15974 Commits

Author SHA1 Message Date
Gyorgy Sarvari
06996cf65b imagemagick: upgrade 7.1.2-11 -> 7.1.2-12
Contains fix for CVE-2025-69204

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:18 -08:00
Trevor Woerner
bbef3812ba libwebsockets: use native sysroot's ssl config
During the compile step, CMake will attempt to generate a test
certificate with openssl-native using a hard-coded path to the openssl
config:

	openssl req -config /etc/ssl/openssl.cnf ...

Thus using the build host's openssl config. If the build host's openssl
is configured with options that openssl-native does not understand or
accept, the test certificate will not be generated:

[log.do_configure on openSUSE 16.0]
	Searching for OpenSSL executable and dlls
	OpenSSL executable: .../build/tmp/work/cortexa53-crypto-oe-linux/libwebsockets/4.5.2/recipe-sysroot-native/usr/bin/openssl
	 GENCERTS = 1
	Generating SSL Certificates for the test-server...
	Error configuring OpenSSL modules
	4037413D467F0000:error:030000A9:digital envelope routines:alg_module_init:unknown option:../sources/openssl-3.5.4/crypto/evp/evp_cnf.c:61:name=rh-allow-sha1-signatures, value=yes
	4037413D467F0000:error:0700006D:configuration file routines:module_run:module initialization error:../sources/openssl-3.5.4/crypto/conf/conf_mod.c:288:module=alg_section, value=evp_properties retcode=-1
	CMake Warning at lib/tls/CMakeLists.txt:528 (message):
	  !!! Failed to generate SSL certificate for Test Server!!!:

	  OpenSSL return code = 1

and the subsequent do_install() step will fail:

	| CMake Error at test-apps/cmake_install.cmake:126 (file):
	|   file INSTALL cannot find
	|   ".../build/tmp/work/cortexa53-crypto-oe-linux/libwebsockets/4.5.2/build/libwebsockets-test-server.key.pem":
	|   No such file or directory.

	ERROR: Task (.../layers/meta-openembedded/meta-oe/recipes-connectivity/libwebsockets/libwebsockets_4.5.2.bb:do_install) failed with exit code '1'

Fix the location where CMake looks for the openssl.cnf file in order
to use the one that comes with the openssl-native that will be used to
generate the certificate. Thus ensuring that they are in step in terms
of which configuration options will be acceptable.

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-02 22:30:12 -08:00
Sanjay Chitroda
050ffcdea2 recipes-core/toybox: Switch SRC_URI to HTTPS for reliable fetch
The upstream site (landley.net) serves inconsistent content when using HTTP,
causing checksum mismatches during do_fetch. Using HTTPS ensures stable
downloads and resolves checksum failures.

Signed-off-by: Sanjay Chitroda <sanjayembeddedse@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-02 22:30:11 -08:00
Markus Volk
66ab7651e5 tmux: add packageconfig for sixel support
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-31 08:28:50 -08:00
Khem Raj
0a5a41e49e botan: Remove ptests execution on rv32
It needs go compiler and runtime which is missing on rv32

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-31 08:28:50 -08:00
Wang Mingyu
9742869636 tesseract: upgrade 5.5.1 -> 5.5.2
Changelog:
=============
- Simplify code for osdetect
- Fix and improve configuration for cmake builds
- Modernize some for loops and fix some signed/unsigned issues
- Cmake optimization with warp2
- Update checkout action
- chore: fix cyrillic typo
- Move version info. to appropriate ALTO element
- CI: Remove unneeded export statements from cmake workflow for macOS
- Bump actions/checkout from 5 to 6
- Bump github/codeql-action from 2 to 4
- Bump actions/upload-artifact from 4 to 5
- Bump mikepenz/action-junit-report from 4 to 6
- Bump actions/upload-artifact from 5 to 6

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-31 08:28:49 -08:00
Wang Mingyu
cba64cf88c gpsd: upgrade 3.27.1 -> 3.27.2
Changelog:
 Fix a gpsd.rules warning.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-29 09:28:51 -08:00
Wang Mingyu
d38cb37930 fluentbit: upgrade 4.2.1 -> 4.2.2
Changelog:
==========
- packaging: script: Use rockylinux prefix on package testing script
- security: Update supporting timeline
- out_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests
- aws: Implement simple_aggregation operation
- out_kinesis_firehose: enable HTTP debugging for AWS client requests
- http_client: add ipv6 bracket if missing from host address
- lib: updates 20251223

