Commit Graph

70042 Commits

Author SHA1 Message Date
Pawan Badganchi
2c9488e5d2 tiff: Add fix for CVE-2022-4645
Below patch fixes the CVE-2022-4645 as well.

0001-Revised-handling-of-TIFFTAG_INKNAMES-and-related-TIF.patch

Link: https://nvd.nist.gov/vuln/detail/CVE-2022-4645

(From OE-Core rev: 312393edf0aa5b2c515c08245d1c289ba79bad55)

Signed-off-by: Pawan Badganchi <Pawan.Badganchi@kpit.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Arslan Ahmad
03395abc2c kernel-fitimage: Fix the default dtb config check
The current check for default dtb image checks if the file exists and is
not empty but appends a slash to the path due to which the file is never
found. It also doesn't replace slash in filename with _ as done when
populating the DTB variable. A better way to check the existence of the
device tree would be from the list of DTBs since this is used during
compilation.

(From OE-Core rev: e8e31e11b158837804d029e85f5f8ed3c219a4ea)

Signed-off-by: Arslan Ahmad <arslan_ahmad@mentor.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
042d94dce8 mesa: upgrade 23.0.0 -> 23.0.2
(From OE-Core rev: f7f483f90ba17342a83fdfe7c7dccf5a3f7bf624)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Khem Raj
25f6334feb systemd: Refresh a musl patch to remove patch-fuzz with 253.3
(From OE-Core rev: cb89375d8753f01f7da69bc5609dafb707a8a983)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Dmitry Baryshkov
2ac329445c linux-firmware: upgrade 20230210 -> 20230404
The LICENCE.qat_firmware license file was updated to reflect Intel
licensing (it removed a term regarding patent licenses).

License-Update: additional files

(From OE-Core rev: fd43b59ab32e2115fcda7ad63d3a5ccc2683c7d5)

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
346bf4e814 python3-setuptools: upgrade 67.6.0 -> 67.6.1
Changelog:
==========
 #3865: Fixed _WouldIgnoreField warnings for scripts and gui_scripts, when entry-points is not listed in dynamic.
 #3875: Update code generated by validate-pyproject to use v0.12.2. This should fix default license patterns when pyproject.toml is used.

(From OE-Core rev: 8c8170871cc2ab770fb52bb5ab08a9d723975d68)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
1419a694ac python3-pytz: upgrade 2022.7.1 -> 2023.3
(From OE-Core rev: 932612c1034848f9d5da5b264a5859c02257d582)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Alex Kiernan
b205ab58a6 rust: Upgrade 1.68.1 -> 1.68.2
Changes:

* Update the GitHub RSA host key bundled within Cargo. The key was
  rotated by GitHub on 2023-03-24 after the old one leaked.
* Mark the old GitHub RSA host key as revoked. This will prevent Cargo
  from accepting the leaked key even when trusted by the system.
* Add support for @revoked and a better error message for
  @cert-authority in Cargo’s SSH host key verification

(From OE-Core rev: 4563432b41026adc56c54452984b19ab64e7406e)

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
b61233e179 python3-pyopenssl: upgrade 23.0.0 -> 23.1.1
Changelog:
===========
- Worked around an issue in OpenSSL 3.1.0 which caused X509Extension.get_short_name
  to raise an exception when no short name was known to OpenSSL. #1204.
- cryptography maximum version has been increased to 40.0.x.
- Add OpenSSL.SSL.Connection.DTLSv1_get_timeout and
  OpenSSL.SSL.Connection.DTLSv1_handle_timeout to support DTLS timeouts #1180.

