0001-tools-make-quiet-actually-suppress-output.patch
CVE-2023-46752.patch
CVE-2023-46753.patch
CVE-2023-47234.patch
CVE-2023-47235.patch
removed since they're included in 9.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
-Fixed Segfault error when there is no package description.
-Added Info window after transaction.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Otherwise install packages reported warning at do_rootfs
...log.do_rootfs...
Installing : freeradius-ldap-3.0.26-r0.corei7_64 1235/1236
warning: user radiusd does not exist - using root
warning: group radiusd does not exist - using root
Installing : freeradius-krb5-3.0.26-r0.corei7_64 1236/1236
warning: user radiusd does not exist - using root
...log.do_rootfs...
The user/group radiusd is added by package freeradius,
explicitly made the sub packages to runtime depends on freeradius
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update:
Remove builtin copy of zlib
On GNU/Linux, *BSD or MacOS we can simply use the system default
library. The copy was primarily only there for the Windows build.
The build script for Windows has now been adapted to download and
compile a shared library from a tarball.
This removes a huge chunk of code from the git tree as well as
the release tarballs. Additionally it gets rid of iffy things like
removing the Zlib copyright/version strings, so the libsquashfs DLL
doesn't export it.
Changelog:
Added
* Make it possible for gensquashfs to add xattrs from a description file
* Make it possible for gensquashfs to specify file sorting order
* Support . and .. directory browsing support in sqfs_dir_reader_t
* Add sqfs_tree_node_get_path to libsquashfs
Fixed
* Only use actually available CPUs in gensquashfs and tar2sqfs
* Overzealous bounds check in the libsquashfs block processor (#110)
* In sqfs_compressor_create, clear the output pointer on error (#110)
* Typo in gensquashfs and tar2sqfs block count statistics (#108)
* Hard link resolution: report error if path cannonicalization fails
* Documentation: signedness of the directory header inode number
* Seek position in libsquashfs meta data reader erroneously out-of-bounds
* Memory leak in libfstree error path
* Double-free in libfstree error path
Changed
* Allow NULL pointer for sqfs_destroy, sqfs_dir_tree_destroy
* Use 32 bit hard link counter in libfstree instead of just 16 bit
* Internal cleanup and restructuring
* Upgrade autotools version
* Check in autogen.sh if the required tools are available
* Trigger a build failure if no compressor library is available
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Note that patch 0011-modules... is no longer needed as it's included in
the upgrade as well.
CVE: CVE-2023-43622
Signed-off-by: Dylan Turner <dylan.turner@ni.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
SRCREV_FORMAT should append to default for considering both git
repositories.
the git hook scripts require shell to be installed on target and
it may want it from /usr/bin/sh and distro may not provide /usr/bin/sh
since its not having usrmerge distro feature.
Fixes
ERROR: nlohmann-json-3.11.2-r0 do_package_qa: QA Issue: /usr/lib/nlohmann-json/ptest/json_test_data/.git/hooks/update.sample contained in package nlohmann-json-ptest requires /usr/bin/sh, but no providers found in RDEPENDS:nlohmann-json-ptest? [file-rdeps]
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The PipeWire project is immensely proud to announce the 1.0 release
of PipeWire.
It is API and ABI compatible with previous 0.3.x releases.
"PipeWire represents the next evolution of audio handling for Linux, taking
the best of both pro-audio (JACK) and desktop audio servers (PulseAudio) and
linking them into a single, seamless, powerful new system."
- Paul Davis, JACK and Ardour author
"What exciting times! PipeWire 1.0 is the culmination of 15 years of
Linux audio expertise, blending lessons from PulseAudio into a high-performance,
flexible, and user-friendly foundation for audio and multimedia on Linux.
I'm looking forward to the next decade of progress in the free software
consumer and professional audio space!."
- Arun Raghavan, PulseAudio developer/maintainer.
"I'm thrilled to witness the first stable release of PipeWire after five years
of collaboration with its remarkable community, pushing the boundaries of
multimedia integration in the Linux ecosystem one step further.”
- George Kiagiadakis, WirePlumber author
"From the beginning of the libcamera project, we have always seen
PipeWire as the solution to handle desktop and mobile integration and
give a seemless multimedia integration to users while providing security
features and resource sharing between applications."