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-29 09:28:51 -08:00
Wang Mingyu
363d98c80b exiftool: upgrade 13.44 -> 13.45
Changelog:
===========
- Added a number of new values for some Sony tags
- Added a few new button functions for the Nikon Z9
- Added some Nikon subject detection values
- Added a new Canon SubjectSwitching value
- Decode Ricoh APP7 maker notes
- Patched to allow a specific PreviewImage to be written to a DNG file
  containing multiple previews
- Fixed minor error when writing some DJI DNG files
- Fixed bug reading large Protobuf integers on 32-bit systems
- API Changes:
    - Added SystemTimeRes option

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-29 09:28:50 -08:00
Gyorgy Sarvari
d302ffa547 bubblewrap: upgrade 0.10.0 -> 0.11.0
One big change that comes with this update is the build system change:
the project removed autotools and now uses meson.

Dropped 0001-Use-stdbool.h-for-booleans.patch because it is included
in this release.

Changelog: https://github.com/containers/bubblewrap/releases/tag/v0.11.0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:40 -08:00
Gyorgy Sarvari
d5b5f267df logwatch: upgrade 7.11 -> 7.13
Update SRC_URI because the previous one became inaccessible.

Slightly update do_install - now it is in line with the installation
script from the project's own RPM file (previous some files were not
installed)

Shortlog:
[logwatch] Preparation for Release 7.13
[rsyslogd] De-duplicate lines with time calculations
[sendmail] Removed invalid commented-out code.
[logstash] Remove script - needs update to Logwatph.pm
[sendmail] Improved detection of "Command unrecognized" strings.
[rsyslogd] Ignore "GnuTLS error: Error in the push function" - paired with other errors
[omsa] Handle peak power and new Unexpected sense messages
[systemd] Add ignore_messages option to ignore messages matching a regex
[kernel] Fix EDAC regex
[rsyslogd] Ignore additional rate-limiting message paired with other messages
[rsyslogd] Ignore additional omfwd messages paired with other messages
[nut] Ignore upsnotify message about tech that we already know about
[pam_unix] Add nx to services; Allow for username in session opened by messages for cron
[pam_unix] Add kde to dektop services; Hande "User info message"
[systemd] Update for newer systemd
[logstash] Initial version
[systemd] Ignore "Unnecessary job was removed for .*" - appears informational
[systemd] Ignore State timed out messages - followed by a failed message
[named] No need for unconfineds variable, not used
[clam-update] Added comments about syslog format.
[logwatch.8] Clarified use of debug.
Fix Dir glob issue Iridos2 bug report.
[postfix] Added support for postfix version 3.10
[zypp] Added support for patch statements; reported by leithh.
[dovecot] Added better detail granularity, and support logformat 2.3
[systemd] Relax LSM BPF program attached regex
[dirsrv] Relax ACL target does not exist regex; Ignore schema-compat-plugin info messages that are at ERR level
[dovecot] Script and configuration file updated with granular detail options and improved report grouping
[clam-update] Fixed typo.
[clam-update] Check for empty LogFile strings and adjust error messages
[onlyservice,removeheaders] Allow RFC 3164 Log Format with named facility.severity
[http] Setting default http_rc code for when not specified in LogFormat
[logwatch.pl,syslog-ng] Removed HTML Entity encoding for xml, as all strings are now UTF-8
(tag: 7.12) [logwatch] Updating release version
[http] Replace hyphen with "Unidentified agent,"
[named] Handle "zone not loaded due to errors; Handle "journal file is out of date; removed" separately;  Ignore "New key observered for zone"
[named] handle "TCP client quota reached" messages; Expand limit regex
Remove trailing whitespace
[nut] Handle battery needs to be replaced message
[nut] Update for 2.8.2
[postfix] Support for aliased mailboxes
[zz-zfs] Added 'Cap' column header
[sudo] Add sudo_detail
[omsa] Ignored Administrator stopped message
[omsa] Update Patrol Read regex
[sssd] Ignore "exec_child_ex command" messages
[secure] relax regex around "gkr-pam: no password is available for user"
[secure] Ignore sshd-session messages
[sendmail] Added filter for new pre-greeting message.
[postfix] Added DNSBL rank display
[sshd] Added 'drop connection' counter.
[rsyslogd] Handle stdout/stderr sent to journal which ends up with an extra prefix
[named] Add option to ignore denied zone trasfter; Move limit reporting to detail >= 1
[systemd] Handle new Watchdog and Reexecuting requested messages
[dnf-automatic] New script contributed by Clive Lin.
[mdadm] Check if hash of 'good devices' is undefined or empty.
[sshd,secure] Added support for OpenSSH 9.8 (sshd-session, port number), per tomop.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:40 -08:00
Gyorgy Sarvari
60f8a3cd10 links-x11: vendor icon image from layer
The url from where this icon was sourced origiannly has been inaccessible
since a while (the domain seems to be parked). Instead of displaying the
fetcher warning, just vendor this image from the layer directly - it's
only a 4kB icon.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:39 -08:00
Gyorgy Sarvari
d9ba908fae tomoyo-utils: upgrade 2.6.1-20210910 -> 2.6.1-20250707
Also update the SRC_URI, the previous one became inaccessible.

