Commit Graph

16568 Commits

Author SHA1 Message Date
Markus Volk
7bf89d06a4 libdvdread: use https for fetching code
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 13:47:20 -07:00
Khem Raj
5f254f737c enca: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 00:11:35 -07:00
Khem Raj
b620c1f7a6 libkcapi: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 00:11:35 -07:00
Khem Raj
7d0bd988bb highway: Update to latest tip of trunk
This brings fixes to build with clang-22 and C23 support

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 00:11:35 -07:00
Khem Raj
626ce67c53 dlt-daemon: fix sign-conversion warning in dlt_timer_conn_types array type
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 23:39:32 -07:00
Khem Raj
9707426b83 liboauth2: Add knob for code coverage
Keep the knob disabled by default, as it will need
c runtime to provide profiling runtime, which is not
compiled into compiler-rt by default. So it ends up
with build failures e.g.

| aarch64-yoe-linux-ld.lld: error: cannot open /mnt/b/yoe/master/kas-build/tmp/work/cortexa72-yoe-linux/liboauth2/2.2.0/recipe-sysroot/usr/lib/clang/22.1.3/lib/aarch64-yoe-linux/libclang_rt.profile.a: No such file or directory
| aarch64-yoe-linux-clang: error: linker command failed with exit code 1 (use -v to see invocation)

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:16:04 -07:00
Khem Raj
ee394862b9 sdbus-c++-libsystemd: Upgrade to 259.5
It matches OE-core and has musl support upstream

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:16:04 -07:00
Khem Raj
2a1772dbc8 libcppconnman: Upgrade to 1.0.0
It has one change over last release
84fa99d3ba

Fixes build errors e.g.
| CMake Error at cmake/VersionFromGit.cmake:59 (message):
|   [VersionFromGit] Failed to execute Git: fatal: No names found, cannot
|   describe anything.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:16:04 -07:00
Khem Raj
574aa17a02 libtoml11: Fix build with C23 and clang
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:15:58 -07:00
Khem Raj
3e04c621c4 magic-enum: Upgrade to latest
It has fixes for C23 and Clang-22 added also fixes/workarounds for
libstdc++-14 combinations with different versions of gcc and clang.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 16:30:37 -07:00
Khem Raj
515a0ba30d composefs: Fix incompatible pointer type qualifier mismatches
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 16:30:37 -07:00
Peter Marko
d4e052c45e poco: upgrade 1.15.1 -> 1.15.2
Remove explicit libatomic code from recipe as upstream has implemented
it in cmake. Tested build with all 4 qemu<arch> machines.

Release notes [1]:

Release 1.15.2 (2026-04-16)
===========================

Summary of Changes:

This release focuses on security hardening and bug fixes. Key changes include
TLS 1.3 support for NetSSL_Win, building Crypto and NetSSL with
OPENSSL_NO_DEPRECATED, removal of deprecated non-EVP OpenSSL code (breaking
change), significant multipart parsing performance improvements, Prometheus
thread/CPU metrics, GNU Hurd platform support, and numerous bug fixes across
networking, cryptography, and data handling. All bundled third-party libraries
have been updated to their latest releases.

Breaking Changes:

- GH #4602 OpenSSL: Remove deprecated non EVP code

Security Fixes:

- PR #5306 chore(dependencies): refresh bundled third-party libraries
- GH #5296 Crypto and NetSSL_OpenSSL should build with OPENSSL_NO_DEPRECATED defined
- GH #5278 NetSSL_Win does not support TLS 1.3

Bundled Third-Party Library Upgrades:

- libpng 1.6.55 -> 1.6.57 - security fixes
- libharu (hpdf) 2.4.5 -> 2.4.6 - security (TTF fixes) + memory alloc / Windows build fixes
- SQLite 3.51.2 -> 3.53.0 - WAL-reset database corruption fix, query planner improvements
- Quill 11.0.2 -> 11.1.0 - thread-local context fix, nullptr checks, backend poll hooks

Features and Enhancements:

