CVE-2021-36222:
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC)
in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2
allows remote attackers to cause a NULL pointer dereference and daemon
crash. This occurs because a return value is not properly managed in a
certain situation.
References:
https://nvd.nist.gov/vuln/detail/CVE-2021-36222
Patches from:
fc98f520ca
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-cmake-Use-GNUInstallDirs-instead-of-hard-coded-paths.patch
Removed since this is included in 1.10.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Without the udevrules cryptsetup luksOpen will be hanging with "Udev
cookie 0xd4de0f6 (semid 5) waiting for zero".
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This dependency introduces a cycle with pahole:
```
kernel --> pahole --> libbpf
^ /
\ /
`------------------<
```
pahole is a build time dependency of the kernel which is required to
generate BTF symbols. The dependency on the kernel configuration is nice
to have but makes using pahole during kernel compile time impossible.
Furthermore this dependency doesn't make sense when building libbpf
purely to ship it via a SDK.
Signed-off-by: Peter Morrow <pemorrow@linux.microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This release contains the following changes:
[Feature] --start-hidden to hide the cursor initially when unclutter-xfixes starts.
[Feature] --ignore-buttons to specify one or more buttons which do not unhide the cursor.
[Feature] --hide-on-touch to hide the cursor on touch input.
[Fix] --timeout now supports non-integer values.
Various improvements to the man page.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Support for toggle action (turn power on or off opposite to current power state) b99a080.
More sane error reporting when we enumerate devices which lack permissions 9b5efa0.
Allow pkg-config override to make some build systems (e.g. chromium OS) happier 92736a8.
Even more supported devices.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Release date: 2021-08-26
SHA-256: 059743e48b37e41579ee3a92e82e984bfa0d2a9a2b20b175d04db8089f46f047 (json.hpp)
61e605be15e88deeac4582aaf01c09d616f8302edde7adcaba9261ddc3b4ceca (include.zip)
Summary
This release is made days after the 3.10.1 release due to a bug in the release script:
The 3.10.1 release at GitHub contained the correct files,
but the associated tag v3.10.1 points to the wrong commit.
This release is made with a fixed build script. All changes are backward-compatible.
Improvements
Fix the release scripts to correctly tag releases. https://github.com/nlohmann/json/issues/2973
Fix some -Wunused warnings on JSON_DIAGNOSTICS when the library is built without CMake.
https://github.com/nlohmann/json/issues/2975https://github.com/nlohmann/json/pull/2976
Deprecated functions
Passing iterator pairs or pointer/length pairs to parsing functions
(basic_json::parse, basic_json::accept, basic_json::sax_parse, basic_json::from_cbor,
basic_json::from_msgpack, basic_json::from_ubjson, basic_json::from_bson)
via initializer lists is deprecated.
Instead, pass two iterators; for instance, call basic_json::from_cbor(ptr, ptr+len)
instead of basic_json::from_cbor({ptr, len}).
-License-Update: Copyright year updated to 2021.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS.
That's confusing because "virtual/" has no special meaning in
RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS).
Instead, using "virtual-" instead of "virtual/"
as already done in the glibc recipe in OE-core
Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libhidapi-libusb needs to convert from UTF-16LE to WCHAR_T in order to
read various libusb string descriptors.
Signed-off-by: Justin Bronder <jsbronder@cold-front.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
gpsd.hotplug is only needed if systemd is not used, in which case it
will be installed by scons.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-DtaAnnotatedDump-Add-typedef-name-to-the-union.patch
removed since it is included in 1.20.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This avoids the following error when splash is not enabled in
PACKAGECONFIG:
-- Could NOT find Boost (missing: Boost_INCLUDE_DIR) (Required is at
least version "1.58.0")
CMake Error at CMakeLists.txt:196 (message):
-- Boost recommended for Splash. Use ENABLE_BOOST=OFF to skip.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Remove -f*-prefix-map from LDFLAGS in krb5-config to fix reproducibility
issue.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- Fix issue with sending additional and vendor IEs
- Fix issue with IE ordering for 802.11-2020 support
- Fix issue with frequency update on channel switch events
- Fix issue with drivers and handling of IF_OPER_UP setting
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Features
issue #2732: Adding support for C++20 concepts (Origin: bugzilla #499352)
Introducing new sidebar layout via FULL_SIDEBAR option.
Added -q commandline-parameter for quiet operation
Add config option SHOW_HEADERFILE
Add config option WARN_IF_INCOMPLETE_DOC
Add config options GENERATE_SQLITE3, SQLITE3_OUTPUT and SQLITE3_RECREATE_DB to better control the sqlite3 output.
Add config option MATHJAX_VERSION to support both MathJax 2.x and 3.x
Allow more fine tuning of semanitic syntax highlighting via CSS classes
Use language name to get code coloring
Extra settings for MathJax V3
Support vertical alignment in multirow table
Add option for an anchor to the image command
Portuguese translators updated to 1.9.0.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
With the update to 3.23 (commit 87f3070f), the recipe was changed to
incorrectly install the gpsd.rules.in file instead of gpsd.rules. It
also missed that a new template string (@RUNDIR@) was introduced in the
systemd files, making them unusable.
Instead of trying to keep up with upstream changes, let scons do the job
and install the udev and systemd files by using the "udev-install"
production instead of "install".
In addition to the correct files being installed,
"/etc/udev/rules.d/gpsd.rules" is now "/lib/udev/rules.d/25-gpsd.rules".
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Drop patches such as 0001-disable-ucontext-on-musl.patch is used to
patch include/my_context.h which is deleted in 10.6.x [1] and rebase one
patch to avoid fuzz warnings.
[1] 32a29afea7
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Shared library build is known to not work on win32
platforms. Make it configurable.
Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Current patch is breaking the library dependencies added by cmake
especially when you are static linking.
Applications need the ws2_32 library to be linked for mingw32
and with the existing patch this is not getting passed to the users.
Current patch seems to address this issue:
https://github.com/c-ares/c-ares/issues/373
Both issues are resolved in 1.17.2:
1.17.2-r0/git $ find . | grep c-ares-config.cmake.in
./c-ares-config.cmake.in
1.17.2-r0/git $ find . | grep libcares.pc.cmake
./libcares.pc.cmake
Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Use standard paths for file cache on Linux and OSX
Various issues of memory/buffer handling in legacy drivers mostly
reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc,
westcos, gpk, flex, dnie, mcrd, authentic, belpic)
Add threading test to pkcs11-tool
Add support to generate generic secret keys
opensc-explorer: Print information about LCS (Life cycle status byte)
Add support for Apple's arm64 (M1) binaries, removed TokenD.
A seperate installer with TokenD (and without arm64 binaries) will be available.
Support for gcc11 and its new strict aliasing rules
Initial support for building with OpenSSL 3.0
pkcs15-tool: Write data objects in binary mode
Avoid limited size of log messages
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