(From OE-Core rev: 0015bd07542ceaba8fa533d5179ffab0162259e0)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
45b7594b1f python3-pygobject: upgrade 3.42.2 -> 3.44.1
Changelog:
==========
    Fix tests with glib 2.76 !240
    Note: PyGObject is in need of more maintainers, please read https://www.bassi.io/articles/2022/12/02/on-pygobject/
    Note: This is an unstable release.
    Drop support for Python 3.6 !184
    meson: bump minimum version to 0.53.0 and update subprojects !227
    gimodule: fix floating state of python objects created with g_object_new !129
    Gtk.Template: Accept PathLike objects as a filename !195
    info: Show which type/object callables are bound to !194
    IntrospectionModule: handle two threads loading type at same time !149
    Port to Py_TRASHCAN_BEGIN !226
    Other cleanups/improvements: !181 !173
    This release also includes all changes from 3.42.1 and 3.42.2

(From OE-Core rev: d725ef02a36d497e7ed44c61f9b72f9212f0521a)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
7a5fb2122d python3-pathspec: upgrade 0.11.0 -> 0.11.1
Changelog:
==========
Bug fixes:
----------
    Issue #74: Include directory should override exclude file.

Improvements:
-------------
    Pull #75: Fix partially unknown PathLike type.
    Convert os.PathLike to a string properly using os.fspath.

(From OE-Core rev: cf79bc6c5cec0026ef3f56b6f4eb67499df0c60a)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
961e16a132 python3-markdown: upgrade 3.4.1 -> 3.4.3
Changelog:
=========
 Restore console script (#1327).
 Improve standalone * and _ parsing (#1300).
 Consider <html> HTML tag a block-level element (#1309).
 Officially support Python 3.11.
 Switch from setup.py to pyproject.toml.

(From OE-Core rev: f0e963faf34e223a8d7b31a792dc00b063910aa6)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
8d4149f232 python3-installer: upgrade 0.6.0 -> 0.7.0
(From OE-Core rev: 18d511f1f03b5f33e791b1e9c97ef136df3ebf0c)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
46e219de63 python3-importlib-metadata: upgrade 6.0.0 -> 6.2.0
Changelog:
===========
- #384: PackageMetadata now stipulates an additional get method allowing for
  easy querying of metadata keys that may not be present.
- #428: packages_distributions now honors packages and modules with Python
  modules that not .py sources (e.g. .pyc, .so).
- #434: Expand protocol for PackageMetadata.get_all to match the upstream
  implementation of email.message.Message.get_all in python/typeshed#9620.

(From OE-Core rev: e3991141939e5e2393cf36edd02ef3765cacd330)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
f9f1eeece4 python3-hypothesis: upgrade 6.68.2 -> 6.71.0
Changelog:
https://hypothesis.readthedocs.io/en/latest/changes.html

(From OE-Core rev: c9f5b3557311db4ec0a6aefca5d634c9c1fef996)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
bd346a9eca python3-cython: upgrade 0.29.33 -> 0.29.34
Bugs fixed
==========
- A refence leak of the for-loop list/tuple iterable was resolved if the
  for-loop's else: branch executes a break for an outer loop.
- Some C compile failures in CPython 3.12 were resolved.
- Some old usages of the deprecated Python imp module were replaced with importlib.
- Some issues with depfile generation were resolved.

(From OE-Core rev: 4589082930c86aa4a24003c79cd99d6e414cbf44)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
94d818760d vala: upgrade 0.56.4 -> 0.56.6
Changelog:
===========
 * Regression fix:
  - vala: Improve initialization of namespace fields with compound
    literal [#1424]

 * Bindings:
  - gio-2.0,glib-2.0,gobject-2.0: Update 2.74 symbols
  - webkit2gtk-4.*: Update to 2.40.0
  - webkitgtk-6.0: Update to 2.40.0
  - gtk4: Update to 4.10.1~40b154bf from 0.58
  - gtk4: Add sealed to all the final types
  - gtk+-3.0: Fix ToolPalette.icon_size get-accessor type
  - webkitgtk-6.0: Update to 2.39.90

 * Various improvements and bug fixes:
  - codegen:
    + Consistently handle GLib.Error as boxed type [#1418]
    + Add cast to accessor calls for generic property implementations
    + Use g_object_class_override_property to implement generic interface
      properties [#1419]
    + Add declaration for register call of dynamic DBus interfaces [#1422]
  - vala:
    + Correctly handle pre/post-increment expression as index of element
      access [#1417]
    + Set proper value-type of unary ref/out expression in initializers [#1421]
    + Allow assignment of namespace fields with inline allocated arrays
  - gtkmodule: Improve error messages