- PR #5305 enh(Foundation): auto-disable FastLogger on unsupported platforms
- PR #5303 enh: bump macOS deployment target to 15.0 (Sequoia)
- PR #5300 chore(PropertyConfigurationFile): use '=' as default separator
- PR #5298 Foundation: Fix sign-compare warnings in StreamConverter
- PR #5294 Link with atomic library on architectures that need it
- GH #5292 enh: reduce binary size growth since 1.14.2
- GH #5291 Component Install Support
- PR #5286 fix(cmake,DNSSD): build fixes and cmake dependency resolution
- GH #5280 Remove WinDriver.cpp files
- GH #5275 Prometheus: add memory and thread metrics
- GH #5266 PropertyFileConfiguration: add include file capability
- GH #5250 Poco::Net::Context::addCertificateAuthority() could include a call to SSL_CTX_load_verify_locations()
- GH #4846 NetSSL/Crypto: Replace deprecated OpenSSL features

Bug Fixes and Improvements:

- PR #5309 fix(Redis,XML,CppParser): replace dynamic_cast with static_cast for hidden visibility
- GH #5308 Net: SocketProactor reports success on TCP write after non-blocking connect refusal
- PR #5304 fix(MongoDB): suppress false topology change notifications on heartbeat
- PR #5293 Port library to GNU Hurd
- GH #5288 Fuzzing Issue in MailMessage
- GH #5287 Fuzzing Issue in DateTime
- PR #5284 fix(Redis): use shared_ptr for NotificationCenter, harden AsyncNotificationCenter::stop()
- PR #5283 fix(ApacheConnector,Foundation): fix compile warnings with GCC 15
- GH #5269 Pipe close deadlocks on
- PR #5264 fix(Data): Robust date/time parsing in SQLite/PostgreSQL extractor
- GH #5263 X509Certificate validFrom method throws exception for timestamps ending with Z
- GH #4883 SecureSocketImpl::shutdown() regression since 1.14.0
- GH #4772 InvalidCertificateHandler onInvalidCertificate wrong exception
- GH #4118 Poco Multipart parsing is 10x slower than its Boost/beat or restinio equivalent
- GH #1097 Process::isRunning returns true for defunct tagged process

[1] https://github.com/pocoproject/poco/blob/poco-1.15.2-release/CHANGELOG

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 16:30:37 -07:00
Jörg Sommer
ee20c1a573 libraqm: New recipe for a library for complex text layout
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 13:08:19 -07:00
Jörg Sommer
be9f029b6c gd: Support PACKAGECONFIG
Some recipes (like fswebcam) need gd with support of fontconfig to really
work. Otherwise font selection is not that easy.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 13:08:19 -07:00
Changqing Li
2df018ea4b dlt-daemon: fix missing application description
Running "dlt-example-user 'test'",
Check "dlt-control -j localhost", will not get application description:
APID:LOG-

Expected:
APID:LOG- Test Application for Logging

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Khem Raj
268b24cf14 packagegroup-meta-oe: Make pcp and remmina depend upon x11 distro feature
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Khem Raj
d7386465ee xrdp: Guard ptests with x11 distro feature
xrdp only builds when x11 is enabled, make it consistent

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Khem Raj
dd3221a5e7 taisei: Fix build with glibc 2.43 + c23
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj
e1f95af4ba meta-oe/recipes: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj
e488423e25 audiofile: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Drop enforcing -std=c++14 as thats no longer needed

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj
930d936313 libvarlink: Fix build with C23 support in glibc
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 22:46:00 -07:00
Khem Raj
0d39d65c0e systemd-netlogd: Upgrade to 1.4.5 release
Fix build on 32-bit with 64-bit time_t
Fix build with C23 on

For full details:
https://github.com/systemd/systemd-netlogd/releases/tag/v1.4.5

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 22:46:00 -07:00
Khem Raj
0556ca04c6 libcanberra: Upgrade to 0.30-20
* Revert "Disable tdb feature on loong64 for bootstrapping"

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 22:46:00 -07:00
Jörg Sommer
d09f50438f lshw: Fix binmerge
In case $sbindir = $bindir we have to pass this setting to make.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 22:45:59 -07:00
Zeming LIU
f23c00b163 jsoncpp: add ptest support
Add ptest support for jsoncpp to enable automated testing of the
JSON C++ library functionality.

