for fuse3-native. This is needed since: https://github.com/flatpak/flatpak/commit/2cb17b4eb82ecedaa98b5b7f954cf3e52fa95682 Changes in 1.15.8 ~~~~~~~~~~~~~~~~~ Security fixes: * Don't allow an executable name to be misinterpreted as a command-line option for bwrap(1). This prevents a sandbox escape where a malicious or compromised app could ask xdg-desktop-portal to generate a .desktop file with access to files outside the sandbox. (CVE-2024-32462) Other bug fixes: * Pass the -export-dynamic linker option as -Wl,-export-dynamic, fixing build failures with clang 18 and lld 18 (#5760) * Fix a double-free when installation is cancelled (#5763) * Fix installed-tests failure with "FUSERMOUNT: unbound variable" (#5751) * Translation updates: pt_BR (#5762), tr (#5761) Changes in 1.15.7 ~~~~~~~~~~~~~~~~~ Released: 2024-03-27 Dependencies: * The Meson build system is now required. Compiling with Autotools is no longer possible. * In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.9.0 is recommended. Several of the bug fixes listed below will not be active if an older version is used. * In distributions that compile Flatpak to use a separate xdg-dbus-proxy executable, version 0.1.5 is recommended. * If libmalcontent (parental controls) is enabled, it must be version 0.5.0 or later. New features: * Automatically remove obsolete driver versions and other autopruned refs (#5632) * `--socket=inherit-wayland-socket` (#5614) * Automatically reload D-Bus session bus configuration after installing or upgrading apps, to pick up any exported D-Bus services (#3342) Bug fixes: * Update included copy of bubblewrap to version 0.9.0: * `--symlink` is now idempotent, meaning it succeeds if the symlink already exists and already has the desired target (#2387, #3477, #5255) * Report a better error message if `mount(2)` fails with `ENOSPC` * Fix a double-close on error reading from `--args`, `--seccomp` or `--add-seccomp-fd` argument * Improve memory allocation behaviour * Silence various compiler warnings * Update included copy of bubblewrap to version 0.1.5: * Fix handling of long object paths * Don't parse `<developer><name/></developer>` as the application name (#5700) * Don't refuse to start apps when there is no D-Bus system bus available (#5076) * Don't try to repeat migration of apps whose data was migrated to a new name and then deleted (#5668) * Improve handling of mixed locales on systems with systemd-localed (#5497) * Improve display of ellipsized columns in wide terminals (#5722) * Make `flatpak info -e` look for extensions in all installations (#5670) * Fix warnings from newer GLib versions (#5660, #5737) * Always set the `container` environment variable (#5610) * Always let the app inherit redirected file descriptors (#5626) * In `flatpak ps`, add xdg-desktop-portal-gnome to the list of backends we'll use to learn which apps are running in the background (#5729) * Don't use `WAYLAND_SOCKET` unless given `--socket=inherit-wayland-socket` (#5614) * Use `fusermount3` if compiled with FUSE 3, overridable with `-Dsystem_fusermount` compile-time option (#5104) * Avoid leaking a temporary variable from /etc/profile.d/flatpak.sh into the shell environment (#5574) * Improve async-signal safety (#5687) * Fix various memory leaks (#5683, #5690, #5691) * Avoid undefined behaviour of signed left-shift when storing object IDs in a hash table (#5738) * Detect the correct gtk-doc when cross-compiling (#5650) * Detect the correct wayland-scanner when cross-compiling (#5596) * Documentation improvements (#5659, #5677, #5682, #5664, #5719) * Skip more tests when FUSE isn't available (#5611) * Translation updates (#5602, #5707) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gnome-shell: correct regression with glib-2.0 2.78.5Peter Marko2024-06-022-0/+39
| | | | | | | | Backport fix to work with new glib-2.0. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samba: upgrade 4.19.5 -> 4.19.6Yi Zhao2024-06-021-1/+1
| | | | | | | | | ChangeLog: https://www.samba.org/samba/history/samba-4.19.6.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libtevent: upgrade 0.16.0 -> 0.16.1Yi Zhao2024-06-021-1/+1
| | | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libdeflate: fix build with -mcpu=cortex-a76+crypto without ↵Martin Jansa2024-06-022-2/+60
| | | | | | | | | | | -march=armv8.2-a+crypto * fixes: https://github.com/ebiggers/libdeflate/issues/369 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Upgrade to 8.2.18Soumya Sambu2024-06-022-10/+13
| | | | | | | | | | | | Includes fixes for CVE-2024-3096, CVE-2024-2756 and other bugs. Changelog: https://www.php.net/ChangeLog-8.php#8.2.18 Rebase 0001-ext-opcache-config.m4-enable-opcache.patch to new version Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fwupd: fix uefi capsule update build errorMikko Rapeli2024-06-021-1/+1
| | | | | | | | | | | | | | plugin_uefi_capsule_splash does not provide "enabled" or "disabled" options but only basic bool "true" and "false". Fixes do_configure() failure with PACKAGECONFIG:append = " plugin_tpm plugin_uefi_pk plugin_uefi_capsule ": | ../fwupd-1.9.18/meson.build:1:0: ERROR: Value disabled is not boolean (true or false). Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fuse3: remove sysv init script and install fuse kernel module explictlyChangqing Li2024-06-022-0/+16
| | | | | | | | | | For systemd, there is not a fuse.service since systemd provides sys-fs-fuse-connections.mount to mount the fuse control filesystem, so instead, only fuse3.conf is added to modules-load.d to load the required fuse kernel module. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs-oe-cache: fix offline install of dependenciesMartin Hundebøll2024-05-221-1/+1
| | | | | | | | | | | | | | | | | | | Apparently, npm has changed its request accept header, so that cache lookup misses. This causes an ENOTCACHED error when doing the offline install in do_compile() from npm.bbclass. Fix it by updating the fake cache entry to match the newest behaviour from npm. Note that npm doesn't agree with itself, as it still uses the previous header value when doing `npm cache add <pkg>`, but the new value when doing `npm install <pkg>`. Bug submitted upstream: https://github.com/npm/cli/issues/7465 Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Revert "nautilus: update 45.1 -> 46.1"Khem Raj2024-05-011-1/+1
| | | | This reverts commit e642f62eeebc36f9dc745ec96a77510bae79596c.
