LZMA isn't supported by the mainline kernel driver, so there's no real
point in enabling it.
Disable LZO by default, as LZO is very obsolete (last released in 2017)
and there are better algorithms available.
Move xattr to the end so it's separate from the compression algorithms.
(From OE-Core rev: 6f65d9372ec639491920fd48df76dfea8afdbfd9)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The REPRODUCIBLE_DEFAULT option was removed in 4.7[1].
Backport a patch to fix missing pthread typedefs, and a patch to fix
missing pid_t typedefs.
Also clean up the tasks to be neater and more concise.
[1] squash-tools ae9914d15293af7c596148aedd997b3058e35d9e
(From OE-Core rev: d588d0fbd8360cc999badaf4c4888be983c14b14)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
A recipe that fetches from git but is otherwise a released version
should not be using _git.bb recipe names.
Put the version in the filename, drop the explicit PV, and set the tag
name in the SRC_URI to verify the SHA.
(From OE-Core rev: 8529dbae1b345d1517023dae09637a4baad9ffe8)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Refreshed patches:
0001-libelf-Add-libeu-objects-to-libelf.a-static-archive.patch
ptest.patch
Changelog:
Version 0.193 "Bugs erased, stacks traced"
debuginfod: Add CORS (webapp access) support to webapi and --cors option.
Add --listen-address option for binding the HTTP listen socket
to a specific IPv4 or IPv6 address.
debuginfod client now caches x-debuginfod-* HTTP headers
alongside downloaded files.
libdw: Add dwarf_language and dwarf_language_lower_bound functions.
Improved support for DWARF6 language metadata as well as DWARF
language constants for Nim, Dylan, Algol68, V and Mojo.
dwarf_srclang is now forward-compatible with DWARF6 language
constants.
libdwfl_stacktrace: Experimental new library interface for unwinding
stack samples into call chains, and tracking and
caching Elf data for multiple processes, building
on libdwfl. Initially supports perf_events stack
sample data.
libelf: elf_scnshndx has been rewritten to be more robust, particularily
for ELF files with more than 64K sections.
readelf: Improved handling of corrupt ELF data.
--section-headers output now includes a "Key to Flags" explaining
section flag meanings.
(From OE-Core rev: ca990ae5a14fa0899dee4fccacf4cac8f212e4e8)
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
A recipe that fetches from git but is otherwise a released version
should not be using _git.bb recipe names.
Put the version in the filename and drop the explicit PV.
(From OE-Core rev: b9eada4db556f06c5a76991db2220272cef66fa3)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Drop all of the patches that have been merged upstream.
The build no longer needs the flex runtime library so remove flex from
DEPENDS.
License-Update: contributor list updated.
(From OE-Core rev: 3370ef98b6fe74b56b9e6b42b915a536195094cd)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
flex-nativesdk is both the wrong name (should be nativesdk-flex), and in
nativesdk builds it will be a dependency anyway thanks to the DEPENDS
remapping.
Merge multiple assignments into a single line.
(From OE-Core rev: 9a59d2c0be199c4f16143db6c70942fdedd0212c)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
A recipe that fetches from git but is otherwise a released version
should not be using _git.bb recipe names.
Put the version in the filename, and drop the explicit PV.
(From OE-Core rev: f288f7dc47a488eb3d388a2513f0908e09c0feca)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Inherit manpages and optionally enable the manpages. They're in the
repository so don't need more tools to build.
(From OE-Core rev: 44ef85ac2b41e78888411cf4577b1128eced6909)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Meson shows this warning in do_configure:
WARNING: libmagic option is obsolete. libmodulemd can detect
compression formats without a magic library now. Please stop using
this option. It will be removed in the future and will cause a meson
failure.
Remove the option as it's now redundant.
(From OE-Core rev: c053dd1f2143e10d970db849d13df447e736169f)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
A recipe that fetches from git but is otherwise a released version
should not be using _git.bb recipe names.
Put the version in the filename, and drop the explicit PV.
(From OE-Core rev: d3d2a8158b81920c51d366a5d38614bf7681e5b0)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Security content in this release:
- gh-135034: Fixes multiple issues that allowed tarfile extraction filters
(filter="data" and filter="tar") to be bypassed using crafted symlinks and
hard links. Addresses CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, and
CVE-2025-4517.
- gh-133767: Fix use-after-free in the “unicode-escape” decoder with a non-
“strict” error handler.
