linux/meta-openembedded.git, branch nanbield-next

layer.conf: Add libdevmapper-native PREFERRED_RPROVIDER

2024-02-18T19:37:38+00:00

The libdevmapper recipe don't provide any package and is only there to resolve circular dependencies [1]. We already have the libdevmapper PREFERRED_RPROVIDER but the native it's missing. Fixes: | NOTE: Multiple providers are available for runtime libdevmapper-native (libdevmapper-native, lvm2-native) | Consider defining a PREFERRED_RPROVIDER entry to match libdevmapper-native [1] https://git.openembedded.org/meta-openembedded/commit/meta-oe/recipes-support/lvm2?id=3f64779eae2d8312f569bee863f90ec4f8176e6c Signed-off-by: Jose Quaresma Signed-off-by: Armin Kuster

terminus-font: build compressed archives with -n

2024-02-18T19:37:28+00:00

When building this recipe, internal archives are compressed with gzip. The compressed archives contain a header with the field MTIME (Modification Time) which is initialized from the built date. As a consequence, two builds of this recipe always generate packages whose checksum differs. Adding the -n option to gzip while compressing the archive does not save the original time stamp by default hence making reproducible package. Signed-off-by: Jean-Marc BOUCHE Signed-off-by: Khem Raj Backport of commit f60e4bfcb ("terminus-font: build compressed archives with -n") Signed-off-by: Jean-Marc BOUCHE Signed-off-by: Armin Kuster

libssh: upgrade 0.10.5 -> 0.10.6

2024-01-17T00:29:51+00:00

0001-libgcrypt.c-Fix-prototype-of-des3_encrypt-des3_decry.patch 0001-tests-CMakeLists.txt-do-not-search-ssh-sshd-commands.patch refreshed for 0.10.6 Changelog: ========== * Fix CVE-2023-6004: Command injection using proxycommand * Fix CVE-2023-48795: Potential downgrade attack using strict kex * Fix CVE-2023-6918: Missing checks for return values of MD functions * Fix ssh_send_issue_banner() for CMD(PowerShell) * Avoid passing other events to callbacks when poll is called recursively (#202) * Allow @ in usernames when parsing from URI composes Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 1bea2e8c3053e7ecffb04adaaded54555f2afa0b) Signed-off-by: Armin Kuster

redis: upgrade 6.2.13 -> 6.2.14

2024-01-17T00:28:54+00:00

Upgrade urgency SECURITY: See security fixes below. Security fixes: (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup. Signed-off-by: Changqing Li Signed-off-by: Khem Raj (cherry picked from commit 5b34766daadf8f1e8ef3d55b24e0037c4d0727f5) Signed-off-by: Armin Kuster

samba: upgrade 4.18.8 -> 4.18.9

2024-01-17T00:28:29+00:00

This is the latest stable release of the Samba 4.18 release series. It contains the security-relevant bugfix CVE-2018-14628: Wrong ntSecurityDescriptor values for "CN=Deleted Objects" allow read of object tombstones over LDAP (Administrator action required!) https://www.samba.org/samba/security/CVE-2018-14628.html Release Notes: https://www.samba.org/samba/history/samba-4.18.9.html Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit f4c3c747d6df6015eb1231f2867ffe43ddb9620e) Signed-off-by: Armin Kuster

postgresql: upgrade 15.4 -> 15.5

2024-01-17T00:28:02+00:00

Refer https://www.postgresql.org/docs/release/15.5/ Signed-off-by: Changqing Li Signed-off-by: Khem Raj (cherry picked from commit bcedf9f99ca683764ef19ab008e042c82da616ff) Signed-off-by: Armin Kuster

webkitgtk3: upgrade 2.42.3 -> 2.42.4

2024-01-17T00:26:18+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 466370a087534eded974a1eef2a4431dda6900b3) Signed-off-by: Armin Kuster

webkitgtk3: upgrade 2.42.2 -> 2.42.3

2024-01-17T00:26:07+00:00

Changelog: =========== - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing "tan". - Do not special case the "sans" font family name. - Fix build failure with libxml2 version 2.12.0 due to an API change. - Fix several crashes and rendering issues. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 1a474db2702c59702c414f4c8ed4487251f10df6) Signed-off-by: Armin Kuster

webkitgtk3: upgrade 2.42.1 -> 2.42.2

2024-01-17T00:25:54+00:00

Changelog: ========== - Bump Safari version in user agent header. - Fix CSP regression that broke Unity WebGL applications. - Fix the build with GBM disabled. - Fix several crashes and rendering issues. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 700e3a36fbc70ef7ecd5fa2bc820f0922df5a528) Signed-off-by: Armin Kuster

webkitgtk3: upgrade 2.42.0 -> 2.42.1

2024-01-17T00:25:47+00:00

Signed-off-by: Khem Raj (cherry picked from commit 32bae13bb8b8edf6b4af12ee7057493101c5fb14) Signed-off-by: Armin Kuster