The 4.20251130.1 upgrade switched SRC_URI from a git snapshot to the
GitHub release tarball. That tarball ships a prebuilt libxdo.pc but does
not include pc.sh, even though the Makefile still carries the rule:
libxdo.pc: VERSION
sh pc.sh $(VERSION) $(INSTALLLIB) $(INSTALLINCLUDE) > libxdo.pc
do_install runs "make install", which pulls in the installpc target.
Because libxdo.pc depends on VERSION, whenever a fresh unpack leaves
VERSION with an mtime newer than or equal to libxdo.pc, make considers
the shipped libxdo.pc stale and re-runs pc.sh, failing with:
sh: 0: cannot open pc.sh: No such file
make: *** [Makefile:153: libxdo.pc] Error 2
The mtime ordering after unpack is not deterministic, so the failure is
intermittent and typically shows up after a re-fetch. On top of that,
the prebuilt libxdo.pc in the tarball hard-codes /usr/local paths, so
even when the race does not trigger, an incorrect .pc gets installed.
Ship the upstream pc.sh alongside the recipe and place it in ${S} so the
installpc rule regenerates libxdo.pc with the correct libdir/includedir
from EXTRA_OEMAKE. This fixes both the build failure and the wrong paths.
Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
============
- Bump the python-packages group across 1 directory with 5 updates.
- Bump ty to 0.0.53. PR #1877 by @YuriiMotov.
- Bump the github-actions group across 1 directory with 4 updates.
- Set Dependabot schedule interval to "monthly".
- Bump pre-commit hooks.
- Add GH workflow to bump pre-commit hook versions.
- Fix latest-changes checkout target.
- Update issue-manager to 0.8.1.
- Bump the github-actions group across 1 directory with 8 updates.
- Bump the python-packages group across 1 directory with 5 updates.
- Update latest-changes to 0.6.1.
- Bump https://github.com/crate-ci/typos from v1.46.0 to 1.47.2 in the pre-commit group across 1 directory.
-Bump pydantic-settings from 2.14.1 to 2.14.2.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- Surface the org itself in the FUNDING config
- Replace prettier with mdformat and yamlfmt
- build: use test dependency group in internal envs
- feat(python): match free-threaded and debug interpreter builds
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==============
- NEW: Drop Python 3.9 support.
- NEW: Lazy compile selector patterns to improve initial import speed.
- FIX: Correct :nth-child/:nth-of-type (and -last- variants) for An+B values whose sequence steps onto
- index 0 or onto the last child (e.g. :nth-child(2n-2), :nth-child(n-1), :nth-child(n+5)), which previously
- matched the wrong elements or nothing at all
- FIX: More efficient CSS ID matching
- FIX: Fix inefficient trimming of comments and white space
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- Add Persian short month names for %b
- Drop legacy Python 2 bytes support from strftime
- typing: align date/datetime dunder annotations with typeshed
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
============
- fix passing PYTHONPATH, PYTHONWARNINGS, and PYTHONDONTWRITEBYTECODE while
running the test suite.
- fix passing PYTEST_DISABLE_PLUGIN_AUTOLOAD and PYTEST_PLUGINS while running
the test suite.
- inline-snapshot now tracks source files that use external() in
.inline-snapshot/files_using_external.txt (inside storage-dir) and uses this
tracked list to detect and trim unused external snapshots.
- The tool.inline-snapshot.test-dir configuration option is only used as a
compatibility fallback when files_using_external.txt does not exist yet.
