summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* ghex: upgrade 46.0 -> 46.1Wang Mingyu2024-11-191-1/+1
| | | | | | | | Changelog: fix GdkDisplay access before init Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gegl: upgrade 0.4.48 -> 0.4.50Wang Mingyu2024-11-191-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jack-example-tools: add new recipeDavid Sands2024-11-191-0/+34
| | | | | | | This commit adds a package that provides jack-utils (along with jack example clients) that are broken out from the main jack repo since jack v1.9.22 Signed-off-by: David Sands <david.sands3@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jack: remove jack-utilsDavid Sands2024-11-191-2/+1
| | | | | | | This commit removes jack-utils from the jack recipe as it has been broken out into it's own repo from jack v1.9.22 onwards. Signed-off-by: David Sands <david.sands3@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aiohttp: 3.10.10 -> 3.10.11Tom Geelen2024-11-191-1/+1
| | | | | | Changelog: https://github.com/aio-libs/aiohttp/releases/tag/v3.10.11 Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: demote udev runtime dependency to recommendationRasmus Villemoes2024-11-191-1/+1
| | | | | | | | | | | | | | | | We use veritysetup in our custom initramfs to verify the rootfs before mounting it. We do not use udev or run systemd as PID1 in that initramfs. This RDEPENDS on udev and lvm2, and everything that udev ends up pulling in, thus bloats the initramfs by more than 10MiB. Removing udev from PACKAGECONFIG is not really an option, because we do want the udev integration in the real rootfs. Demote it to a recommendation so that the initramfs recipe can avoid udev and lvm2 using BAD_RECOMMENDATIONS or NO_RECOMMENDATIONS. Signed-off-by: Rasmus Villemoes <ravi@prevas.dk> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* magic-enum: Upgrade 0.9.6 -> 0.9.7Ricardo Simoes2024-11-191-1/+1
| | | | | | | | Changelog: https://github.com/Neargye/magic_enum/releases/tag/v0.9.7 Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com> Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libestr: add CVE_PRODUCTBenjamin Bouvier2024-11-191-0/+2
| | | | | | | Add exact CPE name in CVE_PRODUCT. Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* librelp: add CVE_PRODUCTBenjamin Bouvier2024-11-191-0/+2
| | | | | | | Add exact CPE name in CVE_PRODUCT. Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rsyslog: add CVE_PRODUCTBenjamin Bouvier2024-11-191-0/+2
| | | | | | | Add exact CPE name in CVE_PRODUCT. Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libfastjson: add CVE_PRODUCTBenjamin Bouvier2024-11-191-0/+2
| | | | | | | Add exact CPE name in CVE_PRODUCT. Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-zeroconf: inherit cython classRoss Burton2024-11-191-3/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-yarl: inherit cython classRoss Burton2024-11-191-2/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-sqlalchemy: inherit cython classRoss Burton2024-11-191-3/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-reedsolo: inherit cython classRoss Burton2024-11-191-2/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyzmq: inherit cython classRoss Burton2024-11-191-2/+2
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pystemd: inherit cython classRoss Burton2024-11-191-2/+2
| | | | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Also switch to python_setuptools_build_meta as there is a pyproject.toml. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-propcache: inherit cython classRoss Burton2024-11-191-2/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pocketsphinx: inherit cython classRoss Burton2024-11-191-2/+2
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pkcs11: inherit cython classRoss Burton2024-11-191-2/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-frozenlist: inherit cython classRoss Burton2024-11-191-2/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-dbus-fast: inherit cython classRoss Burton2024-11-191-7/+1
| | | | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Also remove obsolete setuptools/wheel build dependencies. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cytoolz: inherit cython classRoss Burton2024-11-191-2/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cchardet: inherit cython classRoss Burton2024-11-191-3/+1
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: inherit cython classRoss Burton2024-11-191-2/+2
| | | | | | | | Use the new cython class to avoid duplicated fixup code to remove build paths. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libusbgx: fix gadget-stop installGrygorii Tertychnyi2024-11-191-1/+1
| | | | | | | It was by mistake installed gadget-start instead. Signed-off-by: Grygorii Tertychnyi <grembeter@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgpiod: remove stray newlineBartosz Golaszewski2024-11-191-1/+0
