pkg_install: fix for missing O_CLOEXEC #156
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
1.8.0 (2025-02-06) * Numerous small optimizations. * Added key_cache option to Unpacker.
🚀 Features
(registry) add jd by @risu729 in #4318
(registry) add jc by @risu729 in #4317
(registry) Add qsv cli by @vjda in #4334
add support for idiomatic go.mod file by @roele in #4312
add -g short version for unuse cmd by @kimle in #4330
add git remote task provider by @acesyde in #4233
set usage arguments and flags as environment variables for toml tasks by @gturi in #4159
🐛 Bug Fixes
(aqua) trim prefix before comparing versions by @risu729 in #4340
wrong config file type for rust-toolchain.toml files by @roele in #4321
🚜 Refactor
(registry) use aqua for yq by @scop in #4326
📚 Documentation
(schema) fix description of task.dir default by @risu729 in #4324
Add PowerShell example by @jahanson in #3857
Include "A Mise guide for Swift developers" by @pepicrft in #4329
Update documentation for core tools by @hverlin in #4341
Update vitepress to fix search by @hverlin in #4342
Chore
(bun.lock) migrate bun lockfiles to text-based by @risu729 in #4319
5.0.11 (2025-01-30) Code cleanup/refactoring * Patch #42140: Update footer copyright year to 2025 Rails support * Defect #42113: Redmine 5.x not starting with ActiveSupport Logger error
5.1.6 (2025-01-29) Code cleanup/refactoring * Patch #41961: Use "fixtures :all" to ensure consistent test data and improve test reliability * Patch #42140: Update footer copyright year to 2025 Gems support * Defect #42013: Redmine fails to start with error: Unknown database adapter "mysql2" found in config/database.yml Issues * Defect #42066: NoMethodError exception occurs in IssuePriority#high and #low when both default and active priorities are absent Permissions and roles * Defect #42106: Member roles are incorrectly added when a user's memberships are updated Rails support * Defect #42113: Redmine 5.x not starting with ActiveSupport Logger error
6.0.3 (2025-01-29) Accounts / authentication * Defect #41930: Redirection after signing in fails when the back_url includes a port number Activity view * Defect #42003: Misalignment of icons and titles in Activity view * Defect #42070: Whitespace missing after hyphen between project name and event title in Activity view * Feature #42038: Improve readability by adjusting font sizes and colors in activity view and search results Attachments * Defect #42084: Placeholder icon for non-existent thumbnail flickers rapidly on hover Code cleanup/refactoring * Defect #42088: Fix incorrect syntax in application.css on 6.0-stable * Patch #41961: Use "fixtures :all" to ensure consistent test data and improve test reliability * Patch #42089: Fix Lint workflow error on 6.0-stable due to unsupported ruby/setup-ruby on Ubuntu 24.04 * Patch #42140: Update footer copyright year to 2025 Gantt * Defect #41925: Context menu submenus close unexpectedly on Gantt chart due to z-index conflict Gems support * Defect #42013: Redmine fails to start with error: Unknown database adapter "mysql2" found in config/database.yml Issues * Defect #42066: NoMethodError exception occurs in IssuePriority#high and #low when both default and active priorities are absent Permissions and roles * Defect #42106: Member roles are incorrectly added when a user's memberships are updated Rails support * Defect #42113: Redmine 5.x not starting with ActiveSupport Logger error * Patch #41970: Updates Rails to 7.2.2.1 UI * Defect #42023: Search results page uses legacy icons * Defect #42051: "Font used for text areas" setting causes inconsistent font size * Defect #42117: Key-value list reorder icon uses legacy icon * Defect #42126: The member table layout breaks due to .icon class on td elements * Defect #42130: Multiselect toggle uses legacy icons * Feature #42005: Improve readability of error pages by updating fonts and layout * Feature #42072: Adjust font size for breadcrumb and subtitle to improve readability and consistency
3.13.3 (2025-02-06) Bug fixes: * Fix reporter memorisation of ExamplesNotification used in RSpec::Core::Reporter#finish by reusing an instance across notifcations. (Maxime Lapointe, NetBSD#172) * Fix memorisation of RSpec::Core::Example#location_rerun_argument. (Maxime Lapointe, #173)
Changelog:
Version 30.0.5
Changes:
* Chore(i18n): Improved grammar (server#49100)
* Fix metadata storage with sharding (server#49165)
* Chore(i18n): Fixed grammar (server#49556)
* Fix(files): virtual scroller item size computation (server#49561)
* FIX WebDav MacOS failed uploads php-fpm and big files (-36 error) (server#
49562)
* Fix(maintenance): Show a success message on data-fingerprint command
(server#49591)
* Fix(setupcheck): Make the Memcache setupcheck use the cache (server#49594)
* Chore(absence): Add capability (server#49595)
* Fix(files): properly update paths and folder children on node move (server#
49610)
* Fix: Add command to update re-share if shared-by user has been revoked
(server#49612)
* Perf: improve performance of SharedStorage::getWatcher (server#49615)
* Add an error log message that notifications app isn??t enabled at file??
