Commit Graph

30026 Commits

Author SHA1 Message Date
Randy MacLeod
85e08ec256 python3-pyyaml-include: support native and nativesdk build
backport from master:
   56e2e5df9 python3-pyyaml-include: support native and nativesdk build

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-07-09 08:16:46 -04:00
Vijay Anusuri
41fedbb8a9 krb5: upgrade 1.21.2 -> 1.21.3
CVEs Fixed
CVE-2024-37370, CVE-2024-37371

Release Notes:
https://web.mit.edu/kerberos/krb5-1.21/krb5-1.21.3.html

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-07-09 08:16:29 -04:00
Libo Chen
d570d397c0 thin-provisioning-tools: install missed thin_shrink and era_repair
Install missed thin_shrink and era_repair for thin provisioning

Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-07-09 08:16:04 -04:00
Siddharth Doshi
0cbf21fd51 apache2: Upgrade 2.4.59 -> 2.4.60
CVE's Fixed by upgrade:
CVE-2024-36387 apache2/httpd: DoS by null pointer in websocket over HTTP/2
CVE-2024-38472 apache2/httpd: UNC SSRF on WIndows
CVE-2024-38473 apache2/httpd: Encoding problem in mod_proxy
CVE-2024-38474 apache2/httpd: Substitution encoding issue in mod_rewrite
CVE-2024-38475 apache2/httpd: Improper escaping of output in mod_rewrite
CVE-2024-38476 apache2/httpd: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect
CVE-2024-38477 apache2/httpd: null pointer dereference in mod_proxy
CVE-2024-39573 apache2/httpd: Potential SSRF in mod_rewrite

Other Changes between 2.4.59 -> 2.4.60
======================================
https://github.com/apache/httpd/blob/2.4.60/CHANGES

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-07-09 08:14:43 -04:00
Wentao Zhang
e9318e6519 meta-oe/conf/layer.conf: remove libbpf from NON_MULTILIB_RECIPES for x86 and x86-64
libbpf supports x86_64 and i.86, remove libbpf from NON_MULTILIB_RECIPES
for x86 and x86-64

Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d06a9c5049)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-27 11:27:37 -04:00
Soumya Sambu
78a14731cf php: Upgrade to 8.2.20
Includes fix for CVE-2024-5458, CVE-2024-2408 and other bugs

Changelog:
https://www.php.net/ChangeLog-8.php#PHP_8_2

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-26 07:33:55 -04:00
Randolph Sapp
30c7e5b94f vulkan-cts: add workaround for createMeshShaderMiscTestsEXT
Remove the CXX flag "-O2" for GCC 13 and 14. There's a bug with ARM GCC
that breaks the iteration of "types" in the createMeshShaderMiscTestsEXT
function. This issue is not present for clang or x86_64 GCC 14.

It seems that the array is not initialized before the first iteration.
In testing this can result in a random value being used. This can
manifest in LINES type being processed twice, resulting in the following
error:

FATAL ERROR: Failed to initialize dEQP: Test case with non-unique name
'no_lines' added to group 'misc'.

Signed-off-by: Randolph Sapp <rs@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-26 07:31:38 -04:00
Peter Marko
8a38235031 cjson: fix buildpath warnings
Following warning occurs when building with ptests enabled:
WARNING: cjson-1.7.17-r0 do_package_qa: QA Issue: File /usr/lib/cjson/ptest/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR
File /usr/lib/cjson/ptest/tests/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR
File /usr/lib/cjson/ptest/fuzzing/CTestTestfile.cmake in package cjson-ptest contains reference to TMPDIR [buildpaths]

The cmake files also contain full paths to original CMakeLists.txt file
in _BACKTRACE_TRIPLES property;
These are not needed for successful ptests as we don't install the
CMakeLists.txt files anyway.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-26 07:31:23 -04:00
Hitendra Prajapati
c18656fa75 tcpdump: fix CVE-2024-2397
Upstream-Status: Backport from b9811ef5bb

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-26 07:30:56 -04:00
Vijay Anusuri
826109def6 tipcutils: Add systemd support
Install tipc kernel module explictly. tipcutils.conf is added to
modules-load.d to load the required tipc kernel module.

