Commit Graph

30676 Commits

Author SHA1 Message Date
Wang Mingyu ee26b51856 lvm2: upgrade 2.03.24 -> 2.03.25
0001-implement-libc-specific-reopen_stream.patch
0001-include-libgen.h-for-basename.patch
refreshed for 2.03.25

Changelog:
=============
- Utilize more radix_tree instead of dm_hash and btree.
- Refactor DM uuid caching from device_mapper directory.
- Enhance checking for DM uuid device.
- Fix lvm shell command completion on tab key (2.03.24).
- Avoid lockd_vg call to lvmlockd for local VGs.
- Allow forced change of locktype from none.
- Handle OPTIONS defined in /etc/sysconfig/lvmlockd.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:12 -07:00
Wang Mingyu 9773b1358e libbpf: upgrade 1.4.3 -> 1.4.5
Changelog:
============
- fix BPF skeleton forward/backward compat handling
- detect broken PID filtering logic for multi-uprobe

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:11 -07:00
Wang Mingyu 6b40ee577d libass: upgrade 0.17.2 -> 0.17.3
Changelog:
============
* Fix 0.17.2 regression in the fontconfig fontprovider
  leading to undesirable widths being chosen from large typographic families
* Fix configure generated with slibtool-provided autoconf macros
* Fix "make check" for shared-only builds
* Constify some API parameters in a backwards-compatible manner
* Add new ass_malloc and ass_free API functions
* Tweak default optimization flags
* Speed up parsing of events with very long override blocks
* Improve handling of HarfBuzz-related failures

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:11 -07:00
Wang Mingyu 3d02fd0ef2 ipset: upgrade 7.21 -> 7.22
Changelog:
==========
- ipset: fix json output format for IPSET_OPT_IP
- tests: add namespace test and take into account delayed
  set removal at module remove
- Update autoconfig tools to build cleanly on Debian bookworm

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:11 -07:00
Wang Mingyu c79ede2655 imlib2: upgrade 1.12.2 -> 1.12.3
Changelog:
===========
- Y4M loader: add support for full range color
- Y4M loader: add support for 10-bit 4:2:0
- XPM loader: Fix potential segv on malformed file
- imlib2_load: Add crc32 printout
- test: Corrections for for libjxl-0.10
- XPM loader: Fix some color table parsing errors
- XPM loader: Major overhaul
- test_load_2: Add full range color y4m image
- test_load_2: Add some more y4m test images
- Some cleanups in asm code
- Add endbr32/64 instruction at the start of asm functions
- Add missing CET (Control-flow Enforcement Technology) bits in asm code
- imlib2_view: Use poll(), not select()
- imlib2_view: Minor cleanup
- imlib2_view: Enable an alternate background color set (red/green)
- imlib2_view: Optionally disable final anti-aliased rendering
- imlib2_view: Rename scaling variables
- imlib2_view: Optionally scale on input
- imlib2_view: Enable specifying border
- Y4M loader: Fix frame size calculation for 10-bit 4:2:0 format
- imlib2_view: Enable specifying background checkerboard colors

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:11 -07:00
Wang Mingyu c799297ef2 hwdata: upgrade 0.383 -> 0.384
Changelog:
=============
- Update pci and vendor ids
- Replace 'DO NOT USE' with more descriptive 'Invalid Vendor Codename' in pnp vendor names

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:11 -07:00
Wang Mingyu 0e55ce901a gnome-keyring: upgrade 46.1 -> 46.2
Changelog:
=========
* Don't use 'bool' as variable name
* autogoo: replace AC_HELP_STRING with AS_HELP_STRING
* Default "automatically unlock" checkbox to false
* build: Fix distcheck with systemd unit
* rpc-layer: Fix undefined reference to g_strlcpy
* Updated translations

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:11 -07:00
Wang Mingyu 10a8d80cc7 exiftool: upgrade 12.87 -> 12.89
Changelog:
===========
- Added new Sony lenses and updated decoding of some tags
- Minor change to description of NKA files
- Fixed Archive::Zip problem in Windows executable version

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:11 -07:00
Wang Mingyu ea49d2d38b ctags: upgrade 6.1.20240630.0 -> 6.1.20240714.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:10 -07:00
Wang Mingyu ed2c9d24a5 botan: upgrade 3.4.0 -> 3.5.0
License-Update: Copyright year updated to 2024.