(server#49618)
* Fix(external_storage): Cast id to int (server#49624)
* Fix: promote re-shares when deleting the parent share (server#49629)
* Enh: Improvements on sharing details (server#49631)
* Fix: Handle copy of folders containing live photos (server#49650)
* Fix: smb: don??t fail hard if we can??t load acls for a file (server#49651)
* Fix: don??t propagate future mtimes (server#49656)
* Fix(migration): Check if table exists (server#49690)
* Fix(CalDav): add support for Microsoft time zones (server#49741)
* Fix(files): cancel renaming on enter if no file name changes (server#49752)
* Fix(CalDAV): disable both iTip and iMip messages (server#49780)
* Disable/hide share edit options when user can not edit the share (server#
49784)
* Fix(files): failsafe when executing actions methods (server#49792)
* Fix mimetype not being updated when changing file extention on objectstore
(server#49794)
* Fix: Fix ServiceWorker scope when Nextcloud installed in subfolder (server#
49798)
* Fix(files): throttle favorite with max 5 simultaneous requests (server#
49805)
* Fix(files_sharing): Fix error messages from password policy (server#49822)
* Revert ??fix: Handle copy of folders containing live photos?? (server#
49825)
* Improve select handling for sharded queries (server#49838)
* Fix(files_external): wrong type for external mount id (server#49846)
* Fix: return 204 instead of 404 (server#49851)
* Fix: replace null character when serializing (server#49855)
* Fix(TemplateManager): Make sure TemplateFolder is a Folder (server#49877)
* Fix(share): Don??t print twice the same text on emails (server#49878)
* Fix(ReferenceApiController): Bump rate limit for public resolve endpoint
(server#49884)
* Fix(View): Catch exceptions when executing mkdir for non-existent parents
(server#49894)
* Fix: make sure we have a valid scheme when testing ocm urls (server#49900)
* Fix(files): Only register preview service worker once when the instance is
hosted at the root path (server#49918)
* Fix(share): render conflict modal in public shares (server#49924)
* Fix: Create empty file instead of file with a space (server#49936)
* Fix(shares): Remove noisy text from email (server#49994)
* Fix(federatedfilesharing): fix notification typo (server#50014)
* Fix: remove references to non-existent ShareTypes (server#50021)
* Chore(ci): Run kerberos tests on ubuntu-latest (server#50023)
* Fix(cypress): flaky live photo test grid_view trigger issue (server#50028)
* Fix(logger): Prevent infinite recursion with log.condition => users or
matches (server#50031)
* Fix(app-store): add missing exApps list items to search filter (server#
50032)
* Fix(HTTP): Adjust JSONResponse data type (server#50058)
* Fix: block moving files to it??s own parent with dav (server#50060)
* Clarify installation wording to be clear that it is about account creation
(server#50062)
* Fix(preview): Do not try to parse M3U files as MP3 (server#50079)
* Fix(Http): Only allow valid HTTP status code values via template (server#
50089)
* Fix(SetupChecks): Don??t test caches using binary data (server#50117)
* Fix(files_sharing): Stop overwriting the share expiration date with the
default expiration date (server#50204)
* Sync NC<->app patch versions (app_api#477)
* Fix: do not override sharing text (circles#1816)
* Revert ??remove caching for shares?? (circles#1831)
* Fix(composer): update nextcloud/coding-standard to ^1.3 (logreader#1439)
* Fix(LogErrors): Handle unsupported log_type gracefully (logreader#1452)
* Chore(ci): update workflows (logreader#1462)
* Chore: update composer lock and nextcloud/ocp (photos#2741)
* Visual fixes and improvements (serverinfo#718)
* Chore(dev-deps): Bump nextcloud/ocp package (survey_client#354)
* Fix(notifications): Notifier::prepare() threw \InvalidArgumentExcepti??
