* All patches dropped because fixed in the new version.
0001-pkcs11-tool-Fix-private-key-import.patch -> https://github.com/OpenSC/OpenSC/blob/0.24.0/src/tools/pkcs11-tool.c#L3710
0002-pkcs11-tool-Log-more-information-on-OpenSSL-errors.patch -> https://github.com/OpenSC/OpenSC/blob/0.24.0/src/tools/pkcs11-tool.c#L3686
CVE-2023-2977.patch -> 81944d1529
* Fix -> ERROR: opensc-0.24.0-r0 do_package_qa: QA Issue: non -dev/-dbg/nativesdk- package opensc contains symlink .so '/usr/lib/onepin-opensc-pkcs11.so' [dev-so]
Changelog:
* CVE-2023-40660: Fix Potential PIN bypass (#2806, frankmorgner/OpenSCToken#50, #2807)
* CVE-2023-40661: Important dynamic analyzers reports
* CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys (f1993dc4)
* Fix compatibility of EAC with OpenSSL 3.0 (#2674)
* Enable `use_file_cache` by default (#2501)
* Use custom libctx with OpenSSL >= 3.0 (#2712, #2715)
* Fix record-based files (#2604)
* Fix several race conditions (#2735)
* Run tests under Valgrind (#2756)
* Test signing of data bigger than 512 bytes (#2789)
* Update to OpenPACE 1.1.3 (#2796)
* Implement logout for some of the card drivers (#2807)
* Fix wrong popup position of opensc-notify (#2901)
* Fixed various issues reported by OSS-Fuzz and Coverity regarding card drivers, PKCS#11 and PKCS#15 init
* Check card presence state in `C_GetSessionInfo` (#2740)
* Remove `onepin-opensc-pkcs11` module (#2681)
* Do not use colons in the token info label (#2760)
* Present profile objects in all slots with the CKA_TOKEN attribute to resolve issues with NSS (#2928, #2924)
* Use secure memory for PUK (#2906)
* Don't logout to preserve concurrent access from different processes (#2907)
* Add more examples to manual page (#2936)
* Present profile objects in all virtual slots (#2928)
* Provide CKA_TOKEN attribute for profile objects (#2924)
* Improve --slot parameter documentation (#2951)
* Honor cache offsets when writing file cache (#2858)
* Prevent needless amount of PIN prompts from pkcs15init layer (#2916)
* Propagate CKA_EXTRACTABLE and SC_PKCS15_PRKEY_ACCESS_SENSITIVE from and back to PKCS#11 (#2936)
* Fix for private keys that do not need a PIN (#2722)
* Unbreak decipher when the first null byte of PKCS#1.5 padding is missing (#2939)
* Fix RSA key import with OpenSSL 3.0 (#2656)
* Add support for attribute filtering when listing objects (#2687)
* Add support for `--private` flag when writing certificates (#2768)
* Add support for non-AEAD ciphers to the test mode (#2780)
* Show CKA_SIGN attribute for secret keys (#2862)
* Do not attempt to read CKA_ALWAYS_AUTHENTICATE on secret keys (#2864, #2913)
* Show Sign/VerifyRecover attributes (#2888)
* Add option to import generic keys (#2955)
* Generate 2k RSA keys by default (b53fc5cd)
* Disable autostart on Linux by default (#2680)
* Add support for IDPrime MD 830, 930 and 940 (#2666)
* Add support for SafeNet eToken 5110 token (#2812)
* Process index even without keyrefmap and use correct label for second PIN (#2878)
* Add support for Gemalto IDPrime 940C (#2941)
* Change of PIN requires verification of the PIN (#2759)
* Fix incorrect CMAC computation for subkeys (#2759, issue #2734)
* Use true random number for mutual authentication for SM (#2766)
* Add verification of data coming from the token in the secure messaging mode (#2772)
* Avoid success when using unsupported digest and fix data length for RAW ECDSA signatures (#2845)
* Fix select data command (#2753, issue #2752)
* Unbreak ed/curve25519 support (#2892)
* Add support for Slovenian eID card (eOI) (#2646)
* Add support for IDEMIA (Oberthur) tokens (#2483)
* Add support for Swissbit iShield FIDO2 Authenticator (#2671)
* Implement PIV secure messaging (#2053)
* Add support for Slovak eID cards (#2672)
* Support ECDSA with off-card hashing (#2642)
* Fix WRAP operation when using T0 (#2695)
* Identify changes on the card and enable `use_file_cache` (#2798)
* Workaround for unwrapping using 2K RSA key (#2921)
* Add support for `opensc-tool --serial` (#2675)
* Fix unwrapping of 4096 keys with handling reader limits (#2682)
* Indicate supported hashes and MGF1s (#2827)
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
748c393 (tag: 3.0.23.01.25) Version 3.0.23.01.25
6ffc5f4 Keep track of the known flags
8a259ee Mark ARM extensions as such
315a45f Fix some extended versioning support
fd78db3 cl_khr_mutable_dispatch
89581d9 Sempahore KHR extensions support
6dedc29 cl_khr_external_memory support
9e770d9 Cleanup and add TODO
3bb2d68 cl_intel_unified_shared_memory support
120b67c cl_khr_command_buffer support
a38c9cc Update cl_arm_scheduling_controls support
b43aa37 cl_intel_device_attribute_query support
5b0ebba cl_intel_command_queue_families support
