2318 Commits

Author SHA1 Message Date
Changqing Li
ba1fd62faa
ostree: drop soup2 option
* libsoup-2.4 is deprecated, and some recipes already stop support of
  soup2, soup2 and soup3 cannot be used together
* ostree upstream already stop test of soup2, refer [1]
* Remove unnecessary comments, PACKAGECONFIG for ptest already set in bb

[1] https://github.com/ostreedev/ostree/pull/3531

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-30 19:46:39 -07:00
Hongxu Jia
e2bdd9cee2
dialog: 1.3-20250116 -> 1.3-20260107
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-30 19:46:39 -07:00
Markus Volk
99531e79e7
flatpak: update 1.17.2 -> 1.17.3
Enhancements:

* Improve check for --filesystem paths pointing to a parent folder (#6473)

* Fail if non-interactive and multiple refs, remotes or installations match
  (#5754)

* Default to text auth on WSL (#6491)

* Add build instructions for Ubuntu 24.04 (#6498)

* Show a better message when there are no refs to update (#6521)

* Silence AppStream refresh output on non-interactive runs (#6521)

* Translation updates: pt_BR (#6483), sl (#6468, #6475), sv (#6514), tr (#6528),
  zh_CN (#6469, #6477)

Bug fixes:

* Map the font-dirs.xml file more selectively (#6450)

* Change const pointers. This fixes build issues with glibc 2.43. (#6490)

* Add custom type flatpak_home_t for ~/.local/share/flatpak for SELinux (#6437)

* Fix build warnings when compiling with -Wanalyzer-null-argument and with
  -Wanalyzer-null-dereference (#6527)

* Use raw string for regular expression in the flatpak-bisect script (#6519)

Internal changes:

* Set the `FLATPAK_TRIGGERSDIR` environment variable when running
  installed tests. This fixes a regression with autopkg tests in
  Debian. (#6444)

* Add translator comments for some translatable strings (#6462)

* Fix typos in translatable strings (#6463)

* Fix lots of typos in code comments (#6482)

* Remove an unused function (#6529)

* Update two strings (#6464)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 19:43:42 -07:00
Hongxu Jia
6b5936f19a
ostree: upgrade 2024.10 -> 2025.7
Due to upstream commit [1], drop ostree-finalize-staged.path

[1] 2b9912e9f9

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:11:20 -07:00
Changqing Li
becb5f51ef
dlt-daemon: fix do_install failure
Fix do_install failure:
sed: can't read ../dlt-daemon/3.0.0/image/usr/lib/pkgconfig/automotive-dlt.pc: No such file or directory

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:06 -07:00
Wang Mingyu
5e96701ccc
qcbor: upgrade 1.6 -> 1.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:02 -07:00
Deepesh Varatharajan
3d731a94dc
sd: Add sd recipe
sd is a fast, intuitive, and user-friendly alternative to sed, written in Rust.
Add recipe for the latest release (1.1.0).

- Uses a simple and readable search-and-replace syntax, reducing the complexity
  of sed commands.
- Fully supports regular expressions, Unicode, and preserves line endings.
- Faster, safer, and easier to use than traditional sed for common text
  manipulation tasks.

More information: https://github.com/chmln/sd

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-25 16:33:18 -07:00
Khem Raj
ff7df48cac
canopenterm: Disable pinning lua to expect c89
Fixes build with latest lua

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-24 10:05:54 -07:00
Rasmus Villemoes
a835cf9a2a
fluentbit: improve path munging in debug source files
Just remapping TMPDIR to TARGET_DBGSRC_DIR results in the files that
end up in the -src package containing lines such as

  #line 196 "/usr/src/debug/fluentbit/4.0.1//work/cortexa76-oe-linux/fluentbit/4.0.1/sources/fluentbit-4.0.1/lib/cmetrics/src/cmt_decode_prometheus.l"
  #line 1561 "/usr/src/debug/fluentbit/4.0.1//work/cortexa76-oe-linux/fluentbit/4.0.1/build/lib/cmetrics/cmt_decode_prometheus_parser.c"