(suspicious_login#962)
* Fix(deps): Bump symfony/process (suspicious_login#967)
* Fix(eslint): Fix linting javascript files, also lint typescript files (text
#6726)
* Fix(editor): Also unset `draggedOver` at drop (text#6731)
* Fix(files): catch race condition in FilesWorkspaceHeader init (text#6735)
* Fix(outline): fix mobile detection and box shadow (text#6739)
* Fix(debug): remove component in beforeDestroy hook (text#6757)
* Fix(cy): avoid double upload to prevent lock error (text#6761)
* Chore: Bump composer files with new composer version (text#6771)
* Fix(licenses): SPDF license in package.json and khroma (text#6792)
* Fix(link): Don??t throw exception on invalid URL href (text#6796)
* Fix: showing RichWorkspace for non-English language (text#6821)
* Fix(Editor): Broken translation ref (viewer#2624)
* Fix: source/dav handling and delete event payload (viewer#2627)
* Fix: Close viewer if we navigate back in browser history (viewer#2679)
Version 30.0.4
Changes:
* Fix(app-store): Add back legacy store API used for update and removal
(server#49216)
* Fix(activity): make emails for link share uploads true by default (server#
49691)
* Chore(deps-dev): bump @babel/node from 7.25.0 to 7.25.9 (server#49712)
* Chore(deps-dev): bump @nextcloud/cypress from 1.0.0-beta.8 to 1.0.0-beta.12
(server#49713)
* Chore(deps): bump @nextcloud/sharing from 0.2.3 to 0.2.4 (server#49714)
* Chore(deps): bump pinia from 2.2.6 to 2.2.8 (server#49715)
* Chore(deps-dev): bump cypress-split from 1.24.0 to 1.24.7 (server#49716)
* Fix(files_sharing): Stop infinite loop blocking link share requests (server
#49724)
* Fix(files_sharing): Correct property enforced property names (server#49809)
* Fix(files_sharing): also submit new share on password submit (server#49817)
* Update nextcloud/ocp dependency (logreader#1424)
* Fix npm audit (logreader#1434)
* Update nextcloud/ocp dependency (nextcloud_announcements#408)
* Update nextcloud/ocp dependency (notifications#2112)
* Update nextcloud/ocp dependency (serverinfo#717)
* Update dependency @rollup/rollup-linux-x64-gnu to ^4.28.1 (text#6716)
* Chore(deps): update dependency cypress-split to ^1.24.7 (text#6717)
* Fix(deps): update dependency @nextcloud/vue to ^8.21.0 (text#6748)
* Fix(deps): update dependency lib0 to ^0.2.99 (text#6749)
* Fix(deps): update dependency y-prosemirror to ^1.2.15 (text#6751)
Version 30.0.3 (Withdrawn)
Changes:
* Fix: Move cloud id into readonly input (server#48978)
* Fix(settings): Align contents of profile picture heading (server#48981)
* Build(deps-dev): bump cypress from 13.13.2 to 13.13.3 (server#49047)
* Fix(caldav): duration handling in the event reader class (server#49066)
* Clear pending two factor tokens also from configuration (server#49098)
* Fix(net/security): Handle IPv6 zone IDs in link-local addresses (server#
49107)
* Fix(TaskProcessingApiController): Don??t use + to merge non-assoc. arrays
(server#49110)
* Fix(files): multiselect and filters store declaration (server#49136)
* Fix(theming): Return default theme if the user never selected a theme
(server#49138)
* Fix(SharingEntryLink): Show default password before create if any (server#
49149)
* Fix(files_sharing): note icon color on public pages (server#49153)
* Fix(files): open sidebar on sharing tab by default for files (server#49157)
* Fix: undefined variable $response in DAV storage (server#49160)
* Fix(files): edit locally buttons and description (server#49161)
* Chore(deps-dev): Bump @pinia/testing from 0.1.5 to 0.1.7 (server#49174)
* Fix(files): view-in-folder enabled conditions (server#49180)
* Feat(testing): Add a fake summary task provider (server#49195)
* Fix: log a warning when we can??t build a background job (server#49207)
