Patch the cmake config of the wasm micro runtime dependency. This fixes
the build for x86 by avoiding the cmake try_run() which cannot be
invoked in cross-compiling mode.
Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Avoid following CMake failure which during do_configure stemming from
non-cross compile friendly condition check executed on a build host
which has /usr/share/upstart directory
| CMake Error at src/CMakeLists.txt:550 (install):
| install DIRECTORY given unknown argument "/etc/fluent-bit/".
Also handle systemd init manager case more appropriately, so that it
works also when the build host does not have a /lib/systemd/system
directory.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade valkey to version 8.0.1:
- Fix a build issue with RDMA when using additional make parameters
- Fix an issue where CLUSTER SLOTS might return the wrong tcp or
tls port when called from inside a script or from a module
- Fix a crash when CLUSTER SLOTS or CLUSTER SHARDS is called from
inside a script or from a module
- Fix a build issue on systems where <threads.h> is unavailable
- Fix an issue with the default sentinel.conf being invalid
- Build binary releases with systemd support
- Avoid .c, .d and .o files from being copied to the binary tar.gz
releases
- (CVE-2024-31449) Lua library commands may lead to stack overflow
and potential RCE
- (CVE-2024-31227) Potential Denial-of-service due to malformed ACL
selectors
- (CVE-2024-31228) Potential Denial-of-service due to unbounded
pattern matching
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This macro is documented, so it should be consistent across
different build systems. It's defined in autotools, but not
cmake. Add it for cmake.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ChangeLog:
Security fixes
==============
* (CVE-2024-31449) Lua library commands may lead to stack overflow and
potential RCE.
* (CVE-2024-31228) Potential Denial-of-service due to unbounded pattern
matching.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
wtmpdb installs a PAM plugin in "${base_libdir}/security/pam_wtmpdb.so".
This path is not in default FILES.
Add this path to FILES:${PN} to fix this error:
ERROR: wtmpdb-0.11.0-r0 do_package: QA Issue: wtmpdb: Files/directories were installed but not shipped in any package:
/lib/security/pam_wtmpdb.so
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
wtmpdb: 1 installed and not shipped files. [installed-vs-shipped]
ERROR: wtmpdb-0.11.0-r0 do_package: Fatal QA errors were found, failing task.
ERROR: Logfile of failure stored in: .../poky/build-master/tmp/work/core2-64-poky-linux/wtmpdb/0.11.0/temp/log.do_package.939726
ERROR: Task (.../poky/meta-openembedded/meta-oe/recipes-extended/wtmpdb/wtmpdb_0.11.0.bb:do_package) failed with exit code '1'
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
rocksdb is not compatible with libc-musl:powerpc and armv5, so remove 'rocksdb'
from PACKAGECONFIG. Otherwise it complains error:
| ERROR: Nothing PROVIDES 'rocksdb' (but /path_to/meta-oe/recipes-extended/minifi-cpp/minifi-cpp_0.15.0.bb
DEPENDS on or otherwise requires it)
| rocksdb was skipped: incompatible with host arm-poky-linux-gnueabi (not in COMPATIBLE_HOST)
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Build checks for this during configure but the test is a runtime
test, which does not work when cross-compiling, therefore
prescribe this by caching it for architecture/compiler options
where it will work ok.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This recipe depends on meta-python2, master branch of which has not
been updated sine February 2022, see
https://git.openembedded.org/meta-python2/log/?h=master
Also, the SRC_URI address leads to fedorahosted.org retirement
announcement page, HOMEPAGE does not seem to work, and
https://pypi.org/project/openlmi-tools/ declares the programming
language as Python 2.7.
Thus, remove the obsolete recipe, along with associated packagegroup
declarations/references.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- repo: NUL terminate readlinkat result
- deploy: Log to journal for boot space, not stderr
- commit/payload-link: Ensure we don't overrun target_checksum size
- sysroot: Make coverity happy with dirname+strdup
- tests: Attempt to update auto-prune test
- grub2: Show output when run in systemd by default
- lib/traverse: Fix minor memory leak
- github/workflows/tests: Update actions/upload-artifact to v4
- Redo pages workflow
- spec: %autorelease can't be resolved by COPR
- bootloader/grub2: Handle empty static configs
- workflow/docs: Fix deployments
- curl: Assert that curl_multi_assign worked
- curl: Make socket callback during cleanup into no-op
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* Fix zipconf.h for version number with missing third component.
* Stop searching after finding acceptable central directory, even if it
contains inconsistencies.
* Only write Zip64 EOCD if fields don't fit in normal EOCD. Previously libzip
also wrote it when any directory entry required Zip64.
* Allow bytes from 0x00-0x1F as UTF-8.
* Add new error code 'ZIP_ER_TRUNCATED_ZIP' for files that start with a valid
local header signature.
* 'zipcmp': add '-T' option for comparing timestamps.
* 'zip_file_replace' now removes the target's extra field information.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Valkey is an open source, in-memory data store. Release 8.0.0 is
fully compatible with Redis OSS 7.2.4 and brings:
- Added full client info to SHUTDOWN and CLUSTER FAILOVER logs for
better traceability of requests.
