summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
...
* postgresql: Fix build on riscvKhem Raj2022-01-252-0/+39
| | | | | | Remove duplicate code Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Update to 8.1.2Khem Raj2022-01-252-2/+7
| | | | | | | | | | | | | - Add fibers support for RISCV64 - Disable build on RISCV32 musl since getcontext/setcontext APIs do not exist on musl which are needed for fibers - Detailed changes are here [1] [1] https://www.php.net/ChangeLog-8.php#PHP_8_1 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlt-daemon: Bump to latest revision on masterKhem Raj2022-01-251-1/+3
| | | | | | | | | | This helps fix compile errors seen with clang e.g. src/lib/dlt_user.c:455:11: error: address argument to atomic operation must be a pointer to _Atomic type ('bool *' invalid) if (!(atomic_compare_exchange_strong(&dlt_user_initialised, &expected, true))) ^ ~~~~~~~~~~~~~~~~~~~~~ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlt-daemon: upgrade 2.18.7 -> 2.18.8wangmy2022-01-252-49/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 317.patch removed since it is included in 2.18.8 Changelog: ========= lib: Fix wrong type alert from lgtm gtest_dlt_daemon_gateway: fix gtest build failed lib: generate dlt library internal log file tests: add stdlib to dlt_cpp_extension dlt_user: Make dlt_init thread safe remove clang-tidy analyzer warnings: incompatible pointer type debian: improve debian build package dlt-control-common: shutdown and close socket dlt_common: improve function description gtest: Bring-in changes gtest: Rework WORKING_DIRECTORY gtest: Correct data amount in gtest_dlt_common cmake: Set empty to systemd_SRCS gtest: Refactor tests/CMakeLists.txt lib: Add SOCK_CLOEXEC to socket daemon: Create parent directory for unix socket cmake: Correct added subdirectories console: Add cmake options for control and timestamp tests: Adapt to DLT_DISABLE_MACRO header: Adapt to DLT_DISABLE_MACRO include: Refactor CMakeLists.txt gtest: Change script name to gtest_dlt_daemon_offline_log.sh daemon: Enable to use FIFO on QNX tests: Add new test case with given buffer tests: Enable macro disabling lib: Add new interfaces with given buffer Implemention of tests for the dlt-qnx-system module lib: Add MaxFileSize handling client: pthread_join for deinit doc: update initial log level document dlt-system: Fix memory leak in dlt-system config dlt_common: remove duplicate stdbool header dlt-control: Add option to config port system: use signalfd for dlt-system console: provides args option to enable send/receive serial header fix malformed printf format strings (#295) cmake: Set WITH_LEGACY_INCLUDE_PATH to ON as default (#334) Make the legacy include path a CMake option (#332) daemon: Call dlt_daemon_configuration_load() properly (#330) dlt_user: Use pthread_setname_np() if available (#326) libdlt: Add legacy include path in exported CMake config file (#327) lib: Set TYLE to 1 for BOOL type (#320) file-transfer: Abort file transfer if get serial number failed dlt_user.c: fixing casting wrong type dlt-sortbytimestamp: Remove duplicated conditional statements code dlt-convert: Remove duplicated conditional statements code doc: Minor fix in dlt_for_developers.md (#321) dlt-control-common.c: Fix build failure due to out-of-bound write -Werror=stringop-truncation Extend include path in *.pc file (#319) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ser2net: upgrade 4.3.4 -> 4.3.5wangmy2022-01-251-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcereal: upgrade 1.3.0 -> 1.3.1wangmy2022-01-252-42/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: year updated to 2022 0001-Use-GNUInstallDirs-instead-of-hard-wiring-install-di.patch removed since it is included in 1.3.1 Changelog: ========= Highlighted fixes and enhancements include: ------------------------------------------ Github actions in place of Travis CI Doctest updates (and upstream patches!) to support all targeted compilers Cmake modernization Bug fixes and minor enhancements: --------------------------------- Fix typo in docs in #597 Add MSVC 2019 to build, default ctor for static object Fix json.hpp compilation issue when int32_t is a long [cpp20] explicitly