| | | | | | | | There's an additional, unneeded newline at the end of libgpiod.inc. Remove it. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rsyslog: Fix the ptest path to test-driverOla x Nilsson2024-11-191-10/+12
| | | | | | | | | | | | | | | | | | | Add a sed substitution for ${PTEST_PATH}/${TESTDIR}/Makefile that transforms LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver SH_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver to LOG_DRIVER = $(SHELL) $(top_builddir)/test-driver SH_LOG_DRIVER = $(SHELL) $(top_builddir)/test-driver which is where the test-driver script can be found when installed. The addition of this substition makes ptests work with or without an automake patch in OE-Core that does the same thing. Relates to [YOCTO #15635] Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* librelp: Fix the ptest path to test-driverOla x Nilsson2024-11-191-8/+10
| | | | | | | | | | | | | | | | | Add a sed substitution for ${PTEST_PATH}/${TESTDIR}/Makefile that transforms SH_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver to SH_LOG_DRIVER = $(SHELL) $(top_builddir)/test-driver which is where the test-driver script can be found when installed. The addition of this substition makes ptests work with or without an automake patch in OE-Core that does the same thing. Relates to [YOCTO #15635] Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-desktop: add PACKAGECONFIGs for gtk3/gtk4 librariesRoss Burton2024-11-191-2/+4
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-desktop: remove X11 dependenciesRoss Burton2024-11-191-4/+1
| | | | | | | | | The dependencies on libxext and xrandr were removed in 3.21.4 (2016). This also means we can remove the check for the X11 DISTRO_FEATURE. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-werkzeug: upgrade 3.0.3 -> 3.0.6Soumya Sambu2024-11-191-1/+1
| | | | | | | | | | | Includes fix for CVE-2024-49767 Changelog: ========== https://github.com/pallets/werkzeug/blob/3.0.6/CHANGES.rst Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-session: upgrade 4.18.2 -> 4.18.3Jason Schonberg2024-11-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog found at https://gitlab.xfce.org/xfce/xfce4-session/-/tags/xfce4-session-4.18.3 - shutdown: Do not set an error when returning TRUE - logout-dialog: Fix use-after-free - Use glib wrappers for memory allocation - build: Fix build when there is no suspend/hibernate support - build: Add suspend support for Solaris - startxfce4: Fix xinit arguments order - manager: Always use xfsm_manager_save_yourself_dbus() (Fixes #106) - settings: Remove useless tooltip - xflock4: Update fallback list - logout-dialog: Lower warning level - shutdown: Keep error NULL when unused - cleanup: Remove dead polkit code - Revert "Fallback to old method for shutdown (bug #8630)." - Use g_critical() instead of g_error() - Use GLib logging functions or g_printerr() instead of g_print() - Use GLib logging functions instead of g_printerr() - build: Fix untranslated policykit file - Escape/unescape string list delimiter when saving/restoring session - Replace XfceRc with GKeyFile for session file parsing - Translation Updates: Albanian, Armenian (Armenia), Asturian, Azerbaijani, Basque, Belarusian, Belarusian (Tarask), Bulgarian, Catalan, Chinese (China), Chinese (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (Canada), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hindi, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Norwegian Nynorsk, Occitan (post 1500), Persian (Iran), Polish, Portuguese, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Uyghur, Vietnamese Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tbb: Re-enable hwloc supportPeter Kjellerstedt2024-11-191-0/+1
| | | | | | | | | | The problem with using pkg-config to find hwloc when cross-compiling was solved by upstream in 2021.13.0. However, the upgrade in commit d8c5a72788ab0f2e36aee16e6d9e7555537366a5 missed that upstream defaults to disabling searching for hwloc when cross-compiling. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* parallel: Package zsh-completions and extend to native recipeKhem Raj2024-11-191-14/+24
| | | | | | Add missing perl modules in rdeps Signed-off-by: Khem Raj <raj.khem@gmail.com>