Changelog:
==========
* CVE-2024-34702: Fix a DoS caused by excessive name constraints.
* CVE-2024-39312: Fix a name constraint processing error, where if
  permitted and excluded rules both applied to a certificate, only the
  permitted rules would be checked.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:10 -07:00
Randolph Sapp b011e934bd opencl-clhpp: add native and nativesdk
This is a header only package. It may be useful to the native machine
but it is definitely useful for the nativesdk machine.

Signed-off-by: Randolph Sapp <rs@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:21 -07:00
Martin Jansa 23777ac6dd pkcs11-provider: backport a fix for build with gcc-14
* fails only with 32bit MACHINEs, e.g. full log from qemux86:
  http://errors.yoctoproject.org/Errors/Details/790494/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:20 -07:00
alperak 9f4361418d exiv2: Upgrade 0.28.2 to 0.28.3 for CVE fix
Release Notes:

* https://github.com/Exiv2/exiv2/issues/3008
* https://github.com/Exiv2/exiv2/milestone/14?closed=1

This release also fixes a low-severity security issue in asfvideo.cpp:

* [CVE-2024-39695](https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh): out-of-bounds read in AsfVideo::streamProperties.

This vulnerability is in a new feature (ASF video) that was added in version 0.28.0, so earlier versions of Exiv2 are not affected.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:20 -07:00
Khem Raj 294c0251f8 webmin: Upgrade to 2.111 release
Drop remove-python2.3.patch since corresponding script is gone

License-Update: Formatting changes

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:20 -07:00
Alexandre Videgrain 85132c1621 openbox: fix crash on alt+tab with fullscreen app
Apply an openbox patch to openbox recipe to fix crashes on alt+tab with
fullscreen app.

Github issue: https://github.com/openembedded/meta-openembedded/issues/837

Signed-off-by: Alexandre Videgrain <alexandre.videgrain@smile.fr>
Suggested-by: Ludovic Jozeau <ludovic.jozeau@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:20 -07:00
Wang Mingyu a7d9829277 procmail: fix build failure with gcc-14
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:20 -07:00
Yoann Congal 650bef8de2 pidgin: Remove gcc-14 compatibility workaround
Since commit "pidgin: Upgrade to 2.14.13" (which contains a gcc-14
compatibility patch), the workaround is not needed to build on gcc-14.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Suggested-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:20 -07:00
Yoann Congal 425d705e76 pidgin: Update Upstream-Status for gcc-14 compatibility patch
Patch was merged here:
https://keep.imfreedom.org/pidgin/pidgin/rev/210f318db492

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:19 -07:00
Ross Burton 6d5619b5c5 libabigail: refresh musl/fts patch
This patch has now been sent upstream.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-14 12:06:19 -07:00
Wang Mingyu 09cf028276 fetchmail: disable rpath to fix buildpaths warning.
There was an error with the last modification to the buildpaths warning, which could cause segment error.

fix the following warning about buildpath:
  WARNING: fetchmail-6.4.38-r0 do_package_qa: QA Issue: File /usr/bin/fetchmail in package fetchmail contains reference to TMPDIR [buildpaths]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-10 09:02:52 -07:00
Yoann Congal 7bbf253811 daq: fix SRC_URI to point to the real 2.0.7 release
The previous fossies.org archive contained a 2.0.6 release.
(The included "configure" script contained PACKAGE_VERSION='2.0.6')

Switch to the upstream archive hosted on snort.org which look like a
real 2.0.7 version (configure contains PACKAGE_VERSION='2.0.7')

Diff of the before vs after archive includes:
* configure script :
  * New option : -runstatedir
  * PACKAGE_VERSION='2.0.6' -> '2.0.7' (+ other related variables)
* New copyright year (2014-2021 Cisco) on some files

Use a custom downloadfilename to avoid conflicts with the "wrong" 2.0.7
archive.

