Drop the patch that is included in this release.
Actually that is also the changelog since the previous version - there
were no other changes beside the accepted patch.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
fio 3.40 added the commit 4175f4dbec5d ("oslib: blkzoned: add
blkzoned_move_zone_wp() helper function") which uses
FALLOC_FL_ZERO_RANGE which in a musl build is undefined without
including its header.
Backport the upstream fix.
Signed-off-by: Max Krummenacher <max.oss.09@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
rtla source code is present in the kernel source tree at tools/tracing/rtla.
There is another build option for rtla to enable bpf bindings, this was
not a quick one to get working and left as a future improvement.
Makefile for rtla has evolved in newer kernels (v6.9). Some fixes needed for
support with older kernels. This commit was tested against 6.18 and 6.8.
Also add rtla to packagegroup-meta-oe-benchmarks.
Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
When having a DEPENDS against cpupower it need to leave its header files.
Remove that cleanup that has been present since the beginning of the recipe
without any (to me) known reason.
cpupower ship a systemd service and config file in kernel source tree
since kernel 6.16. Package them as a separate package cpupower-systemd to
be installed if wanted.
Add cpupower to packagegroup-meta-oe to be included in builds of all
packages.
Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This version has been EOL since the end of February. There is a recipe
available for v8, which is still supported.
Drop this version.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libcppconnman is a C++ library to control ConnMan via D-Bus. It exposes
simple aync methods to perform all the controls that ConnMan allow via
D-Bus.
Signed-off-by: Andrea Ricchi <andrea.ricchi@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The PKCS#11 provider has a mechanism [1] to support older applications
which have not yet migrated to the OSSL_STORE API [2]. It works by
encoding the 'pkcs11:' URI into a PEM file and passing that to an
application as a file. From the application's perspective it loads the
private key from a file, but OpenSSL will transparently use select the
provider to access it via PKCS#11 instead.
Instead of upstream's Python-based tool [3] (which would pull in
asn1crypto as a dependency), we just generate the ASN.1 for the PEM
using OpenSSL's 'asn1parse -genconf'.
It has been tested with RAUC, U-Boot's mkimage (for signed FITs) and
NXP's CST.
[1] https://github.com/latchset/pkcs11-provider/blob/main/docs/provider-pkcs11.7.md#use-in-older-applications-uris-in-pem-files
[2] https://docs.openssl.org/master/man7/ossl_store/
[3] https://github.com/latchset/pkcs11-provider/blob/main/tools/uri2pem.py
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Fabian Pflug <f.pflug@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
OpenSSL 4.0 will drop support for engines and use providers instead.
To access SoftHSM and other PKCS#11 modules via the provider API, we
rely on https://github.com/latchset/pkcs11-provider, which is already
available as via pkcs11-provider recipe.
We enable this provider by using a specific OpenSSL config when signing.
This means that recipes inheriting this class can decide whether they
want to use the engine or provider to access the key.
SoftHSM seems to produce broken keys when calling the C_CopyObject, so
disable caching in the provider for now.
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Fabian Pflug <f.pflug@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Contains fix for CVE-2025-43023, and support for many new printers.
Drop patches that are included in this release (or the underlying problem
was solved on another way)
Changelog: https://developers.hp.com/hp-linux-imaging-and-printing/release_notes
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Nushell is a modern, cross-platform shell and programming language.
It is designed to work with structured data rather than plain text, and takes
inspiration from traditional shells like bash, object-based shells like
PowerShell, gradually typed languages such as TypeScript, functional
programming, and systems programming.
Add recipe for the latest release
- Written in Rust
- Combines a full-featured shell with a rich, structured programming language
- Operates on structured data instead of plain text
- Provides clear error messages and strong IDE support
- Designed for modern, cross-platform workflows
More information: https://crates.io/crates/nu
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The riscv64 is now in COMPATIBLE_HOST of valgrind.
The armv4/armv5/armv6 are not in COMPATIBLE_HOST of valgrind.
Update the settings accordingly.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
rrdtool package configuration 'graph' relies on graphical support. Ignore
it if none of x11 org wayland is in the distro features.
Signed-off-by: Louis Rannou <louis.rannou@non.se.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The NEON SIMD fast path in the bundled llhttp calls
__builtin_ctzll(match_mask) without checking if match_mask is zero.
When all 16 bytes in a NEON register are valid header value characters,
match_mask is 0. Calling __builtin_ctzll(0) is undefined behavior.
GCC at -O2 exploits this by optimizing "if (match_len != 16)" to
always-true, causing HTTP 400 Bad Request for any header value longer
than 16 characters on ARM targets with NEON enabled.
Fix by explicitly checking for match_mask == 0 and setting
match_len = 16. This bug affects both aarch64 and armv7 NEON targets.
