Commit Graph

10116 Commits

Author SHA1 Message Date
Khem Raj 3ab9736fc6 pcp: Disable parallel compile
This fails often with
| chkacc1.c:8:10: fatal error: localconfig.h: No such file or directory
|     8 | #include "localconfig.h"
|       |          ^~~~~~~~~~~~~~~

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:49:20 -08:00
Ross Burton 4b4485fe77 concurrencykit: enable 32- and 64-bit Arm targets
As per upstream, 32- and 64-bit Arm targets are supported.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Trevor Gamblin edf4e7ad83 phoronix-test-suite: upgrade 9.2.1 -> 10.8.1
10.8.1 is the latest release, including fixes for CVE-2022-0196 and
CVE-2022-0197. Since the version jump is significant, the release notes
would be too long to list here. They can be found at
https://github.com/phoronix-test-suite/phoronix-test-suite/releases.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton 880defa729 fwupd-efi: upgrade to 1.2
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton ff9442e0f9 libjs-jquery: remove
This is a very old release of jQuery, 1.7.2 was released in 2012.

As nothing depends on this, remove it.  If someone needs a jQuery recipe
they can add a new recipe for a supported version.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton e4ad5c15c3 mailx: remove
Heirloom Mailx hasn't been maintained for some time: the last release
on their web site was 11.25 in 2005 and Debian shipped 12.5 in 2016, but
this appears to be a Debian-specific fork which is also now dead.

Now that we have s-nail, we can drop mailx.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton a0ea794394 smartmontools: use s-nail
As mailx is unmaintained, depend on s-nail instead of mailx.

Also recommend instead of depend, so you don't need to send email.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton 8bddd0f1b3 s-nail: add a maintained mail(1) fork
Heirloom Mailx hasn't been maintained for some time: the last release
on their web site was 11.25 in 2005 and Debian shipped 12.5 in 2016, but
this appears to be a Debian-specific fork which is also now dead.

s-nail is an alternative mail(1) fork which is actively maintained, so
add a recipe for that.  It provides an alternative for ${bindir}/mailx,
so should be a drop-in replacement.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Oleksandr Kravchuk c8544b3627 redis: add recipe for 7.0-rc1
Redis 7.0 "includes changes that potentially break backwards
compatibility with older versions", so let's let folks some time to
test 7.0 and later decide which version(s) we want to keep.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton a4a9cd2118 poppler-data: set precise BSD license
The cMap data is under a BSD-3-Clause license.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton b3a2b1e1d1 pkcs11-helper: set precise BSD license
This package is BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton 2f18574ffe pkcs11-helper: update homepage
www.opensc-project.org expired, so point at the GitHub project page.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:44:32 -08:00
Ross Burton 671b8aa487 concurrencykit: use precise BSD licence version
This package is BSD-2-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:41:05 -08:00
Alejandro Hernandez Samaniego e11597471c remmina: Upgrade to 1.4.23
- Disable support for ayatana-appindicator

Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:41:05 -08:00
Daniel Gomez 523d3d61f7 opencv: Update contrib 4.5.2 -> 4.5.5
Patch [1] was dropped but contrib repo was not updated leading into the
glog link issues for the sfm module. Update opencv_contrib 4.5.2 ->
4.5.5.

Error:
/var/lib/yocto/builds/build_honister/tmp/work/bobcat-poky-linux/
qtec-screwcounter-camera/1.0+gitAUTOINC+7f76d8d874-r0/
recipe-sysroot-native/usr/bin/x86_64-poky-linux/../../libexec/
x86_64-poky-linux/gcc/x86_64-poky-linux/11.2.0/ld:
/var/lib/yocto/builds/build_honister/tmp/work/bobcat-poky-linux/
qtec-screwcounter-camera/1.0+gitAUTOINC+7f76d8d874-r0/recipe-sysroot/
usr/lib/../lib/libopencv_sfm.so:
undefined reference to `google::LogMessageFatal::LogMessageFatal(char
const*, int)'

[1]:
meta-oe/recipes-support/opencv/opencv/0001-sfm-link-with-Glog_LIBS.patch

Signed-off-by: Daniel Gomez <dagmcr@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-03 08:41:05 -08:00
Khem Raj 829327315f libcec: Fix type mismatch for return value of LibCecBootloader()
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-28 09:40:58 -08:00
An?bal Lim?n 2855fb2de8 unattended-upgrades: add new recipe version 2.6
The unattended-upgrades is a set of scripts that allows to execute
unattended upgrades in debian based systems in this case when
enable package_deb and add package management into the image.