CC: Romain Naour <romain.naour@smile.fr>
CC: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-09 13:21:30 -07:00
Martin Jansa 7351e62015 bolt: package systemd_system_unitdir correctly
* ${libdir}/systemd doesn't work on multilib builds, where libdir might be something
  else than ${nonarch_base_libdir}

  fixes:
  ERROR: QA Issue: lib32-bolt: Files/directories were installed but not shipped in any package:
    /usr/lib/systemd
    /usr/lib/systemd/system
    /usr/lib/systemd/system/bolt.service

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-09 08:51:11 -07:00
Yoann Congal 9697fd958e pidgin: Upgrade to 2.14.13
Upstream changelog: https://www.pidgin.im/ChangeLog

Recipe changes:
* Add a patch (in review) to support building on gcc-14
* Drop OE branding patch (code supporting this has disapeared or is
  disabled)
* Remove vv and farsight2 PACKAGECONFIGs (depend on the removed
  farsight2 recipe[0])
* Fixed an obvious reproducibility issue with TMPDIR in binary

[0]: https://git.openembedded.org/meta-openembedded/commit/?id=ec9e5ed06256ad92c818474cdb490dc0d3a0d0a3

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-09 08:51:11 -07:00
BINDU f3be6cf146 flatbuffers: adapt for cross-compilation environments
Flatbuffers contains a library and a schema compiler. The package
contains cmake files to discover the libraries and the compiler tool.
Currently, all of these cmake files are installed into the target
sysroot. However, the compiler utility isn't installed into the sysroot
(as it is not runnable on the build machine).

When an application that depends on flatbuffers gets built, it uses
flatbuffers' exported cmake targets to configure the project. One of the
exported targets is FlatcTarget.cmake which expects to see flatc binary
in /usr/bin of the sysroot. Since binaries for target don't end up in
target sysroot, cmake configuration fails.

This patch addresses this problem of flatbuffers' build infrastructure
in cross-compiling environments. By removing FlatcTarget.cmake for
target builds from the sysroot we essentially skip this step of
flatbuffers' configuration.

(cherry picked from commit b97dbaac66)

Signed-off-by: Ivan Stepic <Ivan.Stepic@bmw.de>
Signed-off-by: Bhabu Bindu <bindudaniel1996@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Akash Hadke <akash.hadke27@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-09 08:51:11 -07:00
Jeremy A. Puhlman 63fce96670 net-snmp: Set ps flag value since it checks the host
The value the configure script uses is picked up
from the host machine ps, and there are cases when
the flag selection can be different. Which would
break reproducablity between builds on different
machines.

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-09 08:48:23 -07:00
Yoann Congal fb06337f34 python3-redis: add an archive prefix to avoid clashing with redis
The new python3-redis_5.0.7 archive "redis-5.0.7.tar.gz" may clash with
a very old redis-5.0.7 archive. It does on the autobuilder which kept
its DL_DIR from this era and triggers a mirroring error[0].

To fix this, add a "pypi-" prefix to the archive name of python3-redis.

[0]:https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/420/steps/17/logs/errors

