It was accidentally dropped in last upgrade for this recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Martin Jansa <martin.jansa@gmail.com>
Cc: Naveen Saini <naveen.kumar.saini@intel.com>
(cherry picked from commit b5ad9c011db2581cc84e5daa139acf73a0f6f5c0)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
It calls openssl's commands 'dhparam' and 'pkcs12' in script bootstrap.
These commands are configurable based on configure options 'no-dh' and
'no-des', and may not be provided by openssl. So check existence of
these commands. If not, abort running of script bootstrap.
1. https://github.com/openssl/openssl/blob/master/apps/build.info#L37
2. https://github.com/openssl/openssl/blob/master/apps/build.info#L22
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c8ceefc5c3fa5ce87f0e1b0a8f5bb06b259d1e76)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Fix a security issue CVE-2020-36242 where certain sequences of
``update()`` calls when symmetrically encrypting very large
payloads (>2GB) could result in an integer overflow, leading to
buffer overflows.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
License-Update: License updated (year updated)
Fix some security issues such as CVE-2021-21702 and remove two
cve patches which already included in the new version.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2.2.x is LTS, so upgrade to latest release 2.2.20.
This upgrade fixes several CVEs such as CVE-2021-3281.
Also, CVE-2021-28658.patch is dropped as it's already in 2.2.20.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upgrade to latest stable version.
The 1.10 branch is not maitained any more, it stops update in 2019.
The 1.11 branch has fix for CVE-2020-26117, which is a high risk CVE.
https://nvd.nist.gov/vuln/detail/CVE-2020-26117
Some changes in this new version are as below.
1) 'bash' is added to RDEPENDS as /usr/libexec/vncsession-start requires it.
2) DEPENDS on libpam and requires 'pam' distro feature.
This is because upstream has made 'pam' mandatory in the following commit.
"""
commit d80817f101d1b3f1a9b1c5ec268f28fffa2d75f9
Author: Pierre Ossman <ossman@cendio.se>
Date: Wed Jul 11 15:49:46 2018 +0200
Make PAM mandatory
It is present on all UNIX systems anyway, so let's simplify things.
We will need it for more proper session startup anyway.
"""
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8,
MultiPartParser allowed directory traversal via uploaded files with
suitably crafted file names. Built-in upload handlers were not affected
by this vulnerability.
References:
https://nvd.nist.gov/vuln/detail/CVE-2021-28658
Upstream patches:
4036d62bda
Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Add upstream patches [1] & [2] to automatically detect the availability of
systemd and (currently) never install '50-rc_keymap.conf' at all as the
prerequisite would be the ability to compile BPF programs which is not supported
in this recipe (at least not now).
Previously if your distro was not systemd based the existance of the host
system's path "/lib/systemd/system" decided if '50-rc_keymap.conf' was installed
or not.
[1] https://git.linuxtv.org/v4l-utils.git/commit/?id=3f61e353424fb9ea3dce742022b94dfd7ea1ed9f
[2] https://git.linuxtv.org/v4l-utils.git/commit/?id=01f2c6c58e6f4441df7df8e27eb7919f1f01e310
Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The +1 fixes build issues for the 5.4 kernel.
This update looks like bugfixes
Signed-off-by: Armin Kuster <akuster808@gmail.com>
v2]
Wrong version listed
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4784c7c62f6549577228f6830aebb33baa1ee931)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Change from a weak default to a default in the definition of the PACKAGECONFIG.
In https://github.com/flihp/meta-measured/blob/master/networking-layer/recipes-support/strongswan/strongswan_5.%25.bbappend the PACKAGECONFIG is appended to, so if the definition is weak here, the variable will be empty when the bbappend attempts to add to it.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 90c04acced601f61db2516698b4d4df540a4cc3d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
libnet is a dependency to --enable-spoof-source.
The correct flag to enable/disable in ./configure
is --enable-spoof-source.
Adjust PACKAGECONFIG accordingly.
Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c126dcd1f91236d7effdb64df7fd9a3e2029543d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
when enabling DEBUG_BUILD, an assembler failure used to be seen.
But this patch was in meta-oe c0ce7599, dating in 2014...
Cannot reproduce the failure anymore with qemuarm.
Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6c626c0e12673b56ed2d7387465f8c2d88d956d2)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Drop 0001-GitHub-Issue-367.-Remove-references-to-deprecated-G_.patch
since it was a backport.
Drop 0001-pollGtk-Drop-volatile-qualifier.patch
since it's covered by:
f48efc8e Make pollGtk resetable.
Drop 0001-utilBacktrace-Ignore-Warray-bounds.patch
since it's covered by:
0cfda58a Make peeking back into the stack work for back traces
Drop 0002-add-include-sys-sysmacros.h.patch
since it's covered by:
69b7e1f9 Include sysmacros.h directly as mandated by glibc-2.25.
Refit:
0005-Use-configure-to-test-for-feature-instead-of-platfor.patch
0009-Rename-poll.h-to-vm_poll.h.patch
0002-hgfsServerLinux-Consider-64bit-time_t-possibility.patch
0011-Use-uintmax_t-for-handling-rlim_t.patch
Add:
0001-Add-resolv_compat.h-for-musl-builds.patch
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Trevor Gamblin <Trevor.Gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7a5fbd9d46cdec887d7b370f567e740e7731bfec)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Rebase the musl patches.
Drop json-c dependency as this is no longer used.
Drop FILES_${PN}-dbg packaging as this happens magically now.
Drop -Wno-error CFLAGS as we patch out -Werror entirely.
Add dtc RDEPENDS as this is needed at runtime.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b7b0bcb4fed0477ee22066b387c0f49eaa5dc262)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
- Excise all devices.tar.gz code
- Use yocto vars to override hardcoded dir to support native and nativesdk
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 605cb20bdffa2523a963439b47c21aa23adf5325)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fixes build issue when dnn PACKAGECONFIG is enabled and ld-is-gold in DISTRO_FEATURES
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 41ca2e57bc2e00ca8db577c6e311ab2e8f39b7aa)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This ensures that nodm unit is started during boot with systemd images
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Acked-by: Kai Kang <kai.kang@windriver.com>
(cherry picked from commit a2f2e752c201bf5e6a7345c63671e40dd14031c9)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upgrade to release 1.0.12:
- Add support for hashed/random/keyword expressions
- Review support support for hashed/random/keyword expression and
add expanders reactor
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 4c0e6d33651fe8dc41173c45cf0dbf2bef05e8ca)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upgrade to release 2.2.0:
- Adds support for errors.py to also use 'errors' for error_details
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 88892586c99eb0fe4d823240c3285c8af50a8e0f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upgrade to release 5.0.7:
- The decorator module was not passing correctly the defaults
inside the *args tuple
- Fixed some mispellings in the documentation
- Integrated codespell in the CI
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit d07aa9a0a7c5e0a9472c339cccd6604ef9e70d12)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upgrade to release 1.2.4:
- Fixed regression in DataFrame.sum() when min_count greater than
the DataFrame shape was passed resulted in a ValueError
- Fixed regression in DataFrame.to_json() raising AttributeError
when run on PyPy
- Fixed regression in (in)equality comparison of pd.NaT with a
non-datetimelike numpy array returning a scalar instead of an
array
- Fixed regression in DataFrame.where() not returning a copy in
the case of an all True condition
- Fixed regression in DataFrame.replace() raising IndexError when
regex was a multi-key dictionary
- Fixed regression in repr of floats in an object column not
respecting float_format when printed in the console or outputted
through DataFrame.to_string(), DataFrame.to_html(), and
DataFrame.to_latex()
- Fixed regression in NumPy ufuncs such as np.add not passing
through all arguments for DataFrame
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 443e435ce4575dbf7fe3f37594942690b8df3730)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upgrade to release 1.8:
assumptions:
- Q.infinite now correctly evaluates to True for oo, -oo, and zoo
- Assumption predicates now correctly evaluates to None for S.NaN
- Relational objects do not need to be wrapped by Q.is_true to be
asked or refined anymore
- Q.is_true wrapping over AppliedPredicate now just return the
argument
- refine arg(x) when x is real and nonzero
- assumptions/relation module is introduced. This module
implements binary relation as predicate
- AskHandler(), register_handler() and remove_handler() are
deprecated. Handler now must be multipledispatch instance
- Predicate now uses a single handler which is multipledispatch
