summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2023-09-28python3-pycryptodome: upgrade 3.18.0 -> 3.19.0Wang Mingyu
Changelog: ========== - The update() methods of TupleHash128 and TupleHash256 objects can now hash multiple items (byte strings) at once. Thanks to Sylvain Pelissier. - Added support for ECDH, with Crypto.Protocol.DH. - GH#754: due to a bug in cffi, do not use it on Windows with Python 3.12+. (From OE-Core rev: 2eccf033c0093b16a846eda3476ff29c4db6ef61) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28python3-hypothesis: upgrade 6.84.3 -> 6.86.2Wang Mingyu
Changelog: =========== -Hotfix for issue #3747, a bug in explain mode which is so rare that we missed it in six months of dogfooding. -This patch improves the documentation of @example(...).xfail() by adding a note about PEP 614, similar to @example(...).via(), and adds a warning when a strategy generates a test case which seems identical to one provided by an xfailed example. -This release enables the explain phase by default. -This patch switches some of our type annotations to use typing.Literal when only a few specific values are allowed, such as UUID or IP address versions. -This release deprecates the old whitelist/blacklist arguments to characters(), in favor of include/exclude arguments which more clearly describe their effects on the set of characters which can be generated. -You can use Hypothesis; codemods to automatically upgrade to the new argument names. (From OE-Core rev: e7302ee78e0b7f24740a665ba1a3d16987b08036) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28python3-numpy: upgrade 1.25.2 -> 1.26.0Wang Mingyu
License-Update: split license file in standard BSD 3-clause and bundled. Changelog: ========== Python 3.12.0 support. Cython 3.0.0 compatibility. Use of the Meson build system Updated SIMD support f2py fixes, meson and bind(x) support Support for the updated Accelerate BLAS/LAPACK library (From OE-Core rev: 7a8ff35670254579c6a68b77852503647e3dfad7) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28gobject-introspection: upgrade 1.78.0 -> 1.78.1Wang Mingyu
Changelog: Avoid undefined behaviour in the Regress test suite (From OE-Core rev: 27299339c2b0ddd3d2a2fdac4ae63d37dc8c600a) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28libsecret: upgrade 0.21.0 -> 0.21.1Wang Mingyu
Changelog: =========== * Fix updating credentials by another process in the same Flatpak sandbox [#62, !99] * Migrate to g_memdup2 [!121] * Print error logs in CI [!125] * Updated translations (From OE-Core rev: 8d22d9ecf2f64a726c23a5a7bca166b293461dee) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28kbd: upgrade 2.6.2 -> 2.6.3Wang Mingyu
(From OE-Core rev: 67f367901d32c858bb9f2280f9cd08dcdcb0949d) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28harfbuzz: upgrade 8.2.0 -> 8.2.1Wang Mingyu
Changelog: Unicode 15.1 support. (From OE-Core rev: 878ae9cc02a865953201575840027e0577b372f4) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28enchant2: upgrade 2.5.0 -> 2.6.1Wang Mingyu
Changelog: ========== -This version tweaks normalization of language tags so that only the part of the tag that specifies country and language is altered; any extra that is not removed is left alone. -This version removes validation of language tags; dictionary names no longer have to be valid language tags. -Debug output now uses GLib's debug system, and can be enabled at run-time by setting the environment variable G_MESSAGES_DEBUG to 'libenchant'. -The Aspell back-end has a fix to let it work with language variants such as "en_GB-ize". -There's more code clean-up, build system updates, and a couple of null -pointer dereference fixes (From OE-Core rev: a0aa3a7211a44b6d152efd1c576dd78e313424b1) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28at-spi2-core: upgrade 2.48.4 -> 2.50.0Wang Mingyu
