- add a patch to fix build for the newly added wayland_security_context feature
- build wayland_security_context according to wayland distro_feature
- add GIR_MESON_OPTION
- add packageconfigs for selinux and http_backend
Dependencies:
In distributions that compile Flatpak to use a separate bubblewrap (bwrap)
executable, version 0.8.0 is now required.
Enabling the optional Wayland security context feature requires
libwayland-client, wayland-scanner >= 1.15 and wayland-protocols >= 1.32.
Ubuntu 18.04 is no longer routinely tested. Support for dependency
versions included in Ubuntu 18.04 should be considered "at risk".
Features:
Add --device=input, for access to evdev devices in /dev/input (#5481)
Update bundled copy of bubblewrap to version 0.8.0, and rely on its
features:
Improve error message if seccomp is disabled in kernel config
Security hardening: set user namespace limit to 0, to prevent creation
of nested user namespaces in a more robust way (#5084)
For subsandboxes started by flatpak-portal, inherit environment
variables from the flatpak run that started the original instance
rather than from flatpak-portal, fixing behaviour of FLATPAK_GL_DRIVERS
and similar features (#5278)
Stop http transfers if a download in progress becomes very slow (#5519)
Make it easier to configure extra languages, by picking them up from
AccountsService if configured there (#5006)
Add new flatpak_transaction_add_rebase_and_uninstall() API,
allowing end-of-life apps to be replaced by their intended replacement
more reliably (#3991)
Create a private Wayland socket with the "security context" extension
if available, allowing the compositor to identify connections from
sandboxed apps as belonging to the sandbox (#4920, #5507, #5558)
Update libglnx to 2023-08-29
Use features of newer GLib versions if available
Turn off system-level crash reporting infrastructure during
some unit tests that involve intentional assertion failures
Add anchors to link to sections of flatpak-metadata documentation (#5582)
New translations: ka, nl.
Bug fixes:
Avoid warnings processing symbolic links with GLib >= 2.77.0, and
with GLib 2.76.0 (GLib 2.76.1 or later silences these warnings)
Bypass page cache for backend requests in revokefs, fixing installation
errors with libostree 2023.4 (#5452)
Show AppStream metadata in flatpak remote-info as intended
(#5523; regression in 1.9.1)
Don't let Flatpak apps inherit VK_DRIVER_FILES or VK_ICD_FILENAMES
from the host system, which would be wrong for the sandbox (#5553)
Fix build failure with prereleases of libappstream 0.17.x (#5472)
Forward-compatibility with libappstream 1.0 (#5563)
Fix installation with Meson if configured with -Dauto_sideloading=true
(#5495)
Fix a memory leak (#5329)
Fix compiler warnings (#5362, #5366)
Make the tests fail more comprehensibly if a required tool is missing
(#5020)
Clean up /var/tmp/flatpak-cache-* directories on boot (#1119)
Don't force GIO_USE_VFS=local for programs launched via flatpak-spawn
(#5567)
Clarify documentation for D-Bus name ownership (#5582)
Translation updates: id, tr, zh_CN
(#5332, #5565)
Internal changes:
Split up large source files into smaller modules, reducing internal
circular dependencies (#5410, #5411, #5415, #5419, #5416, #5414)
Re-synchronize code backported from GLib with the version in GLib
(#5410)
Make the flags used to apply "extra data" clearer (#5466)
Use glnx_opendirat() where possible (#5527)
CI improvements (#5374, #5381)
(There was never a 1.15.5 release, I got our versioning convention mixed up and
thought we avoided releasing odd micro versions.)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Adds btop, the shell-based resource monitor that shows usage and stats for processor, memory, disks, network and processes.
Signed-off-by: Jan Claußen <jan.claussen10@web.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The libvpx project has removed the support for these values, and
the recipe can't be built anymore for these arch's when these values
are used. The correct value for these arch's is `generic-gnu`,
which is used as a default fallthrough value for all platforms
in the recipe for arch's that are not specified explicitly.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Added 0001-fix-build-with-clang.patch to fix build error caused by missing 'value' initializer
* License changed GPL-2.0-only -> LGPL-2.0-only
- LIC_FILES_CHKSUM changed COPYING -> COPYING.LIB for LGPL-2.0-only
- Changed license headers in required source files.
