Commit Graph

16131 Commits

Author SHA1 Message Date
Gyorgy Sarvari 1a6ceb010a redis: add back DEBUG_PREFIX_MAP to LDFLAGS
Without this redis embeds absoute build paths in the binaries, failing
qa check. These LDFLAGS were recently removed from oe-core[1] - this
change adds it back to this recipe.

The qa error was not showing with redis 6 recipe, so it is added only to
redis 7.

[1]: https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 00:34:02 -08:00
Gyorgy Sarvari 1de433f8bb valkey: remove TMPDIR truncation in binaries
These seds were added to remove reproducibility QA errors about
TMPDIR being present in the binaries. The root of the problem was
changed LDFLAGS in oe-core, and after adding back these LDFLAGS
to this recipe[1], the QA error is also gone - the binaries require
no changes due to this.

Also remove the INSANE_SKIP, which was most likely fixed by the
same LDFLAGS issue - it doesn't happen anymore.

[1]: https://git.openembedded.org/meta-openembedded/commit/?id=e8981bf43163d2fe90ea28b2952a2443ceaea934

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 00:34:02 -08:00
Gyorgy Sarvari de20532a75 nodejs: detect NEON correctly for aarch64
The llhttp vendored dependency of nodejs takes advantage of Arm NEON
instructions when they are available, however they are detected by
checking for an outdated CPU feature macro: it checks for __ARM_NEON__,
however it is not defined by new compilers for aarch64, rather they
set __ARM_NEON. The Arm C extension guide[1] refers to __ARM_NEON macro
aswell.

This patch changes the detection to check for both macros when detecting
the availability of NEON instructions.

The code this patch modifies is generated, so the patch itself isn't
suitable for upstream submission, as the root cause of the error is
in the generator itself. A PR has been submitted[2] to the generator
project to rectify this issue.

[1]: https://developer.arm.com/documentation/ihi0053/d/ - pdf, section 6.9
[2]: https://github.com/nodejs/llparse/pull/84

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 00:34:02 -08:00
Gyorgy Sarvari d3fbcf8700 nodejs: patch incorrect NEON intrinsics
The llhttp dependency of nodejs uses NEON intrinsics when they
are available, however some of these calls are incorrect: they
the call they use don't match the parameters passed, and so
the compilation fail (unless the error is suppressed):

| ../deps/llhttp/src/llhttp.c: In function 'llhttp__internal__run':
| ../deps/llhttp/src/llhttp.c:2645:9: note: use '-flax-vector-conversions' to permit conversions between vectors with differing element types or numbers of subparts
|  2645 |         );
|       |         ^
| ../deps/llhttp/src/llhttp.c:2643:11: error: incompatible type for argument 1 of 'vandq_u16'
|  2643 |           vcgeq_u8(input, vdupq_n_u8(' ')),

There is a patch upstream that fixes it (though it is not merged
yet). This patch is a port of that fix.

This allows us to remove the extra CFLAGS also from the recipe that
suppressed this error.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 00:34:01 -08:00
Mikhail Anikin 2296bdb6c1 rsyslog: fix incorrect install -d usage in do_install
The rsyslog recipe incorrectly passes the permission mode as a
positional argument to install -d. In this form, the value is treated
as a directory name rather than as a mode, which will create an additional directory
and may result in unexpected behavior during installation.

Use the -m option to ensure the directory is created with the intended
permissions.

Signed-off-by: Mikhail Anikin <mikhail.anikin@solid-run.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-16 00:34:01 -08:00
Minjae Kim bf898320ec rocksdb: support pkg-config based zstd detection
In Yocto builds, zstd is built via Makefile and does not install
CMake package configuration files. As a result, Findzstd.cmake
fails to detect ZSTD_INCLUDE_DIRS.

Add pkg-config based detection as a fallback to properly locate
zstd headers and libraries.

Signed-off-by: Minjae Kim <flowergom@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-11 15:20:55 -08:00
Daniel Klauer add2d94ab7 nbench-byte: Fix sysinfo generation in parallel build
The project Makefile uses a script (sysinfo.sh) to non-atomically generate
two .c files (sysinfo.c, sysinfoc.c) which are then included in the build.
Since the script always overwrites both .c files, the Makefile should only
invoke it once, not twice in parallel. Otherwise the .c files may be
corrupted and cause random build failures in parallel builds.

Requires at least GNU make 4.3, for Grouped Targets support [1].

