20978 Commits

Author SHA1 Message Date
Changqing Li
b707efaf8a postgresql: fix CVE-2021-23214,CVE-2021-23222
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8e57fb9b1e4da504ceeaadcff2fe38555a47b6b6)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-28 12:51:07 -08:00
Trevor Gamblin
7e8de0e57e python3-django: upgrade 3.2.5 -> 3.2.10
From the release notes page
(https://docs.djangoproject.com/en/4.0/releases/3.2.10/):

Django 3.2.10 fixes a security issue with severity “low” and a bug in
3.2.9.

CVE-2021-44420: Potential bypass of an upstream access control based on
URL paths
HTTP requests for URLs with trailing newlines could bypass an upstream
access control based on URL paths.

Bugfixes
Fixed a regression in Django 3.2 that caused a crash of setUpTestData()
with BinaryField on PostgreSQL, which is memoryview-backed (#33333).

Django 3.2.9 fixes a bug in 3.2.8 and adds compatibility with Python
3.10.

Bugfixes
Fixed a bug in Django 3.2 that caused a migration crash on SQLite when
altering a field with a functional index (#33194).

Django 3.2.8 fixes two bugs in 3.2.7.

Bugfixes
Fixed a bug in Django 3.2 that caused incorrect links on read-only
fields in the admin (#33077).
Fixed a regression in Django 3.2 that caused incorrect selection of
items across all pages when actions were placed both on the top and
bottom of the admin change-list view (#33083).

Django 3.2.7 fixes a bug in 3.2.6.

Bugfixes
Fixed a regression in Django 3.2 that caused the incorrect offset
extraction from fixed offset timezones (#32992).

Django 3.2.6 fixes several bugs in 3.2.5.

Bugfixes
Fixed a regression in Django 3.2 that caused a crash validating "NaN"
input with a forms.DecimalField when additional constraints, e.g.
max_value, were specified (#32949).
Fixed a bug in Django 3.2 where a system check would crash on a model
with a reverse many-to-many relation inherited from a parent class
(#32947).

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 446a503acf6854b3357571044f396e6815f6bd9e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-28 12:49:25 -08:00
Peter Kjellerstedt
ae34f8f8e4 googletest: Switch branch from master to main
The master branch has been renamed to main in the github repo.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-18 11:23:46 -08:00
Peter Kjellerstedt
37b9a7a114 gattlib: Explicitly disable Python support
Under some configuration, CMake may pick up the existence of python
from the native recipe sysroot and use that when linking for target,
resulting in the following error:

  ld: .../recipe-sysroot-native/usr/lib/libpython3.10.so: error adding
  symbols: file in wrong format

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-18 11:23:41 -08:00
Oleksandr Kravchuk
a12eff7e3f fb-test: fix SRC_URI
Original repo doesn't exist any more. Even though I couldn't find any
new official repo, this is the only one on github that contains used
commit hash.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c57e4d5faa3d1c4b23173a4f26b2cd1aff846b34)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:14:59 -08:00
Ross Burton
1a81088730 python3-pyzmq: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 57647ea0d6b87a02bf812192ae39f2d81644b744)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:11:36 -08:00
Ross Burton
8b5bfb2e00 python3-posix-ipc: remove spurious dependencies
pip isn't needed to build, and adding the empty string to RDEPENDS is
most certainly meaningless.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 57ae325941d3a71eaeeca107ecef69d664a3f710)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:11:14 -08:00
Ross Burton
2def8912aa python3-posix-ipc: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 4b526f42ed8db2c45bdfa7d1ba0a37e444676e1f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:10:23 -08:00
Ross Burton
f9707f700e python3-lxml: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Also update the HOMEPAGE.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 45e5b27db6f34cefeb4d66197161fbfa9ebd476a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:09:52 -08:00
Ross Burton
46026cd6ec python3-gevent: update license
gevent is MIT, and it embeds copies of Python which is Python-2.0.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 91b516cc80ea9f46cdf94bd4ce6a168c240b5c58)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:04:55 -08:00
Ross Burton
c035aa28e0 python3-gevent: use system libraries instead of embedding
gevent by default will build its own c-ares and libuv, but that build
needs patches and embedded libraries are bad form.