Changelog: =========== * Fix at-spi2-atk test when running under a non-English locale. * collection: Avoid locking up if an object has a very large child count * Fix possible NULL pointer dereference when deregistering an event listener. * Various fixes for the new key grabbing API. * Don't wait for a reply when registering or deregistering keystroke listeners. * Add a meson option to exclude the gtk2 atk-bridge module. * Fix a test failure/timeout. * Add atspi_get_version() to return the runtime version of the library. * Collection: fix match testing for attributes. * Fix a NULL pointer dereference when deregistering an event listener that doesn't include a detail. * Fix the documentation for interfaces in collection match rules. * Add an AtspiLive enum to specify the politeness level for live regions, and document that this should be used for Announcement signals. Also add a notification signal in atk to replace the announcement signal that lacks the politeness information. * Add an asynchronous version of atspi_generate_mouse_event. * TableCell.xml: Add Get{Column,Row}HeaderCells methods * atspi_accessible_get_localized_role_name: Use internal names when possible. * Add a non-recursive function to clear a single object's cache. * Code clean-ups. (From OE-Core rev: 12912febdd5490c283576be36284f90e99eecff3) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-28cve-check: add CVSS vector string to CVE database and reportsAntoine Lubineau
This allows building detailed vulnerability analysis tools without relying on external resources. (From OE-Core rev: 048ff0ad927f4d37cc5547ebeba9e0c221687ea6) Signed-off-by: Antoine Lubineau <antoine.lubineau@easymile.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27llvm: Upgrade to 17.0.2Khem Raj
* 481358974fb0 [GVN] Also remove phi nodes from VN table (PR65447) * 9f77e96186be [GVN] Invalidate MDA when deduplicating phi nodes * a13a89402f53 Bump version to 17.0.2 * 2c04bdb24677 [SVE] Ensure SVE call operands passed via memory are correctly initialised. (#66070) * 701620d58cdf [SVE] Precommit test to show missing initialisation of call operand. (From OE-Core rev: c2e059a036ac5c4d2cb3c7267be2403e0611dea5) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27glib-2.0: Remove failing ptests on muslKhem Raj
FAIL: glib/convert.test (Child process killed by signal 6) FAIL: glib/collate.test (Child process killed by signal 6) FAIL: glib/gdatetime.test (Child process killed by signal 6) FAIL: glib/date.test (Child process killed by signal 6) FAIL: glib/converter-stream.test (Child process killed by signal 6) FAIL: glib/option-context.test (Child process killed by signal 6) (From OE-Core rev: a28e0d41fbb5027aa6d2537288a8acc7d53964e7) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27glib-2.0: Enable possible locales with musl for ptestsKhem Raj
(From OE-Core rev: ea2849af1c56ff2d26d6a9458323233111051a38) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27systemd: Refresh patches to avoid patch-fuzzKhem Raj
(From OE-Core rev: eb8a86fee9eeae787cc0a58ef2ed087fd48d93eb) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27systemd: Drop two upstreamed musl patchesKhem Raj
(From OE-Core rev: 7eea9e63a155c9ed30706cc7926a6728d629bd5e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27maintainers.inc: add python3-spdx-tools and dependenciesSamantha Jalabert
Add maintainers for new packages and also some copied from meta-python: python3-beartype, python3-booleanpy, python3-click, python3-isodate, python3-license-expression, python3-rdflib, python3-spdx-tools, python3-uritools, python3-xmltodict (From OE-Core rev: 8028e8a58684de981646077e8a206ad8132da358) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27qa: Add selftest for python3-spdx-toolsSamantha Jalabert
(From OE-Core rev: e766fe7a9391cc9348d92ab704ec58c4806e38c6) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-spdx-tools: add recipeSamantha Jalabert
python3-spdx-tools provides tools for SPDX validation and conversion. (From OE-Core rev: 4482435d82a5e44c500715d5db0cd05f9876e5f4) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27ptest-packagelists.inc: add python test xmltodictSamantha Jalabert
Adding test to slow, as it comes as dependency of SDK packages. (From OE-Core rev: 5ee30e484f976327562ee9872f79b8759966e115) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-xmltodict: Copy recipe from meta-pythonSamantha Jalabert
commit: 61d14138c22a70188d585d85e35fdf86bc65e66f (From OE-Core rev: 1c5bbd919cf9c431ca2520cbb21a5cb8b8a190a0) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-uritools: add recipeSamantha Jalabert
