15501 Commits

Author SHA1 Message Date
Jason Schonberg
9f4bd029e1
usbids: upgrade 2025.04.01 -> 2025.09.15
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-05 21:43:43 -07:00
Khem Raj
4d6f772ff1
perfetto: Use gn from native sysroot
Prebuilts shipped with sources is a x86_64 binary which works ok
on x86_64 build hosts, but we do have arm64 hosts quite commonly
used to build OE these days, where this fails miserably. Therefore
use the gn from gn-native, so we can get it targtted correctly for
build host architecture.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Ross Burton <ross.burton@arm.com>
2025-10-02 10:17:48 -07:00
Zoltán Böszörményi
f3cd830c09
mariadb: 11.4.8
11.4.7 fixes a huge performance drop from 11.4.5 to 11.4.6.
https://mariadb.com/docs/release-notes/community-server/mariadb-11-4-series/mariadb-11.4.7-release-notes

11.4.8 fixes several crash problems and other issues.
https://mariadb.com/docs/release-notes/community-server/mariadb-11-4-series/mariadb-11.4.8-release-notes

Removed 0001-aio_linux-Check-if-syscall-exists-before-using-it.patch
which is not applicable anymore, the code was rewritten.

Adapted 0001-sql-CMakeLists.txt-fix-gen_lex_hash-not-found.patch
to fix fuzz.

Add libxml2-native to DEPENDS in mariadb-native to fix the
do_configure failure with the new version.

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-02 10:17:29 -07:00
Zoltán Böszörményi
90ed8e2bd5
mariadb: Fix a crash in my_convert()
In some cases (most notably when running mysqldump),
the server crashes in the my_convert() function, in
a code protected by

  #if defined(__i386__) || defined(__x86_64__)
  ...
  #endif

The crash does not happen with the generic code.
Remove the x86[-64] specific optimization.

This change was endorsed in
https://jira.mariadb.org/browse/MDEV-37786

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-02 10:17:29 -07:00
Jason Schonberg
c5fdeca719
nspr: upgrade 4.36 -> 4.37
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-02 10:17:29 -07:00
Jason Schonberg
9e2a1261e7
neon: upgrade 0.33.0 -> 0.34.2
Changes in release 0.34.2 (neon-0.34.2.tar.gz), 15th April 2025

    Fix regression in NTLM auth in 0.34.0 (issue #190).
    Add docs for ne_ssl_proto_name, ne_ssl_protovers, ne_get_request_target.

Changes in release 0.34.1 (neon-0.34.1.tar.gz), 14th April 2025

    Fix regression in 207 parsing of elements which omit a reason-phrase (issue #188).
    Fix ne_move() to submit lock tokens for the parent collection of a source resource locked with depth: 0.

Changes in release 0.34.0 (neon-0.34.0.tar.gz), 23rd November 2024

    Interface changes:
        API and ABI backwards-compatible with 0.27.x and later
        NE_SESSFLAG_SSLv2 is now ignored

    New interfaces and features:
        ne_request.h: add ne_get_response_location(), add ne_get_request_target()
        ne_redirect.h: adds relative URI resolution per RFC 9110
        ne_socket.h: add ne_iaddr_set_scope(), ne_iaddr_get_scope(), ne_sock_getproto()
        ne_session.h: add NE_SESSFLAG_STRICT session flag
        ne_session.h: ne_session_create() now accepts scoped IPv6 link-local literal addresses following the RFC 6874 syntax;
        ne_session.h: add ne_ssl_set_protovers() to configure TLS protocol version ranges
        ne_utils.h: add NE_FEATURE_GSSAPI, NE_FEATURE_LIBPXY feature flags
        ne_ssl.h: add ne_ssl_proto_name()
        HTTP strictness/compliance updated for RFC 9110/9112; notably stricter in parsing header field line, chunked transfer-coding, status-line.

    Bug fixes:
        auth: the ‘realm’ string passed to credentials callback is now cleaned of non-printable characters.
    Documentation & header updates for RFC 9110/9112.
    New NE_MINIMUM_VERSION() autoconf macro for better version handling.