[1] https://lists.gnu.org/archive/html/info-gnu/2020-01/msg00004.html

Reviewed-by: Silvio Fricke <silvio.fricke@gin.de>
Signed-off-by: Daniel Klauer <daniel.klauer@gin.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-10 21:11:46 -08:00
Liu Yiding bc6370efb6 lmdb: upgrade 0.9.31 -> 0.9.35
Drop CVE-2026-22185.patch as it was merged upstream

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-10 21:11:45 -08:00
Gyorgy Sarvari 48dc68c366 freerdp: patch CVE-2026-22855
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22855

The related Github advisory[1] describes the problem along with analyzing
where the vulnerability is in the codebase. I looked up the commit that
recently performed the changes from the analysis, and backported it.

[1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rwp3-g84r-6mx9

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-10 21:11:45 -08:00
Gyorgy Sarvari 0b61ca3355 freerdp: patch CVE-2026-22854
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22854

Backport the patch that is referenced by the relevant Github
advisory[1].

[1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-47vj-g3c3-3rmf

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-10 21:11:45 -08:00
Gyorgy Sarvari d4c3fdca5f nodejs: add missing native nghttp2 and libuv dependencies
In case nghttp2 and/or libuv PACKAGECONFIGs are enabled, nodejs
will build some binaries for the build system also, linking to
native binaries and using headers from the native sysroot.

However in case the dependencies are missing from the native sysroot,
then it falls back to the build system's sysroot, and use the files
that it can find there. If the build system doesn't have nghttp2/libuv
installed, then compilation fails:

libuv:
../tools/executable_wrapper.h:5:10: fatal error: uv.h: No such file or directory

ngtthp2:
<...snip...>/build/tmp/hosttools/ld: cannot find -lnghttp2: No such file or directory

To avoid falling back to the build system's sysroot, add the missing
libuv-native and nghttp2-native dependencies.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-10 21:11:45 -08:00
Frede Hoey Braendstrup f9d3d703ca drm-framebuffer: new recipe
Signed-off-by: Frede Hoey Braendstrup <frederikbraendstrup@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-10 21:11:45 -08:00
Dmitry Baryshkov bd832a8962 opencv: correct FastCV dependencies
The FastCV stub dlopen()'s libfastcvopt.so.1, but if it is not present,
it is not a fatal error for the rest of the plugins. Downgrate RDEPENDS
to RRECOMMENDS. While we are at it, drop the dependency from the
PACKAGECONFIG, it is handled in the python code.

Fixes: b77403017b ("opencv: fill in missing FastCV gaps")
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-08 20:41:53 -08:00
Gyorgy Sarvari 7302c3ef24 obconf: fix SRC_URI
The old SRC_URI has became inaccessible a while ago.
This patch switches to Debian mirror.

The file contents are identical to the previous source,
except for the top level debian folder, which is not present
in the new tarball (but it is mostly useful for Debian
packagers, and not used for compilation).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:28 -08:00
Peter Kjellerstedt 8837d163ab glaze: Update to 7.0.2
Changes since 7.0.1:

459946d3 version 7.0.2 bump
8879dd5e two element id optimization (#2264)
ecfc63b4 Committing clang-format changes
e0d153e9 Enum search for when hashing fails (#2263)
fc169a51 enum reflection documentation
3d8354a6 Committing clang-format changes
f3fc73cc Allow to construct a glz::http_server instance using an
         asio::io_executor (#2258)
625b6ddd Update README.md
56d20086 Update README.md
d3b51565 Update glaze_DISABLE_SIMD_WHEN_SUPPORTED documentation
77fb1384 Update README.md
f17d17ca Committing clang-format changes
69eed8c2 YAML support (#2243)
5d652476 Update json-schema.md (#2254)
04883eb1 BEVE and CBOR std::expected support (#2253)
8555337e FEATURE: [json] Add special handling for std::expected<void,E>
         (#2251)
ddea99c5 Simple float (#2248)

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:27 -08:00
Frede Hoey Braendstrup 6be7812f7c glaze: include cmake files in glaze-dev package
The cmake files should be included in the glaze-dev package.
Without this patch, an application using the following

    find_package(glaze)
    target_link_libraries(myprogram PUBLIC glaze::glaze)

Would fail with the following error (with tmpdir redacted)

    CMake Error in deps/vesl/src/Platform/CMakeLists.txt:
      Imported target "glaze::glaze" includes non-existent path

        "$TMPDIR/recipe-sysroot/usr/share/include"

      in its INTERFACE_INCLUDE_DIRECTORIES.  Possible reasons include:

      * The path was deleted, renamed, or moved to another location.

      * An install or uninstall procedure did not complete successfully.

      * The installation package was faulty and references files it does not
      provide.