(From OE-Core rev: dafa7dd756dea0a1dbeb0f0eff1856516e64e8cb) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-rdflib: add homepageMarta Rybczynska
(From OE-Core rev: 012351fd4fd58ce87a72800e533fc733e4b37180) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-rdflib: Copy recipe from meta-pythonSamantha Jalabert
commit: 7e565b5c0c09a9cd7c27eb24f8fb45a746469279 (From OE-Core rev: b8ee52ee86042a4e9b4cce46ac603fbd930cd5b4) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27ptest-packagelists.inc: add python test license-expressionSamantha Jalabert
Adding test to the list of tests with problems. It comes as a copy from meta-python to satisfy dependencies of python3-spdx-tools and throws and exception on execution. (From OE-Core rev: 4247474286d55db285a56af7aaa700c2cc75adf3) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-license-expression: Copy recipe from meta-pythonSamantha Jalabert
commit: cabfde8c84e100968bc9ab8407ede616100fddbb (From OE-Core rev: 84d07b09582b69653f11ec025a5074055483a97f) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27ptest-packagelists.inc: add python test clickSamantha Jalabert
Adding test to slow, as it comes as dependency of SDK packages. (From OE-Core rev: cb674e78cdaeea356fe2cf2f6a8b098e4fb6da50) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-click: Copy recipe from meta-pythonSamantha Jalabert
commit: 1a14a28f132a10e9db7b3e5bb2b5361c4679946e (From OE-Core rev: 05eb1b2feff36ab7d1525febf644316bd57a1299) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-beartype: add recipeSamantha Jalabert
(From OE-Core rev: 432d75629297c53a87195d74a722df09511011ab) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-booleanpy: Copy recipe from meta-pythonSamantha Jalabert
commit: 47b8c97b76b3eb323a97c9079fb49c0348a2376c (From OE-Core rev: 384e76199066321402d52c15499d1877b03957bb) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-isodate: add homepageMarta Rybczynska
(From OE-Core rev: 750fb88ee734eea7cb06dc67724b7fc9e5b50991) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-isodate: Copy recipe from meta-pythonSamantha Jalabert
commit: 33b910b51cea2eee57f197a2e9697dd81a9dd67b (From OE-Core rev: ccedcb033fe562fcdd21e2baa5db7eed1427b3ea) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-27python3-ply: add to nativesdkMarta Rybczynska
This will be needed by the new spdx-tools recipe. (From OE-Core rev: 3bf44122bd7d0c182162d15e4d1bfc5e353e6602) Signed-off-by: Marta Rybczynska <mrybczynska@syslinbit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26bitbake: fetch2: Adds vscode devcontainer supportMatthias Schnelte
Visual studio code is injecting a git credential helper into every dev container. This helper is forwarding the git credentials from the host into the container. In order for this helper to work the REMOTE_CONTAINERS_IPC needs to be available in the environment for all git operations that require authentication. (Bitbake rev: 612bdf09416ff96d08b22cf92b077516d23d0963) Signed-off-by: Matthias Schnelte <develop@schnelte.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26bitbake: bitbake/lib: spawn server/worker using the current Python interpreterRoss Burton
The user may have invoked ./bin/bitbake using a different Python interpreter than whatever python3 is on $PATH (for example, explicitly using a different version). However, as the server and workers are spawned directly they'll use the hashbang and thus a different Python. We also ensure that argv[0] is set to sys.executable instead of 'bitbake-server' or 'bitbake-worker', so that sys.executable is set to the right value inside the child. Without this the server won't be able to start any workers. (Bitbake rev: b44d5d2a53d3082c8ce94e09c0cf833e33e25aec) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26bitbake: bitbake-getvar: Make --value imply --quietPeter Kjellerstedt
It does not make any sense to get log output from bitbake-getvar when the --value option is used as the log output is sent to stdout and thus interferes with the output of the variable's value. (Bitbake rev: 6b7883533af9c14d80a9f1ae5142644f155b5dee) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26bitbake: bitbake-getvar: Make --quiet work with --recipePeter Kjellerstedt
