Add exact CPE name (from NVD database) in CVE_PRODUCT in order to ensure
CVE filtering and not be disturb by futur potential false-positive CVEs.
Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add a PACKAGECONFIG option for polkit. Activate it when
DISTRO_FEATURES contains 'polkit'.
Signed-off-by: Marc Ferland <marc.ferland@sonatest.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
upower releases are available as tar.bz2 archives let's use them
instead off cloning the whole repo.
Also, fix the UPSTREAM_CHECK regex that changed after revision
0.99.13. The format went from:
UPOWER_0_99_13
to
v0.99.14
Signed-off-by: Marc Ferland <marc.ferland@sonatest.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Add PHP 8.4 support to Smarty
- Fixed that using count() would trigger a deprecation notice.
- Fixed argument must be passed by reference error introduced in v4.5.1
- Using PHP functions and static class methods in expressions now also triggers a deprecation notice
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This update fixes the build against kernel 6.12+
Also, to fix the following warning:
WARNING: vboxguestdrivers-7.0.22-r0 do_unpack: vboxguestdrivers: the directory ${WORKDIR}/${BP}
(build/tmp/work/qemux86_64-poky-linux/vboxguestdrivers/7.0.22/vboxguestdrivers-7.0.22) pointed
to by the S variable doesn't exist - please set S within the recip
We can set S for the unpack task, much the same way we do for
patch. Alternate solutions should work (do_unpack[dirs], etc), but
they didn't work in my testing.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Major changes in 1.56.1
=======================
* udisks2: Increasing reference count when updating volume to fix crashes (Ondrej Holy)
* onedrive: Use names instead of id for events to fix monitoring (Jan-Michael Brummer)
* onedrive: Add missing replace stream to fix crashes (Jan-Michael Brummer)
* onedrive: Fix double free during cache rebuild to fix crashes (Jan-Michael Brummer)
* dav: Recognize the 409 status to fix creation of parent directories (Michael Terry)
* Translation updates (GNOME Translation Project contributors)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- use tarball release
Version 44.4
~~~~~~~~~~~~
Released: 2024-11-24
Features:
* Added bzip3 support. (!266)
* File selector: show volumes and allow to mount unmounted volumes. (!258)
* New archive dialog: allow to use all the possible extensions a mime type
supports, and allow to specify a name without extension, which will be
concatenated to the selected extension to get the full name. (!275) (!267)
* File selector: save and restore the sort order. (!246)
* Properties dialog: show an icon, make the headerbar flat.
Bugfixes:
* Error opening rar archive in RAR4 format and password protected. (!279)
* Rar: fixed file list parsing for some encrypted archives. (!277)
* Fixed error when renaming a file inside an encrypted archive. (!276)
* Disabled the native appchooser by default. (!217)
* 'Show destination' sometimes opens the wrong folder. (!255)
* 'Show destination' sometimes doesn't show anything.
* Use the native appchooser only for a single file. (!221)
* Show flat headerbar in empty state. (!216)
* Fixed error messages impossible to close. (!257)
* Fixed segfaults when opening an empty .deb file. (!253)
* --extract-to keeps asking to create a directory. (!254)
* Fixed wrong context menu item activation. (!268)
* Avoid the exit timeout unless file-roller was launched with `--service`. (FeRD (Frank
Dana)) (!34)
* Error when opening the created archive after saving as 7zip multi-volume.