By instead remapping both B and S, we strip more of the irrelevant
part of WORKDIR, and one ends up with line directives in the -src
package that actually match the source files' location in that
package:

  #line 196 "/usr/src/debug/fluentbit/4.0.1/lib/cmetrics/src/cmt_decode_prometheus.l"
  #line 1561 "/usr/src/debug/fluentbit/4.0.1/lib/cmetrics/cmt_decode_prometheus_parser.c"

  $ find packages-split/fluentbit-src/ -name cmt_decode_prometheus*.[cl] | sort
  packages-split/fluentbit-src/usr/src/debug/fluentbit/4.0.1/lib/cmetrics/cmt_decode_prometheus_lexer.c
  packages-split/fluentbit-src/usr/src/debug/fluentbit/4.0.1/lib/cmetrics/cmt_decode_prometheus_parser.c
  packages-split/fluentbit-src/usr/src/debug/fluentbit/4.0.1/lib/cmetrics/src/cmt_decode_prometheus.c
  packages-split/fluentbit-src/usr/src/debug/fluentbit/4.0.1/lib/cmetrics/src/cmt_decode_prometheus.l
  packages-split/fluentbit-src/usr/src/debug/fluentbit/4.0.1/lib/cmetrics/src/cmt_decode_prometheus_remote_write.c

and that also matches the remapping that the compiler is instructed to
do via the -ffile-prefix-map mechanism.

Signed-off-by: Rasmus Villemoes <ravi@prevas.dk>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-24 09:13:49 -07:00
Gyorgy Sarvari
b883bd25cd
wtmpdb: add DEBUG_PREFIX_MAP to LDFLAGS to fix qa error
Fixes qa error:
ERROR: wtmpdb-0.11.0-r0 do_package_qa: QA Issue: File /usr/bin/.debug/wtmpdb in package wtmpdb-dbg contains reference to TMPDIR [buildpaths]
ERROR: wtmpdb-0.11.0-r0 do_package_qa: QA Issue: File /usr/lib/.debug/libwtmpdb.so.0.11.0 in package wtmpdb-dbg contains reference to TMPDIR [buildpaths]
ERROR: wtmpdb-0.11.0-r0 do_package_qa: QA Issue: File /usr/lib/security/.debug/pam_wtmpdb.so in package wtmpdb-dbg contains reference to TMPDIR [buildpaths]

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-20 14:13:11 -07:00
Liu Yiding
0fa0257275
sysdig: upgrade 0.28.0 -> 0.39.0
Upgrade sysdig to solve build failure after upgrading valijson to 1.1.0.

1.Changelog
  https://github.com/draios/sysdig/releases/tag/0.39.0

2.Update 0001-cmake-Pass-PROBE_NAME-via-CFLAGS.patch for 0.39.0

3.Remove following patches as merged upstream
  0001-Add-cstdint-for-uintXX_t-types.patch
  0001-libsinsp-fix-build-with-gcc-15.patch

4.Add 0001-Avoid-duplicate-operations-of-add_library.patch to fix do_configure errors
  -- Existing strlcat found, will *not* use local definition
  CMake Error at falcosecurity-libs/userspace/libscap/CMakeLists.txt:64 (add_library):
    add_library cannot create target "scap_error" because another target with
    the same name already exists.  The existing target is a static library

5.Add CMAKE option -DBUILD_SYSDIG_MODERN_BPF=OFF to fix bpf header file not found issue
  sysdig/0.39.0/recipe-sysroot/usr/include/bits/syscall.h:23:10: fatal error: 'bits/syscall-32.h' file not found
  |    23 | #include <bits/syscall-32.h>

6.Add do_configure:prepend() function and CFLAGS/CXXFLAGS to fix header file not found issue
  sysdig/0.39.0/sources/sysdig-0.39.0/falcosecurity-libs/userspace/libscap/engine/kmod/scap_kmod.c:30:10: fatal error: driver_config.h: No such file or directory
  |    30 | #include <driver_config.h>

7.Add do_compile:append() function to fix do_package QA Issue

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-20 14:13:06 -07:00
Gyorgy Sarvari
b368ce1790
qad: add patch to build with glibc 2.43
As the subject says. Fixes compilation error:

| ../sources/qad-0.0+git/src/server.c:212:22: error: initialization discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers]
|   212 |   char *pLastSlash = strrchr(url, '/');