At this moment installs all the required script and files into the image
leaving the configuration and execution to be implemented by distro.

Signed-off-by: Aníbal Limón <limon.anibal@gmail.com>
Signed-off-by: Aníbal Limón <anibal@rzerosystems.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-28 09:40:58 -08:00
An?bal Lim?n a95d3a0f33 python3-apt: add new recipe version 2.3.0
This recipe enables python3-apt wrapper to use apt in easy way
from python3.

Signed-off-by: Aníbal Limón <limon.anibal@gmail.com>
Signed-off-by: Aníbal Limón <anibal@rzerosystems.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-28 09:40:58 -08:00
Gianfranco Costamagna 7d03e44490 boinc-client: Update to 7.18.1
* update to 7.18.1 and unblacklist
* Add openssl 3.0 build fix provided by upstream
* fix the sed command to work with the correct new libtool named file
* refresh patches
* drop patch part that is added in one patch and removed in the following one

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-27 08:58:47 -08:00
Khem Raj aa22894fa3 postgresql: Fix build on riscv
Remove duplicate code

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 21:03:16 -08:00
Khem Raj 61e1697e92 php: Update to 8.1.2
- Add fibers support for RISCV64

- Disable build on RISCV32 musl since getcontext/setcontext APIs do not
  exist on musl which are needed for fibers

- Detailed changes are here [1]

[1] https://www.php.net/ChangeLog-8.php#PHP_8_1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 21:03:16 -08:00
Khem Raj a5307424a1 dlt-daemon: Bump to latest revision on master
This helps fix compile errors seen with clang
e.g.
src/lib/dlt_user.c:455:11: error: address argument to atomic operation must be a pointer to _Atomic type ('bool *' invalid)
    if (!(atomic_compare_exchange_strong(&dlt_user_initialised, &expected, true)))
          ^                              ~~~~~~~~~~~~~~~~~~~~~

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 21:03:16 -08:00
wangmy 90f3ff2ea3 dlt-daemon: upgrade 2.18.7 -> 2.18.8
317.patch
removed since it is included in 2.18.8

Changelog:
=========
lib: Fix wrong type alert from lgtm
gtest_dlt_daemon_gateway: fix gtest build failed
lib: generate dlt library internal log file
tests: add stdlib to dlt_cpp_extension
dlt_user: Make dlt_init thread safe
remove clang-tidy analyzer warnings: incompatible pointer type
debian: improve debian build package
dlt-control-common: shutdown and close socket
dlt_common: improve function description
gtest: Bring-in changes
gtest: Rework WORKING_DIRECTORY
gtest: Correct data amount in gtest_dlt_common
cmake: Set empty to systemd_SRCS
gtest: Refactor tests/CMakeLists.txt
lib: Add SOCK_CLOEXEC to socket
daemon: Create parent directory for unix socket
cmake: Correct added subdirectories
console: Add cmake options for control and timestamp
tests: Adapt to DLT_DISABLE_MACRO
header: Adapt to DLT_DISABLE_MACRO
include: Refactor CMakeLists.txt
gtest: Change script name to gtest_dlt_daemon_offline_log.sh
daemon: Enable to use FIFO on QNX
tests: Add new test case with given buffer
tests: Enable macro disabling
lib: Add new interfaces with given buffer
Implemention of tests for the dlt-qnx-system module
lib: Add MaxFileSize handling
client: pthread_join for deinit
doc: update initial log level document
dlt-system: Fix memory leak in dlt-system config
dlt_common: remove duplicate stdbool header
dlt-control: Add option to config port
system: use signalfd for dlt-system
console: provides args option to enable send/receive serial header
fix malformed printf format strings (#295)
cmake: Set WITH_LEGACY_INCLUDE_PATH to ON as default (#334)
Make the legacy include path a CMake option (#332)
daemon: Call dlt_daemon_configuration_load() properly (#330)
dlt_user: Use pthread_setname_np() if available (#326)
libdlt: Add legacy include path in exported CMake config file (#327)
lib: Set TYLE to 1 for BOOL type (#320)
file-transfer: Abort file transfer if get serial number failed
dlt_user.c: fixing casting wrong type
dlt-sortbytimestamp: Remove duplicated conditional statements code
dlt-convert: Remove duplicated conditional statements code
doc: Minor fix in dlt_for_developers.md (#321)
dlt-control-common.c: Fix build failure due to out-of-bound write -Werror=stringop-truncation
Extend include path in *.pc file (#319)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 10:56:04 -08:00
wangmy 468a3431c0 ser2net: upgrade 4.3.4 -> 4.3.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 10:56:04 -08:00
wangmy a6e7ddefe7 libcereal: upgrade 1.3.0 -> 1.3.1
License-Update: year updated to 2022

