After upgrade to 0.24.0, do_configure failed with error:
| CMake Error at cmake/Embed.cmake:3 (find_program):
| Could not find XXD using the following names: xxd
| Call Stack (most recent call first):
| src/stdlib/CMakeLists.txt:1 (include)
[1] df21d917d9
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade includes fix for CVE-2025-52885
Poppler 25.10.0 Changelog:
=========================
core:
* Fix image signature getting lost
* Don't embed substitutions for base14 fonts
* Form font improvements
* Handle signatures padded with random data
* Add feature to Ink annotation to render with multiply blend mode
* Internal code improvements
* Fix crashes in malformed documents
glib:
* Fix signature text
* Add feature to Ink annotation to render with multiply blend mode
cpp:
* Added embedded_file::unicodeName function
Poppler 25.09.1 Changelog:
==========================
core:
* Internal code improvements
build system:
* Fix generated .pc files when using old gpgme
Poppler 25.09.0 Changelog:
=========================
core:
* Speed improvements when reusing the same document with different output devices
* Speed improvements when reading from network file systems
* Internal code improvements
* Fix crashes in malformed documents
glib:
* fix ODR issue with enum
utils:
* pdftohtml: Fix text positioning. (Regressed in 25.07.0)
build system:
* Better pkgconfig support for static builds
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update to latest release and add support for zsh completions.
Signed-off-by: Marc Ferland <marc.ferland@sonatest.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-6750
Pick the patch that is marked to resolve the issue linked in
the nvd report.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-2925
Pick the patch that's marked to resolve the issue linked
in the nvm report.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-2924
Pick the patch that is marked to resolve the issue linked in the
nvd report.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-2914
Pick the patch that is linked in the issue from the nvd report.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-2310
Pick the patch that mentions the CVE in its description.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-2153
Pick the patch that resolved the issue from the nvd report.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
A corresponding patch was removed with the upgrade to 3.4.1 since it had
been integrated upstream. However, it had also been reverted again,
which was not noticed.
This backports a subsequent fix for the problem.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
There's no need to inherit python3native as there are no python3- native
dependencies.
Remove RDEPENDS_${PN}, these are all libraries that are linked to so the
relevant RDEPENDS are created. The fact that this recipe is still using
the old syntax suggests that they're not needed.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The libaio subsystem in MariaDB was rewritten in 11.4.8,
which made the previously used patch called
0001-aio_linux-Check-if-syscall-exists-before-using-it.patch
non-applicable.
This patch was deleted in commit f3cd830c09 ("mariadb: 11.4.8")
but it's still needed, because the original code was simply
moved into a new source file.
Add a new patch applying the same change to tpool/aio_libaio.cc
to fix the build error on riscv32.
Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
[ snip of CMakeLists.txt ]
BISON_TARGET(constexp
${CMAKE_CURRENT_LIST_DIR}/constexp.y
${GENERATED_SRC}/ce_parse.cpp
COMPILE_FLAGS "${YACC_FLAGS}")
[ end of snip ]
bison embeds full paths in its generated headers, eg:
bison -o /full/build/path/generated/example.cpp ...
The header will include:
#ifndef YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED
#define YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED
This make doxygen-src not reproducible, fix by replacing full build path
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
find, the way it is used will also list c files in
special directories like .pc, which is created by quilt
for managing patches and is the default PATCHTOOL
Ignore this directory during find operation.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Ryan Eatmon <reatmon@ti.com>
The --with-smart option behind the feature "smart" relies on the drivedb.h
header, provided by smartmontools package (/usr/share/smartmontools/drivedb.h).
However the dependencies (DEPENDS) miss this package. Furthermore, if the
--with-drivedb option is not used, the configuration step will search for the
file first on the host's rootfs. This may result in the wrong header being picked,
or the --with-smart option being silently disabled due to incomplete dependencies
(causing missing header).
The header is now guaranteed to be present due to an added dependency in the
"smart" feature, and its location is specified by the --with-drivedb option.
Signed-off-by: Corentin Guillevic <corentin.guillevic@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Move Eigen BLAS, LAPACK as packageconfig as they requires Fortran compiler
- Disable building TESTING
- Remove patch that has been merged
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Normally CMake uses the build tree for the RPATH when building
executables etc on systems that use RPATH. This will make the buildpath
included in the binaries and not reproducible, so disable RPATHs.
