Changelog:
==========
- Added LCFS_MOUNT_FLAGS_TRY_VERITY/tryverity mount option to do best-effort fs-verity
- Use the new loewerdir+ and datadir+ overlayfs mount options from linux 6.6
- mkcomposefs is now multi-threaded when computing digests and copying files
- mkcomposefs now uses copy_file_range when copying files
- Added some initial rust crates to handle composefs dump files
- Added fuzz tests
- Documentation updates
- Fix some crashes and leaks
- Improve error reporting
- Fix build on various libc types and versions
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-Move-the-function-cd_icc_create_from_edid-to-avoid-u.patch
refreshed for 1.4.7
Changelog:
===========
- Add various hardenings to the systemd service
- Always close the ICC profile when loading fails
- Avoid destructing LCMS plugin twice with lcms 2.14
- Do not make state files executable in tmpfiles.d/colord.conf
- Fix a double free spotted by Coverity
- Fix an error check when parsing the DTP94 data
- Fix a -Wincompatible-pointer-types warning
- Fix potential crash when reading from broken Huey hardware
- Set FILE_OFFSET_BITS explicitly
- Use a 64-bit time_t
- Use thread context for Gamut Alarm codes
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Struct API glms_ray_at incorrect dir para
- dont use I macro defined in standard
- improve docs
- separate SSE and SSE2
- make Fasth math work both on SSE and SSE2, make -0.0f run on SSE + fast math
- make some failing test pass when fast math is on
- dont validate nan and inf on fast math
- add note to enable config where may not work is some environments
- alignment
- fix some doc typos & warnings
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Fix a double-close on error reading from --args, --seccomp or --add-seccomp-fd argument
- Improve memory allocation behaviour
- Silence various compiler warnings
- Silence an Automake warning
- Fix a test failure when running as uid 0 in a container
- Fix a test failure when /mnt is a symlink
- Fix a test failure on NixOS
- Add --argv0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Add Ed448 signatures and X448 key exchange
- X.509 certificate verification now can optionally ignore the expiration date of root certificates.
- Support for "hybrid" EC point encoding is now deprecated.
- Support for creating EC_Group objects with parameters larger than 521 bits is now deprecated
- Add new build options to disable deprecated features, and to enable experimental features.
- Fix a bug affecting use of SIV and CCM ciphers in the FFI interface.
- Add new FFI interface botan_cipher_requires_entire_message
- Internal refactorings of the mp layer to support a new elliptic curve library.
- Use a new method for constant time division in Kyber to avoid a possible side channel where the compiler inserts use of a variable time division.
- Refactor test RNG usage to improve reproducibility.
- Add std::span interfaces to BigInt
- Refactorings and improvements to low level load/store utility functions.
- Fix the amalgamation build on ARM64
- Add Mac ARM based CI build
- Fix a thread serialization bug that caused sporadic test failures.
- Update GH Actions to v4
- Add examples of password based encryption and HTTPS+ASIO client.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* atkmm.h: Update link to ATK
* Add README.win32.md with Win32 build documentation
* Remove AUTHORS and add general information to README.md
* Detect if we build from a git subtree
* Don't copy files with configure_file()
* Fix the evaluation of is_git_build on Windows
* Don't fail if warning_level=everything
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
sexpect is an expect like utility that is designed in the client/server
model. This makes it suitable for use in shell script to control
multiple interactive programs from a single script.
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Drop 0015-Add-missing-limits.h.patch (equivalent patch merged upstream),
rebase other patches.
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changes:
cukinia: Add user is member of groups function
cukinia: correct _ver2int output format
cukinia: filter junitxml output to only include valid xml 1.0 chars
cukinia: Add network interface functions
cukinia: correct log_suite file name
cukinia: differentiate cukinia_gpio_* tests
cukinia_i2c: check driver
add when/unless
cukinia: fix bashism in result comparison
Change license to Apache-2.0 only
GPL-3.0-only license has been removed intentionally (see changelog).
Signed-off-by: Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit addresses the shebang size issue encountered in the
do_populate_sysroot task of the rrdtool-native recipe. The issue
was caused by the shebang line in the cgi-demo.cgi file exceeding
the maximum allowed length of 128 characters.
The following error was observed:
ERROR: rrdtool-native-1.8.0-r0 do_populate_sysroot: QA Issue: : /work/x86_64-linux/rrdtool-native/1.8.0/sysroot-destdir/work/x86_64-linux/rrdtool-native/1.8.0/recipe-sysroot-native/usr/share/rrdtool/examples/cgi-demo.cgi maximum shebang size exceeded, the maximum size is 128. [shebang-size]
ERROR: rrdtool-native-1.8.0-r0 do_populate_sysroot: do_populate_sysroot for this recipe installed files with QA issues
The solution implemented involves modifying the shebang line in the
cgi-demo.cgi file to use '/usr/bin/env rrdcgi', ensuring it adheres
to the length limit.
Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
GCC 14 is more strict regarding const pointers conversion. Fix
conversion to let ntpong build with GCC 14 and updated rrdtool. The
patch is not submitted upstream yet, the project requires singing of
CLA.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Import patch from the rrdtool's git to fix building with GCC 14. Note,
it also requires fixing other tools (like lmsensors) in a similar way.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Renaming is no longer needed sunce the SOABI
has been fixed to reflext correct ABI depending
upon target
Therefore revert it
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Due to recent libtool change in oe-core, append_libtool_sysroot is
no longer defined. Remove reference to it to avoid bitbake parsing
error.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update dhrystone sources to use C89 instead of K&R C in order to fix
build issues with the recent GCC.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade libcamera to version 0.3.0, gaining support for SoftISP.
Patch 0001-ipu3-Use-posix-basename.patch is dropped, it is applied
upstream.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
android-tools-configfs doesn't have any checked out source files, which
results in a warning regarding S not existing. Fix the warning by
pointing S to ${WORKDIR}/sources and UNPACKDIR to ${S}.
Fix the warning for the selinux-enabled recipe.
The warning text:
WARNING: android-tools-conf-configfs-1.0-r0 do_unpack:
android-tools-conf-configfs: the directory ${WORKDIR}/${BP} (<scrubbed>)
pointed to by the S variable doesn't exist - please set S within the
recipe to point to where the source has been unpacked to
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Ensures that predefinined values are repsected as well, since some
of them might be needed by distro settings at global context
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Version 2.13 -> 2.13.1
----------------------
- change c++11 to c++17 in setup.py as current versions of ICU require it
Version 2.12 -> 2.13
--------------------
- fixed build issues on Windows
- added wrappers for MeasureUnit(locale, width) and getUnitDisplayName()
- added wrappers for DateFormatSymbols.getEra|ZodiacNames()
- added wrappers for DateFormatSymbols.getZoneStrings()
- added wrappers for LocaleDisplayNames
- fixed bug dealloc calling wrong destructor on most types (Fredrik Roubert)
- added support for ICU 75.1
- added wrappers for LocalizedNumber|Range|Formatter.withoutLocale()
- added wrappers for UIdentifierType, Char.hasIDType(), Char.getIDTypes()
- added wrappers for UIdentifierStatus
- added wrappers for UProperty.IDENTIFIER_TYPE, UProperty.IDENTIFIER_STATUS
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. #5448
Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. #5270
The license file was renamed from LICENSE.rst to LICENSE.txt without changing the content.
Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Dasbus is a DBus library written in Python 3, based on GLib
and inspired by pydbus.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Only include the lines from icheck.js that cover the copyright and the
license text.
License-Update: Only include the relevant parts of icheck.js
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Only include the lines from the README that cover the copyright and the
license text.
License-Update: Only include the relevant parts of the README
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Use inherit_defer instead of inhert. This way, setuptools3 is not
inherited when python is removed from PACKAGECONFIG in a .bbappend file.
This avoids dependencies added by setuptools3.
Don't add nftables-python to PACKAGES if python is disabled. It adds
extra runtime dependencies on python3-core and python3-json.
Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changes for 1.4.2 'Road Runner':
--------------------------------
1.4.2 is a small release of dav1d, improving notably ARM, AVX-512 and PowerPC
- AVX2 optimizations for 8-tap and new variants for 6-tap
- AVX-512 optimizations for 8-tap and new variants for 6-tap
- Improve entropy decoding on ARM64
- New ARM64 optimizations for convolutions based on DotProd extension
- New ARM64 optimizations for convolutions based on i8mm extension
- New ARM64 optimizations for subpel and prep filters for i8mm
- Misc improvements on existing ARM64 optimizations, notably for put/prep
- New PowerPC9 optimizations for loopfilter
- Support for macOS kperf API for benchmarking
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Link with libatomic since rv32 does not have 64bit atomics
Fixes
| riscv32-yoe-linux-musl-ld.lld: error: undefined reference: __atomic_load_8
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Newer compilers e.g. clang19+ will treat implicit function prototypes
as errors, therefore define main() with a valid return type
Fixes
ckwart.c:531:1: error: return type defaults to ‘int’ [-Wimplicit-int]
531 | main(argc,argv) int argc; char **argv; {
| ^~~~
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Since recent UNPACKDIR work, default S directory is not created anymore.
By setting UNPACKDIR to S, S in indirectly created in do_unpack.
Also set S to a known static value to match OE-Core definition of
UNPACKDIR/S[0].
