Commit Graph
13744 Commits
Author SHA1 Message Date
Etienne Cordonnier deca9342ab uutils-coreutils: disable buildpaths error
Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-29 20:59:15 -07:00
Alexandre Truong 631c69d853 pegtl: add ptest support
Test added to the fast-list.

Result of ptest-runner:

root@qemux86-64:~# ptest-runner pegtl
START: ptest-runner
2024-08-29T13:57
BEGIN: /usr/lib/pegtl/ptest
PASS: src/test/pegtl/pegtl-test-action_enable
PASS: src/test/pegtl/pegtl-test-action_match
PASS: src/test/pegtl/pegtl-test-actions_one
[...]
PASS: src/test/pegtl/pegtl-test-utf8_general
PASS: src/test/pegtl/pegtl-test-visit
PASS: All 128 tests passed
DURATION: 4
END: /usr/lib/pegtl/ptest
2024-08-29T13:57
STOP: ptest-runner
TOTAL: 1 FAIL: 0

NB: two tests are being skipped with a exception raised as support is disabled

Exception support disabled, skipping test...
PASS: src/test/pegtl/pegtl-test-internal_file_mapper
Exception support disabled, skipping test...
PASS: src/test/pegtl/pegtl-test-internal_file_opener

Signed-off-by: Alexandre Truong <alexandre.truong@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-29 09:37:50 -07:00
Wang Mingyu 9f818a0605 lastlog2: remove recipe since it has been merged into util-linux
The lastlog2 has been merged into util-linux:
https://github.com/thkukuk/lastlog2/commit/60bea9dcee0fa18ea3dce0372a14f5e4f177ada6

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-29 07:27:26 -07:00
Khem Raj dac3c9f062 mariadb: Upgrade to 10.11.9 release
Drop upstreamed patches
Fixes build with fmt11

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 18:15:26 -07:00
Wang Mingyu 27c1bc96af sanlock: upgrade 3.9.3 -> 3.9.4
Changelog:
===========
- fix time calculations for dead host
- change paxos_acquire error for initial host state
- fix for lver that was abandoned in dblock
- terminate helper path and args
- fix freeing lvb after io timeout
- add sysusers file
- rem_lockspace EBUSY when orphans exist
- fix SANLK_ACQUIRE_ORPHAN_ONLY

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:37 -07:00
Wang Mingyu 087dee7f79 rsyslog: upgrade 8.2406.0 -> 8.2408.0
Changelog:
============
- omkafka enhance: write Kafka log with level ERROR or higher into errorfile
- net subsusytem bugfix: some config statemens were not accepted
- new "ossl" crypto provider
- imtcp: improve connection error messages

0001-tests-disable-the-check-for-inotify.patch
use-pkgconfig-to-check-libgcrypt.patch
refreshed for 8.2408.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:37 -07:00
Wang Mingyu 4d253bca26 postgresql: upgrade 16.3 -> 16.4
0003-configure.ac-bypass-autoconf-2.69-version-check.patch
refreshed for 16.4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:32 -07:00
Wang Mingyu 1f7f46f5f5 pcsc-tools: upgrade 1.7.1 -> 1.7.2
Changelog:
==========
- 191 new ATRs
- provide meson configuration file
- improve pcsc_scan Windows support
- Use Ctrl-C also on Windows
- Windows can also use option -n
- better output on Windows dumb terminals
- minor fixes and improvements
- Initialize the reader state structure to 0
- smartcard_list: Add D-Trust Card 5.1/5.4 card

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:32 -07:00
Wang Mingyu eb44bf5e61 xdg-dbus-proxy: upgrade 0.1.5 -> 0.1.6
Changelog:
==========
* Use lower serial bits to differentiate proxy / client serials, and handle
  non-monotonically increasing serials better.
* Fix various GVariant reference leaks
* Don't require talk permission for broadcast rules
* Support sdbus clients