* c-ares: upgrade 1.27.0 -> 1.28.1Jason Schonberg2024-11-191-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog 1.28.1 : This release contains a fix for a single significant regression introduced in c-ares 1.28.0. - ares_search() and ares_getaddrinfo() resolution fails if no search domains are specified. Issue #737 Changelog 1.28.0 : Features: - Emit warnings when deprecated c-ares functions are used. This can be disabled by passing a compiler definition of CARES_NO_DEPRECATED. PR #732 - Add function ares_search_dnsrec() to search for records using the new DNS record data structures. PR #719 - Rework internals to pass around ares_dns_record_t instead of binary data, this introduces new public functions of ares_query_dnsrec() and ares_send_dnsrec(). PR #730 Changes: - tests: when performing simulated queries, reduce timeouts to make tests run faster - Replace configuration file parsers with memory-safe parser. PR #725 - Remove acountry completely, the manpage might still get installed otherwise. Issue #718 Bugfixes: - CMake: don't overwrite global required libraries/definitions/includes which could cause build errors for projects chain building c-ares. Issue #729 - On some platforms, netinet6/in6.h is not included by netinet/in.h and needs to be included separately. PR #728 - Fix a potential memory leak in ares_init(). Issue #724 - Some platforms don't have the isascii() function. Implement as a macro. PR #721 - CMake: Fix Chain building if CMAKE runtime paths not set - NDots configuration should allow a value of zero. PR #735 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: Remove the dependecy on bashPeter Kjellerstedt2024-11-192-12/+9
| | | | | | | Rewrite ebtables-legacy-save to avoid using bashisms. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-yarl: upgrade 1.15.1 -> 1.17.1Tom Geelen2024-11-191-1/+1
| | | | | | | | | | | | | | Changelogs: - https://github.com/aio-libs/yarl/releases/tag/v1.17.1 - https://github.com/aio-libs/yarl/releases/tag/v1.17.0 - https://github.com/aio-libs/yarl/releases/tag/v1.16.0 - https://github.com/aio-libs/yarl/releases/tag/v1.15.5 - https://github.com/aio-libs/yarl/releases/tag/v1.15.4 - https://github.com/aio-libs/yarl/releases/tag/v1.15.3 - https://github.com/aio-libs/yarl/releases/tag/v1.15.2 Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-can: version bump 4.2.2 -> 4.4.0Jan Vermaete2024-11-191-3/+4
| | | | | Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-twisted: move appdirs from core packageGuðni Már Gilbert2024-11-191-3/+2
| | | | | | | | | | | | python3-appdirs is currently only a dependency when python3-twisted-conch is installed. I propose to remove python3-appdirs from python3-twisted-core such that it's not installed in the final image when python3-twisted-conch is not installed. Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-twisted: remove do_install appendGuðni Már Gilbert2024-11-191-5/+0
| | | | | | | | It looks like it doesn't remove any files today. So I propose we simply remove this append to do_install to clean up the recipe Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-spidev: set LIC_FILES_CHKSUM to remote fileJan Vermaete2024-11-191-1/+1
| | | | | | | License stays MIT Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-panel: upgrade 4.18.5 -> 4.18.6J. S.2024-11-191-1/+1
| | | | | | | | | | | | | | | | | | | | | Change log found at https://gitlab.xfce.org/xfce/xfce4-panel/-/tags/xfce4-panel-4.18.6 - Update copyright year - Do not use g_log_set_always_fatal() - launcher: Ensure default icon in empty launchers - build: Search for bind_textdomain_codeset in libintl too - Fix memory management of GTypeModules - pager: Avoid recursion in WnckScren signal handler - pager: Do not query workspace count if screen is not initialized - libxfce4panel: Fix custom menu items management - clock: Create monitor proxy asynchronously - Add missing G_BEGIN_DECLS - Translation Updates: Czech, Finnish, Hungarian, Icelandic, Interlingue, Italian, Portuguese (Brazil), Turkish Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-boxes: require opengl distro featureChen Qi2024-11-191-1/+2
| | | | | | | | spice-gtk requires opengl distro feature, so gnome-boxes should require it too. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grilo-plugins: consider opengl distro feature for default PACKAGECONFIGChen Qi2024-11-191-1/+4
| | | | | | | | gnome-online-accounts requires opengl by default, so lua-factory PACKAGECONFIG should rely on opengl by default. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sysprof: require opengl distro feature when gtk4 is dependend onChen Qi2024-11-191-1/+4
| | | | | | | | | gkt4 has 'opengl' in its REQUIRED_DISTRO_FEATURES, so when it is depended upon by sysprof, 'opengl' distro feature should also be required. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libspelling: require opengl distro featureChen Qi2024-11-191-1/+4