Fixes these warnings:
WARNING: bigbuckbunny-480p-1.0-r0 do_unpack: bigbuckbunny-480p: the directory ${WORKDIR}/${BP} (.../tmp/work/all-poky-linux/bigbuckbunny-480p/1.0/bigbuckbunny-480p-1.0) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to
WARNING: bigbuckbunny-720p-1.0-r0 do_unpack: bigbuckbunny-720p: the directory ${WORKDIR}/${BP} (.../tmp/work/all-poky-linux/bigbuckbunny-720p/1.0/bigbuckbunny-720p-1.0) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to
WARNING: bigbuckbunny-1080p-1.0-r0 do_unpack: bigbuckbunny-1080p: the directory ${WORKDIR}/${BP} (.../tmp/work/all-poky-linux/bigbuckbunny-1080p/1.0/bigbuckbunny-1080p-1.0) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to
WARNING: tearsofsteel-1080p-1.0-r0 do_unpack: tearsofsteel-1080p: the directory ${WORKDIR}/${BP} (.../tmp/work/all-poky-linux/tearsofsteel-1080p/1.0/tearsofsteel-1080p-1.0) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to
[0]: https://git.yoctoproject.org/poky/commit/?id=d6ae8d2004f8ac3aab4571e0077d406b2d19b542
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
GCC 14.0 being stricter regarding const pointers pointed out the issue
in the adb_libssl_11.diff. RSA_get0_key returns pointers to internal
data of an RSA key structure. As such, this data should use const
pointers, should not be allocated and, more importantly, should not be
freed. Update the patch to use const pointers, drop allocation and
freeing of the 'n' big number.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
46.2
====
* Potential crasher fix
* Improved disconnection messages
* Broader client compatibility support
* Various security hardening improvements
* CVE-2024-5148 Limit login screen->user session handover access to appropriate user
Contributors:
Pascal Nowack, Ray Strode
Translators:
Balázs Úr [hu], Efstathios Iosifidis [el], Fabio Tomat [fur],
Hugo Carvalho [pt], Jordi Mas i Hernandez [ca],
Juliano de Souza Camargo [pt_BR]
- add polkitd user and fix permissions to avoid:
Error: Transaction test error:
file /usr/share/polkit-1/rules.d conflicts between attempted installs of gnome-remote-desktop-46.2-r0.corei7_64 and gnome-control-center-46.2-r0.corei7_64
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changes in 46.2
=================
- Various behavioral and accessibility fixes to the ScreenCast portal dialog
- Translation updates
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Version 46.2
~~~~~~~~~~~~
Released: 2024-05-24
This is a stable release with the following changes:
* Fix a crash when no appstream data is found
* Correct app safety calculation
* Correct Flatpak system and user apps recognition
* Slightly speed-up rpm-ostree metadata refresh
This release also updates translations:
* Kabyle (Rachida SACI)
* Portuguese (Hugo Carvalho)
* Spanish (Daniel Mustieles)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
46.2
====
* Fix size of workspace switcher OSD [Jakub; !3282]
* Fix handling of invalid TLS certs in portal handler [Sebastian K.; !3284]
* Exclude override-redirect windows from workspace animation [Marco; !3285]
* Also center time on lock screen when using 12h format [pesader; !3290]
* Use absolute tray icon position in root event coordinates [Marco; !3283]
* Fix displaying info messages on login screen [Ray; !3298]
* Correct expected bus name for streams [Simon; !3303]
* Fix notifications on lock screen [Florian; !3308]
* notifications: Only apply special styling to symbolic icons [Florian; !3296]
* Fix number of search results with Large Text option [Sam; !3312]
* Fix showing keyboard layouts with variants [Sebastian K.; !3324]
* Tweak font sizes in calendar [Sam; !3313]
* automountManager: Fix re-asking password for TCRYPT devices [segfault; !3300]
* Fix stuck unlock prompt when animations are disabled [Florian; !3317]
* Fix possible hang on startup during ibus-daemon launch [Marco; !3293]
* Misc. bug fixes and cleanups [Sebastian W., Gabriel, Sebastian K., Florian,
Jonas, Sam, Ray; !3267, !3281, !3288, !3295, !3299, !3310, !3315, !3326,
!3321, !3319, !3329, !3331, !3245, !3340]
Contributors:
Jonas Ådahl, Sam Hewitt, Sebastian Keller, Simon McVittie, Florian Müllner,
Gabriel Nagy, pesader, segfault, Jakub Steiner, Ray Strode,
Marco Trevisan (Treviño), Sebastian Wick
Translators:
Andika Triwidada [id], Rachida SACI [kab], Hugo Carvalho [pt],
Scrambled 777 [hi], Jose Riha [sk], Balázs Úr [hu], Quentin PAGÈS [oc]
- remove backport patch
- update extensions
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Wang Mingyu
baruch@tkos.co.il
Khem Raj
Alex Kiernan
Enguerrand de Ribaucourt
Jiaying Song
Dmitry Baryshkov
Jonas Gorski
Chen Qi
Grygorii Tertychnyi
Mingli Yu
Martin Jansa
Jan Vermaete
Christophe Vu-Brugier
Peter Kjellerstedt
Michael Olbrich
Markus Volk
Yoann Congal
Alexandre Truong