* Chore(github): Update groupware code owners (server#49214)
* Fix(files_external): cast storage id int (server#49222)
* Docs: Adjust taiwan translators (server#49230)
* Feat: Add X-NC-Disable-Scheduling property to allow skipping scheduling
(server#49234)
* Fx(dav): file request guest nickname encoding (server#49239)
* Fix remaining readdir() calls in loops with undesirable false evaluation
potential (server#49241)
* Fix(Middleware): log deprecation when annotation was actually used (server#
49242)
* Chore: Update `@nextcloud/upload` and `@nextcloud/files` (server#49250)
* Feat: mail provider settings (server#49254)
* Chore(deps): Add SabreDav Patch for iTip Broker (server#49264)
* Fix: override iTip Broker to fix several issues (server#49268)
* DNS: do not query CNAME if A succeeded already (server#49277)
* Textprocessing] Fix: Accept scheduling a task if there are equivalent
taskprocessing providers only (server#49280)
* Fix: use invokePrivate for test (server#49292)
* Fix: RDATE and EXDATE property instances (server#49302)
* Fix: Do not check for strict cookie when running webcron (server#49310)
* Build(deps-dev): bump jsdoc from 4.0.3 to 4.0.4 (server#49321)
* Build(deps-dev): bump @types/jest from 29.5.13 to 29.5.14 (server#49330)
* Fix(files): Allow downloading multiple nodes not from same base (server#
49344)
* Test(fakeAI): Allow to specify whether the fake providers should fail
(server#49358)
* Fix(core): Do not use `v-html` for translation output (server#49363)
* Fix(files): improve delete display name when trashbin is disabled (server#
49369)
* Fix(SetupChecks): Make sure array key is set (server#49373)
* Feat(settings): add big file upload setup checks (server#49384)
* Fix(job): Check if carddata is resource and read it to string (server#
49400)
* Fix: Properly calculate intermediate icon for touch icon generation (server
#49405)
* Fix(storage): Try to delete existing target (server#49410)
* Fix(files): Restore page title (folder ?? view ?? product) (server#49419)
* Fix: (CalDav) Delete invitation link when deleting Calendars or Events
(server#49429)
* Fix(BackgroundJobs): Adjust intervals and time sensitivities (server#49461)
* Fix(external_storage): Cast id to int (server#49468)
* Fix(OCMDiscoveryService): Also cache error results during discovery (server
#49472)
* Fix: invalid usage of IQueryBuilder::createNamedParameter() (server#49480)
* Fix(TaskProcessing): Set up fs in getFileContentsInternal (server#49491)
* Fix: throw correct exception type when we can??t verify if an s3 bucket
exists (server#49497)
* Fix(security): Update CA certificate bundle (server#49509)
* Fix(activity): Fix activity object type warnings (server#49522)
* Fix(migration): Decrypt ownCloud secrets v2 (server#49537)
* Chore: stricter access to testremote endpoint (server#49544)
* Feat: Use inline password confirmation in external storage settings (server
#49547)
* Fix(setupcheck): Disable PhpMaxFileSize setupcheck for now (server#49642)
* Add SabreDav Patch for iTip Broker (3rdparty#1983)
* Backport/stable30/430/manual (app_api#434)
* Check healthcheck and heartbeat after ExApp container start [backport]
(app_api#440)
* Stable30: updated CI to use actions/upload-artifact@v4 (app_api#444)
* Fix): do not expose haproxy password to UI (app_api#449)
* Fix): Encrypt sensitive values(haproxy_password) in the DB (app_api#454)
* Fix migration for postgres support. (app_api#458)
* Remove caching for shares (circles#1750)
* Fix(notification): Make sure the action URL is an absolute URL (circles#
1762)
* Fix(CoreQueryBuilder): Use correct member entry for circle as initiator
(circles#1765)
* Fix(FederatedUserService): Increase cache TTL for singleId to one week