instance
- Predicate can now take multiple arguments
- Predicate("...") now returns UndefinedPredicate instance. To
define a predicate, you must make a subclass of Predicate
calculus:
- Using maximum with a piecewise expression over a domain no
longer fails due to a bug fix in Piecewise.as_expr_set_pairs
codegen:
- allowing for multi-dimensional arrays as arguments/locals in c
code generation
- create_expand_pow_optimization is now customizable with respect
to requirement on base
- Support flattening of elementwise additions of array expressions
- Fixes to array-expressions in order to properly work with
ZeroArray and ZeroMatrix
- Fixing matrix expression recognition from array-expressions
- Minor fixes to the way the AST of array expressions is built
- Add normalization of CodegenArrayDiagonal when it's nested with
CodegenArrayPermuteDims and CodegenArrayContraction
- Increased support for the normalization of array expressions and
permutations of indices
- parse_matrix_expression( ) is now able to parse traces of
matrices
combinatorics:
- Added a section to the permutation docs about containment in
permutation groups
geometry:
- Fix AssertError for vertical tangent
- Geometric entities with symbolic coordinates will not be printed
in SVG
simplify:
- Fix simplify calls sympify without rational parameter
- TRmorrie now takes powers of cos terms into account
tensor:
- Introduced objects ArraySymbol and ArrayElement for array
expressions equivalent to MatrixSymbol and MatrixElement in the
matrix expression module
- Add class ZeroArray for array expressions of zero-valued
elements
- Make Array differentiation(derive_by_array) work with non sympy
expressions
- Added tensordiagonal( ) function to perform diagonalization of
array expressions
- Adding an array with any other type now consistently gives
NotImplemented
utilities:
- Added official support for using CuPy to GPU accelerate lambdify
functions
- Added Replacer class to simplify the creation of replacement
expressions with MatchPy
- Added tests for optional parameter in MatchPy patterns
- Added string printers for MatchPy-compatible wildcards in
sympy.utilities.matchpy_connector
- minlex no longer accepts is_set or small arguments
- minlex and least_rotation now accept key= arguments similar to
sorted
vector:
- Fixed a bug with integral over ImplicitRegion objects
other:
- Expanding documentation to include all class members with
docstrings
License-Update: Update year
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 71acc03cbde585335bce125d6018f29dc70509ca)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The only fallout by API/ABI changes in my world build was meta-games/scummvm.
Fix was sent [1]
fluidsynth 2.2.0
This release breaks ABI compatibility! Refer to the API docs for details.
A C++98 compliant compiler is now required to build fluidsynth (mailing list thread)
New features
Support loading SoundFonts >2GiB on Windows (#629)
Major overhaul of the sequencer and its event queue (#604)
Overlapping notes can be handled (#637)
Performance improvement, since the event queue no longer blocks the rendering thread
Time scale is not limited to 1000 anymore and can therefore be used for tempo changes
The following audio drivers have gained multi-channel support
DSound (#667, thanks to @jjceresa)
WaveOut (#667, thanks to @jjceresa)
The WinMIDI driver supports multiple devices (#677, thanks to @jjceresa)
Handle GS DT1 SysEx messages for setting whether a channel is used for rhythm part (#708, thanks to @chirs241097)
Support use of UTF-8 filenames under Windows (#718, thanks to @getraid-gg)
Improved support for overriding tempo of the MIDI player (#711, #713, thanks to @jjceresa)
Handle settings-related commands in user command file before initializing other objects (#739)
SoundFont loading has been parallelized (#746, #812, requires openMP)
The Oboe driver has gained a lower latency and other updates (#740, #741, #747)
WASAPI driver has been added (#754, thanks to @chirs241097)
General
Fix race condition in fluid_player_callback (#783, thanks to @arcln)
Improvements to LADSPA subsystem (#795, thanks to @mawe42)
[1] https://github.com/cazfi/meta-games/pull/58
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f186377359fa1f4db8e6c6a8a4f40f774591af8e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
In wpa_supplicant and hostapd 2.9, forging attacks may occur because
AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and
tls/x509v3.c.
References:
https://nvd.nist.gov/vuln/detail/CVE-2021-30004
Upstream patches:
https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15
Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e2bd6a52bf689b77b237eaee3067d2b0b6eee3d5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
