| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Upgrade urgency SECURITY: See security fixes below.
Security fixes:
(CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a
race condition that can be used by another process to bypass desired Unix
socket permissions on startup.
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5b34766daadf8f1e8ef3d55b24e0037c4d0727f5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
a87e9069 Release 2023.7
98f1501c Merge pull request #3081 from jlebon/pr/log-selinux-refresh
bdac515a lib/deploy: Log SELinux policy refresh
4085eee9 Merge pull request #2843 from jmarrero/retry
4fb6e6f5 ostree-repo-pull: add options to configure retry behavior
b9e73a38 Merge pull request #3078 from HuijingHei/karg-delete-array
67160862 doc: add `ostree admin deploy` option `--karg-delete`
003cb99c karg-delete: support multiple times
d788c5b5 Merge pull request #3075 from cgwalters/reenable-composefs
5d92407b Merge pull request #3077 from cgwalters/debug-finalization-lock
ac69c707 deploy: Remove lock when re-staging
833251cb tests: Use ext4, re-enable composefs test
824ac1af Merge pull request #3074 from cgwalters/more-errcontext-composefs
e75c5c6e Merge pull request #3073 from cgwalters/context-no-stateroot
4a3e43c7 composefs: Add more error prefixing
265b7f9e deploy: Improve error message for nonexistent stateroot
3894fe2a Merge pull request #3062 from alexlarsson/transient-etc
f617a341 Support transient /etc
cd0fc9f4 Merge pull request #3072 from alexlarsson/fix-whiteout-test
334f53d7 Merge pull request #3063 from cgwalters/label-usretc-as-etc
397a1176 tests: Fix whiteout test
81c08746 repo: Add an option to label /usr/etc as /etc
6cce2e23 Merge pull request #3067 from cgwalters/ci-composefs
734ea3ee ci: Disable composefs test for now
2f76b030 ci: Ensure composefs+openssl are is enabled on Fedora
befd8443 Merge pull request #3060 from owtaylor/export-hardlinks
3b2fd6e9 When exporting, use hardlinks for duplicated files
8c25452c Merge pull request #3049 from jlebon/pr/revert-virtiofs-hack
2363de71 Merge pull request #3059 from cgwalters/zipl-default-s390x
b8ce61ba Revert "ci: Run cosa unprivileged"
c4dcfbae Merge pull request #3046 from ostreedev/dependabot/submodules/composefs-cca8be4
e3d93a85 repo: Default bootloader to zipl on s390x
ec7bc823 Merge pull request #3058 from cgwalters/doc-authenticated-repos
d4adb795 docs: Add authenticated-repos.md
13be0786 Merge pull request #3021 from cgwalters/insttest-composefs-binding
46b7821d Merge pull request #3053 from ericcurtin/add_overlay_and_erofs_to_initrd
cecb59dd boot/dracut: Add erofs and overlayfs kernel modules
372cbd7a tests: Add an integration test for composefs signatures
cd606aa6 Merge pull request #3051 from cgwalters/rust-tests-update
87c43678 Merge pull request #3052 from cgwalters/switch-libglnx-source
01a847a2 gitmodules: Use github GNOME mirror
e3291ccc tests: Rework detection of trivial-httpd
878d6016 Merge pull request #3047 from ostreedev/dependabot/submodules/libglnx-aff1eea
ff73bebc build(deps): bump libglnx from `54ad67d` to `aff1eea`
7916cfb6 build(deps): bump composefs from `af86742` to `cca8be4`
92d25eb5 Merge pull request #3039 from cgwalters/rust-switch-include
26dcd4f5 rust: Switch to using `include`
b7e39eba Merge pull request #2054 from jlebon/pr/static-delta-fetch-no-scan
cd116a1e lib/pull: Drop static delta superblocks references
2fe88f80 ci: Run cosa unprivileged
fc5aef6f lib/pull: Don't scan commit objects we fetch via deltas
c8ed1c7a lib/pull: Fix miscounting of missing metadata
3c2587b6 app/pull-local: Add `--disable-static-delta`
0ac87956 Merge pull request #3038 from cgwalters/rust-drop-composefs
6a948567 Merge pull request #3037 from cgwalters/add-labeler-flow
2db17d21 rust: Drop composefs from crate
749857df Merge pull request #3035 from cgwalters/release-rust
12996948 ci: Add an automatic labeler action
1714e837 Merge pull request #3030 from ostreedev/dependabot/submodules/composefs-af86742
e52530b5 rust/sys: Also bump semver for this
4d3621db build(deps): bump composefs from `d085fbf` to `af86742`
00c04aef Merge pull request #3028 from ostreedev/dependabot/submodules/composefs-d085fbf
