CVE-2024-0962:
A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow.
Upstream-Status: Backport [https://github.com/obgm/libcoap/pull/1311]
WARNING: libcoap-4.3.4-r0 do_cve_check: Found unpatched CVE (CVE-2024-0962)
This vulnerability is only exist in 4.3.4.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
oldincludedir was removed in oe-core by
commit 506c91cbc6a604a84e37e53ccff430436369802e
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
oldincludedir was removed in oe-core by
commit 506c91cbc6a604a84e37e53ccff430436369802e
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
We already have libxml++-5 provided and some of
the dependencies for libxml++ (older version of glibmm)
are not available.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The original idea was always disable io_uring to avoid follwing failure
even when UV_USE_IO_URING is set to true, refer [1][2]:
0608: try:
*** 0609: update_hash(" %10s" % pwd.getpwuid(s.st_uid).pw_name)
0610: update_hash(" %10s" % grp.getgrgid(s.st_gid).gr_name)
0611: except KeyError as e:
0612: msg = ("KeyError: %s\nPath %s is owned by uid %d, gid %d, which doesn't match "
0613: "any user/group on target. This may be due to host contamination." %
Exception: Exception: KeyError: 'getpwuid(): uid not found: 20561'
But since 20.11.1, for fix CVE-2024-22017, io_uring is disabled by
default, refer [3]. So maybe patch
0001-deps-disable-io_uring-support-in-libuv.patch is not needed.
For case UV_USE_IO_URING is set to true, user can fix above failure
by "chown root:root -R ${D}" in do_install.
[1] https://lists.openembedded.org/g/openembedded-devel/message/105583
[2] https://bugzilla.yoctoproject.org/show_bug.cgi?id=15244
[3] 686da19abb
[4] https://nvd.nist.gov/vuln/detail/CVE-2024-22017
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
New API:
------------
to_ssh in VerifyingKey and SigningKey, supports Ed25519 keys only (Pablo Mazzini)
New features:
------------
Support for twisted Brainpool curves
Doc fix:
------------
Fix curve equation in glossary
Documentation for signature encoding and signature decoding functions
Maintenance:
------------
Dropped official support for 3.3 and 3.4 (because of problems running them
in CI, not because it's actually incompatible; support for 2.6 and 2.7 is
unaffected)
Fixes around hypothesis parameters
Officially support Python 3.11 and 3.12
Small updates to test suite to make it work with 3.11 and 3.12 and new
releases of test dependencies
Dropped the internal _rwlock module as it's unused
Added mutation testing to CI, lots of speed-ups to the test suite
to make it happen
Removal of unnecessary six.b literals (Alexandre Detiste)
Deprecations:
------------
int_to_string, string_to_int, and digest_integer from ecdsa.ecdsa
module are now considered deprecated, they will be removed in a future
release
Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
It gets OOMs with memory < 2G on x86_64 qemu
Export NFT variable in run-ptest script its used by few tests
Add required runtime dependencies for ptests to pass
This also requires changes to kernel config
features/nf_tables/nft_test.scc and CONFIG_VETH
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changes since 0.1.21:
* ae3eb16 version 0.1.22
* 4d14e61 tests: Reduce the printing a little to please libxml
* 2de7472 Change padding to be rfc8489 conform
* 69840fa meson: Generate nice-version.h in the right builddir
* f071eb5 interfaces: Avoid using strncpy to keep NULL termination
* 332419e interfaces: Avoid overwriting the ifreq struct
* 2188064 interfaces: Don't iterate allocation
* 952d837 Include TURN sockets in nice_agent_get_sockets()
* d053572 nicesink: Protect field access with object lock
* 504189e ci: Update Windows image to latest
* 245c856 nice: Export nice_address_is_linklocal
* 60db3b6 gitlab-ci: Move Coverity build to Fedora 38
* 4b63250 agent/meson: Replace filename with basename
* f456747 agent: set consent timeout to value specified in RFC 7675
* f3688cf meson: do not build gst test in static mode
* b322577 ci: Remove keyring update for msys2
* 11df9cd ci: Update Windows image to 2022
* 63f4962 Use ifr_ifindex on Linux
* 37f1e24 Use ifr_index to fix build on OpenBSD
* f4e2838 Fix build with clang
* fdbffeb version 0.1.21.1
Move the recipe from meta-oe/recipes-support/farsight to
meta-oe/recipes-support/libnice since there is nothing else in the
farsight directory.
Also remove additions to do_configure() and do_compile() that have not
been needed since the switch to Meson.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Switch to the sourceforge SRC_URI since the mars.org site only supports ftp.
Also switch the HOMEPAGE and BUGTRACKER links over to https.
and drop the obsolete SRC_URI[md5sum].