0001-Use-GNUInstallDirs-instead-of-hard-wiring-install-di.patch
removed since it is included in 1.3.1

Changelog:
=========
Highlighted fixes and enhancements include:
------------------------------------------
Github actions in place of Travis CI
Doctest updates (and upstream patches!) to support all targeted compilers
Cmake modernization

Bug fixes and minor enhancements:
---------------------------------
Fix typo in docs in #597
Add MSVC 2019 to build, default ctor for static object
Fix json.hpp compilation issue when int32_t is a long
[cpp20] explicitly capture 'this' as copy
Fix rapidjson for Clang 10
Fixes to prevent clang-diagnostic errors
cleanup cmake files to be a little more moderen
CVE-2020-11105: Store a copy of each serialized shared_ptr within the archive to prevent the shared_ptr to be freed to early
add license files for components of cereal
Catch short documents in JSON input
C++17: use inline globals for StaticObjects
Use std::variant::emplace when loading
Use std::optional::emplace() when loading non-empty optional
Fix itsNextName not clearing when not found + style change
Update doctest to 2.4.6 + local fixes slated for upstream
Fixed loading of std::vector
Update license to match BSD template
Update doctest to 2.4.7
Use GNUInstallDirs instead of hard wiring install directories

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 10:56:04 -08:00
wangmy 16bda78542 hostapd: upgrade 2.9 -> 2.10
0001-Prepare-for-CVE-2021-30004.patch.patch
CVE-2019-16275.patch
CVE-2019-5061.patch
CVE-2021-0326.patch
CVE-2021-27803.patch
CVE-2021-30004.patch
removed since they're included in 2.10

License-Update: year updated to 2022.

Changelog:
=========
* SAE changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  - added option send SAE Confirm immediately (sae_config_immediate=1)
    after SAE Commit
  - added support for the hash-to-element mechanism (sae_pwe=1 or
    sae_pwe=2)
  - fixed PMKSA caching with OKC
  - added support for SAE-PK
* EAP-pwd changes
  - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
* fixed WPS UPnP SUBSCRIBE handling of invalid operations
  [https://w1.fi/security/2020-1/]
* fixed PMF disconnection protection bypass
  [https://w1.fi/security/2019-7/]
* added support for using OpenSSL 3.0
* fixed various issues in experimental support for EAP-TEAP server
* added configuration (max_auth_rounds, max_auth_rounds_short) to
  increase the maximum number of EAP message exchanges (mainly to
  support cases with very large certificates) for the EAP server
* added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
* extended HE (IEEE 802.11ax) support, including 6 GHz support
* removed obsolete IAPP functionality
* fixed EAP-FAST server with TLS GCM/CCM ciphers
* dropped support for libnl 1.1
* added support for nl80211 control port for EAPOL frame TX/RX
* fixed OWE key derivation with groups 20 and 21; this breaks backwards
  compatibility for these groups while the default group 19 remains
  backwards compatible; owe_ptk_workaround=1 can be used to enabled a
  a workaround for the group 20/21 backwards compatibility
* added support for Beacon protection
* added support for Extended Key ID for pairwise keys
* removed WEP support from the default build (CONFIG_WEP=y can be used
  to enable it, if really needed)
* added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
* added support for Transition Disable mechanism to allow the AP to
  automatically disable transition mode to improve security
* added support for PASN
* added EAP-TLS server support for TLS 1.3 (disabled by default for now)
* a large number of other fixes, cleanup, and extensions