Ref: http://tipc.io/getting_started.html

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 93a0667456)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-26 07:28:26 -04:00
Peter Marko
842b563790 jemalloc: add +git to version
jemalloc was switched from tag to development branch
171 commit ahead.
Adapt PV accordingly.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 53f608235a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-24 07:37:16 -04:00
Kai Kang
1812028119 daq: fix incompatible pointer type error
Fix incompatible pointer type error for daq:

| ../../daq-2.0.7/os-daq-modules/daq_nfq.c: In function 'SetPktHdr':
| ../../daq-2.0.7/os-daq-modules/daq_nfq.c:394:37: error: passing argument 2
   of 'nfq_get_payload' from incompatible pointer type [-Wincompatible-pointer-types]
|   394 |     int len = nfq_get_payload(nfad, (char**)pkt);
|       |                                     ^~~~~~~~~~~
|       |                                     |
|       |                                     char **

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-24 07:36:08 -04:00
Zhang Peng
ecba431834 hiredis: change ptest output format
This change consolidates the output format of the ptest command
into a single common format.
The format selected is the automake "simple test" format:
    "result: testname"

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:19:34 -04:00
Peter Marko
61e9a3aba8 re2: rework solibs handling
This is cleaner way how to package unversioned libraries
which was suggested during review of the last commit.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:16:55 -04:00
Peter Marko
67559f2aed re2: remove dev dependencies from main package
It's a bad idea to add dev dependencies to main package.
It's pulling build dependencies including toolchain items.

The dependencies "were needed" because main package contains
packageconfig file.
This can be fixed by correct packaging.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:16:46 -04:00
Martin Jansa
66d8bcca28 libwebsockets: remove STAGING_LIBDIR with /
* after buildpath warnings fix from:
  https://git.openembedded.org/meta-openembedded/commit/?id=eeef1fddd9052bed4b1a91565260518eb042fed2
  the LibwebsocketsTargets.cmake ends with:
  INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/libcap.so;-lpthread"
  instead of:
  INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/OE/build/.../libwebsockets/4.3.3/lib32-recipe-sysroot/usr/lib/libcap.so;-lpthread"
  which causes e.g. mosquitto to fail in do_compile with:
  ninja: error: '/libcap.so', needed by 'src/mosquitto', missing and no known rule to make it

* this happens only when libwebsocket is built with libcap enabled
  (by libcap in DEPENDS)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:16:43 -04:00
Gerard Salvatella
bf0f4084aa libwebsockets: fix buildpath warnings
In order to remove absolute paths from the cmake artifacts, paths from
the `$lib` folder should also be stripped off, otherwise internally
linked libraries (e.g. libz) may appear.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:16:40 -04:00
Wang Mingyu
b130d741ca uriparser: upgrade 0.9.7 -> 0.9.8
Changelog:
===========
* Protect against integer overflow in ComposeQueryEngine
* Protect against integer overflow in ComposeQueryMallocExMm
* Require CMake >=3.5.0
* CMake option URIPARSER_SHARED_LIBS=(ON|OFF) to control, whether to produce a
  shared or static library for uriparser and that alone, falls back to standard
  BUILD_SHARED_LIBS if available, else defaults to "ON"
* Document that scheme-based normalization a la section 6.2.3 of RFC 3986 is a
  responsibility of the application using uriparser
* Document supported code points for functions uriEscape(Ex)W
* Update Clang from 15 to 18
* Adapt to breaking changes in Clang packaging
* Get sanitizer CFLAGS and LDFLAGS back in sync
* Pin GitHub Actions to specific commits for security

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:16:37 -04:00
Bartosz Golaszewski
98b48d60db libgpiod: update to v2.1.2
This is a small bugfix release that fixes a build issue with slibtool
(not relevant to meta-oe ATM), makes the licensing of C++ bindings less
restrictive and preemptively fixes an issue that will be triggered with
linux v6.9 when running gpio-tools ptest suite.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:16:32 -04:00
Yoann Congal
88eaaa3ab3 libfido2: remove non-functional native and nativesdk BBCLASSEXTEND
libfido2 depends on udev and libcbor which do not exist for native and
nativesdk targets.
Remove native & nativesdk from BBCLASSEXTEND to avoid hitting these in
world/universe builds.