- Resolved issues in replicationSetPrimary where the primary node's
IP/port updates were not correctly handled in the cluster gossip
section.
- Fixed AOF base suffix during rewrites when modifying the
aof-use-rdb-preamble setting, ensuring correct suffix caching to
prevent inconsistencies.
- Addressed rare crashes in async IO threads with TLS by preventing
concurrent read and write job overlap.
- Prevented AOF from being incorrectly disabled after loading RDB
data, ensuring proper re-enabling of AOF.
- Triggered a save of the cluster configuration file before
shutdown to prevent inconsistencies caused by unsaved node
configuration changes.
- Fixed timing issue in CLUSTER SETSLOT to ensure replicas handle
migration correctly when receiving the command before the gossip
update.
- Optimized the handling of temporary set objects in SUNION and
SDIFF commands, resulting in a 41% performance improvement for
SUNION and 27% for SDIFF.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
RISCV support in highway is assuming RVV and RISCV64
however, there is RISCV32 which perhaps does not
have RVV yet
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- flatpak-spawn now supports --sandbox-a11y-own-name (if supported by portal)
- flatpak-spawn prints a useful error when --host isn't permitted
- fixed minor leak in flatpak-spawn
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Polkit unconditionally installs a systemd service, remove it in
do_install() on SysVinit systems to avoid "installed but not packaged
file" error.
Fixes this error:
ERROR: polkit-125-r0 do_package: QA Issue: polkit: Files/directories were installed but not shipped in any package:
/usr/lib/systemd
/usr/lib/systemd/system
/usr/lib/systemd/system/polkit.service
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
polkit: 3 installed and not shipped files. [installed-vs-shipped]
ERROR: polkit-125-r0 do_package: Fatal QA errors were found, failing task.
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add a new OS option to polkit meson: "openembedded" and use this to
set PAM include to common-* which matches OE-Core libpam.
This also may fix a non-reproducibility since polkit meson system tried
to detect the host (compiling) OS and changed PAM config from the
detected value.
Fixes: https://github.com/openembedded/meta-openembedded/issues/860
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
GPR_ASSERT is removed from latest gprc
Fixes
| /home/pokybuild/yocto-worker/meta-oe/build/build/tmp-glibc/work/core2-64-poky-linux/etcd-cpp-apiv3/0.15.4/git/src/v3/Action.cpp: In member function 'void etcdv3::Action::waitForResponse()':
| /home/pokybuild/yocto-worker/meta-oe/build/build/tmp-glibc/work/core2-64-poky-linux/etcd-cpp-apiv3/0.15.4/git/src/v3/Action.cpp:101:5: error: 'GPR_ASSERT' was not declared in this scope
| 101 | GPR_ASSERT(got_tag == (void*) this);
| | ^~~~~~~~~~
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- fix time calculations for dead host
- change paxos_acquire error for initial host state
- fix for lver that was abandoned in dblock
- terminate helper path and args
- fix freeing lvb after io timeout
- add sysusers file
- rem_lockspace EBUSY when orphans exist
- fix SANLK_ACQUIRE_ORPHAN_ONLY
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- omkafka enhance: write Kafka log with level ERROR or higher into errorfile
- net subsusytem bugfix: some config statemens were not accepted
- new "ossl" crypto provider
- imtcp: improve connection error messages
0001-tests-disable-the-check-for-inotify.patch
use-pkgconfig-to-check-libgcrypt.patch
refreshed for 8.2408.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- pam_lastlog2: differentiate between three error cases
- Fix error handling of sqlite3_step
- Don't call exit() in a library
- Support 32bit time_t (but is not Y2038 safe!)
- lib/lastlog2: always use int64_t internal
- committed
- Fix minimum required meson version
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Dependencies:
In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.10.0 is required.
This version adds a new feature which is required by the security fix in this release.
Security fixes:
Don't follow symbolic links when mounting persistent directories (--persist option). This prevents a sandbox escape where a malicious or compromised app could edit the symlink to point to a directory that the app should not have been allowed to read or write. (CVE-2024-42472, GHSA-7hgv-f2j8-xw87)
Documentation:
Mark the 1.12.x and 1.10.x branches as end-of-life (#5352)
Other bug fixes:
Fix several memory leaks (#5883, #5884)
Internal changes:
Record a log file when running build-time tests with AddressSanitizer (#5884)
Add initial suppressions file for AddressSanitizer (#5884)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* broken since
https://github.com/openembedded/meta-openembedded/pull/859
which moved the files from ${sysconfdir} which is packaged
in ${PN} by default into ${datadir} which isn't packaged causing:
ERROR: QA Issue: polkit-group-rule-network: Files/directories were installed but not shipped in any package:
/usr
/usr/share
/usr/share/polkit-1
/usr/share/polkit-1/rules.d
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
polkit-group-rule-network: 4 installed and not shipped files. [installed-vs-shipped]
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Patrick Wicki
Niko Mauno
Jiaying Song
Alexander Kanavin
Yi Zhao
Khem Raj
Leon Anavi
Chen Qi
Yoann Congal
Kai Kang
Wang Mingyu
Richard Tollerton
Markus Volk
Alexandre Truong
Ricardo Simoes
Martin Jansa