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:32 -07:00
Wang Mingyu d43d4b72e3 libei: upgrade 1.2.1 -> 1.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:31 -07:00
Wang Mingyu 634411e51b libbytesize: upgrade 2.10 -> 2.11
Changelog:
============
- remove dependency on python3-six and python2 crumbs
- dist: Fix release number in spec
- Squashed 'translation-canary/' changes from 4d4e65b..5bb8125
- ci: Bump actions/checkout from v3 to v4
- Rename 'master' branch to 'main'
- ci: Set custom release number for Packit
- ci: Update CentOS Stream repositories for Packit
- ci: Add dependabot to automatically update GH actions
- Update translation files
- Translated using Weblate
- infra: bump actions/upload-artifact from 3 to 4
- tests: remove unnecessary bash dependency

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:31 -07:00
Wang Mingyu 5fd783b439 lastlog2: upgrade 1.2.0 -> 1.3.1
Changelog:
==========
- pam_lastlog2: differentiate between three error cases
- Fix error handling of sqlite3_step
- Don't call exit() in a library
- Support 32bit time_t (but is not Y2038 safe!)
- lib/lastlog2: always use int64_t internal
- committed
- Fix minimum required meson version

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:31 -07:00
Wang Mingyu 1a64870822 hwdata: upgrade 0.384 -> 0.385
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:30 -07:00
Wang Mingyu 5febf58a8c fwupd: upgrade 1.9.22 -> 1.9.24
Changelog:
=========
Bugfix:
---------
- Add support for capsule on disk for Dell systems
- Do not re-use the connection cache to fix Redfish BMC restart
- Exclude known recovery partitions when choosing an ESP volume
- Fix the VLI usb3 private flag registration

Add suppoert:
-------------
- More Mediatek scaler devices
- Parade USB hubs

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:30 -07:00
Wang Mingyu 66147ab327 ctags: upgrade 6.1.20240804.0 -> 6.1.20240825.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:30 -07:00
Ricardo Simoes 83d9607ba5 magic-enum: Upgrade v0.9.5 -> v0.9.6
In version 0.9.6 issue #362 was fixed. Thus, the tweak in the compile
flags is no longer needed.

The checksum of the LICENSE file changed because the copyright range
was updated.

Changelog: https://github.com/Neargye/magic_enum/releases/tag/v0.9.6

Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com>
Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 01:25:41 -07:00
Martin Jansa 48e257b4c7 vdpauinfo: require x11 in DISTRO_FEATURES
It depends on libvdpau and libvdpau has:
inherit features_check
REQUIRED_DISTRO_FEATURES = "x11"

since:
commit 0055684612
Author: Armin Kuster <akuster808@gmail.com>
Date:   Tue Mar 6 17:27:30 2018 -0800
Subject: libvdpau: only include when x11 in DISTRO_FEATURES

the same restriction should be repeated here to avoid:
ERROR: Nothing PROVIDES 'libvdpau' (but meta-oe/meta-oe/recipes-graphics/vdpau/vdpauinfo_1.5.bb DEPENDS on or otherwise requires it)
libvdpau was skipped: missing required distro feature 'x11' (not in DISTRO_FEATURES)

Also add it to packagegroup-meta-oe and fix libvdpau there.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-27 07:17:10 -07:00
Dmitry Baryshkov 240a64be68 packagegroup-meta-oe: include deqp-runner into packagegroup-meta-oe-graphics
Include deqp-runner into the graphics packagegroup.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-27 07:17:10 -07:00
Dmitry Baryshkov 31a3c2499e deqp-runner: improved version of parallel-deqp-runner
Add recipe for the deqp-runner, an improved and currently developed
version of the parallel-deqp-runner program.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-27 07:17:09 -07:00
Ricardo Simoes a4cad069d2 directfb: Fix C++17 build warning
DirectFB explicitly supports usage of C++. With C++17 and later the below
warning is given:

lib/direct/util.h:223:19:
warning: ISO C++17 does not allow 'register' storage class specifier [-Wregister]
  223 |      register int ret = 0;
      |                   ^~~

To address that, this commit brings in the patch proposed by PR which
removes the usage of the register keyword:

https://github.com/deniskropp/DirectFB/pull/25

Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com>
Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-26 07:36:10 -07:00
Ricardo Simoes 3f825482d3 directfb: Add zlib PACKAGECONFIG
zlib was always enabled in DEPENDS and EXTRA_OEMAKE. Now it is
a PACKAGECONFIG which is enabled by default.

Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com>
Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-26 07:36:10 -07:00
Ricardo Simoes ebc0a3f2e2 directfb: Add freetype PACKAGECONFIG
freetype was always enabled in DEPENDS and EXTRA_OEMAKE. Now it is
a PACKAGECONFIG which is enabled by default.

Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com>
Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-26 07:36:10 -07:00
Ricardo Simoes 4553cbc127 directfb: Order PACKAGECONFIG alphabetically
Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com>
Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-26 07:36:09 -07:00
Jan Vermaete 727f38772d protobuf: version bump 4.25.3 -> 4.25.4
+ adding UPSTREAM_CHECK_GITTAGREGEX because `devtool latest-version` was
  going to the 28 release (what still in rc)

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-25 14:42:10 -07:00
Soumya Sambu 4bd9d757c1 gtk+: Fix CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a
library to be injected into a GTK application from the current working directory.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-6655

Upstream-patch:
https://gitlab.gnome.org/GNOME/gtk/-/commit/3bbf0b6176d42836d23c36a6ac410e807ec0a7a7

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-25 11:29:14 -07:00
Michael Trimarchi 58a923c968 cpuset: Add recipe for cpuset tool 1.6.2
Cpuset is a Python application that forms a wrapper around the
standard Linux filesystem calls to make using the cpusets facilities
in the Linux kernel easier. This can be used on linux realtime or
standard linux

Example

cset shield --cpu 2-3
echo c > /proc/irq/287/smp_affinity
irq=`ps | grep -m 1 "irq/287"  | awk '{ print $1 }'`
cset shield -s -p $irq --force
chrt -f -p 75 $irq

Signed-off-by: Michael Trimarchi <michael@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-25 09:02:19 -07:00
Khem Raj fa2398e999 libblockdev: Fix build with latest e2fsprogs
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-24 15:46:31 -07:00
Khem Raj 5d3486da55 libspatialite: Upgrade to 5.1
- Drop the libtool patch its already fixed in this version
- Add a patch to support libxml2 2.13+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-24 15:46:31 -07:00
Khem Raj 2f57fc64f4 raptor2: Do not use curl-config to detect curl
it fails in cross build environment, use pkg-config instead

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-24 15:46:31 -07:00
Jörg Sommer b0c91cdc2e zsh: update 5.8 -> 5.9
The patches for CVE-2021-45444 were applied upstream on 2022-02-12.

The snipped for do_install was taken from
https://salsa.debian.org/debian/zsh/-/blob/8cc745c38fba1d4ec3e5d66cffbeadd8b492c2ce/debian/rules#L132

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-23 22:35:10 -07:00
Tim Orling 72387262c3 python3-psycopg: add v3.2.1
Psycopg 3 is a modern implementation of a PostgreSQL adapter for Python.

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-23 22:35:10 -07:00
Yogita Urade 2cfb80b24c krb5: fix CVE-2024-26458 and CVE-2024-26461
CVE-2024-26458:
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in
/krb5/src/lib/rpc/pmap_rmt.c.

CVE-2024-26461:
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak
vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-26458
https://nvd.nist.gov/vuln/detail/CVE-2024-26461

Upstream Patch:
https://github.com/krb5/krb5/commit/c5f9c816107f70139de11b38aa02db2f1774ee0d

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-23 22:35:10 -07:00
Khem Raj fed622237f ftgl: Switch to maintained fork
As per [1], this repo is not being actively maintained therefore rebase
to a fork and pull request is also redirected.

