summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
AgeCommit message (Collapse)Author
2024-02-03libsolv: upgrade 0.7.27 -> 0.7.28Wang Mingyu
- selected bug fixes: * disable choice rules for Conda * build for multiple python versions on SUSE Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03libidn2: upgrade 2.3.4 -> 2.3.7Wang Mingyu
Changelog: =========== -Really include tests/standalone.sh in tarball. -Bump libtool version numbers to reflect API/ABI addition. -Include tests/standalone.sh in tarball. License-Update: Copyright year updated to 2024. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03ed: upgrade 1.19 -> 1.20Wang Mingyu
Changelog: ========== * Implement options '+line', '+/RE', and '+?RE'. * main.c: New option '--unsafe-names'. * buffer.c (warned, set_warned): New functions. * main_loop.c: Intervening cmds don't make a second 'e' or 'q' fail. * io.c (write_file): Create missing intermediate directories. * ed.texi: Improve description of commands 'e', 'f', 'q'. * main.c, ed.texi: Improve description of exit status. * configure, Makefile.in: New variable 'MAKEINFO'. * INSTALL: Document use of CFLAGS+='--std=c99 -D_POSIX_C_SOURCE=2'. License-Update: Copyright year updated to 2024. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03lzip: upgrade 1.23 -> 1.24Wang Mingyu
Changelog: =========== * New options '--empty-error' and '--marking-error'. * main.cc: Reformat file diagnostics as 'PROGRAM: FILE: MESSAGE'. (show_option_error): New function showing argument and option name. (main): Make -o preserve date/mode/owner if 1 input file. (open_outstream): Create missing intermediate directories. * lzip.h: Rename verify_* to check_*. * configure, Makefile.in: New variable 'MAKEINFO'. * testsuite: New test files fox6.lz, fox6_mark.lz. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03ethtool: upgrade 6.6 -> 6.7Wang Mingyu
avoid_parallel_tests.patch refreshed for 6.7 Changelog: =========== * Feature: support for setting TCP data split * Fix: fix new gcc14 warning * Fix: fix SFF-8472 transceiver module identification (-m) * Misc: code cleanup Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-02-03cpio: upgrade 2.14 -> 2.15Wang Mingyu
Changelog: ========== * Fix operation of --no-absolute-filenames --make-directories * Restore access and modification times of symlinks in copy-in and copy-pass modes. 0001-configure-Include-needed-header-for-major-minor-macr.patch revmoed since it's included in 2.15 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-27xz: Add ptest supportChi Xu
There are two types of cases: executables and POSIX shell scripts. All test cases PASS. Add xz-ptest to PTESTS_FAST because test duration less than 30s on qemux86-64. root@qemux86-64:~# ptest-runner xz START: ptest-runner 2024-01-26T03:32 BEGIN: /usr/lib/xz/ptest === test_bcj_exact_size.c === PASS: test_exact_size PASS: test_empty_block Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-27classes/multilib: expand PACKAGE_WRITE_DEPS in addition to DEPENDSAlexander Kanavin
Otherwise, PACKAGE_WRITE_DEPS would contain non-multilib variants of dependencies even when building multilib items, resulting in sysroots being populated with entirely wrong versions of them. This hasn't been noticed until now through sheer (bad) luck, I think, except in the cpio recipe, but the previous commit shows that the issues did occur, quietly. Every other recipe in oe-core and meta-oe does not prepend the multilib prefix. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-24cronie: upgrade 1.7.0 -> 1.7.1Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-21shadow: replace static linking with dynamic libraries in a custom location ↵Alexander Kanavin
and bundled with shadow Despite our efforts to make static linking work, there have been new reports of bizarre build failures: https://lists.openembedded.org/g/openembedded-core/message/194006 https://lists.openembedded.org/g/openembedded-core/message/193907 This commit changes back to dynamic linking, but places the libraries in a custom location, per RP's suggestion. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19xz: upgrade 5.4.4 -> 5.4.5Wang Mingyu
Changelog: ============ * Small fixes and improvements to the tests. * Updated translations: Chinese (simplified) and Esperanto. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19stress-ng: upgrade 0.17.03 -> 0.17.04Wang Mingyu