- Changed copyright years to 2022 in modified files.
* 0001-Don-t-build-with-Werror-to-fix-compile-error.patch removed because fixed in the new version.
* libpci was added as depends following this error -> configure: error: Package requirements (libpci) were not met: No package 'libpci' found
* pkgconfig added as inherit following this error -> PKG_PROG_PKG_CONFIG: command not found
Changelog:
It can be followed here: https://github.com/intel/ledmon/releases
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
/usr/bin/imlib2-config was deleted from upstream, so delete it from bb
file.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- New Languages: Cairo, Carbon, Circom, Containerfile, HolyC, kvlang, Nunjucks, OpenSCAD, P4, Pest, Pony, TEAL, WGSL
- New switch --diff-list-files to run diff given two list files
- Handle comments embedded in OCaml strings
- Write empty JSON and XML structures if the inputs yield zero counts
- Support for long paths on Windows
- Better support for building and running Docker image on Windows
- Better output file names when running with --count-and-diff and --out;
- Resolve internal file handle conflict when running --diff with --sdir or --categorized
- New Languages: Asymptote, CoCoA 5, Constraint Grammar, Hare, Jai, Linker Script, NetLogo, Typst
- Added .editorconfig as an INI extension.
- Added .cppm, .ixx, .ccm, .cxxm, .c++m as C++ extensions.
- Improved handling of trailing slash with --match-d
- --exclude-list-file with --git now works as expected.
- --not-match-d, --not-match-f can now be repeated.
- --quiet mode is now enabled when STDOUT is not a terminal. This makes for cleaner output when piping to other programs.
- New switch --include-content=regex to only count files whose content matches the given regex.
- New switch --only-count-files to only count files. Counts for blank, comment, and code lines will be zero.
- --no-recurse now works on Windows
- Improved exclusion of autogenerated files on Windows.
- Improved handling of path separators with git in PowerShell.
- Resolve nondeterministic --diff output.
- --hide-rate supports all output file types
- Fixed --diff-list-file with unknown listed file.
- Fixed parsing of verbose option in the cloc configuration file.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- Add support for system layers
- Implement published clGetICDLoaderInfoOCLICD extension
- Define CL_NO_NON_DISPATCH_EXTENSION_PROTOTYPES for compatibility with recent headers
- Updated OpenCL Headers ot 2023.04.17
- Remove use of __builtin_expect in layer dispatch
- Updated pkg-config to depend on OpenCL-Headers.pc
- Add cllayerinfo tool
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- Add workaround for Perl 5.38.0 bug that breaks the Irssi locale and glyph rendering (scripts.irssi.org#857, #1498)
- Fix Perl scripts broken by Perl 5.38 (scripts.irssi.org#851, #1474).
- Document workaround to fix linker errors when building with meson on Apple
- Fix meson using wrong filenames on Apple, leading to broken Perl support
- Fix /upgrade not accepting
- Improve compatibility with Perl5-IDEA
- Fix logic in how own actions are printed for other protocols
- Fix crash on old PowerPC Mac
- Fix wrong prototype of library function used in terminal handling
- Minor cleanups
- Minor help and documentation fixes
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Bump Safari version in user agent header.
- Fix CSP regression that broke Unity WebGL applications.
- Fix the build with GBM disabled.