The code this patch modifies is generated, so the patch itself isn't
suitable for upstream submission, as the root cause of the error is
in the generator itself. The fix has been merged upstream[1] in
llparse 7.3.1 and is included in llhttp 9.3.1. This patch can be
dropped when nodejs updates its bundled llhttp to >= 9.3.1.
[1]: https://github.com/nodejs/llparse/pull/83
Signed-off-by: Telukula Jeevan Kumar Sahu <j-sahu@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The .git/hooks/commit-msg Git hook may already exist and not be
writable. E.g., in our environment it is a symbolic link to a script in
/usr/share.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Set CVE_PRODUCT to align with the NVD CPE and ensure correct CVE
reporting.
Signed-off-by: Het Patel <hetpat@cisco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Set CVE_PRODUCT to align with the NVD CPE and ensure correct CVE
reporting.
Signed-off-by: Het Patel <hetpat@cisco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
live555 is an old project, it has multiple CPEs associated with.
Set the ones in CVE_PRODUCT that are still active.
See CVE db query:
sqlite> select vendor, product, count(*) from products where vendor like '%live555%' or product like '%live555%' group by 1, 2;
live555|liblivemedia|1
live555|live555|7
live555|live555_media_server|2
live555|media_server|1
live555|streaming_media|160
All of them are relevant to this recipe, although media_server hasn't been used since 2007,
that one wasn't set.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Increase minimum required CMake version to 3.5, update Googletest to 1.13
- Bazel module builds
- node/convert: Enable the template specialization for std::string_view properly when the library is compiled by MSVC on Windows
- CMake: Allow to disable uninstall
- Update cmakelists to use system googletest if available
- Fix indentation of empty flow sequences
- Add option YAML_ENABLE_PIC
- fix: use C locale by default
- Use FetchContent_MakeAvailable
- fix: parse files with '\r' symbols as line ending correctly
- fix(src): avoid possible infinite loop in LoadAll()
- missing keys should throw InvalidNode, not BadConversion
- fix: prettier floating point numbers
- Optimization of merge memories
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Security fixes
-----------------
(CVE-2025-67733) RESP Protocol Injection via Lua error_reply
(CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
(CVE-2026-27623) Reset request type after handling empty requests
Bug fixes
------------
Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand
Fix server assert on ACL LOAD when current user loses permission to channels
Fix bug causing no response flush sometimes when IO threads are busy
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Retain Error.pgconn when raising a single exception for multiple connection attempt errors
- Return a proper error when server sends ErrorResponse for a Sync after a Parse
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade thermald to release 2.5.11.
This update includes the following changes:
- Clang-tidy fixes
- Added support for Wildcat Lake platform
- Fixes for CVE related to symbolic link exploitations
- D-Bus interface fixes
- Removal of power group handling after Thermal Monitor support deprecation
Signed-off-by: Priyansh Jain <priyansh.jain@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Release notes [1]:
* improved code for ZIP, CPIO, RAR, UFD, QCOW, Compound.
* 7-Zip File Manager: improved sorting order of the file list. It uses
file name as secondary sorting key.
* 7-Zip File Manager: improved Benchmark to support systems with more
than 64 CPU threads.
* the bug was fixed: 7-Zip could not correctly extract TAR archives
containing sparse files.
* some bugs were fixed.
License-Update: copyright years refreshed
[1] https://github.com/ip7z/7zip/releases/tag/26.00
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add also native class to support building the library for the host
system to use it e.g. with the newer dynamic SDK.
Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
1. Changelog:
Support i.MX952 15x15 EVK with Power group updated.
2. Update 0001-CMakeLists-do-not-use-vendored-libcurl.patch for 1.1.128
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
While touching this recipe, also switch to FreeRDP3 dependency,
which is still maintained, opposed to v2.
