0001-libgcrypt.c-Fix-prototype-of-des3_encrypt-des3_decry.patch
0001-tests-CMakeLists.txt-do-not-search-ssh-sshd-commands.patch
refreshed for 0.10.6
Changelog:
==========
* Fix CVE-2023-6004: Command injection using proxycommand
* Fix CVE-2023-48795: Potential downgrade attack using strict kex
* Fix CVE-2023-6918: Missing checks for return values of MD functions
* Fix ssh_send_issue_banner() for CMD(PowerShell)
* Avoid passing other events to callbacks when poll is called recursively (#202)
* Allow @ in usernames when parsing from URI composes
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1bea2e8c30)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upgrade urgency SECURITY: See security fixes below.
Security fixes:
(CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a
race condition that can be used by another process to bypass desired Unix
socket permissions on startup.
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5b34766daa)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changelog:
===========
- Fix flickering while playing videos with DMA-BUF sink.
- Fix color picker being triggered in the inspector when typing "tan".
- Do not special case the "sans" font family name.
- Fix build failure with libxml2 version 2.12.0 due to an API change.
- Fix several crashes and rendering issues.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1a474db270)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changelog:
==========
- Bump Safari version in user agent header.
- Fix CSP regression that broke Unity WebGL applications.
- Fix the build with GBM disabled.
- Fix several crashes and rendering issues.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 700e3a36fb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Remove one patch as the logic is included in the new version [1] [2].
Upgrade mariadb to 10.11.6 [3].
[1] f4cec369a3
[2] cd5808eb8d
[3] https://mariadb.com/kb/en/mariadb-10-11-6-release-notes/
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 702cf1dc11)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The current SRCREV is not on any branch anymore, switch to the 1.12.4
branch HEAD which is similar and the only change is irrelevant.
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Due to the library file name change, the subpackage "geoslib"
does not get generated, and the main geos package has unsatisfied
dependencies.
Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 405ee46107)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
GitHub has been redirecting for a while, so switch SRC_URI from
github.com/rhinstaller/libbytesize to
github.com/storaged-project/libbytesize instead without redirects.
Signed-off-by: Edi Feschiyan <edi.feschiyan@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 75bb23b3b0)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
dnf-plugin-tui must work on nativesdk environment.
Now there's no warning when run the command "bitbake universe -c fetch".
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5211242d3f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Take three CVE fixes from Fedora, as the upstream repository is now
dead.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 458fd00233)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Per convert-srcuri.py script, github repos should be accessed
via https.
Change it accordingly.
Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4cef1e68ea)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Per convert-srcuri.py script, github repos should be accessed
via https.
Change it accordingly.
Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4f69d8c198)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This is 0.70 release with few more commits on top.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 08edc0b6ac)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
dab8051f Release 2023.6
bd91fda6 Merge pull request #3010 from cgwalters/more-composefs-fixes
3648c5ae build-sys: Really fix composefs check
db3b286d Merge pull request #3009 from cgwalters/c9s-ci
bcd4d026 Merge pull request #3007 from cgwalters/optin-new-bootloader-naming
33ef4ae6 build-sys: Look for both linux/mount.h and sys/mount.h
bd8339bd ci: Add c9s build
cbe36c3a Merge pull request #3008 from ostreedev/maybe_ostree
29423a89 prepare-root: If composefs is configured as "maybe" don't fail
02d41907 deploy: Add bootloader-naming-2 opt-init
fb06d59e Merge pull request #3003 from cgwalters/prepare-root-oscore-and-units
20b8cb17 Move prepare-root karg helpers into otcore, add unit tests
44519492 Merge pull request #2997 from cgwalters/test-cleanups-1
37f247da Merge pull request #2999 from cgwalters/add-oscore-units
aa8ad204 Merge pull request #3001 from cgwalters/misc-c99-style-4
75a43deb cmd/grub2-generate: Port to C99 style
767ca134 cmd/init: Port to C99 style