(From OE-Core rev: e3eb6b4e6477dea953d4d93d2eadc5f430c160b1)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
42badb5444 xwayland: upgrade 22.1.8 -> 23.1.1
(From OE-Core rev: 35fdbd0ea81650a0421d50fb53989d96c5956331)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
163c9ffb9b xserver-xorg: upgrade 21.1.7 -> 21.1.8
(From OE-Core rev: 7b08dff8f46bcaa05f7fbffbe27d524579af4faf)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
862bfce832 wpebackend-fdo: upgrade 1.14.0 -> 1.14.2
Changelog:
==========
- Reverted a change introduced in 1.14.1 which introduced crashes both
  with WebKitGTK and WPE running under Wayland in some configurations.
- Fix a crash caused by wrong assertion, which was typically triggered in
  debug builds when using the NVidia drivers.
- Fix WebKit no longer repainting after provisional navigation with
  PSON enabled.
- Fix graphics buffer leaks by always freeing them in buffer destroy
  listener callbacks.

(From OE-Core rev: aa37e18a51714af3281b4127dceb40b38aa8ac3c)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
ed9e8941f4 wayland: upgrade 1.21.0 -> 1.22.0
(From OE-Core rev: b737848513d06c60fb26d5e796e99639d663feb6)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
deb8f527ba texinfo: upgrade 7.0.2 -> 7.0.3
Changelog:
==========
* texi2any
  . fix performance regression when Perl binary extension (XS) modules
    are not being used (e.g. with TEXINFO_XS=omit)

* info
  . further fix of recoding of UTF-8 files to ASCII to avoid text
    disappearing from nodes
  . avoid possible freeze at start of a file with '-v nodeline=pointers'

(From OE-Core rev: 87bb580f6a02468d372254480302a60faa965131)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
3c499ac5a3 sqlite3: upgrade 3.41.0 -> 3.41.2
(From OE-Core rev: b6c475ea37660859b6ae91ac2e5fbf674f7ccfde)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
41b91c6956 spirv-tools: upgrade 1.3.239.0 -> 1.3.243.0
(From OE-Core rev: dbb0e5b6362a152206df440d3bb60e96459d0488)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
bf2fa5bf8b spirv-headers: upgrade 1.3.239.0 -> 1.3.243.0
(From OE-Core rev: f3f4b5aa6ebfc011ba49faad499aff3b19294b19)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
d1c86d713e ruby: upgrade 3.2.1 -> 3.2.2
(From OE-Core rev: b261bc704839b12769118f6f1c4207f3d19fe4fd)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
70a069093e pango: upgrade 1.50.13 -> 1.50.14
Changelog:
- Fix underline thickness in scaled contexts

(From OE-Core rev: f34ee7f08bdf94297042969b114da38b71168c5b)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
7ee4f1cb5d mtools: upgrade 4.0.42 -> 4.0.43
Changelog:
==========
- Fix root directory test in mattrib
- -b BiosDisk flag for mformat to allow setting physdrive to
  a user-specified value
- Clearer error message in mformat when trying to mformat a
  disk whose total size is not known
- Make recursive copy more consistent
- Trailing slash now always implies target should be a directory
- Code cleanup

(From OE-Core rev: 7f04fd469f9ee989eadd85ea949527300704ca70)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
695552afa4 man-pages: upgrade 6.03 -> 6.04
License-Update:
 tmp/ -> .tmp/

Changelog:
============
-  Sections:
   -  Add HISTORY.
   -  HISTORY: Restore C89 references.
   -  Repurpose VERSIONS.
   -  Simplify STANDARDS.
   -  SYNOPSIS: Mark several functions as deprecated.

-  Build system:
   -  Support installing in different mandirs
      (e.g., man3typedir='/usr/share/man/man3').
   -  Support installing compressed pages (Z='.gz').
   -  Support installing link pages as symlinks (LINK_PAGES='symlink').

