Changelog:
==========
- (ntfscat) Fix heap memory corruption when processing a corrupt or maliciously
crafted filesystem. (CVE-2026-42616)
- Fix heap memory corruption when copying index data from root to an index
block in a corrupt or maliciously crafted filesystem. (CVE-2026-42617)
- Fix single-byte heap buffer overflow when decompressing maliciously crafted
compressed file data. (CVE-2026-42618)
- Fix heap buffer overflow when copying the tail data of an index block to a
freshly allocated block. (CVE-2026-46569)
- Fix out-of-bounds read when processing symlink reparse data in a corrupt or
maliciously crafted filesystem. (CVE-2026-46571)
- Fix heap memory corruption for maliciously crafted or corrupt index data
descending to an out-of-bounds tree depth. (CVE-2026-46570)
- Fix heap buffer overflow for maliciously crafted or corrupt index data during
a node split. (CVE-2026-46572)
- Fix heap buffer overflow when building inherited ACL data. (CVE-2026-56135)
- Fix out of bounds access when clearing an index root in maliciously crafted
or corrupt index data. (CVE-2026-56136)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
FUSE filesystem that serves archives (zip, tar, 7z, iso, ...) read-only,
mounting them without extracting to disk first.
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
0001-unistr.c-Fix-use-after-free-in-ntfs_uppercase_mbs.patch
removed since it's included in 2026.2.25
Changes:
===========
- Fix bashism in configure script causing errors in non-bash shells.
- (mkntfs) Enable microsecond-level volume creation time.
- Fix two instances of an invalid errno state when encountering NULL in strings.
- Fix a crash when a reparse tag could not be found in the index.
- Fix incorrect MFT free records value when bitmap is expanded.
- Fix 'extras' manpages being installed when extras are disabled.
- Fix various instances of use-after-free conditions in the library and tools.
- Fix typo in NTFS hibernation message. Thanks to Anil Kumar for the report/fix.
- Escape commas in the fsname when libfuse 2.8 or higher is used.
- (ntfsclone) Allow adjusting the sector size in the NTFS boot sector for the target device when restoring images.
- Remove libdl dependency when building without external plugins.
- (ntfsinfo) Show information about the logfile state when dumping metadata.
- (ntfsinfo) Fix displaying crowded directories or indexes.
- (ntfsinfo) Fix displaying the security descriptor list in ntfsinfo.
- Fix heap buffer overflow when POSIX ACLs were enabled (CVE-2026-40706). Thanks to Andrea Bocchetti for the report.
- (ntfsusermap) Fix overflow when constructing backup filename.
- Fix two time-of-check-time-of-use conditions.
- Fix missing malloc/sscanf return value checks.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
0001-Bug-fix-Faulty-signal-handler-prototype-spoiled-comp.patch
removed since it's included in 1.5.8
Changelog:
=============
* Bug fix: burn_offst_source_new() parameter "size" rolled over at 2 exp 31
* Bug fix: ATA and SATA drives under sg did not register their SCSI address
tuple
* Bug fix: WAVE files with unsuitable audio format were read as raw audio file.
* New API calls use and return off_t sizes instead of int or uint32_t
* Augmented struct burn_toc_entry by new off_t block addresses and counters
* New struct burn_progress_v2 and API call burn_drive_get_status_v2()
* New API call burn_disc_track_lba_nwa_v2()
* New API calls burn_disc_get_sectors_v2(), burn_session_get_sectors_v2(),
burn_track_get_sectors_v2()
* New API call burn_get_read_capacity_v2()
* New API call burn_drive_release_v2()
* New API call burn_write_opts_set_perform_opc_v2
* New cdrskin option --audio_not_raw
* New cdrskin options --perform_opc and --perform_opc_growisofs
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Drop patch that's included in this release.
Changelog:
v3.2p4 is mainly a bugfix & cleanup release.
Enhancements
Add support for InfernoEmbedded soft-devices (GH-21)
Bug fixes
Fix bug (GH-55) related to split packet (GH-64)
Fix copy paste bug (474f06d)
Add \r to Http header to satisfy RFC2616 specification (GH-20)
Maintenance
build system cleanup (GH-72, GH-27, GH-16)
Fix missing files in source distribution (GH-70, GH-69)
Fix compilation with GCC10 (GH-62)
Minor fixes
Fix typos (GH-43 GH-23)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The correct folder name is "packagegroups", not "packageconfigs".