Note:
- Tested on: WRLinux master-wr (based on meta-openembedded master)
- jsoncpp version: 1.9.7
- Unable to test on pure upstream due to poky/meta-oe branch mismatch

Test Result:
root@qemux86-64:~# ptest-runner jsoncpp
START: ptest-runner
2026-04-15T14:04
BEGIN: /usr/lib64/jsoncpp/ptest
PASS: jsoncpp_readerwriter
PASS: jsoncpp_readerwriter_json_checker
PASS: jsoncpp_test
DURATION: 122
END: /usr/lib64/jsoncpp/ptest
2026-04-15T14:06
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Zeming LIU <zeming.liu@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 22:45:58 -07:00
Zahir Hussain
2f1a9776c7 rocksdb: packageconfig knob for set static library option
Adding PACKAGECONFIG knob for enable/disable the static library option

it is just a follow-up changes of previous commit
https://git.openembedded.org/meta-openembedded/commit/?id=233079a41caded6b68972317f01dc09435ba1ae0
and also this changes are already accepted and integrated in kirkstone branch.

Signed-off-by: Zahir Hussain <zahir.basha@kpit.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:55 -07:00
Liu Yiding
17a8c0d634 xdg-user-dirs: upgrade 0.19 -> 0.20
Build system change from autotools to meson.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 07:24:55 -07:00
Liu Yiding
629cdd168e leancrypto: upgrade 1.7.1 -> 1.7.2
ChangeLog:
  https://github.com/smuellerDD/leancrypto/releases/tag/v1.7.2

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 07:24:54 -07:00
Liu Yiding
d5bdddcd95 htop: upgrade 3.4.1 -> 3.5.0
1.ChangeLog
https://github.com/htop-dev/htop/blob/main/ChangeLog

2.Use --with-libunwind instead of --enable-unwind

3.Update 0001-configure.ac-Remove-usr-include-libnl3.patch for 3.5.0

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 07:24:54 -07:00
Liu Yiding
7d34df5102 iperf3: upgrade 3.20 -> 3.21
1.ChangeLog:
  https://github.com/esnet/iperf/releases/tag/3.21

2.LIC_FILES_CHKSUM Changed as Copyright Year change from 2025 to 2026.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 07:24:54 -07:00
Joao Marcos Costa
0fecdd0b59 libhugetlbfs: add RISC-V to COMPATIBLE_HOSTS
A preliminar effort to support RISC-V was added in v2.23:

a529598 Introduce basic riscv64 support [1]

Following the guidelines in libhugetlbfs's HOWTO, here are the outputs
of some commands in qemuriscv64:

root@qemuriscv64:~# grep -i huge /proc/filesystems
nodev	hugetlbfs
root@qemuriscv64:~# hugeadm --pool-list
      Size  Minimum  Current  Maximum  Default
     65536        0        0        0
   2097152        0        0        0        *
root@qemuriscv64:~# hugeadm --pool-pages-min 2MB:10 --add-temp-swap
root@qemuriscv64:~# hugeadm --pool-list
      Size  Minimum  Current  Maximum  Default
     65536        0        0        0
   2097152       10       10       10        *
root@qemuriscv64:~# hugeadm --pool-pages-min 2MB:-5
root@qemuriscv64:~# hugeadm --pool-list
      Size  Minimum  Current  Maximum  Default
     65536        0        0        0
   2097152        5        5       10        *

Regarding toolchains, libhugetlbfs for RISC-V builds fine with both
clang and gcc.

[1]: a529598dd2

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 07:24:54 -07:00
Ashwin Prabhakar
6b29351885 coremark: add missing license file for LicenseRef-EEMBC-AUA
Add the license text file to resolve the do_populate_lic QA issue.
This allows the build to verify the custom license identifier.

Signed-off-by: Ashwin Prabhakar <ashwin.prabhakar@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 23:42:25 -07:00
Ashwin Prabhakar
d0cdd0805a CoreMark: Add CoreMark to benchmark CPU performance
Add support for CoreMark benchmark in recipes-benchmark. This
package can be used to benchmark CPU performance in SOC's Application
processor core.