Changelog:
- Update project's website.
- /usr/lib/tomoyo/init_policy
  Remove rewrite rules handled by commit bdc35f164b0f ("tomoyo: use better
  patterns for procfs in learning mode").

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:39 -08:00
Gyorgy Sarvari
fe9219f635 tigervnc: compare vendored xserver version to oe-core's xserver
TigerVNC compiles its own xserver from a separate tarball, it doesn't
use oe-core's xserver for most of the compilation.

The vendored xserver code should be still kept in sync with oe-core
to minimize incompatibilities, feature and bug-discrepepancies (...)

However it is easy to miss when xserver is updated in oe-core, TigerVNC's
xserver gets out of sync frequently.

This change adds a small check before do_configure that compares the
vendored and oe-core's xserver version, and issues a warning if
TigerVNC recipe needs to be synced to oe-core.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:39 -08:00
Gyorgy Sarvari
21df5861c7 softhsm: fix SRC_URI branch
The "develop" branch doesn't exist anymore, the used revision can be
found on the "main" branch.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-26 17:36:59 -08:00
Gyorgy Sarvari
868b4b2959 redis: ignore CVE-2025-46686
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-46686

Upstream disputes that it is a security violation, and says that
implementing a mitigation for this would negatively affect the rest
of the application, so they elected to ignore it.

See Github advisory about the same vulnerability:
https://github.com/redis/redis/security/advisories/GHSA-2r7g-8hpc-rpq9

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-26 17:36:58 -08:00
Markus Volk
922ca44f5e rtkit: update 0.13 -> 0.14
- add HOMEPAGE
- update SRC_URI

Release notes

    Fix a bug that caused all RT privileges to sometimes be dropped on resume from suspend (#13 (closed))
    Drop autotools build system
    Add an rtkit_make_realtime_simple() with no arguments
    Drop default log level to reduce log spam
    Rename priority parameter of MakeThreadHighPriority to nice_level (does not change API)
    Implement org.freedesktop.DBus.Properties.GetAll
    Add a sysusers config
    Correctly specify client license as MIT
    A number of documentation and build cleanups

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-26 17:36:58 -08:00
Gyorgy Sarvari
4924e89bb7 tigervnc: ignore CVE-2025-26594...26601
Ignore the following CVEs: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601

Details:
https://nvd.nist.gov/vuln/detail/CVE-2025-26594
https://nvd.nist.gov/vuln/detail/CVE-2025-26595
https://nvd.nist.gov/vuln/detail/CVE-2025-26596
https://nvd.nist.gov/vuln/detail/CVE-2025-26597
https://nvd.nist.gov/vuln/detail/CVE-2025-26598
https://nvd.nist.gov/vuln/detail/CVE-2025-26599
https://nvd.nist.gov/vuln/detail/CVE-2025-26600
https://nvd.nist.gov/vuln/detail/CVE-2025-26601

TigerVNC compiles its own xserver, this is why these CVEs are associated
with it - despite the vulnerabilities being in xserver.

All of these vulnerabilities were fixed by the same PR[1], which has
been part of xserver since version 21.1.16 (the currently used xserver
version in TigerVNC is 21.1.18).