b0e32811 Merge pull request #3029 from cgwalters/bump-glib
aee1ab2c rust: Bump semver to 0.19
cccc0f1a rust: Port to glib 0.18
b60036dd build(deps): bump composefs from `597a766` to `d085fbf`
5fe050f5 Merge pull request #3027 from cgwalters/drop-cap-std-public
9121297e ci: Move lints into main build
242a9015 rust: Bump rust-version = 1.70
eec67ec1 Drop cap-std from our public APIs
e93ebd73 Merge pull request #3018 from ostreedev/dependabot/submodules/composefs-597a766
8d838230 Merge pull request #3012 from cgwalters/default-early-prune
d5cfbed5 sysroot: Promote the "early prune" behavior to default
c0014e00 Merge pull request #2968 from cgwalters/drop-global-syncfs-by-default
d976ec56 Merge pull request #3024 from cgwalters/clang-analyzer-fixes-5
0d7b8ebc build(deps): bump composefs from `1aed878` to `597a766`
52dbed4d Merge pull request #3023 from ostreedev/dependabot/submodules/libglnx-54ad67d
4eb3caca commit: Quiet clang-analyzer warning
5e1b6983 keyfile-utils: Quiet a clang-analyzer warning
3001ef28 build(deps): bump libglnx from `c02eb59` to `54ad67d`
03a19888 Merge pull request #3020 from cgwalters/less-return-if-fail-1
5837f27f Merge pull request #3019 from cgwalters/more-analyzer-fixes-4
886f5800 mutable-tree: Change some `g_return_if_fail` to `g_assert()`
db4ca6e7 mutable-tree: Quiet clang-analyzer warning
d001729b Merge pull request #3017 from cgwalters/more-analyzer-fixes-3
6538b170 repo: Quiet clang-analyzer warning
369e4ddd commit: Quiet clang-analyzer warning
5fc9eac0 commit: Quiet clang-analyzer warning
bfb7482a lib/commit: Quiet clang-analyzer warning
ee8c13b1 lib/delta: Remove dead code
3acdbac0 Merge pull request #3016 from cgwalters/more-analyzer-fixes-2
89e13a95 Merge pull request #2994 from cgwalters/refactor-composefs-warnings
0beaf5c9 pull: Quiet clang-analyzer warning
e2779a7c commit: Quiet clang-analyzer warning
5b40d4bb pull: Add assertions to quiet clang-analyzer
0cfa5e86 lib/repo-finder: Squash memory leak
f8549a9e Merge pull request #3013 from cgwalters/more-analyzer-fixes
7c13631a Merge pull request #3006 from cgwalters/misc-c99-style-5
1a16a7d6 switchroot: Use g_new/g_free consistently
d3ede20b sign/ed25519: Fix two memory leaks
a87789e8 commit: Drop dead code
d36bf35c switchroot: Lower config parser to otcore, add unit tests
38880bff composefs: Hard error except on ENOENT even in "optional" case
e952b1bf prepare-root: Fold together composefs signature cases
1d316e31 prepare-root: Init composefs options earlier
aa9b7c3b prepare-root: Drop redundant print about signature/digest
4dd3cb35 Merge pull request #3005 from cgwalters/release
97d83e62 configure: post-release version bump
cce1814c cmd/show-remote-url: Port to C99 style
116fdc3c cmd/log: Port to C99 style
e578c019 cmd/export: Fold libarchive error handling
88334b8f cmd/export: Port to C99 style
fa69eaac deploy: Remove global `sync` by default
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 62bbf5bd955b06c61335e530c96666f38818351a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
Upstream reference:
https://github.com/ostreedev/ostree/commit/7b85adfbbd97054e4b14ca4365c11fbadf97c70c
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6451e58cf0fde018a20668398264ff06f80fd4fb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
Upstream reference:
https://github.com/ostreedev/ostree/commit/0c36e8143d3c95d454b65c38f923cf71d08d5eb7
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1f8808c22a29a35eb183250267df1e1010979641)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
dab8051f Release 2023.6
bd91fda6 Merge pull request #3010 from cgwalters/more-composefs-fixes
3648c5ae build-sys: Really fix composefs check
db3b286d Merge pull request #3009 from cgwalters/c9s-ci
bcd4d026 Merge pull request #3007 from cgwalters/optin-new-bootloader-naming
33ef4ae6 build-sys: Look for both linux/mount.h and sys/mount.h
bd8339bd ci: Add c9s build
cbe36c3a Merge pull request #3008 from ostreedev/maybe_ostree
29423a89 prepare-root: If composefs is configured as "maybe" don't fail
02d41907 deploy: Add bootloader-naming-2 opt-init