- Fix several crashes and rendering issues.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
-ares_reinit() is now implemented to re-read any system configuration and
immediately apply to an existing ares channel
-The adig command line program has been rewritten and its format now more
closely matches that of BIND's dig utility
-The new DNS message parser and writer functions have now been made public
-RFC9460 HTTPS and SVCB records are now supported
-RFC6698 TLSA records are now supported
-The server list is now internally dynamic and can be changed without impacting
existing queries
-Hosts file processing is now cached until the file is detected to be changed
to speed up repetitive lookups of large hosts files
-Internally all DNS messages are now written using the new DNS writing functions
-EDNS is now enabled by default
-Internal cleanups in function prototypes
-Randomize retry penalties to prevent thundering herd issues when dns servers
throttle requests
-Fix Windows build error for missing if_indextoname()
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
* The compiler warnings caused by the incorrect data type declaration
were fixed.
* The log message `boltd[123]: [93B blob data]` was fixed. The sysfs path
will be printed when the domain can't be found.
* CI: Replaced the docker command with podman and fixed the DNS issues for
podman.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Current recipe does impose UID=GID=28 in the recipe code.
Change postgres static ID to match in order to avoid a warning in
reproducibility tests.
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
CVE-2022-3968 & CVE-2023-43291 apply to the other "emlog" and can be
safely ignored.
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fix build with clang while here, need to disable Werror as newer
compilers find more warnings.
Do not save intermediate objects and disable ubsan, we do not build
runtime for it by defaults
Signed-off-by: Khem Raj <raj.khem@gmail.com>
If protoc is enabled for the build, recipes using protobuf will
fail when protoc is not available in the recipe sysroot:
| The imported target "protobuf::protoc" references the file
|
| ".../recipe-sysroot/usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-pokysdk-linux/usr/bin/protoc-3.21.5.0"
|
| but this file does not exist. Possible reasons include:
|
| * The file was deleted, renamed, or moved to another location.
|
| * An install or uninstall procedure did not complete successfully.
|
| * The installation package was faulty and contained
|
| ".../recipe-sysroot/usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-pokysdk-linux/usr/lib/cmake/protobuf/protobuf-targets.cmake"
|
| but not all the files it references.
Use SYSROOT_DIRS to stage the binary to sysroot so it's always
available for other recipes.
Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- remove autotools remains
- select tls depending on packageconfig instead of doing autoselect
- preselect gnutls because thats the default if both gnutls/openssl are built
- disable the internal tls fallback
- enable pkgconfig
- fix license, it was changed to Apache-2.0
- dont create an additional package just to rdepend on it afterwards
- dont build static lib
- fetch source from git
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
It needs to be brought forward to work with latest, it fails
to build with vte9 0.74.1 in meta-oe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Otavio Salvador <otavio@ossystems.com.br>
- `universal`: Enable `application/vnd.cups-postscript` as input
There are filters which produce this MIME type (such as `hpps` of
HPLIP), and if someone uses such driver on a client and the server
has an IPP Everywhere/driverless printer, the job fails (Pull
request #534).
- beh backend: Use `execv()` instead of `system()` - CVE-2023-24805
With `execv()` command line arguments are passed as separate strings
and not the full command line in a single string. This prevents
arbitrary command execution by escaping the quoting of the arguments
in a job with forged job title.
- beh backend: Extra checks against odd/forged input - CVE-2023-24805
* Do not allow `/` in the scheme of the URI (= backend executable
name), to assure that only backends inside
`/usr/lib/cups/backend/` are used.
* Pre-define scheme buffer to empty string, to be defined for case
of URI being NULL.
* URI must have `:`, to split off scheme, otherwise error.
* Check return value of `snprintf()` to create call path for
backend, to error out on truncation of a too long scheme or on
complete failure due to a completely odd scheme.
- beh backend: Further improvements - CVE-2023-24805
* Use `strncat()` instead of `strncpy()` for getting scheme from
URI, the latter does not require setting terminating zero byte in
case of truncation.
* Also exclude `.` or `..` as scheme, as directories are not valid
CUPS backends.
* Do not use `fprintf()` in `sigterm_handler()`, to not interfere
with a `fprintf()` which could be running in the main process when
`sigterm_handler()` is triggered.
* Use `static volatile int` for global variable job_canceled.