(From OE-Core rev: 17b93f86d17c6164005fa9f3173585f092539dc6)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
93809a4028 libcap: upgrade 2.67 -> 2.68
(From OE-Core rev: 351ceddc01b33d2ef34c3e10d1e17436854514d8)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
63903b3b1a ccache: upgrade 4.7.4 -> 4.8
License-Update:
 bump: Upgrade to doctest 2.4.10
 chore: Update copyright years

Changelog:
https://ccache.dev/releasenotes.html#_ccache_4_8

(From OE-Core rev: a0828afd27ba8d7b888bd13743d050cc277cc416)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
596d9eb5cf acpica: upgrade 20220331 -> 20230331
License-Update: Copyright year updated to 2023.

Changelog:
==========
-Update all copyright notices to the year 2023. This effects all source
 modules, as well as utility signons.
-Add OS-specific support for Zephyr RTOS.
-Fix miscellaneous code that accesses various objects.
-Remove some dead code.
-Add C ?Flexible Array? support.
-Add support for 64 bit LoongArch compilation.
-Add first batch of RISC-V related definitions.
-Performed a global automated update to remove tabs, fix indentation
 issues, etc.
-Allow disabling of -Werror. For distro maintainers having '-Werror' can
 delay update of GCC. Since every GCC release might add new warnings that
 were not yet captured, it might break the build of packages. With this
 change, distros can now build with 'NOWERROR=TRUE' instead of patching
 either the errors or the makefiles. The default behavior keeps on using
 '-Werror'.

(From OE-Core rev: acc23110730cc2a08fe476a5a3b30ef17b5cbe37)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
e4ad4ebd68 mpg123: upgrade 1.31.2 -> 1.31.3
Changelog:
=========
- build:
-- Fix --disable-8bit.
-- Fall back to generic decoder if no yasm for MSVC (bug 346).
-- Fix some pedantic compiler warnings, avoid breaking libtool wrappers.
- mpg123:
-- Fix verbose position printout for new resampling outside libmpg123 (where
   output rate differs from decoding rate).
- libsyn123:
-- Fix reconfiguration of resampler to avoid double free when reducing
   decimator stages to zero (bug 350).

(From OE-Core rev: 01ccf7c55d3d9c32ffd509abebd928ccb402b9f8)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
aeb61cc313 libsoup: upgrade 3.2.2 -> 3.4.0
Changelog:
==========
* Fix possible crash in SoupContentSniffer
* Fix socket leak
* Add missing annotation to soup_header_g_string_append_param_quoted()
* Fix regression in 'SoupCookieJar' not handling valid Secure cookies
* Fix crash when skipping HTTP/1 response stream with chunked enconding
* Change Session to unqueue finished items earlier without an extra MainContext iteration
* Add 'SoupMessage::got-body-data' signal to monitor progress of reads
* Add 'soup_session_send_and_splice()' and 'soup_session_send_and_splice_async()' convenience APIs
* Add 'soup_message_set_force_http1()' and 'soup_message_get_force_http1()' APIs
* Change 'soup_cookie_copy()' to not retain default ports
* Ensure 'SoupServerMessage' socket is available in websocket handler
* Fix 'soup_message_new()' not erroring when URI has an empty host
* Fix thread-saftey issues in 'SoupConnectionAuth'
* Fix various connection leaks
* Fix the possibility of sending invalid empty 'Sec-WebSocket-Protocol' header
* Fix IO errors not being handled on 'CONNECT' messages
* Numerous improvements to cookies:
    * Add support for cookie prefixes ('__Secure-' and '__Host-')
    * Reject cookies with control characters in name or value
    * Reject 'SameSite=None' cookies without 'Secure'
    * Change 'soup_cookie_parse()' to be more strict about what is considered whitespace
    * Change default SameSite value to 'Lax'
    * Fix 'soup_cookie_equal()' with 'NULL' path

