15482 Commits

Author SHA1 Message Date
hongxu
d1375d37ee
indent: fix CVE-2024-0911
Backport a fix from upstream to resolve CVE-2024-0911

  https://git.savannah.gnu.org/git/indent.git feb2b646e6c3a05018e132515c5eda98ca13d50d

(cherry picked from commit 26ef6a9c2da06b7de4116c483f9197fd4cf2a4cb)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:14 -07:00
Yogita Urade
91ac7b0212
indent: fix CVE-2023-40305
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace
in indent.c via a crafted file.

Reference:
https://savannah.gnu.org/bugs/index.php?64503

(cherry picked from commit 7da6cb848bc42b3e6bd5d2b37b52ba75510a6ca0)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:14 -07:00
Yoann Congal
721d4f901d
packagegroup-meta-oe: only add clinfo if DISTRO_FEATURES has opencl
Since commit f65ae714d885 ("opencl: make use of the 'opencl'
DISTRO_FEATURE"), clinfo has a feature check on "opencl". Only add it to
its meta-oe package groups if the opencl is in DISTRO_FEATURES.

Fixes this warning (as seen on AB[0]):
stdio: WARNING: Nothing RPROVIDES 'clinfo' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it)

[0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/82/builds/453/steps/12/logs/warnings

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:36 -07:00
Gyorgy Sarvari
6c32a7135b
mosh: set working SRC_URI
The project switched to storing their releases on Github, and
the original links stopped working.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:36 -07:00
Jason Schonberg
169a0b79e2
php: upgrade 8.4.12 -> 8.4.13
This is a bugfix release.  There are integer overflow and memory leak fixes included.

Changelog: https://www.php.net/ChangeLog-8.php#8.4.13

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:35 -07:00
Markus Volk
ff75f0e9bc
iwd: update 3.9 -> 3.10
ver 3.10:
	Fix issue with handling neighbor report on BSS TM request.
	Fix issue with handling deauth and FT association failure.
	Fix issue with handling roaming and old frequencies.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:35 -07:00
Ankur Tyagi
52e78803b0
lsscsi: fix versioning
PE bump is needed because previous PV "030" > current PV "0.32"

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-25 16:19:13 -07:00
Jason Schonberg
fbcfd9a9f5
nodejs: upgrade 22.19.0 -> 22.20.0
Chagelog: https://github.com/nodejs/node/releases/tag/v22.20.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 14:17:45 -07:00
Peter Kjellerstedt
964b42d7de
dbus-broker: Add a runtime dependency on dbus-tools
This matches dbus' runtime dependencies and is needed for the
dbus-broker package to be a drop-in replacement for the dbus package.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 14:17:44 -07:00
Wang Mingyu
2cc8169042
openjpeg: upgrade 2.5.3 -> 2.5.4
CVE-2025-54874.patch
removed since it's included in 2.5.4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 13:17:38 -07:00
Wang Mingyu
996bb4371c
mcelog: upgrade 204 -> 206
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 13:17:38 -07:00
Wang Mingyu
a865d5b365
leptonica: upgrade 1.85.0 -> 1.86.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:45 -07:00
Wang Mingyu
d3bff1aa96
jsoncons: upgrade 1.4.0 -> 1.4.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:45 -07:00
Wang Mingyu
a3fc187ced
inotify-tools: upgrade 4.23.9.0 -> 4.25.9.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:45 -07:00
Wang Mingyu
cf51f98d71
freeipmi: upgrade 1.6.15 -> 1.6.16
0001-Fix-for-GCC15-C23-build-failure.patch
removed since it's included in 1.6.16

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:45 -07:00
Wang Mingyu
e1b93d882c
dash: upgrade 0.5.12 -> 0.5.13
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Wang Mingyu
4e4ad04233
ctags: upgrade 6.2.20250907.0 -> 6.2.20250921.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Wang Mingyu
8c38a815db
btop: upgrade 1.4.4 -> 1.4.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Gyorgy Sarvari
8891ca8748
zlog: upgrade 1.2.16 -> 1.2.18
Switched to cmake. Added a backported patch to be able to use
the latest version of cmake.

Also, add a new patch to avoid overwritingg all the CFLAGS set by Yocto,
which helps with avoiding the inclusion of TMPDIR in the generated files.

