Changelog:
=========
Fix error in example firewall.sh script
configure: remove useless -Wno-* from default CFLAGS
Add argv_insert_head__empty_argv__head_only to argv tests
Move deprecation of SWEET32/64bit block size ciphers to 2.7
Include --push-remove in the output of --help.
Move '--push-peer-info' documentation from 'server' to 'client options'
add test case(s) to notice 'openvpn --show-cipher' crashing
BUILD: enable CFG and Spectre mitigation for MSVC
Fix loading PKCS12 files on Windows
msvc: fix product version display
msvc: add missing header to project file
config-msvc.h: fix OpenSSL-related defines
contrib/vcpkg-ports: remove openssl port
GitHub Actions: use latest working lukka/run-vcpkg
Use network address for emulated DHCP server as a default
Load OpenSSL config on Windows from trusted location
ring_buffer.h: fix GCC warning about unused function
ssh_openssl.h: remove unused declaration
vcpkg/pkcs11-helper: compatibility with latest vcpkg
config-msvc.h: indicate key material export support
Don't use BF-CBC in unit tests if we don't have it
Define have_blowfish variable in ncp unit tests
doc link-options.rst: Use free open-source dynamic-DNS provider URL
Fix some more wrong defines in config-msvc.h
Ensure the current common_name is in the environment for scripts
Require EC key support in Windows builds
resolvconf fails with -p
Update IRC information in CONTRIBUTING.rst
doc/man (vpn-network-options): fix foreign_option_{n} typo
README.down-root: Fix plugin module name
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
refresh arm_eabi.patch
Changelog:
==========
Enhancements
-Add support for NTPv4 extension field improving synchronisation stability and
resolution of root delay and dispersion (experimental)
-Add support for NTP over PTP (experimental)
-Add support for AES-CMAC and hash functions in GnuTLS
-Improve server interleaved mode to be more reliable and support multiple clients behind NAT
-Update seccomp filter
-Add statistics about interleaved mode to serverstats report
Bug fixes
-Fix RTC support with 64-bit time_t on 32-bit Linux
-Fix seccomp filter to work correctly with bind*device directives
-Suppress kernel adjustments of system clock (dosynctodr) on illumos
Other changes
-Switch Solaris support to illumos
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
I get a couple of python SyntaxWarnings when running oe-stylize:
[jk@pecola meta-openembedded]$ python3 contrib/oe-stylize.py
contrib/oe-stylize.py:372: SyntaxWarning: "is not" with a literal. Did you mean "!="?
if line is not '':
contrib/oe-stylize.py:389: SyntaxWarning: "is" with a literal. Did you mean "=="?
if line.isspace() or line is '':
The 'is' operator is for object reference comparison, which is not what
we want here. Change to '==' / '!=' instead.
Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Currently, the variable and routine regexes don't support the
override-style syntax. This means we may break routine blocks, as we
don't recognise overridden routines with an :append/:prepend/etc.
This change adds the ":" char to the var & routine regexes.
Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
If the rpm lacks dependencies, an exception will be thrown and exit
when generating the CSV file.
Modify utils.py to catch and handle exception.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
mctpd ships with an example dbus service configuration, so install in
the dbus system configuration dir.
Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
We have a tag for 1.0, now: better handling of local stack configuration
at runtime, and the 5.15 kernel header change has been integrated.
Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update:Add BSD-3-Clause License
changlog:
================================================================
Core:
This release contains refinements, improvements, and bug fixes,
with highlights listed below.
Remove redundant work serializer usage in c-ares windows code. (#28016)
Support RDS updates on the server. (#27851)
Use WorkSerializer in XdsClient to propagate updates in a synchronized
manner. (#27975)
Support Custom Post-handshake Verification in TlsCredentials. (#25631)
Reintroduce the EventEngine default factory. (#27920)
Assert Android API >= v21. (#27943)
Add support for abstract unix domain sockets. (#27906)
Python:
[Aio] Validate the input type for set_trailing_metadata and abort. (#27958)
Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
From the release notes page
(https://docs.djangoproject.com/en/4.0/releases/3.2.10/):
Django 3.2.10 fixes a security issue with severity “low” and a bug in
3.2.9.
CVE-2021-44420: Potential bypass of an upstream access control based on
URL paths
HTTP requests for URLs with trailing newlines could bypass an upstream
access control based on URL paths.
Bugfixes
Fixed a regression in Django 3.2 that caused a crash of setUpTestData()
with BinaryField on PostgreSQL, which is memoryview-backed (#33333).
Django 3.2.9 fixes a bug in 3.2.8 and adds compatibility with Python
3.10.