Due to this, ignore these vulnerabilities, and just mark them as patched.

[1]: https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1830

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
62a78f8ba7 tigervnc: ignore CVE-2023-6478
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-6478

TigerVNC compiles its own xserver, this is why this CVE is associated
with it - despite the vulnerability being in xserver.

The vulnerability was fixed by [1] (from the nvd report), which has been
backported[2] to the xserver version used by the recipe - so ignore the
CVE, since it's patched already.

[1]: 14f480010a
[2]: 58e83c6839

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
f691f2178b tigervnc: ignore CVE-2023-6377
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-6377

TigerVNC compiles its own xserver, this is why this CVE is associated
with it - despite the vulnerability being in xserver.

The vulnerability was fixed by [1] (from the nvd report), which has been
backported[2] to the xserver version used by the recipe - so ignore the
CVE, since it's patched already.

[1]: 0c1a93d319
[2]: a7bda3080d

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
fadb9c0570 tigervnc: sync xserver code with oe-core
TigerVNC compiles its own xserver. Synchronize the xserver version
with oe-core.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
1aee6a403c smarty: extend CVE_PRODUCT
Some CVEs assign smarty-php as the vendor to the corresponding CPE.
E.g CVE-2024-35226[1] is tracked with smarty-php:smarty by mitre
(NVD tracks it without CPE).

[1]: https://cveawg.mitre.org/api/cve/CVE-2024-35226

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 07:53:24 -08:00
Khem Raj
0ecf2814b2 vboxguestdrivers: Upgrade to 7.2.4
This is a maintenance release. The following items were fixed or added:

GUI: Fixed VirtualBox VM Manager crash when host was resuming from sleep (​github:gh-121, ​github:gh-170)
GUI: Updated native language support for Traditional Chinese, Greek, Swedish, Hungarian and Indonesian translations
NAT: Fixed issue when multiple port forwarding rules affected NAT functionality (​github:gh-232)
Linux host and guest: Introduced initial support for kernel 6.18
Linux Guest Additions: Introduced additional fixes for RHEL 9.6 and 9.7 kernels (​github:GH-12)
Windows Guest Additions: Introduced additional fixes for issue when installation was failing in Windows XP SP2 guest (​github:GH-142)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-24 13:31:55 -08:00
Gyorgy Sarvari
199a6a2266 freerdp3: add ptest support
The execution takes under 10s.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-23T11:36
BEGIN: /usr/lib/freerdp3/ptest
PASS: TestSynchInit
PASS: TestSynchEvent
PASS: TestSynchMutex
[...many lines...]
PASS: TestClientRdpFile
PASS: TestClientChannels
PASS: TestClientCmdLine
DURATION: 7
END: /usr/lib/freerdp3/ptest
2025-12-23T11:37
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Gyorgy Sarvari
325928e2ab freerdp3: upgrade 3.19.0 -> 3.20.0
Contains fix for CVE-2025-68118

Changelog:
3.20.0:
Mingw fixes
[crypto,certificate_data] add some hostname sanitation
[client,common]: Fix loading of rdpsnd channel
[client,sdl] set touch and pen hints

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Khem Raj
e4b25c0fcb rwmem: Fix tests to build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:31 -08:00
Jan Vermaete
0b0cbd4c3c freeglut: version 3.4.0 -> 3.8.0
patch to add support for legacy OpenGL (Thanks Rob Woolley)

| -- Found OpenGL: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot/usr/lib/libGL.so  found components: OpenGL
| -- Found PkgConfig: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot-native/usr/bin/pkg-config (found version "0.29.2")
| CMake Error at /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot-native/usr/share/cmake-4.2/Modules/FindPackageHandleStandardArgs.cmake:290 (message):
|   Could NOT find OpenGL (missing: OPENGL_opengl_LIBRARY)

Changlog:

2025-11-16  John Tsiombikas <nuclear@mutantstargoat.com>

	freeglut 3.8 changes:

	* New experimental Cocoa (native MacOS X) backend.
	* Add glutSwapInterval, to control vsync (currently X11 and win32 only).
	* glutExtensionSupported now also reports platform extensions (GLX/WGL).
	* Fix build issues with new cmake versions while maintaining
	  compatibility with old cmake.
	* Fix handling of UTF8 window/icon titles.
	* Fix issue with some X11 window managers not properly restoring
	  iconified windows (send _NET_ACTIVE_WINDOW EWMH client message).
	* Fix build issues with C23 compilers (empty argument list semantics).
	* Fix compatibility with older versions of windows which don't have
	  RAWHID support (before XP), by loading the entry points dynamically.
	* Fix glutInitDisplayString parsing of "aux", and add =N parsing support
	  to specify samples and auxbufs.
	* Various fixes and improvements in the GameCube/Wii backend.
	* Altbuild support for Solaris 2.6/SUN Workshop C.
	* Started conversion of documentation from the website to markdown in
	  the source tree: doc/api.md
	* Added the original GLUT manpages, with permission from Mark Kilgard.
	* New demos: accum, vsync, and windows.
	* Cleanup of some old and no longer relevant, or redundant comments in
	  the source code.
	* Removed some out of date README files, and updated others.

2024-06-08  John Tsiombikas <nuclear@member.fsf.org>

	freeglut 3.6 changes:

	* New platforms: Nintendo Gamecube and Nintendo Wii.
	* Minimum cmake version raised to 3.1.
	* Make XInput an optional dependency.
	* Fix incorrect modifier bit mapped to GLUT_ACTIVE_SUPER on X11.
	* Add support for ARM64 MSVC targets.
	* Fix for unicode builds on windows.
	* Fix build on some versions of MinGW carrying an incorrect winuser.h.
	* Fix menu-related memory leak when an error occurs.
	* Various build improvements & fixes.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Wang Mingyu
5e84800e96 sip: upgrade 6.15.0 -> 6.15.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Wang Mingyu
71bc6204de python3-apt: upgrade 3.0.0 -> 3.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
1f221d31da mcelog: upgrade 207 -> 208
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
975dbdae13 lvm2: upgrade 2.03.37 -> 2.03.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
9c4cea9772 libopus: upgrade 1.5.2 -> 1.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
22a030a6a9 liblogging: upgrade 1.0.6 -> 1.0.8
Changelog:
==========
- build fix with newer compilers
- builds again on Solaris
- some code cleanup, which prevented build with newer compilers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
46a3126084 libdecor: upgrade 0.2.4 -> 0.2.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
bbb7aa23a5 gpsd: upgrade 3.27 -> 3.27.1
Fixes for two CVE.  Parsing failures on malicious packets.
    CVE-2025-67268 - Heap-based Out-of-bounds Write, NMEA2000
    CVE-2025-67269 - Integer Underflow, NovAtel

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
f1407f17be fuse3: upgrade 3.17.4 -> 3.18.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
03784baa9c exiftool: upgrade 13.43 -> 13.44
Changelog:
============
- Added read support for Kandao KVAR files
- Added a few new Panasonic tags
- Added a new XMP-crs tag
- Added a few new Matroska tags
- Added a few values related to the new RAW file types for the Sony ILCE-7M5
- Decode a few new PhaseOne tags
- Decode timed GPS and other metadata from Kandao MP4 videos
- Improvements to family 1 and 5 groups for tags in Matroska videos, and
  prioritize top-level tags when duplicates exist
- Assume a default TimecodeScale of 1ms for MKV videos
- Patched to avoid runtime warning when parsing corrupted QuickTime data
- Fixed decoding of ShutterCount for Sony ILCE-7M

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Wang Mingyu
6f41c5872d cryptsetup: upgrade 2.8.1 -> 2.8.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
1a4dcfca3e gensio: upgrade 2.8.15 -> 3.0.1
Release notes:
3.0.1:
Fix: Problems with IPv6 compatibility and running without a fully working network.
Fix: The permissions of the PTY were not set correctly with gtlsshd.
Fix: Some issues building under MSYS2 were fixed.
Enhancement: A "chardelay" gensio is added. This is basically the same as the Nagle
  algorithm in TCP, but it works on other things, like UDP and relpkt, to make
  transfer more efficient on those.
Enhancement: You can use "gsh" instead of "gtlssh" for a shorter name.
  Lots of little documentation updates.

