Refer [1], include an urgency SECURITY fix and some bug fixes
[1] https://github.com/redis/redis/releases/tag/7.0.13
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause
a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-47022https://github.com/open-mpi/hwloc/issues/544
Upstream patches:
ac1f8db9a0
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
If you try to build libblockdev with an empty PACKAGECONFIG then the
configure fails.
Add autoconf-archive, glib-2.0, and udev; these were implicitly pulled
in via other dependencies. Move kmod to DEPENDS as it's a hard
requirement.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f14663746bd519650c8654bbf91971a0a96c109e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This can be satisfied via transitive dependencies, but make it an
explicit DEPENDS.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5fca30d672c291b1af8284d6d5cbfc520c95d4fc)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Recipes are not expected to set FILESPATH directly, they are
expected to use FILESEXTRAPATH.
I can see the seting of FILESPATH in this recipe only wants to
find redis-7 specific patches and files. This could be easily achieved by
using redis-7.0.11/ directory to hold all those files.
Using FILESPATH in this way removes the possibility of overriding
some files (e.g., the redis service file) from other layers via
FILESEXTRAPATH:prepend, which is kind of a common practice and is
actually working for basically all other recipes.
This is because we have:
meta/classes-global/base.bbclass:FILESPATH = "${@base_set_filespath(["${FILE_DIRNAME}/${BP}", "${FILE_DIRNAME}/${BPN}", "${FILE_DIRNAME}/files"], d)}"
And FILESEXTRAPATH is handled in base_set_filespath.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
bison/flex emits line directives which can be safely removed from
generated files.
agent_version.h is generated by cmake which has build information like
compiler and cflags etc. which contains buildpaths too, therefore
replace real workdir with <WORKDIR>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0d2df1e4c404fd93ee0095a15db00d17f2321e18)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* it's often pulled by elfutils when debuginfod is in DISTRO_FEATURES, but
when it isn't, it fails with:
http://errors.yoctoproject.org/Errors/Details/702773/
checking for libarchive... no
configure: error: Package requirements (libarchive) were not met:
No package 'libarchive' found
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI)
dlt-daemon through 2.18.8. Dynamic memory is not released after
it is allocated in dlt-control-common.c.
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-26257https://github.com/COVESA/dlt-daemon/issues/440
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ad73ee286f850c11b79de3bbb4b3d565340c1531)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
stat64 is an alias to stat on 64bit linux moreover this makes it work
with musl where LFS64 functions are deprecated
Signed-off-by: Khem Raj <raj.khem@gmail.com>
With the exception of paho-mqtt-cpp, the double protocol= attributes
were added to the SRC_URIs when protocol=https was added to all SRC_URIs
fetching from github.com in commit b402a3076f (recipes: Update SRC_URI
branch and protocols).
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Add 'sysroot.bootprefix' option
deploy: Use 'semodule --refresh' if available
configure: post-release version bump
Release rust/ bindings 0.17.1
rust-bindings: Regenerate for 2023.1
rust-bindings: 'Sysroot' is 'Send'
itest-pull-space: Use mkfs.ext4, align to at least 512b
tests: Set size on fileinfo
Enable 'trust_return_value_nullability'
Add docs and fix annotations for ostree-repo-file.c
rust: Bump semver
lib: Fix two nullable annotations
repo: Fix nullability for remote options
rust: Renerate bindings
Revert "repo: Fix nullability for remote options"
rust-bindings: Regenerate
configure: post-release version bump
build: Do not include private headers in the introspection
libostree: Ignore new_and_connect in the introspection
libostree: Enhance the annotation coverage
core: Ensure glib standard::size attribute is always set
ci: update for new kolaTestIso()
lib/fetcher-util: Wake up main context when a request is complete
Increase buffer size for create_regular_tmpfile_linkable_with_content
tests: Ensure non-root users have access to libcap tools
ostree_raw_file_to_content_stream: Make size default to 0
_ostree_zlib_file_header_new: Default size to 0
write_content_object: Don't assume file info has standard::size
Use g_steal_fd() in preference to glnx_steal_fd()
docs: Use upstream theme & update to 0.4.1
build(deps): bump libglnx from '4e44fd9' to '07e3e49'
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
* Fixed a bug where the build type didn't default to "Release" when using
CMake 3.10 or earlier.
* Fixed a bug where some optimized code wasn't used when building with
Clang 15 or later (x86), or with Clang 16 or later (aarch64).
* Fixed build errors with some architecture and compiler combos:
* aarch64 with Clang 16
* armv6kz or armv7e-m with gcc
* armhf with gcc (on Debian only)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
With version 3.22.11 it's not enough avoid linking to the
closed source ImageProcessor library, it must not be installed
either. This library is pre-stripped so package QA fails.