- Documentation examples now use rich terminal snapshots to show pytest output
with colors and formatting.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically
increased memory use during reporting for large projects.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- Updated getting_started.py example to remove multi-line command usage
- [Settable] description argument can now be rich text
- Removed redundant ipython import which slowed application startup time
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* improving free-threading readiness, see also #251:
- initialize tables at module import, not lazily
- remove caching imported Python objects (which are already caches)
- added 75 critical sections in Python-facing operations
- updated Trove Classifier to ;Free Threading :: 2 - Beta;
* clip arguments in ;.bytereverse(); instead of raising ;IndexError;
* remove ;ssize_richcompare(); in favor of ;Py_RETURN_RICHCOMPARE; macro
* add tests for frozenbitarrays created by methods when ;self; is a
frozenbitarray, e.g. slicing a frozenbitarray
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- (ntfscat) Fix heap memory corruption when processing a corrupt or maliciously
crafted filesystem. (CVE-2026-42616)
- Fix heap memory corruption when copying index data from root to an index
block in a corrupt or maliciously crafted filesystem. (CVE-2026-42617)
- Fix single-byte heap buffer overflow when decompressing maliciously crafted
compressed file data. (CVE-2026-42618)
- Fix heap buffer overflow when copying the tail data of an index block to a
freshly allocated block. (CVE-2026-46569)
- Fix out-of-bounds read when processing symlink reparse data in a corrupt or
maliciously crafted filesystem. (CVE-2026-46571)
- Fix heap memory corruption for maliciously crafted or corrupt index data
descending to an out-of-bounds tree depth. (CVE-2026-46570)
- Fix heap buffer overflow for maliciously crafted or corrupt index data during
a node split. (CVE-2026-46572)
- Fix heap buffer overflow when building inherited ACL data. (CVE-2026-56135)
- Fix out of bounds access when clearing an index root in maliciously crafted
or corrupt index data. (CVE-2026-56136)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
=============
- Documentation issue for Net::DNS::RR::RRSIG::verify()
- Denial of Service via long DNS compression chains
- Remote code injection via EDNS EXTENDED ERROR
- UNIX.pm: Unreachable code warning using Apache/mod_perl
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* Fix inverted comparisons for strings in DBI::SQL::Nano (CVE-2026-15043)
* Document that IS NULL matches empty strings in DBI::SQL::Nano
* Fix DBD::File to ensure that the table is not a symlink outside of f_dir (CVE-2026-15392)
* Fix an out-of-bounds error when a statement handle has no fields but the source row is not empty (CVE-2026-60082)
* Add an overridable upper bound $MAX_PATH_DEPTH for DBI::ProfileData (CVE-2026-60081)
* *** WARNING: Next release will require perl-5.12
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- avoid possible double free of found in idbm_rec_update_param (#528)
- Modify log function to print session id (#498)
- Add tcp.congestion_control configuration option (#520)
- iscsi-gen-initiatorname use @IQN_PREFIX@ as default
- iscsi-init.service: Use iscsi-gen-initiatorname
- Fix issue with IPv6 adapter interfaces (#508)
- Small cleanups for firmware discovery. (#522)
- Fix unused variable warning in usr/io.c (#524)
- Make iface.example a doc file. (#526)
- Fix security issues recently discovered by Keith at Linneman Labs (#535)
- Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
- fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
- Fix incorrect parsing of node.discovery_type "static" and "fw" (#518)
- doc: fixup iscsiadm man page option for -r (#501)
- Fix typo in initiator.c (#507)
- iscsi: validate interface IP against target address family (#527)
- iscsi: delay reconnect until interface has valid IP. (#511)
- Fix minor typo ("authenticaton") (#500)
- iscsi_net_util: avoid copying NULL pointers with strlcpy()
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
chisel does #include "lua.h" and links libluajit-5.1.so, but the link
failed with undefined Lua symbols (luaL_openselectedlibs, lua_setglobal,
lua_getglobal, lua_pcallk). Those come from the stock Lua >= 5.4 header,
not LuaJIT.
The stray stock lua.h reaches the target compile line via ncurses.cmake:
find_package(Curses) resolves CURSES_INCLUDE_DIR to the native sysroot
(recipe-sysroot-native/usr/include, which also carries ncurses.h/form.h
and, dragged in by lua-native, lua.h), then include_directories() places
that dir ahead of the LuaJIT include dir. The prior CXXFLAGS -I workaround
could not win because CMake orders target include_directories before
CMAKE_CXX_FLAGS.
