- `universal`: Enable `application/vnd.cups-postscript` as input
There are filters which produce this MIME type (such as `hpps` of
HPLIP), and if someone uses such driver on a client and the server
has an IPP Everywhere/driverless printer, the job fails (Pull
request #534).
- beh backend: Use `execv()` instead of `system()` - CVE-2023-24805
With `execv()` command line arguments are passed as separate strings
and not the full command line in a single string. This prevents
arbitrary command execution by escaping the quoting of the arguments
in a job with forged job title.
- beh backend: Extra checks against odd/forged input - CVE-2023-24805
* Do not allow `/` in the scheme of the URI (= backend executable
name), to assure that only backends inside
`/usr/lib/cups/backend/` are used.
* Pre-define scheme buffer to empty string, to be defined for case
of URI being NULL.
* URI must have `:`, to split off scheme, otherwise error.
* Check return value of `snprintf()` to create call path for
backend, to error out on truncation of a too long scheme or on
complete failure due to a completely odd scheme.
- beh backend: Further improvements - CVE-2023-24805
* Use `strncat()` instead of `strncpy()` for getting scheme from
URI, the latter does not require setting terminating zero byte in
case of truncation.
* Also exclude `.` or `..` as scheme, as directories are not valid
CUPS backends.
* Do not use `fprintf()` in `sigterm_handler()`, to not interfere
with a `fprintf()` which could be running in the main process when
`sigterm_handler()` is triggered.
* Use `static volatile int` for global variable job_canceled.
- `parallel` backend: Added missing `#include` lines
- foomatic-rip: Fix a SIGPIPE error when calling gs (Pull request #517)
[Ubuntu's autopkgtest for
foo2zjs](https://autopkgtest.ubuntu.com/packages/f/foo2zjs/lunar/ppc64el)
shows foo2zjs's testsuite failing with cups-filters 2.0beta3 on
ppc64el. This is cause by a timing issue in foomatic-rip which is
fixed now.
- Coverity check done by Zdenek Dohnal for the inclusion of
cups-filters in Fedora and Red Hat. Zdenek has fixed all the issues:
Missing `free()`, files not closed, potential string overflows,
... Thanks a lot! (Pull request #510).
- Dropped all C++ references and obsolete C standards (Pull requests
#504 and #513)
With no C++ compiler needed, there is no need for any checks or
setting for C++ in configure.ac.
- configure.ac: Change deprecated AC_PROG_LIBTOOL for LT_INIT (Pull
request #508)
- texttopdf: Do not include fontconfig.h in the CUPS filter wrapper
- Build system: Do not explicitly check for libpoppler-cpp
The cups-filters package does not contain any code using
libpoppler-cpp, therefore we let ./configure not check for it.
- COPYING, NOTICE: Simplification for autotools-generated files
autotools-generated files can be included under the license of the
upstream code, and FSF copyright added to upstream copyright
list. Simplified COPYING appropriately.
- Makefile.am: Include LICENSE in distribution tarball
- Add templates for issue reports on GitHub. This makes a selection
screen appear when clicking "New Issue" in the web UI, to selct
whether the issue is a regular bug, a feature request, or a security
vulnerability.
- Corrected installation path for *.h files of *.drv files. The ppdc
(and underlying functions) of libppd searches for include files in
/usr/share/ppdc and not in /usr/share/cups/ppdc any more.
- configure.ac: Remove unnecessary "AVAHI_GLIB_..." definitions.
- Makefile.am: Include NOTICE in distribution tarball
- configure.ac: Added "foreign" to to AM_INIT_AUTOMAKE() call. Makes
automake not require a file named README.
- Cleaned up .gitignore
- Tons of fixes in the source code documentation: README.md, INSTALL,
DEVELOPING.md, CONTRIBUTING.md, COPYING, NOTICE, ... Adapted to the
cups-filters component, added links.
- Converted nearly all filters to filter functions, only exceptions
are `rastertoescpx`, `rastertopclx`, `commandtoescpx`,
`commandtopclx`, and `foomatic-rip`. The latter is deeply involved
with Foomatic PPDs and the others are legacy printer drivers. The
filter functions are mainly in libcupsfilters, the ones which
generate PostScript are in libppd.