Changelog: https://github.com/ColinIanKing/stress-ng/releases/tag/V0.17.04 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-19iputils: update to 20240117Petr Vorel
Changelog: * ping - fix: Restore -i0 (commit: 7a51494, PR: #519, regression from 2a63b94) * localization - Updated Turkish and Indonesian - 100% translated: Chinese (Simplified), Czech, French, Georgian, German, Korean, Portuguese (Brazil), Turkish, Ukrainian - > 90% translated: Finnish, Indonesian, Japanese Signed-off-by: Petr Vorel <petr.vorel@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-15mdadm: Disable 10ddf-fail-spare and 10ddf-fail-stop-readd testcasesKhem Raj
This always fails in my CI setup. There are some others which fail intermittently however, this one is deterministic and fails always e.g. AssertionError:- [1/1] Failed ptests: {'mdadm': ['/usr/lib/mdadm/ptest/tests/10ddf-fail-spareFAILED_-_see_/usr/lib/mdadm/ptest/logs/10ddf-fail-spare.log_and_/usr/lib/mdadm/ptest/lo Mark them broken for now. Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-12shadow: link executables statically for -native variantAlexander Kanavin
shadow 4.14.x adds a number of libraries it dynamically links with (md, bsd, attr). This causes troubles in setscene tasks where shadow executables are used (such as useradd), as pulling in the needed dynamic libraries needs unpleasant special-casing. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-12shadow: update 4.13 -> 4.14.2Alexander Kanavin
License-Update: formatting, spdx conversion Drop: 0001-Disable-use-of-syslog-for-sysroot.patch (issue fixed upstream) 0001-Fix-can-not-print-full-login.patch 0001-Overhaul-valid_field.patch CVE-2023-29383.patch (backports) libbsd is a new native dependency, as otherwise glibc >= 2.38 is needed. A similar fix is added to musl in order to define non-standard __BEGIN_DECLS/__END_DECLS. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-07gawk: Add coreutils to rdeps for ptests packageKhem Raj
newer gawk 5.3.0+ added a new testcase test/cmdlinefsbacknl2.sh which use od utility with -An option which is not available in busybox provided od applet. Replacing -An is not possible because default output for od is octal and the test wants to use none for radix thats why it uses -An. Fixes test/cmdlinefsbacknl2.sh failures in ptests which fails like below Usage: od [-aBbcDdeFfHhIiLlOovXx] [FILE] od: unrecognized option: A BusyBox v1.36.1 () multi-call binary. Sadly, this prolongs depchain if ptest distro feature is used but there is no other option if this test has to execute. Perhaps its best to report this to upstream gawk and request to fix the testcase to not hard depend on coreutils/od utility Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-07sudo: upgrade from 1.9.15p2 to 1.9.15p5Chen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-07gawk: upgrade from 5.2.2 to 5.3.0Chen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-01-03tcp-wrappers: drop libnsl2 build dependencyEnrico Scholz
The only libnsl2 function which is used by tcp-wrappers is 'yp_get_default_domain()'. When USE_GETDOMAIN is set, this is implemented as a simple wrapper around getdomainname() so that libnsl2 is not used at all. We added a patch which does '#include <rpcsvc/ypclnt.h>' to avoid implicit forward declaration. By conditionalizing this, the libnsl2 dependency can be dropped completely. Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-30iputils: upgrade 20221126 -> 20231222Wang Mingyu
Changelog: =========== - fix: Properly fix -Wpedantic warnings - fix: Set ppoll timeout minimum to 1ms #459) - fix: Revert "ping: use random value for the identifier field" to use PID again - fix: Fix support for DSCP (Traffic Class, option -Q) - fix: Fix the errno handling for strtod - fix: Drop redundant setsockopt(IPV6_TCLASS) call - fix: Fix overflow on negative -i - fix: Fix sporadically missing DNS record on targets with multiple IP addresses - fix: Handle interval correctly in the first second after booting - fix: Fix presentation of IPv6 addresses with no reverse DNS - fix: Add missing whitespace in IPv6 output - fix: Allow to localize help - fix: Use print target when empty ai_canonname - fix: Restore the MTU probing behavior") Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-30tzdata: Upgrade to 2023dShubham Kulkarni