- gh-128840: Short-circuit the processing of long IPv6 addresses early in
ipaddress to prevent excessive memory consumption and a minor denial-of-service.
Includes additional standard library improvements and bug fixes.
References:
https://docs.python.org/3/whatsnew/changelog.html#python-3-13-4-finalhttps://www.python.org/downloads/release/python-3134/
(From OE-Core rev: d2bcfa826aa3a7bd5d6ab250fb8ba083e2688c8b)
Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Rebased:
0001-When-cross-installing-execute-package-scriptlets-wit.patch
0016-rpmscript.c-change-logging-level-around-scriptlets-t.patch
* Removed the one which already merged:
0001-Set-RPM_PLUGINDIR-in-top-level-CMakeLists.txt.patch
* Added a patch to fix rpm-native build error:
gcc: error: unrecognized command-line option -fhardened
0001-CMakeLists.txt-Fix-checking-for-CFLAGS.patch
* License-Update: Minor formatting changes as the commit messages said in
41143b27b6f7320f280aea6014e8f532eb0239d6
(From OE-Core rev: 5d25e1ba4d8850e2c281fc7f24493239bf2f9866)
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libnsl2 and libtirpc were build dependencies for the nis module.
The nis module was deprecated in Python 3.11 and removed in Python 3.13
(From OE-Core rev: 742eca9cb56ab4ad10534181d28de1fdf3880b9f)
Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
There's no need to setup a fake 'source directory' and
redirect the tests to it; rather it's possible to point
them directly to ptest directory (this needs to be done
twice, in Makefile substitutions, and as a C define during
ptest compilation).
This also eliminates the assumption that S and B are in the
same directory (no longer true when S is in UNPACKDIR).
(From OE-Core rev: 4df67f54cc4f98b63e465fba3dc41ac9813a033e)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The previous one wasn't particularly readable, and assumed
a particular relationship between S and B. The new one
also works when S is in UNPACKDIR, or anywhere else.
(From OE-Core rev: 584b039fe688ba85fb19b48f2c7209452e248c00)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This is already done in target and nativesdk qemu, and in
default templates for both oe-core and poky. Let's just
make it universal.
This also simplifies configurations for bitbake-setup,
as they no longer have to enable sdl separately.
(From OE-Core rev: f52c9d5a59ac19fc6b68c175649697257a9ebdfd)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
PR32829, SEGV on objdump function debug_type_samep
u.kenum is always non-NULL, see debug_make_enum_type.
Backport a patch from upstream to fix CVE-2025-5245
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a]
(From OE-Core rev: f5fd6f691d62052ffddb13461cf221321ff127c3)
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This ensures that it can be turned on from a distro layer
config metadata e.g. local.conf without forcing overrides
currently we have do something like
FORTRAN:forcevariable = ",fortran"
RUNTIMETARGET:append:pn-gcc-runtime = " libquadmath "
TOOLCHAIN_TARGET_TASK:append = " gfortran"
to enabled fortran support from distro conf file.
After this change we can do it with
FORTRAN = ",fortran"
RUNTIMETARGET:append:pn-gcc-runtime = " libquadmath "
TOOLCHAIN_TARGET_TASK:append = " gfortran"
(From OE-Core rev: 50abae55eda0115d073bbc6552f2fcb4ecbb7949)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
While no usrmerge in sysvinit, some tools defined in rpm macro have wrong path
$ echo 'INIT_MANAGER="sysvinit"' >> conf/local.conf
$ echo 'IMAGE_INSTALL:append = " rpm busybox"' >> conf/local.conf
$ bitbake core-image-minimal
$ runqemu tmp/deploy/images/qemux86-64/core-image-minimal-qemux86-64.rootfs.qemuboot.conf
root@qemux86-64:~# which sed tar rm mkdir cp cat chown chmod gzip grep mv
/bin/sed
/bin/tar
/bin/rm
/bin/mkdir
/bin/cp
/bin/cat
/bin/chown
/bin/chmod
/bin/gzip
/bin/grep
/bin/mv
root@qemux86-64:~# rpm --eval "%{__sed} %{__tar} %{__rm} %{__mkdir} %{__cp} %{__cat} %{__chown} %{__chmod} %{__gzip} %{__grep} %{__mv}"