- Kieran Bingham, libcamera author
Happy Holidays!
Highlights
- Fix a memfd/dmabuf leak when uploading buffers while shutting down.
- Handle concurrent jack_port_get_buffer() calls because ardour seems to
be doing this.
- Improve time reporting (less jitter) in ALSA when using IRQ.
- Many doc improvements.
PipeWire
- Respect PIPEWIRE_DLCLOSE everywhere, remove pw_in_valgrind().
- Remove a warning when a client tries to change ignored properties.
Modules
- Fix a memfd/dmabuf leak when uploading buffers while shutting down.
- Fix a potential segfault when copying mix structures. (#3658)
- Avoid races in setrlimit in module-rt.
- Fix a memory leak in filter-chain.
- Set rtp.ptime on senders, not receivers.
- The ROC modules were ported to ROC 0.3
SPA
- Improve time reporting (less jitter) in ALSA when using IRQ. (#3657)
- Add latency param query in libcamera.
- Fix some compiler warnings.
- The EVL plugin was updated.
Bluetooth
- LC3 codec and compatibility improvements.
Pulse server
- Fix emission of events when a sink/source state changes. (#3660)
JACK
- Improve transport and time handling. Use unique ids to make consistent
snapshots of the current time and transport.
- Avoid enumerating port params that we are not going to use.
- Optimize buffer reuse.
- Handle concurrent jack_port_get_buffer() calls because ardour seems to
be doing this. (#3632)
Docs
- Many doc improvements.
- Add man pages for pw-dump, pw-loopback, modules, pipewire-pulse.
- Manpages are now made with Doxygen.
- Add docs for pulse-modules
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The Makefile uses pkg-config if USE_SYSTEMD is "yes".
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Put sip_monitor, sip_reg and sip_storm in a separate libexosip2-tools
package as they won't be needed most of the time.
Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
They are enabled by default as libexosip2 works better with those.
Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Fixed a vulnerability in charon-tkm related to processing DH public values
that can lead to a buffer overflow and potentially remote code execution.
- The new `pki --ocsp` command produces OCSP responses based on certificate
status information provided by plugins.
- The cert-enroll script handles the initial enrollment of an X.509 host
certificate with a PKI server via the EST or SCEP protocols.
- The --priv argument for charon-cmd allows using any type of private key.
- Support for nameConstraints of type iPAddress has been added (the openssl
plugin previously didn't support nameConstraints at all).
- SANs of type uniformResourceIdentifier can now be encoded in certificates.
- Password-less PKCS#12 and PKCS#8 files are supported.
- A new global option allows preventing peers from authenticating with trusted
end-entity certificates (i.e. local certificates).
- ECDSA public keys that encode curve parameters explicitly are now rejected by
all plugins that support ECDSA.
- charon-nm now actually uses the XFRM interfaces added with 5.9.10, it can
also use the name in connection.interface-name.
- The resolve plugin tries to maintain the order of installed DNS servers.
- The kernel-libipsec plugin always installs routes even if no address is found
in the local traffic selectors.
- Increased the default receive buffer size for Netlink sockets to 8 MiB and
simplified its configuration.
- Copy the issuer's subjectKeyIdentifier as authorityKeyIdentifier instead of
always generating a hash of the subjectPublicKey.
- Fixed issues while reestablishing multiple CHILD_SAs (e.g. after a DPD
timeout) that could cause a reqid to get assigned to multiple CHILD_SAs with
unrelated traffic selectors.
- Fixed a possible infinite loop issue in watcher_t and removed WATCHER_EXCEPT,
instead callbacks are always invoked even if only errors are signaled.
- Fixed a regression in the IKE_SA_INIT tracking code added with 5.9.6 when
handling invalid messages.
- Fixed adding the XFRMA_REPLAY_ESN_VAL attribute twice when updating SAs.
- Correctly encode SPI from REKEY_SA notify in CHILD_SA_NOT_FOUND notify if
CHILD_SA is not found during rekeying.