capture 'this' as copy Fix rapidjson for Clang 10 Fixes to prevent clang-diagnostic errors cleanup cmake files to be a little more moderen CVE-2020-11105: Store a copy of each serialized shared_ptr within the archive to prevent the shared_ptr to be freed to early add license files for components of cereal Catch short documents in JSON input C++17: use inline globals for StaticObjects Use std::variant::emplace when loading Use std::optional::emplace() when loading non-empty optional Fix itsNextName not clearing when not found + style change Update doctest to 2.4.6 + local fixes slated for upstream Fixed loading of std::vector Update license to match BSD template Update doctest to 2.4.7 Use GNUInstallDirs instead of hard wiring install directories Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hostapd: upgrade 2.9 -> 2.10wangmy2022-01-257-1207/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-Prepare-for-CVE-2021-30004.patch.patch CVE-2019-16275.patch CVE-2019-5061.patch CVE-2021-0326.patch CVE-2021-27803.patch CVE-2021-30004.patch removed since they're included in 2.10 License-Update: year updated to 2022. Changelog: ========= * SAE changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] - added option send SAE Confirm immediately (sae_config_immediate=1) after SAE Commit - added support for the hash-to-element mechanism (sae_pwe=1 or sae_pwe=2) - fixed PMKSA caching with OKC - added support for SAE-PK * EAP-pwd changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] * fixed WPS UPnP SUBSCRIBE handling of invalid operations [https://w1.fi/security/2020-1/] * fixed PMF disconnection protection bypass [https://w1.fi/security/2019-7/] * added support for using OpenSSL 3.0 * fixed various issues in experimental support for EAP-TEAP server * added configuration (max_auth_rounds, max_auth_rounds_short) to increase the maximum number of EAP message exchanges (mainly to support cases with very large certificates) for the EAP server * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol) * extended HE (IEEE 802.11ax) support, including 6 GHz support * removed obsolete IAPP functionality * fixed EAP-FAST server with TLS GCM/CCM ciphers * dropped support for libnl 1.1 * added support for nl80211 control port for EAPOL frame TX/RX * fixed OWE key derivation with groups 20 and 21; this breaks backwards compatibility for these groups while the default group 19 remains backwards compatible; owe_ptk_workaround=1 can be used to enabled a a workaround for the group 20/21 backwards compatibility * added support for Beacon protection * added support for Extended Key ID for pairwise keys * removed WEP support from the default build (CONFIG_WEP=y can be used to enable it, if really needed) * added a build option to remove TKIP support (CONFIG_NO_TKIP=y) * added support for Transition Disable mechanism to allow the AP to automatically disable transition mode to improve security * added support for PASN * added EAP-TLS server support for TLS 1.3 (disabled by default for now) * a large number of other fixes, cleanup, and extensions Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ddrescue: upgrade 1.25 -> 1.26wangmy2022-01-251-3/+3
| | | | | | | | | | | | | | | | | | | License-Update: delete a space at the beginning of some comments Changelog: ========= * mapfile.cc (write_mapfile): Check all calls to fprintf. * Show file name in all diagnostics with a file involved. * rescuebook.cc (copy_block): Exit with status 1 on fatal errors. * main_common.cc (getnum): Show option name and valid range if error. * main.cc, ddrescuelog.cc: Remove synonyms '*-logfile', '--pause'. * ddrescuelog.cc: New option '-F, --format'. * command_mode.cc, io.cc, loggers.cc: Missing '#include <algorithm>'. * ddrescue.texi: Improve description of algorithm. * check.sh: A POSIX shell is required to run the tests. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cgdb: upgrade 0.7.1 -> 0.8.0wangmy2022-01-252-72/+2
| | | | | | | | 0001-Avoid-use-of-mips-which-is-reserved-on-mips.patch removed since it is inappropriate in 0.8.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: upgrade 2.18.2 -> 2.19.1wangmy2022-01-251-2/+2