Signed-off-by: Shubham Kulkarni <skulkarni@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-23man-pages: remove conflict pagesChangqing Li
Remove the pages which libxcrypt and shadow already have to avoid following conflicts during install man-pages and libxcrypt/shadow at the same time. Error: Transaction test error: file /usr/share/man/man3/crypt.3 from install of libcrypt-doc-4.4.33-r0.x86_64 conflicts with file from package man-pages-6.04-r0.x86_64 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-23sysstat: upgrade 12.7.4 -> 12.7.5Wang Mingyu
Changelog: =========== * [Quan quan Cao]: sar/sadc: Add new metrics pgprom/s and pgdem/s. * sar: Remove %vmeff metric. * sadf: Update various output formats to take into account metrics that have been added or removed. * Update DTD and XSD documents. * Update sar manual page. * sar: Add a cron entry and a new systemd service and timer to rotate daily data file at midnight. * Option -V with sysstat commands also displays environment contents. * [Sam Morris]: Use correct encoding to produce hyphen-minus when rendering man pages. * Add UMASK variable definition to sysstat(5) manual page. * Update non regression tests. * Add --getenv option to commands that didn't have it. * Update README file for Debian-based distros. * Update link to my personal web page in README and manual pages. * NLS: Translations updated. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-20rpcbind: Specify state directory under /runJoshua Watt
The state directory must be correctly specified as under /run because RequiresMountsFor doesn't follow symbolic links which means the unit may run before /run is mounted if the default of /var/run/rpcbind is kept Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-20stress-ng: upgrade 0.17.01 -> 0.17.03Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-09images: remove redundant IMAGE_BASENAME assignmentsRoss Burton
core-image-tiny-initramfs and core-image-testcontroller-initramfs just repeat PN, which is the default value. core-image-minimal-initramfs adds MLPREFIX, but that's also covered by PN: $ bitbake-getvar -r lib32-core-image-minimal-initramfs IMAGE_BASENAME IMAGE_BASENAME="lib32-core-image-minimal-initramfs" As these assignments are all redundant, remove them. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-08zstd: fix LICENSE statementMassimiliano Minella
zstd is dual-licensed under BSD _OR_ GPLv2. License wording in the README for v1.5.5 is misleading, but license headers in the code clearly state that there is a choice between the two licenses. Signed-off-by: Massimiliano Minella <massimiliano.minella@se.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-08man-db: 2.11.2 -> 2.12.0Hongxu Jia
Drop obsolete autoconf-2.73.patch Signed-off-by: Hongxu Jia <hongxu.jia@eng.windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-04bash: changes to SIGINT handler while waiting for a childXiangyu Chen
It rarely observes the problem while running shell script aborting test repeatedly, at the problem, the test shell script never returns to shell Steps to reproduce: 1. Run test script and ctrl-c repeatedly 2. Observe whether returns to shell after ctrl-c Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-04shadow: Fix for CVE-2023-4641Xiangyu Chen
shadow-utils: possible password leak during passwd(1) change CVE: CVE-2023-4641 Upstream-Status: Backport [https://github.com/shadow-maint/shadow/commit/65c88a43a23c2391dcc90c0abda3e839e9c57904] Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-04iptables: upgrade 1.8.9 -> 1.8.10Changhyeok Bae
- 0003-x is not required anymore because to xtables.conf is dropped. - format-security.patch is already in upstream. - Other patches are refreshed. Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-02libsolv: upgrade 0.7.26 -> 0.7.27Wang Mingyu
Changelog: ============ * add zstd support for the installcheck tool * add putinowndirpool cache to make file list handling in repo_write much faster Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-02ethtool: upgrade 6.5 -> 6.6Wang Mingyu
Changelog: =========== * Feature: support for more CMIS transceiver modules (-m) * Fix: fix build on systems with old kernel uapi headers Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-02cups: Add root,sys,wheel to system groupsMarkus Volk