Fixes these warnings (as seen on AB[0]):
  WARNING: Nothing PROVIDES 'nativesdk-udev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches:
  WARNING: Nothing PROVIDES 'nativesdk-libcbor' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches:
  WARNING: Nothing PROVIDES 'libcbor-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches:
  WARNING: Nothing PROVIDES 'udev-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches:
  WARNING: Nothing RPROVIDES 'nativesdk-libfido2-dev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it)
  WARNING: Nothing RPROVIDES 'nativesdk-libfido2' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it)

[0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Cc: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1a3d194eb3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:11:49 -04:00
nikhil
7f64adbbe6 giflib: upgrade to version 5.2.2
Upgrade to latest version giflib v5.2.2.

This version fixes bugs listed in link below:
Link: https://sourceforge.net/p/giflib/code/ci/5.2.2/tree/NEWS

Fixes for CVE-2023-48161, CVE-2022-28506, CVE-2023-39742
Link: https://clients.neighbourhood.ie/yocto/1-40.html#:~:text=CVE%2D2023%2D39742%3A%20giflib%3Agiflib%2Dnative

Added dependency on ImageMagick which includes "convert" utility,
to ensure availability of required tool during compilation process.

Add patch to rename binary used in Makefile from
"convert" to "convert.im7" as installed by imagemagick package.

Signed-off-by: Bhabu Bindu <bhabubindu@kpit.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:08:44 -04:00
Siddharth Doshi
366bac39bd nano: Security fix for CVE-2024-5742
Upstream-Status: Backport from [https://git.savannah.gnu.org/cgit/nano.git/commit/?id=5e7a3c2e7e118c7f12d5dfda9f9140f638976aa2]

CVE's Fixed:
CVE-2024-5742 nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:08:35 -04:00
Scott Murray
d35e1e52bf abseil-cpp: backport RISC-V fix
Backport upstream fix[1] for SIGILL crash on RISC-V with 6.6 and
newer kernels.  The patch has been tweaked to apply on top of the
existing stack.

[1]: https://github.com/abseil/abseil-cpp/commit/7335a36d

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:06:42 -04:00
Vijay Anusuri
1c59cb3654 c-ares: Update SRC tarball path
Fix WARNING: Failed to fetch URL https://c-ares.org/download/c-ares-1.27.0.tar.gz

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:06:19 -04:00
gr embeter
7daa84f26d python3-pytest-html: add missing runtime dependencies
Upstream toml file mentions Jinja2 and pytest-metadata as runtime
dependencies.

Link: cfd32d0848/pyproject.toml (L42)
Signed-off-by: Grygorii Tertychnyi <grygorii.tertychnyi@leica-geosystems.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ca28badd14)
Signed-off-by: Grygorii Tertychnyi <grembeter@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:04:45 -04:00
Soumya Sambu
48da815463 unixodbc: Fix CVE-2024-1013
An out-of-bounds stack write flaw was found in unixODBC on 64-bit
architectures where the caller has 4 bytes and callee writes 8 bytes.
This issue may go unnoticed on little-endian architectures, while
big-endian architectures can be broken.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-1013

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:03:35 -04:00
Guðni Már Gilbert
4d17537719 python3-twisted: remove obsolete python3-twisted-flow
The flow module was removed in Twisted 9.0.0 a long time
and currently does not install anything. Let's remove it
to cleanup the recipe.

This commit also removes python3-twisted-news package because
the source files were removed in Twisted 21.2.0. All other
files which no longer exist in the source are also removed from FILES.

Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:01:41 -04:00
Guðni Már Gilbert
3a0c50ec5e python3-twisted: prepend split PACKAGES
Fixes an issue where split packages were no populated since all the files
were picked up by FILES:${PN}

Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 09:01:27 -04:00
Changqing Li
355f4e8d4e python3-grpcio: fix do_compile failure for qemuppc64/qemuppc
define proper macro for ppc/ppc64 to fix compile error

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-17 08:56:51 -04:00
Khem Raj
4a7bb77f7e pcapplusplus: Fix build with gcc14
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

----
v2]
Scarthgap has the same error as master: initialize timespec variable.

pcapplusplus/23.09/git/Packet++/src/RawPacket.cpp:23:18: error: 'nsec_time.timespec::<anonymous>' is used uninitialized [-Werror=uninitialized]
|    23 |         timespec nsec_time;
|       |                  ^~~~~~~~~
| cc1plus: all warnings being treated as errors
2024-06-02 14:57:06 -04:00
Yoann Congal
5b010b412b squid: workaround a build failure with native gcc10
When build on Debian 11 (gcc10), squid fails to build[0] because of a
bug[1] in the configure step (it mixes options between old native compiler
and recent target compiler: the former needs the std=c++17 option, the latter
doesn't).

