14241 Commits

Author SHA1 Message Date
Jörg Sommer
89c104f0e8
spectre-meltdown-checker: New recipe to check hardware vulnerability
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 17:43:56 -08:00
Khem Raj
44bbcdf787
etcd-cpp-apiv3: Skip recipe since it does not work with boost >= 1.87
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 17:43:53 -08:00
Jason Schonberg
43891df042
c-ares: upgrade 1.30.0 -> 1.31.0
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.31.0

Changes:

    Enable Query Cache by default. PR #786

Bugfixes:

    Enhance Windows DNS configuration change detection to also detect manual DNS
    configuration changes. PR #785
    Various legacy MacOS Build fixes. Issue #782
    Ndots value of zero in resolv.conf was not being honored. 852a60a
    Watt-32 build support had been broken for some time. PR #781
    Distribute ares_dns_rec_type_tostr manpage. PR #778

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 10:10:21 -08:00
Khem Raj
6f96b59ec4
websocketpp: Skip recipe, not buildable with boost >= 1.87
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 10:10:21 -08:00
Khem Raj
a46de2745b
cpp-netlib: Skip recipe, not buildable with boost >= 1.87
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 10:10:21 -08:00
Khem Raj
2058447769
cpprest: Skip recipe due to unbuildable dependency websocketpp
Websocketpp needs to be ported to work with booost >= 1.87

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 10:10:20 -08:00
Peter Marko
f4a6966bf0
libtinyxml: patch CVE-2023-34194
Take patch from Debian:
2366e1f23d

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 16:49:01 -08:00
Peter Marko
066cf35ae5
libtinyxml: patch CVE-2021-42260
Take patch from Debian:
38db99c12e

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 16:49:01 -08:00
Akash Hadke
59614eafb0
fitimage.bbclass: Remove True option to getVar calls
getVar() now defaults to expanding by default, thus remove the True
option from getVar() calls with a regex search and replace.

Signed-off-by: Akash Hadke <akash.hadke27@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 09:33:53 -08:00
Khem Raj
a32b953c14
spdlog: Switch to latest on 1.x branch
This gets up fmt 11.1 support

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 09:33:52 -08:00
Christian Lindeberg
8d635b0510
crucible: Use go module fetcher
Use the go module fetcher instead of allowing network access during the
compile task.
Reorder variables according to the recipe style guide.

Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 09:33:51 -08:00
Khem Raj
ef917bce9a
mariadb: Upgrade to 10.11.10
Drop 0001-Use-a-lambda-function-as-deleter-prototype-in-unique.patch its
already in this version

Drop ppc musl patch, a check for glibc is already added in this version

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 09:33:23 -08:00
Khem Raj
d81e3e2520
spdlog: Upgrade to 1.15.0
Use bundled fmt, it still needs 11.0.x and one in OE-core has moved to
11.1.x

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-08 20:41:39 -08:00
Jason Schonberg
51e0cf9d93
c-ares: upgrade 1.29.0 -> 1.30.0
License-Update: Whitespace changes.

Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.30.0

Features:

    Basic support for SIG RR record (RFC 2931 / RFC 2535) PR #773

Changes:

    Validation that DNS strings can only consist of printable ascii characters
    otherwise will trigger a parse failure. 75de16c and 40fb125
    Windows: use GetTickCount64() for a monotonic timer that does not wrap. 1dff8f6

Bugfixes:

    QueryCache: Fix issue where purging on server changes wasn't working. a6c8fe6
    Windows: Fix Y2K38 issue by creating our own ares_timeval_t datatype. PR #772
    Fix packaging issue affecting MacOS due to a missing header. 55afad6
    MacOS: Fix UBSAN warnings that are likely meaningless due to alignment issues
    in new MacOS config reader.
    Android: arm 32bit build failure due to missing symbol. d1722e6

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-08 16:37:35 -08:00
Jason Schonberg
a3f31bcbc6
onig: upgrade 6.9.9 -> 6.9.10
Changelog:

  * Update Unicode version 16.0
  * Add new operator (*SKIP)
  * Fixed: ONIG_SYN_CONTEXT_INDEP_REPEAT_OPS not working for ^* pattern (Issue #292)