(circles#1774)
* New daily maintenance to delete old federated events (circles#1777)
* Bypass user condition on cli (circles#1782)
* Fix duplicate name on fedcircle (circles#1783)
* Fix(activity): ensure absolute URL are used (circles#1786)
* Chore(deps-dev): Bump vite from 5.4.10 to 5.4.11 (firstrunwizard#1438)
* Build(deps): for NC 30 support PHP>=8.1 (logreader#1415)
* Fix(SetupCheck): remove debug(?) output (logreader#1418)
* Chore(deps): Bump vue-material-design-icons from 5.3.0 to 5.3.1
(notifications#2077)
* Chore(deps): Bump @nextcloud/dialogs from 5.3.7 to 5.3.8 (notifications#
2094)
* Fix: use NcCheckboxRadioSwitch in settings (recommendations#820)
* Fix: add missing description to command (recommendations#824)
* Update nextcloud/ocp dependency (serverinfo#695)
* Chore(deps): update dependency cypress-visual-regression to ^5.2.2 (text#
6470)
* Chore(deps): update dependency cypress-split to ^1.24.5 (text#6589)
* Chore(deps): update dependency vite to ^5.4.10 (text#6590)
* Fix(deps): update dependency @nextcloud/files to ^3.9.1 (text#6591)
* Fix(deps): update dependency mermaid to ^10.9.3 (text#6592)
* Fix(deps): update dependency vue-material-design-icons to ^5.3.1 (text#
6594)
* Fix(css): Set page `size: auto` instead of `size: A4` (text#6595)
* Fix some JS console errors (text#6600)
* Test(cypress): More specific selector for viewer header in links test (text
#6604)
* Fix(addContent): only process addExtensions once (text#6605)
* Feat(debug): Expose yjs debug function in editor API (text#6608)
* Fix(files): set focus on image description right after inserting (text#
6611)
* Fix(files): Reduce spacing between image and description a bit (text#6615)
* Fix(deps): update dependency @nextcloud/dialogs to ^5.3.8 (text#6620)
* Fix(deps): update tiptap to ^2.9.1 (text#6621)
* Fix(deps): update yjs (text#6622)
* Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.24.4
(text#6623)
* Chore(deps): update dependency eslint-plugin-cypress to ^3.6.0 (text#6624)
* Chore(deps): update dependency rollup-plugin-webpack-stats to ^1.1.1 (text#
6625)
* Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.25.0
(text#6627)
* Fix(deps): update dependency debounce to ^2.2.0 (text#6628)
* Fix npm audit (text#6644)
* Chore(deps): update dependency vite to ^5.4.11 (text#6658)
* Chore(deps): update dependency @rollup/rollup-linux-x64-gnu to ^4.27.2
(text#6659)
* Fix(deps): update dependency @nextcloud/files to ^3.10.0 (text#6662)
* Fix(deps): update dependency @nextcloud/vue to ^8.20.0 (text#6663)
* Revert ??fix(css): Set page `size: auto` instead of `size: A4`?? (text#
6669)
* Fix: log ignored workspace propfind exceptions at debug (text#6677)
* Fix npm audit (text#6691)
* Send one full update from y-websocket (text#6697)
* Ci: Run cypress on ubuntu-latest (text#6702)
* Feat: render text inserted from assistant (text#6704)
* Fix: catch all errors when getting rich workspace file (text#6705)
From Dmytro Kazankov via wip.
From Dmytro Kazankov via wip. * Package updated to upstream 2.0.1 release * Build type changed to "release" to avoid runtime exceptions: some patches added/changed, Makefile modified * Build process moved to gprbuild.mk
7.1.1 (2025-02-06) Bug Fixes: * Check wether rspec-mocks has been loaded before enabling signature verification for have_enqueued_job et al (Jon Rowe, #2823)
Successor of gmic-qt-digikam, renamed upstream. G'MIC is an open and full-featured framework for image processing, providing several different user interfaces to convert/manipulate/filter/visualize generic image datasets, from 1d scalar signals to 3d+t sequences of multi-spectral volumetric images. The package contains the digiKam plugin based on G'MIC.