| | | | | | | | | | | | License-Update: year updated to 2022. Changelog: ========= Fix a compilation problem affecting macOS XCode (GH #2880) Fix a build problem preventing amalgamation builds in 2.19.0 (GH #2879) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lxdm: remove conflicts settingMingli Yu2022-01-252-0/+39
| | | | | | | | | | | | | | | | When use plymouth[1] with lxdm, the plymouth boot splash screen will hang there as lxdm.service conflicts with plymouth-quit.service and plymouth-quit will fail to start if plymouth-quit.service and lxdm.service start at the same time and it will result in the boot screen hang forever. Consider there is also After setting for these two services, so remove the conflicts setting to make the service start as expected. [1] https://gitlab.freedesktop.org/plymouth/plymouth/-/tree/main Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp: Update to FreeRDP 2.5.0Marek Vasut2022-01-251-1/+1
| | | | | | | | | | Update FreeRDP to latest stable version, 2.5.0, to pull in latest batch of bugfixes. Signed-off-by: Marek Vasut <marex@denx.de> Cc: Alexander Kanavin <alex@linutronix.de> Cc: Khem Raj <raj.khem@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spdlog: Update the external fmt patchKhem Raj2022-01-251-17/+59
| | | | | | Complete the tweakme.h inclusion Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iotop: Disable LTO with clang/rv64Khem Raj2022-01-251-0/+2
| | | | | | LTO with clang does not configure correctly yet with meta-clang Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencv: update 4.5.2 -> 4.5.5Alexander Kanavin2022-01-253-89/+2
| | | | | | | | | Drop backports. Disable ffmpeg, as opencv is not yet compatible with ffmpeg 5.0. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libvncserver: disable ffmpeg support due to incompatiblility with ffmpeg 5.0Alexander Kanavin2022-01-251-1/+1
| | | | | Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snappy: use main branch to fix fetch failureJan Luebbe2022-01-251-1/+1
| | | | | | | The project has renamed the master branch to main. Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vboxguestdrivers: upgrade 6.1.30 -> 6.1.32Gianfranco Costamagna2022-01-251-1/+1
| | | | | | Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* plymouth: switch to KillMode=mixedMingli Yu2022-01-252-0/+44
| | | | | | | | | | | | | | | KillMode=none is deprecated, so we need to stop using it [1]. For now, use `KillMode=mixed` and `IgnoreOnIsolate=true` instead. In the future, we should change plymouth to be able to exit and start again without restarting the active animation, but that's going to require some effort. [1] https://gitlab.freedesktop.org/plymouth/plymouth/-/issues/123 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sdbus-c++-libsystemd: Fix build on muslKhem Raj2022-01-2428-796/+825
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gtkmm3: add gdk-pixbuf-native to satisfy meson 0.61Alexander Kanavin2022-01-241-1/+1
| | | | | | | | This version of meson checks for gkd-pixbuf utilities regardless of whether demos are enabled or not. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fmt: upgrade 8.0.1 -> 8.1.1Wang Mingyu2022-01-241-1/+1
| | | | | | | | | | | Changelog: ========= Restored ABI compatibility with version 8.0.x Fixed chrono formatting on big endian systems Fixed a linkage error with mingw Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sdbus-c++-libsystemd: upgrade 249 -> 250.3Wang Mingyu2022-01-241-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sdbus-c++-tools: upgrade 1.0.0 -> 1.1.0Wang Mingyu2022-01-241-1/+1
| | | | | | | | | | | | Changelog: ========= Fix timeout handling for asynchronous method calls Add support for unregistering signal handler Add support for chrono literals in sdbus-c++-xml2cpp generator Additional little fixes and improvements in code, build system, and documentation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gmime: inherit valaMarkus Volk2022-01-241-1/+1
| | | | | | | This is needed to get the vala gir files created (needed e.g. to build geary). Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jq: upgrade 1.6 -> 2021-10-24 gitWilliam A. Kennington III2022-01-191-8/+5