(From OE-Core rev: c98d4d5cc7e1fd1f6d81e2bf2d7629a83bc9a63b)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
6ee7eb3e01 libsdl2: upgrade 2.26.3 -> 2.26.5
(From OE-Core rev: 106cdae227775f8e3b32462ed68b99231595f075)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
992987cf52 libpcap: upgrade 1.10.3 -> 1.10.4
(From OE-Core rev: da76bde131a7fe0833c9fd59a1ca48edaed6fa54)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
9210079aac libhandy: upgrade 1.8.1 -> 1.8.2
Changelog:
==========
- Demo
  - Correctly use GtkSwitch
  - Fix a GLib deprecation
- Docs
  - Fix dependency names
- HdyTabView
  - Fix set_menu_model() input check
  - Fix a typo in docs
- HdySwipeable
  - Fix get_swipe_area() fallback
- Memory leak fixes
- Translation updates
  - Slovenian

(From OE-Core rev: b1ebdff55fd8ca77eaff6066370c628a9425bec7)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
2cb34218f6 cracklib: upgrade 2.9.10 -> 2.9.11
(From OE-Core rev: a3932906cba1e693ff51a4fdcc60a7b15debee9f)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
f0f4ed9ba5 bind: upgrade 9.18.12 -> 9.18.13
Changelog:
==========
[bug] Use two pairs of dns_db_t and dns_dbversion_t in a
      catalog zone structure to avoid a race between the
      dns__catz_update_cb() and dns_catz_dbupdate_callback()
      functions. [GL #3907]

[bug] Make sure to revert the reconfigured zones to the
      previous version of the view, when the new view
      reconfiguration fails during the configuration of
      one of the configured zones. [GL #3911]

[bug] Fix error path cleanup issues in dns_catz_new_zones()
      and dns_catz_new_zone() functions. [GL #3900]

[bug] Unregister db update notify callback before detaching
      from the previous db inside the catz update notify
      callback. [GL #3777]

[func Run the catalog zone update process on the offload
      threads. [GL #3881]

[func Add shutdown signaling for catalog zones. [GL !7571]

[func Add reference count tracing for dns_catz_zone_t and
      dns_catz_zones_t. [GL !7570]

[bug] Detach 'rpzs' and 'catzs' from the previous view in
      configure_rpz() and configure_catz(), respectively,
      just after attaching it to the new view. [GL #3880]

[test Don't test HMAC-MD5 when not supported by libcrypto.
      [GL #3871]

[bug] Fix RPZ reference counting error on shutdown in
      dns__rpz_timer_cb(). [GL #3866]

[test Test various 'islands of trust' configurations when
      using managed keys. [GL #3662]

[bug] Building against (or running with) libuv versions
      1.35.0 and 1.36.0 is now a fatal error.  The rules for
      mixing and matching compile-time and run-time libuv
      versions have been tightened for libuv versions between
      1.35.0 and 1.40.0. [GL #3840]

[bug] dnssec-cds failed to cleanup properly. [GL #3831]

[bug] Source ports configured for query-source,
      transfer-source, etc, were being ignored. (This
      feature is deprecated, but it is not yet removed,
      so the bug still needed fixing.) [GL #3790]

(From OE-Core rev: 51ab191224aa1320d622bf79184940afa3910d60)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Wang Mingyu
af9cb6b4cc apr: upgrade 1.7.2 -> 1.7.3
Changelog:
===========
  *) apr-1-config: Fix crosscompiling detection in apr-1-config. PR 66510
  *) configure: Add --enable-sysv-shm to use SysV shared memory (shmget) if
     available.
  *) apr_socket_sendfile: Use WSAIoctl() to get TransmitFile function
     pointer on Windows.
  *) apr_dir_read: Do not request short file names on Windows 7
     and later.
  *) apr_file_gets: Optimize for buffered files on Windows.
  *) Fix a deadlock when writing to locked files opened with APR_FOPEN_APPEND
     on Windows. PR 50058.
  *) Don't seek to the end when opening files with APR_FOPEN_APPEND on Windows.
  *) apr_file_write: Optimize large writes to buffered files on Windows.
  *) apr_file_write: Optimize large reads from buffered files on Windows.