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-30 10:36:16 -07:00
Saravanan
09fcc28cd0
udisks2: upgrade 2.10.1 -> 2.10.2
This patch addresses below CVE's:
CVE-2025-6019
CVE-2025-8067

Changelog:
https://github.com/storaged-project/udisks/releases

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-30 09:01:05 -07:00
Jason Schonberg
4bb2564e78
webkitgtk3: add patch to fix qemuarm
The patch here is backported from webkitgtk 2.50 and allows
32 bit arm to successfully build (qemuarm)

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-29 22:34:15 -07:00
Dmitry Baryshkov
f71c0f655a
opencl-cts: build GL, GL ES and Vulkan interoperability tests
Follow DISTRO_FEATURES and build optional GL, GL ES and Vulkan
interoperability tests.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-28 23:16:44 -07:00
Dmitry Baryshkov
596e74fc68
opencl-cts: build SPIR-V files for the spirv-new test
Pull in spirv-tools-native package in order to build SPIR-V files for
the spirv-new test.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-28 23:16:44 -07:00
Dmitry Baryshkov
bd05e5b608
vulkan-cts: update to 1.4.3.3
Update Vulkan CTS to 1.4.3.3, fixing several issues in the tests.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-28 23:16:44 -07:00
Jason Schonberg
25decdf8b0
webkitgtk3: upgrade 2.48.3 -> 2.48.7
WebKitGTK 2.48.7 release:

    Fix a number of GStreamer memory leaks.
    Fix several crashes and rendering issues.

WebKitGTK 2.48.6 release:

    Fix emojis incorrectly rendered in their text variant.
    Add support for font collection / fragment identifiers.
    Fix web process deadlock on exit.
    Fix stuttering when playing WebP animations.
    Fix CSS animations with cubic-bezier timing function.
    Do not start the MemoryPressureMonitor if it’s disabled.
    Fix several crashes and rendering issues.

WebKitGTK 2.48.5 release:

    Fix several crashes.

WebKitGTK 2.48.4 release:

    Improve emoji font selection with USE_SKIA=ON.
    Improve playback of multimedia streams from blob URLs.
    Fix the build with USE_SKIA_OPENTYPE_SVG=ON and USE_SYSPROF_CAPTURE=ON.
    Fix the build on LoongArch with USE_SKIA=ON.
    Fix crash when using a WebKitWebView widget in an offscreen window.
    Fix several crashes and rendering issues.

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-28 23:16:43 -07:00
Peter Kjellerstedt
91e428d4cd
opencv: Support building for native
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:16 -07:00
Peter Kjellerstedt
2f22ec651d
glog: Support building for native
This is needed to build opencv-native.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
Gyorgy Sarvari
a53e23b43b
collectd: set working SRC_URI
The project started to outsource the source hosting to Google storage
and Github.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
Gyorgy Sarvari
45172be94e
redis-plus-plus: upgrade 1.3.14 -> 1.3.15
Drop 0001-update-cmake_minimum_required-to-3.5.patch, because it is
included in this release.

Add back 0001-CMakeLists.txt-fix-substitution-for-static-libs.patch
to SRC_URI, because it was removed accidentally during a previous
update.

Changelog:
- Support cmake FetchContent feature
- Support more hash commands
- Make variant parser more efficient
- Fix event loop crash: avoid closing handle opened by hiredis

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
Gyorgy Sarvari
3505e951b9
smartmontools: upgrade 7.4 -> 7.5
Changelog:

- CI and release builds are now reproducible if same SOURCE_DATE_EPOCH,
  build recipes and toolchains are used.
- smartctl '-j -A': New JSON value 'endurance_used' (ATA/SCSI/NVMe).
- smartctl '-j -A': New JSON value 'spare_available' (ATA/NVMe).
- smartctl '-j -i': Re-added the JSON value 'model_name' also for SCSI
  devices (regression).
- smartctl '-j -c': NVMe support.
- smartctl '-j -n ...': New JSON values 'power_mode.*' (ATA only).
- smartctl '-H -A': Support for NVMe SMART/Health Information per
  namespace.
- smartctl '-i': ATA ACS-6 updates.
- smartctl '-x': No longer includes '-g wcreorder'.
- smartctl '-x', '-l scterc': No longer returns exit status 4 if SCT ERC
  is not supported by the device.
- smartctl '-l error': No longer prints bogus ATA error log entries if
  the error index is nonzero but the error count is zero.
- smartctl '-l ssd': Fixed corruption of the output of the SCSI Format
  Status log page.
- smartctl '-l ssd': Now detects 'no format since manufacture' from the
  SCSI Format Status log page.
- smartctl '-l farm': Fixed the unit of 'Write Power On' time.
- smartctl '-l farm': Fixed the byte order of ATA 'Assembly Date'.
- smartctl '-l farm': Fixed a possible segfault.
- smartctl '-l farm -q noserial': Suppresses serial and WWN also from FARM.
- smartctl '-l farm -T permissive': Overrides false negative FARM support
  check for rebranded drives.
- smartctl '-t TEST': Fixed self-tests of single namespace NVMe devices.
- smartd '-A': NVMe attribute log support.
- smartd: Ignores NSID in duplicate check of single namespace devices.
- smartd: No longer issues LOG_CRIT warnings for 'Set Feature' related
  NVMe error information log entries.
- smartd: No longer hangs on systems with large file descriptor limits.
- smartd: No longer logs invalid "old test ... not run" messages if
  staggered self-tests are used.
- smartd.conf '-l selftest[sts] -s ...': NVMe self-test support.
- smartd.conf '-H MASK': Ability to ignore specific bits of NVMe
  SMART/Health value 'Critical Warning'.
- smartd.conf '-p': Checks NVMe SMART/Health value 'Available Spare'.
- smartd.conf '-u [-f]': Checks NVMe SMART/Health values 'Percentage Used'
  and 'Media and Data Integrity Errors'.
- smartd.conf '-W ...': No longer includes individual sensors in NVMe
  temperature check as some devices report other values there.
- ATA: Device type '-d jmb39x-q2,N' for another JMB39x protocol variant
  used by QNAP-TR002 NAS devices.
- SCSI: Fixed range checks of mode page offset and VPD inquiry.
- SCSI: Fixed buffer overflow parsing of VPD page.
- SCSI: Fixed handling of multiple designators in VPD page.
- USB/NVMe: '-d sntjmicron' no longer triggers USB resets on queries of
  the self-test log.
- USB/NVMe: '-d sntasmedia' now supports log pages > 512 bytes.
- USB/NVMe/SAT: New experimental NVMe/SAT autodetection options
  '-d snt*/sat'.
- Fixed segfault on missing option argument on systems using musl libc.
- HDD, SSD and USB additions to drive database.
- automake < 1.13 are no longer supported.
- Custom make rules are now silenced if 'make V=0' is used.
- Enhanced makefile targets 'dist-*' to create reproducible source
  tarballs if SOURCE_DATE_EPOCH is set.
- The makefile no longer uses GNU make specific syntax elements
  (exception: reproducible builds for macOS).
- Dropped support for platforms without 'sigaction()'.
- configure: Now also detects MidnightBSD.
- configure: Dropped option '--with-signal-func'.
- configure: Default for '--with-nvme-devicescan' is now 'yes' also on
  NetBSD.
- Version information is now also set if build from GH R/O mirror.
- Linux: 'smartd.service' now avoids a warning about an unset environment
  variable.
- Linux: Dropped autodetection of deprecated device type '-d marvell'.
- macOS: Support for reproducible builds of the DMG image.
- OpenBSD: NVMe support.
- Windows: Increased WMI timeout.
- Windows: Support for reproducible builds of the installer.
- Windows: Uninstaller is no longer damaged if the installer is signed.
- Windows 'update-smartd-drivedb.ps1': Fixed call of 'gpg.exe' if it
  appears more than once in the PATH.
- Windows 'update-smartd-drivedb.ps1 -Verbose': Now also prints the
  download command.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
Jason Schonberg
92ab710a3f
gsoap: upgrade 2.8.134 -> 2.8.135
License-Change: update copyright from 2015 to 2024.

from the changelog.md file :

  Version 2.8.135 (07/01/2024)
  ---
  - Updated `soap::http_extra_header` optional user-defined custom HTTP header string to
    permit multiple HTTP headers in the specified string separated by newlines, the
    specified headers are checked by the engine to conform to HTTP header formats.

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
Gyorgy Sarvari
b1355592c1
indent: upgrade 2.2.12 -> 2.2.13
Drop 0001-Fix-builds-with-recent-gettext.patch - it built fine for me without it.

Building requires full makeinfo, not only a lite version, so switched the texinfo
class to texinfo-replacement-native dependency.