fb06d59e Merge pull request #3003 from cgwalters/prepare-root-oscore-and-units
20b8cb17 Move prepare-root karg helpers into otcore, add unit tests
44519492 Merge pull request #2997 from cgwalters/test-cleanups-1
37f247da Merge pull request #2999 from cgwalters/add-oscore-units
aa8ad204 Merge pull request #3001 from cgwalters/misc-c99-style-4
75a43deb cmd/grub2-generate: Port to C99 style
767ca134 cmd/init: Port to C99 style
e3ef72ea Merge pull request #3000 from cgwalters/test-inst-update
6eeb8b56 Merge pull request #2995 from ostreedev/dependabot/submodules/composefs-1aed878
e751dd9a Merge pull request #2998 from cgwalters/disable-composefs-too-old
facb9a1a tests/inst: Update to latest ostree-ext
7c82340d Merge pull request #2975 from ostreedev/androidboot-single-slot-mode
e3f0c4d4 tests: Add otcore unit tests
90e54619 build-sys: Disable composefs on too-old Linux headers
6e9e50d8 prepare-root: Changes made to find_proc_cmdline_key
650a0537 prepare-root: On a non-A/B androidboot system, boot system slot a
16b97d8a Merge pull request #2996 from cgwalters/misc-c99-style-3
578c87e7 tests/destructive: Port more to xshell
8f302f2a cli/set-origin: Port to C99 style
69d7d837 build(deps): bump composefs from `a6e827d` to `1aed878`
ee1e585e Merge pull request #2993 from cgwalters/misc-c99-style-2
22b47781 checkout: Port to C99 style
f7786e75 Merge pull request #2990 from cgwalters/init-is-stateroot
27266f90 lzma: Port to C99 style
722fc2d0 Merge pull request #2991 from cgwalters/misc-c99-style
9f39f78e remote-add: Port to c99 style
9036c96a admin: Port to c99 style
f4e56b91 admin-deploy: Add `--stateroot` as alias for `--os`
9d5ccfef Add `ostree admin stateroot-init` as alias for `os-init`
9ac938c4 Merge pull request #2989 from cgwalters/lock-timeout-longer
f4b42049 Merge pull request #2973 from ostreedev/dependabot/submodules/composefs-a6e827d
e88ec69e repo: Bump lock timeout to 5 minutes
55121cc4 Merge pull request #2988 from cgwalters/prepare-root-binding-key
d648eea6 Merge pull request #2987 from cgwalters/prefix-stage-deploy
94cb37cb prepare-root: Minor clarifications
25a458b9 deploy: Add some error prefixing
8712a467 Merge pull request #2985 from cgwalters/cleanup-proc-cmdline
083bad8c Merge pull request #2984 from alexlarsson/prepare-root-no-raw-key
28aed49d switchroot,generator: Only read /proc/cmdline once
0a79b3b1 prepare-root: Only support base64 formated public key files
c94388f3 Merge pull request #2980 from cgwalters/prepare-root-minor
871d32a5 prepare-root: Use ptrarray, not linked list
678bfcd9 prepare-root: Check for empty string, not strlen > 0
bea5d897 prepare-root: Use declare-and-initialize
3620d3c7 Merge pull request #2979 from cgwalters/enabled-discussions
d324f684 Merge pull request #2974 from alexlarsson/composefs-config-file
f1c1f819 README.md: Drop dead mailing list, link to GH discussions
81fa2141 Read composefs configuration from initrd instead of commandline
2cc6b531 Merge pull request #2966 from cgwalters/ostree-admin-edit
b108e24c build(deps): bump composefs from `1704f82` to `a6e827d`
c57c0056 Merge pull request #2958 from cgwalters/deploy-loosen-etc-usretc
7f70614a Merge pull request #2969 from cgwalters/fix-sync-pthreads
a31f7798 Merge pull request #2967 from cgwalters/drop-trivial-httpd-entrypoint
402e0428 deploy: Fix mutex locking for global sync timeout
60b46556 More fully drop `trivial-httpd` entrypoint
3cd3251a Add `admin set-default`
09160c1a Merge pull request #2962 from cgwalters/os-init-remount
ac42e29d os-init: Create a mount namespace
113e575e Merge pull request #2963 from cgwalters/more-gfileinfo-fix
15cb0b47 composefs: Only call `_get_symlink_target()` on symlinks
f44909f8 Merge pull request #2960 from ostreedev/dependabot/submodules/libglnx-c02eb59
a16a14a6 build(deps): bump libglnx from `07e3e49` to `c02eb59`
fd968d59 Merge pull request #2957 from cgwalters/transaction-test-suppress-global-sync
0406fd39 deploy: Support an empty `/etc` and populated `/usr/etc`
6470429b tests/destructive: Turn off global sync()
a2663e80 Merge pull request #2956 from cgwalters/finalize-more-verbose
3d881fee deploy: Be way more verbose about what we're doing