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-20 09:51:45 -07:00
Changqing Li
0001e284a9
dlt-daemon: upgrade 2.18.10 to 3.0.0
Changes:
https://github.com/COVESA/dlt-daemon/releases

Remove patches already in 3.0.0:
544.patch
567.patch
0001-CMakeLists-txt-make-DLT_WatchdogSec-can-be-set-by-user.patch
0003-allow-build-with-cmake-4.patch

Add patches to fix build failures
0001-Fix-compile-failure-related-to-gzlog.patch
0001-Fix-kinds-of-build-failure.patch
0001-Fix-build-failures.patch
0001-fix-build-failure-when-systemd-is-enabled.patch
0001-Fix-build-failure-with-glibc-2.43.patch

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:34 -07:00
Deepesh Varatharajan
0270b1c372
fd-find: update 10.3.0 -> 10.4.2
Changes are here:
https://github.com/sharkdp/fd/compare/v10.3.0...v10.4.2

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:33 -07:00
Daniel McGregor
0530bb6f6c
redis 8: Update licence
Redis 8.0 and later are tri-licensed, the licence options are:
* Redis Source Available License v2
* Server Side Public License v1.0
* GNU Affero GPL v3.0

Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:29 -07:00
Chen Qi
3ca4583515
lockfile-progs: upgrade from 0.1.19 to 0.2.0
In this new version, we need to 'rewrite-time' first as
it's a build host tool that is used during the actual build.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:21 -07:00
Andrej Kozemcak
3f468ccce0
libcbor: upgrade 0.12.0 -> 0.13.0
Remove patch, the change is already in code.

Changelog:
  https://github.com/PJK/libcbor/releases/tag/v0.13.0

  Changed:
    - Fix small typo in release script
    - Fix failing 32 bit tests due to cmocka macro repeating stack pushes
    - Set cmake_minimum_required to 3.5
    - Fix float_ctrl ctrl assertions failing in debug mode
    - Check in vscode setup
    - Add CBOR sequences example
    - Add riscv64 config to CircleCI
    - Add a test for malformed definite maps
    - Add [[nodiscard]] support and auto-update to C23 in cmake
    - Configure ctest on to export the test results to CircleCI
    - Revamp the introduction doc into a more useful crash course
    - Add OSX asan/lsan supression config
    - Add cbor_copy_definite
    - Improve handling and coverage reporting of exhaustive enum switches
    - Add references to readme
    - Update python deps and related docs
    - Link tutorial in readme (and fix embedded RST formatting)
    - Add a doc note on lto linking
    - Add a doc for the reference count in cbor_array_set().
    - Add gh link to docs
    - Add #355 to changelog
    - Bump version to 0.13.0

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:21 -07:00
Liu Yiding
964cbd0107
tmux: upgrade 3.6 -> 3.6a
1. Change log:
  https://raw.githubusercontent.com/tmux/tmux/3.6a/CHANGES

2. Change HOMEPAGE to github.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:24 -07:00
Liu Yiding
5dd79230ea
bit7z: upgrade 4.0.9 -> 4.0.11
1. Changelog:
  https://github.com/rikyoz/bit7z/releases/tag/v4.0.11

2. Drop following patches as they were merged upstream.
  0001-Fix-reinterpret-cast-compiler-errors.patch
  0001-Fix-int8_t-storage-in-BitPropVariant-on-Arm-architec.patch
  0001-Allow-running-tests-on-target-when-cross-compiling.patch
  0001-Allow-specifying-path-to-7z-library-in-tests.patch
  0001-Fix-tests-with-musl.patch

3. Adjust Ptest SRCREV to adopt to latest bit7z

  SRCREV_filesystem refer to bit7z-4.0.11/cmake/Dependencies.cmake
  SRCREV_catch2 refer to bit7z-4.0.11/tests/CMakeLists.txt
  SRCHASH_CPM and TAG_CPM refer to bit7z-4.0.11/cmake/Dependencies.cmake