- The testing environment is now based on Debian 12 (bookworm), by default.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
-Adds missing parameters to Panel.fit
-Some text goes missing during wrapping when it contains double width characters
-Ensure font is correctly inherited in exported HTML
-Fixed typing for FloatPrompt.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
-uprev pydantic-core to 2.14.3
-Fix package description limit
-Fix ValidateCallWrapper error when creating a model which has a
@validate_call wrapped field annotation
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=============
-Create virtualenv for conda base Python. #2409
-Log the response text when pdm publish fails with HTTP error.
-Improve the error message when a specific package can't be found in the lockfile.
-prevent wrong project name (including space and illegal characters)
-Fix a bug that PDM cannot detect namespace packages correctly when creating symlinks.
-Fix template files created by pdm init being read-only when copied from a read-only PDM installation.
-Don't reset the build backend when asking for import.
-Never wrap the output of the export command.
-Forbid global project in conda base environment, since it may remove conda-managed packages.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=============
-Reconnect race condition in ReconnectLDAPObject is now fixed
-Socket ownership is now claimed once we've passed it to libldap
-LDAP_set_option string formats are now compatible with Python 3.12
-Security Policy was created
-Broken article links are fixed now
-Bring Conscious Language improvements
-Add testing and document support for Python 3.10, 3.11, and 3.12
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
-Update pyav plugin to reflect AV changes
-Unpin Pillow and allow versions >=10.1.0
-Support for AVIF image format
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
-Fixed a regression in Django 4.2 that caused a crash of QuerySet.aggregate()
with aggregates referencing expressions containing subqueries (#34798).
-Restored, following a regression in Django 4.2, creating
varchar/text_pattern_ops indexes on CharField and TextField with
deterministic collations on PostgreSQL (#34932).
-CVE-2023-46695: Potential denial of service vulnerability in UsernameField on Windows
-Fixed a regression in Django 4.2.5 where overriding the deprecated
DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings in tests caused the main
STORAGES to mutate (#34821).
-Fixed a regression in Django 4.2 that caused unnecessary casting of string
based fields (CharField, EmailField, TextField, CICharField, CIEmailField, and
CITextField) used with the __isnull lookup on PostgreSQL.
-CVE-2023-43665: Denial-of-service possibility in django.utils.text.Truncator
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
-New PREFER_MONTH_OF_YEAR setting (#1146)
-Absolute years in Russian are no longer being treated as a number of years in
the past (#1129)
-Removed the use of datetime.utcnow, deprecated on Python 3.12 (#1179)
-Applied Black formatting to the code base (#1158)
-Initial integration with OSSFuzz (#1198)
-Extended test cases (#1191)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-Fix-Werror-enum-int-mismatch-in-lws_tls_server_abort.patch
removed since it's included in 4.3.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
support C++20 and C++23 standards, and vendored version output
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
-fixes bugs that stopped the Obex Push server from automatically accepting files
from paired devices and caused the device's Connection switch to appear out of
sync with the connection state.
-build fixes
-updated translations
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- This marks the 20th anniversary of the initial ExifTool release!
- Added ability to read/delete C2PA CAI JUMBF metadata from TIFF-based images
(eg. DNG), QuickTime-based files (eg. MP4) and WebP images, and read JUMBF
from other RIFF-based files (eg. WAV, AVI), GIF images and ID3v2 metadata
- Added read/write support for JPH images
- Added ability to read Leica Q3 maker notes
- Added ability to recognize and write FujiFilm M-RAW RAF images (multiple raw
images in a single file) and the ability to read preview-less RAF images
- Added support for reading a number of obscure Microsoft EXIF tags
- Added a few new Sony lenses and support for the ILCE-9M3
- Added a couple of new Panasonic Leica lenses
- Added a couple of new Canon RF lenses
- Added a number of new CPUType values for ELF executables
- Added some new Olympus CameraType values
- Decode a few more ID3v2.2 tags (github #142)
- Decode a few new Canon G5X Mark II tags
- Decode WB_RGGBLevels for a few more Nikon cameras
- Extract information from FujiFilm M-RAW header
- Improved decoding of a few Nikon Z tags
- Marked misspelt XMP-drone-dji:GPSLongtitude tag to Avoid when writing
- Changed RIFF MaxDataRate conversion to use SI prefixes by default
- Fixed decoding of unknown ColorBalance information for some Nikon models
- Fixed an incorrect Nikon Z LensID
- API Changes:
- Added ByteUnit option
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
-Fix /etc/hosts processing performance with all entries using same IPaddress.