Pin CURSES_INCLUDE_DIR/CURSES_LIBRARIES to the target sysroot so the native
include dir never leaks into the target build; lua.h then resolves through
LUAJIT_INCLUDE and matches the linked library.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
xterm do_configure runs gnu-configize (to refresh config.sub/config.guess),
newer versions of gnu-config needs to specify the directory for configure scripts
Fixes a build error abort in do_configure:
gnu-configize: error: 'configure.ac' is required
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_compile panicked in rice-c/build.rs:
thread 'main' panicked at rice-c/build.rs:101:
Could not find rice-proto.h header
rice-c/build.rs builds the internal rice-proto C library in-tree via
"cargo cinstall --prefix <OUT_DIR>/rice-proto-cbuild" and then locates
it through system-deps + pkg-config. The generated rice-proto.pc carries
an absolute prefix pointing into the in-build OUT_DIR. pkgconfig.bbclass
exports PKG_CONFIG_SYSROOT_DIR=${STAGING_DIR_HOST}, and pkgconf prepends
that sysroot onto the already-absolute prefix, yielding a doubled,
non-existent include path (recipe-sysroot/<abs-build-path>/include/rice).
The header search then fails. The internal lib is never staged in the
sysroot, so sysroot rewriting must not be applied to its .pc.
Clear PKG_CONFIG_SYSROOT_DIR so the internal prefix is used verbatim.
openssl-sys is the only other pkg-config consumer in the crate graph and
would break without the sysroot, so point it at the target openssl
directly via OPENSSL_LIB_DIR/OPENSSL_INCLUDE_DIR (openssl-sys returns
those and skips its pkg-config probe when both are set). Verified a clean
build: rice-proto.h is found and librice-proto/librice-io plus the header
are packaged.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_compile failed building the userspace mount helper:
mount.vboxsf.c:38:10: fatal error: errno.h: No such file or directory
vbsfmount.c:36:10: fatal error: assert.h: No such file or directory
The kernel modules build fine; only the userspace utility fails. This
recipe inherits module, and module.bbclass sets INHIBIT_DEFAULT_DEPS=1
(kernel modules build -nostdinc and do not need libc). That suppresses
BASE_DEFAULT_DEPS (virtual/cross-cc virtual/compilerlibs virtual/libc)
and only re-adds virtual/cross-cc + virtual/cross-binutils, so the
target libc headers and crt objects are never staged into
recipe-sysroot. But this recipe also compiles an ordinary hosted
userspace program (utils/mount.vboxsf), which needs libc.
Add back virtual/compilerlibs and virtual/libc. Using the same
virtual/* provider names OE lists in BASE_DEFAULT_DEPS keeps this
correct across libc (glibc/musl) and toolchain (gcc/clang) choices.
Verified errno.h is staged and mount.vboxsf compiles, links and is
packaged into ${base_sbindir}.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_package failed with a fatal QA error:
QA Issue: ufw: Files/directories were installed but not shipped in
any package: /usr/usr/lib/ufw/... (and on repeated rebuilds
/usr/usr/usr/lib/ufw/...) [installed-vs-shipped]
Under the usrmerge DISTRO_FEATURE, do_configure:prepend rewrites the
single os.path.join('/lib', 'ufw') in setup.py to nonarch_base_libdir
(/usr/lib) with an in-place sed. The pattern '/lib' is not anchored, so
when do_configure re-runs against an already-patched ${S} (cached
unpack/patch, as happens on world rebuilds) it matches the '/lib' inside
the previously substituted '/usr/lib' and prepends another /usr, giving
/usr/usr/lib and then /usr/usr/usr/lib. FILES:${PN} ships
${nonarch_base_libdir}/ufw (/usr/lib/ufw), so the doubled paths are
unshipped and QA fails.
Anchor the substitution to the quoted literal '/lib'. After the first
run the text is '/usr/lib', which no longer contains '/lib', so
re-running do_configure is a no-op. Verified two forced do_configure
runs leave os.path.join('/usr/lib', 'ufw') and do_package succeeds.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Canmatrix implements a "Python Can Matrix Object", which describes the can-communication
and the needed objects (Boardunits, Frames, Signals, Values, ...).
Signed-off-by: Fabian Pfitzner <f.pfitzner@pengutronix.de>
The pypi class default python:h11 doesn't match how h11 is tracked
in the CVE databases. NVD has no CPE for it yet; the only existing
record (CVE-2025-43859) carries python-hyper:h11 in its CNA affected
entry [1], so set that pair.
CVE-2025-43859 (request smuggling) is fixed in 0.16.0, the version
we ship, so it resolves as not affected.
[1] https://www.cve.org/CVERecord?id=CVE-2025-43859
Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Alexander Stein
Yogesh Tyagi
Khem Raj
Wang Mingyu
Fabian Pfitzner
Markus Volk
mark.yang