4.cmake/Dependencies.cmake has redefined to check and download CPM_${CPM_DOWNLOAD_VERSION}.cmake file to
CPM_SOURCE_CACHE, so it will show error in do_configure as ./build/cpm_cache/cpm/CPM_0.42.0.cmake is empty

  | -- Downloading CPM.cmake to ...bit7z/4.0.11/build/cpm_cache/cpm/CPM_0.42.0.cmake
  | CMake Error at cmake/Dependencies.cmake:15 (file):
  |   file DOWNLOAD cannot compute hash on failed download
  |
  |     from url: "https://github.com/cpm-cmake/CPM.cmake/releases/download/v0.42.0/CPM.cmake"
  |     status: [6;"Could not resolve hostname"]

  So change ${B}/cmake to ${B}/cpm_cache/cpm/ to fix this issue.
  ./build/cpm_cache/cpm/CPM_0.42.0.cmake

5. Add 0001-cmake-disable-filesystem-gitclone.patch to fix filesystem git clone error

  Fix error log as following:
  | fatal: unable to access 'https://github.com/rikyoz/filesystem.git/': Could not resolve host: github.com
  | Had to git clone more than once: 3 times.
  | CMake Error at bit7z/4.0.11/build/_deps/ghc_filesystem-subbuild/ghc_filesystem-populate-prefix/tmp/ghc_filesystem-populate-gitclone.cmake:50 (message):
  |   Failed to clone repository: 'https://github.com/rikyoz/filesystem.git'

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:22 -07:00
Andrej Kozemcak
43e38ada0f
libmodbus: upgrade 3.1.11 -> 3.1.12
Add 'tag' to SRC_URI

Changelog:
  https://github.com/stephane/libmodbus/releases/tag/v3.1.12

Changes:
- Fix FD_SET overflow when socket fd >= FD_SETSIZE.
- Check dest pointer not null and nb in read functions.
- NULL check for src and nb < 1 validation in write functions.
- modbus_reply: don't compute address for FC 0x07/0x11.
- Use O_NONBLOCK instead of deprecated O_NDELAY
- Explicit cast for Coverity CID 416366.
- Document required buffer size of modbus_receive.
- Document macros for error codes corresponding to Modbus exceptions
- Fix example of modbus_rtu_set_serial_mode
- Test filesystem provides symlink in autogen.sh
- Sync API signatures with the documentation.
- Many documentation fixes and typo corrections.
- Add coverage target and helper script.

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:20 -07:00
Andrej Kozemcak
50ac24430d
jansson: upgrade 2.14.1 -> 2.15.0
Removed patch included in this release

Changelog: https://github.com/akheron/jansson/releases/tag/v2.15.0

Features:
  - Add support for realloc by adding json_set_alloc_funcs2, json_get_alloc_funcs2

Fixes:
  - Optimize serializatio
  - Fix docstrings in hashtable.h

Build:
  - Use target-based cmake settings

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:19 -07:00
Andrej Kozemcak
2979300f99
fluentbit: upgrade 4.2.2 -> 4.2.3.1
The tag is not on any branch.

Changelog:
  https://github.com/fluent/fluent-bit/releases?q=4.2.3.1

Changes:
- release: update to 4.2.3
- copyright: update year to 2026
- filter_kubernetes: fix parser annotation leak
- github: scripts: commit_linter: Handle bin prefix for fluent-bit.c
- bin: Handle CONT signal properly under leaks command
- filter_wasm: Handle group metadata
- cmake: kafka: fix OAuth Bearer detection on Windows
- maintenance: update branch and security EOL info
- github: scripts: commit_prefix_check: add config format rules on linter
- readme: update active branch 4.2
- out_opentelemetry: on HTTP/2, read and process gRPC status code
- config_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2]
- filter_log_to_metrics: fix initialization and exception cleanup
- out_stackdriver: clean up oauth2 cache lifecycle
- filter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport]
- in_winevtlog: Add text format for event rendering [Backport to 4.2]
- in_tail: Add skipped_lines counter [Backport to 4.2]
- in_splunk: Implement handling remote addr feature [Backport to 4.2]
- aws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport]
- plugin_proxy: enable event_type specification for proxy plugins (4.2 Backport)
- in_splunk: Plug memory issues [Backport to 4.2]
- dockerfiles: install minimum components and avoiding to use includeRecommended