1aed5d7c Merge pull request #2954 from cgwalters/harden-gvariant-get-data
5b372596 checksum-utils: Add an assertion that `buf != NULL`
0392b546 core, switchroot: Harden a bit against `g_variant_get_data() == NULL`
d7d66121 Merge pull request #2953 from samcday/patch-1
66e42553 Merge pull request #2930 from cgwalters/prepare-root-config3
b5397887 docs: update boot loader spec link
af52a88d Merge pull request #2952 from cgwalters/silence-variant-lookup
13e7ae90 tree-wide: Consistently `(void)g_variant_lookup()`
34656260 prepare-root: Don't parse target root when composefs enabled
83d37d6d prepare-root: Default sysroot.readonly=true if composefs
22b8e4f9 prepare-root: Introduce `ostree/prepare-root.conf`
250c40a6 Merge pull request #2948 from cgwalters/composefs-more-cleanups
3f594b04 Merge pull request #2951 from cgwalters/errprefix-sysroot
5e2eedee Merge pull request #2949 from cgwalters/kargs-cleanup
cf525ee6 repo: Clarify when we fail to parse a remote
70d790ab sysroot: Add a bit more error prefixing
82da0e16 Merge pull request #2950 from cgwalters/generator-cleanup
d7fe9e54 kernel-args: Move private functions out of public header
303e7eb2 src/generator: Move all logic into libostree-1.so
ec1109c7 generator: Stop creating `/run/ostree-booted`
64afbcde composefs: Use lowerdir in /run
4c0e5b1e Merge pull request #2942 from ostreedev/android-bootloader-parsing
a035c2e2 Merge pull request #2946 from cgwalters/add-inode-fix-feature
8ce7bbe1 Add an always-on `inode64` feature
c89baaed bootloader: fold all Android Bootloader specific logic into prepare-root
55936165 Merge pull request #2943 from cgwalters/mount-cleanup
253e7758 Merge pull request #2944 from cgwalters/prepare-root-more-cleanup
e61226a8 prepare-root: Drop more dead code
41cda3bd prepare-root: Drop code mounting `/proc`
b258375f Merge pull request #2938 from cgwalters/dedup-ostree-parsing
b548ff74 Merge pull request #2939 from cgwalters/ed25519-cleanups
6966979c generator: Deduplicate ostree= karg parsing
fc303da6 sign-ed25519: Don't set sk unless we've validated it
3a18a557 sign-ed25519: Add some comments for data structure
fb40e559 sign-ed25519: More verbose errors for invalid length
1a2fac37 tests: Remove dead references to "SEED"
1c0fd7d4 Merge pull request #2937 from ericcurtin/ostree2androidboot.slot_suffix
355cd727 Remove steal_pointer and steal_pointer_impl as we link in glib now
a6f0a571 android-boot: Remove dependency on ostree= karg, use androidboot.slot_suffix=
27a9fe30 Merge pull request #2936 from cgwalters/sign-from-file
7bbe13ca Merge pull request #2931 from cgwalters/prepare-root-man
de81a7e7 Merge pull request #2929 from cgwalters/prepare-root-drop-pivot
8302a8ad Merge pull request #2927 from cgwalters/sysroot-errprefix-bootlinks
845d68d1 Merge pull request #2935 from cgwalters/prepare-root-config4
82d93491 commit: Add `--sign-from-file`
d4ca834b prepare-root: Refactor composefs config handling
18d6f597 Merge pull request #2934 from cgwalters/enable-composefs-default
592351d1 build-sys: Enable composefs at *build time* by default
3d29f89c Merge pull request #2928 from cgwalters/prepare-root-config
c1ac6bc3 Merge pull request #2932 from cgwalters/aboot-fix-nullderef
c078e8be mount: Fix gcc -fanalyzer warning for parsing androidboot.slot_suffix
c4f1d18a Merge pull request #2920 from ostreedev/dependabot/submodules/composefs-1704f82
1e4cb30c man: Add ostree-prepare-root
0eda15ce Use /run/ostree-booted metadata for sysroot-ro state passing
79806a68 prepare-root: Drop dead `pivot_root` code
b8d66964 remount: Use new metadata in `/run/ostree-booted` for composefs
77acad24 remount: Don't overwrite /run/ostree-booted
93699cc5 prepare-root: Add metadata for composefs to `/run/ostree-booted`
bafb5512 prepare-root: Use constant for ed25519 signature
6cdc5ce5 Merge pull request #2926 from cgwalters/otcore-cfs-constants
6769d66d sysroot: Add some error prefixing for bootversion
18cc4472 prepare-root: Drop unused verity flag querying
2b738a99 prepare-root: Use otutil and g_print
1b7b4fbd Add an internal constant for the composefs image name
c0c2c9bd Merge pull request #2924 from cgwalters/drop-syntax-check
