A corresponding patch was removed with the upgrade to 3.4.1 since it had
been integrated upstream. However, it had also been reverted again,
which was not noticed.
This backports a subsequent fix for the problem.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
There's no need to inherit python3native as there are no python3- native
dependencies.
Remove RDEPENDS_${PN}, these are all libraries that are linked to so the
relevant RDEPENDS are created. The fact that this recipe is still using
the old syntax suggests that they're not needed.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The libaio subsystem in MariaDB was rewritten in 11.4.8,
which made the previously used patch called
0001-aio_linux-Check-if-syscall-exists-before-using-it.patch
non-applicable.
This patch was deleted in commit f3cd830c09 ("mariadb: 11.4.8")
but it's still needed, because the original code was simply
moved into a new source file.
Add a new patch applying the same change to tpool/aio_libaio.cc
to fix the build error on riscv32.
Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
[ snip of CMakeLists.txt ]
BISON_TARGET(constexp
${CMAKE_CURRENT_LIST_DIR}/constexp.y
${GENERATED_SRC}/ce_parse.cpp
COMPILE_FLAGS "${YACC_FLAGS}")
[ end of snip ]
bison embeds full paths in its generated headers, eg:
bison -o /full/build/path/generated/example.cpp ...
The header will include:
#ifndef YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED
#define YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED
This make doxygen-src not reproducible, fix by replacing full build path
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
find, the way it is used will also list c files in
special directories like .pc, which is created by quilt
for managing patches and is the default PATCHTOOL
Ignore this directory during find operation.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Ryan Eatmon <reatmon@ti.com>
The --with-smart option behind the feature "smart" relies on the drivedb.h
header, provided by smartmontools package (/usr/share/smartmontools/drivedb.h).
However the dependencies (DEPENDS) miss this package. Furthermore, if the
--with-drivedb option is not used, the configuration step will search for the
file first on the host's rootfs. This may result in the wrong header being picked,
or the --with-smart option being silently disabled due to incomplete dependencies
(causing missing header).
The header is now guaranteed to be present due to an added dependency in the
"smart" feature, and its location is specified by the --with-drivedb option.
Signed-off-by: Corentin Guillevic <corentin.guillevic@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Move Eigen BLAS, LAPACK as packageconfig as they requires Fortran compiler
- Disable building TESTING
- Remove patch that has been merged
Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Normally CMake uses the build tree for the RPATH when building
executables etc on systems that use RPATH. This will make the buildpath
included in the binaries and not reproducible, so disable RPATHs.
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add a fallback mirror for the openocd repository fetch
process, so that if the primary source repo.or.cz is unavailable,
the build system will attempt to download the source code from the gitHub
mirror.
Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Platform support patches:
- Add SWD native configuration files for AM64x and J784s4 boards
- Configure DMEM access parameters in ti_k3.cfg for direct memory operations
- Set up DAPBUS debugger and emulated AP descriptions
Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to release 8.1.4:
Security fixes:
- (CVE-2025-49844) A Lua script may lead to remote code execution
- (CVE-2025-46817) A Lua script may lead to integer overflow and
potential RCE
- (CVE-2025-46818) A Lua script can be executed in the context of
another user
- (CVE-2025-46819) LUA out-of-bound read
Bug fixes:
- Fix accounting for dual channel RDB bytes in replication stats
- Fix EVAL to report unknown error when empty error table is
provided
- Fix use-after-free when active expiration triggers hashtable
to shrink
- Fix MEMORY USAGE to account for embedded keys
- Fix memory leak when shrinking a hashtable without entries
- Prevent potential assertion in active defrag handling large
allocations
- Prevent bad memory access when NOTOUCH client gets unblocked
- Converge divergent shard-id persisted in nodes.conf to primary's
shard id
- Fix client tracking memory overhead calculation
- Fix RDB load per slot memory pre-allocation when loading from RDB
snapshot
- Don't use AVX2 instructions if the CPU doesn't support it
- Fix bug where active defrag may be unable to defrag sparsely
filled pages
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Sometimes ftp.gnu.org might be slow.
Add UPSTREAM_CHECK_URI while here
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Gyorgy Sarvari <skandigraun@gmail.com>
This upgrade contains a fix for CVE-2024-47175.
Changelog:
2.1.1:
-pdftops: Use Poppler for a few old Epson laser printers This
works around documents being printed off-centre, shifted towards
the top right. Affected are printers using epsoneplijs:
EPL-5700L, EPL-5800L, EPL-5900L, EPL-6100L, EPL-6200L.
-Fixed bugs discovered by static analyzer OpenScanHub Possible
buffer overflows, uninitialized memory, format string issues
and resource leaks, ...
-Fix crash bugs in ppdLoadAttributes() When parsing the
"*cupsFilter(2): ..." lines in the PPD file use memmove() instead
of strcpy() as the latter does not support handling overlapping
memory portions and do not move running pointer beyond the end
of the input string.