1.1.1 (2025-01-07) * Fix method name typo (joshcooper)
Bugfix release.
Changed the built-in queries to use #any-of? predicate over #match? (NetBSD#80)
# changes (since 2.35.0)
2.36.1
A hotfix release to fix a regression introduced in 2.36.0
Changes:
To use the native arm64 runner of Github Action, Linux aarch64 binary is now built
with Ubuntu 22.04 (Glibc 2.35, Debian 12).
Bugfixes:
Chimera Linux logo is now displayed correctly (#1554, Logo)
Regression of 2.36.0
Fix building on Haiku
Logo:
Fix ALT Linux
2.36.0
Bugfixes:
Trim leading slash for login shells (Shell, OpenBSD)
Prefer SOC name if available over CPU name (CPU, Linux)
Features:
Use kernel API to detect sound devices (Sound, NetBSD)
Use sndio for sound server detection on OpenBSD (Sound, OpenBSD)
Add minimal implementation for Haiku (#1538, Haiku)
Support CPU & GPU temperature detection for M4x (CPU / GPU, macOS)
Support VMEM size detection for old Nvidia cards (GPU, Linux)
Use recommendedMaxWorkingSetSize as total GPU mem size (GPU, macOS)
Support Physical core count and CPU package count detection for loongarch (CPU, Linux)
Split ID_LIKE when used for distro matching (#1540, Logo)
Capitalize {type}'s first letter in custom format (#1543, Display)
Support model name detection for s390x (CPU, Linux)
Support more Armbian variants detection (#1547, OS, Linux)
Support the syntax of {$ENV_VAR} in custom format, which will be replaced by the value
of the environment variable ENV_VAR (#1541)
This is another way to pass 3rd-party data to fastfetch besides Custom module.
Improve performance of Tilix version detection (Terminal, Linux)
Logo:
Update arch_old
Add Nexa Linux
Add filotimo
Update some distro names
# noteworthy changes - prevent growth of kevent array in libevent - add osmtpd_register_report_aut and friends. - Export osmtpd_filter_rewrite - Introduced osmtpd_warn and osmtpd_warnx - disconnect remote if session/message local memory callback fails - Add support for tx-reset
- When diffing directories, difftastic now ignores the .git directory. - Fixed an issue where --display=side-by-side-show-both would not use a two-column display when one file was empty. - Difftastic no longer accepts the --missing-as-empty argument. This argument has had no effect since 0.46. - File detection now supports Windows-1252 encoded text (an extension of ISO-8859-1), and is stricter about UTF-16 detection. - Updated to the latest tree-sitter parser for Elixir, LaTeX, Make, Nix, Rust and YAML.
We've now had multiple cases where gcc10, previously required, is inadequate to compiler c++20 programs. That, together with gcc documenting that gcc12 is required, is adequate justification. (As discussed on tech-pkg earlier, and just now.)
# changes * Remove .desktop suffix when calling setDesktopFileName * Allow to override Qt plugin directory with cmake * Support cmake build without QtWidgets * Support runtime settings update without QtWidgets * Don't save style name for regular font * Don't rely on label font for saving font settings * Fix initial fonts * Use QWindowSystemInterface::handleThemeChange * Add KDE theming support
### Major changes between OpenSSL 3.4.0 and OpenSSL 3.4.1 [11 Feb 2025]
OpenSSL 3.4.1 is a security patch release. The most severe CVE fixed in this
release is High.
This release incorporates the following bug fixes and mitigations:
* Fixed RFC7250 handshakes with unauthenticated servers don't abort as expected.
([CVE-2024-12797])
* Fixed timing side-channel in ECDSA signature computation.
([CVE-2024-13176])
Changes:
- Bug 1923285 - libclang-16 -> libclang-19
- Bug 1939086 - Turn off Secure Email Trust Bit for Security
Communication ECC RootCA1.