| | | | | | | | | | JQ has gone through more than 3 years of code changes and has had significant performance improvements since the last release. The team is still figuring out a new release process. Use the latest git commit to pull in these changes. Signed-off-by: William A. Kennington III <wak@google.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* monit: upgrade 5.29.0 -> 5.30.0wangmy2022-01-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= -New: Add a read-only option to the set httpd statement. The option can be used on the TCP socket, the unix socket, or both. -Changed: Issue #1011: The include statement was limited to 512 files, increase the limit to 1024 files. -Fixed: The disk read and write bytes didn't show up in M/Monit for Monit 5.27.0 or later. -Fixed: Issue #998: Monit 5.29.0 may fail to compile on platforms without the monotonic clock support. -Fixed: Issue #1002: 32-bit Linux machines with more then 4GB of RAM reported wrong system memory size and swap size values. -Fixed: Issue #1005: When the port statement was used with the generic protocol test and the target server returned zeros in response, Monit >= 5.20.0 may crash. -Fixed: Issue #1009: When one executes an action via the Monit HTML GUI (uses a POST request), the Monit HTTP server will redirect the browser back to the base URL, so the browser won't perform the POST request again on an automatic page refresh, which is performed to poll for status changes. -Fixed: Issue #1015: The set httpd statement supports only one address option. Display warning if multiple address options are used. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl2-ttf: upgrade 2.0.15 -> 2.0.18wangmy2022-01-192-10/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | refresh automake_foreign.patch License-Update: year updated to 2022. Changelog: ========= -Added TTF_GetFreeTypeVersion() and TTF_GetHarfBuzzVersion() -Added support for Signed Distance Field rendering with TTF_SetFontSDF() and TTF_GetFontSDF() -Added optional DPI-scaling of fonts, with the following new functions: TTF_OpenFontDPI() TTF_OpenFontIndexDPI() TTF_OpenFontDPIRW() TTF_OpenFontIndexDPIRW() TTF_SetFontSizeDPI() -Added 32-bit character support with: TTF_GlyphIsProvided32() TTF_GlyphMetrics32() TTF_RenderGlyph32_Solid() TTF_RenderGlyph32_Shaded() TTF_RenderGlyph32_Blended() TTF_GetFontKerningSizeGlyphs32() -Added functions to set direction and script when using Harfbuzz: TTF_SetDirection() TTF_SetScript() -Added extended API for text measurement: TTF_MeasureText() TTF_MeasureUTF8() TTF_MeasureUNICODE() -Added TTF_SetFontSize() to set font size dynamically -Added 'Shaded' and 'Solid' text wrapped functions: TTF_RenderText_Solid_Wrapped() TTF_RenderUTF8_Solid_Wrapped() TTF_RenderUNICODE_Solid_Wrapped() TTF_RenderText_Shaded_Wrapped() TTF_RenderUTF8_Shaded_Wrapped() TTF_RenderUNICODE_Shaded_Wrapped() -Added TTF_HINTING_LIGHT_SUBPIXEL for better results at small text sizes at a performance cost Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmodbus: upgrade 3.1.6 -> 3.1.7wangmy2022-01-194-96/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix-typo.patch f1eb4bc7ccb09cd8d19ab641ee37637f8c34d16d.patch removed since they're included in 3.1.7 Changelog: ========= modbus_reply: fix copy & paste error in sanity check Add SECURITY.md Fix typo in comment Replace obsolete AC_PROG_CC_STDC by AC_PROG_CC Fix position of CC flags in documentation Remove duplicate ';' Add the baud rate of 256k for Windows cosmetic changes in man page standardizing itemization Fix many typos Replace .dir-locals.el (Emacs) by .editorconfig Include the test LICENSE in tarball Install the NEWS and AUTHORS files Update README.md docs: fix simple typo, reponse -> response Add modbus_[get|set]_indication_timeout to doc build Fix warning issues Move malloc before starting unit tests Fixed MODBUS_GET_* macros in case of negative values SPDX: change LGPL-2.1+ to LGPL-2.1-or-later Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cups-filters: upgrade 1.27.2 -> 1.28.11wangmy2022-01-193-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: "org.cups.cupsd.Notifier.xml" changed to "utils/org.cups.cupsd.Notifier.xml" "GNU Library" changed to "GNU Library General" "GNU Lesser" changed to "GNU Lesser General" Changelog: URL of issues <https://github.com/OpenPrinting/cups-filters/pull/#####> ========= Bug fix release, containing backports of many of the bugs recently fixed during the preparation of the cups-filters 2.x release. Important is that cups-browsed's queue naming is aligned with CUPS' temporary queue naming now and several bugs affecting driverless printing are fixed. -libcupsfilters: Let PPD generator take default ColorModel from printer (CUPS issue #277). -Braille: In vectortopdf check inkscape version to call inkscape with the correct command line (Issue #315, Pull request #443). -Build system: Make missing DejaVuSans.ttf non-fatal in ./configure as the font is only needed for test programs, not for actual use of cups-filters (Issue #411). -libcupsfilters: In imagetoraster() fixed crash with SGray (Issue #435). -cups-browsed: Naming of local queues is matched to CUPS' current naming of temporary queues (no leading or trailing underscores), to avoid duplicates in print dialogs which support CUPS' temporary queues. -libcupsfilters: Make cupsRasterParseIPPOptions() work correctly with PPDs (Issue #436). -libcupsfilters: Let colord_get_profile_for_device_id() not return empty file name, to avoid error messages in CUPS error_log. -foomatic-rip: Debug message was wrongly sent to stdout and not to log (Issue #422). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: upgrade 2.4.2 -> 2.4.3wangmy2022-01-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Stable security bug-fix release that fixes CVE-2021-4122. All users of cryptsetup 2.4.x must upgrade to this version. Changes since version 2.4.2 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Fix possible attacks against data confidentiality through LUKS2 online reencryption extension crash recovery (CVE-2021-4122). An attacker can modify on-disk metadata to simulate decryption in progress with crashed (unfinished) reencryption step and persistently decrypt part of the LUKS device. This attack requires repeated physical access to the LUKS device but no knowledge of user passphrases. The decryption step is performed after a valid user activates the device with a correct passphrase and modified metadata. There are no visible warnings for the user that such recovery happened (except using the luksDump command). The attack can also be reversed afterward (simulating crashed encryption from a plaintext) with possible modification of revealed plaintext. The size of possible decrypted data depends on configured LUKS2 header size (metadata size is configurable for LUKS2). With the default parameters (16 MiB LUKS2 header) and only one allocated keyslot (512 bit key for AES-XTS), simulated decryption with checksum resilience SHA1 (20 bytes checksum for 4096-byte blocks), the maximal decrypted size can be over 3GiB. The attack is not applicable to LUKS1 format, but the attacker can update metadata in place to LUKS2 format as an additional step. For such a converted LUKS2 header, the keyslot area is limited to decrypted size (with SHA1 checksums) over 300 MiB. The issue is present in all cryptsetup releases since 2.2.0. Versions 1.x, 2.0.x, and 2.1.x are not affected, as these do not contain LUKS2 reencryption extension. The problem was caused by reusing a mechanism designed for actual reencryption operation without reassessing the security impact for new encryption and decryption operations. While the reencryption requires calculating and verifying both key digests, no digest was needed to initiate decryption recovery if the destination is plaintext (no encryption key). Also, some metadata (like encryption cipher) is not protected, and an attacker could change it. Note that LUKS2 protects visible metadata only when a random change occurs. It does not protect against intentional modification but such modification must not cause a violation of data confidentiality. The fix introduces additional digest protection of reencryption metadata. The digest is calculated from known keys and critical reencryption metadata. Now an attacker cannot create correct metadata digest without knowledge of a passphrase for used keyslots. For more details, see LUKS2 On-Disk Format Specification