License-Update: License changed to Apache2:
1a7b1a6fb9

Changelog:
1.2.18:
- patched severe vulnerability CVE-2024-22857
- restructured build system

1.2.17:
- Change Lience to Apache 2.0, for more people

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Peter Kjellerstedt
b9fc1c079b
opencv: Backport a patch to rename BlocksCompensator::feed()
This avoids a clash with the base class' pure virtual method with the
same name.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 20:44:20 -07:00
Peter Kjellerstedt
c9922073e4
hostapd: Backport a patch to build SAE-PK correctly
SAE-PK needs base64_decode(), but if no other feature is enabled that
needs base64 support, then it is missing.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 20:44:20 -07:00
Gyorgy Sarvari
8fd2b5c5b2
tokyocabinet: fix license
The application is distributed under the LGPL license, not GPL.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 14:22:59 -07:00
Gyorgy Sarvari
3b7f2442fd
tokyocabinet: switch to working SRC_URI
The original source seems to be long gone.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 14:22:58 -07:00
Gyorgy Sarvari
8a7ebb2480
trompeloeil: upgrade 47 -> 49
Changelog:

v49: https://github.com/rollbear/trompeloeil/releases/tag/v49

Highlights:
- Added mocking macros that infers function arity from a trailing return
  type syntax signature.
- Added .RT_TIMES() to exceptations, which works like .TIMES()
  but where the limits are only known at runtime.
- Added several new composable matchers.
- When an expectation is constrained by several .WITH() clauses, a
  violation report will only include the first failed condition,
  short cirquiting the logic.

v48: https://github.com/rollbear/trompeloeil/releases/tag/v48

Highlights:
- Fixed memory leak when adding an action (.RETURN, .SIDE_EFFECT, etc)
  throws.
- Dropped older compilers from CI builds (gcc <= 6 and clang <= 7) since
  GitHub actions now require node-20, and no build environment is
  currently available that both supports node-20 and older compilers.
- Support for STDMETHOD functions for COM.
- Fixed issue with std::expected causing compilation error.
- Silenced gcc -Weffc++ warnings.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 11:11:47 -07:00
Nitin Wankhade
959b07135c
iperf3: Fix CVE-2025-54350
remove assert to prevent crash due to assertion failure
on malformed authentication attempt

Reference: 4eab661da0

Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 07:38:37 -07:00
Nitin Wankhade
7b0f353128
iperf3: Fix CVE-2025-54349
This commit fix heap overflow for iperf3 package

Reference: 4e5313bab0

Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 07:38:37 -07:00
Jeroen Hofstee
d68c56e1ed
php: ignore CVE-2024-3566
CVE-2024-3566 only effects Microsoft Windows.

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 07:38:37 -07:00
Ayoub Zaki
db4acc7aa2
pkcs11-provider: Upgrade 1.0 -> 1.1
https://github.com/latchset/pkcs11-provider/releases/tag/v1.1.0

https://github.com/latchset/pkcs11-provider/compare/v1.0...v1.1.0
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-21 16:06:10 +00:00
Fabio Estevam
7b0e0d225a
crucible: Inherit go-mod-update-modules
Inherit go-mod-update-modules to make future recipe updates easier.

Suggested-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-21 08:21:26 -07:00
Gyorgy Sarvari
66a8618f05
epeg: update to latest revision
Dropped patch that has been incorporated into this version.

Shortlog:
configure: Fix checks for libjpeg and libexif
parenthesis fix
minor fix on CMakeLists
fix to build command line tool with cmake
fix CMakeLists.txt & Epeg.h so that they work on a WIN32 target
bug fix: memleak in epeg_close
add epeg_orientation_set
add epeg_orientation_get
add CMakeLists.txt
Use archive.org link for Sune's blog post
Fix XMP rotation bug

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-19 12:22:01 -07:00
Gyorgy Sarvari
a5cfc39ece
daemonize: update to latest revision
Drop a patch that has been incorporated into this version.

(That is also the changelog - the only change is the accepted patch)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-19 12:22:00 -07:00
Yi Zhao
00fa5e02f1
minifi-cpp: fix reproducibility issue
Minifi-cpp will add a build identifier to the binary. If not specified,
a random build identifier will be generated for each build. This breaks
reproducibility. Set BUILD_IDENTIFIER to ${PV} to ensure the identifier
remains constant across builds.

Additionally, set BUILD_DATE to SOURCE_DATE_EPOCH to use reproducible
timestamp.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-19 12:22:00 -07:00
Gyorgy Sarvari
2478dd3d56
pm-qa: update git fetch protocol
Apparently the git repo in the SRC_URI stopped supporting git
protocol. Switch to https to be able to fetch the source successfully.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-19 12:21:59 -07:00
Martin Jansa
6cee89c49e
README.md: Change maintainer from Andreas to Khem for gnome, multimedia, xfce
Confirmed by Andreas off list.

Add Khem as he is main maintainer of meta-oe, but surely he would accept any
help in these areas, don't be shy to step up.

Just add uppercase L in meta-oe README.md for consistency.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-19 12:21:59 -07:00
Jiaying Song
948d188832 webkitgtk3: Fix a typo OFFF -> OFF
The CMake option for disabling always_inline hints in debug build was
misspelled as OFFF. This patch corrects it to OFF.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 23:11:36 -07:00
Dmitry Baryshkov
f65ae714d8 opencl: make use of the 'opencl' DISTRO_FEATURE
Currently packages like Mesa list 'opengl' and 'vulkan' as required
DISTRO_FEATURES, disabling GPU support for non-graphics-enabled cases.
However in the modern world it's a perfectly fine usecase to have a
headless box with GPU being used by OpenCL only. The OE-Core has added
the 'opencl' DISTRO_FEATURE, making it possible to specify whether
OpenCL is enabled or not and also making it possible to enable GPU
packages if only OpenCL is required.