c8de099 Option to handle the NULL platform like a normal one
a6862eb Correctly size some variables
62bbef9 Fix typo: comfornace
d6f189d Makefile: Define and use `MAN1DIR`
95051d9 Makefile: Support staged installs with `DESTDIR`
a2d2cfb Makefile: Simplify by removing targets and move them to install target
7870355 Revert "Makefile: Support staged installs with `DESTDIR`"
a3729b0 Properly indent NV execution properties
77b4693 Don't fetch array values when there aren't any
efdb0f0 Show ICD loader properties even if no platforms are present
a10af94 Older NVIDIA drivers don't support CL_DEVICE_PCI_DOMAIN_ID_NV
a5bda6d Makefile: Support staged installs with `DESTDIR`
72a1ee2 Some more ext vs (next) core things
aabec89 Add missing extension checks
20b7053 cl_arm_controlled_kernel_termination support
11201e9 cl_khr_pci_bus_info support
78c53d0 Fix string buffer used to report error
e36ff2b Support cl_arm_scheduling_controls
d34bc1a (tag: 3.0.21.02.21) Version 3.0.21.02.21
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
* Update Unicode version 15.1.0
* NEW API: ONIG_OPTION_MATCH_WHOLE_STRING
* Fixed: (?I) option was not enabled for character classes (Issue #264).
* Changed specification to check for incorrect POSIX bracket (Issue #253).
* Changed [[:punct:]] in Unicode encodings to be compatible with POSIX definition. (Issue #268)
* Fixed: ONIG_OPTION_FIND_LONGEST behavior
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The package version is inconsistent as below:
# rpm -qa | grep usleep
usleep-1.0-r0.core2_64
# usleep --version
usleep version 1.2
usleep --help for more info
And there is below logic in meta-oe/recipes-core/usleep/files/usleep.c.
if (showVersion) {
printf("usleep version 1.2\n usleep --help for more info\n");
return 0;
}
So update the PV value to make the version consistent.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update to the 2023-04 version.
Use the the new upstream repository and drop the fix that
has been upstreamed.
Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The 'krb5-config' tool should be in ${PN}-dev (as intented by
binconfig class).
Use PACKAGE_BEFORE_PN for extra packages so that -dev is handled
before -user.
Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Current hash pointed to version with code already indentical
to v1.5.0, it was just missing three formal release commits:
a15d80a Bump copyright years to 2023
6600fd5 Bump version to 1.5.0
8c201f6 CHANGELOG.md: 1.5.0
License-Update: copyright years refreshed
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
srecord's CMakeLists.txt was unconditionally setting CMAKE_INSTALL_PREFIX
for non-WIN32 builds, which caused it to ignore OE-supplied prefix
that contained the sysroot portion of the path. Fixed by setting
the prefix only if it wasn't explicitly provided.
Signed-off-by: Ilya A. Kriveshko <iillyyaa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add ssd1306_linux, a simple OLED I2C SSD1306 Linux driver based on
the i2c library libi2c from i2c-tools. Example usage for a
compatible display with resolution 128x64 pixels:
ssd1306_bin -n 1 -I 128x64
ssd1306_bin -n 1 -c
ssd1306_bin -n 1 -r 0
ssd1306_bin -n 1 -x 1 -y 1
ssd1306_bin -n 1 -l "Hello World"
Pending GitHub pull request to the upstream of the project:
https://github.com/armlabs/ssd1306_linux/pull/4
After fixing the upstream 0001-Use-include-filename.patch should
be removed from the recipe.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The core collectd tool does not require rrdtool to build. There are some
configurable options that do need rrdtool but they are already properly
adding the dependency in PACKAGECONFIG. This saves building half a dozen
other libraries that wouldn't otherwise be present on a headless or server
style target.
Signed-of-by: Jordan Crouse <jorcrous@amazon.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The AUTHOR field is no longer used in generating packages.
It may also create a possible confusion with the recipe maintainer
name, so let's remove it.
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==== 2.1.2 ====
* This release contains a change only to the tests, which improves the detection of glibc.
==== 2.1.1 ====
* Fixes the -N flag of paperconf.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fixed do_package error when json-c is in the build dependencies chain:
ERROR: QA Issue: -dev package libv4l-dev contains non-symlink .so '/usr/lib/libv4l2tracer.so' [dev-elf]
This recipe builds out files such as av4l1compat.so v4l2convert.so and
libv4l2tracer.so which are not symlinks.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Fix updatedb writing incomplete .db files under Termux.