- Replaced all the filters converted to filter functions by simple
wrapper executables using `ppdFilterCUPSWrapper()` of libppd for
backward compatibility with CUPS 2.x.
- Added new streaming mode triggered by the boolean
"filter-streaming-mode" option. In this mode a filter (function) is
supposed to avoid everything which prevents the job data from
streaming, as loading the whole job (or good part of it) into a
temporary file or into memory, interpreting PDF, pre-checking input
file type or zero-page jobs, ... This is mainly to be used by
Printer Applications when they do raster printing in streaming mode,
to run with lowest resources possible. Currently `foomatic-rip`,
`ghostscript`, and `pdftopdf` got a streaming mode. For the former
two PostScript (not PDF) is assumed as input and no zero-page-job
check is done, in the latter all QPDF processing (page management,
page size adjustment, ...) is skipped and only JCL according to the
PPD added.
- The CUPS filter `imagetops` uses the `ppdFilterImageToPS()` filter
function of libppd now.
- `driverless`, `driverless-fax`: Added IPP Fax Out support. Now
printer setup tools list an additional fax "driver". A fax queue is
created by selecting this driver. Jobs have to be sent with "-o
phone=12345" to supply the destination phone number (Pull request
#280, #293, #296, #302, #304, #305, #306, #309, Issue #298, #308).
- `sys5ippprinter`: Removed `sys5ippprinter`, as CUPS does not support
System V interface scripts any more. This first approach of PPD-less
printing was also not actually made use of.
- `urftopdf`: Removed as we require CUPS 2.2.2+ now which supports
Apple Raster by itself.
- Build system, `README.md`: Require CUPS 2.2.2+. Removed now unneeded
`./configure` switches for use of the `urftopdf` filter for old CUPS
versions.
- Sample PPDs: Renamed source directory from `ppd/` to `ppdfiles/`.
- Build system: Remove '-D_PPD_DEPRECATED=""' from the compiling
command lines of the source files which use libcups. The flag is not
supported any more for longer times already and all the PPD-related
functions deprecated by CUPS have moved into libppd now.
- Build system: Add files in `.gitignore` that are generated by
"autogen.sh", "configure", and "make" (Pull request #336).
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This fixes:
| Program gi-docgen found: NO
|
| ../vte-0.74.1/doc/reference/meson.build:18:11: ERROR: Program 'gi-docgen' not
found or not executable
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
std::string_view is part of c++17
This fixes:
error: 'std::string_view' has not been declared
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
v2.13.10:
Fixes:
-Fixed issue with catch_discover_tests when there is multiple of 256 tests (#2401, #2503)
-Catch2-provided main and wmain are explicitly marked as __cdecl when compiled with MSVC (#2486, #2487)
-Improved break-into-debugger behaviour for ARM Macs. It should now be possible to step execution after the break (#2422)
-Replaced deprecated std::aligned_storage (#2419, #2420)
v2.13.9:
Fixes:
-Fixed issue with -# (filename-as-tag) flag when __FILE__ expands into filename without directories (#2328, #2393)
-Fixed CAPTURE macro not being variadic when disabled through CATCH_CONFIG_DISABLE (#2316, #2378)
v2.13.8:
Fixes:
-Made Approx::operator() const (#2288)
-Improved pkg-config files (#2284)
-Fixed warning suppression leaking out of Catch2 when compiled with clang.exe (#2280)
-The macro-generated names for things like TEST_CASE no longer create reserved identifiers (#2336)
Improvements:
-Clang-tidy should no longer warn about missing virtual dispatch in FilterGenerator's constructor (#2314)
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: Switch to LGPL-3 license
* Switch to using meson build system
* Merge inc file into single recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add patch to fix mingw build of abseil-cpp
undefined reference to `absl::lts_20230802::synchronization_internal::Win32Waiter::Poke()'
undefined reference to `absl::lts_20230802::synchronization_internal::Win32Waiter::Win32Waiter()'
undefined reference to `absl::lts_20230802::synchronization_internal::Win32Waiter::Post()'
undefined reference to `absl::lts_20230802::synchronization_internal::Win32Waiter::Poke()'
and include bindir to recipe sysroot to fix protobuf build.
| The imported target "absl::log_severity" references the file
|
| "../nativesdk-protobuf/4.23.4/recipe-sysroot/usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-w64-mingw32/usr/bin/libabsl_log_severity.dll"
|
| but this file does not exist.
Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update to version 11.6.3:
- Fix a bug in which qpdf could potentially discard a character
in a binary string if that character was preceded by an octal
escaped string with fewer than three digits. This bug was
introduced in the 11.0.0 release. The bug would not apply to
content streams with default settings.
- The linearization specification precludes linearized files that
require offets past the 4 GB mark. A bug in qpdf was preventing
it from working when offsets had to pass the 2 GB mark. This has
been corrected.
Switch to cmake. Use /dev/random to perform encryption securely.
Change the fully defined path on the target to fix buildpaths
QA issues with libqpdfTargets.cmake. Add openssl and gnutls as
dependencies. Tested with usermerge distro feature and clang.
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Backport 2 patches [1] [2] to fix the build failure under tests dir.
* Fetch the test data during do_fetch phase to avoid internet access
during test as some tests need test data.
# ./run-ptest
PASS: test-algorithms_cpp11
PASS: test-allocator_cpp11
PASS: test-alt-string_cpp11
PASS: test-assert_macro_cpp11
PASS: test-binary_formats_cpp11
[snip]
PASS: test-unicode5_cpp11
PASS: test-user_defined_input_cpp11
PASS: test-windows_h_cpp11
PASS: test-wstring_cpp11
[1] 6cec5aefc9
[2] 660d0b5856
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Due to the library file name change, the subpackage "geoslib"
does not get generated, and the main geos package has unsatisfied
dependencies.
Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
GitHub has been redirecting for a while, so switch SRC_URI from
github.com/rhinstaller/libbytesize to
github.com/storaged-project/libbytesize instead without redirects.
Signed-off-by: Edi Feschiyan <edi.feschiyan@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
add recipe for kmsxx which is a C++ library for kernel mode setting.
Signed-off-by: LI Qingwu <Qing-wu.Li@leica-geosystems.com.cn>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Support for kernels up to v6.6
- Support for riscv64 architecture
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
dnf-plugin-tui must work on nativesdk environment.
Now there's no warning when run the command "bitbake universe -c fetch".
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
No longer used in generating packages
Also creates a possible confusion with the recipe maintainer
name.
Signed-off-by: Markus Fuchs <mklntf@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add ExifTool, a platform-independent Perl library plus a command-line
application for reading, writing and editing meta information in a
wide variety of files. Version 12.69 brings:
- Added support for DNG version 1.7.0.0
- Added a new XMP-GCamera tag
- Added a number of new Nikon Z lenses (thanks Warren Hatch and Stefan)
- Added a number of new XMP-crs tags
- Extract XML metadata from some Hasselblad images
- Tweaked -fast2 option to read metadata from inside mdat atom of HEIC images
- Patched FFF reader to be more tolerant of the mess made by incompetent
Hasselblad programmers (wrong IFD count for some values)
- Patched WebP reader to be more tolerant of the mess made by incompetent
Google programmers (EXIF with wrong header and XMP with wrong ID)
- Fixed problem which could cause "use of uninitialized variable" warnings
when reading images from some Nikon cameras
- Fixed List type for new XMP-photomech:CreatorIdentity tag
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The influxdb systemd service tries to run the script
influxd-systemd-start.sh, but it was not copied to the correct location
by the influxdb recipe. This led to a failure during start-up:
[FAILED] Failed to start InfluxDB i…ributed, time series database.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Take three CVE fixes from Fedora, as the upstream repository is now
dead.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to 3.0.4:
- spec: Obsolete vdo plugin packages
- spec: Move obsoleted devel subpackages to libblockdev-devel
- ci: Bump actions/checkout from v3 to v4
- part: Do not open disk read-write for read only operations
- fs: Disable progress for ntfsresize
- packit: Add configuration for downstream builds
- logging: Default to DEBUG log level if compiled with --enable-debug
- Use log function when calling a plugin function that is not loaded
- lvm-dbus: Replace g_critical calls with bd_utils_log_format
- tests: Fail early when recompilation fails in library_test
- tests: Fix "invalid escape sequence '\#'" warning from Python 3.12
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to version 1.12.1:
- Fix some clang complaints
- scaling: MMX asm scaling causes segv, disable for now
- loading: Call module exit function also when not dlclosing
module on unload
- loaders: Fix build with -m32 --enable-debug
- RAW loader: Don't unload loader
- imlib2_grab, imlib2_view: Unset context colormap
- x11_grab: Use correct depth when grabbing
Remove bzip2 from PACKAGECONFIG because for this version it is an
unrecognised option.