65912106 build: Drop `make syntax-check`
57fe33f0 Merge pull request #2921 from alexlarsson/composefs-sign-v2
c29f4193 ostree-prepare-root: Validate ed25519 signatures when requested
b8ff2109 Factor out a libotcore
265cf7d7 build-sys: Add libsodium to OT_DEP_CRYPTO
a6d9c714 Merge pull request #2922 from alexlarsson/openssl-ed25519
744967a6 libotutil: Link to crypto libs
474c2b10 CI: Enable --with-crypto=openssl on debian testing to test openssl signatures
7b85adfb sign-ed25519: Implement sign and verify using openssl
501575c1 sign-ed25519: Drop some uses of libsodium
5b727751 Merge pull request #2923 from alexlarsson/fix-composefs-test
62e4f376 tests: Fix composefs test
eb011120 show: Add --print-hex
6056ec13 Merge pull request #2913 from cgwalters/tmpfile-not-on-revokefs
8a4a0c16 build(deps): bump composefs from `ac729b5` to `1704f82`
43fb2787 Merge pull request #2918 from ostreedev/dependabot/submodules/composefs-ac729b5
25120bd7 Merge pull request #2912 from cgwalters/itest-transactionality-debug
61720180 Merge pull request #1633 from cgwalters/pkglibexec-tests
ba9c9ded fetcher: Always open tmpfiles in repo (except on FUSE)
9104c54f Merge pull request #2905 from cgwalters/prepare-root-static-split
01be14e6 build(deps): bump composefs from `412cb5e` to `ac729b5`
0c36e814 Drop "ostree trivial-httpd" CLI, move to tests directory
8ad8a79c Merge pull request #2916 from cgwalters/release
b2cfee72 Merge pull request #2914 from cgwalters/doc-usergroups
5aadb6ec configure: post-release version bump
875915f6 prepare-root: Link to glib
d6799ecc Separate prepare-root static path
786e64ce docs: Update user and group section
8bba482b tests: Enable mtime test
0b519c25 tests: Drop unused alias
54c73155 tests/transactionality: Port a bit to xshell
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fadf647d3ec0d3b948841defa5574b60ba223310)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
============
* (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a
race condition that can be used by another process to bypass desired Unix
socket permissions on startup.
* Fix compilation error on MacOS 13 (#12611)
* WAITAOF could timeout in the absence of write traffic in case a new AOF is
created and an AOF rewrite can't immediately start (#12620)
* Fix crash when running rebalance command in a mixed cluster of 7.0 and 7.2
nodes (#12604)
* Fix the return type of the slot number in cluster shards to integer, which
makes it consistent with past behavior (#12561)
* Fix CLUSTER commands are called from modules or scripts to return TLS info
appropriately (#12569)
* redis-cli, fix crash on reconnect when in SUBSCRIBE mode (#12571)
* Fix overflow calculation for next timer event (#12474)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8c749f1cd42ae250b059db5174933f4ed736b758)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
===========
revert of identityref canonical value change
the identity always printed with the module name as the prefix
data tree and hash table optimizations
opaque node handling fixes and improvements
lots of other bug fixes
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c6617ceefacd6af2416dc903320c3ea5fe62b81c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
===========
+ add/use dlg_print_nowrap(), to handle multibyte character strings in
progressbox and tailbox (report/testcase by Sergey Merzlikin).
+ updated configure script, e.g., for compiler-warning fixes.
+ update config.guess, config.sub
+ updated configure script, e.g., for compiler-warning fixes.
+ minor fixes for manpages to address mandoc warnings.
+ updated th.po from
http://translationproject.org/latest/dialog/
+ update config.guess, config.sub
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit acf0c0aab77870cffb45648bcf1ee3ad7a11b37e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Update to the last version as of today.
* Fix typo: EXTRA_OECONF
* Enable building a shared library (.so)
* Disable building a static library (.a)
* Manually passing `-fPIC` is not longer needed because that
flag is already enabled by autotools when building the
shared library.