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 10:56:04 -08:00
wangmy 985385ff73 ddrescue: upgrade 1.25 -> 1.26
License-Update: delete a space at the beginning of some comments

Changelog:
=========
* mapfile.cc (write_mapfile): Check all calls to fprintf.
* Show file name in all diagnostics with a file involved.
* rescuebook.cc (copy_block): Exit with status 1 on fatal errors.
* main_common.cc (getnum): Show option name and valid range if error.
* main.cc, ddrescuelog.cc: Remove synonyms '*-logfile', '--pause'.
* ddrescuelog.cc: New option '-F, --format'.
* command_mode.cc, io.cc, loggers.cc: Missing '#include <algorithm>'.
* ddrescue.texi: Improve description of algorithm.
* check.sh: A POSIX shell is required to run the tests.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 10:56:04 -08:00
wangmy 46a98bfa3b cgdb: upgrade 0.7.1 -> 0.8.0
0001-Avoid-use-of-mips-which-is-reserved-on-mips.patch
removed since it is inappropriate in 0.8.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 10:56:04 -08:00
wangmy ac3bf04b28 botan: upgrade 2.18.2 -> 2.19.1
License-Update: year updated to 2022.

Changelog:
=========
Fix a compilation problem affecting macOS XCode (GH #2880)
Fix a build problem preventing amalgamation builds in 2.19.0 (GH #2879)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 10:56:04 -08:00
Mingli Yu fbfb73d201 lxdm: remove conflicts setting
When use plymouth[1] with lxdm, the plymouth boot splash screen
will hang there as lxdm.service conflicts with plymouth-quit.service
and plymouth-quit will fail to start if plymouth-quit.service and
lxdm.service start at the same time and it will result in the boot
screen hang forever.

Consider there is also After setting for these two services, so
remove the conflicts setting to make the service start as expected.

[1] https://gitlab.freedesktop.org/plymouth/plymouth/-/tree/main

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Marek Vasut d82d175a80 freerdp: Update to FreeRDP 2.5.0
Update FreeRDP to latest stable version, 2.5.0,
to pull in latest batch of bugfixes.

Signed-off-by: Marek Vasut <marex@denx.de>
Cc: Alexander Kanavin <alex@linutronix.de>
Cc: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Khem Raj 73ce3883fd spdlog: Update the external fmt patch
Complete the tweakme.h inclusion

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Khem Raj 1bc0fc5381 iotop: Disable LTO with clang/rv64
LTO with clang does not configure correctly yet with meta-clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Alexander Kanavin ea427dceaa opencv: update 4.5.2 -> 4.5.5
Drop backports.

Disable ffmpeg, as opencv is not yet compatible with ffmpeg 5.0.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Alexander Kanavin 4a4abee38a libvncserver: disable ffmpeg support due to incompatiblility with ffmpeg 5.0
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Jan Luebbe 0c9c5c6661 snappy: use main branch to fix fetch failure
The project has renamed the master branch to main.

Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Gianfranco Costamagna 5a3b144667 vboxguestdrivers: upgrade 6.1.30 -> 6.1.32
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Mingli Yu 7981762d67 plymouth: switch to KillMode=mixed
KillMode=none is deprecated, so we need to stop using it [1].

For now, use `KillMode=mixed` and `IgnoreOnIsolate=true` instead.