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 19:39:34 -08:00
Khem Raj
14b3a5ccb2
pocketpy: Add pic options to cflags
Ensures that PIC is always used to build

Fixes
error: relocation R_386_PC32 cannot be used against symbol 'LZ4_compress_fast_extState'; recompile with -fPIC

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 18:41:11 -08:00
Khem Raj
7b6d24f9de
mozjs-128: Fix riscv arch specification in triplets
Rust needs it these days

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 18:41:10 -08:00
Wang Mingyu
b9a1eaa15f
pocketpy: upgrade 2.0.3 -> 2.0.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 18:41:10 -08:00
Jason Schonberg
7be5024b70
c-ares: upgrade 1.28.1 -> 1.29.0
Changelog : https://github.com/c-ares/c-ares/releases/tag/cares-1_29_0

Features:

    When using ARES_OPT_EVENT_THREAD, automatically reload system configuration
    when network conditions change. PR #759
    Apple: reimplement DNS configuration reading to more accurately pull DNS
    settings. PR #750
    Add observability into DNS server health via a server state callback, invoked
    whenever a query finishes. PR #744
    Add server failover retry behavior, where failed servers are retried with
    small probability after a minimum delay. PR #731

Changes:

    Mark ares_channel_t * as const in more places in the public API. PR #758

Bugfixes:

    Due to a logic flaw dns name compression writing was not properly implemented
    which would result in the name prefix not being written for a partial match.
    This could cause issues in various record types such as MX records when using
    the deprecated API. Regression introduced in 1.28.0. Issue #757
    Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say it does and
    causes c-ares to become non-functional. PR #754
    ares_getnameinfo(): loosen validation on salen parameter. Issue #752
    cmake: Android requires C99. PR #748
    ares_queue_wait_empty() does not honor timeout_ms >= 0. Issue #742

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 18:41:10 -08:00
Wang Mingyu
63c10fdf0a
libbpf: upgrade 1.4.7 -> 1.5.0
Changelog:
 https://github.com/libbpf/libbpf/releases/tag/v1.5.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Wang Mingyu
baace33210
composefs: upgrade 1.0.5 -> 1.0.8
License-Update: Relicense most code under GPL-2.0-or-later OR Apache-2.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Wang Mingyu
be2c8c1f0b
byacc: upgrade 20230219 -> 20241231
0001-byacc-do-not-reorder-CC-and-CFLAGS.patch
refreshed for 20241231

Licese-Update: copyright year updated to 2024

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Wang Mingyu
5ba86eafe5
doxygen: upgrade 1.13.0 -> 1.13.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Wang Mingyu
b5fa11eb22
ctags: upgrade 6.1.20241229.0 -> 6.1.20250105.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:13 -08:00
Preeti Sachan
d634c5c1a6
bpftool: fix libelf.h not found error
When build host machine is not installed with elfutils-libelf-devel, it
throws compile error "libelf.h: No such file or directory". Fix missing
headers file by including path ${STAGING_INCDIR_NATIVE} via CFLAGS variable.
Use headers file from ${STAGING_INCDIR_NATIVE} instead of host machine.

Error:
| libbpf_internal.h:19:10: fatal error: libelf.h: No such file or directory

Signed-off-by: Preeti Sachan <preeti.sachan@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:13 -08:00
Jörg Sommer
2b2c15d774
kernel-hardening-checker: New recipe to check security options
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-06 07:22:29 -08:00
Yi Zhao
6387b30d30
malcontent: set pam module path to ${base_libdir}/security
Set pam module path to ${base_libdir}/security as this is the default
path in libpam.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-06 07:22:29 -08:00
Yi Zhao
ff119e949e
mariadb: set pam module path to ${base_libdir}/security
Set pam module path to ${base_libdir}/security as this is the default
path in libpam.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-06 07:22:29 -08:00
Yi Zhao
83a8e761ed
snapper: set pam module path to ${base_libdir}/security
Set pam module path to ${base_libdir}/security as this is the default
path in libpam.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-06 07:22:29 -08:00
Darrel Griët
d89fc818b7
polkit: Install rules in subdir
d5e90541f8
moved the rules to /usr/share/ instead of /etc/. The commit also removed the
install:prepend() step.
This results in the rules being installed as file /usr/share/polkit-1/rules.d
instead of in that folder.