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The SRC_URI has became inaccessible some time ago, falling back to the
Yocto mirror. Instead use the Github mirror.
I ran a diff on the files of this revision and the files of the original
tarball, and the contents were bit-identical.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
It takes about a second to execute.
Added two patches:
- One adapts the testuite to ptest, to test the installed binary instead of
testing the one from the build folder.
- Another that fixes a bug in unionfsctl, which made the test fail. This
patch is submitted upstream.
Sample output:
root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-26T19:03
BEGIN: /usr/lib/unionfs-fuse/ptest
ptestuser:!:20448:0:99999:7:::
PASS: test_all.IOCTL_TestCase.test_debug
PASS: test_all.IOCTL_TestCase.test_wrong_args
PASS: test_all.UnionFS_Help.test_help
[...many lines...]
PASS: test_all.UnionFS_RW_RW_PreserveBranch_TestCase.test_permissions_after_creating_directories
PASS: test_all.UnionFS_Sync.test_sync
PASS: test_all.UnionFS_Version.test_help
============================================================================
Testsuite summary
DURATION: 0
END: /usr/lib/unionfs-fuse/ptest
2025-12-26T19:03
STOP: ptest-runner
TOTAL: 1 FAIL: 0
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: copyright year bump
Drop patch which became unneeded (CFLAGS are not overwritten anymore)
Selected shortlog (without readme and CI changes):
- Use fchmodat with AT_SYMLINK_NOFOLLOW if available
- Use utimensat on macOS
- tests: properly test for directory existence using os.path.isdir
- Enable commented test for rmdir
- Add more tests for renaming using cow
- Allow directory renaming when cow is disabled but it only exists in one branch
- Use existing function for checking if file exists
- Fix directory rename hiding files from lower branches
- remove deprecated "use_ino" option from examples and documentation
- CMake: Support CFLAGS= and -DCMAKE_C_FLAGS= from the outside
- set -D_FILE_OFFSET_BITS=64 unconditionally so that compilation does not fail on 32bit systems
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The application hasn't received updates lately, but there is a bugfix
that is missing from the recipe.
Changelog:
On partial read/write, keep reading:
This avoids rsync errors and avoids data loss with cp, due to
failing to copy the last byte of 0.1953125% of files.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
03ee1f8aa0899268ec02b2f54849352df92a3a1d.patch
a1d58ae1be99571a88b8439b027abe6349b74658.patch
removed since they're included in 3.7.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update UPSTREAM_CHECK_URI and UPSTREAM_CHECK_REGEX to check the correct
latest stable verison.
Before the patch:
$ devtool latest-version ntfs-3g-ntfsprogs
INFO: Current version: 2022.10.3
INFO: Latest version:
After the patch:
$ devtool latest-version ntfs-3g-ntfsprogs
INFO: Current version: 2022.10.3
INFO: Latest version: 2022.10.3
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.
I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
With:
https://lists.openembedded.org/g/bitbake-devel/message/17508
there are WARNINGs like:
WARNING: meta-oe/meta-filesystems/recipes-filesystems/smbnetfs/smbnetfs_git.bb: meta-oe/meta-filesystems/recipes-filesystems/smbnetfs/smbnetfs_git.bb:9 has a lack of whitespace around the assignment: 'HOMEPAGE ="http://sourceforge.net/projects/smbnetfs"'
WARNING: meta-oe/meta-filesystems/recipes-filesystems/zfs/zfs_2.2.5.bb: meta-oe/meta-filesystems/recipes-filesystems/zfs/zfs_2.2.5.bb:5 has a lack of whitespace around the assignment: 'HOMEPAGE ="https://github.com/openzfs/zfs"'
WARNING: meta-oe/meta-filesystems/dynamic-layers/meta-python/recipes-support/gpiod-sysfs-proxy/gpiod-sysfs-proxy_0.1.2.bb: meta-oe/meta-filesystems/dynamic-layers/meta-python/recipes-support/gpiod-sysfs-proxy/gpiod-sysfs-proxy_0.1.2.bb:27 has a lack of whitespace around the assignment: 'export MOUNTPOINT="${@bb.utils.contains('PACKAGECONFIG', 'sys-class-mount', '/sys/class/gpio', '/run/gpio', d)}"'
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Recipes are much more readable with whitespace around the assignment operators.