In the future, we should change plymouth to be able to exit and
start again without restarting the active animation, but that's
going to require some effort.

[1] https://gitlab.freedesktop.org/plymouth/plymouth/-/issues/123

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-25 09:13:09 -08:00
Khem Raj ebe8e82538 sdbus-c++-libsystemd: Fix build on musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-24 09:11:01 -08:00
Alexander Kanavin 4960e4ceab gtkmm3: add gdk-pixbuf-native to satisfy meson 0.61
This version of meson checks for gkd-pixbuf utilities
regardless of whether demos are enabled or not.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-24 09:11:01 -08:00
Wang Mingyu fd4bb54147 fmt: upgrade 8.0.1 -> 8.1.1
Changelog:
=========
Restored ABI compatibility with version 8.0.x
Fixed chrono formatting on big endian systems
Fixed a linkage error with mingw

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-24 09:11:01 -08:00
Wang Mingyu 225699b7be sdbus-c++-libsystemd: upgrade 249 -> 250.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-24 09:11:01 -08:00
Wang Mingyu 488b89e470 sdbus-c++-tools: upgrade 1.0.0 -> 1.1.0
Changelog:
=========
Fix timeout handling for asynchronous method calls
Add support for unregistering signal handler
Add support for chrono literals in sdbus-c++-xml2cpp generator
Additional little fixes and improvements in code, build system, and documentation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-24 09:11:01 -08:00
Markus Volk adbdc4c63a gmime: inherit vala
This is needed to get the vala gir files created (needed e.g. to build geary).

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-24 09:11:01 -08:00
William A. Kennington III 0d8dee9172 jq: upgrade 1.6 -> 2021-10-24 git
JQ has gone through more than 3 years of code changes and has had
significant performance improvements since the last release. The team is
still figuring out a new release process. Use the latest git commit to
pull in these changes.

Signed-off-by: William A. Kennington III <wak@google.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-19 09:28:51 -08:00
wangmy 02a08d021a monit: upgrade 5.29.0 -> 5.30.0
Changelog:
=========
-New: Add a read-only option to the set httpd statement. The option can be used
 on the TCP socket, the unix socket, or both.
-Changed: Issue #1011: The include statement was limited to 512 files, increase
 the limit to 1024 files.
-Fixed: The disk read and write bytes didn't show up in M/Monit for Monit 5.27.0
 or later.
-Fixed: Issue #998: Monit 5.29.0 may fail to compile on platforms without the
 monotonic clock support.
-Fixed: Issue #1002: 32-bit Linux machines with more then 4GB of RAM reported
 wrong system memory size and swap size values.
-Fixed: Issue #1005: When the port statement was used with the generic protocol
 test and the target server returned zeros in response, Monit >= 5.20.0 may crash.
-Fixed: Issue #1009: When one executes an action via the Monit HTML GUI (uses a
 POST request), the Monit HTTP server will redirect the browser back to the base
 URL, so the browser won't perform the POST request again on an automatic page
 refresh, which is performed to poll for status changes.
-Fixed: Issue #1015: The set httpd statement supports only one address option.
 Display warning if multiple address options are used.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-19 09:01:04 -08:00
wangmy 74e71f017a libsdl2-ttf: upgrade 2.0.15 -> 2.0.18
refresh automake_foreign.patch

License-Update: year updated to 2022.