- Bug 1937332 - Turn off Secure Email Trust Bit for BJCA Global Root CA1
and BJCA Global Root CA2.
- Bug 1915902 - Remove SwissSign Silver CA – G2.
- Bug 1938245 - Add D-Trust 2023 TLS Roots to NSS
- Bug 1942301 - fix fips test failure on windows.
- Bug 1935925 - change default sensitivity of KEM keys.
- Bug 1936001 - Part 1: Introduce frida hooks and script,
- Bug 1942350 - add missing arm_neon.h include to gcm.c.
- Bug 1831552 - ci: update windows workers to win2022
r=nss-reviewers,nkulatova NSS_3_108_BETA2
- Bug 1831552 - strip trailing carriage returns in tools tests
r=nss-reviewers,nkulatova
- Bug 1880256 - work around unix/windows path translation issues in cert
test script r=nss-reviewers,nkulatova
- Bug 1831552 - ci: let the windows setup script work without $m
r=nss-reviewers,nkulatova
- Bug 1880255 - detect msys r=nss-reviewers,nkulatova
- Bug 1936680 - add a specialized CTR_Update variant for AES-GCM.
r=nss-reviewers,keeler
- Bug 1930807 NSS policy updates - cavs NSS_3_108_BETA1
- Bug 1930806 FIPS changes need to be upstreamed: FIPS 140-3 RNG
- Bug 1930806 FIPS changes need to be upstreamed: Add SafeZero
- Bug 1930806 FIPS changes need to be upstreamed - updated POST
- Bug 1933031 Segmentation fault in SECITEM_Hash during pkcs12 processing
- Bug 1929922 - Extending NSS with LoadModuleFromFunction functionality
r=keeler,nss-reviewers
- Bug 1935984 - Ensure zero-initialization of collectArgs.cert,
r=djackson,nss-reviewers
- Bug 1934526 - pkcs7 fuzz target use CERT_DestroyCertificate,
r=djackson,nss-reviewers
- Bug 1915898 - Fix actual underlying ODR violations issue,
r=djackson,nss-reviewers
- Bug 1184059 - mozilla::pkix: allow reference ID labels to begin and/or
end with hyphens r=jschanck
- Bug 1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
NSS_DISABLE_DBM is set r=jschanck
- Bug 1934526 - Fix memory leak in pkcs7 fuzz target,
r=djackson,nss-reviewers
- Bug 1934529 - Set -O2 for ASan builds in CI, r=djackson,nss-reviewers
- Bug 1934543 - Change branch of tlsfuzzer dependency,
r=djackson,nss-reviewers
- Bug 1915898 - Run tests in CI for ASan builds with
detect_odr_violation=1, r=djackson,nss-reviewers
- Bug 1934241 - Fix coverage failure in CI, r=djackson,nss-reviewers
- Bug 1934213 - Add fuzzing for delegated credentials, DTLS short header
and Tls13BackendEch, r=djackson,nss-reviewers
- Bug 1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
SSL_SetDtls13VersionWorkaround, r=djackson,nss-reviewers
- Bug 1913677 - Part 3: Restructure fuzz/, r=djackson,nss-reviewers
- Bug 1931925 - Extract testcases from ssl gtests for fuzzing,
r=djackson,nss-reviewers
- Bug 1923037 - Force Cryptofuzz to use NSS in CI,
r=nss-reviewers,nkulatova
- Bug 1923037 - Fix Cryptofuzz on 32 bit in CI, r=nss-reviewers,nkulatova
- Bug 1933154 - Update Cryptofuzz repository link,
r=nss-reviewers,nkulatova
- Bug 1926256 - fix build error from 9505f79d r=jschanck
- Bug 1926256 - simplify error handling in get_token_objects_for_cache.
r=rrelyea
- Bug 1931973 - nss doc: fix a warning r=bbeurdouche
- Bug 1930797 pkcs12 fixes from RHEL need to be picked up.