The workaround is to force the "-std=c++17" option for the native build.

NB: Our Buildroot friends have the same workaround[2].

[0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/23/steps/28/logs/stdio
[1]: https://bugs.squid-cache.org/show_bug.cgi?id=5376
     Bug closed as invalid by upstream
[2]: 932b52fad8/package/squid/squid.mk (L24)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Wang Mingyu
0f97ef15d6 postgresql: upgrade 16.2 -> 16.3
0003-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for 16.3

Changelog:
 https://www.postgresql.org/docs/release/16.3/

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Markus Volk
94a2a6d212 flatpak: update 1.15.6 -> 1.15.8
- remove included patches
- set path for fusermount3 to avoid requirement for fuse3-native. This is needed since:
  2cb17b4eb8

Changes in 1.15.8
~~~~~~~~~~~~~~~~~

Security fixes:

 * Don't allow an executable name to be misinterpreted as a command-line
   option for bwrap(1). This prevents a sandbox escape where a malicious
   or compromised app could ask xdg-desktop-portal to generate a .desktop
   file with access to files outside the sandbox. (CVE-2024-32462)

Other bug fixes:

 * Pass the -export-dynamic linker option as -Wl,-export-dynamic,
   fixing build failures with clang 18 and lld 18 (#5760)

 * Fix a double-free when installation is cancelled (#5763)

 * Fix installed-tests failure with "FUSERMOUNT: unbound variable"
   (#5751)

 * Translation updates: pt_BR (#5762), tr (#5761)

Changes in 1.15.7
~~~~~~~~~~~~~~~~~
Released: 2024-03-27

Dependencies:

 * The Meson build system is now required.
   Compiling with Autotools is no longer possible.

 * In distributions that compile Flatpak to use a separate bubblewrap (bwrap)
   executable, version 0.9.0 is recommended. Several of the bug fixes listed
   below will not be active if an older version is used.

 * In distributions that compile Flatpak to use a separate xdg-dbus-proxy
   executable, version 0.1.5 is recommended.

 * If libmalcontent (parental controls) is enabled, it must be version 0.5.0
   or later.

New features:

 * Automatically remove obsolete driver versions and other autopruned refs
   (#5632)

 * `--socket=inherit-wayland-socket` (#5614)

 * Automatically reload D-Bus session bus configuration after installing
   or upgrading apps, to pick up any exported D-Bus services (#3342)

Bug fixes:

 * Update included copy of bubblewrap to version 0.9.0:

     * `--symlink` is now idempotent, meaning it succeeds if the
       symlink already exists and already has the desired target
       (#2387, #3477, #5255)
     * Report a better error message if `mount(2)` fails with `ENOSPC`
     * Fix a double-close on error reading from `--args`, `--seccomp` or
       `--add-seccomp-fd` argument
     * Improve memory allocation behaviour
     * Silence various compiler warnings

 * Update included copy of bubblewrap to version 0.1.5:

     * Fix handling of long object paths

 * Don't parse `<developer><name/></developer>` as the application name
   (#5700)

 * Don't refuse to start apps when there is no D-Bus system bus available
   (#5076)

 * Don't try to repeat migration of apps whose data was migrated to a new
   name and then deleted (#5668)

 * Improve handling of mixed locales on systems with systemd-localed (#5497)

 * Improve display of ellipsized columns in wide terminals (#5722)

 * Make `flatpak info -e` look for extensions in all installations (#5670)

 * Fix warnings from newer GLib versions (#5660, #5737)

 * Always set the `container` environment variable (#5610)

 * Always let the app inherit redirected file descriptors (#5626)

 * In `flatpak ps`, add xdg-desktop-portal-gnome to the list of backends
   we'll use to learn which apps are running in the background (#5729)

 * Don't use `WAYLAND_SOCKET` unless given `--socket=inherit-wayland-socket`
   (#5614)

 * Use `fusermount3` if compiled with FUSE 3, overridable with
   `-Dsystem_fusermount` compile-time option (#5104)

 * Avoid leaking a temporary variable from /etc/profile.d/flatpak.sh into
   the shell environment (#5574)

 * Improve async-signal safety (#5687)

 * Fix various memory leaks (#5683, #5690, #5691)