DEPEND on the recipes instead, and turn off embedding.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 2d63ec9476690a0da648c805dc3fdb9b0201bbbb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:04:25 -08:00
Ross Burton
a9a50f06e1 python3-crypto-vectors: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit cf172e66fe8f0ba6f676beb1eae6efb7c00d8b1a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:03:07 -08:00
Ross Burton
85bd225978 python3-cryptography: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 378dbb135b4ce6f44cf647e8aa08f01497c160cb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:02:44 -08:00
Ross Burton
9e0bf0c3b0 pcsc-lite: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2755ba786a1d8e54b065320b7a35bfe8f31ef847)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:01:54 -08:00
Ross Burton
bc97389fa8 libkcapi: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c8384c874f804d591427ab1d70b08a7881285b15)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 21:01:36 -08:00
Ross Burton
806ebd9314 nodejs: set precise BSD license
"BSD" is ambiguous, use the precise licenses BSD-2-Clause and BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4004a2279e11287407d820b997bb043b6ffe6fa7)
[Fixed up for Honistor context]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 20:58:31 -08:00
Ross Burton
163d3489c5 sg3-utils: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-2-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3e5651b6b4027ffa768492ed4083c4220b4e59e6)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 20:55:30 -08:00
Ross Burton
017674dbe8 dash: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 09aa844891f7ffae50a8ad7112c8f64737df17f0)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 20:53:29 -08:00
Ross Burton
b712b3a1e3 xmlrpc-c: set precise BSD license
"BSD" is ambiguous, use the precise license BSD-3-Clause.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 11af3bd25062bd63b4c00918e4f08cf6813ae7de)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 20:52:54 -08:00
Ross Burton
ca687218ba imlib2: clarify license
Imlib2 has its own special license, so use that instead of MIT & BSD.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d085c4e1d29345bcc5f32f54646be381aeb83908)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 20:52:13 -08:00
Sean Nyekjaer
2cd24bd20d msgpack-cpp: fix msgpack-cpp is a header only library
${PN} is empty so don't let the -dev package RDEPEND on it

Signed-off-by: Sean Nyekjaer <sean.nyekjaer.ext@siemensgamesa.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b8a8fbaf7df3d52acf02e7a3eec97ffd57acabf3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 20:51:37 -08:00
Luca Boccassi
8739e7ae8f lvm2: do not install systemd units/initscripts when building native SDK tools
Nothing picks them up, so the build fails. Required to be able to build
native tools like systemd-analyze.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit defbcad66fc1e91117ba08bf1051035188e40b37)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-08 20:50:52 -08:00
Jeremy Puhlman
f632403d18 ifenslave: switch from master to main
master branch has been removed from upstream

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-30 14:27:58 -08:00
Martin Jansa
f31b9854b1 sdbus-c++: don't fetch googletest during do_configure
* replace the solution from:
  6c74740048
  with the one from upstream (branch name would need to be changed in
  git://github.com/google/googletest.git;protocol=https;branch=master;name=gtest;destsuffix=git/tests/googletest-src
  anyway and better to use the upstream fix in all branches - dunfell, gatesgarth, hardknott need
  a similar fix now when master branch is gone)