e3ef72ea Merge pull request #3000 from cgwalters/test-inst-update
6eeb8b56 Merge pull request #2995 from ostreedev/dependabot/submodules/composefs-1aed878
e751dd9a Merge pull request #2998 from cgwalters/disable-composefs-too-old
facb9a1a tests/inst: Update to latest ostree-ext
7c82340d Merge pull request #2975 from ostreedev/androidboot-single-slot-mode
e3f0c4d4 tests: Add otcore unit tests
90e54619 build-sys: Disable composefs on too-old Linux headers
6e9e50d8 prepare-root: Changes made to find_proc_cmdline_key
650a0537 prepare-root: On a non-A/B androidboot system, boot system slot a
16b97d8a Merge pull request #2996 from cgwalters/misc-c99-style-3
578c87e7 tests/destructive: Port more to xshell
8f302f2a cli/set-origin: Port to C99 style
69d7d837 build(deps): bump composefs from `a6e827d` to `1aed878`
ee1e585e Merge pull request #2993 from cgwalters/misc-c99-style-2
22b47781 checkout: Port to C99 style
f7786e75 Merge pull request #2990 from cgwalters/init-is-stateroot
27266f90 lzma: Port to C99 style
722fc2d0 Merge pull request #2991 from cgwalters/misc-c99-style
9f39f78e remote-add: Port to c99 style
9036c96a admin: Port to c99 style
f4e56b91 admin-deploy: Add `--stateroot` as alias for `--os`
9d5ccfef Add `ostree admin stateroot-init` as alias for `os-init`
9ac938c4 Merge pull request #2989 from cgwalters/lock-timeout-longer
f4b42049 Merge pull request #2973 from ostreedev/dependabot/submodules/composefs-a6e827d
e88ec69e repo: Bump lock timeout to 5 minutes
55121cc4 Merge pull request #2988 from cgwalters/prepare-root-binding-key
d648eea6 Merge pull request #2987 from cgwalters/prefix-stage-deploy
94cb37cb prepare-root: Minor clarifications
25a458b9 deploy: Add some error prefixing
8712a467 Merge pull request #2985 from cgwalters/cleanup-proc-cmdline
083bad8c Merge pull request #2984 from alexlarsson/prepare-root-no-raw-key
28aed49d switchroot,generator: Only read /proc/cmdline once
0a79b3b1 prepare-root: Only support base64 formated public key files
c94388f3 Merge pull request #2980 from cgwalters/prepare-root-minor
871d32a5 prepare-root: Use ptrarray, not linked list
678bfcd9 prepare-root: Check for empty string, not strlen > 0
bea5d897 prepare-root: Use declare-and-initialize
3620d3c7 Merge pull request #2979 from cgwalters/enabled-discussions
d324f684 Merge pull request #2974 from alexlarsson/composefs-config-file
f1c1f819 README.md: Drop dead mailing list, link to GH discussions
81fa2141 Read composefs configuration from initrd instead of commandline
2cc6b531 Merge pull request #2966 from cgwalters/ostree-admin-edit
b108e24c build(deps): bump composefs from `1704f82` to `a6e827d`
c57c0056 Merge pull request #2958 from cgwalters/deploy-loosen-etc-usretc
7f70614a Merge pull request #2969 from cgwalters/fix-sync-pthreads
a31f7798 Merge pull request #2967 from cgwalters/drop-trivial-httpd-entrypoint
402e0428 deploy: Fix mutex locking for global sync timeout
60b46556 More fully drop `trivial-httpd` entrypoint
3cd3251a Add `admin set-default`
09160c1a Merge pull request #2962 from cgwalters/os-init-remount
ac42e29d os-init: Create a mount namespace
113e575e Merge pull request #2963 from cgwalters/more-gfileinfo-fix
15cb0b47 composefs: Only call `_get_symlink_target()` on symlinks
f44909f8 Merge pull request #2960 from ostreedev/dependabot/submodules/libglnx-c02eb59
a16a14a6 build(deps): bump libglnx from `07e3e49` to `c02eb59`
fd968d59 Merge pull request #2957 from cgwalters/transaction-test-suppress-global-sync
0406fd39 deploy: Support an empty `/etc` and populated `/usr/etc`
6470429b tests/destructive: Turn off global sync()
a2663e80 Merge pull request #2956 from cgwalters/finalize-more-verbose
3d881fee deploy: Be way more verbose about what we're doing
1aed5d7c Merge pull request #2954 from cgwalters/harden-gvariant-get-data
5b372596 checksum-utils: Add an assertion that `buf != NULL`
0392b546 core, switchroot: Harden a bit against `g_variant_get_data() == NULL`
d7d66121 Merge pull request #2953 from samcday/patch-1
66e42553 Merge pull request #2930 from cgwalters/prepare-root-config3
b5397887 docs: update boot loader spec link
af52a88d Merge pull request #2952 from cgwalters/silence-variant-lookup
13e7ae90 tree-wide: Consistently `(void)g_variant_lookup()`
34656260 prepare-root: Don't parse target root when composefs enabled
83d37d6d prepare-root: Default sysroot.readonly=true if composefs
22b8e4f9 prepare-root: Introduce `ostree/prepare-root.conf`
250c40a6 Merge pull request #2948 from cgwalters/composefs-more-cleanups
3f594b04 Merge pull request #2951 from cgwalters/errprefix-sysroot
5e2eedee Merge pull request #2949 from cgwalters/kargs-cleanup
cf525ee6 repo: Clarify when we fail to parse a remote
70d790ab sysroot: Add a bit more error prefixing
82da0e16 Merge pull request #2950 from cgwalters/generator-cleanup
d7fe9e54 kernel-args: Move private functions out of public header
303e7eb2 src/generator: Move all logic into libostree-1.so