* Enable the RISCV64 build-recause libunwind supports this
archicture since OE-Core-rev: 2b2f6ff01efd
Signed-off-by: Carlos Alberto Lopez Perez <clopez@igalia.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8188ee344e425035387d4485b6a6457dd4da9424)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix the following QA error.
ERROR: QA Issue: libblockdev: Files/directories were installed but not shipped in any package:
/usr/lib
/usr/lib/python3.11
/usr/lib/python3.11/site-packages
/usr/lib/python3.11/site-packages/gi
/usr/lib/python3.11/site-packages/gi/overrides
/usr/lib/python3.11/site-packages/gi/overrides/BlockDev.py
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a76f0b1f7c9fc7ecb4ebaaf9862fff3624fdef53)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
| |
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 13ab3b1a55f8ecbda99bf5a1b6dd36df2761051f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
| |
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1fc2b9532b56685bd603fe93d867fc1268d7313f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
| |
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a5f0e3291b4947df76f5246ff0d246440e086816)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
| |
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c065c929ab80c0ee5971c74d7e55559eebd78665)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Make sure also without systemd enabled as default, the tools can be built and installed,
such as dlt-adaptor, dlt-adaptor-stdin, dlt-adaptor-udp, dlt-examples and dlt-console.
They have stub functionalities when systemd is not default, but they can still be used with
limited functionalities
Reported-By: Federico Briata <federicobriata@gmail.com>
Reported-By: Andrea Reali <andrea.reali@cnhind.com>
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f558bc9d3b2dab9e1a7824fad04f498839e140af)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
| |
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 99ef9c1969dfb3c0813570e401031fa051ec7a24)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
| |
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5488a32d90a02c700b596cf8746e04bd3fb88272)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* to avoid possible issue next time new mozjs version recipe is
introduced (as multilib isn't as well tested as other build configs)
* this depends on oe-core change to expand script name in MULTILIB_SCRIPTS:
https://lists.openembedded.org/g/openembedded-core/message/188301
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7d473b7616efc0eaa3f44582d0ed5b69f9905f02)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* fixes:
DEBUG: Executing shell function multilibscript_rename
mv: cannot stat 'lib32-mozjs-115/115.2.0/package/usr/bin/js102-config': No such file or directory
WARNING: exit code 1 from a shell command.
* cannot use PV here just yet, see the next commit
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1abd1a419512f9300e98001494eaa67220ee563a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
| |
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5733ddc8346d9dfd47abe773ea93aafb0f451ffa)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
| |
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 23d6505d0bf0bbd5887292658ee98e806c7128de)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
| |
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 09951b1622a736fde8a7b5f8e87a6f224017f1a1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
| |
This fixes a possible segfault in polkit
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2887c5c0a2eb321f277037e055288f05878db369)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes:
WARNING: mozjs-102-102.9.0-r0 do_package_qa: QA Issue: File /usr/src/debug/mozjs-102/102.9.0-r0/intl/components/Unified_cpp_intl_components4.cpp in package mozjs-102-src contains reference to TMPDIR
File /usr/src/debug/mozjs-102/102.9.0-r0/intl/components/Unified_cpp_intl_components0.cpp in package mozjs-102-src contains reference to TMPDIR
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f4dad2f978e3c5614bb164ae9ccb00bb12e9bded)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
| |
Fixes
DEBUG: | Invalid configuration `riscv64gc-yoe-linux-gnu': machine `riscv64gc-yoe' not recognized
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ee100d192dc466eefae420e5e9cf23b74d44562d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
- delete removed configure options
- add dependency on libnvme
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit dc28f172aa70484d71407892918d500150f71670)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
| |
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
| |
* Merge .inc into bb
* Switch to wget fetcher
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
==========
-(CVE-2023-41053) Redis does not correctly identify keys accessed by SORT_RO and,
as a result, may grant users executing this command access to keys that are not
explicitly authorized by the ACL configuration.