* with PTEST_ENABLED it enables with-tests PACKAGECONFIG which
  instead of using system googletest gmock, tries to fetch googletest
  from github and fails because branch was recently renamed from master to main

| -- Found PkgConfig: /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/recipe-sysroot-native/usr/bin/pkg-config (found version "0.29.2")
| -- Checking for module 'libsystemd>=236'
| --   Found libsystemd, version 249
| -- Building with tests
| Fetching googletest...
| [1/9] Creating directories for 'googletest-populate'
| [1/9] Performing download step (git clone) for 'googletest-populate'
| Cloning into 'googletest-src'...
| fatal: invalid reference: master
| CMake Error at googletest-subbuild/googletest-populate-prefix/tmp/googletest-populate-gitclone.cmake:40 (message):
|   Failed to checkout tag: 'master'
|
|
| FAILED: googletest-populate-prefix/src/googletest-populate-stamp/googletest-populate-download
| cd /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/build/_deps && /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/recipe-sysroot-native/usr/bin/cmake -P /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/build/_deps/googletest-subbuild/googletest-populate-prefix/tmp/googletest-populate-gitclone.cmake && /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/recipe-sysroot-native/usr/bin/cmake -E touch /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/build/_deps/googletest-subbuild/googletest-populate-prefix/src/googletest-populate-stamp/googletest-populate-download
| ninja: build stopped: subcommand failed.
|
| CMake Error at /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/recipe-sysroot-native/usr/share/cmake-3.19/Modules/FetchContent.cmake:989 (message):
|   Build step for googletest failed: 1
| Call Stack (most recent call first):
|   /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/recipe-sysroot-native/usr/share/cmake-3.19/Modules/FetchContent.cmake:1118:EVAL:2 (__FetchContent_directPopulate)
|   /OE/tmp-glibc/work/qemux86-oe-linux/sdbus-c++/0.8.3-r0/recipe-sysroot-native/usr/share/cmake-3.19/Modules/FetchContent.cmake:1118 (cmake_language)
|   tests/CMakeLists.txt:17 (FetchContent_Populate)
|
|
| -- Configuring incomplete, errors occurred!

* unfortunately this backported patch fixes the fetching failure, because
  it uses release-${GOOGLETEST_VERSION} tag instead of now non-existent
  master branch, but is not enough to prevent fetching from github during
  do_configure:

  -- Building with tests
  -- Could NOT find GTest (missing: GTest_DIR)
  -- Checking for module 'gmock>=1.10.0'
  --   No package 'gmock' found
  Fetching googletest...

  we also need to add googletest dependency to with-tests PACKAGECONFIG was fixed in meta-oe/master with the upgrade to 1.0.0:
  b26b66e5da (diff-48a847e7323703994fd2ce0fcb731ff860fa955a77cdfe39d71a9cc84a042c06L15)

  then it's ok and not fetching:

  -- Building with tests
  -- Looking for pthread.h
  -- Looking for pthread.h - found

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-18 07:34:55 -08:00
Armin Kuster
ad52a41de8 recipes: remove tabs and spaces in SRC_URI
Missed tabs and spaces in the SRC_URI during
'Update SRC_URI branch and protocols' translation.

[V2]
Fix typo in imagemagick, change "gitk" to "git"

[v3]
Give a typo, fix a typo

[V4]
Give a commit summary (it was there in v2), but now there is only:

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-10 07:04:55 -08:00
Khem Raj
72ae082b21 python3-kivy: Use branch parameter in SRC_URI
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 671f9d7b2d06d3bfa4b3c7d34da9473b05bcf5f4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-06 11:05:56 -07:00
Armin Kuster
1659d38199 recipes: Update SRC_URI branch and protocols
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

I tried backporting Richard's master change but there where many merge conflicts.
I went the lazy route and ran the script.
This is work based on "b402a3076 recipes: Update SRC_URI branch and protocols"

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-06 11:00:13 -07:00
Yi Zhao
49241b481b libssh: use https instead of git in SRC_URI
Set protocol to https as the git protocol doesn't work for this repo:

$ git clone git://git.libssh.org/projects/libssh.git
Cloning into 'libssh'...
fatal: unable to connect to git.libssh.org:
git.libssh.org[0: 78.46.21.5]: errno=Connection timed out
git.libssh.org[1: 2a01:4f8:201:2294::2]: errno=Network is unreachable