 * Avoid undefined behaviour of signed left-shift when storing object IDs
   in a hash table (#5738)

 * Detect the correct gtk-doc when cross-compiling (#5650)

 * Detect the correct wayland-scanner when cross-compiling (#5596)

 * Documentation improvements (#5659, #5677, #5682, #5664, #5719)

 * Skip more tests when FUSE isn't available (#5611)

 * Translation updates (#5602, #5707)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Peter Marko
3179df6170 gnome-shell: correct regression with glib-2.0 2.78.5
Backport fix to work with new glib-2.0.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Yi Zhao
60018b59c3 samba: upgrade 4.19.5 -> 4.19.6
ChangeLog:
https://www.samba.org/samba/history/samba-4.19.6.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Yi Zhao
18fa1f593e libtevent: upgrade 0.16.0 -> 0.16.1
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Martin Jansa
4a96ede86c libdeflate: fix build with -mcpu=cortex-a76+crypto without -march=armv8.2-a+crypto
* fixes:
  https://github.com/ebiggers/libdeflate/issues/369

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Soumya Sambu
e2d6753a7f php: Upgrade to 8.2.18
Includes fixes for CVE-2024-3096, CVE-2024-2756 and other bugs.

Changelog:
https://www.php.net/ChangeLog-8.php#8.2.18

Rebase 0001-ext-opcache-config.m4-enable-opcache.patch to new version

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Mikko Rapeli
0beb0b6c5e fwupd: fix uefi capsule update build error
plugin_uefi_capsule_splash does not provide "enabled" or "disabled"
options but only basic bool "true" and "false". Fixes do_configure()
failure with
PACKAGECONFIG:append = " plugin_tpm plugin_uefi_pk plugin_uefi_capsule ":

| ../fwupd-1.9.18/meson.build:1:0: ERROR: Value disabled is not boolean (true or false).

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Changqing Li
9cc21a15e8 fuse3: remove sysv init script and install fuse kernel module explictly
For systemd, there is not a fuse.service since systemd provides
sys-fs-fuse-connections.mount to mount the fuse control filesystem, so
instead, only fuse3.conf is added to modules-load.d to load the required
fuse kernel module.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Martin Hundebøll
6de0ab7443 nodejs-oe-cache: fix offline install of dependencies
Apparently, npm has changed its request accept header, so that cache
lookup misses. This causes an ENOTCACHED error when doing the offline
install in do_compile() from npm.bbclass.

Fix it by updating the fake cache entry to match the newest behaviour
from npm.

Note that npm doesn't agree with itself, as it still uses the previous
header value when doing `npm cache add <pkg>`, but the new value when
doing `npm install <pkg>`.

Bug submitted upstream:
https://github.com/npm/cli/issues/7465

Signed-off-by: Martin Hundebøll <martin@geanix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-22 12:44:19 -07:00
Khem Raj
a72010b414 Revert "nautilus: update 45.1 -> 46.1"
This reverts commit e642f62eee.
2024-05-01 11:00:51 -07:00
Ross Burton
a67c2d04a0 renderdoc: remove vim-native DEPENDS
This need for this was removed in 2016[1]

[1] fff93a4bcc

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:35 -07:00
Markus Volk
e642f62eee nautilus: update 45.1 -> 46.1
Major changes in 46.1
=====================
* Bugfixes:
  - Create archive with Enter on Compress dialog (Lukáš Tyrychtr)
  - Move focus correctly when item is removed (Khalid Abu Shawarib)
  - View performance optimization (Khalid Abu Shawarib)
  - Fix crash when compressing a file and a folder (Khalid Abu Shawarib)
  - Don't show banners in global search (Khalid Abu Shawarib)
  - Preserve permissions when copying from read-only file systems (Khalid Abu Shawarib)
  - Disable non-working global search from Other Locations (António Fernandes)
* Translation updates (GNOME Translation Project contributors)

Major changes in 46.0
=====================
* Bugfixes:
  - Remove char limit on size label in properties dialog (Khalid Abu Shawarib)
* Translation updates (GNOME Translation Project contributors)