3.0.0:
The only major thing is all the deprecated sergensio code has been removed.
There are also some minor bug fixes, some documentation improvements, some minor
  improvements, and a bug fix around ax25 where it was reporting the close of the
  last channel too soon.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
d22c8fa290 ace: upgrade 8.0.2 -> 8.0.5
Changelog:
8.0.5:
Fixed building ACE for Android with uses_wchar=1
Add support for parallel make using Embarcadero bcc64x compiler
Fixed compile errors when C++23 is enabled
Updated thread name support to work with older Windows versions

8.0.4:
Fixed compile errors in the ACE core when compiled without thread
support (only core of ACE compiled and not tested)

8.0.3:
Deprecated ACE_Copy_Disabled in favor of deleted copy/assignment
Replaced usage of ACE_MIN and ACE_MAX with std::min/std::max
Add support for abstract paths to ACE_UNIX_ADDR
Improve support for 64bit file sizes
Minor fixes to ACE logging classes
Use C++11 default for more classes
GCC versions less than 9 and Clang versions less than 12 are no longer tested in GitHub Actions CI
Dropped support for Embarcadero C++ Builder bcc32c and bcc64 compilers
Updated support for Green Hills INTEGRITY and INTEGRITY-178 tuMP RTOS. Tested on INTEGRITY 11.4.6 and INTEGRITY-178 5.0.0.
Thread names given to ACE_OS::thr_create are now passed down to the OS on Windows and on INTEGRITY.

https://github.com/DOCGroup/ACE_TAO/releases

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:24 -08:00
Liu Yiding
3b77edcab3 flatpak: upgrade 1.17.0 -> 1.17.2
1. Changelog:
    https://github.com/flatpak/flatpak/releases/tag/1.17.2

2. Update 0001-flatpak-pc-add-pc_sysrootdir.patch for 1.17.2

3. Remove http_backend related options as it was removed in 1.17.2

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:42 -08:00
Liu Yiding
8e285b64d0 rwmem: upgrade 1.2 -> 2.0
2. Pyrwmem and static-libc build option has been removed in 2.0.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:42 -08:00
Liu Yiding
6d7dfb808d polkit: upgrade 126 -> 127
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Liu Yiding
f33ce214b6 mpv: upgrade 0.40.0 -> 0.41.0
1.Changelog:
  https://github.com/mpv-player/mpv/releases/tag/v0.41.0

2.Drop 0001-mpv-fix-build-with-ffmpeg-8.0.patch as it was merged in 0.41.0.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Liu Yiding
aff45d811c flatbuffers: upgrade 25.9.23 -> 25.12.19
Changelog:
  https://github.com/google/flatbuffers/releases/tag/v25.12.19

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Gyorgy Sarvari
2ef5be2471 ptest-packagelist.inc: sort packages alphabetically
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:59 -08:00
Gyorgy Sarvari
ae5a3b889d uriparser: add ptest support
It takes about a second to execute.

The test suite is covered by a different license (lgpl 2.1+) than the
main recipe (3-clause bsd).

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-22T19:34
BEGIN: /usr/lib/uriparser/ptest
[==========] Running 407 tests from 35 test suites.
[----------] Global test environment set-up.
[----------] 14 tests from CopyUriSuite
PASS:  CopyUriSuite.ErrorSourceUriNull
PASS:  CopyUriSuite.ErrorDestUriNull
[...many lines...]
PASS:  SetUserInfo.UriWithoutHostNonNullRejected
[----------] 2 tests from VersionSuite
PASS:  VersionSuite.EnsureVersionDefinesInSync
PASS:  VersionSuite.EnsureRuntimeVersionAsExpected
[----------] Global test environment tear-down
[==========] 407 tests from 35 test suites ran.
[  PASSED  ] 407 tests.
DURATION: 1
END: /usr/lib/uriparser/ptest
2025-12-22T19:34
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Gyorgy Sarvari
eb7b920572 uriparser: upgrade 0.9.8 -> 1.0.0
Contains fix for CVE-2025-67899

License-Update: license was moved to subfolder. There is no hash change.

Changelog:
https://github.com/uriparser/uriparser/blob/uriparser-1.0.0/ChangeLog

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Gyorgy Sarvari
6ff9252484 nodejs: remove extra CVE_PRODUCT
CVE_PRODUCT is specified twice - the second instance only duplicates one
value from the first instance.

Remove this extra CVE_PRODUCT.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Mingli Yu
70126d7110 switchtec-user: Correct SRCREV
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 06:58:46 -08:00