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2f9851fffbc0a8ba10f9c9d7e4e5d5cee7825697)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-06 10:45:18 -07:00
Khem Raj
13d18b0853 mtr: Explicitly use branch= in SRC_URI
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b66ad223244977acd2ec38ab38b7ed896fb80429)
[Fixup for honister context]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-06 10:44:14 -07:00
Armin Kuster
e886fc0cba Apache: Several CVE fixes
Source: Apache.org
MR: 113457, 113453
Type: Security Fix
Disposition: Backport from apache.org 2.4.51
ChangeID: 9d7b58f49487baff99bf8f101e53217425a2b81f
Description:

Bug fix only update. LTS version
https://httpd.apache.org/security/vulnerabilities_24.html

Fixes CVEs:
CVE-2021-42013
CVE-2021-41524
CVE-2021-41773

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c59ce3299e8ed52a520a95f0bc0d0996b1cc37df)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-26 12:47:10 -07:00
Yi Zhao
74d9770221 strongswan: upgrade 5.9.3 -> 5.9.4
Add openssl PACKAGECONFIG back as the openssl 3.0 compatibility issue
has been fixed.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cb08584d8c9e8e1fd9436d3e9466bcb088086de5)
[Includes: CVE-2021-41990 and CVE-2021-41991]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 08:14:53 -07:00
Matthias Schiffer
9033794dee byacc: switch to official HTTPS mirror
FTP does not always work in corporate networks. Switch to the HTTPS URL
mentioned on the tool's homepage. The same URL is also used by FreeBSD [1].

[1] https://cgit.freebsd.org/ports/tree/devel/byacc/Makefile?id=b128c1dbf3e8fbada5f753631041bf93ac51bf4d

Signed-off-by: Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d79ca2ebc434f7c89892b2dbb79c038d74e5ce2b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 08:13:44 -07:00
zangrc
8cb8c9cea8 ser2net: upgrade 4.3.3 -> 4.3.4
Fix a few minor annoyances.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 082e1599e559c3c93e2d38459c779d377fcda142)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 08:09:45 -07:00
zangrc
733bc5257c networkmanager-openvpn: upgrade 1.8.14 -> 1.8.16
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fd0cd13f423d0278727b6b83f59729b90da36952)
[Bug fix only update]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 08:08:40 -07:00
wangmy
6b83ca6c86 span-lite: upgrade 0.10.1 -> 0.10.3
Fixes:

Properly constrain constructor from iterators
(https://github.com/martinmoene/span-lite/issues/69)
Add [noreturn] to throw_out_of_range()
(https://github.com/martinmoene/span-lite/issues/73)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d46c811305ec13554d0ec0ddc973af2f4b33d7e7)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 08:05:05 -07:00
wangmy
feb4ef9fe8 redis: upgrade 6.2.5 -> 6.2.6
Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

(CVE-2021-41099) Integer to heap buffer overflow handling certain string
commands and network payloads, when proto-max-bulk-len is manually configured
to a non-default, very large value [reported by yiyuaner].
(CVE-2021-32762) Integer to heap buffer overflow issue in redis-cli and
redis-sentinel parsing large multi-bulk replies on some older and less common
platforms [reported by Microsoft Vulnerability Research].
(CVE-2021-32687) Integer to heap buffer overflow with intsets, when
set-max-intset-entries is manually configured to a non-default, very large
value [reported by Pawel Wieczorkiewicz, AWS].
(CVE-2021-32675) Denial Of Service when processing RESP request payloads with
a large number of elements on many connections.
(CVE-2021-32672) Random heap reading issue with Lua Debugger [reported by
Meir Shpilraien].
(CVE-2021-32628) Integer to heap buffer overflow handling ziplist-encoded
data types, when configuring a large, non-default value for
hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries
or zset-max-ziplist-value [reported by sundb].
(CVE-2021-32627) Integer to heap buffer overflow issue with streams, when
configuring a non-default, large value for proto-max-bulk-len and
client-query-buffer-limit [reported by sundb].
(CVE-2021-32626) Specially crafted Lua scripts may result with Heap buffer
overflow [reported by Meir Shpilraien].
Bug fixes that involve behavior changes:

GEO* STORE with empty source key deletes the destination key and return 0 (#9271)
Previously it would have returned an empty array like the non-STORE variant.
PUBSUB NUMPAT replies with number of patterns rather than number of subscriptions (#9209)
This actually changed in 6.2.0 but was overlooked and omitted from the release notes.
Bug fixes that are only applicable to previous releases of Redis 6.2:

Fix CLIENT PAUSE, used an old timeout from previous PAUSE (#9477)
Fix CLIENT PAUSE in a replica would mess the replication offset (#9448)
Add some missing error statistics in INFO errorstats (#9328)
Other bug fixes:

Fix incorrect reply of COMMAND command key positions for MIGRATE command (#9455)
Fix appendfsync to always guarantee fsync before reply, on MacOS and FreeBSD (kqueue) (#9416)
Fix the wrong mis-detection of sync_file_range system call, affecting performance (#9371)
CLI tools:

When redis-cli received ASK response, it didn't handle it (#8930)
Improvements:

Add latency monitor sample when key is deleted via lazy expire (#9317)
Sanitize corrupt payload improvements (#9321, #9399)
Delete empty keys when loading RDB file or handling a RESTORE command (#9297, #9349)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c48feb5f184738e88e9dac4e4f9d8598743f7109)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 08:04:34 -07:00
wangmy
c61d6336c9 openvpn: upgrade 2.5.3 -> 2.5.4
2021.10.04 -- Version 2.5.4

Antonio Quartulli (3):
      route.c: pass the right parameter to IN6_IS_ADDR_UNSPECIFIED
      configure: search also for rst2{man, html}.py
      networking: add networking API net_addr_ll_set() and use it on Linux

Arne Schwabe (1):
      Move examples into openvpn-examples(5) man page

David Korczynski (1):
      Fix argv leaks in add_route() and add_route_ipv6()

David Sommerseth (2):
      doc: Use generic rules for man/html generation
      man: Clarify IV_HWADDR

Gert Doering (1):
      Add error reporting to get_console_input_win32().

Lev Stipakov (3):
      Fix console prompts with redirected log
      Add building man page on Windows
      GitHub Actions: remove Ubuntu 16.04 environment

Max Fillinger (1):
      Update Fox e-mail address in copyright notices

Selva Nair (1):
      Minor doc correction: tls-crypt-v2 key generation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1bcc09e8ff56c63da448862a852fd5ea17683acb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 08:01:20 -07:00
Alexander Thoma
80ab48eaa7 keyutils: fix install path
Signed-off-by: Alexander Thoma a.thoma@rational-online.com
Signed-off-by: Florian Wühr f.wuehr@rational-online.com
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 953f6a227406fde2c2228f94c39107826af1d3b0)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 07:58:18 -07:00
Khem Raj
4b3a6bec0c python3-behave: Switch to using github src_uri
1.2.6 release does not have fixes to work with setuptools 0.58+
the patches are part of github 1.2.7 pre-release, until the release
comes out switch to using github

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 55534f9d10210120d47ad18526fadf77a752a83c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-14 13:53:05 -07:00
zangrc
516fcc1ca6 python3-transitions: upgrade 0.8.9 -> 0.8.10
Release 0.8.10 is a minor release and contains two bug fixes for the HSM extension and changes how the 'self' literal string is handled.

- Feature #545: The literal 'self' (default model parameter of `Machine`) has been replaced by the class variable `Machine.self_literal = 'self'`. `Machine` now performs an identity check (instead of a value check) with `mod is self.self_literal` to determine whether it should act as a model. While 'self' should still work when passed to the `model` parameter, we encourage using `Machine.self_literal` from now on. This was done to enable easier override of `Machine.__eq__` in subclasses (thanks @VKSolovev).
- Bug #547: Introduce `HierarchicalMachine.prefix_path` to resolve global state names since the HSM stack is not reliable when `queued=True` (thanks @jankrejci).
- Bug #548: `HSM` source states were exited even though they are parents of the destination state (thanks @wes-public-apps).