* renderdoc: remove vim-native DEPENDSRoss Burton2024-04-301-1/+1
| | | | | | | | | This need for this was removed in 2016[1] [1] https://github.com/baldurk/renderdoc/commit/fff93a4bcc036f8288fd31dcdd1209fea36b9b58 Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nautilus: update 45.1 -> 46.1Markus Volk2024-04-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major changes in 46.1 ===================== * Bugfixes: - Create archive with Enter on Compress dialog (Lukáš Tyrychtr) - Move focus correctly when item is removed (Khalid Abu Shawarib) - View performance optimization (Khalid Abu Shawarib) - Fix crash when compressing a file and a folder (Khalid Abu Shawarib) - Don't show banners in global search (Khalid Abu Shawarib) - Preserve permissions when copying from read-only file systems (Khalid Abu Shawarib) - Disable non-working global search from Other Locations (António Fernandes) * Translation updates (GNOME Translation Project contributors) Major changes in 46.0 ===================== * Bugfixes: - Remove char limit on size label in properties dialog (Khalid Abu Shawarib) * Translation updates (GNOME Translation Project contributors) Major changes in 46.rc ======================== * Enhancements - Adjust empty status page and progress tooltip strings (Allan Day, Khalid Abu Shawarib) - Add input hints and purpose properties to entries (Khalid Abu Shawarib) - Refine operations hover background (Sam Hewitt, António Fernandes) * Bugfixes: - Position loop mounts correctly in the sidebar (António Fernandes) - Fix internationalization issues (Khalid Abu Shawarib, Peter Eisenmann) - Revert crashes-causing multi-file properties performance optimization (Peter Eisenmann) - Reestablish location signals if location change failed (Corey Berla) - Fix regression which disallowed dropping files on empty folders (Corey Berla, António Fernandes) * Cleanups - Remove architecture-sensitive duplicate filename unit test (Peter Eisenmann, Jeremy Bicha) - Refine Appstream metainfo (Sophie Herold, Alexandre Franke) * Translation updates (GNOME Translation Project contributors) Major changes in 46.beta ======================== * Postponed - The network view from 46.alpha.1 was deemed to require more work * Enhancements - Added a global search mode (António Fernandes) - Use 'text entry' cursor on pathbar hover (Corey Berla) - Add drop shadow to file property dialog icons (kramo) - Improve progress info icons and tooltips (Bharat Tyagi, Sam Hewitt) * Bugfixes: - Avoid crashes with column chooser (Peter Eisenmann) - Avoid crash when navigating back to same folder (António Fernandes) - Avoid infinite loop on file creation naming conflict (Corey Berla) - Fix displaying parent folder of multi-files (Anton Snigirev) - Clear location entry on editing of internal locations (Peter Eisenmann) - Ensure search's clear button is hidden when empty (António Fernandes) - Hide search popover after opening a dialog (Khalid Abu Shawarib) - Correctly open empty folders from search (António Fernandes) - Don't reload view only to change selection (António Fernandes) - Use smaller icons in progress indicator (António Fernandes, Sam Hewitt) - Fix various leaks (Khalid Abu Shawarib, António Fernandes) - Added extra tentacles to confuse AI-generated blogs (Via Matrix) * Cleanups - Made various string HIG compatible (Bart Gravendeel, Automeris naranja) - Modernize column chooser widgetry (Automeris naranja) - Detect potfile errors via CI (Corey Berla) - Replace deprecated GTK point computing functions (N.Pranav Krishna) Major changes in 46.alpha.1 ======================= * Enhancements - Views can be switched without a folder reload (António Fernandes) - Operations are listed in the bottom of the sidebar (Corey Berla, António Fernandes, Allan Day) - Network view replaces Other Locations (António Fernandes, Allan Day) - Mounted drives are shown in the sidebar (António Fernandes) - Selected files are recorded in back and forward history (António Fernandes) - Subfolder loading indication (António Fernandes) - Various view performance improvements (António Fernandes) - Improved performance of multi-file properties dialog (Khalid Abu Shawarib) * Bugfixes: - Correctly prioritize thumbnails for non-alphabetical sort order (Corey Berla) - Notify view item name changes for accessibility (Corey Berla, António Fernandes) - Open real folder for documents in Recent from Properties (Anton Snigirev) - Pattern match (Ctrl+S) all expanded list view directories (António Fernandes) - Display sampling frequency in kHz with thousand separators (Hariharan D) - Treat markdown files as text documents in search (Hariharan D) - Improve UI text capitalization and mnemonics (Automeris naranja) - Fix tab tooltip texts for markup and search (Corey Berla) - Fix extension linkage with C++ (Khalid Abu Shawarib) - Add a tooltip to the star button (Lukáš Tyrychtr) - Show correct shortcut for Redo on the menu (Divyansh Jain) - Prevent use-after-free with mount and stop (António Fernandes) - Improve virtual files handling (António Fernandes) - Fix various view-related bugs, leaks and warnings (António Fernandes) * Cleanups: - Significant restructuring of view architecture (António Fernandes) - Remove dead code in views and css styles (António Fernandes) - Update man page, remove documentation for removed self-check functionality (Corey Berla) * Translation updates (GNOME Translation Project contributors) Major changes in 46.alpha.0 ======================= * Enhancements - Confirm password when creating protected ZIP archives (Eric Daigle) - Make custom folder icon feature discoverable (Khalid Abu Shawarib) - Make URI entry discoverable (Alynx Zhou, Barnabás Pőcze) - Allow changing owner/group and any permissions under admin:/// (António Fernandes) - Add detailed date and time format option (Ondrej Holy, Peter Eisenmann) - Detect copy/move over 4GiB file limit on FAT (Corey Berla) - Give feedback on completion of quick operations (António Fernandes) - New-style banners, unstar animation, and other visual refinements (Peter Eisenmann, Automeris naranja) - Allow Alt+Down to revert more than one Alt+Up (vmkul) - Close overlaid sidebar on location change (Khalid Abu Shawarib) * Bugfixes: - Don't skip files in deep count/size (António Fernandes) - Don't move files around as thumbnails load (Corey Berla) - Reveal highlighted file without delay (Corey Berla) - Stop crashing in various situations (Sebastian Keller, António Fernandes, Corey Berla, Khalid Abu Shawarib) - Resolve UI text inconsistencies (Automeris naranja, getsnoopy, kramo, Khalid Abu Shawarib, Ondrej Holy, Matthijs Velsink) - Fix memory leaks, template disposal, and warnings (Khalid Abu Shawarib) - Fix interface problems in Properties (Peter Eisenmann, António Fernandes, Khalid Abu Shawarib) - Don't keep viewing unmounted locations (Ondrej Holy, António Fernandes, Khalid Abu Shawarib) - Refined appdata (Sabri Ünal, António Fernandes) - Resolve wrong scroll positioning bugs (Gary Li, António Fernandes) - Fix automatic file duplicate naming (Peter Eisenmann) - Properly reorder bookmarks by drag and drop (Khalid Abu Shawarib) - Set current modification time on file created from templates (Khalid Abu Shawarib) - Fix missing/wrong mime type icons (António Fernandes) - Don't reload on autofs timeout (António Fernandes) * Cleanups - Remove obsolete profiling, custom debug logging, and self-checking (Peter Eisenmann, Khalid Abu Shawarib) - Streamline and expand tests (Khalid Abu Shawarib, Peter Eisenmann) - Reduce usage of GtkDialog and other deprecated API (Khalid Abu Shawarib, Peter Eisenmann) - Replace custom switch row with AdwSwitchRow (Óscar Fernández Díaz) - Drop obsolete code (Peter Eisenmann, António Fernandes, Corey Berla) - Reduce unnecessary string copies (Peter Eisenmann) - Unify numbered filename apendix handling (Peter Eisenmann, Khalid Abu Shawarib) * Translation updates (GNOME Translation Project contributors) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix gir buildMarkus Volk2024-04-301-3/+4
| | | | | | | | | | | | | | | Basically what is done in: https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=4c40897893f43a99e6ae12e652c0cf789d89df90 This fixes: | gi.RepositoryError: Typelib file for namespace 'Gobject', version '2.0' not found | gi.RepositoryError: Typelib file for namespace 'Gio', version '2.0' not found | gi.RepositoryError: Typelib file for namespace 'GModule', version '2.0' not found - Remove uneeded do_compile:prepend. It was broken because of {B}} and seems to be unneeded anyway Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkd-dispatcher: Add dependency on python3-jsonmaffan2024-04-301-1/+1
| | | | | | networkd-dispatcher imports json. Add it as a RDEPENDS. Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-07 19:58:29 +0000