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:18 -07:00
Gyorgy Sarvari
53e8f46ff7
redis: remove unneeded CVE_STATUS tags
These CVEs were ignored because they were tracked by NVD using
incorrect version information. Since then this information seems
to be reflected correctly, it is not needed to ignore them explicitly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:16 -07:00
Gyorgy Sarvari
ec741a75f0
redis: upgrade 8.0.0 -> 8.0.6
License-Update:
- Upstream has removed incorrect gplv3 text from the license (because agplv3
  is the correct), which changed the checksum
- The recipe had incorrect license indication. Redis 8 is not BSD licensed,
  but depending on the user's choice, it's agplv3 or sspl (or custom redis
  license, which is not added to the list)

Changelogs:
8.0.6:
- Security fix: A user can manipulate data read by a connection by
  injecting \r\n sequences into a Redis error reply

8.0.5:
Bugfixes:
- HGETEX - potential crash when FIELDS is used and numfields is missing
- Potential crash on HyperLogLog with 2GB+ entries
- Cuckoo filter - Division by zero in Cuckoo filter insertion
- Cuckoo filter - Counter overflow
- Bloom filter - Arbitrary memory read/write with invalid filter
- Bloom filter - Out-of-bounds access with empty chain
- Bloom filter - Restore invalid filter [We thank AWS security for
  responsibly disclosing the security bug]
- Top-k - Out-of-bounds access

8.0.4:
Security fixes
- (CVE-2025-49844) A Lua script may lead to remote code execution
- (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
- (CVE-2025-46818) A Lua script can be executed in the context of another user
- (CVE-2025-46819) LUA out-of-bound read

New Features
- VSIM: new EPSILON argument to specify maximum distance

Bug fixes
- Potential use-after-free after pubsub and Lua defrag
- Potential crash on Lua script defrag
- HINCRBYFLOAT removes field expiration on replica
- Prevent CLIENT UNBLOCK from unblocking CLIENT PAUSE
- Endless client blocking for blocking commands
- Vector sets - RDB format is not compatible with big endian machines
- EVAL crash when error table is empty
- Gracefully handle short read errors for hashes with TTL during full sync

8.0.3:
Security fixes
- (CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands
- (CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an error

New Features
- VSIM: Add new WITHATTRIBS to return the JSON attribute associated with an element

Bug fixes
- A short read may lead to an exit() on a replica
- db->expires is not defragmented

8.0.2:
Security fixes
- (CVE-2025-27151) redis-check-aof may lead to stack overflow and potential RCE

Bug fixes
- Cron-based timers run twice as fast when active defrag is enabled

Other general improvements
- LOLWUT for Redis 8

8.0.1:
Performance and resource utilization improvements
- Vector sets - faster VSIM FILTER parsing

Bug fixes
- Query Engine - revert default policy search-on-timeout to RETURN
- Query Engine - @__key on FT.AGGREGATE used as reserved field name preventing access to Redis keyspace
- Query Engine - crash when calling FT.CURSOR DEL while retrieving from the CURSOR

Notes
- Fixed wrong text in the license files

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:16 -07:00
Gyorgy Sarvari
58a0bbec39
redis: drop recipe for v7.2.12
This version has been EOL since the end of February. There is a recipe
available for v8, which is still supported.

Drop this version.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-16 11:18:35 -07:00
Markus Volk
874af51714
brotli: update 1.1.0 -> 1.2.0
[1.2.0] - 2025-10-27
SECURITY

    python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

    decoder / encoder: added static initialization to reduce binary size
    python: allow limiting decoder output (see SECURITY section)
    CLI: brcat alias; allow decoding concatenated brotli streams
    kt: pure Kotlin decoder
    cgo: support "raw" dictionaries
    build: Bazel modules

Removed

    java: dropped finalize() for native entities

Fixed

    java: in compress pass correct length to native encoder

Improved

    build: install man pages
    build: updated / fixed / refined Bazel buildfiles
    encoder: faster encoding
    cgo: link via pkg-config
    python: modernize extension / allow multi-phase module initialization

Changed

    decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-03 21:08:14 -08:00
Gyorgy Sarvari
13b791e31d
hplip: upgrade 3.22.10 -> 3.25.8
Contains fix for CVE-2025-43023, and support for many new printers.