Fix various assignments in meta-openembedded recipes to show this is definitely
the preferred formatting.
This fixes recipes with larger numbers of issues but there are just under 100
other references left to fix.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Enable pam packageconfig if pam is in DISTRO_FEATURES. Also set pam
module path to ${base_libdir}/security as this is the default path in
libpam.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The zfs package content varies depending the host distro.
To fix this, force target distribution ("vendor") to Debian to match
default values for things like: NFS server service name, bash completion
path, configuration files, ...
The Debian values do match the OpenEmbedded ones.
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Replace references of WORKDIR with UNPACKDIR where it makes sense to do
so in preparation for changing the default value of UNPACKDIR.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This typo would cause all utils tools to be missing in the image when only installing packagegroup-meta-filesystems
Signed-off-by: Yongchang Qiao <qiaoyongchang@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* add Pending to .patch files where it was accidentally droped
with upgrades or modifications in:
f88e5b146e postgresql: upgrade 15.5 -> 16.2
c904e169db multipath-tools: upgrade 0.9.3 -> 0.9.8
105be9b3d9 unionfs-fuse: upgrade 2.2 --> 3.4
or new patches where the author didn't notice/care:
2a7f74cdb0 dropwatch: Use header files from sysroot instead of build host
f5cc9f272a yasm: improve reproducibility
39028d0d9d python3-pybind11: Restore strip prevention patch
authors of these added to CC, please be more careful with removing
or not adding these or enable patch-status in ERROR_QA for your
builds, see:
https://lists.openembedded.org/g/openembedded-core/topic/104922136#197113
* added with:
for p in `/OE/layers/openembedded-core/scripts/contrib/patchreview.py -v . | grep Missing.Upstream-Status.tag | sed 's/.*(//g;s/)$//g'`; do grep -q ^Upstream-Status: $p || sed -i "s/^---$/\nUpstream-Status: Pending\n---/g" $p; grep -q ^Upstream-Status: $p || sed -i "1iUpstream-Status: Pending\n" $p; done
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* The 20221209 is the commit date of SRCREV since this recipe has no version.
* Add 0001-yaffs_guts.h-define-YTIME_T-if-not-already-defined.patch to fix
build error:
yaffs_guts.h:501:9: error: unknown type name 'YTIME_T'
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This will help in running ptests like core layer, right now there are
just 3 but I hope to get more contributions now that infra is in place
to run all ptests
bitbake meta-filesystems-image-ptest-all
to run a single recipe ptests
bitbake meta-filesystems-image-ptest-fuse3
Signed-off-by: Khem Raj <raj.khem@gmail.com>
In addition to the zfs upstream commits:
- This fixes the build against libc-headers/kernel 6.6+
- adds bash-completion packaging, as 2.2.2 has support
Bumping zfs to version zfs-2.2.2, which comprises the following commits:
494aaaed8 Tag zfs-2.2.2
522414da3 FreeBSD: Fix ZFS so that snapshots under .zfs/snapshot are NFS visible
a8c256046 ZIL: Call brt_pending_add() replaying TX_CLONE_RANGE
eb34de04d zdb: fix printf() length for uint64_t devid
d813aa853 Linux 6.6 compat: fix configure error with clang (#15558)
3b267e72d zfs-dkms: fix shell-init error message
349fb77f1 FreeBSD: Fix the build on FreeBSD 12
2a953e0ac dmu_buf_will_clone: fix race in transition back to NOFILL
e4985bf5a zdb: Fix zdb '-O|-r' options with -e/exported zpool
e96675a7b zdb: show BRT statistics and dump its contents
d702f86ea brt: lift internal definitions into _impl header
41c4599cb ZTS: Fix zfs_load-key failures on F39
56a2a0981 ZIL: Do not encrypt block pointers in lr_clone_range_t
9b9b09f45 dnode_is_dirty: check dnode and its data for dirtiness
89fcb8c6f Revert "Tune zio buffer caches and their alignments"
55dd24c4c Tag zfs-2.2.1
78287023c ZTS: Fix 'could not unmount datasets' on Alma 9
479dca51c zfs-2.2.1: Disable block cloning by default
87e9e8286 Add a tunable to disable BRT support.