Changelog:
=========
-Added TTF_GetFreeTypeVersion() and TTF_GetHarfBuzzVersion()
-Added support for Signed Distance Field rendering with TTF_SetFontSDF() and
 TTF_GetFontSDF()
-Added optional DPI-scaling of fonts, with the following new functions:
 TTF_OpenFontDPI()
 TTF_OpenFontIndexDPI()
 TTF_OpenFontDPIRW()
 TTF_OpenFontIndexDPIRW()
 TTF_SetFontSizeDPI()
-Added 32-bit character support with:
 TTF_GlyphIsProvided32()
 TTF_GlyphMetrics32()
 TTF_RenderGlyph32_Solid()
 TTF_RenderGlyph32_Shaded()
 TTF_RenderGlyph32_Blended()
 TTF_GetFontKerningSizeGlyphs32()
-Added functions to set direction and script when using Harfbuzz:
 TTF_SetDirection()
 TTF_SetScript()
-Added extended API for text measurement:
 TTF_MeasureText()
 TTF_MeasureUTF8()
 TTF_MeasureUNICODE()
-Added TTF_SetFontSize() to set font size dynamically
-Added 'Shaded' and 'Solid' text wrapped functions:
 TTF_RenderText_Solid_Wrapped()
 TTF_RenderUTF8_Solid_Wrapped()
 TTF_RenderUNICODE_Solid_Wrapped()
 TTF_RenderText_Shaded_Wrapped()
 TTF_RenderUTF8_Shaded_Wrapped()
 TTF_RenderUNICODE_Shaded_Wrapped()
-Added TTF_HINTING_LIGHT_SUBPIXEL for better results at small text sizes at a
 performance cost

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-19 09:01:04 -08:00
wangmy e3929a60d6 libmodbus: upgrade 3.1.6 -> 3.1.7
Fix-typo.patch
f1eb4bc7ccb09cd8d19ab641ee37637f8c34d16d.patch
removed since they're included in 3.1.7

Changelog:
=========
modbus_reply: fix copy & paste error in sanity check
Add SECURITY.md
Fix typo in comment
Replace obsolete AC_PROG_CC_STDC by AC_PROG_CC
Fix position of CC flags in documentation
Remove duplicate ';'
Add the baud rate of 256k for Windows
cosmetic changes in man page standardizing itemization
Fix many typos
Replace .dir-locals.el (Emacs) by .editorconfig
Include the test LICENSE in tarball
Install the NEWS and AUTHORS files
Update README.md
docs: fix simple typo, reponse -> response
Add modbus_[get|set]_indication_timeout to doc build
Fix warning issues
Move malloc before starting unit tests
Fixed MODBUS_GET_* macros in case of negative values
SPDX: change LGPL-2.1+ to LGPL-2.1-or-later

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-19 09:01:04 -08:00
wangmy 3ec0b14aa4 cups-filters: upgrade 1.27.2 -> 1.28.11
License-Update:
"org.cups.cupsd.Notifier.xml" changed to "utils/org.cups.cupsd.Notifier.xml"
"GNU Library" changed to "GNU Library General"
"GNU Lesser" changed to "GNU Lesser General"

Changelog:
URL of issues  <https://github.com/OpenPrinting/cups-filters/pull/#####>
=========
Bug fix release, containing backports of many of the bugs recently fixed during
the preparation of the cups-filters 2.x release.
Important is that cups-browsed's queue naming is aligned with CUPS' temporary
queue naming now and several bugs affecting driverless printing are fixed.

-libcupsfilters: Let PPD generator take default ColorModel from printer
 (CUPS issue #277).
-Braille: In vectortopdf check inkscape version to call inkscape with the
 correct command line (Issue #315, Pull request #443).
-Build system: Make missing DejaVuSans.ttf non-fatal in ./configure as the font
 is only needed for test programs, not for actual use of cups-filters
 (Issue #411).
-libcupsfilters: In imagetoraster() fixed crash with SGray (Issue #435).
-cups-browsed: Naming of local queues is matched to CUPS' current naming of
 temporary queues (no leading or trailing underscores), to avoid duplicates in
 print dialogs which support CUPS' temporary queues.
-libcupsfilters: Make cupsRasterParseIPPOptions() work correctly with PPDs
 (Issue #436).
-libcupsfilters: Let colord_get_profile_for_device_id() not return empty file
 name, to avoid error messages in CUPS error_log.
-foomatic-rip: Debug message was wrongly sent to stdout and not to log
 (Issue #422).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-19 09:01:04 -08:00
wangmy 9f4d806758 cryptsetup: upgrade 2.4.2 -> 2.4.3
Changelog:
=========
Stable security bug-fix release that fixes CVE-2021-4122.

All users of cryptsetup 2.4.x must upgrade to this version.