- `parallel` backend: Added missing `#include` lines
- foomatic-rip: Fix a SIGPIPE error when calling gs (Pull request #517)
[Ubuntu's autopkgtest for
foo2zjs](https://autopkgtest.ubuntu.com/packages/f/foo2zjs/lunar/ppc64el)
shows foo2zjs's testsuite failing with cups-filters 2.0beta3 on
ppc64el. This is cause by a timing issue in foomatic-rip which is
fixed now.
- Coverity check done by Zdenek Dohnal for the inclusion of
cups-filters in Fedora and Red Hat. Zdenek has fixed all the issues:
Missing `free()`, files not closed, potential string overflows,
... Thanks a lot! (Pull request #510).
- Dropped all C++ references and obsolete C standards (Pull requests
#504 and #513)
With no C++ compiler needed, there is no need for any checks or
setting for C++ in configure.ac.
- configure.ac: Change deprecated AC_PROG_LIBTOOL for LT_INIT (Pull
request #508)
- texttopdf: Do not include fontconfig.h in the CUPS filter wrapper
- Build system: Do not explicitly check for libpoppler-cpp
The cups-filters package does not contain any code using
libpoppler-cpp, therefore we let ./configure not check for it.
- COPYING, NOTICE: Simplification for autotools-generated files
autotools-generated files can be included under the license of the
upstream code, and FSF copyright added to upstream copyright
list. Simplified COPYING appropriately.
- Makefile.am: Include LICENSE in distribution tarball
- Add templates for issue reports on GitHub. This makes a selection
screen appear when clicking "New Issue" in the web UI, to selct
whether the issue is a regular bug, a feature request, or a security
vulnerability.
- Corrected installation path for *.h files of *.drv files. The ppdc
(and underlying functions) of libppd searches for include files in
/usr/share/ppdc and not in /usr/share/cups/ppdc any more.
- configure.ac: Remove unnecessary "AVAHI_GLIB_..." definitions.
- Makefile.am: Include NOTICE in distribution tarball
- configure.ac: Added "foreign" to to AM_INIT_AUTOMAKE() call. Makes
automake not require a file named README.
- Cleaned up .gitignore
- Tons of fixes in the source code documentation: README.md, INSTALL,
DEVELOPING.md, CONTRIBUTING.md, COPYING, NOTICE, ... Adapted to the
cups-filters component, added links.
- Converted nearly all filters to filter functions, only exceptions
are `rastertoescpx`, `rastertopclx`, `commandtoescpx`,
`commandtopclx`, and `foomatic-rip`. The latter is deeply involved
with Foomatic PPDs and the others are legacy printer drivers. The
filter functions are mainly in libcupsfilters, the ones which
generate PostScript are in libppd.
- Replaced all the filters converted to filter functions by simple
wrapper executables using `ppdFilterCUPSWrapper()` of libppd for
backward compatibility with CUPS 2.x.
- Added new streaming mode triggered by the boolean
"filter-streaming-mode" option. In this mode a filter (function) is
supposed to avoid everything which prevents the job data from
streaming, as loading the whole job (or good part of it) into a
temporary file or into memory, interpreting PDF, pre-checking input
file type or zero-page jobs, ... This is mainly to be used by
Printer Applications when they do raster printing in streaming mode,
to run with lowest resources possible. Currently `foomatic-rip`,
`ghostscript`, and `pdftopdf` got a streaming mode. For the former
two PostScript (not PDF) is assumed as input and no zero-page-job
check is done, in the latter all QPDF processing (page management,
page size adjustment, ...) is skipped and only JCL according to the
PPD added.
- The CUPS filter `imagetops` uses the `ppdFilterImageToPS()` filter
function of libppd now.
- `driverless`, `driverless-fax`: Added IPP Fax Out support. Now
printer setup tools list an additional fax "driver". A fax queue is
created by selecting this driver. Jobs have to be sent with "-o
phone=12345" to supply the destination phone number (Pull request
#280, #293, #296, #302, #304, #305, #306, #309, Issue #298, #308).