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-08 12:09:39 -07:00
Martin Jansa f0c767407d recipes: ignore various issues fatal with gcc-14
work arounds for:
meta-oe/meta-oe/recipes-devtools/nodejs/nodejs_20.12.2.bb:do_compile
meta-oe/meta-oe/recipes-support/pidgin/pidgin_2.14.2.bb:do_compile
meta-oe/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb:do_compile
meta-oe/meta-oe/recipes-extended/rrdtool/rrdtool_1.8.0.bb:do_compile
meta-oe/meta-oe/recipes-extended/cmpi-bindings/cmpi-bindings_1.0.4.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-gevent_24.2.1.bb:do_compile
meta-oe/meta-oe/recipes-support/avro/avro-c++_1.11.3.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-h5py_3.10.0.bb:do_compile
meta-oe/meta-oe/recipes-multimedia/cdrkit/cdrkit_1.1.11.bb:do_compile
meta-oe/meta-networking/recipes-connectivity/openthread/ot-br-posix_git.bb:do_compile
meta-oe/meta-oe/recipes-devtools/heaptrack/heaptrack_1.2.0.bb:do_configure
meta-oe/meta-oe/recipes-support/avro/avro-c_1.11.3.bb:do_compile
meta-oe/meta-oe/recipes-core/usleep/usleep_1.2.bb:do_compile
meta-oe/meta-networking/recipes-protocols/openflow/openflow_git.bb:do_compile
meta-oe/meta-oe/recipes-extended/sblim-sfcc/sblim-sfcc_2.2.8.bb:do_compile
meta-oe/meta-networking/recipes-support/linux-atm/linux-atm_2.5.2.bb:do_compile
meta-oe/meta-oe/recipes-kernel/ipmitool/ipmitool_1.8.19.bb:do_compile
meta-oe/meta-networking/recipes-support/ssmping/ssmping_0.9.1.bb:do_compile
meta-oe/meta-oe/recipes-connectivity/wifi-test-suite/wifi-test-suite_10.10.1.bb:do_compile
meta-oe/meta-oe/recipes-extended/zsync/zsync-curl_git.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-kivy_2.3.0.bb:do_compile
meta-oe/meta-oe/recipes-support/openct/openct_0.6.20.bb:do_compile
meta-oe/meta-oe/recipes-benchmark/dhrystone/dhrystone_2.1.bb:do_compile
meta-oe/meta-networking/recipes-daemons/ncftp/ncftp_3.2.7.bb:do_compile
meta-oe/meta-oe/recipes-support/daemontools/daemontools_0.76.bb:do_compile
meta-oe/meta-oe/recipes-devtools/libgee/libgee_0.20.6.bb:do_compile
meta-oe/meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb:do_compile
meta-oe/meta-oe/recipes-devtools/android-tools/android-tools_5.1.1.r37.bb:do_compile
meta-oe/meta-networking/recipes-connectivity/dibbler/dibbler_git.bb:do_compile
meta-oe/meta-oe/recipes-devtools/glade/glade_3.22.2.bb:do_compile

http://errors.yoctoproject.org/Errors/Build/183124/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-08 08:42:43 -07:00
Martin Jansa 772e3c8746 recipes: ignore various issues fatal with gcc-14 (for 32bit MACHINEs)
Recipes included here are
openldap microsoft-gsl scsirastools pam-ssh-agent-auth sblim-sfcb ckermit nvme-cli xfstests

* these are reproducible only with 32bit MACHINEs and probably related
  to time64.inc
  http://errors.yoctoproject.org/Errors/Build/183154/

* and microsoft-gsl only with 32bit arm MACHINEs:
  http://errors.yoctoproject.org/Errors/Build/183157/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-08 08:40:43 -07:00
Martin Jansa 23e3b5e971 giflib: fix build with gold and avoid imagemagick-native dependency
* avoid imagemagick-native like upstream did in:
  https://sourceforge.net/p/giflib/code/ci/d54b45b0240d455bbaedee4be5203d2703e59967/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-08 08:40:19 -07:00
Markus Volk cdd196388a flatpak: add PACKAGECONFIG for dconf
Disable by default to avoid a requirement for meta-gnome

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-08 08:40:19 -07:00
Khem Raj 6f3784d1b7 overlayfs-tools: Fix build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-05 23:26:51 -07:00
Niko Mauno 1c3abfdbd8 pkcs11-provider: Upgrade 0.3 -> 0.5
Changelogs:
 - https://github.com/latchset/pkcs11-provider/releases/tag/v0.4
 - https://github.com/latchset/pkcs11-provider/releases/tag/v0.5

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-05 08:24:25 -07:00
Yi Zhao 5bc18d62f8 wtmpdb: specify correct pamlibdir
Install pam_wtmpdb.so to pam plugin directoy.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-04 08:45:54 -07:00
Yi Zhao cd25a7505d lastlog2: specify correct pamlibdir
Install pam_lastlog2.so to pam plugin directoy.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-04 08:45:54 -07:00
alba@thehoodiefirm.com 46b2eef28b apache2:apache2-native: sort CVE status
Signed-off-by: Alba Herrerías <alba@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-04 08:45:54 -07:00
Ninette Adhikari a1441be529 apache2: Update CVE status
Update CVE status for: CVE-1999-0289, CVE-2007-0450, CVE-2010-0425

The current version (2.4.6) is not affected. It only applies for Windows.