version 1.1.0. The former reencryption operation (without the additional digest) is no longer supported (reencryption with the digest is not backward compatible). You need to finish in-progress reencryption before updating to new packages. The alternative approach is to perform a repair command from the updated package to recalculate reencryption digest and fix metadata. The reencryption repair operation always require a user passphrase. WARNING: Devices with older reencryption in progress can be no longer activated without performing the action mentioned above. Encryption in progress can be detected by running the luksDump command (output includes reencrypt keyslot with reencryption parameters). Also, during the active reencryption, no keyslot operations are available (change of passphrases, etc.). The issue was found by Milan Broz as cryptsetup maintainer. Other changes ~~~~~~~~~~~~~ * Add configure option --disable-luks2-reencryption to completely disable LUKS2 reencryption code. When used, the libcryptsetup library can read metadata with reencryption code, but all reencryption API calls and cryptsetup reencrypt commands are disabled. Devices with online reencryption in progress cannot be activated. This option can cause some incompatibilities. Please use with care. * Improve internal metadata validation code for reencryption metadata. * Add updated documentation for LUKS2 On-Disk Format Specification version 1.1.0 (with reencryption extension description and updated metadata description). See docs/on-disk-format-luks2.pdf or online version in https://gitlab.com/cryptsetup/LUKS2-docs repository. * Fix support for bitlk (BitLocker compatible) startup key with new metadata entry introduced in Windows 11. * Fix space restriction for LUKS2 reencryption with data shift. The code required more space than was needed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iotop: Use lld with clang on armKhem Raj2022-01-191-0/+4
| | | | | | | BFD linker is crashing when using clang, workaround it by always using lld when using clang on arm Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-oe: Add duktapeKhem Raj2022-01-191-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add recipe for duktapeLuca Boccassi2022-01-192-0/+318
| | | | | | | | | Embedded javascript engine, work is almost finished to have polkit use it instead of mozjs, so add a recipe to be ready to switch: https://gitlab.freedesktop.org/polkit/polkit/-/merge_requests/97 Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xorg-xrdp: Upgraded from 0.2.5 to 0.2.18.leimaohui2022-01-191-5/+3
| | | | | | | | | - Upgraded 0.2.5 to 0.2.18 - Deleted xorg-xrdp from PNBLACKLIST, because build error with openssl 3.0 of xrdp has beed fixed. Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xrdp: Fixed build error with openssl 3.0 and upgraded from 0.9.17 to 0.9.18.leimaohui2022-01-191-15/+9
| | | | | | | | | | | | - Fixed build error with openssl 3.0 according to the suggestion of upsream. Please reference to https://github.com/neutrinolabs/xrdp/issues/2121. - Upgraded from 0.9.17 to 0.9.18. - git repository of xrdp has recursive sources, so, reference to Fedora, modified SRC_URI to a tarball download URL of github. Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: avoid textrel QA Issue warningMingli Yu2022-01-191-0/+5
| | | | | | | | | Fixes: WARNING: lib32-php-8.0.12-r0 do_package_qa: QA Issue: lib32-php: ELF binary /usr/libexec/apache2/modules/libphp.so has relocations in .text [textrel] WARNING: lib32-php-8.0.12-r0 do_package_qa: QA Issue: lib32-php-opcache: ELF binary /usr/lib/php8/extensions/no-debug-zts-20200930/opcache.so has relocations in .text [textrel] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uriparser: upgrade 0.9.5 -> 0.9.6wangmy2022-01-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= * Fixed: [CVE-2021-46141] Fix a bug affecting both uriNormalizeSyntax* and uriMakeOwner* functions where the text range in .hostText would not be duped using malloc but remain unchanged (and hence "not owned") for URIs with an IPv4 or IPv6 address hostname; depending on how an application uses uriparser, this could lead the application into a use-after-free situation. As