- Make the systemd timer run more consistently during the night.
- Add an (undocumented) flag --ignore-visibility to plocate,
giving the equivalent of building the database with
--require-visibility no. Drops setgid, of course, so you
will usually need to be root to use it.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
-Fix redlock to make multiple threads be able to lock on the same RedMutex
-Asynchronously update slot-node mapping in some edge cases
-Use weak_ptr to avoid joining EvenLoop thread in itself
-Support setting connection name
-Support shard pub/sub
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Add IMAP support for UTF-8 (RFC 6855) when "charset" is set to "UTF-8"
- Don't use FETCH FAST macro use for better compatibility
- Bug fix; recovery mechanism error on Lua 5.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-libgcrypt.c-Fix-prototype-of-des3_encrypt-des3_decry.patch
0001-tests-CMakeLists.txt-do-not-search-ssh-sshd-commands.patch
refreshed for 0.10.6
Changelog:
==========
* Fix CVE-2023-6004: Command injection using proxycommand
* Fix CVE-2023-48795: Potential downgrade attack using strict kex
* Fix CVE-2023-6918: Missing checks for return values of MD functions
* Fix ssh_send_issue_banner() for CMD(PowerShell)
* Avoid passing other events to callbacks when poll is called recursively (#202)
* Allow @ in usernames when parsing from URI composes
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
* Fix crash in right-click / menu rendering code on some distributions
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Added read support for AAC audio files
- Added a new QuickTime Keys Android tag
- Added a number of new values for some Ricoh GR III tags
- Decode timed metadata from Intsa360 Ace Pro MP4 videos
- Decode GPSDateTime milliseconds in timed Insta360 metadata
- Decode timed metadata from INNOV K5 TS videos
- Decode a number of new GoPro timed-metadata tags
- Decode a few new Xiaomi EXIF tags
- Fixed writing of JPG/ARW images from some newer Sony models to preserve
HiddenData
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
-add aabb2d
-add euler to quat functionality
-add new subtraction family of vector functions
-many others improvements and bugfixes
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Patch dropped because it is already available in the new version.
Changelog:
====== 1.7.1 ======
* The v1.7 contains a bug in the sysfs scan topology code which could double free some memory. As this is a very common code path to execute, it's worth to get this fix out fast.
======= 1.7 =======
* allocated payloads aligned
* refactoring and improvements of RAE handling in get log pages
* auto cleanup of resources
* build instruction update and improving build situation for older distros
* support for TP8018
* use sysfs only for topology scan
The last point addresses a long standing problem. Whenever 'nvme list' is used it could add error log entries for certain devices. With the corresponding kernel changes this will not happen anymore. It also unlocks some possible new features. Note this depends on the upcoming 6.8 kernel.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
In 7.80 this requires distutils (no longer provided in python 3.12).
This may be resolved in newer nmap versions, so if you care about it
please provide a version update: https://nmap.org/dist/
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Drop several obsolete patches; either upstream fixed the issue or
there's a standard way to cross-build python items.
Add setuptools dependency as distutils is still needed.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
No longer compatible with python 3.12; there hasn't been a release since 2018:
https://pagure.io/volume_key/releases
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This helps with build determinism; also if readline is not in sysroot
but readline-native is, fontforge erroneously decides to build with it.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Inside a default `runqemu` there's no resolv.conf, so the "Live" tests
fail, exclude them by default.
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* introduced in upgrade to 0.115 version:
https://git.openembedded.org/meta-openembedded/commit/?id=1f2c2ebcbcf5944225462f530e0d56b20f1b4630
* fixes:
ERROR: driverctl-0.115-r0 do_package: QA Issue: driverctl: Files/directories were installed but not shipped in any package:
/usr/lib/systemd
/usr/lib/systemd/system
/usr/lib/systemd/system/driverctl@.service
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
driverctl: 3 installed and not shipped files. [installed-vs-shipped]
when systemd_system_unitdir isn't subdirectory of libdir, e.g. with multilib using:
export libdir="/usr/lib64"
export systemd_system_unitdir="/usr/lib/systemd/system"
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The main part is the tool lsi2c to scan the i2c bus, like lspci and lsusb
do.
This recipe also ships a static library *libi2cdev.a*. Because this library
contains the file *smbus.c* which is *GPL v2+,* and a static library can't
be linked dynamically to satisfy the LGPL, the whole recipe is marked
as *GPL-2.0-or-later.*
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade urgency SECURITY: See security fixes below.
Security fixes:
(CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a
race condition that can be used by another process to bypass desired Unix
socket permissions on startup.
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The following CVEs are addressed in this release.
CVE-2023-50471
CVE-2023-50472
https://github.com/DaveGamble/cJSON/releases/tag/v1.7.17
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