ec1109c7 generator: Stop creating `/run/ostree-booted`
64afbcde composefs: Use lowerdir in /run
4c0e5b1e Merge pull request #2942 from ostreedev/android-bootloader-parsing
a035c2e2 Merge pull request #2946 from cgwalters/add-inode-fix-feature
8ce7bbe1 Add an always-on `inode64` feature
c89baaed bootloader: fold all Android Bootloader specific logic into prepare-root
55936165 Merge pull request #2943 from cgwalters/mount-cleanup
253e7758 Merge pull request #2944 from cgwalters/prepare-root-more-cleanup
e61226a8 prepare-root: Drop more dead code
41cda3bd prepare-root: Drop code mounting `/proc`
b258375f Merge pull request #2938 from cgwalters/dedup-ostree-parsing
b548ff74 Merge pull request #2939 from cgwalters/ed25519-cleanups
6966979c generator: Deduplicate ostree= karg parsing
fc303da6 sign-ed25519: Don't set sk unless we've validated it
3a18a557 sign-ed25519: Add some comments for data structure
fb40e559 sign-ed25519: More verbose errors for invalid length
1a2fac37 tests: Remove dead references to "SEED"
1c0fd7d4 Merge pull request #2937 from ericcurtin/ostree2androidboot.slot_suffix
355cd727 Remove steal_pointer and steal_pointer_impl as we link in glib now
a6f0a571 android-boot: Remove dependency on ostree= karg, use androidboot.slot_suffix=
27a9fe30 Merge pull request #2936 from cgwalters/sign-from-file
7bbe13ca Merge pull request #2931 from cgwalters/prepare-root-man
de81a7e7 Merge pull request #2929 from cgwalters/prepare-root-drop-pivot
8302a8ad Merge pull request #2927 from cgwalters/sysroot-errprefix-bootlinks
845d68d1 Merge pull request #2935 from cgwalters/prepare-root-config4
82d93491 commit: Add `--sign-from-file`
d4ca834b prepare-root: Refactor composefs config handling
18d6f597 Merge pull request #2934 from cgwalters/enable-composefs-default
592351d1 build-sys: Enable composefs at *build time* by default
3d29f89c Merge pull request #2928 from cgwalters/prepare-root-config
c1ac6bc3 Merge pull request #2932 from cgwalters/aboot-fix-nullderef
c078e8be mount: Fix gcc -fanalyzer warning for parsing androidboot.slot_suffix
c4f1d18a Merge pull request #2920 from ostreedev/dependabot/submodules/composefs-1704f82
1e4cb30c man: Add ostree-prepare-root
0eda15ce Use /run/ostree-booted metadata for sysroot-ro state passing
79806a68 prepare-root: Drop dead `pivot_root` code
b8d66964 remount: Use new metadata in `/run/ostree-booted` for composefs
77acad24 remount: Don't overwrite /run/ostree-booted
93699cc5 prepare-root: Add metadata for composefs to `/run/ostree-booted`
bafb5512 prepare-root: Use constant for ed25519 signature
6cdc5ce5 Merge pull request #2926 from cgwalters/otcore-cfs-constants
6769d66d sysroot: Add some error prefixing for bootversion
18cc4472 prepare-root: Drop unused verity flag querying
2b738a99 prepare-root: Use otutil and g_print
1b7b4fbd Add an internal constant for the composefs image name
c0c2c9bd Merge pull request #2924 from cgwalters/drop-syntax-check
65912106 build: Drop `make syntax-check`
57fe33f0 Merge pull request #2921 from alexlarsson/composefs-sign-v2
c29f4193 ostree-prepare-root: Validate ed25519 signatures when requested
b8ff2109 Factor out a libotcore
265cf7d7 build-sys: Add libsodium to OT_DEP_CRYPTO
a6d9c714 Merge pull request #2922 from alexlarsson/openssl-ed25519
744967a6 libotutil: Link to crypto libs
474c2b10 CI: Enable --with-crypto=openssl on debian testing to test openssl signatures
7b85adfb sign-ed25519: Implement sign and verify using openssl
501575c1 sign-ed25519: Drop some uses of libsodium
5b727751 Merge pull request #2923 from alexlarsson/fix-composefs-test
62e4f376 tests: Fix composefs test
eb011120 show: Add --print-hex
6056ec13 Merge pull request #2913 from cgwalters/tmpfile-not-on-revokefs
8a4a0c16 build(deps): bump composefs from `ac729b5` to `1704f82`
43fb2787 Merge pull request #2918 from ostreedev/dependabot/submodules/composefs-ac729b5
25120bd7 Merge pull request #2912 from cgwalters/itest-transactionality-debug
61720180 Merge pull request #1633 from cgwalters/pkglibexec-tests
ba9c9ded fetcher: Always open tmpfiles in repo (except on FUSE)
9104c54f Merge pull request #2905 from cgwalters/prepare-root-static-split
01be14e6 build(deps): bump composefs from `412cb5e` to `ac729b5`
0c36e814 Drop "ostree trivial-httpd" CLI, move to tests directory
8ad8a79c Merge pull request #2916 from cgwalters/release
b2cfee72 Merge pull request #2914 from cgwalters/doc-usergroups
5aadb6ec configure: post-release version bump
875915f6 prepare-root: Link to glib
d6799ecc Separate prepare-root static path
786e64ce docs: Update user and group section
8bba482b tests: Enable mtime test
0b519c25 tests: Drop unused alias
54c73155 tests/transactionality: Port a bit to xshell
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fadf647d3e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This is needed to be able to build mosquitto-native.