Signed-off-by: Frede Hoey Braendstrup <frederikbraendstrup@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:27 -08:00
Liu Yiding 3c81ff5859 transmission: upgrade 4.0.6 -> 4.1.0
1.ChangeLog
  https://github.com/transmission/transmission/releases/tag/4.1.0

2. Remove following patches as they were merged upstream
  0001-build-bump-CMake-version-to-3.10-4.patch
  0001-miniupnpc-bump-CMake-version-to-3.14.patch
  0001-build-set-minimum-required-CMake-to-3.5.patch

3. Change LICENSE Checksum as Copyright year has changed.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:27 -08:00
Gyorgy Sarvari 6a900d8190 pax-utils: upgrade 1.3.3 -> 1.3.10
Update the SRC_URI also, the previous one became inaccessible
a while ago. This is an official mirror[1].

Since the last update the project switched to meson build system.

Changes:
https://github.com/gentoo/pax-utils/compare/v1.3.3...v1.3.10

[1]: https://packages.gentoo.org/packages/app-misc/pax-utils

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:26 -08:00
Gyorgy Sarvari 727a216363 packagegroup-meta-oe: add media-types
Also remove the old mime-types recipe, which is the old name
of media-types.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:26 -08:00
Gyorgy Sarvari e5cd8b0c37 media-types: fix RPROVIDES
Instead of PROVIDING mime-support, it should RPROVIDE the same package.
It allows adding "mime-support" to IMAGE_INSTALL to get a similar
behavior than before mime-support recipe was split into two differently
named recipes.

Also, rename the recipe's folder to match the recipe name.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:26 -08:00
Gyorgy Sarvari 1608ba5b9d mailcap: drop recipe (debian version)
The same recipe is already provided, sourced from Fedora.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:26 -08:00
Leon Anavi 1b820b98af valkey: Upgrade 9.0.1 -> 9.0.2
Upgrade to release 9.0.2:

- Avoid memory leak of new argv when HEXPIRE commands target only
  non-exiting fields
- Fix HINCRBY and HINCRBYFLOAT to update volatile key tracking
- Avoid empty hash object when HSETEX added no fields
- Fix case-sensitive check for the FNX and FXX arguments in HSETEX
- Prevent assertion in active expiration job after a hash with
  volatile fields is overwritten
- Fix HRANDFIELD to return null response when no field could be
  found
- Fix HEXPIRE to not delete items when validation rules fail and
  expiration is in the past
- Fix how hash is handling overriding of expired fields overwrite
- HSETEX - Always issue keyspace notifications after validation
- Make zero a valid TTL for hash fields during import mode and data
  loading
- Trigger prepareCommand on argc change in module command filters
- Restrict TTL from being negative and avoid crash in import-mode
- Fix chained replica crash when doing dual channel replication
- Skip slot cache optimization for AOF client to prevent key
  duplication and data corruption
- Fix used_memory_dataset underflow due to miscalculated
  used_memory_overhead
- Avoid duplicate calculations of network-bytes-out in slot stats
  with copy-avoidance
- Fix XREAD returning error on empty stream with + ID
- Track reply bytes in I/O threads if commandlog-reply-larger-than
  is -1
- This makes it possible to mitigate a performance regression in
  9.0.1 caused by the related bug fix

Fixes references to TMPDIR [buildpaths] and avoids [already-stripped].

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:25 -08:00
Adam Duskett 800998234a kmscon: bump version to 9.3.1
- Remove upstreamed patch (commit ID: a1fc510a)

  - backspace_sends_delete is now a runtime option as
    of commit 0d6d85a8b865cac17529d049ae9a561db782ac59

  - The kmscon.conf file in the source is renamed to kms.conf.example
    To keep the same behavior as the previous versions, kms.conf.example
    is moved to ${sysconfdir}/kmscon/kmscon.conf before running sed.

  - The render-engine config option has been removed as of commit
    59eef2a154f78101195ad8ff08376e2418e773f0.

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:25 -08:00
Adam Duskett 83bf29198b libtsm: upgrade 4.4.0 -> 4.4.2
Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:25 -08:00
Wang Mingyu 808e3f9ebc xorgxrdp: upgrade 0.10.4 -> 0.10.5
Changelog:
==========
- Fix bug in Chrome pointer detection
- CI: Update FreeBSD xrdp dependency

