Details: https://nvd.nist.gov/vuln/detail/CVE-2023-3297
The vulnerability is triggered by a patch added by Ubuntu, and the vulnerable patch is
not present in the recipe.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 071a45c9d76c9a222c8fbaa50089a8af44f44e74)
Adapted to Kirkstone
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
The current version 46.0 is not affected by the issues.
Both issues have been fixed in commit [0].
The fix is in effect since early versions of evince (3.1.2).
Thus, both can be safely ignored.
[0]: efadec4ffc
Signed-off-by: Alexandre Truong <alexandre.truong@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 492b1b1adc1c546efd10b659d220a810736cc04a)
Reworked for Kirkstone (CVE_STATUS -> CVE_CHECK_IGNORE)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This package uses MIT license, which is very similar to X11, except that
X11 license has an advertisement clause, which is missing from the MIT.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d2b5523333b762c32e70de36237e2d8e93096189)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
In case gtk2 PACKAGECONFIG is enabled, do_package task fails
with the following error:
ERROR: ibus-1.5.26-r0 do_package: QA Issue: ibus: Files/directories were installed but not shipped in any package:
/usr/lib/gtk-2.0/2.10.0/immodules/im-ibus.so
This patch adds the missing folder to the FILES variable.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c87c5d5614bf5d5255e031abe32ea681968a6d75)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
it encoded PYTHON variable during build which otherwise points to python
on build host which is not correct for cross compiled packages.
Add missing dependency on python3-core which is needed for ibus-setup
script to run
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fe0e3d77eb1a992c487038e64b734b2b8b395647)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
==========
- scale: Make OK button default (allows pressing Enter to accept selected
value)
- Fix maximum width of message dialogs to 60 characters, and make message
dialogs non-resizable (fixes regression from 3b64d05e)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit abe91b6f51cd2237e0a8243bcde3dbb7e5fd21cb)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
0001-daemon-PATH-expand-the-sftp-backend-ssh-client.patch
included in 1.50.3
Changelog:
===========
* dav: Prevent usage of NULL when user is not specified
* ftp: Fix hangs when the connection is released
* fuse: Decrease file handle reference when open file fail
* sftp: PATH-expand the ssh client
* test: Several smaller enhancements
* backend: Add support for xx-large and x-large thumbnails
* goa: Prevent automounts when resuming from suspension
* Translation updates (GNOME Translation Project contributors)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d11db37985f0b28ed8a5e95cf22876a17646ca45)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
The gvfs project meson configuration attempts to locate and resolve the
path to an ssh-client on the build host, then pass that full-path to the
gvfs sftp-backend as a constant string, to be used at runtime to fork
ssh subprocesses.
As a consequence, if the build machine's ssh client path differs from
the gvfs target's path - as is common for OE/buildroot builds - gvfs can
fail at runtime. Further, build machines cannot configure gvfs without
an ssh client, even though nothing *uses* the client during the build.
The .patch in this commit has been upstreamed with gvfs, and modifies
the configuration to instead pass the string-literal `ssh` to the sftp
backend. With this change, gvfs will instead rely on PATH-expansion to
locate the user's ssh-client at runtime.
This obviates the requirement that the build machine have an ssh-client.
Signed-off-by: Alex Stewart <alex.stewart@ni.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b3ace96246ed13320e8fc21b59ce92512aa8c843)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Use multiline styling in the gvfs DEPENDS variable assignment, so that
diffs are easier to understand.
Also alpha-sort the DEPENDS, since their order isn't meaningful.
Signed-off-by: Alex Stewart <alex.stewart@ni.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9e725dfee3a6fa6d8efef9522a787b9b4893bafc)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
==========
* smb: Rework anonymous handling to avoid EINVAL
* http: Unescape prefix to fix handling of encoded URIs
* build: Fix build without Avahi support
* dav: Drop user from URI as a workaround for Nextcloud bug
* dav: Port DNS-SD resolver to async API to fix hangs when mounting
* smb: Ignore EINVAL for kerberos/ccache login
* dav: Rewrite to libsoup async API to fix crashes
* dav: Do not lose userinfo when copying URIs
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 92d4a5374b3100aed5606c2e759cacab9273c62e)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
==========
• Fix a crash at shutdown after saving state. This didn't cause any data
loss, but could be annoying.
• Spellcheck underline fixes for various languages
• Various robustness fixes for GTK 4
• Fixes for inconsistent line-endings
• Translation updates
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 46fce3997be65a3895ed6619d32131c1e63aeac9)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
==========
* Fix bug: text cut off at the bottom in certain situations.
* Translation updates.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f550d1fe6a149b88f610b1a57493aa0d3a77693f)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
correct the package version in configure.ac
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit adf3de70b24092ff3fe618cde3fee7226fb26522)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Add parameter 'downloadfilename' to SRC_URI to keep the downloaded file
name as same as before.
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 556b85216342b10510ac8230471e450086851a84)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This version fixes duplicate devices appearing when bluetoothd restarts, as well
as the discovery not being updated correctly in that same situation.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a30bc18ffdc137823d13824af5400bf0e8517309)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This version fixes the display of devices with '&' in their names, and contains
updated translations.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2687e9dbec14776ab4a1a6747cdfd12316767311)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
==========
- Various fixes ported from the development branch.
- Closed bugs and merge requests:
* gi/arg-cache.cpp: Fix building on Visual Studio
* doc: Reflect support for constructor with GObject
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 757dedbc811bf3f09e259353a943effd1ae16733)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
===========
- Various fixes ported from the development branch.
- Closed bugs and merge requests:
* Compilation error: call to deleted function 'js_value_to_c'
* jsapi-util-strings: Ignore locale to compute the upper case of a
char (i.e. fix implicit properties on Turkish locale)
* Fix memory leak when passing a "transfer none" GBytes parameter to a
native function
* arg-cache: Do not leak an interface info structures on Callbacks
* test-ci: Ignore safe directory errors on CI
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 352fb4051f2584e4f28fc60348772dc99df29b7d)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