Translations:
* Belarusian (Yuras Shumovich)
* Brazilian Portuguese (Juliano de Souza Camargo)
* English - United Kingdom (Andi Chandler)
* Hindi (Scrambled777)
* Portuguese (Hugo Carvalho)
* Slovak (Dušan Kazik)
* srpski (Marko M. Kostić)
* Thai (Theppitak Karoonboonyanan)
* српски (Марко М. Костић)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Unescaping URIs for tooltips to improve legibility
* Fix initial-trailing-newline when settings auto-discovery is disabled
* Fix save-as when using admin:// URIs
* Pin document encoding when loading a file
* Override extend_selection for multi-mouse-press to avoid some slow
corner cases in minified JSON files
* Markup fixes in properties dialog
* Updated translations
* Fix document to default to implicit trailing newlines
* Improve text wrapping for banners on small form factors
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Major changes in 47.1
=====================
* Enhancements:
- Speed up thumbnail loading (Khalid Abu Shawarib)
* Bugfixes:
- Do not force reload when error is present to avoid showing auth dialog (Gary Li)
- Open folder in correct window during a DnD hover (Khalid Abu Shawarib)
- Show username in file properties if name is an empty string (Khalid Abu Shawarib)
- Various a11y fixes (Khalid Abu Shawarib)
- Fix number placement when making new name for directory (Khalid Abu Shawarib)
- Various pathbar fixes (Corey Berla, Khalid Abu Shawarib)
- Show alert dialog when a symlink is broken (Automeris naranja)
- Fix crashes when opening (Khalid Abu Shawarib)
- Various sidebar fixes (Khalid Abu Shawarib, sid)
- Fix ctrl + scroll to zoom in and out of view (Corey Berla)
* Translation updates (GNOME Translation Project contributors)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Version 47.2
~~~~~~~~~~~~
Released: 2024-11-25
This is a stable release with the following changes:
* Fix distro upgrade when certain version of PackageKit is used
* Fix a crash when uninstalling a Snap app
* Make uninstall dialog adaptive for small screens
* Prefer Appstream data from swcatalog instead of app-info directories
This release also updates translations:
* Dutch (Nathan Follens)
* French (Vincent Chatelain)
* Friulian (Fabio Tomat)
* Latvian (Rūdolfs Mazurs)
* Malay (Ahmed Noor Kader Mustajir Md Eusoff)
* Portuguese (Hugo Carvalho)
* Portuguese (Brazil) (Rafael Fontenelle)
* Serbian (Милош Поповић, Марко Костић)
* Thai (Aefgh Threenine)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
47.3
====
* Fix maximized X11 when using native xwayland scaling [Jonas; !4147]
* Fix blank screen in remote headless sessions [Jonas; !4152]
* Fix touch-triggered popups being cancelled too early [Carlos; !4166]
* Fix pointer cursor during compositor grabs [Carlos; !4166]
* Fixed crash [Michel; !4148]
Contributors:
Michel Dänzer, Jonas Ådahl, Carlos Garnacho
47.2
====
* Fix warping pointer after releasing pointer constraints [Sebastian K.; !4098]
* Default to high thread instead of realtime priority for KMS thread
[Jonas Å.; !4124]
* Avoid CPU stalls with NVIDIA secondary GPUs with directly-attached monitors
[Gert-dev; !4015]
* Fix updating cursor immediately when starting window drag [Olivier; !3639]
* Add pipeline hooks to user program pipelines [Sebastian W.; !4037]
* Prefer GPUs with built-in panels connected as primary GPU [Mario; !4114]
* Fix cursor glitches when using virtual monitors [Jonas Å.; !4066]
* Ensure frame events are sent for cursor surfaces [Michel; !4113]
* Allow BGRX8888 format on big endian [Jocelyn; !4088]
* Fix touchscreen drag-and-drop on wayland [Alessandro; !4091]
* Fixed crashes [Robert, Jonas D., Peter, Michel; !3176, !3650, !4117, !4136]
* Misc. bug fixes and cleanups [Bilal, Michel, José, Sebastian W., Jonas Å.,
Takao; !4087, !4057, !4109, !4116, !4123, !4064, !4065, !4128, !3604]
Contributors:
Alessandro Astone, Jonas Dreßler, Michel Dänzer, Bilal Elmoussaoui,
José Expósito, Jocelyn Falempe, Olivier Fourdan, Takao Fujiwara, Gert-dev,
Peter Hutterer, Sebastian Keller, Mario Limonciello, Robert Obkircher,
Sebastian Wick, Jonas Ådahl
Translators:
Christian Kirbach [de], Nathan Follens [nl], Danial Behzadi [fa],
Марко Костић [sr]
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- use tarball release again
============
Version 47.2
============
- Various translation updates
Accessibility
- Remove "screen" labels that take too much space
Appearance
- Fix accidental reset of accent colors config
Apps
- Fix some memory leaks
Color
- Ensure profiles are connected before operating on them
Mobile Networks
- Fix alignment of status pages
Mouse
- Fix illustration assets requiring gstreamer-plugins-bad
- Update illustration assets
Printers
- Remove wrong tooltip in the "Add Printer" button
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Patch reported issue observed on ARM32 based HW during bump
from Langdale to Scarthgap
Signed-off-by: Martin Siegumfeldt <mns@gomspace.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This ancient CVE [1] is unversioned ("*") in NVD DB.