Drop patches that are included in this release (or the underlying problem
was solved on another way)

Changelog: https://developers.hp.com/hp-linux-imaging-and-printing/release_notes

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-03 21:08:13 -08:00
Deepesh Varatharajan
7125b918bd
nushell: Add nushell recipe
Nushell is a modern, cross-platform shell and programming language.

It is designed to work with structured data rather than plain text, and takes
inspiration from traditional shells like bash, object-based shells like
PowerShell, gradually typed languages such as TypeScript, functional
programming, and systems programming.

Add recipe for the latest release

- Written in Rust
- Combines a full-featured shell with a rich, structured programming language
- Operates on structured data instead of plain text
- Provides clear error messages and strong IDE support
- Designed for modern, cross-platform workflows

More information: https://crates.io/crates/nu

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-03 06:55:00 -08:00
Chen Qi
42ea269266
librelp: update PACKAGECONFIG setting related to valgrind
The riscv64 is now in COMPATIBLE_HOST of valgrind.
The armv4/armv5/armv6 are not in COMPATIBLE_HOST of valgrind.
Update the settings accordingly.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-02 19:26:02 -08:00
Louis Rannou
1e824240fb
rrdtool: takes graph only with x11 or wayland
rrdtool package configuration 'graph' relies on graphical support. Ignore
it if none of x11 org wayland is in the distro features.

Signed-off-by: Louis Rannou <louis.rannou@non.se.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-02 19:26:02 -08:00
Wang Mingyu
c1318861f1
valkey: upgrade 9.0.2 -> 9.0.3
Security fixes
-----------------
(CVE-2025-67733) RESP Protocol Injection via Lua error_reply
(CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
(CVE-2026-27623) Reset request type after handling empty requests

Bug fixes
------------
Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand
Fix server assert on ACL LOAD when current user loses permission to channels
Fix bug causing no response flush sometimes when IO threads are busy

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-02 19:25:57 -08:00
Peter Marko
4b50ae5383
7zip: upgrade 25.01 -> 26.00
Release notes [1]:
* improved code for ZIP, CPIO, RAR, UFD, QCOW, Compound.
* 7-Zip File Manager: improved sorting order of the file list. It uses
  file name as secondary sorting key.
* 7-Zip File Manager: improved Benchmark to support systems with more
  than 64 CPU threads.
* the bug was fixed: 7-Zip could not correctly extract TAR archives
  containing sparse files.
* some bugs were fixed.

License-Update: copyright years refreshed

[1] https://github.com/ip7z/7zip/releases/tag/26.00

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-02 19:25:50 -08:00
Gyorgy Sarvari
b648cfc9dd
redis: drop recipe for v6.2.21
This version has been EOL for a year now. There are recipes for two other,
still maintained versions in the layer.

Drop this version.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-02 19:25:49 -08:00
Wang Mingyu
0079965ede
parallel: upgrade 20251122 -> 20260222
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-02 19:25:47 -08:00
Wang Mingyu
74f444bd34
mstpd: upgrade 0.1.0 -> 0.1.1
Changelog:
===========
- mstpctl: add showportparams cmd
- bridge-stp.in: use short-hand arguments for logger command
- bridge-stp.in: support different versions of pidof
- mstpctl-utils-functions.sh: fix shellcheck warnings
- Update bridge_track.c
- netif_utils: fix speeds > 65G
- ifupdown.sh.in: fix new shellcheck warnings
- libnetlink: fix socket file descriptor leak on error paths
- fix compilation for with GCC 15 / C23
- do not leak stack memory via struct holes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-02 19:25:47 -08:00
Wang Mingyu
61f8a5e8e5
byacc: upgrade 20241231 -> 20260126
License-Update: Copyright year updated to 2026.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-25 09:49:48 -08:00
Gyorgy Sarvari
70a90d49b9
polkit: add info about CVE-2016-2568
Details: https://nvd.nist.gov/vuln/detail/CVE-2016-2568

This commit mostly just tries to add some info to this issue, in the
hope that it will save some time for others who try to investigate it.