-Fix crashes when joining a node to an existing 7.0 Redis Cluster (#12538)
Correct request_policy and response_policy command tips on for some admin /
configuration commands (#12545, #12530)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The CFLAGS is hardcoded as DEFAULT_CFLAGS or DEBUG_CFLAGS in configure
script, so use EXTRA_CFLAGS to make sure -fdebug-prefix-map option passed
to compiler and also need to put EXTRA_CFLAGS configure option after debug
option to avoid the CFLAGS overrided by DEBUG_CFLAGS when debug enabled to
fix the below warning:
WARNING: vlock-2.2.3-r0 do_package_qa: QA Issue: File /usr/lib64/vlock/modules/.debug/new.so in package vlock-dbg contains reference to TMPDIR
File /usr/lib64/vlock/modules/.debug/ttyblank.so in package vlock-dbg contains reference to TMPDIR
File /usr/lib64/vlock/modules/.debug/vesablank.so in package vlock-dbg contains reference to TMPDIR
File /usr/lib64/vlock/modules/.debug/all.so in package vlock-dbg contains reference to TMPDIR
File /usr/lib64/vlock/modules/.debug/nosysrq.so in package vlock-dbg contains reference to TMPDIR
File /usr/sbin/.debug/vlock-main in package vlock-dbg contains reference to TMPDIR [buildpaths]
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Added new functions 'libdeflate_alloc_compressor_ex()' and
'libdeflate_alloc_decompressor_ex()'. These functions allow specifying a
custom memory allocator on a per-compressor basis.
* libdeflate now always generates Huffman codes with at least 2 codewords. This
fixes a compatibility issue where Windows Explorer's ZIP unpacker could not
decompress DEFLATE streams created by libdeflate. libdeflate's behavior was
allowed by the DEFLATE RFC, but not all software was okay with it. In rare
cases, compression ratios can be slightly reduced by this change.
* Disabled the use of some compiler intrinsics on MSVC versions where they don't
work correctly.
* libdeflate can now compress up to the exact size of the output buffer.
* Slightly improved compression performance at levels 1-9.
* Improved the compression ratio of very short inputs.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
CVE-2022-47022.patch
removed since it's included in 2.9.3
Changelog:
===========
* Handle Linux glibc allocation errors in binding routines (CVE-2022-47022).
* Fix hwloc-calc when searching objects on heterogeneous memory platforms,
thanks to Antoine Morvan for the report.
* Fix hwloc_get_next_child() when there are some memory-side caches.
* Don't crash if the topology is empty because Linux cgroups are wrong.
* Improve some hwloc-bind warnings in case of command-line parsing errors.
* Many documentation improvements all over the place, including:
+ hwloc_topology_restrict() and hwloc_topology_insert_group() may reorder
children, causing the logical indexes of objects to change.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Don't override CFLAGS and just append the "-fPIC" to CFLAGS to make
sure -fdebug-prefix-map option passed to compiler to fix the below
issue:
WARNING: minifi-cpp-0.7.0-r0 do_package_qa: QA Issue: File /usr/bin/.debug/minificontroller in package minifi-cpp-dbg contains reference to TMPDIR
File /usr/bin/.debug/minifi in package minifi-cpp-dbg contains reference to TMPDIR [buildpaths]
Pass the OPENSSLDIR to avoid introducing the build path to fix the
below issue:
WARNING: minifi-cpp-0.7.0-r0 do_package_qa: QA Issue: File /usr/bin/minificontroller in package minifi-cpp contains reference to TMPDIR
File /usr/bin/minifi in package minifi-cpp contains reference to TMPDIR [buildpaths]
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Add a patch to disable an offensive hardening option
that causes polkit to segfault
- better safety with deeper resctiction of the configuration files
- better safety with restricting the daemon's owner under systemd
- better safety with the systemd unit sandboxing
- less thread races during upload of the configuration
- glib, gobject, gio >= 2.32
- mozjs-102 OR duktape
- gobject-introspection >= 0.6.2 (optional)
- pam (optional)
- ConsoleKit OR systemd
- gettext
- meson
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
| |
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
| |
ostree-ptest rdepends on strace which is not compatible with riscv32. So
when ptest is enabled, set ostree not compatible with riscv32.
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
| |
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
===========
* Add 'ZIP_LENGTH_TO_END' and 'ZIP_LENGTH_UNCHECKED'. Unless 'ZIP_LENGTH_UNCHECKED'
is used as 'length', it is an error for a file to shrink between the time when
the source is created and when its data is read.
* Fix test on Windows.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Changelog:
==========
+ update test-package for Debian to use debhelper.
+ adjust character-offset in editbox.c in case it is past the end of
the string after trimming (Debian #1003185).
+ updated ro.po from
http://translationproject.org/latest/dialog/
+ fix some inconsistent #if vs #ifdef.
+ correct off-by-one limit for month when validating parameters of the
calendar widget
+ modify dlg_yes_labels to not switch to ok/cancel labels if the
extra button is used
+ move leak-checking definitions from dialog.h to dlg_internals.h
+ use mktemp utility rather than tempfile for temporary filename in
the sample scripts
+ updated id.po, lt.po from
http://translationproject.org/latest/dialog/
+ update config.guess, config.sub
+ directly include stddef.h for systems which need it for offsetof().