/usr/bin/sed /usr/bin/tar /usr/bin/rm /usr/bin/mkdir /usr/bin/cp /usr/bin/cat /usr/bin/chown /usr/bin/chmod /usr/bin/gzip /usr/bin/grep /usr/bin/mv
Here to explain how __rm was set in rpm during build. The build system
of rpm is cmake. Take rpm rpm-4.19.x for example:
The '__RM rm' is defected by findutil [1], and function findutil
calls find_program to search for tool, if not found on host, then
hardcode with "/usr/bin" prefix [2]
Yocto explicitly set OECMAKE_FIND_ROOT_PATH_MODE_PROGRAM = "ONLY" [3][4]
to search tools from CMAKE_FIND_ROOT_PATH [5] which locates in recipe sysroot,
if not found in recipe sysroot, hardcode with "/usr/bin" prefix
If "${base_bindir}" != "${bindir}, explicitly correct tools in rpm
macros, use ${base_bindir} to instead original ${bindir}. Only do the
operation for target, it is not necessary for native and nativesdk,
because most host distribution supports usrmerge
After applying this commit, on target:
root@qemux86-64:~# rpm --eval "%{__sed} %{__tar} %{__rm} %{__mkdir} %{__cp} %{__cat} %{__chown} %{__chmod} %{__gzip} %{__grep} %{__mv}"
/bin/sed /bin/tar /bin/rm /bin/mkdir /bin/cp /bin/cat /bin/chown /bin/chmod /bin/gzip /bin/grep /bin/mv
root@qemux86-64:~# ls /bin/sed /bin/tar /bin/rm /bin/mkdir /bin/cp /bin/cat /bin/chown /bin/chmod /bin/gzip /bin/grep /bin/mv
/bin/cat /bin/chmod /bin/chown /bin/cp /bin/grep /bin/gzip /bin/mkdir /bin/mv /bin/rm /bin/sed /bin/tar
In order to save size, this commit does not add these tools to
runtime depends, user should explicitly add them if necessary
(such as use rpm to build packages)
[1] https://github.com/rpm-software-management/rpm/blob/rpm-4.19.x/CMakeLists.txt#L121
[2] https://github.com/rpm-software-management/rpm/blob/rpm-4.19.x/CMakeLists.txt#L59
[3] https://git.openembedded.org/openembedded-core/commit/?id=f4ea12f6635125ee793f4dd801c538c0186f9dc3
[4] https://cmake.org/cmake/help/latest/variable/CMAKE_FIND_ROOT_PATH_MODE_PROGRAM.html
[5] https://git.openembedded.org/openembedded-core/tree/meta/classes-recipe/cmake.bbclass?id=f4ea12f6635125ee793f4dd801c538c0186f9dc3#n123
(From OE-Core rev: c89c7177be2df5d2be44478a6ac43b35ad46db9e)
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
d71f96a6523875c9694fcdf468c9f458323d07f2.patch
removed since it's included in 4.24.0
(From OE-Core rev: a7c325f3d083b76842440aa1efa997fac53a36c9)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This ensures the dependencies match across musl and glibc
(From OE-Core rev: ad0b81bffc18f9bd60daac12dd00c56a6ef022f9)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Add 0001-contrib-spec-filters-obs-usr-bin-sh-bin-sh.patch to fix:
ERROR: quilt-0.69-r0 do_package_qa: QA Issue: /usr/share/quilt/spec-filters/obs contained in package quilt requires /usr/bin/sh, but no providers found in RDEPENDS:quilt? [file-rdeps]
(From OE-Core rev: 05665175f7f9ed75be226034434753ee9e0af3be)
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Rebased Makefile-ptest.patch for 6.15
* License-Update: Update copyright year from 2024 to 2025
(From OE-Core rev: 3cb2541fa48118fb545545670dae1cd39a9e7ee3)
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
There are reports this class has been broken since mickledore which suggests
there are limited numbers of users. It doesn't have any automated testing
and it would be hard to setup and maintain a testing environment for it. The
original users/manintainers aren't using it now.
For those reasons, drop from OE-Core as we're not in a good position to
maintain it. I'd suggest anyone wanting to use it creates a dedicated layer
with maintainers who are in a position to test/develop it appropriately since
it is standalone code.
(From OE-Core rev: ecf8c386cf83ea235bdc4ee0da6671a395a4c358)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
All the patches have been accepted upstream.
Update the Uptream-Status tags accordingly.