"mod_sqlpw module in ProFTPD does not reset a cached password..."
Looking at history and changelog, the module was removed [2] around
the time when this CVE was published, likely as reaction to this CVE.
"mod_sqlpw.c, mod_mysql.c and mod_pgsql.c have been REMOVED from the
distribution. They are currently unmaintained and have numerous bugs."
Note: It was later re-introduced as mod_sql when it got fixed under
new maintainer.
[1] https://nvd.nist.gov/vuln/detail/CVE-2001-0027
[2] https://github.com/proftpd/proftpd/blob/v1.3.8b/NEWS#L3362
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This removes false positive CVE-2024-21485 from cve reports.
$ sqlite3 nvdcve_2-2.db
sqlite> select * from products where product = 'dash';
CVE-2009-0854|dash|dash|0.5.4|=||
CVE-2024-21485|plotly|dash|||2.13.0|<
CVE-2024-21485|plotly|dash|2.14.0|>=|2.15.0|<
Our dash:dash did not reach major version 1 yet.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Many users are reluctant to use libgpiod instead of the deprecated
/sys/class/gpio interface. The gpiod-sysfs-proxy project aims at making
the transition easier by implementing a compatibility layer in
user-space using FUSE and python3-gpiod. This way we can eat the cookie
by disabling the sysfs ABI and have the users have it too by sticking to
their existing scripts.
The project itself is a very simple setuptools-based python package but
the recipe is quite complex due to comprehensive distro integration.
By default we use /run/gpio as mountpoint. For full backward
compatibility with the kernel interface, the user must explicitly add
the 'sys-class-mount' switch to PACKAGECONFIG. We do this because,
depending on whether CONFIG_GPIO_SYSFS Kconfig option is enabled,
/sys/class/gpio will either be non-empty or not exist at all. In the
latter case, we need to somehow create the /sys/class/gpio and, since
user-space is not allowed to mkdir() inside sysfs, we use overlayfs for
that. As this is rather non-standard, we want the user to be aware of
this.
We support both systemd and sys V init managers.
We also provide a ptest package which uses an external
gpio-sysfs-compat-tests script.
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to version 6.9.0:
- Generated bindings now require Python v3.9 or later.
- Type hints now conform to PEP 585.
- The latest sip module ABI versions are v12.16 and v13.9.
- Added support for the deprecated() decorator in .pyi files.
- PyQt-specific support for registering QFlags types.
- The handling of the SIP versions timeline was fixed.
- Annotations are now only validated if they are known to be needed.
- The buffer protocol support for byte objects was fixed.
- All outstanding compiler warnings were eliminated when building
the sip module.
- Redundant % in trace output of this pointer in were removed.
The work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This recipe was placed in meta-arm meta layer,
https://git.yoctoproject.org/meta-arm/tree/meta-arm/recipes-devtools/python/python3-pyhsslms_2.0.0.bb
However, users may want to build this python module but do not want to add
"meta-arm" meta layer. To make this recipe more flexible, move this recipe from
"meta-arm" to "meta-openembedded/meta-python" meta layer.
This python module is used for supporting LMS algorithm and it use pure
Software to sign/verify with LMS algorithm. Please see official github for
detail, https://github.com/russhousley/pyhsslms
Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The CMakeLists in this package go and download a number of packages at
configure time, which is bad practise for us.