(From OE-Core rev: 1bee38556441fbff9a4e39942271001ec620416b)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Khem Raj
a04b0eaa38 musl: Update to latest trunk
Brings these changes

* 1d5750b9 fix swprintf handling of nul character in output
* 0e523480 in printf, use ferror macro rather than directly inspecting flags bit
* 868c9643 remove wide printf dependency on ugly hack in vfprintf
* 3a051769 fix (normal, narrow) printf erroneously processing %n after output errors
* 0440ed69 fix wide printf continuation after output or encoding errors
* d055e6a4 fix wide printf forms ignoring width for %lc format specifier
* b6811019 poll: fix misuse of timespec type on 32-bit archs without poll syscall
* 8949da7a select: fix 64-bit timeout truncation on pre-time64 kernels
* 3281047c dup3: don't set FD_CLOEXEC on failure on kernels without dup3 syscall
* c99b7daa fix dup3 ignoring all flags but O_CLOEXEC on archs with SYS_dup2 syscall
* fb7fb5e4 fix pipe2 silently ignoring unknown flags on old kernels
* b1dfb734 getservbyport_r: fix wrong result if getnameinfo fails with EAI_OVERFLOW
* 595416b1 getservbyport_r: fix out-of-bounds buffer read
* 1a708ece getifaddrs: fix UB via taking address of null pointer union dereference
* c499c108 accept4: don't fall back to accept if we got unknown flags
* 523d9b96 fix potential read past end of buffer in getnameinfo host name lookup
* d0b7f976 dns: fix workaround for systems defaulting to ipv6-only sockets
* bec42ef3 dns: handle early eof in tcp fallback
* 9b132e55 prevent CNAME/PTR parsing from reading data past the response end
* 12590c8b fix out-of-bounds reads in __dns_parse
* bc695a5a fix incorrect unit for CPU_SETSIZE macro

(From OE-Core rev: bb591e83e3d203d60d59a36f1ff0b2ce437dc7a2)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Khem Raj
9200d01057 cargo: Fix build on musl/riscv
libc needs fix for defining scope of SOCK_SEQPACKET

(From OE-Core rev: 378da16ebe2917f26f9fe8cf654bced09ec6ecfe)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Khem Raj
e6cb422333 ffmpeg: Disable asm and rvv on riscv32
ffmpeg 6.0 has added assembly routines which uses rv64i ISA
unconditionally, ideally it should check for ISA before using those
instructions.

Fixes errors like
<instantiation>:1:1: error: instruction requires the following: RV64I Base Instruction Set
ld t0, (a1)
^
src/libavcodec/riscv/pixblockdsp_rvi.S:24:1: note: while in macro instantiation
.irp row, 0, 1, 2, 3, 4, 5, 6, 7
^
<instantiation>:3:9: error: instruction requires the following: RV64I Base Instruction Set
        sd zero, ((0 * 16) + 0)(a0)
        ^

(From OE-Core rev: 010b068bcc126dbbc1e2032997e8d83360a7de35)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Khem Raj
b85f62ba30 e2fsprogs: Define 64bit off_t on rv32
Help configure to build it correctly on rv32 and musl especially, it
shoild not ideally poke at _FILE_OFFSET_BITS, its not a portable define

(From OE-Core rev: d7909538067843d60b9cb56d79a51e2a240c8b18)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Mark Asselstine
b44a87156d python3-psutil: fix-up -tests runtime dependencies
The psutil.tests module makes use of gcc, other tools and a minimal
set of headers and build tools. If these are missing you will see

======================================================================
ERROR: psutil.tests.test_process.TestProcess.test_weird_environ
----------------------------------------------------------------------
Traceback (most recent call last):
 File "./psutil/tests/test_process.py", line 1452, in test_weird_environ
   create_exe(path, c_code=code)
 File "./psutil/tests/__init__.py", line 831, in create_exe
   raise ValueError("gcc is not installed")
ValueError: gcc is not installed

along with other errors related to the missing tools and headers.

Add the missing RDEPENDS for the -tests package such that simply
adding the -tests package to an image will be all that is needed.