Signed-off-by: Ashwin Prabhakar <ashwin.prabhakar@qti.qualcomm.com>

coremark: append LDFLAGS to TARGET_CC_ARCH to fix QA issue

Signed-off-by: Ashwin Prabhakar <ashwin.prabhakar@qti.qualcomm.com>

coremark: update to Apache-2.0 and LicenseRef-EEMBC-AUA

Update the project license to Apache-2.0 combined with the
EEMBC Acceptable Usage Agreement (AUA) as requested by the maintainer.
This ensures compliance with EEMBC's updated licensing requirements
for CoreMark.

Signed-off-by: Ashwin Prabhakar <ashwin.prabhakar@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 23:42:25 -07:00
Wang Mingyu
b171aba911 xterm: upgrade 407 -> 408
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:36 -07:00
Wang Mingyu
c115689120 ostree: upgrade 2025.7 -> 2026.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:33 -07:00
Wang Mingyu
d244f85aa0 nano: upgrade 8.7.1 -> 9.0
Changelog:
============
- When the cursor almost goes offscreen to the right, all lines are
  now scrolled sideways together, by just the amount needed to keep
  the cursor in view.  Use --solosidescroll or 'set solosidescroll'
  to get back the old, jerky, single-line horizontal scrolling.
- The viewport can be scrolled sideways (in steps of one tabsize)
  with M-< and M->.  See 'man nanorc' if M-< and M-> should switch
  between buffers (as they did earlier).
- M-Left, M-Right, M-Up, and M-Down have become rebindable.
- Stopping the recording of a macro immediately after starting it
  cancels the recording and leaves an existing macro in place.
- Feature toggles no longer break a chain of ^K cuts or M-6 copies,
  except the M-K cut-from-cursor toggle.
- With --mouse and --indicator, one can click in the scrollbar area
  to roughly navigate within the buffer.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:32 -07:00
Wang Mingyu
38402132a9 mpich: upgrade 5.0.0 -> 5.0.1
Changelog:
==========
- Fix bad cast in release-gather collectives that caused data loss
  issues on Big-Endian 64b arches (s390x)
- Fix issue with canceling MPI_ANY_SOURCE receive requests
- Fix configuration issue when C++ compiler does not support complex types
- Fix function signature issue in Hydra PBS support
- Fix crash in MPI_Allreduce with MPI_LOGICAL type
- Fix potential crash in multi-nic libfabric initialization
- Fix memory leaks in Level Zero and PMIx support
- Fix bug in CMA code when GPU support is enabled
- Fix potential shared memory collision between multiple singleton
  processes on the same node
- Add large count and other necessary aliases to ROMIO to avoid
  accidental profiling of internal MPI function usage
- Add missing error checks in rndv and colletive composition code
- Improve autogen.sh error message when autotools are too old

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:32 -07:00
Wang Mingyu
e5546d6d09 libsodium: upgrade 1.0.21 -> 1.0.22
0001-Fix-compilation-with-GCC-on-aarch64.patch
removed since it's included in 1.0.22

Changelog:
============
- Post-quantum key encapsulation is now available. ML-KEM768, the
  NIST-standardized lattice-based KEM, is accessible through the
  'crypto_kem_mlkem768_*()' functions.
- X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection
  against both classical and quantum adversaries, is available through the
  'crypto_kem_*()' functions. X-Wing is the recommended KEM for most
  applications.
- SHA-3 hash functions are now available as 'crypto_hash_sha3256_*()'
  and 'crypto_hash_sha3512_*()', with both one-shot and streaming APIs.
- Performance: NEON optimizations for Argon2 on ARM platforms.
- Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when
  available on ARM platforms.
- Performance: WebAssembly SIMD implementations of Argon2 have been added.
- Emscripten: LTO is now disabled. With Emscripten 4, LTO produced
  WebAssembly modules with functions that ran significantly slower than
  without it.
- Emscripten: a new option allows compilation with SIMD support.
- Emscripten: native ESM module generation is now supported.
- JavaScript sumo builds now allow up to 80 MiB memory usage, so that
  'crypto_pwhash' with the interactive settings can be used in pure
  JavaScript, not just WebAssembly.
- XOF state alignment has been relaxed.
- 'crypto_core_keccak1600_state' has been added.
- Export missing 'crypto_ipcrypt_nd_keygen()' helper function.
- 'crypto_auth_hmacsha256_init' and 'crypto_auth_hmacsha512_init' now
  accept NULL key pointers (with a zero key length), for consistency with
  other '_init' functions.
- apple-xcframework: headers are now in a Clibsodium subdirectory
  to prevent module.modulemap collisions with other xcframeworks.
- Fixed compilation with GCC on aarch64 and gcc 4.x.
- On aarch64, aes256-gcm is now enabled even when not using clang,
  including MSVC.
- Added compatibility with Visual Studio 2026 when toolsets do not
  define PlatformToolsetVersion.
- Libsodium can be directly used as a dependency in a Zig project.
- Performance of MSVC builds has been improved.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:32 -07:00
Wang Mingyu
946243ec05 imagemagick: upgrade 7.1.2-18 -> 7.1.2-19
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:31 -07:00
Wang Mingyu
68f73e67d8 graphviz: upgrade 14.1.4 -> 14.1.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:31 -07:00
Wang Mingyu
cb7da084bc glaze: upgrade 7.3.0 -> 7.3.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:30 -07:00
Wang Mingyu
f2df8812c4 geoclue: upgrade 2.8.0 -> 2.8.1
Fixes:
- Accept NMEA GGA sentences with 11 or more parts (needed 14 or more
  previously)
- Use async D-bus 'Set' methods to set client properties in libgeoclue to
  improve robustness
- Do not change Client Location property on updates which are below threshold
  to avoid leaking location to D-bus
- Ignore wired WPA interfaces when finding an interface for WiFi scanning

