linux/meta-openembedded.git/meta-gnome, branch kirkstone-next

libgsf: Upgrade 1.14.49 -> 1.14.53

2024-12-08T20:04:56+00:00

Changelog: libgsf 1.14.53 * Compilation fixes for libxml 2.13 * Fix ABR in gsf-vba-dump. * Teach gsf (the tool) to handle odf properties. * Fix integer overflows affecting memory allocation. * Add missing "DocumentStatus" ole2 property. * Avoid some undefined C behaviour in overflow checks. libgsf 1.14.51 * Fix thumbnailer crash. * Fix leaks. libgsf 1.14.50 * Fix error handling problem when writing ole files. License changed to LGPL-2.1-only from 1.14.51 [https://gitlab.gnome.org/GNOME/libgsf/-/commit/037c913eb631349c410ef45e49697bf5c46dac8a] remove obsolete DEPENDS from upstream [103f49b5fc987e7bb8765700d16bd387a33b62ca] Security fixes: CVE-2024-42415 An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. CVE-2024-36474 An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Reference: [https://gitlab.gnome.org/GNOME/libgsf/-/issues/34] (master rev: 6ed5891c18fc78a69764af0a29ad9b5feefb1aa8) Signed-off-by: Zhang Peng Signed-off-by: Armin Kuster

gnome-shell: correct regression with glib-2.0 fix for CVE-2024-34397

2024-06-27T15:24:46+00:00

Backport fix to work with new glib-2.0. Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

meta-oe-components: Avoid usage of nobranch=1

2023-09-04T16:01:53+00:00

The usage of nobranch=1 in SRC_URI allows using unprotected branches. This change updates the real branch name in place of nobranch=1 for these components. Signed-off-by: Sourav Kumar Pramanik Signed-off-by: Armin Kuster

ibus: Swith to use main branch instead of master

2022-08-07T21:57:01+00:00

Upstream has switched to using main for tip of trunk, therefore follow it here in SRC_URI as well. Signed-off-by: Khem Raj Suggested-by: Fabio Estevam Reported-by: Markus Volk (cherry picked from commit ca5f1dde541689f6a479a914ec742a3bf46dfbe1) Signed-off-by: Armin Kuster

tracker: upgrade 3.3.1 -> 3.3.2

2022-07-26T14:27:26+00:00

Changelog: ========== * Avoid redundant queries in TrackerNotifiers proxied through an D-Bus connection * Do not attempt to rebuild non-existing FTS tables on parser updates * Convert values to the right type when propagating insertions over superproperties * Fix test to handle SQLite >= 3.39.0 * Fix handling of nrl:modified after opening existing databases * Linking fixes to CLI executables Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit a7f5d549e6152292e73e0039f4b7b0a2936a395c) Signed-off-by: Armin Kuster

tracker: upgrade 3.3.0 -> 3.3.1

2022-07-26T14:27:11+00:00

Changelog: ========= * Fixed blank nodes to return the correct identifier in certain queries. * Fixes to FTS consistency after updates * Fixes to HTTP module linking * Fix handling of STRING_LITERAL_LONG1/2 terminals * Fix handling of negated property paths * Use .so suffix for modules on all platforms * Added code examples in JS/Python * Developer documentation improvements Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 91d468a051f90d4df3550b911a4604db490d8d50) Signed-off-by: Armin Kuster

libportal: add distro features check

2022-06-03T13:56:59+00:00

Add distro features check for libportal because it depends on gtk+3 which requires one of ${GTK3DISTROFEATURES}. Signed-off-by: Kai Kang Signed-off-by: Khem Raj (cherry picked from commit 0baa7793e0df81a21a130e6f0513f27b322cd4ad) Signed-off-by: Armin Kuster

meta-gnome: fix layer depends.

2022-05-17T12:57:10+00:00

meta-networking no longer depends on meta-python so add it separatily. Signed-off-by: Armin Kuster Signed-off-by: Khem Raj (cherry picked from commit f264601e7ddbc357ce294b4e23bc7b00d276f382) Signed-off-by: Armin Kuster

evolution-data-server: Do not pass --library-path to gir compiler

2022-05-17T12:57:10+00:00

This is using LIB_INSTALL_DIR which is pointing to target libdir e.g. /usr/lib which is essentially a path inside sysroot but when passing it via --library-path, it ends up adding this to linker commandline via LD_LIBRARY_PATH and -rpath options which is flagged by gcc correctly as arm-yoe-linux-gnueabi/12.0.1/ld: warning: library search path "/usr/lib" is unsafe for cross-compilation | /usr/lib/libgio-2.0.so: file not recognized: file format not recognized | collect2: error: ld returned 1 exit status Signed-off-by: Khem Raj Cc: Andreas Müller (cherry picked from commit 578b9996891e0990b507efd635667339cbd101dd) Signed-off-by: Armin Kuster

evince: Add dbus to depnedencies on non-x11 builds

2022-05-17T12:57:10+00:00

Fixes | Run-time dependency dbus-1 found: NO (tried pkgconfig) | | ../evince-42.2/meson.build:206:4: ERROR: Dependency "dbus-1" not found, tried pkgconfig Signed-off-by: Khem Raj Cc: Andreas Müller (cherry picked from commit 00f18248b93e0377d5e8a56fa2f7c859a39f661f) Signed-off-by: Armin Kuster