Major changes in 46.rc
========================
* Enhancements
  - Adjust empty status page and progress tooltip strings (Allan Day, Khalid Abu Shawarib)
  - Add input hints and purpose properties to entries (Khalid Abu Shawarib)
  - Refine operations hover background (Sam Hewitt, António Fernandes)
* Bugfixes:
  - Position loop mounts correctly in the sidebar (António Fernandes)
  - Fix internationalization issues (Khalid Abu Shawarib, Peter Eisenmann)
  - Revert crashes-causing multi-file properties performance optimization (Peter Eisenmann)
  - Reestablish location signals if location change failed (Corey Berla)
  - Fix regression which disallowed dropping files on empty folders (Corey Berla, António Fernandes)
* Cleanups
  - Remove architecture-sensitive duplicate filename unit test (Peter Eisenmann, Jeremy Bicha)
  - Refine Appstream metainfo (Sophie Herold, Alexandre Franke)
* Translation updates (GNOME Translation Project contributors)

Major changes in 46.beta
========================
* Postponed
  - The network view from 46.alpha.1 was deemed to require more work
* Enhancements
  - Added a global search mode (António Fernandes)
  - Use 'text entry' cursor on pathbar hover (Corey Berla)
  - Add drop shadow to file property dialog icons (kramo)
  - Improve progress info icons and tooltips (Bharat Tyagi, Sam Hewitt)
* Bugfixes:
  - Avoid crashes with column chooser (Peter Eisenmann)
  - Avoid crash when navigating back to same folder (António Fernandes)
  - Avoid infinite loop on file creation naming conflict (Corey Berla)
  - Fix displaying parent folder of multi-files (Anton Snigirev)
  - Clear location entry on editing of internal locations (Peter Eisenmann)
  - Ensure search's clear button is hidden when empty (António Fernandes)
  - Hide search popover after opening a dialog (Khalid Abu Shawarib)
  - Correctly open empty folders from search (António Fernandes)
  - Don't reload view only to change selection (António Fernandes)
  - Use smaller icons in progress indicator (António Fernandes, Sam Hewitt)
  - Fix various leaks (Khalid Abu Shawarib, António Fernandes)
  - Added extra tentacles to confuse AI-generated blogs (Via Matrix)
* Cleanups
  - Made various string HIG compatible (Bart Gravendeel, Automeris naranja)
  - Modernize column chooser widgetry (Automeris naranja)
  - Detect potfile errors via CI (Corey Berla)
  - Replace deprecated GTK point computing functions (N.Pranav Krishna)

Major changes in 46.alpha.1
=======================
* Enhancements
  - Views can be switched without a folder reload (António Fernandes)
  - Operations are listed in the bottom of the sidebar (Corey Berla, António Fernandes, Allan Day)
  - Network view replaces Other Locations (António Fernandes, Allan Day)
  - Mounted drives are shown in the sidebar (António Fernandes)
  - Selected files are recorded in back and forward history (António Fernandes)
  - Subfolder loading indication (António Fernandes)
  - Various view performance improvements (António Fernandes)
  - Improved performance of multi-file properties dialog (Khalid Abu Shawarib)
* Bugfixes:
  - Correctly prioritize thumbnails for non-alphabetical sort order (Corey Berla)
  - Notify view item name changes for accessibility (Corey Berla, António Fernandes)
  - Open real folder for documents in Recent from Properties (Anton Snigirev)
  - Pattern match (Ctrl+S) all expanded list view directories (António Fernandes)
  - Display sampling frequency in kHz with thousand separators (Hariharan D)
  - Treat markdown files as text documents in search (Hariharan D)
  - Improve UI text capitalization and mnemonics (Automeris naranja)
  - Fix tab tooltip texts for markup and search (Corey Berla)
  - Fix extension linkage with C++ (Khalid Abu Shawarib)
  - Add a tooltip to the star button (Lukáš Tyrychtr)
  - Show correct shortcut for Redo on the menu (Divyansh Jain)
  - Prevent use-after-free with mount and stop (António Fernandes)
  - Improve virtual files handling  (António Fernandes)
  - Fix various view-related bugs, leaks and warnings (António Fernandes)
* Cleanups:
  - Significant restructuring of view architecture (António Fernandes)
  - Remove dead code in views and css styles (António Fernandes)
  - Update man page, remove documentation for removed self-check functionality (Corey Berla)
* Translation updates (GNOME Translation Project contributors)