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:30 -07:00
Wang Mingyu
c3461d98fb b4: upgrade 0.15.1 -> 0.15.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:30 -07:00
Ross Burton
4e07ea136a webkitgtk3: fix escaping in CVE_PRODUCT
The CPE parsing in oe-core's cve_check.py now handles escapes correctly[1]
so we don't need to escape in CVE_PRODUCT.

[1] oe-core 3c73dafd03b ("cve_check: Improve escaping of special characters in CPE 2.3")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:29 -07:00
Ross Burton
8093eeb036 xerces-c: fix escaping in CVE_PRODUCT
The CPE parsing in oe-core's cve_check.py now handles escapes correctly[1]
so we don't need to escape in CVE_PRODUCT.

[1] oe-core 3c73dafd03b ("cve_check: Improve escaping of special characters in CPE 2.3")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:29 -07:00
Zheng Ruoqin
44a29c54f9 openct: Drop this recipe
1.Drop openct as it is unmaintained upstream.

2.Remove openct in meta-oe/recipes-core/packagegroups/packagegroup-meta-oe.bb

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 02:16:52 -07:00
Changqing Li
3c3e80d39d pavucontrol: remove x11 from REQUIRED_DISTRO_FEATURES
We add x11 into REQUIRED_DISTRO_FEATURES because one of the dependency
gtkmm4 require x11, now, gtkmm4 don't require x11, so remove x11 from
REQUIRED_DISTRO_FEATURES

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 02:16:51 -07:00
Changqing Li
081a8b15b8 gtkmm4: remove x11 from REQUIRED_DISTRO_FEATURES
We add x11 into REQUIRED_DISTRO_FEATURES because one of the dependency
atkmm requires x11, refer [1], remove atkmm from dependency, and remove
x11 from REQUIRED_DISTRO_FEATURES

[1] 0fc81d346f

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 02:16:51 -07:00
Gyorgy Sarvari
bc788c6649 xdg-dbus-proxy: upgrade 0.1.6 -> 0.1.7
Contains fix for CVE-2026-34080. Since it is tracked without version info
by NVD, mark it explicitily as patched.

Drop the patch that is included in this release.

While here, also add the recipe to the ptest list - it's a fast one,
runs under a second.

Changelog:
- Drop the autotools build system
- Unbreak the CI
- Prevent a crash on disconnect
- Fix building with glibc >= 2.43
- Fix the eavesdrop filtering to prevent message interception

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 02:16:51 -07:00
Gyorgy Sarvari
b483760dba nodejs: mark CVE-2026-21710 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-21710

The CVE is fixed in the current recipe version[1], but NVD tracks it
without verison info.

Mark it as patched in the recipe.

[1]: https://github.com/nodejs/node/blob/v22.x/doc/changelogs/CHANGELOG_V22.md

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-13 15:28:25 -07:00