+ modify gauge's handle_input function to use the file pointer in the
object in preference to the global dialog_state.
+ correct height-computation for fselect and timebox, broken by fixes
for auto-layout (Debian #990043, cf: 2019/11/10).
+ improve configure --with-no-leaks option
+ amend adjustment to inputbox height so the autosized dimensions match
older versions
+ improve configure checks, to reduce warnings during those checks
+ updated fr.po from
http://translationproject.org/latest/dialog/
+ update config.guess, config.sub
+ change shared-library configuration in test-packages to use the
ABI version in the library filename to match its SONAME.
+ add sample scripts to test-packages, using new makefile rule
"install-examples".
+ corrected cdialog*.install helper scripts in test-package for Debian
+ change ftp URLs in test-packages to https
+ updated configure script, e.g., for compiler-warning fixes.
+ updated fur.po, zh_TW.po from
http://translationproject.org/latest/dialog/
+ modify slackware.rc to match dialog's output from "make check" using
this configuration file (FreeBSD #267777).
+ fix shellcheck warnings in helper-scripts for building/installing.
+ updated configure script, e.g., for compiler-warning fixes.
+ updated hu.po from
http://translationproject.org/latest/dialog/
+ update config.guess, config.sub, install-sh
+ initialize color-settings before --create-rc option is processed.
+ add "use_scrollbar" setting in rc-file to use in whiptail.rc
+ improve manual page discussion of "--" token.
+ updated configure macro for math-library functions.
+ updated ca.po from
http://translationproject.org/latest/dialog/
+ update config.guess
+ fix links in manpages (FreeBSD #264660).
+ document the built-in key bindings which are not part of widgets.
+ updated da.po fa.po is.po, added ka.po from
http://translationproject.org/latest/dialog/
+ update config.sub
+ adjust fallback bindings for backspace/delete to match the curses
library's sense of backspace (Arch #74379).
+ amend limit-checks to make --max-input work for sizes greater than
2048 (Debian #1004874).
+ corrected limit-checks in checklist.c, menubox.c, and treeview.c when
resizing while the data is scrolled (Debian #1004868).
+ improve logic for updating form-height after screen-resizing.
+ move most of the non-API definitions from dialog.h to dlg_internals.h
+ updated configure macros.
+ update config.guess, config.sub
+ updated es.po, tr.po from
http://translationproject.org/latest/dialog/
+ install ".pc" files in the test-packages.
+ add pkg-config ".pc" file, for use with the development library.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
rrdcached package is provided by rrdtool recipe. The build dependency in PACKAGECONFIG is changed to rrdtool.
The error was:
Nothing PROVIDES 'rrdcached' but ../collectd_5.12.0.bb DEPENDS on or otherwise requires it). Close matches:
rrdtool RPROVIDES rrdcached
ERROR: Required build target 'collectd' has no buildable providers.
Missing or unbuildable dependency chain was: ['collectd', 'rrdcached']
With the patch, collectd builds with no errors and the final image I tested includes collectd with rrdcached plugin.
Tested on custom image with collectd_5.12.0.
Signed-off-by: Βούλγαρη Αικατερίνη <aikaterini.voulgari@softcom-int.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
| |
The usage of nobranch=1 in SRC_URI allows using unprotected branches.
This change updates the real branch name in place of nobranch=1 for these components.
Signed-off-by: Sourav Kumar Pramanik <pramanik.souravkumar@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
| |
An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause
a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-47022
https://github.com/open-mpi/hwloc/issues/544
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
| |
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
| |
If CVE_PRODUCT is not explicitly set to google:snappy, CVEs are
found for https://github.com/KnpLabs/snappy instead.
Signed-off-by: Emil Kronborg Andersen <emkan@prevas.dk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
| |
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
| |
Update the SRC_URI to fix the do_fetch error.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
| |
hiredis-use-default-CC-if-it-is-set.patch
oe-use-libc-malloc.patch
refreshed for 7.2.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
gnutls is not enabled in librelp and therefore tests fail becasue it
uses openssl but rsyslog uses gnutls,
FAIL: sndrcv_relp_tls_prio.sh
therefore default to using openssl
for both the packages. gnutls can be enabled for both via bbappends but
its not default anymore.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Nicolas Marguet <nicolas.marguet@windriver.com>
|
|
|
|
|
|
|
| |
This adds QCBOR - a CBOR encoder/decoder library
Signed-off-by: Pawel Langowski <pawel.langowski@3mdeb.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
| |
Changelog:
https://github.com/CESNET/libyang/releases/tag/v2.1.111
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|