| | | | | | | | The gkt4 in DEPENDS has 'opengl' in its REQUIRED_DISTRO_FEATURES, so libspelling also needs to set this. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snapper: pass --pam-security=${libdir}/securityMartin Jansa2024-11-191-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | pam_snapper.so is installed in libdir as the default in configure.ac is: PAM_SECURITY=${libdir}/security https://github.com/openSUSE/snapper/blob/master/configure.ac#L66 and depending on multilib configuration this fails with: ERROR: QA Issue: lib32-snapper: Files/directories were installed but not shipped in any package: /usr/lib32/security/pam_snapper.so Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. lib32-snapper: 1 installed and not shipped files. [installed-vs-shipped] or ERROR: QA Issue: snapper: Files/directories were installed but not shipped in any package: /usr/lib64/security/pam_snapper.so Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. snapper: 1 installed and not shipped files. [installed-vs-shipped] when default libdir doesn't match with nonarch_libdir Some recipes are using ${base_libdir}/security and some just ${libdir}/security with the usrmerge being the default and required with systemd I'm not sure which one is better. Now all files are packaged some in libdir some in nonarch_libdir: snapper/0.11.2 $ find packages-split/snapper/usr/lib* packages-split/snapper/usr/lib packages-split/snapper/usr/lib/systemd packages-split/snapper/usr/lib/systemd/system packages-split/snapper/usr/lib/systemd/system/snapper-timeline.timer packages-split/snapper/usr/lib/systemd/system/snapper-timeline.service packages-split/snapper/usr/lib/systemd/system/snapper-boot.timer packages-split/snapper/usr/lib/systemd/system/snapper-cleanup.timer packages-split/snapper/usr/lib/systemd/system/snapperd.service packages-split/snapper/usr/lib/systemd/system/snapper-boot.service packages-split/snapper/usr/lib/systemd/system/snapper-cleanup.service packages-split/snapper/usr/lib/snapper packages-split/snapper/usr/lib/snapper/systemd-helper packages-split/snapper/usr/lib/snapper/plugins packages-split/snapper/usr/lib/snapper/installation-helper packages-split/snapper/usr/lib/pam_snapper packages-split/snapper/usr/lib/pam_snapper/pam_snapper_pamconfig.sh packages-split/snapper/usr/lib/pam_snapper/pam_snapper_userdel.sh packages-split/snapper/usr/lib/pam_snapper/pam_snapper_homeconvert.sh packages-split/snapper/usr/lib/pam_snapper/pam_snapper_useradd.sh packages-split/snapper/usr/lib64 packages-split/snapper/usr/lib64/libsnapper.so.7.4.3 packages-split/snapper/usr/lib64/security packages-split/snapper/usr/lib64/security/pam_snapper.so packages-split/snapper/usr/lib64/snapper packages-split/snapper/usr/lib64/snapper/testsuite packages-split/snapper/usr/lib64/snapper/testsuite/directory1 packages-split/snapper/usr/lib64/snapper/testsuite/permissions2 packages-split/snapper/usr/lib64/snapper/testsuite/error2 packages-split/snapper/usr/lib64/snapper/testsuite/simple1 packages-split/snapper/usr/lib64/snapper/testsuite/ug-tests packages-split/snapper/usr/lib64/snapper/testsuite/xattrs1 packages-split/snapper/usr/lib64/snapper/testsuite/owner3 packages-split/snapper/usr/lib64/snapper/testsuite/run-all packages-split/snapper/usr/lib64/snapper/testsuite/missing-directory1 packages-split/snapper/usr/lib64/snapper/testsuite/permissions1 packages-split/snapper/usr/lib64/snapper/testsuite/test-btrfsutils packages-split/snapper/usr/lib64/snapper/testsuite/owner2 packages-split/snapper/usr/lib64/snapper/testsuite/xattrs3 packages-split/snapper/usr/lib64/snapper/testsuite/permissions3 packages-split/snapper/usr/lib64/snapper/testsuite/CAUTION packages-split/snapper/usr/lib64/snapper/testsuite/xattrs4 packages-split/snapper/usr/lib64/snapper/testsuite/ascii-file packages-split/snapper/usr/lib64/snapper/testsuite/setup-and-run-all packages-split/snapper/usr/lib64/snapper/testsuite/owner1 packages-split/snapper/usr/lib64/snapper/testsuite/xattrs2 packages-split/snapper/usr/lib64/snapper/testsuite/error4 packages-split/snapper/usr/lib64/snapper/testsuite/error1 packages-split/snapper/usr/lib64/libsnapper.so.7 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: handle CVE-2024-45802Peter Marko2024-11-191-2/+3
| | | | | | | | | | | | | | | | | | | | | According to [1] the ESI implementation in squid feature is vulnerable without any fix available. NVD says it's fixed in 6.10, however the change in this release only disables ESI by default (which we always did via PACKAGECONFIG). This means CVE report would say Patched even if the vulnerability is still present if someone adapts squid PACKAGECONFIG. Commit in master branch related to this CVE is [2]. Title is "Remove Edge Side Include (ESI) protocol" and it's also what it does. So there will never be a fix for these ESI vulnerabilities. Based on this, remove vulnerable ESI PACKAGECONFIG already now. [1] https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj [2] https://github.com/squid-cache/squid/commit/5eb89ef3d828caa5fc43cd8064f958010dbc8158 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 6.10 -> 6.12Peter Marko2024-11-192-2/+58
| | | | | | | | | License-Update: copyright year updated Add patch to fix new build failure from release tarball. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>