Bugfixes
Fixed a bug in Django 3.2 that caused a migration crash on SQLite when
altering a field with a functional index (#33194).
Django 3.2.8 fixes two bugs in 3.2.7.
Bugfixes
Fixed a bug in Django 3.2 that caused incorrect links on read-only
fields in the admin (#33077).
Fixed a regression in Django 3.2 that caused incorrect selection of
items across all pages when actions were placed both on the top and
bottom of the admin change-list view (#33083).
Django 3.2.7 fixes a bug in 3.2.6.
Bugfixes
Fixed a regression in Django 3.2 that caused the incorrect offset
extraction from fixed offset timezones (#32992).
Django 3.2.6 fixes several bugs in 3.2.5.
Bugfixes
Fixed a regression in Django 3.2 that caused a crash validating "NaN"
input with a forms.DecimalField when additional constraints, e.g.
max_value, were specified (#32949).
Fixed a bug in Django 3.2 where a system check would crash on a model
with a reverse many-to-many relation inherited from a parent class
(#32947).
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 3.0.24 with the following fixes:
- Prevent window content overflowing when using scrollbars.
- Handle `PermissionError` when trying to attach /dev/null in
vt100 input.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 3.13.1:
- Add da_DK language
- Fix and add Russian and Ukrainian words
- Add missing strings for Polish translation
- Add Traditional Chinese (zh-HK)
- Temporarily comment out to avoid warning during import humanize
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
changelog:
================================================================================
Django 2.2.25 fixes a security issue with severity "low" in 2.2.24.
CVE-2021-44420: Potential bypass of an upstream access control based on URL paths
=================================================================================
HTTP requests for URLs with trailing newlines could bypass an upstream access
control based on URL paths.
Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
The license is contained in the COPYING file, not the README
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
dhcp-relay needs a fresh tarball of bind unpacked in ${S}, but this is
done by fetching the tarball to ${WORKDIR}, then in do_configure moving
it to ${S} and unpacking it.
If dhcp-relay is re-configured, the tarball no longer exists in ${WORKDIR}
so this fails. Copy instead of moving so rebuilds work.
Also don't rename the downloaded file to just bind.tar.gz as that can
cause probems if the version changes.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changes
https://github.com/inotify-tools/inotify-tools/compare/e268888...8f8fcdf
Fixes build errors
/usr/include/bits/stdlib.h:46:12: e3.21.9.6rror: call to '__realpath_chk_warn' declared with attribute warning: second argument of realpath must be either NULL or at least PATH_MAX bytes long buffer [-Werror=attribute-warning]
| 46 | return __realpath_chk_warn (__name, __resolved, sz);
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| cc1: all warnings being treated as errors
Signed-off-by: Khem Raj <raj.khem@gmail.com>
New features:
- Add a sync-bkc subcommand to ensure a known set of firmware versions
- Make Upower and powerd support optional
Fixed bugs:
- Check the value range when parsing the quirk keys
- Do not wait for a USB runtime if will-disappear is set
- Enable the MOTD integration when using pam_motd
- Ignore a USB error for STM32 attach when the device goes away
- Make the HSI tests optional for embedded targets
- Make the plugin startup order deterministic
- Use endian-safe version functions when enumerating Logitech hardware
Adding support for the following hardware:
- Most Nordic Semiconductor nRF Secure devices
Signed-off-by: Richard Hughes <richard@hughsie.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Bugfixes:
- Ensure _IS_TOKENIZED is set if tokens are added manually
- Ensure we never add too many tokens to the silo
Signed-off-by: Richard Hughes <richard@hughsie.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
New Features:
- Set which backends are supported in the pkgconfig file
- Use -Dcli=false to reduce the install size
Bugfixes:
- Return an error if we try to self-sign no bytes of data
- Show a more accurate output when not all engines are enabled
Also, inherit lib_package so the binary isn't installed by default.
Signed-off-by: Richard Hughes <richard@hughsie.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This library is not specific to GNOME and has no GNOME specific
functionality. Move it to meta-oe so that users can pull it in without
meta-gnome.
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Instead of forcibly disabling libgcrypt, add a PACKAGECONFIG and enable
it as functionality is good.
Also remove the redundant libtool-native DEPENDS as autotools adds this
dependency by default.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libtool is now longer renamed to ${host}-libtool, so remove the changes
to support this.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
zhengruoqin
Jeremy Kerr
Khem Raj
Peter Kjellerstedt
Trevor Gamblin
Wang Mingyu
Xu Huan
Oleksandr Kravchuk
Leon Anavi
Mark Hatle
Joshua Watt
Ross Burton
Lei Maohui
Richard Hughes