- `sys5ippprinter`: Removed `sys5ippprinter`, as CUPS does not support
System V interface scripts any more. This first approach of PPD-less
printing was also not actually made use of.
- `urftopdf`: Removed as we require CUPS 2.2.2+ now which supports
Apple Raster by itself.
- Build system, `README.md`: Require CUPS 2.2.2+. Removed now unneeded
`./configure` switches for use of the `urftopdf` filter for old CUPS
versions.
- Sample PPDs: Renamed source directory from `ppd/` to `ppdfiles/`.
- Build system: Remove '-D_PPD_DEPRECATED=""' from the compiling
command lines of the source files which use libcups. The flag is not
supported any more for longer times already and all the PPD-related
functions deprecated by CUPS have moved into libppd now.
- Build system: Add files in `.gitignore` that are generated by
"autogen.sh", "configure", and "make" (Pull request #336).
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This fixes:
| Program gi-docgen found: NO
|
| ../vte-0.74.1/doc/reference/meson.build:18:11: ERROR: Program 'gi-docgen' not
found or not executable
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
std::string_view is part of c++17
This fixes:
error: 'std::string_view' has not been declared
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
v2.13.10:
Fixes:
-Fixed issue with catch_discover_tests when there is multiple of 256 tests (#2401, #2503)
-Catch2-provided main and wmain are explicitly marked as __cdecl when compiled with MSVC (#2486, #2487)
-Improved break-into-debugger behaviour for ARM Macs. It should now be possible to step execution after the break (#2422)
-Replaced deprecated std::aligned_storage (#2419, #2420)
v2.13.9:
Fixes:
-Fixed issue with -# (filename-as-tag) flag when __FILE__ expands into filename without directories (#2328, #2393)
-Fixed CAPTURE macro not being variadic when disabled through CATCH_CONFIG_DISABLE (#2316, #2378)
v2.13.8:
Fixes:
-Made Approx::operator() const (#2288)
-Improved pkg-config files (#2284)
-Fixed warning suppression leaking out of Catch2 when compiled with clang.exe (#2280)
-The macro-generated names for things like TEST_CASE no longer create reserved identifiers (#2336)
Improvements:
-Clang-tidy should no longer warn about missing virtual dispatch in FilterGenerator's constructor (#2314)
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: Switch to LGPL-3 license
* Switch to using meson build system
* Merge inc file into single recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add patch to fix mingw build of abseil-cpp
undefined reference to `absl::lts_20230802::synchronization_internal::Win32Waiter::Poke()'
undefined reference to `absl::lts_20230802::synchronization_internal::Win32Waiter::Win32Waiter()'
undefined reference to `absl::lts_20230802::synchronization_internal::Win32Waiter::Post()'
undefined reference to `absl::lts_20230802::synchronization_internal::Win32Waiter::Poke()'
and include bindir to recipe sysroot to fix protobuf build.
| The imported target "absl::log_severity" references the file
|
| "../nativesdk-protobuf/4.23.4/recipe-sysroot/usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-w64-mingw32/usr/bin/libabsl_log_severity.dll"
|
| but this file does not exist.
Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update to version 11.6.3:
- Fix a bug in which qpdf could potentially discard a character
in a binary string if that character was preceded by an octal
escaped string with fewer than three digits. This bug was
introduced in the 11.0.0 release. The bug would not apply to
content streams with default settings.
- The linearization specification precludes linearized files that
require offets past the 4 GB mark. A bug in qpdf was preventing
it from working when offsets had to pass the 2 GB mark. This has
been corrected.
Switch to cmake. Use /dev/random to perform encryption securely.
Change the fully defined path on the target to fix buildpaths
QA issues with libqpdfTargets.cmake. Add openssl and gnutls as
dependencies. Tested with usermerge distro feature and clang.
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Martin Jansa
Khem Raj
Markus Volk
Jan Claußen
skandigraun
alperak
Wang Mingyu
Yoann Congal
Gianfranco Costamagna
Samuli Piippo
Leon Anavi
Mingli Yu