Instead, use a script to parse the fetching tool and generate SRC_URI
fragments that can be included in the recipe. This refresh_srcuri task
will need to be reran on upgrades to ensure that it is up to date: the
fragment will warn if the version doesn't match and devtool will do that
automatically.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Explicitly build the targets that are normally build. This seems like a
no-op, but had the advantage of not pulling in vulkan-validationlayers
which causes more fetches at configure time, and is only actually used
by the developers of the test suite.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add BPN to the tag name to differentiate vulkan-cts and opengl-es-cts
releases.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
There are no native/nativesdk builds of this recipe, so there's no need
to use a separate class-target assignment.
We should pass AMBER_DISABLE_WERROR in all builds, not just target.
Setting -DUPDATE_DEPS=OFF isn't functional as the CMakeLists explictly
set that to ON, so remove it.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
There appears to be no more network access in the compile task, so we
can remove the flag.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upstream is tagging and the release checking works as expected:
$ devtool check-upgrade-status -a etcd
etcd 3.5.7 3.5.17 None 507c0de87bd5034e3de4ab76ebf96b54dae0cd52
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Remove deprecated DISTRO_TYPE as the debug-tweaks IMAGE_FEATURE has
been removed in oe-core. Use allow-root-login, empty-root-password and
allow-empty-password instead.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Add support for CANopen Profile data base files using a well
documented JSON-based file format.
- Include codb to JSON converter (codb2json).
- Add API functions to generate test reports (JUnix XML).
- Removed PicoC support for the greater good.
- Various improvements and bug fixes.
Signed-off-by: Michael Fitzmayer <mail@michael-fitzmayer.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Fix some type annotation usage e.g. int | None.
- Fix some builtins hash functions
- Fix a severe bug of dict
- Clean up #defines
- Improve array2d
- Fix a bug of super
- Fix a bug of context manager
Signed-off-by: Michael Fitzmayer <mail@michael-fitzmayer.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The pmem_cvap() function currently uses the '.arch armv8.2-a' directive
for the 'dc cvap' instruction. This will cause build errors below when
compiling for ARMv9 systems. Update the '.arch' directive to 'armv9.4-a'
to ensure compatibility with ARMv9 architectures.
{standard input}: Assembler messages:
{standard input}:169: Error: selected processor does not support `retaa'
{standard input}:286: Error: selected processor does not support `retaa'
make[2]: *** [storage/innobase/CMakeFiles/innobase_embedded.dir/build.make:
1644: storage/innobase/CMakeFiles/innobase_embedded.dir/sync/cache.cc.o]
Error 1
Signed-off-by: Ruiqiang Hao <Ruiqiang.Hao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* since elfutils upgrade to 0.192 in:
https://git.openembedded.org/openembedded-core/commit/?id=1d6ac3c811798732e6addc798656bbe104661d77
json-c is detected in RSS and ov-rest plugin gets enabled, but fails to build:
../../../openhpi-3.8.0/plugins/ov_rest/ov_rest_event.c:78:10: fatal error: amqp_ssl_socket.h: No such file or directory
78 | #include <amqp_ssl_socket.h>
| ^~~~~~~~~~~~~~~~~~~
compilation terminated.