the second half, fix uriFreeUriMembers* functions that would not free .hostText memory for URIs with an IPv4 or IPv6 address host; also, calling uriFreeUriMembers* multiple times on a URI of this very nature would result in trying to free pointers to stack (rather than heap) memory (GitHub #121, GitHub #124) Commit 987b046e41f407d17c622e580fc82a5e834b4329 Commit b1a34743bc1472e055d886e29e9b53f670eb3282 * Fixed: [CVE-2021-46142] Fix functions uriNormalizeSyntax* for out-of-memory situations (i.e. malloc returning NULL) for URIs containing empty segments (any of user info, host text, query, or fragment) where previously pointers to stack (rather than heap) memory were freed (GitHub #122, GitHub #124) Commit c0483990e6b5b454f7c8752b36760cfcb0d093f5 * Fixed: CMake: Call "enable_language(CXX)" prior to tinkering with CMAKE_CXX_* variables (GitHub #110) * Fixed: CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR (GitHub #114) * Fixed: Windows: Address MSVC compiler warnings (GitHub #111, GitHub #113) * Fixed: Documentation: Space requirements for uriUriStringToUnixFilename did not take into account short form "file:/bin/bash" of RFC 8089 of 2017 (with prefix "file:/" rather than "file:///") that uriparser supports since release 0.8.6 in 2018 (GitHub #118, GitHub #119) * Fixed: Compile error with MinGW GCC 9 related to a mismatched prototype for function inet_ntop (GitHub #117, GitHub #120) * Fixed: Compile warnings in test suite code (GitHub #120) * Improved: Respect variable ${CPP} in doc/preprocess.sh (GitHub #115) * Added: Test suite invocation for MinGW using Wine (GitHub #120) * Soname: 1:29:0 - see https://verbump.de/ for what these numbers do Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* protobuf: upgrade 3.19.1 -> 3.19.3wangmy2022-01-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postgresql: Update to 14.1Robert Joslyn2022-01-188-286/+57
| | | | | | | | | | | | | | | | | | | | | | | | Refresh patches, since upstream moved from configure.in to configure.ac. Remove CVE backports that no longer apply to the new version. Update SRC_URI to use https. Upstream redirects http to https anyway. Rework PACKAGECONFIG: * Reorder PACKAGECONFIG to be the same as the `./configure --help` output to make future updates easier. * Move zlib to a PACKAGECONFIG. Upstream enables it by default, so keep it enabled to preserve existing behavior. * Add PACKAGECONFIGs for ldap, systemd, gssapi, xslt, and lz4 * Update openssl to use `--with-ssl=openssl` because the `--with-openssl` form is deprecated. * Remove the nls config because gettext.bbclass already appends the desired option to EXTRA_OECONF based on the value of USE_NLS. Enable spinlocks on aarch64. Support was added in version 9.2.5 and should provide much better performance. Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nlohmann-json: upgrade 3.10.4 -> 3.10.5wangmy2022-01-181-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: year updated to 2022. Changelog: ========= Bug fixes --------- Make sure C++17 filesystem conversions are only used if the compiler supports it. Furthermore, add defines JSON_HAS_FILESYSTEM and JSON_HAS_EXPERIMENTAL_FILESYSTEM which can be set to 0 to avoid using filesystem support altogether.std::filesystem. #3090 #3097 #3101 #3156 #3203 Fix a compilation error with Nvidia CUDA Compiler (NVCC). #3013 #3234 Warnings --------- Fix a warning for shadowed variables. #3188 #3193 Fix a warning on a pointless comparison. #3227 #2712 #2676 #1390 #755 Improvements ------------ Add a parameter to the update function to recursively merge objects with common keys. #3006 #3069 Extend std::hash and std::swap to work on any nlohmann::basic_json specializations rather than just nlohmann::json. #3121 Further Changes -------------- Tests and CI Update CI to use Clang 14, GCC 6, and Clang-Tidy 14. #3088 Update cpplint. #3225 Add build step for the Nvidia CUDA Compiler (NVCC). #3227 Remove Travis CI. #3087 #3233 Compile and execute the test suite with C++17. #3101 Documentation -------------- The mkdocs-based documentation in doc/mkdocs has been totally overworked. It now has a unified structure, more examples, and contains all information from the previous Doxygen-based documentation. The single source of truth is now the documentation on https://json.nlohmann.me and in particular the API Documentation. #3071 Removed Wandbox online examples. #3071 Fix typos, links, and parameter names in the documentation. Add more examples. #3071 #3100 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* htop: Update to 3.1.2Robert Joslyn2022-01-182-31/+32