0733fe2aa Packaging: Auto-generate changelog during configure (#15528)
fd836dfe2 Linux 6.6 compat: META
e92a680c7 Workaround UBSAN errors for variable arrays
f1659cc78 ZTS: Test for all known zpool feature sets
f863ac3d0 Update zpool-features.7 for grub2 compatibility list updates
f6d2e5c07 Workaround to allow openzfs-zfs-dkms install on Ubuntu
f2fe4d51a Linux: reject read/write mapping to immutable file only on VM_SHARED
76663fe37 Fix accounting error for pending sync IO ops in zpool iostat
44c8ff9b0 Linux 6.6 compat: fix implicit conversion error with debug build
f0ffcc3ad Remove obsolete_counts from grub2 compatibility list
e534ba5ce Fix dkms installation of deb packages created with Alien.
1c7048357 Add all read-only compatible zpool features to grub2 compatibility
3ec4ea68d Unify arc_prune_async() code
bd7a02c25 Tune zio buffer caches and their alignments
e82e68400 DMU: Do not pre-read holes during write
3f67e012e Linux 6.6 compat: fsync_bdev() has been removed in favor of sync_blockdev()
21875dd09 Linux 6.6 compat: generic_fillattr has a new u32 request_mask added at arg2
fe9d409e9 Linux 6.6 compat: use inode_get/set_ctime*(...)
7aef672b7 Read prefetched buffers from L2ARC
f9a9aea12 Add mutex_enter_interruptible() for interruptible sleeping IOCTLs
8ba748d41 Revert "zvol: Temporally disable blk-mq"
e860cb020 zvol: Remove broken blk-mq optimization
86c3ed40e "ARC prefetch metadata accesses:" appears twice in the output.
6e41aca51 Trust ARC_BUF_SHARED() more
79f7de575 Remove lock from dsl_pool_need_dirty_delay()
0ef1964c7 run-zts test procfs/pool_state failed with uncorrectable I/O failure
eaa62d995 Properly pad struct tx_cpu to cache line
8ca95d78c Fix typo in tests/zfs-tests/tests/functional/cli_user/misc/misc.cfg
edebca5df FreeBSD: taskq: Remove unused declaration
1cc1bf4fa Set spa_ccw_fail_time=0 when expanding a vdev.
0bcd1151f Fix ZED auto-replace for VDEVs using by-id paths
78fd79eac Add zfs_prepare_disk script for disk firmware install
6d693e20a Large sync writes perform worse with slog
b76724ae4 FreeBSD: Improve taskq wrapper
459c99ff2 Fix block cloning between unencrypted and encrypted datasets
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
* Added exfatattrib utility which prints or changes file attributes [Will
Thompson].
* Added FUSE 3 support. FUSE 2 continues to be supported.
* Added support for timezone offsets [Nathan Hunsperger].
* Fixed device opening error being reported as FS error.
* Fixed possible data leakage when uninitialized clusters were allocated using
NtSetInformationFile() call under Windows and FS was not unmounted correctly.
* Improved compatibility with autoconf 2.70.
* Fixed disk size reading on NetBSD [Dave Vasilevsky].
* Fixed "automounted" option handling on FreeBSD [Iouri V. Ivliev].
* Allowed to specify the "nonempty" mount option.
* Fixed file data contiguity handling bug which could cause performance
degradation [noctis].
* Fixed possible crashes on invalid UTF-8 sequences.
* Fixed a situation when FS could be erroneously marked as dirty (not cleanly
unmounted).
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
* Bug fix: False -status failure with -boot_image --interval:appended_partition
* Bug fix: -no_rc prevented pre-scanning of arguments for stdio output and
others. Introduced by mistake in a62f6af5, 2011.10.18.162119.