Major changes in 46.alpha.0
=======================
* Enhancements
  - Confirm password when creating protected ZIP archives (Eric Daigle)
  - Make custom folder icon feature discoverable (Khalid Abu Shawarib)
  - Make URI entry discoverable (Alynx Zhou, Barnabás Pőcze)
  - Allow changing owner/group and any permissions under admin:/// (António Fernandes)
  - Add detailed date and time format option (Ondrej Holy, Peter Eisenmann)
  - Detect copy/move over 4GiB file limit on FAT (Corey Berla)
  - Give feedback on completion of quick operations (António Fernandes)
  - New-style banners, unstar animation, and other visual refinements (Peter Eisenmann, Automeris naranja)
  - Allow Alt+Down to revert more than one Alt+Up (vmkul)
  - Close overlaid sidebar on location change (Khalid Abu Shawarib)
* Bugfixes:
  - Don't skip files in deep count/size (António Fernandes)
  - Don't move files around as thumbnails load (Corey Berla)
  - Reveal highlighted file without delay  (Corey Berla)
  - Stop crashing in various situations (Sebastian Keller, António Fernandes, Corey Berla, Khalid Abu Shawarib)
  - Resolve UI text inconsistencies (Automeris naranja, getsnoopy, kramo, Khalid Abu Shawarib, Ondrej Holy, Matthijs Velsink)
  - Fix memory leaks, template disposal, and warnings (Khalid Abu Shawarib)
  - Fix interface problems in Properties (Peter Eisenmann, António Fernandes, Khalid Abu Shawarib)
  - Don't keep viewing unmounted locations (Ondrej Holy, António Fernandes, Khalid Abu Shawarib)
  - Refined appdata (Sabri Ünal, António Fernandes)
  - Resolve wrong scroll positioning bugs (Gary Li, António Fernandes)
  - Fix automatic file duplicate naming (Peter Eisenmann)
  - Properly reorder bookmarks by drag and drop (Khalid Abu Shawarib)
  - Set current modification time on file created from templates (Khalid Abu Shawarib)
  - Fix missing/wrong mime type icons (António Fernandes)
  - Don't reload on autofs timeout (António Fernandes)
* Cleanups
  - Remove obsolete profiling, custom debug logging, and self-checking (Peter Eisenmann, Khalid Abu Shawarib)
  - Streamline and expand tests (Khalid Abu Shawarib, Peter Eisenmann)
  - Reduce usage of GtkDialog and other deprecated API (Khalid Abu Shawarib, Peter Eisenmann)
  - Replace custom switch row with AdwSwitchRow (Óscar Fernández Díaz)
  - Drop obsolete code (Peter Eisenmann, António Fernandes, Corey Berla)
  - Reduce unnecessary string copies (Peter Eisenmann)
  - Unify numbered filename apendix handling (Peter Eisenmann, Khalid Abu Shawarib)
* Translation updates (GNOME Translation Project contributors)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:35 -07:00
Markus Volk
63db9c0d52 networkmanager: fix gir build
Basically what is done in:
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=4c40897893f43a99e6ae12e652c0cf789d89df90

This fixes:
| gi.RepositoryError: Typelib file for namespace 'Gobject', version '2.0' not found
| gi.RepositoryError: Typelib file for namespace 'Gio', version '2.0' not found
| gi.RepositoryError: Typelib file for namespace 'GModule', version '2.0' not found

- Remove uneeded do_compile:prepend. It was broken because of {B}} and seems to be unneeded anyway

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00
maffan
d8ba3e4400 networkd-dispatcher: Add dependency on python3-json
networkd-dispatcher imports json. Add it as a RDEPENDS.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00
Ninette Adhikari
41e8a4b855 open-vm-tools: Update status for CVE-2014-4199 and CVE-2014-4200
Current version 12.3.5 is not affected by the issue.
Affected versions: Up to (incl) 10.0.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00
Ninette Adhikari
3be6d57c67 sthttpd: Update status for CVE-2017-10671
Current version 2.27.1 is not affected by the issue.
Affected versions: Up to (excl.) 2.27.1

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00
Ninette Adhikari
566703d589 mpd: Update status for CVE-2020-7465 and CVE-2020-7466
The recipe used in the `meta-openembedded` is a different mpd package compared to the one which has the CVE issue.
Package used in `meta-embedded`: http://www.musicpd.org
Package with CVE issue: https://sourceforge.net/projects/mpd/
No action required.

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00
Ninette Adhikari
cf8c850690 procmail: Update status for CVE-1999-0475
Current version 3.22 is not affected by the issue.
Affected versions: Up to (excl.) 3.2.1

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00