Changelog:
- Fix buffer overflows and use after free bugs
- Recognize binary integer literals
- New and updated translations, thanks to our translators:
  - Updated translations:
      Catalan, Croatian, French, Galician, German, Greek, Hungarian,
      Indonesian, Italian, Romanian, Serbian, Spanish, Turkish, Ukrainian
  -  New translation: Portuguese

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
hongxu
d1375d37ee
indent: fix CVE-2024-0911
Backport a fix from upstream to resolve CVE-2024-0911

  https://git.savannah.gnu.org/git/indent.git feb2b646e6c3a05018e132515c5eda98ca13d50d

(cherry picked from commit 26ef6a9c2da06b7de4116c483f9197fd4cf2a4cb)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:14 -07:00
Yogita Urade
91ac7b0212
indent: fix CVE-2023-40305
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace
in indent.c via a crafted file.

Reference:
https://savannah.gnu.org/bugs/index.php?64503

(cherry picked from commit 7da6cb848bc42b3e6bd5d2b37b52ba75510a6ca0)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:14 -07:00
Yoann Congal
721d4f901d
packagegroup-meta-oe: only add clinfo if DISTRO_FEATURES has opencl
Since commit f65ae714d885 ("opencl: make use of the 'opencl'
DISTRO_FEATURE"), clinfo has a feature check on "opencl". Only add it to
its meta-oe package groups if the opencl is in DISTRO_FEATURES.

Fixes this warning (as seen on AB[0]):
stdio: WARNING: Nothing RPROVIDES 'clinfo' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it)

[0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/82/builds/453/steps/12/logs/warnings

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:36 -07:00
Gyorgy Sarvari
6c32a7135b
mosh: set working SRC_URI
The project switched to storing their releases on Github, and
the original links stopped working.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:36 -07:00
Jason Schonberg
169a0b79e2
php: upgrade 8.4.12 -> 8.4.13
This is a bugfix release.  There are integer overflow and memory leak fixes included.

Changelog: https://www.php.net/ChangeLog-8.php#8.4.13

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:35 -07:00
Markus Volk
ff75f0e9bc
iwd: update 3.9 -> 3.10
ver 3.10:
	Fix issue with handling neighbor report on BSS TM request.
	Fix issue with handling deauth and FT association failure.
	Fix issue with handling roaming and old frequencies.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:35 -07:00
Ankur Tyagi
52e78803b0
lsscsi: fix versioning
PE bump is needed because previous PV "030" > current PV "0.32"

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-25 16:19:13 -07:00
Jason Schonberg
fbcfd9a9f5
nodejs: upgrade 22.19.0 -> 22.20.0
Chagelog: https://github.com/nodejs/node/releases/tag/v22.20.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 14:17:45 -07:00
Peter Kjellerstedt
964b42d7de
dbus-broker: Add a runtime dependency on dbus-tools
This matches dbus' runtime dependencies and is needed for the
dbus-broker package to be a drop-in replacement for the dbus package.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 14:17:44 -07:00
Wang Mingyu
2cc8169042
openjpeg: upgrade 2.5.3 -> 2.5.4
CVE-2025-54874.patch
removed since it's included in 2.5.4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 13:17:38 -07:00
Wang Mingyu
996bb4371c
mcelog: upgrade 204 -> 206
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 13:17:38 -07:00
Wang Mingyu
a865d5b365
leptonica: upgrade 1.85.0 -> 1.86.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:45 -07:00
Wang Mingyu
d3bff1aa96
jsoncons: upgrade 1.4.0 -> 1.4.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:45 -07:00
Wang Mingyu
a3fc187ced
inotify-tools: upgrade 4.23.9.0 -> 4.25.9.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:45 -07:00
Wang Mingyu
cf51f98d71
freeipmi: upgrade 1.6.15 -> 1.6.16
0001-Fix-for-GCC15-C23-build-failure.patch
removed since it's included in 1.6.16

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:45 -07:00
Wang Mingyu
e1b93d882c
dash: upgrade 0.5.12 -> 0.5.13
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Wang Mingyu
4e4ad04233
ctags: upgrade 6.2.20250907.0 -> 6.2.20250921.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Wang Mingyu
8c38a815db
btop: upgrade 1.4.4 -> 1.4.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Gyorgy Sarvari
8891ca8748
zlog: upgrade 1.2.16 -> 1.2.18
Switched to cmake. Added a backported patch to be able to use
the latest version of cmake.