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 46132922023490e5ed2063467eeeeffb284d4d4d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-14 13:52:17 -07:00
zangrc
d9d48625ef python3-openpyxl: upgrade 3.0.8 -> 3.0.9
Bugfixes
Ignore blank ignored in existing Data Validations
Add support for cell protection for merged cell ranges
Timezone-aware datetimes raise an Exception
Improved normalisation of chart series
Catch OverflowError for out of range datetimes
Alignment.relativeIndent can be negative
Incorrect default value groupBy attribute

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 18f4c0b5e8aba27edd5758b7dce5e632ce924aee)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-14 13:51:29 -07:00
zangrc
3f8453eb11 python3-jdatetime: upgrade 3.6.2 -> 3.6.4
-License-Update: Update PKG-INFO.

[3.6.4] - 2021-09-15
Add
Add date.min based on cpython implementation
Add date.max based on cpython implementation
[3.6.3] - 2020-12-11
Change
Run test and publish package from github action

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit a4724fc450c5f987d45287a5e5b50a549cb58cbf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-14 13:50:57 -07:00
zangrc
c3d40bb2cf python3-ipython: upgrade 7.27.0 -> 7.28.0
Here is a non-exhaustive list of changes,

Fixes:
async with doesn’t allow newlines PR #13090
Dynamically changing to vi mode via %config magic) PR #13091
Virtualenv handling fixes:
init_virtualenv now uses Pathlib PR #12548
Fix Improper path comparison of virtualenv directories PR #13140
Fix virtual environment user warning for lower case pathes PR #13094
Adapt to all sorts of drive names for cygwin PR #13153

New Features:
enable autoplay in embed YouTube player PR #13133

Documentation:
Fix formatting for the core.interactiveshell documentation PR #13118
Fix broken ipyparallel’s refs PR #13138
Improve formatting of %time documentation PR #13125
Reword the YouTubeVideo autoplay WN PR #13147

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit b067418e86633794f37a56e0aa639650f62b2fcf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-14 13:50:29 -07:00
Martin Jansa
33c00e34fc pahole: use MACHINE_ARCH
* depends on MACHINE_ARCH libbpf causing:

  oe-core$ openembedded-core/scripts/sstate-diff-machines.sh --tmpdir=tmp-glibc --machines="qemux86 qemux86copy qemuarm" --targets=pahole --analyze

   === Comparing signatures for task do_configure.sigdata between qemux86 and qemux86copy ===
  ERROR: pahole different signature for task do_configure.sigdata between qemux86 and qemux86copy
  NOTE: Reconnecting to bitbake server...
  Hash for dependent task pahole/pahole_1.22.bb:do_prepare_recipe_sysroot changed from bfa7a0e0c59d99b0133ab295ebf7025a430242d4b8874d436d47cf8157192999 to e45ada248cd757d742872183d9fe426a7ce3b44a652b0900709ad3d0f3f64aa8
  Unable to find matching sigdata for /OE/build/oe-core/meta-openembedded/meta-oe/recipes-devtools/pahole/pahole_1.22.bb:do_prepare_recipe_sysroot with hashes bfa7a0e0c59d99b0133ab295ebf7025a430242d4b8874d436d47cf8157192999 or e45ada248cd757d742872183d9fe426a7ce3b44a652b0900709ad3d0f3f64aa8