Add a new patch to fix installing HPLIP.conf into
/usr/share/ipp-usb/quirks. The upstream Makefile.am fails
to take DESTDIR into account and do_install fails because
of this. Also, instead of detecting the presence of the
target directory which is invalid for a source build,
create it and install the quirk file.
Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Support of new kernel features:
-----------------------------------
j1939: make use of new RX UAPI
isotp: rework FRAME_TXTIME handling and buffer size (Linux v5.18+)
isotp: add support for transmission without flow control (Linux v5.19+)
mcp251xfd-dump: add support for dumps created with Linux kernel >= v5.18
can-calc-bit-timing: import bit timing calculation algorithm from v5.19
cangen: add support for SO_TXTIME
includes: update to Linux 6.2 upstream (with CAN XL data structures)
Improvements and features:
--------------------------------
canfdtest: Add extended frame format / message length / FD / BRS support
can-calc-bit-timing: add support for calculation of CAN-FD bit timings
cangen: add option for absolute timeouts
cangen: new generation mode - partially randomized payload (-D)
slcan: increase BTR char limit to 8 for 32bit BTR
log asc converter: support len8_dlc for Classical CAN frames
candump: handle individual logfile name for stdout
cansniffer: add CAN FD support
cansniffer: make ASCII output switchable in CAN FD mode
canplayer: introduce option to limit the number of processed frames
Fixes:
-----------------------
candump: print number of dropped frames as unsigned values
candump: reserve enough space for ctrlmsg
candump: fix accidentally disabled traffic timeout feature
lib: fix seperator in snprintf_error_data
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
They are not cross compile friendly as they poke into build host
directories to determine if system is upstart based and it can fail
build on such hosts e.g. ubuntu
If someone is still using upstart with OE then please fix it and send a
better fix upstream to re-enable it here.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ChangeLog:
https://github.com/CESNET/libyang/releases/tag/v2.1.55
* Generate cases list dynamically in run-ptest.
* Add a patch to fix ptest.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade urgency: SECURITY, contains fixes to security issues.
Security Fixes:
* (CVE-2023-28425) Specially crafted MSETNX command can lead to assertion and denial-of-service
Bug Fixes
=========
* Large blocks of replica client output buffer may lead to psync loops and unnecessary memory usage (#11666)
* Fix CLIENT REPLY OFF|SKIP to not silence push notifications (#11875)
* Trim excessive memory usage in stream nodes when exceeding `stream-node-max-bytes` (#11885)
* Fix module RM_Call commands failing with OOM when maxmemory is changed to zero (#11319)
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Under sysvinit when trying to restart redis-server using
service redis-server restart two calls are made to start-stop-daemon, first
with the --stop argument and then with --start argument consecutively.
Because the process doesn't immediately terminate when start-stop-daemon
--stop is called, the next call to start-stop-daemon --start finds the
process still running and does not attempt to start another one.
This leads to only a stop of the redis-server process when a restart is
requested. This behavior affects all redis versions using sysvinit only.
This can be fixed by using the --retry <timeout/schedule> argument with
start-stop-daemon --stop in order for the call to block until the process
terminates so that start-stop-daemon --start will attempt to start a new
process.
Unfortunately the --retry argument works only in the implementation of
start-stop-daemon provided by dpkg package and is ignored in the
implementation provided by busybox package.
A repeated check if the process is still running and another try with
another signal after a timeout will effectively simulate a stop with
--retry=TERM/5/KILL/5 schedule.
Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update SRC_REV and change recipe name.
Modify patches to apply and remove unrecognized configure
option --without-python2. Retain --with-python3 even
though it is the default.
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
To prevent naming collisions when BB_GENERATE_MIRROR_TARBALLS is used,
the packagename is used for the downloaded file.
Otherwise it would just be source-${PV}.tar.gz
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
* test/yacc/ok_syntax1.tab.h, test/yacc/ok_syntax1.tab.c,
test/btyacc/ok_syntax1.tab.h, test/btyacc/ok_syntax1.tab.c:
regen
* test/ok_syntax1.y:
modify test for %union to add tag for testing reader.c
* reader.c:
provide for a named union, e.g., "%union foo" by detecting the name and
deferring the typedef in that case until the end of copying the union
definition
* VERSION, package/byacc.spec, package/debian/changelog,
package/mingw-byacc.spec, package/pkgsrc/Makefile:
bump
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
With DEBUG_BUILD = "1", the following error occurs:
src/relpsess.c:95:1: error:
inlining failed in call to 'relpSessFreePermittedPeers': function not considered for inlining [-Werror=inline]
so use the compiler flag '-Wno-error=inline' for DEBUG_OPTIMIZATION only.
Tracked by upstream bug: https://github.com/rsyslog/librelp/issues/256
but it's looking like a toolchain bug.
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