Initializing Tinfoil with setup_logging = False only has an effect when recipe parsing is not needed. To make it work regardless of if --recipe is used, manipulate the quiet parameter to Tinfoil.prepare() instead. (Bitbake rev: 71ee69a20f21f3d37f4f060a7d8e87d9f1dc6aa1) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26bitbake: tinfoil: Do not fail when logging is disabled and full config is usedPeter Kjellerstedt
If Tinfoil is initialized with setup_logging = False and Tinfoil.prepare() is called with config_only = False, then it fails because self.localhandlers is only initialized when setup_logging = True. This is seen with, e.g., `bitbake-getvar -q -r busybox MACHINE`: Traceback (most recent call last): File ".../bitbake/bin/bitbake-getvar", line 41, in <module> tinfoil.prepare(quiet=2) File ".../bitbake/lib/bb/tinfoil.py", line 390, in prepare for handler in self.localhandlers: AttributeError: 'Tinfoil' object has no attribute 'localhandlers'. Did you mean: 'oldhandlers'? (Bitbake rev: 616101ddb630e2c9975022068b52a87c4cf647f6) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26systemd-boot-cfg: add .conf suffix to default entry labelCharles-Antoine Couret
Since systemd v245 (commit 6cd12ebcfe459466257ea63022a32515d756e719), systemd-boot expects default entry to have the complete filename as value. LABELS from poky are by default without any suffixes like "boot install", so default entry does not have the .conf suffix as well and systemd-boot is not able to use this information and it's starting in any case the first entry. To be able to start another entry by default, .conf suffix is required. With this change, LABELS variable can still be used by other bootloaders and being used as description field. (From OE-Core rev: 1adf70729dafc9729e665986ad2e2250cbd25c5b) Signed-off-by: Charles-Antoine Couret <charles-antoine.couret@mind.be> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26webkitgtk: reduce size of -dbg packageRoss Burton
Unless DEBUG_BUILD is enabled, pass -g1 to massively reduce the size of the debug symbols (4.3GB to 700M at time of writing): Level 1 produces minimal information, enough for making backtraces in parts of the program that you don't plan to debug. This includes descriptions of functions and external variables, and line number tables, but no information about local variables. This makes the sstate objects a lot more manageable, and packaging faster. On my machine: PKG TASK ABSDIFF RELDIFF WALLTIME1 -> WALLTIME2 webkitgtk do_compile -613.8s -21.7% 2823.3s -> 2209.5s webkitgtk do_package -143.4s -53.6% 267.7s -> 124.3s webkitgtk do_install -93.7s -60.1% 156.0s -> 62.3s webkitgtk do_populate_sysroot -51.6s -86.4% 59.7s -> 8.1s Cumulative walltime: -892.9s -26.5% 56:06.3 (3366.3s) -> 41:13.4 (2473.4s) (From OE-Core rev: 8361411ea0d67a2620680e2e86045799e072c80a) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26bind: update to 9.18.19Lee Chee Yang
release notes: https://downloads.isc.org/isc/bind9/9.18.19/doc/arm/html/notes.html#notes-for-bind-9-18-19 Security Fixes Previously, sending a specially crafted message over the control channel could cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. This has been fixed. (CVE-2023-3341) ISC would like to thank Eric Sesterhenn from X41 D-Sec GmbH for bringing this vulnerability to our attention. [GL #4152] A flaw in the networking code handling DNS-over-TLS queries could cause named to terminate unexpectedly due to an assertion failure under significant DNS-over-TLS query load. This has been fixed. (CVE-2023-4236) ISC would like to thank Robert Story from USC/ISI Root Server Operations for bringing this vulnerability to our attention. [GL #4242] Removed Features The dnssec-must-be-secure option has been deprecated and will be removed in a future release. [GL #4263] Feature Changes If the server command is specified, nsupdate now honors the nsupdate -v option for SOA queries by sending both the UPDATE request and the initial query over TCP. [GL #1181] Bug Fixes The value of the If-Modified-Since header in the statistics channel was not being correctly validated for its length, potentially allowing an authorized user to trigger a