../../../openhpi-3.8.0/plugins/ov_rest/ov_rest_re_discover.c:707:23: error: initialization of 'SaErrorT' {aka 'int'} from 'void *' makes integer from pointer without a cast [-Wint-conversion]
707 | SaErrorT rv = NULL;
| ^~~~
* keep it explicitly disabled as it was disabled before
* add rabbitmq-c dependency for the first issue, the 2nd issue could be
worked around by:
# openhpi-3.8.0/plugins/ov_rest/ov_rest_re_discover.c:707:23: error: initialization of 'SaErrorT' {aka 'int'} from 'void *' makes integer from pointer without a cast [-Wint-conversion]
CFLAGS += "-Wno-error=int-conversion"
or better fixed properly by someone actually using this recipe
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libspelling 0.4.5
=================
This is a bug-fix release for GNOME 47
* Various robustness fixes for weak ref tracking
* Various GObject Introspection fixes
* A new build option to install a static library (libspelling-1.a)
* Fix a minor leak of extra_word_chars for a language dictionary
* Fix ICU success check
* Translation updates
libspelling 0.4.4
=================
This is a bug-fix release for GNOME 47
* Adds a few dozen translations for menu items
libspelling 0.4.3
=================
This is a bug-fix release for GNOME 47
* Fix build to disable assertions in release builds
* Fix an off-by-one in assertion
* Add i18n for translations of menu entries
* Ignore empty strings when building job list
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
WirePlumber 0.5.7
~~~~~~~~~~~~~~~~~
Highlights:
- Fixed an issue that would cause random profile switching when an application
was trying to capture from non-Bluetooth devices (#715, #634, !669)
- Fixed an issue that would cause strange profile selection issues [choices
not being remembered or unavailable routes being selected] (#734)
- Added a timer that delays switching Bluetooth headsets to the HSP/HFP
profile, avoiding needless rapid switching when an application is trying to
probe device capabilities instead of actually capturing audio (!664)
- Improved libcamera/v4l2 device deduplication logic to work with more complex
devices (!674, !675, #689, #708)
Fixes:
- Fixed two memory leaks in module-mixer-api and module-dbus-connection
(!672, !673)
- Fixed a crash that could occur in module-reserve-device (!680, #742)
- Fixed an issue that would cause the warning "[string "alsa.lua"]:182:
attempt to concatenate a nil value (local 'node_name')" to appear in the
logs when an ALSA device was busy, breaking node name deduplication (!681)
- Fixed an issue that could make find-preferred-profile.lua crash instead of
properly applying profile priority rules (#751)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is a bugfix release that is API and ABI compatible with the previous
1.2.x and 1.0.x releases.
- Backport support for lazy scheduling.
- Handle the case where processing would stop when an ALSA driver is
destroyed.
- Add support for v4l2loopback in the v4l2 plugin.
- Small bug fixes and improvements.
- Invalidate the proxy ID when removed.
- Backport support for lazy scheduling.
- Fix profiler stats for async nodes.
- Fix EARLY_PROCESS again in pw-stream. (#3480)
- Fix a crasher issue when nodes are created in the wrong order in
module-filter-chain.
- Fix unmap bug in lv2 uri tables.
- Add ratelimit to jack-tunnel xruns.
- Remove hardcoded limit in filter-chain sofa plugin.
- Handle the MTU size correctly in module-rtp and handle large MTUs.
(#4396)
- Fix JSON float parsing errors in equalizer module. (#4418)
- Fix crash in audiotestsrc when using spa-inspect (#4365).
- Improve JSON float infinity checks.
- Improve resampler performace a little.
- Make audioconvert only output when there is something to output.
- Fix regression in v4l2 port flags which would disable support for
EXPBUF.
- Handle the case where an ALSA driver is destroyed and the follower
becomes a driver. Processing would stop. (#4401)
- Add support for v4l2loopback in the v4l2 plugin.
- Give a better error message when running out of fds.
- Ensure positive latency reporting.
- Fix memory leak in deviceprovider.
- Fix locking when emitting an error.
- Fix pw-dot link labels.
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is already done by the libgpiod recipe for libgpiod-gpiosim which
is a dependency for python3-gpiod's ptest package.
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
We now have a separate package containing the libgpiosim shared object
which is all from libgpiod-ptest that we need for this package's tests.
Let's relax the run-time dependency.
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Make the packaging a bit more fine-grained. Create separate packages for
the libgpiosim library and gpio-manager configuration files. Make the
ptest package run-time depend on only the gpio-manager config. This way,
we don't pull the entire daemon infrastructure if all we want is to run
its test suite.
While at it: add GPIO udev rules to the gpio-manager config package.
Currently they are in the main libgpiod package where they don't really
belong.
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The test program passes command-line arguments to hostname, grep and
mount that are not present in busybox' variants, so we need to pull in
the real things. The recipe also misses mkfs and findmnt programs so add
those to RDEPENDS as well.
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