Changelogs:
https://gitlab.com/Remmina/Remmina/-/releases
1.4.43:
Add minimal macOS build support
Revert "Added kerberos-config plug"
Fix issue preventing SPICE plugin from being loaded
Do not calculate monitor shift if using freerdp_settings_set_monitor_def_array_sorted
1.4.42:
add option to enforce IPvX preference
Fix ssh x11 forwarding crashing in nixos
Add support for smartcard authentication
Add option to delay floating toolbar popup
Update FreeRDP checks to newer version
Fix typo
Update AppStream metadata !2684
update ffmpeg
Create named SPICE connection
Fix session stuck problem with KeePassXC
default dynamic resolution when supported issue
toolbar disappearance in some multi-monitor situations
Enable AAD support in Flatpak build
Create viewonly mode button on rcw toolbar
Permit css customization in scrolled window mode
src/remmina_ssh.c: zero-initialize RemminaSFTP structs
[plugins/rdp] fix memory leaks
Strip whitespace from quickconnect
[cmake] mark include_directories SYSTEM
[rdp] fix FreeRDP_MonitorLocalShift[XY]
fix various compiler warnings
UI: move view_toggle_button on the left
bug: double free on remmina_string_array_free
run update-translations.sh
Avoid Gettext incorrectly considering c-format
Disable save password prompt on quick connect authentication prompts
fix UB when connecting by link-local address
Added kerberos-tickets plug
Added kerberos-config plug
Fix floating toolbar popup regression in multimonitor
1.4.41:
Update keyboard mapping
Fix segfault that could happen when attempting to save a connection profile
Add ifdef to allow compilation without libssh
Add environment variable to prevent openssl config issue
Update snap to latest FreeRDP version
Toggle sending null or empty password when field is left blank
Add checks to allow FreeRDP2 compatibility
Fix KeyStroke function for SPICE plugin
Raise max length of username field to 300 from 100
Allow use of ssh command line arguments to create ssh connections
Fix use of default_value in remmina_file_get_int
Implement VNC connection timeout
Fix warnings
Prevent crash when pasting an image using RDP if gdk_pixbuf_save_to_buffer fails
Properly save and load color themes !2662
Fix Flatpak crash when moving floating tool bar
Save unlock password when set outside of the preferences menu
Update CMAKE_PREFIX_PATH in snapcraft.yaml
Properly implement keyboard interactive ssh authentication
Made hiding connection profile name on floating toolbar optional
Add a local terminal plugin
Allow Flatpak build to run commands
Allow users to connect to multiple connections or groups of connects at once
Create autostart directory if it does not exist.
Fix autostart directory create for flatpak.
Python Wrapper plugin: Fix typo + add comment for edge-case hinting that the plugin needs to be installed
Several small fixes and improving group connections
1.4.40:
Fix invalid free causing crash with sending keystrokes and clipboard contents
Fix SEGV when removing a non-exitend connection
Adjust floating toolbar to take up less space
Fix issue with multimonitor configuration needed for FreeRDP versions after 3.10.x
Add option to allow ssh-rsa keys to be used for ssh connections
Only set the max width and height to full monitor if using multimonitor
Fix typo
Revert calls back to uint
Fix issue with RDP scaling on connect
Add option to force multimonitor mode
Added the options to start connections in fullscreen mode and/or with dynamic resolution enabled for protocols that support the options
Allow empty passwords to be passed to FreeRDP
Allow import/export of ssh tunnel settings
hide local cursor when showing remote cursor
1.4.39:
Fix bug passing wrong value in SPICE plugin (Breaking compilation on some distributions)
1.4.38:
Add option to automatically copy ssh text when selected
Allow -c to work with www plugin
Don't prompt about closing connections with no connections
Mainly fixing memory leaks and some small bugs
1.4.37:
Implement horizontal smooth scrolling in RDP
Allow -c to work with www plugin
Add ability to lock message panels to one side of the window
fix dangling pointer in ssh_options_get_port invocation
Revert "[REM-2854] Add timeout option to handle VNC disconnects"
Fix OpenSSL include dir
Revert "[REM-3121] Handle GotFrameBufferUpdate on its own thread to prevent freeze"
fix compile warning that is failure with newer gcc versions
Add null check to prevent crash when pasting empty clipbaord
[REM-3086] Remove support for FreeRDP_SupportMonitorLayoutPdu to prevent loss of keyboard with xrdp
Don't rely on padding characters to be present to try decrypting passwords
Add option to immediately close VNC windows when they fail to...
Allow Remmina to use plugins immediately on download without needing a restart
Add plugin api to allow Remmina to display if a profile is...
Fix error message for failed RDP connection
Add more detail to bug report to make certain issues easier to solve
Resize icons to fit flatpak specifications
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This version has been EOL for a year now. There are recipes for two other,
still maintained versions in the layer.
Drop this version.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- 282 new ATRs
- pcsc_scan: display what the program expect from the user
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- os_stub/openssllib: Allow building with older OpenSSL versions
- Ignore MSVC warning when compiling OpenSSL
- Bring fixes from main to 3.8
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Improve as_date narrowing conversion from C4244 warning
- update trait dependencies to support CMake v4
- Fix linter error
- Update workflows for new GitHub Action Runner Images
- Support passing ssl library key handles to algorithms
- Update CMP0135 to new behaviour
- Fix error in CMake config-file package
- CMake: synchronize cmake_minimum_required from main CMakeLists.txt
- Reduce usage of std::time_t, std::chrono::system_clock::to_time_t and
system_clock::from_time_t in order to get correct dates when working with a
32bit application
- Fix set_expires_in not accepting non-default Period
- AppVeyor Warnings
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