(From OE-Core rev: f75f8ce638f53334056cff6cae7d45d559079ec6)
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Building with USE_NLS = "no" results in the following errors:
lib/spawn-pipe.c: In function 'create_pipe':
lib/spawn-pipe.c:218:7: error: format not a string literal and no
format arguments [-Werror=format-security]
218 | error (EXIT_FAILURE, errno, _("cannot create pipe"));
| ^~~~~
lib/spawn-pipe.c:221:7: error: format not a string literal and no
format arguments [-Werror=format-security]
221 | error (EXIT_FAILURE, errno, _("cannot create pipe"));
| ^~~~~
lib/clean-temp.c: In function 'create_temp_dir':
lib/clean-temp.c:234:7: error: format not a string literal and no
format arguments [-Werror=format-security]
234 | error (0, errno,
| ^~~~~
Backport a patch from gnulib to avoid the problem.
(From OE-Core rev: 635df18f32e8f13cc5897737450dbd9f9207db3b)
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Add comment about riscv32gc ioctl codes patch, it is needed until libc
version is 0.2.172 or greater in Cargo.lock.
Comparing changes since 1.8.3:
https://github.com/PyO3/maturin/compare/v1.8.3...v1.8.6
Changelog:
1.8.6
* Print a message when overriding platform tag from _PYTHON_HOST_PLATFORM
in #2594
* Use the current python interpreter's version when the abi3 feature is set
with no explicit version in #2597
1.8.5
* Fix release CI build
1.8.4
* Install a Rust toolchain into a temporary directory when building maturin
itself or a package and a Rust toolchain is missing. Set
MATURIN_NO_INSTALL_RUST to disable this behavior. #2421
* Fix broken maturin develop with latest uv in #2584
* Add PYO3_PYTHON env var support in #2534
* Sort RECORD file in wheel archives to make them deterministic in #2550
* Publish wheel for loongarch64 in #2548
* Add --compression-level option to build command in #2572
(From OE-Core rev: 92387900825dc6570c9bb43ca4b5a7d44f821f5c)
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
One of the ptests keeps hanging on qemuriscv64. Until it is investigated, stop
it running for now. Also improve the debug output from the run-ptest script so
it is easier to see where things hang in future.
(From OE-Core rev: bf6a6ba96757471048044290318e32048040dae5)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Comparing changes since 2.3.0:
https://github.com/urllib3/urllib3/compare/2.3.0...2.4.0
Changelog:
https://urllib3.readthedocs.io/en/stable/changelog.htmlhttps://github.com/urllib3/urllib3/blob/main/CHANGES.rst#240-2025-04-10
2.4.0 (2025-04-10)
Features
* Applied PEP 639 by specifying the license fields in pyproject.toml.
(#3522)
* Updated exceptions to save and restore more properties during the
pickle/serialization process. (#3567)
* Added verify_flags option to create_urllib3_context with a default of
VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+.
(#3571)
Bugfixes
* Fixed a bug with partial reads of streaming data in Emscripten. (#3555)
Misc
* Switched to uv for installing development dependecies. (#3550)
* Removed the multiple.intoto.jsonl asset from GitHub releases.
Attestation of release files since v2.3.0 can be found on PyPI. (#3566)
(From OE-Core rev: a8bb08299140a5b7b548bd6b26a2973531602d6c)
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Comparing changes since 0.24.0:
https://github.com/crate-py/rpds/compare/v0.24.0...v0.25.1
Changelog:
v0.25.1
What's Changed
* Add windows arm64 wheel build by @finnagin in #133
v0.25.0
What's Changed
* Bump PyO3 to 0.25 by @edgarrmondragon in #135
(From OE-Core rev: 1567e8ae8b07a1fcd16101a7376be87c09cfbc36)
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Comparing changes since 25.0.0:
https://github.com/pyca/pyopenssl/compare/25.0.0...25.1.0
Changelog:
https://www.pyopenssl.org/en/latest/changelog.html
25.1.0 (2025-05-17):
Backward-incompatible changes:
* None
Deprecations:
* Attempting using any methods that mutate an OpenSSL.SSL.Context after
it has been used to create an OpenSSL.SSL.Connection will emit a
warning. In a future release, this will raise an exception.
Changes:
* cryptography maximum version has been increased to 45.0.x.
(From OE-Core rev: f83f00c1a5bb17e89651c5b19ec0a65e61a1bde7)
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