[1] https://github.com/frankheckenbach/ftgl/pull/19#issuecomment-2306010295

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-22 22:39:53 -07:00
Jamin Lin c42a0fb650 drgn: add new recipe
drgn is a debugger with an emphasis on programmability
drgn exposes the types and variables in a program
for easy, expressive scripting in Python.

Drgn depends on:
1. python3
2. elfutils
3. openmp
a. clang toolchain should use libomp(openmp)
   from meta-clang
b. gnu gcc toolchain should use libgomp(gcc-runtime)
   from openembedded-core

The build requires:
1. setuptools
2. automake
3. autoconf
4. libtool
5. pkgconf

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-22 08:02:28 -07:00
Thomas Perrot 83c6d886f4 vdpauinfo: add recipe
vdpauinfo is a command-line tool that can query the capabilities
of the system's VDPAU implementation.

Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-22 08:02:27 -07:00
Hongxu Jia 32da6bfb0e nodejs: support cross compile without qemu user conditionally
Due to the scope of supported BSPs by qemu-user is limited, such
as a segment fault on armv9 after qemu apply commit [target/arm:
Convert LDAPR/STLR (imm) to decodetree][1]
```
|tmp-glibc/work/neoversen2-crypto-wrs-linux/nodejs/20.5.1/node-v20.5.1/out/
Release/v8-qemu-wrapper.sh: line 7: 3179613 Segmentation fault      (core dumped)
PSEUDO_UNLOAD=1 qemu-aarch64 -r 5.15 -L tmp-glibc/work/neoversen2-crypto-wrs-linux/
nodejs/20.5.1/recipe-sysroot -E LD_LIBRARY_PATH=tmp-glibc/work/neoversen2-crypto-wrs-linux/
nodejs/20.5.1/recipe-sysroot/usr/lib64:tmp-glibc/work/neoversen2-crypto-wrs-linux/
nodejs/20.5.1/recipe-sysroot/usr/lib64 "$@"
```

Upstream nodejs have cross compile support, but it needs host and target
have same bit width (e.g. a x86_64 host targeting arrch64 to produce a
64-bit binary). So:
1. If host and target have different bit width, build with QEMU user as usual;

2. If host and target have same bit width, enable notejs cross compile support:
- The build tools of nodejs is GYP[2], set CC_host, CFLAGS_host,
  CXX_host, CXXFLAGS_host, LDFLAGS_host, AR_host for host build
  which is separated with target build [3]
- Satisfy layer compatibility, set GYP variables in prefuncs of do_configure,
  do_compile and do_install other than in recipe parsing
- Add missing native packages to fix library missing on host build
- Rework libatomic.patch, explicitly link to libatomic for clang
  conditionally

[1] https://github.com/qemu/qemu/commit/2521b6073b7b4b505533a941d4f9600f7585dc78
[2] https://github.com/nodejs/node-gyp
[3] https://github.com/nodejs/node-gyp/blob/main/gyp/docs/UserDocumentation.md#cross-compiling

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-22 08:02:27 -07:00
Guocai He ddd322323e mariadb: File conflicts for multilib
File conflicts between attempted installs of mariadb and lib32-mariadb

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-22 08:02:27 -07:00
quic-raghuvar a29c6386d5 android-toold-adbd: Fix inconsistency between selinux configurations
ConditionPathExists is set to /etc/usb-debugging-enabled as part of meta-oe/recipes-devtools/android-tools/android-tools/android-tools-adbd.service file. However, in meta-oe/dynamic-layers/selinux/recipes-devtool/android-tools/android-tools/android-tools-adbd.service file ConditionPathExists is set to /var/usb-debugging-enabled

This causes an internal inconsistency between selinux-enabled and -disabled configurations.