The dependency on libcap when building for native is needed because
cmake will pick up the existence of libcap from the host, but then the
build fails if it is not available in the sysroot. Unfortunately, there
does not seem to be any way to explicitly tell cmake to not build with
libcap.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c083e0569a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The command "bitbake universe -c fetch" currently throws a ton of warnings
as there are many 'impossible' dependencies.
In some cases these variants may never have worked and were just added by copy
and paste of recipes. In some cases they once clearly did work but became
broken somewhere along the way. Users may also be carrying local bbappend files
which add further BBCLASSEXTEND.
Having universe fetch work without warnings is desireable so clean up the broken
variants. Anyone actually needing something dropped here can propose adding it
and the correct functional dependencies back quite easily. This also then
ensures we're not carrying or fixing things nobody uses.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9962d57f7c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changelog:
===========
* Small code fixes and improvements to fix Coverity Scan issues.
* Disable -mfpu=neon for aarch64.
* Fix build without git clone in cloned directory (required for FreeBSD).
* Other build fixes for autotools, cmake and sw.
* Fix regression in layout detection which was introduced in release 5.0.0.
* Fix regression which prevented loading of submodels, introduced in release 5.0.0-rc2.
* Other small improvements for code and documentation.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f17c7b0b7e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changelog:
==========
* [REM-2977] add shortcut for 'send clipboard as keystrokes'
* [REM-2972] Make keeping window open on session disconnect configurable
* [REM-2974] fix crash cause by using freed memory
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 21518a2f53)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changelog:
============
* (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a
race condition that can be used by another process to bypass desired Unix
socket permissions on startup.
* Fix compilation error on MacOS 13 (#12611)
* WAITAOF could timeout in the absence of write traffic in case a new AOF is
created and an AOF rewrite can't immediately start (#12620)
* Fix crash when running rebalance command in a mixed cluster of 7.0 and 7.2
nodes (#12604)
* Fix the return type of the slot number in cluster shards to integer, which
makes it consistent with past behavior (#12561)
* Fix CLUSTER commands are called from modules or scripts to return TLS info
appropriately (#12569)
* redis-cli, fix crash on reconnect when in SUBSCRIBE mode (#12571)
* Fix overflow calculation for next timer event (#12474)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8c749f1cd4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
License-Update: Copyright updated to 2.2.0.
Changelog:
==========
-Substantial improvement to threading performance across the board
-Mixed precision solves + iterative refinement when using CUDA or CPU based
dense linear solvers, or EIGEN_SPARSE as the sparse linear algebra library.
-Cuda based CGNR and preconditioner support
-Nested Dissection (NESDIS) is now supported as an ordering method in addition
to AMD.
-Power Bundle Adjustment is available as a linear solver and as a preconditioner
by the name of SCHUR POWER SERIES EXPANSION
-Generalized Euler Angle conversions
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4f8d0ac304)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changelog:
===========
revert of identityref canonical value change
the identity always printed with the module name as the prefix
data tree and hash table optimizations
opaque node handling fixes and improvements
lots of other bug fixes
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c6617ceefa)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The lvgl main package is empty, since all the headers end up in
the -dev variant and static library archive ends up in -staticdev
variant. Mark the main package as ALLOW_EMPTY.
Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7c97b49180)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The lv-drivers main package is empty, since all the headers end up
in the -dev variant and static library archive ends up in -staticdev
variant. Mark the main package as ALLOW_EMPTY.
Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f2ab5e1ac3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