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Move wget and awk EXTRA_OECONF parameters into native dependencies to
not lock native build.
Add missing BBCLASSEXTENDS to build libsmi in native.
Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The "update" in commit 2df786211a only changed the version without
actually changing the downloaded tar ball.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This makes sure only tags like "vX.Y.Z" are identified as releases.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This reverts commit 3259bc75f5.
AUH incorrectly identified the tag "pre-merge-1" as version "1".
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The "update" to 0.05 in commit d0dbeb580f was actually a revert, since
version "0.05" in reality corresponds to "0.0.5".
Also do some clean up:
* Unify SRC_URI.
* Correct the indentation of shell code.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
There is no version "2". The tag "jack2-control-api-relicense-nedko"
incorrectly triggered AUH to identify it as version "2". Additionally,
the previous recipe version "1.19.22" was also incorrect. It should
actually have been "1.9.22".
License-Update: Update the licenses based on analysis of the code
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
It would like to remove "-static" in the name of statice library
at the do_install task. For example: replace libbrotlicommon-static.a
with ibbrotlicommon-static.a However, if the patch of
this statice library includes "-static", it would build failed.
(ex: set my build directory "build-static")
Change to remove "-static" in the base name of static library
to fix this build failed.
Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Current meson.build fails if flatpak was not found using pkgconfig
../git/meson.build:203:44: ERROR: Unknown variable "flatpak_dep"
Removing -Dflatpak-interfaces-dir setting and relying on pkgconfig
for flatpak instead seems to work well in our case and avoids the error above
This is a new minor release of xdg-desktop-portal 1.18 series. Users and
distributions are strongly encouraged to update to this version. These are the
changes included in this release:
-Communicate better when the Background portal kills an app
-Properly quote Flatpak command in the Background portal
-Improve documentation of the "cursor_mode" propery of the ScreenCast backend
D-Bus interface
-Fix ScreenCast portal removing transient restore permissions too early.
This fixes screen sharing dialogs on Chromium asking for the screen multiple
times.
-Only send the Closed session signal to the sender
-Add Meson options to disable building with Bubblewrap, and without the
-Flatpak portal documentation. Disabling Bubblewrap is highly discouraged,and
only meant to be used on platforms that do not currently support it. By
disabling Bubblewrap, bitmap validation happens without a sandbox, which is
highly insecure since image parsing is a common source of exploits. Really, just
do not disable Bubblewrap please.
-Improve the manpage of portals.conf
-Various spelling fixes to the Document portal
-Add a new website! We don't have a fancy domain yet, but the website can be
accessed at https://flatpak.github.io/xdg-desktop-portal/
-Improve pid mapping for host system apps. This should get rid of some rare,
unnecessary warnings.
-Adjust documentation of Global Shortcuts portal's timestamps to millisecond
granularity
-Bump minimum Meson version to 0.58
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to 2023.11.02, which contanins the following
new commits:
fix MAC address fuse naming
Merge pull request #21 from Lionizers/master
fusemaps: Add support for second MAC address for i.MX7D
move to BSD style license
tidying
Merge pull request #18 from DAVEEmbeddedSystems/extend-imx8mp-uniqueid-to-128-bit
fusemaps: imx8mp: add UNIQUE_ID upper 64 bit
The license has changed to BSD-3-Clause, so adjust it accordingly.
Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
CVE: CVE-2023-44487
Patch updated by devtool to resolve patch fuzz.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