Hence, change ConditionPathExists=/var/usb-debugging-enabled to ConditionPathExists=/etc/usb-debugging-enabled

Reported-by: @lumag
2024-08-22 17:19:42 +05:30
Khem Raj fc0264f0fd ftgl: Upgrade to 2.4.0
- Switch to git fork which has all the patches
- Fix build with freetype 2.13.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 14:10:58 -07:00
Niko Mauno 990955ba09 opensc: Cosmetic fixes
Apply some suggestions from oe-stylize.py and sort configure options
alphabetically, and remove stale version comment line which has not
been updated for some time.

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:47:07 -07:00
Niko Mauno cef49b830f opensc: Fix LICENSE declaration
According to https://github.com/OpenSC/OpenSC/wiki#license OpenSC is
licensed under LGPL-2.1 or later, which seems to be affirmed also by
the comments in the source code files, as well as the COPYING file.

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:47:06 -07:00
Niko Mauno f70274aa2b opensc: Drop virtual/libiconv from DEPENDS
According to
https://github.com/OpenSC/OpenSC/blob/0.25.1/NEWS#L1124-L1125
since version 0.12.0 the iconv dependency has been removed.

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:47:06 -07:00
Niko Mauno c066a6ff83 opensc: Add 'readline' PACKAGECONFIG option
This helps us to also get rid of associated RDEPENDS declaration which
implicitly pulled readline to rootfs, even configure resolved readline
as not enabled.

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:47:06 -07:00
Niko Mauno dac59629e9 opensc: Amend FILES:${PN} declaration
Commit da68f807bd added the symlink .so
path to FILES:${PN}-dev to fix QA error, complement the operation by
removing identical line from FILES:${PN}

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:47:06 -07:00
Yogita Urade 4534a0a077 poppler: CVE-2024-6239
A flaw was found in the Poppler's Pdfinfo utility. This issue
occurs when using -dests parameter with pdfinfo utility. By
using certain malformed input files, an attacker could cause
the utility to crash, leading to a denial of service.

CVE-2024-6239-0002 is the CVE fix and CVE-2024-6239-0001 is
dependent commit to fix the CVE.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-6239

Upstream patch:
https://gitlab.freedesktop.org/poppler/poppler/-/commit/0554731052d1a97745cb179ab0d45620589dd9c4
https://gitlab.freedesktop.org/poppler/poppler/-/commit/fc1c711cb5f769546c6b31cc688bf0ee7f0c1dbc

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:45:47 -07:00
Markus Volk 0edc4266ac flatpak: update 1.15.9 -> 1.15.10
Dependencies:

    In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.10.0 is required.
    This version adds a new feature which is required by the security fix in this release.

Security fixes:

    Don't follow symbolic links when mounting persistent directories (--persist option). This prevents a sandbox escape where a malicious or compromised app could edit the symlink to point to a directory that the app should not have been allowed to read or write. (CVE-2024-42472, GHSA-7hgv-f2j8-xw87)

Documentation:

    Mark the 1.12.x and 1.10.x branches as end-of-life (#5352)

Other bug fixes:

    Fix several memory leaks (#5883, #5884)

Internal changes:

    Record a log file when running build-time tests with AddressSanitizer (#5884)

    Add initial suppressions file for AddressSanitizer (#5884)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:45:47 -07:00
Markus Volk 8d0b921fb6 bubblewrap: update 0.9.0 -> 0.10.0
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:45:47 -07:00
Markus Volk a2237eec4d iwd: update 2.18 -> 2.19
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:45:47 -07:00
Markus Volk f67db7a4b9 webkitgtk3: update 2.44.2 -> 2.44.3
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:45:47 -07:00
Martin Jansa e05c983269 polkit-group-rule: package polkit rules
* broken since
  https://github.com/openembedded/meta-openembedded/pull/859
  which moved the files from ${sysconfdir} which is packaged
  in ${PN} by default into ${datadir} which isn't packaged causing:

ERROR: QA Issue: polkit-group-rule-network: Files/directories were installed but not shipped in any package:
  /usr
  /usr/share
  /usr/share/polkit-1
  /usr/share/polkit-1/rules.d
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
polkit-group-rule-network: 4 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 08:45:46 -07:00