Also, add a new patch to avoid overwritingg all the CFLAGS set by Yocto,
which helps with avoiding the inclusion of TMPDIR in the generated files.

License-Update: License changed to Apache2:
1a7b1a6fb9

Changelog:
1.2.18:
- patched severe vulnerability CVE-2024-22857
- restructured build system

1.2.17:
- Change Lience to Apache 2.0, for more people

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Peter Kjellerstedt
b9fc1c079b
opencv: Backport a patch to rename BlocksCompensator::feed()
This avoids a clash with the base class' pure virtual method with the
same name.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 20:44:20 -07:00
Peter Kjellerstedt
c9922073e4
hostapd: Backport a patch to build SAE-PK correctly
SAE-PK needs base64_decode(), but if no other feature is enabled that
needs base64 support, then it is missing.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 20:44:20 -07:00
Gyorgy Sarvari
8fd2b5c5b2
tokyocabinet: fix license
The application is distributed under the LGPL license, not GPL.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 14:22:59 -07:00
Gyorgy Sarvari
3b7f2442fd
tokyocabinet: switch to working SRC_URI
The original source seems to be long gone.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 14:22:58 -07:00
Gyorgy Sarvari
8a7ebb2480
trompeloeil: upgrade 47 -> 49
Changelog:

v49: https://github.com/rollbear/trompeloeil/releases/tag/v49

Highlights:
- Added mocking macros that infers function arity from a trailing return
  type syntax signature.
- Added .RT_TIMES() to exceptations, which works like .TIMES()
  but where the limits are only known at runtime.
- Added several new composable matchers.
- When an expectation is constrained by several .WITH() clauses, a
  violation report will only include the first failed condition,
  short cirquiting the logic.

v48: https://github.com/rollbear/trompeloeil/releases/tag/v48

Highlights:
- Fixed memory leak when adding an action (.RETURN, .SIDE_EFFECT, etc)
  throws.
- Dropped older compilers from CI builds (gcc <= 6 and clang <= 7) since
  GitHub actions now require node-20, and no build environment is
  currently available that both supports node-20 and older compilers.
- Support for STDMETHOD functions for COM.
- Fixed issue with std::expected causing compilation error.
- Silenced gcc -Weffc++ warnings.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 11:11:47 -07:00
Nitin Wankhade
959b07135c
iperf3: Fix CVE-2025-54350
remove assert to prevent crash due to assertion failure
on malformed authentication attempt

Reference: 4eab661da0

Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 07:38:37 -07:00
Nitin Wankhade
7b0f353128
iperf3: Fix CVE-2025-54349
This commit fix heap overflow for iperf3 package

Reference: 4e5313bab0

Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 07:38:37 -07:00
Jeroen Hofstee
d68c56e1ed
php: ignore CVE-2024-3566
CVE-2024-3566 only effects Microsoft Windows.

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 07:38:37 -07:00
Ayoub Zaki
db4acc7aa2
pkcs11-provider: Upgrade 1.0 -> 1.1
https://github.com/latchset/pkcs11-provider/releases/tag/v1.1.0

https://github.com/latchset/pkcs11-provider/compare/v1.0...v1.1.0
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-21 16:06:10 +00:00
Fabio Estevam
7b0e0d225a
crucible: Inherit go-mod-update-modules
Inherit go-mod-update-modules to make future recipe updates easier.

Suggested-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-21 08:21:26 -07:00
Gyorgy Sarvari
66a8618f05
epeg: update to latest revision
Dropped patch that has been incorporated into this version.

Shortlog:
configure: Fix checks for libjpeg and libexif
parenthesis fix
minor fix on CMakeLists
fix to build command line tool with cmake
fix CMakeLists.txt & Epeg.h so that they work on a WIN32 target
bug fix: memleak in epeg_close
add epeg_orientation_set
add epeg_orientation_get
add CMakeLists.txt
Use archive.org link for Sune's blog post
Fix XMP rotation bug

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-19 12:22:01 -07:00
Gyorgy Sarvari
a5cfc39ece
daemonize: update to latest revision
Drop a patch that has been incorporated into this version.

(That is also the changelog - the only change is the accepted patch)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-19 12:22:00 -07:00