This CVE most probably will stay open in meta-oe in the foreseeable future,
although it can be mitigated reasonably easily by the users of the layer.

The description of the vulnerability is short enough that it can be
reproduced here: "pkexec, when used with --user nonpriv, allows local
users to escape to the parent session via a crafted TIOCSTI ioctl call,
which pushes characters to the terminal's input buffer."

The general consensus amongst developers/major distros[1][2][3] seems to be that
it should be mitigated on the kernel side, to not allow non-privileged
users to fake input.

To this end, the kernel has introduced a new config in v6.2, called
CONFIG_LEGACY_TIOCSTI - when it is enabled, non-privileged used can
also fake input. It is however by default enabled (and it is also enabled
in the kernels shipped in oe-core, at least at the time of writing this).

Disabling this kernel config is considered to be the mitigation, to allow
input-faking only by privileged users.

[1]: https://security-tracker.debian.org/tracker/CVE-2016-2568
[2]: https://bugzilla.suse.com/show_bug.cgi?id=968674
[3]: https://marc.info/?t=145694748900001&r=1&w=2 / https://marc.info/?l=util-linux-ng&m=145702209921574&w=2

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-24 22:30:28 -08:00
Gyorgy Sarvari
7bc93734b8
hplip: set CVE_PRODUCT
This recipe gets CVEs with two CPEs: hplip and linux_imaging_and_printing.

Set the CVE_PRODUCT accordingly.

See CVE db query:

sqlite> select * from PRODUCTs where PRODUCT in ('hplip', 'linux_imaging_and_printing');
CVE-2009-0122|hp|hplip|2.7.7|=||
CVE-2009-0122|hp|hplip|2.8.2|=||
CVE-2015-0839|hp|linux_imaging_and_printing|||3.17.7|<=
CVE-2025-43023|hp|linux_imaging_and_printing|||3.25.2|<

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:23 -08:00
Gyorgy Sarvari
be28379a19
can-isotp: drop recipe
This out-of-tree kernel module was mainlined in Linux 5.10.
The previous LTS kernel, 5.4 is EOL, and oe-core ships with newer
kernels - there is no need to keep this recipe around.

It also has an explicit SKIP_RECIPE tag, it wasn't tested since
a long time.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:22 -08:00
Gyorgy Sarvari
95e4da06e4
cfengine: upgrade 3.21.0 -> 3.26.0
Changelog: https://github.com/cfengine/core/blob/3.26.0/ChangeLog

License-Update: The project switched from pcre to pcre2. This small
change is incorporated in the license, where the dependencies are listed.

libpcre2 and OpenSSL is now a mandatory dependencies, the corresponding
PACKAGECONFIGs are dropped.

Patch that was incorporated in this release is also dropped.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:21 -08:00
Gyorgy Sarvari
68c5fd3d85
cfengine: remove SKIP_RECIPE tag
The recipe compiles fine with OpenSSL 3, compatibility has been added in
version 3.20.

While here, fix some broken PACKAGECONFIGs too.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:21 -08:00
Eric Meyers
19ae3c84e2
redis: Add redis 8.0.0 recipe
Adding base 8.0.0 recipe for redis without any module configuration.

See https://github.com/redis/redis/tree/8.0.0?tab=readme-ov-file#redis-data-types-processing-engines-and-capabilities

for more details.

Signed-off-by: Eric Meyers <eric.meyers@arthrex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-20 23:34:20 -08:00
Gyorgy Sarvari
5b830f4539
wxwidgets: enable webkit PACKAGECONFIG only when opengl is available
The latest version of webkitgtk3 requires opengl DISTRO_FEATURE, so the
webkit PACKAGECONFIG should be enabled only when opengl is available.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 10:25:50 -08:00
Gyorgy Sarvari
1a6ceb010a
redis: add back DEBUG_PREFIX_MAP to LDFLAGS
Without this redis embeds absoute build paths in the binaries, failing
qa check. These LDFLAGS were recently removed from oe-core[1] - this
change adds it back to this recipe.