-Fix typos in manpages
-Fix OpenWatcom building
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
A backported patch has been removed as it is no longer needed.
License-Update: Relicensed as MPL-2.0
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to latest master.
ecae6c6 Change path_get_basename arg to const too
acecac3 Change path_get_basename()'s return type to const char*
83600e9 restore: Fix UaF
85ea337 asr: Fix sending payload without checksum
10c15d5 Fix update restore by making sure the premanifest is properly generated
6085ed7 Print progress for large components (e.g. Cryptex)
f87ab8b .gitignore: Add src/idevicerestore.exe
8664de0 Print device Product and Build Version and IPSW Product and Build Version
c871c59 Extract OS component when using older ipsw archives
4072cd9 tss: Add USBPortController1,* entries to parameters
503bdd0 Improve debug output by suppressing libimobiledevice and libirecovery debug output by default
6806495 restore: Also print checkpoint warning messages
f17f520 restore: Add Ace3 as known updater name to suppress error message
523e567 restore: Skip adding FirmwareData to FirmwareResponseData for Rose
7e5860d restore: Improve checkpoint log output again, make sure to always check for errors
1405a9f restore: Refine checkpoint log output
e4e5512 restore/tss: Prefer DeviceGeneratedRequest for Rose TSS request, and add missing tag
064daea restore: Add new SE,ChipID 0x36 to list of known values
ca76f44 restore: Attributed status code 50 with SEP load failure
c96f60b restore: Handle SepStage1 (SEPPatchImageData) in NORImageData
cf22a1c tss: Add Ap,SikaFuse to TSS request as seen for iPhone 14/15 devices
dbe7313 Refactor ipsw code to transparently stream images directly from ZIP or extracted ipsw
17969ef [github-actions] Updated to use upload-artifact@v3
cc9c68e autoconf: Link against libusbmuxd too
9546654 [github-actions] Updated to use checkout@v3
5a00bbd tss: Make missing ApNonce non-fatal for IMG3
7943b63 normal: Don't do unpair before entering recovery mode, remove pairing record afterwards instead
4191036 restore: Remove plist debug print for non-existent UniqueBuildID
c8b9f3e fdr: Fix a debug log message
9b9bba7 tss: Bump auth client version to match iOS 16.5
ed5463a Add generic TSS request generator
a351513 Add SE,ChipID 0x2C
da22dd4 Display iBoot boot stage
73438a6 Add support for incoherent iBoot parameters
609f7f0 Use DeviceGeneratedRequest plist for SE TSS requests
Signed-off-by: Potin Lai <potin.lai.pt@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to latest master.
2cd858c test: use unique output file names across tests
d45396a Prevent adding NULL items to array/dictionary nodes
2d8d7ef Plug memory leak in plist_write_to_stream()
f28cf0f Add explicit casts and fix return type mismatches
d772fd7 Add an explicit PLIST_FORMAT_NONE value
50255a2 autoconf: Remove unused function checks and fix constructor/destructor attribute check
21a432b bplist: Move realloc from parse_unicode_node() into plist_utf16be_to_utf8()
b7d7459 Make sure function signatures match their declarations in the public header
ff00100 Windows: Use winsock2.h instead of sys/time.h when using MSVC
af51970 Add space before PRI* macros, some compilers do not like it
91c0aa8 Move PLIST_API to the headers
834bb31 Silence another false 'shadows builtin function' warning on MinGW
ff842f7 Silence false 'shadows builtin function' warning on MinGW
1d45b85 Silence more compiler warning on 32bit systems
57a7f14 Silence compiler warning on 32bit systems
954b3e4 Update doxygen config and document undocumented macros
4d08422 autoconf: small update to configure.ac
5d65599 autoconf: Allow disabling build of test suite
61f01b1 Add a PLIST_OPT_NONE value to plist_write_options_t
Signed-off-by: Potin Lai <potin.lai.pt@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