| | | | | | | | | | | | | | | | | | | | | | | Upstream renamed the branch to "main", update SRC_URI. Refresh pkg-config patch. Update PACKAGECONFIG options. The linux-affinity option was renamed to affinity. Add a packageconfig conflict between affinity and hwloc, since these are mutually exclusive. The setuid option was removed by upstream, and a capabilities option added. The sensors option switched from --with/--without to --enable/--disable. Reorder the option to match the order used in the configure script to make future updates easier. License-Update: The previous license contained an exception for the Portable Linux Processor Affinity (PLPA) project. This exception has been removed, so the project uses an unmodified GPLv2 license. Minor formatting and whitespace changes were also made to match the license text as published by the FSF. Commit making change: https://github.com/htop-dev/htop/commit/088dc5b9a7a5352ee7fdf85f3aff1368958634eb Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* protobuf: Fix static init fiascoHe Zhe2022-01-182-0/+80
| | | | | | | | | | | | | | The protobuf suffers from the C++ "Static Initialization Fiasco" issue. This patches makes the extension attributes have a higher priority than the attributes, so there's no possibility of random initialization orders. Signed-off-by: Jani Nurminen <jani.nurminen@windriver.com> Upstream-Status: Pending Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tree: upgrade 2.0.0 -> 2.0.1Yi Zhao2022-01-181-1/+1
| | | | | | | | | | | | | | | | Version 2.0.1 (01/03/2022) - Simplify Makefile and the following changes: prefix -> PREFIX, BINDIR -> DESTDIR, -O4 -> -O3, mode 644 for man page installation (Michal Vasilek) - Make patterns ending in '/' match directories (but not files) for -I / -P (Michiel Beijen) should also fix issues with --gitignore as well (Taylor Faubion) - Fix --gitignore not matching files relative to the path of the .gitignore (Taylor Faubion) I did say it was hacked together. - Refactored color.c a bit to simplify the code as a prelude to meta coloring. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cmocka: use https protocol for fetchingTim Orling2022-01-181-1/+1
| | | | | | | Upstream gitlab instance is refusing git:// protocol. Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tiptop: update download URL and HOMEPAGETim Orling2022-01-181-2/+4
| | | | | | | | | | HOMEPAGE is now https://team.inria.fr/pacap/software/tiptop/ Download link is now https://files.inria.fr/pacap/tiptop/tiptop-2.3.1.tar.gz Use HOMEPAGE url for UPSTREAM_CHECK_URI. Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jemalloc: Fix build with glibc 2.35+clangKhem Raj2022-01-182-0/+36
| | | | | | | Compiler crashes when using glibc 2.35, it should be fixed in clang but until then workaround it here. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pyxdg: upgrade and remove distutilsRoss Burton2022-01-181-2/+2
| | | | | | | | Upgrade to 0.27, and switch to setuptools now that distutils is deprecated. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sanlock: port to setuptoolsRoss Burton2022-01-182-9/+28
| | | | | | | | | | | Port setup.py to setuptools as distutils is now deprecated. Also, set S to the top of the git repo and use SETUPTOOLS_SETUP_PATH to run the correct script, which means paths outside of the Python module are neater. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iotop: move to the C port of iotopRoss Burton2022-01-182-29/+17
| | | | | | | | | | | The Python iotop implentation hasn't had a release since 2013[1], and there is a C port which is actively maintained and will have a lower impact on the system being monitored. [1] https://repo.or.cz/iotop.git/tag/10c60fedf5051421f4e62b89e2e51e7cc669ce34 Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-08 00:23:10 +0000