Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead-next 2024-09-10T01:23:01+00:00 2024-09-10T01:23:01+00:00 Peter Kjellerstedt pkj@axis.com 2024-09-09T18:24:04+00:00 urn:sha1:ab4aa4045b6b4decf3ce52e62719b78a2651b5b4 * Remove -DENABLE_ZLIB=ON (it is no longer optional). * Replace -DENABLE_CMS=lcms2 with -DENABLE_LCMS=ON. * Replace the splash PACKAGECONFIG with boost (splash is no longer optional). * Correct the options for the nss and tiff PACKAGECONFIGs. This avoids the following CMake warnings: Manually-specified variables were not used by the project: ENABLE_CMS ENABLE_SPLASH ENABLE_ZLIB WITH_NSS3 WITH_TIFF Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-09-06T04:56:45+00:00 Khem Raj raj.khem@gmail.com 2024-09-06T03:33:09+00:00 urn:sha1:fb7e45fcbff00dfbe9a03023582b9a1d3184f6fc Drop backported patches Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-08-21T15:45:47+00:00 Yogita Urade yogita.urade@windriver.com 2024-08-21T09:05:35+00:00 urn:sha1:4534a0a07774bfcc9b4f8fc1fcb5859f2c8573aa A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service. CVE-2024-6239-0002 is the CVE fix and CVE-2024-6239-0001 is dependent commit to fix the CVE. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-6239 Upstream patch: https://gitlab.freedesktop.org/poppler/poppler/-/commit/0554731052d1a97745cb179ab0d45620589dd9c4 https://gitlab.freedesktop.org/poppler/poppler/-/commit/fc1c711cb5f769546c6b31cc688bf0ee7f0c1dbc Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-05-23T15:44:44+00:00 Khem Raj raj.khem@gmail.com 2024-05-13T21:16:55+00:00 urn:sha1:ffc64e9c6fee0af7eea3466135416d011172a5e6 Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-08-19T17:46:14+00:00 Yogita Urade yogita.urade@windriver.com 2023-08-18T12:30:44+00:00 urn:sha1:d7a39f04c8ba67acb7f621023746698e35c337e8 A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open. Reference: https://gitlab.freedesktop.org/poppler/poppler/-/issues/1399 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-07-07T15:59:27+00:00 Ross Burton ross.burton@arm.com 2023-07-05T17:26:00+00:00 urn:sha1:f0eee676628a626b54ec23d14056ed1297af2926 Backport a patch to ensure that stdio.h is included before jpeglib.h. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-06-21T16:15:20+00:00 Martin Jansa Martin.Jansa@gmail.com 2023-06-21T16:09:11+00:00 urn:sha1:be8c765c7c4ed48404da8fd8e813c9f3ab5ad415 There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-05-15T16:37:58+00:00 Martin Jansa martin.jansa@gmail.com 2023-05-15T07:04:30+00:00 urn:sha1:00ac843c5cdc54d259ea332b97a77fa6e29fdc8d * in some builds (probably without gobject-introspection-data enabled) it fails to find native glib-mkenums and fails with: poppler/23.04.0-r0/recipe-sysroot-native/usr/bin/python3-native/python3: can't open file 'poppler/23.04.0-r0/poppler-23.04.0/glib/GLIB2_MKENUMS-NOTFOUND': [Errno 2] No such file or directory Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-04-10T16:39:38+00:00 Wang Mingyu wangmy@fujitsu.com 2023-04-10T08:27:43+00:00 urn:sha1:02331987d0be340f17760efccd606a8ebd15b864 Changelog: ========= core: * Fix memory issue when signing fails. Issue #1372 * Internal improvements of signature related code * CairoOutputDev: improve type3 font rendering * Fix memory leak in GlobalParams::findSystemFontFileForFamilyAndStyle utils: * pdftocairo: Fix crash in some special situations * pdfsig: allow holes in -dump signature list * pdfsig: Support --help Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-03-10T07:45:17+00:00 Wang Mingyu wangmy@fujitsu.com 2023-03-10T06:15:34+00:00 urn:sha1:d1f16573c994bb7fb44bdcdb364a7d99bffcf53f Changelog: * PngWriter: Fix potential uninitialized memory use Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>