2.1.0:
-Prevent PPD generation based on invalid IPP response Overtaken
from CUPS 2.x: Validate IPP attributes in PPD generator, refactor
make-and-model code, PPDize preset and template names, quote PPD
localized strings. Fixes CVE-2024-47175.
2.1b:
-Added support for libcups3 (libcups of CUPS 3.x) With these changes
libcupsfilters can be built either with libcups2 (libcups of CUPS 2.x)
or libcups3 (libcups of CUPS 3.x).
-Prefer PDF again in PPDs for driverless printers PDF works better with
finishing, especially combinations of multiple copies, collation, and
stapling/binding.
-Use 0.5mm as tolerance when comparing page sizes For the PWG two page
sizes are considered the same when the dimensions differ no more than
0.5 mm, libppd used too tight tolerances.
-PPD generator: Check for required attributes when choosing input format
Check for PCLm and PWG the minimum of attributes which we require
during PPD generation.
-ppdLoadAttributes(): Improve check whether parameters are integer
-ppdLoadAttributes(): Fix crash when page size could not get determined
-Fix crash if there is no page size for "Custom"
-Fix crash when incoming *ptr is NULL
-libcups2 compatibility: Use proper CUPS array callback function types
Fixed CUPS array function call in libcups2 compatibility layer
-Build system: Fix failure to correctly link to zlib Look up zlib
properly with pkg-config
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade contains fixes for the following vulnerabilities:
CVE-2025-43961, CVE-2025-43962, CVE-2025-43963 and CVE-2025-43964
Also drop two old CVE_STATUS entries which are not needed anymore,
because the database has been updated with correct info.
Changelog:
https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
All 3 CVEs are fixed in the currently used revision.
Fixes:
CVE-2024-25176: 343ce0edaf
CVE-2024-25177: 85b4fed0b0
CVE-2024-25178: defe61a567
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
CVE-2022-3734 only affects Windows.
CVE-2022-0543 affects only packages that were packaged for Debian and
Debian-derivative distros.
Neither of these issues is present in upstream Redis.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The fix has been backported by upstream, and it is included in the used
version: d0eeee6e31
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The fix has been backported to both redis versions by upstream, and
both versions contain it already.
For 6.2.20 [1] contains the backported fix.
For 7.2.11 [2] contains the backported fix.
[1]: 5e93f9cb9d
[2]: 42fb340ce4
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
(CVE-2025-49844) A Lua script may lead to remote code execution
(CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
(CVE-2025-46818) A Lua script can be executed in the context of another user
(CVE-2025-46819) LUA out-of-bound read
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
6.2.19:
(CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands
(CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an error
6.2.20:
(CVE-2025-49844) A Lua script may lead to remote code execution
(CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
(CVE-2025-46818) A Lua script can be executed in the context of another user
(CVE-2025-46819) LUA out-of-bound read
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade includes fixes for the following vulnerabilities:
CVE-2025-31176
CVE-2025-31178
CVE-2025-31179
CVE-2025-31180
CVE-2025-31181
This release supports qt4, qt5 and qt6 (the last one is new in this release).
There are 2 qt PACKAGECONFIGs now: qt5 and qt6 - they are mutually exclusive.
Since it is being touched, also fix lua PACKAGECONFIG, which requires lua-native
at build time.
Changelog:
http://gnuplot.info/ReleaseNotes_6_0_3.html
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The upgrade contains fixes for the following vulenrabilities:
CVE-2025-8835, CVE-2025-8836, CVE-2025-8837
Changelog:
4.2.8:
Fixed a bug in the JPC decoder that could cause bad memory accesses
if the debug level is set sufficiently high.
4.2.7:
Added some missing range checking on several coding parameters in the
JPC encoder.
4.2.6:
Added a check for a missing color component in the jas_image_chclrspc
function.
Fixed a minor build problem related to the use of -Wstrict-prototypes
with Clang.
4.2.5:
Made a change to a configuration header file in order to avoid
undesirable compiler warnings when JasPer is used in C++ code
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
These CVEs are for iperf3 - which is a similar application in its goals (and name),
but an independent project from this, and the projects are independent implementations
also, they share no common code.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This release contains fixes for the following vulnerabilities:
CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101,
CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160,
CVE-2025-55212, CVE-2025-55298, CVE-2025-57803, CVE-2025-57807
Also remove jp2 PACKAGECONFIG: it was superseded by openjpeg
PACKAGECONFIG, which also provides jpeg 2000 support.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add recipe to build a small OpenCL benchmark program to measure peak
GPU/CPU performance.
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade includes fixes for CVE-2025-26623, CVE-2025-54080
and CVE-2025-55304.
Changelog:
https://github.com/Exiv2/exiv2/blob/v0.28.7/doc/ChangeLog
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