The Cups documentation states: The default contains "admin", "lpadmin", "root", "sys" and/or "system". https://www.cups.org/doc/man-cups-files.conf.html#:~:text=SystemGroup Add root and sys accordingly Also add wheel group. This is required for systems with polkit support in order to control the printer settings with cups-pk-helper. Not only for gnome-control-center, but also when using plain system-config-printer on a system with running polkit, cups-pk-helper would be a required rdepend. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-12-02libpam: split /etc/environment into pam-plugin-env packageMartin Hundeb?ll
Since systemd-v255, pam-plugin-umask is pulled in by by the logind package config for systemd. This causes /etc/environment to be installed as part of libpam-runtime. In our case, this broke do_rootfs for our image, because /etc/environment is already provided by another (custom) recipe. Fix this by making the /etc/environment file part of the pam-plugin-env package, which isn't automatically pulled in by systemd-logind. It also happens to be the where it should be, as the file is installed as part of the pam_env plugin. Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-11-23libtirpc: upgrade 1.3.3 -> 1.3.4Anuj Mittal
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-20acpica: drop PE, PR from /usr/src/debug pathsMartin Jansa
Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-20sysstat: use nonarch libdir for tmpfiles.dMalte Schmidt
The documentation of systemd states that /etc/tmpfiles.d should be reserved for the local administrator and packages should put their files in /usr/lib/tmpfiles.d [1]. [1] https://www.freedesktop.org/software/systemd/man/tmpfiles.d.html Signed-off-by: Malte Schmidt <malte.schmidt@weidmueller.com> Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com> Signed-off-by: Lukas Funke <lukas.funke@weidmueller.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-20pam: use nonarch libdir for tmpfiles.dMalte Schmidt
The documentation of systemd states that /etc/tmpfiles.d should be reserved for the local administrator and packages should put their files in /usr/lib/tmpfiles.d [1]. [1] https://www.freedesktop.org/software/systemd/man/tmpfiles.d.html Signed-off-by: Malte Schmidt <malte.schmidt@weidmueller.com> Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com> Signed-off-by: Lukas Funke <lukas.funke@weidmueller.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-20stress-ng: upgrade 0.17.00 -> 0.17.01Wang Mingyu
Changelog: https://github.com/ColinIanKing/stress-ng/releases/tag/V0.17.01 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-20bash: upgrade 5.2.15 -> 5.2.21Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-20libsolv: upgrade 0.7.25 -> 0.7.26Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-20cups: Upgrade 2.4.6 -> 2.4.7Markus Volk
- enable tls by default to fix: | hash.c:16:12: fatal error: gnutls/crypto.h: No such file or directory | 16 | # include <gnutls/crypto.h> Changes in CUPS v2.4.7 (2023-09-20) ----------------------------------- - CVE-2023-4504 - Fixed Heap-based buffer overflow when reading Postscript in PPD files - Added OpenSSL support for cupsHashData (Issue #762) - Fixed delays in lpd backend (Issue #741) - Fixed extensive logging in scheduler (Issue #604) - Fixed hanging of `lpstat` on IBM AIX (Issue #773) - Fixed hanging of `lpstat` on Solaris (Issue #156) - Fixed printing to stderr if we can't open cups-files.conf (Issue #777) - Fixed purging job files via `cancel -x` (Issue #742) - Fixed RFC 1179 port reserving behavior in LPD backend (Issue #743) - Fixed a bug in the PPD command interpretation code (Issue #768) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-13ghostscript: Build and install shared libMarkus Volk
libgs is eg. needed to build ghostscript support for gimp also install the data target Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-10sudo: upgrade 1.9.14p3 -> 1.9.15p2Xiangyu Chen