buffer overflow. Ensuring the statistics channel is configured correctly to grant access exclusively to authorized users is essential (see the statistics-channels block definition and usage section). [GL #4124] This issue was reported independently by Eric Sesterhenn of X41 D-Sec GmbH and Cameron Whitehead. The Content-Length header in the statistics channel was lacking proper bounds checking. A negative or excessively large value could potentially trigger an integer overflow and result in an assertion failure. [GL This issue was reported by Eric Sesterhenn of X41 D-Sec GmbH. Several memory leaks caused by not clearing the OpenSSL error stack were fixed. [GL #4159] This issue was reported by Eric Sesterhenn of X41 D-Sec GmbH. The introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs UPDATE policies accidentally caused named to return SERVFAIL responses to deletion requests for non-existent PTR and SRV records. This has been fixed. [GL #4280] The stale-refresh-time feature was mistakenly disabled when the server cache was flushed by rndc flush. This has been fixed. [GL #4278] BIND’s memory consumption has been improved by implementing dedicated jemalloc memory arenas for sending buffers. This optimization ensures that memory usage is more efficient and better manages the return of memory pages to the operating system. [GL #4038] Previously, partial writes in the TLS DNS code were not accounted for correctly, which could have led to DNS message corruption. This has been fixed. [GL #4255] Known Issues There are no new known issues with this release. See above for a list of all known issues affecting this BIND 9 branch. (From OE-Core rev: 29cc2203b06b12d4c93ffc1fb56f1754f6982e80) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26glibc: fix CVE-2023-4527Yash Shinde
Upstream-Status: Backport[https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=4ea972b7edd7e36610e8cde18bf7a8149d7bac4f] (From OE-Core rev: 66b6133b5e623f39d9c26dae3097035dafd41f60) Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26debugedit: Use musl-legacy-errorKhem Raj
Use error.h to provide GNU extentions for error API Drop the patch trying to do something about it (From OE-Core rev: b621363ab52669afc2915544b5686cc4fe455d5e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26elfutils: Depend on musl-legacy-error for musl targetsKhem Raj
this ensures a gnu compatible error APIs are made available, the patch to workaround this is no longer needed. (From OE-Core rev: 07b17f387dd70f25adb2f3159c64707bfa3291f5) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26musl-legacy-error: Add recipeKhem Raj
This adds glibc error() API implementation which is needed by few packages still. (From OE-Core rev: c3f0f00a8dcc76ece298cf4debf1ca71f930ec57) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26adwaita-icon-theme: 43 -> 45.0Kai Kang
Update adwaita-icon-theme from 43 to 45.0. * meson is used to replace autotools, then the patch is redundant * not overwrite PACKAGES, and remove sub-packages ${PN}-hires and ${PN}-symbolic-hires which are created to handle big icon files which do not exist in adwaita-icon-theme 45.0 * update FILES of ${PN}-symbolic and split license files to ${PN}-doc (From OE-Core rev: 6207395b2efe91d6f683c758fac782a5f617c20a) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26maintainers.inc: add self for flac recipeMichael Opdenacker
(From OE-Core rev: 4fc7994fbb97b78d09bba522cfd871fed811380b) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26python3-setuptools-scm: fix upstream version checkAlexander Kanavin
(From OE-Core rev: 41c7f6bf29e581ad25497f02197c1791e5667e74) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26xwayland: upgrade 23.1.2 -> 23.2.1Alexander Kanavin
(From OE-Core rev: de357ee49f7843939bc09888a0b3318d7f8cd195) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26xf86-input-libinput: upgrade 1.3.0 -> 1.4.0Alexander Kanavin
(From OE-Core rev: 4cbada294a373031fe3bd74028bd51c1df460d5b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-09-26vala: upgrade 0.56.8 -> 0.56.13Alexander Kanavin
(From OE-Core rev: 21daca2be786031cdcd4b08b9ee21f437262d176) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-06-11 19:39:10 +0000