(From OE-Core rev: c50135a3893d8bb7736b0ab34d960026fbbc7012)

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Kai Kang
73f1b93e7d libnotify: remove dependency dbus
It ported to use GDBus in libnotify 0.7.0 [1]. So remove dbus from
DEPENDS. And GDBus is provided by glib-2.0.

[1]: https://gitlab.gnome.org/GNOME/libnotify/-/commit/f63e8ab

(From OE-Core rev: 3e585e41f561aab73685290631f2263795f571b9)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Dit Kozmaj
a60925d00a selftest: wic: Add test for --part-name argument
Add test for wic --part-name argument in .wks file.
Test three different cases:
- Set only the --part-name argument.
- Set only the --label argument. In this case the GPT partition label
  is set to the value of --label for compatibility reasons.
- Set both. In this case the code has been changed to set the GPT
  partition label to the --part-name value.

The test uses a test_gpt_partition_name.wks file created for this
purpose.

(From OE-Core rev: 06af6795cf6f079362303bddb39a14459e228e72)

Signed-off-by: Dit Kozmaj <dit.kozmaj@kynetics.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Dit Kozmaj
18b04f9c3f wic: use part_name when defined
So far part.label has been used to define GPT partition label even if
part.part_name was defined.
Fix the code to use part.part_name whenever available, as it makes sense
to have a GPT partition label which is different from the contained
filesystem label.

(From OE-Core rev: 7704d5fc36eb065224792bf4d5543814eaa5fed3)

Signed-off-by: Dit Kozmaj <dit.kozmaj@kynetics.com>
Signed-off-by: Diego Rondini <diego.rondini@kynetics.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Frank WOLFF
d5592877fe logrotate: add ptest support
Below is an extract of the test log:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2023-04-05T12:20
BEGIN: /usr/lib/logrotate/ptest
make  check-TESTS
make[1]: Entering directory '/usr/lib/logrotate/ptest'
make[2]: Entering directory '/usr/lib/logrotate/ptest'
PASS: test-0001.sh
PASS: test-0002.sh
...
...
PASS: test-0107.sh
PASS: test-0108.sh
============================================================================
Testsuite summary for logrotate 3.21.0
============================================================================
 # TOTAL: 102
 # PASS:  97
 # SKIP:  5
 # XFAIL: 0
 # FAIL:  0
 # XPASS: 0
 # ERROR: 0
============================================================================
make[2]: Leaving directory '/usr/lib/logrotate/ptest'
make[1]: Leaving directory '/usr/lib/logrotate/ptest'
DURATION: 353
END: /usr/lib/logrotate/ptest
2023-04-05T12:26
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Reviewed-by: Yoann CONGAL <yoann.congal@smile.fr>
(From OE-Core rev: 0bdfe34c016c8db1f18d76b59a38af280b4c70aa)

Signed-off-by: Frank WOLFF <frank.wolff@smile.fr>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00
Markus Volk
56b8b8a867 at-spi2-core: update 2.46.0 -> 2.48.0
What's new in at-spi2-core 2.48.0:

* Add a "atk-only" build option. This allows atk to be built without libdbus
  installed, but it does not build libatspi or the atk bridge.

* Fix some typos in the documentation.

What's new in at-spi2-core 2.47.90:

* Downgrade meson requirement to 0.63.

*  at-spi-dbus-bus service: set stop timeout to 5s

* Fix possible crash in screen_reader_signal_watcher.

What's new in at-spi2-core 2.47.1:
* The meson options -Dx11 and -Dintrospection are now implemented with
  meson features - https://mesonbuild.com/Build-options.html#features

  Instead of accepting values of "yes/no/auto", they take
  "enabled/disabled/auto".  Please change your build scripts
  accordingly if you use these options.

* Use gi-docgen to generate documentation.

* Register key grabs using the focused window, rather than the root window.
  This should prevent the window from losing focus when a key grab is used.

* atk-adaptor: Handle sockets in GetChildren.

* Improve documentation of the dbus interfaces.

* Various code clean-ups. Some unused code has been removed.

(From OE-Core rev: c589c87a8caef0afbc731c219fe713ba970a2055)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-04-13 11:56:07 +01:00