Changes since version 2.4.2
~~~~~~~~~~~~~~~~~~~~~~~~~~~

* Fix possible attacks against data confidentiality through LUKS2 online
  reencryption extension crash recovery (CVE-2021-4122).

  An attacker can modify on-disk metadata to simulate decryption in
  progress with crashed (unfinished) reencryption step and persistently
  decrypt part of the LUKS device.

  This attack requires repeated physical access to the LUKS device but
  no knowledge of user passphrases.

  The decryption step is performed after a valid user activates
  the device with a correct passphrase and modified metadata.
  There are no visible warnings for the user that such recovery happened
  (except using the luksDump command). The attack can also be reversed
  afterward (simulating crashed encryption from a plaintext) with
  possible modification of revealed plaintext.

  The size of possible decrypted data depends on configured LUKS2 header
  size (metadata size is configurable for LUKS2).
  With the default parameters (16 MiB LUKS2 header) and only one
  allocated keyslot (512 bit key for AES-XTS), simulated decryption with
  checksum resilience SHA1 (20 bytes checksum for 4096-byte blocks),
  the maximal decrypted size can be over 3GiB.

  The attack is not applicable to LUKS1 format, but the attacker can
  update metadata in place to LUKS2 format as an additional step.
  For such a converted LUKS2 header, the keyslot area is limited to
  decrypted size (with SHA1 checksums) over 300 MiB.

  The issue is present in all cryptsetup releases since 2.2.0.
  Versions 1.x, 2.0.x, and 2.1.x are not affected, as these do not
  contain LUKS2 reencryption extension.

  The problem was caused by reusing a mechanism designed for actual
  reencryption operation without reassessing the security impact for new
  encryption and decryption operations. While the reencryption requires
  calculating and verifying both key digests, no digest was needed to
  initiate decryption recovery if the destination is plaintext (no
  encryption key). Also, some metadata (like encryption cipher) is not
  protected, and an attacker could change it. Note that LUKS2 protects
  visible metadata only when a random change occurs. It does not protect
  against intentional modification but such modification must not cause
  a violation of data confidentiality.

  The fix introduces additional digest protection of reencryption
  metadata. The digest is calculated from known keys and critical
  reencryption metadata. Now an attacker cannot create correct metadata
  digest without knowledge of a passphrase for used keyslots.
  For more details, see LUKS2 On-Disk Format Specification version 1.1.0.

  The former reencryption operation (without the additional digest) is no
  longer supported (reencryption with the digest is not backward
  compatible). You need to finish in-progress reencryption before
  updating to new packages. The alternative approach is to perform
  a repair command from the updated package to recalculate reencryption
  digest and fix metadata.
  The reencryption repair operation always require a user passphrase.

  WARNING: Devices with older reencryption in progress can be no longer
  activated without performing the action mentioned above.

  Encryption in progress can be detected by running the luksDump command
  (output includes reencrypt keyslot with reencryption parameters). Also,
  during the active reencryption, no keyslot operations are available
  (change of passphrases, etc.).

  The issue was found by Milan Broz as cryptsetup maintainer.

Other changes
~~~~~~~~~~~~~
* Add configure option --disable-luks2-reencryption to completely disable
  LUKS2 reencryption code.

  When used, the libcryptsetup library can read metadata with
  reencryption code, but all reencryption API calls and cryptsetup
  reencrypt commands are disabled.

  Devices with online reencryption in progress cannot be activated.
  This option can cause some incompatibilities. Please use with care.

* Improve internal metadata validation code for reencryption metadata.

* Add updated documentation for LUKS2 On-Disk Format Specification
  version 1.1.0 (with reencryption extension description and updated
  metadata description). See docs/on-disk-format-luks2.pdf or online
  version in https://gitlab.com/cryptsetup/LUKS2-docs repository.

* Fix support for bitlk (BitLocker compatible) startup key with new
  metadata entry introduced in Windows 11.

* Fix space restriction for LUKS2 reencryption with data shift.
  The code required more space than was needed.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-19 09:01:04 -08:00