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 20:20:18 -07:00
Ninette Adhikari 17bcf478a5 monkey: Update status for CVE-2013-2183
Current version (1.6.9) is not affected. Issue was addressed in version 1.3.0

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 20:20:17 -07:00
Ninette Adhikari 36bb521a13 redis: Update status for CVE-2022-3734
CVE only applies for Windows.

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 20:20:17 -07:00
Ninette Adhikari 714f47bb3b xterm: CVE status update CVE-1999-0965
Current version (392) not affected. This was fixed in version X11R5-fix-26 (R11R6 from 1994)

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 20:20:17 -07:00
Ninette Adhikari d026169258 php-native: CVE status update for CVE-2022-4900
The current version (8.2.20) is not affected.

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 20:20:17 -07:00
Ninette Adhikari ceb3f82415 gimp: CVE status update
Update status for: CVE-2007-3741, CVE-2009-0581, CVE-2009-0723, CVE-2009-0733

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 20:20:17 -07:00
alperak cb2e8f98b4 jsonrpc: Fix contains reference to TMPDIR [buildpaths] warning
WARNING: jsonrpc-1.4.1-r0 do_package_qa: QA Issue: File /usr/lib/libjson-rpc-cpp/cmake/libjson-rpc-cppTargets.cmake in package jsonrpc-dev contains reference to TMPDIR [buildpaths]

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 20:20:17 -07:00
Vijay Anusuri a8953bf9fe krb5: upgrade 1.21.2 -> 1.21.3
CVEs Fixed
CVE-2024-37370, CVE-2024-37371

Release Notes:
https://web.mit.edu/kerberos/krb5-1.21/krb5-1.21.3.html

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 20:20:16 -07:00
Yi Zhao be012cc838 packagegroup-xfce-extended: fix typo of gobject-introspection-data feature
Fix typo: gobject-introspection -> gobject-introspection-data

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 08:46:30 -07:00
Libo Chen fa6831f0a8 thin-provisioning-tools: install missed thin_shrink and era_repair
Install missed thin_shrink and era_repair for thin provisioning

Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-03 08:46:30 -07:00
Khem Raj 9363162b51 renderdoc: Fix build with clang fortify and glibc 2.40
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-02 23:57:16 -07:00
Khem Raj 6da3cec9b3 renderdoc: Upgrade to 1.33
License-Update: Updated copyright years.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-02 23:57:16 -07:00
Khem Raj 26d0e97ce2 python3-inflate64: Fix build with clang fortified glibc headers
This issue is seen with upcoming glibc 2.40

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-02 22:21:18 -07:00
Khem Raj 0ae8adcd63 flite: Fix buld with clang fortify enabled distros
This issue shows up with upcoming glibc-2.40+ where
clang fortify support has been enhanced significantly.

Set CLEANBROKEN since it does not recover from a dirty tree

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-02 22:21:18 -07:00
Siddharth Doshi 8c5860f22d apache2: Upgrade 2.4.59 -> 2.4.60
CVE's Fixed by upgrade:
CVE-2024-36387 apache2/httpd: DoS by null pointer in websocket over HTTP/2
CVE-2024-38472 apache2/httpd: UNC SSRF on WIndows
CVE-2024-38473 apache2/httpd: Encoding problem in mod_proxy
CVE-2024-38474 apache2/httpd: Substitution encoding issue in mod_rewrite
CVE-2024-38475 apache2/httpd: Improper escaping of output in mod_rewrite
CVE-2024-38476 apache2/httpd: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect
CVE-2024-38477 apache2/httpd: null pointer dereference in mod_proxy
CVE-2024-39573 apache2/httpd: Potential SSRF in mod_rewrite

Other Changes between 2.4.59 -> 2.4.60
======================================
https://github.com/apache/httpd/blob/2.4.60/CHANGES

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-02 16:59:02 -07:00