This commit adds back the install prepend step such that the rules are installed
in said folder.

Signed-off-by: Darrel Griët <dgriet@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-05 22:46:36 -08:00
Jörg Sommer
1c60b8ccf7
libtinyxml2: set CVE product to tinyxml2
This library gets tracked with the product name tinyxml2:

https://nvd.nist.gov/products/cpe/detail/5A6C04CB-E6AD-4740-882A-34620AEC060A

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-03 11:34:03 -08:00
Jörg Sommer
c5ef63d685
libtinyxml: set CVE product to tinyxml
This library gets tracked with the product name tinyxml:

https://nvd.nist.gov/products/cpe/detail/95BDA29F-257C-4C44-8847-25CFC107228D

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-03 11:34:03 -08:00
Divya Chellam
5c2793258e
grpc: upgrade 1.66.1 -> 1.68.0
This includes CVE-fix for CVE-2024-11407

Changelog:
==================================
https://github.com/grpc/grpc/releases/tag/v1.68.0
https://github.com/grpc/grpc/compare/v1.66.1...v1.68.0

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-03 10:17:22 -08:00
Ayoub Zaki
338e2ff78b
botan: update 3.5.0 -> 3.6.1
* update to latest 3.6.1 Version
* add packaging for botan binary and botan-test tool

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-03 10:17:22 -08:00
Ayoub Zaki
8bdd4740b2
bmap-writer: update to latest git version
* switch to libarchive to handle a larger decompression schemes

* implement own sha256 hashing and drop openssl dependency

* compute maximum buffer size before writing each range

* bmap file optional: if not provided, it will be searched in the same path as the input

* print time/speed of the writing operation

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:49:49 -08:00
Bartosz Szostak
33bc1313cf
yyjson: add new recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:49:49 -08:00
Bartosz Szostak
21ce886005
ctre: add new recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:49:49 -08:00
Bartosz Szostak
5bd1d5ad77
jsoncons: add new recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:49:48 -08:00
Yi Zhao
07cdb574a5
libbpf: upgrade 1.4.6 -> 1.4.7
ChangLog:
https://github.com/libbpf/libbpf/releases/tag/v1.4.7

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:19 -08:00
Yi Zhao
de93141c92
pahole: upgrade 1.27 -> 1.28
ChangeLog:
https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tree/changes-v1.28

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao
b2f7a5e3eb
tigervnc: upgrade 1.14.0 -> 1.14.1
ChangeLog:
https://github.com/TigerVNC/tigervnc/releases/tag/v1.14.1

* Update xorg-server to 21.1.15

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao
1768156191
openldap: upgrade 2.6.8 -> 2.6.9
ChangeLog:
https://www.openldap.org/software/release/changes.html

Drop 0001-fix-incompatible-pointer-type-error.patch as the issue has
been fixed upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao
f5676076df
mce-inject: update to latest git rev
7668d820 simulate a MCE event happened during TDX guest context

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Jiaying Song
da361d2d7c
eject: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
WARNING: eject-2.1.5-r0.wr2401 do_fetch: Failed to fetch URL http://sources.openembedded.org/eject-2.1.5.tar.gz, attempting MIRRORS if available

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:17 -08:00
Yi Zhao
f65596ce3e
nss: upgrade 3.103 -> 3.107
* Refresh patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:17 -08:00
Yi Zhao
bdb41e2659
nspr: upgrade 4.35 -> 4.36
* Refresh patches.
* Drop 0001-Fix-Wincompatible-function-pointer-types.patch as the issue
  has been fixed upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:17 -08:00
Wang Mingyu
4450ecbb31
parallel: upgrade 20241122 -> 20241222
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:04 -08:00
Wang Mingyu
b9bae24144
libsdl2-image: upgrade 2.8.3 -> 2.8.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:04 -08:00
Wang Mingyu
16e5e77e5d
flatbuffers: upgrade 24.3.25 -> 24.12.23
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:03 -08:00
Wang Mingyu
4685607ee0
doxygen: upgrade 1.12.0 -> 1.13.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:03 -08:00