Changelog: =========== 1.9.15p2: - Fixed a bug on BSD systems where sudo would not restore the terminal settings on exit if the terminal had parity enabled. 1.9.15p1: - Fixed a bug introduced in sudo 1.9.15 that prevented LDAP-based sudoers from being able to read the ldap.conf file. 1.9.15: - Fixed an undefined symbol problem on older versions of macOS when "intercept" or "log_subcmds" are enabled in sudoers. - Fixed "make check" failure related to getpwent(3) wrapping on NetBSD. - Fixed the warning message for "sudo -l command" when the command is not permitted. There was a missing space between "list" and the actual command due to changes in sudo 1.9.14. - Fixed a bug where output could go to the wrong terminal if "use_pty" is enabled (the default) and the standard input, output or error is redirected to a different terminal. Bug #1056. - The visudo utility will no longer create an empty file when the specified sudoers file does not exist and the user exits the editor without making any changes. GitHub issue #294. - The AIX and Solaris sudo packages on www.sudo.ws now support "log_subcmds" and "intercept" with both 32-bit and 64-bit binaries. Previously, they only worked when running binaries with the same word size as the sudo binary. GitHub issue #289. - The sudoers source is now logged in the JSON event log. This makes it possible to tell which rule resulted in a match. Running "sudo -ll command" now produces verbose output that includes matching rule as well as the path to the sudoers file the matching rule came from. For LDAP sudoers, the name of the matching sudoRole is printed instead. - The embedded copy of zlib has been updated to version 1.3. - The sudoers plugin has been modified to make it more resilient to ROWHAMMER attacks on authentication and policy matching. This addresses CVE-2023-42465. - The sudoers plugin now constructs the user time stamp file path name using the user-ID instead of the user name. This avoids a potential problem with user names that contain a path separator ('/') being interpreted as part of the path name. A similar issue in sudo-rs has been assigned CVE-2023-42456. - A path separator ('/') in a user, group or host name is now replaced with an underbar character ('_') when expanding escapes in @include and @includedir directives as well as the "iolog_file" and "iolog_dir" sudoers Default settings. - The "intercept_verify" sudoers option is now only applied when the "intercept" option is set in sudoers. Previously, it was also applied when "log_subcmds" was enabled. Sudo 1.9.14 contained an incorrect fix for this. Bug #1058. - Changes to terminal settings are now performed atomically, where possible. If the command is being run in a pseudo-terminal and the user's terminal is already in raw mode, sudo will not change the user's terminal settings. This prevents concurrent sudo processes from restoring the terminal settings to the wrong values. GitHub issue #312. - Reverted a change from sudo 1.9.4 that resulted in PAM session modules being called with the environment of the command to be run instead of the environment of the invoking user. GitHub issue #318. - New Indonesian translation from translationproject.org. - The sudo_logsrvd server will now raise its open file descriptor limit to the maximum allowed value when it starts up. Each connection can require up to nine open file descriptors so the default soft limit may be too low. - Better log message when rejecting a command if the "intercept" option is enabled and the "intercept_allow_setid" option is disabled. Previously, "command not allowed" would be logged and the user had no way of knowing what the actual problem was. - Sudo will now log the invoking user's environment as "submitenv" in the JSON logs. The command's environment ("runenv") is no longer logged for commands rejected by the sudoers file or an approval plugin. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-10libarchive: Add packageconfig knob for libb2Khem Raj
automatic detection could result in inconsistent host dependencies since it will be enabled for libarchive-native if the build host has libb2 installed and this can then fail on hosts which do not have this library installed Fixes errors like recipe-sysroot-native/usr/bin/opkg: error while loading shared libraries: libb2.so.1: cannot open shared object file: No such file or directory Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-06acpica: add nativesdk to BBCLASSEXTENDVincent Davis Jr
Enables use of the iasl compiler on the host side of a given generated SDK. via TOOLCHAIN_HOST_TASK += "nativesdk-acpica" Signed-off-by: Vincent Davis Jr <vince@underview.tech> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-05ghostscript: upgrade 10.02.0 -> 10.02.1Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2023-11-05msmtp: upgrade 1.8.24 -> 1.8.25Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-25 05:15:33 +0000