### Purpose - Security updates for INTEL-SA-01166 - Security updates for INTEL-SA-01213 - Security updates for INTEL-SA-01139 - Security updates for INTEL-SA-01228 - Security updates for INTEL-SA-01194 - Update for functional issues. Refer to Intel Core Ultra Processor Specification Update for details. - Update for functional issues. Refer to 13th/14th Generation Intel Core Processor Specification Update for details. - Update for functional issues. Refer to 12th Generation Intel Core Processor Family Specification Update for details. - Update for functional issues. Refer to 11th Gen Intel Core Processor Specification Update for details. - Update for functional issues. Refer to 8th and 9th Generation Intel Core Processor Family Spec Update for details. - Update for functional issues. Refer to 5th Gen Intel Xeon Scalable Processors Specification Update for details. - Update for functional issues. Refer to 4th Gen Intel Xeon Scalable Processors Specification Update for details. - Update for functional issues. Refer to 3rd Generation Intel Xeon Processor Scalable Family Specification Update for details. - Update for functional issues. Refer to Intel Xeon D-2700 Processor Specification Update for details. - Update for functional issues. Refer to Intel Xeon E-2300 Processor Specification Update for details. - Update for functional issues. Refer to Intel Xeon 6700-Series Processor Specification Update for details. - Update for functional issues. Refer to Intel Processors and Intel Core i3 N-Series for details ### New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SRF-SP | C0 | 06-af-03/01 | | 03000330 | Xeon 6700-Series Processors with E-Cores ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000037 | 00000038 | Core Gen12 | ADL | H0 | 06-97-05/07 | 00000037 | 00000038 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000435 | 00000436 | Core Gen12 | ADL | R0 | 06-9a-04/80 | 00000435 | 00000436 | Core Gen12 | ADL-N | N0 | 06-be-00/19 | 0000001a | 0000001c | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E | AZB | A0/R0 | 06-9a-04/40 | 00000007 | 00000009 | Intel(R) Atom(R) C1100 | CFL-H | R0 | 06-9e-0d/22 | 00000100 | 00000102 | Core Gen9 Mobile | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000f8 | 000000fa | Core Gen8 Desktop, Mobile, Xeon E | EMR-SP | A0 | 06-cf-01/87 | 21000283 | 21000291 | Xeon Scalable Gen5 | EMR-SP | A1 | 06-cf-02/87 | 21000283 | 21000291 | Xeon Scalable Gen5 | ICL-D | B0 | 06-6c-01/10 | 010002b0 | 010002c0 | Xeon D-17xx, D-27xx | ICX-SP | Dx/M1 | 06-6a-06/87 | 0d0003e7 | 0d0003f5 | Xeon Scalable Gen3 | RPL-E/HX/S | B0 | 06-b7-01/32 | 0000012b | 0000012c | Core Gen13/Gen14 | RPL-H/P/PX 6+8 | J0 | 06-ba-02/e0 | 00004123 | 00004124 | Core Gen13 | RPL-HX/S | C0 | 06-bf-02/07 | 00000037 | 00000038 | Core Gen13/Gen14 | RPL-U 2+8 | Q0 | 06-ba-03/e0 | 00004123 | 00004124 | Core Gen13 | RPL-S | H0 | 06-bf-05/07 | 00000037 | 00000038 | Core Gen13/Gen14 | RKL-S | B0 | 06-a7-01/02 | 00000062 | 00000063 | Core Gen11 | SPR-HBM | Bx | 06-8f-08/10 | 2c000390 | 2c0003e0 | Xeon Max | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000603 | 2b000620 | Xeon Scalable Gen4 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000603 | 2b000620 | Xeon Scalable Gen4 | TWL | N0 | 06-be-00/19 | 0000001a | 0000001c | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E ### New Disclosures Updated in Prior Releases | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | CFL-H/S | P0 | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9
netbsd-srcmastr
force-pushed
the
trunk
branch
from
d20f2e4 to
c5df823
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
11 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
macOS < 10.7 does not have
O_CLOEXEC. This matches the fix for another macro just below, and used elsewhere, for example, inlegacy-supportlibrary: https://github.com/macports/macports-legacy-support/blob/1965ad6ab6c31842158d53ee38f4828e517278a5/include/sys/fcntl.h#L35-L37With this patch,
pkgsrccan be bootstrapped on 10.6.