Follow the example of GLVND and vulkan-loader and disable OpenCL ICD
packages if corresponding feature is not enabled.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 20:07:03 -07:00
Dmitry Baryshkov
97b28934e8 opencl-icd-loader: pull in ICD packages
Make the OpenCL ICD loader RRECOMMEND the virtual ICD (Installable
Client Driver) package, making sure that the BSP can define the most
suitable OpenCL driver.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 20:07:03 -07:00
Dmitry Baryshkov
f3fe8bf417 freerdp3: depend on virtual/libopencl1 instead of opencl-icd-loader
Make the package depend on the OpenCL virtual package rather than
the exact implementation.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 20:07:03 -07:00
Dmitry Baryshkov
85a3ac2b9d opencl-cts: depend on virtual/libopencl1 instead of opencl-icd-loader
Make OpenCL CTS package depend on the OpenCL virtual package rather than
the exact implementation.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 20:07:03 -07:00
Dmitry Baryshkov
87b44d29b6 opencl: rename virtual/opencl-icd to virtual/libopencl1
The ocl-icd and opencl-icd-loader provide libOpenCL.so.1 rather than the
OpenCL Installable Client Driver (ICD). Rename the virtual package
accordingly.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 20:07:03 -07:00
Dmitry Baryshkov
6547930f24 ocl-icd, opencl-icd-loader: drop RPROVIDES for virtual-opencl-icd
These two packages don't provide ICD drivers at runtime. They provide
the libOpenCL.so.1. Corresponding package is selected at the build time
via the PROVIDES_virtual/opencl-icd. Drop the useless and incorrect
RPROVIDES for virtual-opencl-icd.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 20:07:03 -07:00
Fabio Estevam
dfc93cc6d4 crucible: Update to 2025.05.28
Update to the latest 2025.05.28 revision.

Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 19:59:20 -07:00
Khem Raj
6a86d97e0e freerdp3: Upgrade to 3.17.1
* Package proxy-plugins into their own package
* Add missing dependency on json-c
* While new plugins have solib prefix .so are still
  packaged for compatibility

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 13:01:10 -07:00
Khem Raj
099dbddcb2 idevicerestore: Upgrade to tip of trunk
Add missing dep on libtatsu

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 13:01:10 -07:00
Khem Raj
70ed586d50 libtatsu: Add recipe
New dependency needed for idevicerestore package

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 13:01:10 -07:00
Sebastien LEFEVRE
c436334d88
utf8proc: Fixes the recipe when built in offline mode
It is necessary to set the revision number to prevent it from being
fetched from the remote.
The revision number has been configured relative to release 2.10.0.

Signed-off-by: Sebastien LEFEVRE <sebastien.lefevre@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 08:57:43 -07:00
Jiaying Song
306c094576
webkitgtk3: fix build failure with DEBUG_BUILD enabled
It fails to compile webkitgtk when debug build enabled:

| /path_to/tmp/work/core2-64-poky-linux/webkitgtk/2.40.5/webkitgtk-2.40.5/Source/bmalloc/libpas/src/libpas/pas_allocation_result.h:76:1:
  error: inlining failed in call to 'always_inline' 'pas_allocation_result pas_allocation_result_identity(pas_allocation_result)':
  function not considered for inlining
|    76 | pas_allocation_result_identity(pas_allocation_result result)
|       | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Add a cmake variable WEBKIT_NO_INLINE_HINTS to disable gcc function
attribute `always_inline` when debug build is enabled.

And adjust indent as well.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 08:57:43 -07:00
Changqing Li
403b9a1717
pahole: fix a Segmentation fault error
Command "pahole --btf_features=default -J" will segmentation fault when
kernel-dbg package is also installed.

$pahole --btf_features=default -J
pahole[599]: segfault at 8 ip 00007f7c92d819e2 sp 00007f7c799febe0
error 6 in libdwarves.so.1.0.0[189e2,7f7c92d72000+1c000] likely on CPU 0
(core 0, socket 0)
Code: 74 19 ff ff 48 39 dd 75 ef 4c 89 ef e8 67 19 ff ff 49 8b 7c 24 18
e8 8d 13 ff ff 49 8b 14 24 49 8b 44 24 08 4c 89 e7 45 31 e4 <48> 89 42
08 48 89 10 e8 42 19 ff ff e9 30 ff ff ff e8 58 0a ff ff
Segmentation fault (core dumped)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 08:57:42 -07:00
Wang Mingyu
11626467b4
xterm: upgrade 401 -> 402
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-16 09:59:21 -07:00
Wang Mingyu
d945f3e840
python3-psycopg: upgrade 3.2.9 -> 3.2.10
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-16 09:59:19 -07:00