Due to pahole build depend on pahole, and libbpf added more architectures
to COMPATIBLE_HOST [1], add the same COMPATIBLE_HOST setting to pahole
$ echo "MACHINE = 'qemuloongarch64'" >> conf/local.conf
$ bitbake world
ERROR: Nothing PROVIDES 'libbpf' (but meta-openembedded/meta-oe/recipes-devtools/pahole/pahole_1.27.bb DEPENDS on or otherwise requires it)
libbpf was skipped: incompatible with host loongarch64-wrs-linux (not in COMPATIBLE_HOST)
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'pahole', 'libbpf']
[1] https://git.openembedded.org/meta-openembedded/commit/?id=bb8049afe96db57707afc259743e288bec456117
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
CVE-2017-6830 / CVE-2017-6834 / CVE-2017-6836 / CVE-2017-6838
Use patch from buildroot:
4a1a8277bb
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Debian has switched to this fork in Bookworm.
If contains dozens of CVE fixes and other bugfixes.
This should make the maintenance of this package easier.
The sources are identical to those abandoned in 2002:
Only in .../tmp/work/core2-64-poky-linux/libwmf/0.2.8.4/libwmf-0.2.8.4/: autom4te.cache
Only in /tmp/caolanm/libwmf/: .git
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This CVE is fixed by
aa673b2e4d
It is tracked as 'fixed in next version' - 7.1.2 (which does not exist)
in NVD DB.
.../tmp/work/core2-64-poky-linux/imagemagick/7.1.1-43/git$ git describe aa673b2e4defc7cad5bec16c4fc8324f71e531f1 --tags
7.1.1-18-4-gaa673b2e4d
.../tmp/work/core2-64-poky-linux/imagemagick/7.1.1-43/git$ git tag --contains aa673b2e4defc7cad5bec16c4fc8324f71e531f1 | head -n1
7.1.1-19
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* move version part after dash to PV
* set git tag regex
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
While recipe build depends on python3-beautifulsoup4-native and
python3-soupsieve-native, it failed at fix loop dependency error
...
|ERROR: Task virtual:native:meta-openembedded/meta-python/
recipes-devtools/python/python3-soupsieve_2.6.bb:do_populate_sysroot
has circular dependency on virtual:native:meta-openembedded/
meta-python/recipes-devtools/python/python3-beautifulsoup4_4.12.3.bb:do_populate_sysroot
...
Correct runtime depends as class-target override to workaround
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Pick commit based on [1].
Note that the pick is node from deskflow, which is open-source successor
of synergy.
If anyone uses thie recipe, it should be switched.
[1] https://github.com/deskflow/deskflow/security/advisories/GHSA-chfm-333q-gfpp
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This CVE is marked as fixed by Debian.
Extracting Debian jessie Debian sources [1] shows 4 commits uses for
backports. All these commits are already included in current hash
([2]-[5]).
../tmp/work/core2-64-poky-linux/rtmpdump/2.4/git$ git log | grep 'commit \(10b580aabcec1621b25518271ba1ab2b018be88e\|...\|4312322107a94c81d3ec5b98f91bc6b923551dc5\)'
commit 530f9bb2a02a78c1198fb2bf0293a12d225e4691
commit 4312322107a94c81d3ec5b98f91bc6b923551dc5
commit 39ec7eda489717d503bc4cbfaa591c93205695b6
commit 10b580aabcec1621b25518271ba1ab2b018be88e
[1] https://snapshot.debian.org/archive/debian/20170704T094954Z/pool/main/r/rtmpdump/rtmpdump_2.4%2B20150115.gita107cef-1%2Bdeb8u1.debian.tar.xz
[2] 10b580aabc
[3] 39ec7eda48
[4] 530f9bb2a0
[5] 4312322107
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* New features
Support watchpoint for global variables
Show man pages for the given command
Add utc_offset in the header info
* Bug fixes
Show arguments in libraries from dlopen
Save debug info for libraries from dlopen
Protect FD of communication channel from being closed
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
- Translations update: korean, chinese (traditional), portugese, russian,
dutch, kazakh, swedish, turkish, slovak, ukranian, spanish, french.
- Move the repository to the pallets-eco organization.
- Stop supporting Python 3.9 and start supporting Python 3.13
- Removed required flag support from HiddenWidget,RangeWidget and SelectWidget to
conform to W3C
- NoneOf and AnyOf can validate multiple valued fields like SelectMultipleField
- Use GHA and pre-commit workflows inspired from Flask.
- Fix SelectMultipleBase import.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- fix: Update run_with_catch log flushing
- feat: Write CACHEDIR.TAG file
- Upgrade setuptools to 75.3
- Upgrade setuptools to 75.5 and wheel to 0.45
- No longer forcibly echo off during windows batch activation
- feat: Write CACHEDIR.TAG file
- Upgrade to pip 24.3
- docs: fix the documentation typo on Extend Functionality page.
- Fix broken Windows zipapp and drop 3.7 support
- Skip $PATH entries we cannot check rather than dying with PermissionError
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests
- Allow to raise HTTPException before websocket.accept()
- Bump minimum python-multipart version to 0.0.13
- Change python-multipart import to python_multipart
- Revert bump on python-multipart on starlette[full] extras
- Raise ClientDisconnect on StreamingResponse
- Use ETag from headers when parsing If-Range in FileResponse
- Follow directory symlinks in StaticFiles when follow_symlinks=True
- Bump minimum python-multipart version to 0.0.18
- Bump minimum httpx version to 0.27.0
- Exclude the query parameters from the scope[raw_path] on the TestClient
- Replace dict by Mapping on HTTPException.headers
- Correct middleware argument passing and improve factory pattern
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- introduces a more generalized handling of potential denial of service attack
(DOS) due to recursion errors for deeply nested statements.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