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Switch SRC_URI to https (yes, the URI still has ftp in the path!).
Also drop the obsolete SRC_URI[md5sum].
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Switch the SRC_URI from "ftp:" to "https:". Drop the obsolete SRC_URI[md5sum].
Drop ncftp-3.2.5-gcc10.patch since we're using gcc13 and upstream has fixed the build
to work by adding an extern to sh_util/gpshare.c for example.
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The bash in ptest RDEPENDS would cause following QA error:
ERROR: QA Issue: lib32-libgpiod package lib32-libgpiod-ptest-dev -
suspicious values 'bash-dev' in RRECOMMENDS [multilib]
Add a ptest enable dependency to avoid this QA error happens.
Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This typo would cause all utils tools to be missing in the image when only installing packagegroup-meta-filesystems
Signed-off-by: Yongchang Qiao <qiaoyongchang@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The python package has enabled to option to build it via python_setuptools_build_meta. Therefore the recipe is updated accordingly.
Also cleaned up the list of runtime dependencies which according to the package should no longer be needed.
The difference between v2 and v3 is the addition of the upstream status in the included patch.
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Packages such as aiooui need charset-normalizer as a DEPENDS instead of RDEPENDS. Therefore a the charset-normalizer recipe is extended.
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
dav1d 1.4.1 'Road Runner'
1.4.1 is a small release of dav1d, improving notably ARM and RISC-V
speed and fixing a small security issue.
The ARM speed improvements can be significative, depening on the
samples.
Finally, the binary size of dav1d was reduced on ARM and RISC-V
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fix declaration scope of LE_LOAD32 in crc32c when building
lib32-rocksdb:
util/crc32c.cc: In function 'void rocksdb::crc32c::DefaultCRC32(uint64_t*, const uint8_t**)':
util/crc32c.cc:267:53: error: 'LE_LOAD32' was not declared in this scope
267 | *l = _mm_crc32_u32(static_cast<unsigned int>(*l), LE_LOAD32(*p));
| ^~~~~~~~~
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: Updated copyright year and clean up authors, contributors
* 0001-explicitly-set-compile-options.patch dropped because setup.cfg moved to pyproject.toml -> (https://github.com/python-pillow/Pillow/pull/7484)
Also, we can give the build option parameters as described in the documentation -> https://pillow.readthedocs.io/en/stable/installation/building-from-source.html#build-options
Added build options to pass to build with using the variable PEP517_BUILD_OPTS so no need to create patch again.
* "python setup.py" and the use of "setup.py" as a command line tool are deprecated and upstream added a custom build backend to translate -C feature=disable style flags to the old --disable-feature style flags by prepending the build command (typically bdist_wheel) with a build_ext --disable-feature command which builds the extension modules before being added to a wheel. That backend uses the build_meta module of setuptools. The _CustomBuildMetaBackend class is a subclass of this module, adding custom behaviors and enabling settings specific to a particular project.
https://github.com/python-pillow/Pillow/blob/10.3.0/_custom_build/backend.py
* Ptest tested on qemux86-64 and qemuarm64 with x11.
* Since no ptest error was encountered, python3-pillow has been moved from PTESTS_PROBLEMS_META_PYTHON to PTESTS_SLOW_META_PYTHON.
Tests with SKIP are related to packages with explicitly disabled build options.
qemux86-64:
Testsuite summary
TOTAL: 4502
PASS: 4152
SKIP: 347
XFAIL: 2
FAIL: 0
XPASS: 1
ERROR: 0
DURATION: 904
END: /usr/lib/python3-pillow/ptest
2024-04-06T15:56
STOP: ptest-runner
TOTAL: 1 FAIL: 0
qemuarm64:
Testsuite summary
TOTAL: 4502
PASS: 4152
SKIP: 347
XFAIL: 2
FAIL: 0
XPASS: 1
ERROR: 0
DURATION: 674
END: /usr/lib/python3-pillow/ptest
2024-04-06T16:40
STOP: ptest-runner
TOTAL: 1 FAIL: 0
Changelog:
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.htmlhttps://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libfido2 adds support for FIDO2 authenticators. It's required for
OpenSSH to support FIDO backed keys, which I intend to add optional
support for in oe-core.
Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
According to its copyright file, dash is only BSD-3-Clause. It has
a build time tool from bash that's under the GPL, but only the
tool's output is used, not the tool itself. So all compiled artefacts
in dash appear to share the same licence.
Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add missing dependency on tornado, its also flagged by some ptests
{'python3-pyzmq': ['tests/test_ioloop.py:test_ioloop',
'tests/test_ioloop.py:test_ioloop_install']}
Skip ptests which cause zeromq errors
Signed-off-by: Khem Raj <raj.khem@gmail.com>