The qa error was not showing with redis 6 recipe, so it is added only to
redis 7.

[1]: https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 00:34:02 -08:00
Gyorgy Sarvari
1de433f8bb
valkey: remove TMPDIR truncation in binaries
These seds were added to remove reproducibility QA errors about
TMPDIR being present in the binaries. The root of the problem was
changed LDFLAGS in oe-core, and after adding back these LDFLAGS
to this recipe[1], the QA error is also gone - the binaries require
no changes due to this.

Also remove the INSANE_SKIP, which was most likely fixed by the
same LDFLAGS issue - it doesn't happen anymore.

[1]: https://git.openembedded.org/meta-openembedded/commit/?id=e8981bf43163d2fe90ea28b2952a2443ceaea934

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 00:34:02 -08:00
Mikhail Anikin
2296bdb6c1
rsyslog: fix incorrect install -d usage in do_install
The rsyslog recipe incorrectly passes the permission mode as a
positional argument to install -d. In this form, the value is treated
as a directory name rather than as a mode, which will create an additional directory
and may result in unexpected behavior during installation.

Use the -m option to ensure the directory is created with the intended
permissions.

Signed-off-by: Mikhail Anikin <mikhail.anikin@solid-run.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 00:34:01 -08:00
Leon Anavi
1b820b98af
valkey: Upgrade 9.0.1 -> 9.0.2
Upgrade to release 9.0.2:

- Avoid memory leak of new argv when HEXPIRE commands target only
  non-exiting fields
- Fix HINCRBY and HINCRBYFLOAT to update volatile key tracking
- Avoid empty hash object when HSETEX added no fields
- Fix case-sensitive check for the FNX and FXX arguments in HSETEX
- Prevent assertion in active expiration job after a hash with
  volatile fields is overwritten
- Fix HRANDFIELD to return null response when no field could be
  found
- Fix HEXPIRE to not delete items when validation rules fail and
  expiration is in the past
- Fix how hash is handling overriding of expired fields overwrite
- HSETEX - Always issue keyspace notifications after validation
- Make zero a valid TTL for hash fields during import mode and data
  loading
- Trigger prepareCommand on argc change in module command filters
- Restrict TTL from being negative and avoid crash in import-mode
- Fix chained replica crash when doing dual channel replication
- Skip slot cache optimization for AOF client to prevent key
  duplication and data corruption
- Fix used_memory_dataset underflow due to miscalculated
  used_memory_overhead
- Avoid duplicate calculations of network-bytes-out in slot stats
  with copy-avoidance
- Fix XREAD returning error on empty stream with + ID
- Track reply bytes in I/O threads if commandlog-reply-larger-than
  is -1
- This makes it possible to mitigate a performance regression in
  9.0.1 caused by the related bug fix

Fixes references to TMPDIR [buildpaths] and avoids [already-stripped].

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:25 -08:00
Mingli Yu
e8981bf431
valkey: Restore DEBUG_PREFIX_MAP in TARGET_LDFLAGS
oe-core has removed DEBUG_PREFIX_MAP from TARGET_LDFLAGS [1], restore
it to fix the below error.

  ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-cli in package valkey-dbg contains reference to TMPDIR [buildpaths]
  ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-server in package valkey-dbg contains reference to TMPDIR [buildpaths]
  ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-benchmark in package valkey-dbg contains reference to TMPDIR [buildpaths]
  ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: Fatal QA errors were found, failing task.

[1] https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:20 -08:00
Gyorgy Sarvari
19fdc49db3
libx86-1: upgrade 1.1 -> 1.1.1
Bugfix release, mostly with patches applied from other distros.
Also fixes the SRC_URI which became inaccessible over time.
Drop patches that are included in this release.

Shortlog:
https://gitlab.archlinux.org/grawlinson/libx86/-/compare/v1.1...v1.1.1

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 00:23:13 -08:00
Wang Mingyu
9801afd278
iotop: upgrade 1.30 -> 1.31
License-Update: Copyright year updated to 1.31

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:07 -08:00