* Bug fix: -not_leaf and -not_paths were not applied to -extract and alike
* Bug fix: -report_system_area cmd misperceived -part_like_isohybrid with
-isohybrid-gpt-basdat
* Bug fix: -report_system_area cmd misperceived combination of isohybrid and
appended partition in GPT
* Bug fix: -as mkisofs option -part_like_isohybrid did not cause a MBR
partition table if the partitions are data files in the ISO
rather than appended
* Bug fix: Split file directories (-split_size) were created with wrong
permissions
* Bug fix: libisofs did not mark clones of imported files as imported.
This could cause that original and clone occupy data storage
in the newly written session. Thanks to Ivan Shmakov.
* Bug fix: Partition offset was preserved from -indev rather than from -outdev
* Bug fix: libisofs could misrepresent Rock Ridge information if many
symbolic links or AAIP data were recorded in a directory
* Bug fix: Data files named /boot.catalog or ./boot.cat could be left out of
the emerging ISO if the boot catalog was set to be hidden
* Bug fix: -toc reported wrong track LBA with overwritable media with
unrecognized content (pseudo-closed)
* Bug fix: -find test -has_xattr matched "isofs." attributes
in -xattr mode "any"
* New API call isoburn_assess_written_features()
* New API calls isoburn_igopt_set_max_ce_entries(),
isoburn_igopt_get_max_ce_entries()
* New flag bit12 with isoburn_read_iso_head():
Read even if start of multi-session emulation is damaged
* New -boot_image settings gpt_iso_bootable= and gpt_iso_not_ro=
* New -as mkisofs options --gpt-iso-bootable and --gpt-iso-not-ro
* New -as cdrecord option --obs_pad. Automatic no_emul_toc with -as cdrecord.
* New parameters "obs_pad" and "bdr_obs_exempt" for -dvd_obs
* New -as cdrecord option --bdr_obs_exempt
* New command -assess_indev_features
* New -find test -size
* New -compliance rules max_ce_entries=, max_ce_drop=
* Allowed lseekable device files with -cut_out.
Proof-of-concept by Ivan Shmakov on bugs.debian.org. (Closes: #1010098)
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
* Bug fix: iso_write_opts_set_part_like_isohybrid() did not cause a MBR
partition table if the partitions are data files in the ISO
rather than appended
* Bug fix: The lseek methods of IsoFileSource for local filesystem and loaded
ISO returned libisofs error codes as positive off_t numbers
* Bug fix: Freshly cloned data files from imported image were not marked as
imported. Thanks to Ivan Shmakov. (Closes: #1022851)
* Bug fix: Size of further CE area was calculated wrong if its CE entry ended
exactly at a block boundary
* New iso_write_opts_set_system_area() option bits 16:
GPT "Legacy BIOS bootable" and 17: GPT writable
* New API calls iso_assess_written_features(), iso_read_image_feature_named(),
iso_read_image_features_text()
* Allowed lseekable device files with iso_tree_add_new_cut_out_node().
Proof-of-concept by Ivan Shmakov.
* New API call iso_write_opts_set_max_ce_entries()
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- DEPENDS fuse --> fuse3 because CMake throwing "No package 'fuse3' found" error.
- Updated patch because CMakeLists.txt path has been changed.
- Bash added to RDEPENDS, accordingly this error --> ERROR: unionfs-fuse-3.4-r0 do_package_qa: QA Issue: /usr/sbin/mount.unionfs contained in package unionfs-fuse requires /bin/bash, but no providers found in RDEPENDS:unionfs-fuse? [file-rdeps]
Changelog:
3.4
- default to fuse2 api on macos when compiling
3.3
- fixed fortified compilation
- disabled logging to file since it had some unresolved locking issues
- add support for direct_io
3.2
- various nfs fixes
- various race condition fixes
3.1
- just fixes version mess (in manual file, cmake, etc.)
3.0
- libfuse3 support (and use is as new default)
- add branch-preserving logic
- make it compile under MacOS again
- minor fixes
Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Wang Mingyu
Khem Raj
Alex Kiernan
Yi Zhao
Gyorgy Sarvari
Khem Raj
Alexander Kanavin
Martin Jansa
Nguyen Dat Tho
Richard Purdie
Hongxu Jia
Yoann Congal
Yongchang Qiao
Robert Yang
Tim Orling
Bruce Ashfield
alperak