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add a fallback mirror for the openocd repository fetch
process, so that if the primary source repo.or.cz is unavailable,
the build system will attempt to download the source code from the gitHub
mirror.
Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Platform support patches:
- Add SWD native configuration files for AM64x and J784s4 boards
- Configure DMEM access parameters in ti_k3.cfg for direct memory operations
- Set up DAPBUS debugger and emulated AP descriptions
Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to release 8.1.4:
Security fixes:
- (CVE-2025-49844) A Lua script may lead to remote code execution
- (CVE-2025-46817) A Lua script may lead to integer overflow and
potential RCE
- (CVE-2025-46818) A Lua script can be executed in the context of
another user
- (CVE-2025-46819) LUA out-of-bound read
Bug fixes:
- Fix accounting for dual channel RDB bytes in replication stats
- Fix EVAL to report unknown error when empty error table is
provided
- Fix use-after-free when active expiration triggers hashtable
to shrink
- Fix MEMORY USAGE to account for embedded keys
- Fix memory leak when shrinking a hashtable without entries
- Prevent potential assertion in active defrag handling large
allocations
- Prevent bad memory access when NOTOUCH client gets unblocked
- Converge divergent shard-id persisted in nodes.conf to primary's
shard id
- Fix client tracking memory overhead calculation
- Fix RDB load per slot memory pre-allocation when loading from RDB
snapshot
- Don't use AVX2 instructions if the CPU doesn't support it
- Fix bug where active defrag may be unable to defrag sparsely
filled pages
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Sometimes ftp.gnu.org might be slow.
Add UPSTREAM_CHECK_URI while here
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Gyorgy Sarvari <skandigraun@gmail.com>
This upgrade contains a fix for CVE-2024-47175.
Changelog:
2.1.1:
-pdftops: Use Poppler for a few old Epson laser printers This
works around documents being printed off-centre, shifted towards
the top right. Affected are printers using epsoneplijs:
EPL-5700L, EPL-5800L, EPL-5900L, EPL-6100L, EPL-6200L.
-Fixed bugs discovered by static analyzer OpenScanHub Possible
buffer overflows, uninitialized memory, format string issues
and resource leaks, ...
-Fix crash bugs in ppdLoadAttributes() When parsing the
"*cupsFilter(2): ..." lines in the PPD file use memmove() instead
of strcpy() as the latter does not support handling overlapping
memory portions and do not move running pointer beyond the end
of the input string.
2.1.0:
-Prevent PPD generation based on invalid IPP response Overtaken
from CUPS 2.x: Validate IPP attributes in PPD generator, refactor
make-and-model code, PPDize preset and template names, quote PPD
localized strings. Fixes CVE-2024-47175.
2.1b:
-Added support for libcups3 (libcups of CUPS 3.x) With these changes
libcupsfilters can be built either with libcups2 (libcups of CUPS 2.x)
or libcups3 (libcups of CUPS 3.x).
-Prefer PDF again in PPDs for driverless printers PDF works better with
finishing, especially combinations of multiple copies, collation, and
stapling/binding.
-Use 0.5mm as tolerance when comparing page sizes For the PWG two page
sizes are considered the same when the dimensions differ no more than
0.5 mm, libppd used too tight tolerances.
-PPD generator: Check for required attributes when choosing input format
Check for PCLm and PWG the minimum of attributes which we require
during PPD generation.
-ppdLoadAttributes(): Improve check whether parameters are integer
-ppdLoadAttributes(): Fix crash when page size could not get determined
-Fix crash if there is no page size for "Custom"
-Fix crash when incoming *ptr is NULL
-libcups2 compatibility: Use proper CUPS array callback function types
Fixed CUPS array function call in libcups2 compatibility layer
-Build system: Fix failure to correctly link to zlib Look up zlib
properly with pkg-config
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade contains fixes for the following vulnerabilities:
CVE-2025-43961, CVE-2025-43962, CVE-2025-43963 and CVE-2025-43964
Also drop two old CVE_STATUS entries which are not needed anymore,
because the database has been updated with correct info.
Changelog:
https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