  ERROR: 1 errors found in /OE/build/oe-core/tmp-glibc/sstate-diff/1633081392/signatures.qemux86copy.do_configure.sigdata.log

  oe-core$ bitbake-diffsigs tmp-glibc/sstate-diff/1633081392/qemux86*/core2-32-oe-linux/pahole/*prepare_recipe_sysroot*
  NOTE: Starting bitbake server...
  NOTE: Started PRServer with DBfile: /OE/build/oe-core/cache/prserv.sqlite3, Address: 127.0.0.1:38435, PID: 21321
  Hash for dependent task libbpf/libbpf_0.5.bb:do_populate_sysroot changed from 95bfd90e188d9ee6b4797736b07339d616655173a58a3f4f4f2ab4a5fa0bf3d8 to 9556bc318991640bba0eacc8f2102167bc7c389c13dadf08d69a9b864feae5c9
  Unable to find matching sigdata for /OE/build/oe-core/meta-openembedded/meta-oe/recipes-kernel/libbpf/libbpf_0.5.bb:do_populate_sysroot with hashes 95bfd90e188d9ee6b4797736b07339d616655173a58a3f4f4f2ab4a5fa0bf3d8 or 9556bc318991640bba0eacc8f2102167bc7c389c13dadf08d69a9b864feae5c9

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3630c30185dd5a3dc29b10a3ccbe40f19ad9aa93)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-12 09:45:25 -07:00
Trevor Gamblin
e57eb164ab python3-posix-ipc: Add recipe for version 1.0.5
Port the recipe from meta-openstack and do an uprev to 1.0.5.

Original recipe is here:

http://git.yoctoproject.org/cgit/cgit.cgi/meta-cloud-services/tree/meta-openstack/recipes-devtools/python/python3-posix-ipc_1.0.4.bb

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f2152d79043601eacb70da1a3ab36f5ac56f3e28)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-11 07:19:52 -07:00
LiweiSong
70ad85c925 Revert "chipsec: platform security assessment framework"
This reverts commit ae1705aad57a80a1122ebef117ea689d7307171f.

move chipsec to meta-security.

Signed-off-by: Liwei Song <liwei.song@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8c7eb54ddec2c0f31f659a0d7f5b61f4a82b1af1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-11 07:19:52 -07:00
Yi Zhao
449a3c17ea samba: upgrade 4.14.7 -> 4.14.8
Release notes:
https://www.samba.org/samba/history/samba-4.14.8.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fd3aca5ccf2f42a465e1d13f5c5ffd22a409e9c8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-11 07:19:44 -07:00
Peter Bergin
41e4341061 pipewire: rework PACKAGECONFIG for systemd service files
pipewire project have config option to enable installation of systemd
user and/or system services. Before update of pipewire to current version
(02de7746) only system service files was added, after update both user
and system service files was added. This commit will make it possible to
configure which service files that is wanted. Default PACKAGECONFIG is
to add systemd service files as it was before version upgrade.

Yocto systemd class currently does not handle user service files during package
and those files are only installed in rootfs but user service is not enabled as a
system service is.

Another use case is where you want your own service files and can disable the
default ones from pipewire and add your own in a bbappend.

Signed-off-by: Peter Bergin <peter@berginkonsult.se>
(cherry picked from commit 3b0458715178a0e0f4d8d0255d1ad2cd71f90041)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-08 17:23:52 -07:00
Peter Bergin
9fa4691e3d pipewire: also handle pipewire-media-session in systemd class
For the package pipewire-media-session there is a service file
specified with SYSTEMD_SERVICE:${PN}-media-session but the package
was not added to SYSTEMD_PACKAGES and not handled in do_package by
systemd bbclass.

Signed-off-by: Peter Bergin <peter@berginkonsult.se>
(cherry picked from commit c87e19f8710f4affa4161a73614feb917f46864f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-08 17:23:52 -07:00
Peter Bergin
f47ef02c18 pipewire: remove manpages class
The manpages feature is disabled and can not be configured through
PACKAGECONFIG. No need to inherit manpages bbclass.

Signed-off-by: Peter Bergin <peter@berginkonsult.se>
(cherry picked from commit 2069a96531b6a981bc1da85319a5cc3ce831ead3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-08 17:23:52 -07:00