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:24 -08:00
Wang Mingyu 08ad9a079e tree: upgrade 2.2.1 -> 2.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:24 -08:00
Wang Mingyu 6c54894209 openldap: upgrade 2.6.10 -> 2.6.12
License-Update: Copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:23 -08:00
Wang Mingyu 9c989a5ea2 libvpx: upgrade 1.15.2 -> 1.16.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:22 -08:00
Wang Mingyu 66afdc82af libp11: upgrade 0.4.16 -> 0.4.17
Changelog:
============
* Ed25519 and Ed448 support (PKCS#11 v3.2)
* Fixed OPENSSL_NO_EC builds
* Reverted RSA public exponent change from PR #474
* Fixed crash on module initialization failures
* Ignoring trailing newlines in pin-source files
* Initial build fixes for the upcoming OpenSSL 4.x

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:22 -08:00
Mingli Yu d3cdd51235 agent-proxy: Restore DEBUG_PREFIX_MAP in TARGET_LDFLAGS
oe-core has removed DEBUG_PREFIX_MAP from TARGET_LDFLAGS [1], restore
it to fix the below error.

ERROR: agent-proxy-1.97-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/agent-proxy in package agent-proxy-dbg contains reference to TMPDIR [buildpaths]
ERROR: agent-proxy-1.97-r0.wr2600 do_package_qa: Fatal QA errors were found, failing task.

[1] https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:20 -08:00
Mingli Yu 57eca6e20b memstat: Restore DEBUG_PREFIX_MAP in TARGET_LDFLAGS
oe-core has removed DEBUG_PREFIX_MAP from TARGET_LDFLAGS [1], restore
it to fix the below error.

ERROR: memstat-1.0-r0.wr2401 do_package_qa: QA Issue: File /usr/bin/.debug/memstat in package memstat-dbg contains reference to TMPDIR [buildpaths]
ERROR: memstat-1.0-r0.wr2401 do_package_qa: Fatal QA errors were found, failing task.

[1] https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:20 -08:00
Mingli Yu e8981bf431 valkey: Restore DEBUG_PREFIX_MAP in TARGET_LDFLAGS
oe-core has removed DEBUG_PREFIX_MAP from TARGET_LDFLAGS [1], restore
it to fix the below error.

  ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-cli in package valkey-dbg contains reference to TMPDIR [buildpaths]
  ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-server in package valkey-dbg contains reference to TMPDIR [buildpaths]
  ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-benchmark in package valkey-dbg contains reference to TMPDIR [buildpaths]
  ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: Fatal QA errors were found, failing task.

[1] https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:20 -08:00
Gyorgy Sarvari 6c462c4d55 freerdp3: upgrade 3.20.2 -> 3.22.0
Ptests passed successfully.

Dropped manpages PACKAGECONFIG: when it is enabled, it requires an executable that
is compiled from the project's source, but since it is cross-compiled, it is not
usable. The cmakefile also started to explicitly disable generating this tool
when cross-compiling is enabled.
Since this recipe has no native counterpart, and the manpages can't be generated
in this state, this option was removed.

Changes:
3.22.0:
- Complete overhaul of SDL client
- Introduction of new WINPR_ATTR_NODISCARD macro wrapping compiler or C language
  version specific [[nodiscard]] attributes
- Addition of WINPR_ATTR_NODISCARD to (some) public API functions so usage errors
  are producing warnings now
- Add some more stringify functions for logging
- CVE fixes: CVE-2026-23948, CVE-2026-24682, CVE-2026-24683, CVE-2026-24676,
  CVE-2026-24677, CVE-2026-24678, CVE-2026-24684, CVE-2026-24679,
  CVE-2026-24681, CVE-2026-24675, CVE-2026-24491, CVE-2026-24680
- [core,info] fix missing NULL check
- [gateway,tsg] fix TSG_PACKET_RESPONSE parsing
- Allow querying auth identity with kerberos when running as a server
- Sspi krb heimdal
- Tsg fix idleTimeout parsing
- [channels,smartcard] revert 649f7de
- [crypto] deprecate er and der modules
- [channels,rdpei] lock full update, not only parts
- [winpr,platform] add WINPR_ATTR_NODISCARD macro
- Wlog cleanup
- new stringify functions & touch API defines
- Add support for querying SECPKG_ATTR_PACKAGE_INFO to NTLM and Kerberos
- [channels,video] measure times in ns
- [utils] Nodiscard
- Error handling fixes
- [channels,drdynvc] check pointer before reset
- Winpr api def
- [winpr,platform] drop C23 [[nodiscard]]
- [gdi] add additional checks for a valid rdpGdi
- Sdl3 high dpiv2
- peer: Disconnect if Logon() returned FALSE
- [channels,rdpecam] fix PROPERTY_DESCRIPTION parsing
- [channel,rdpsnd] only clean up thread before free
- [channels,rdpei] add RDPINPUT_CONTACT_FLAG_UP

3.21.0:
- CVE fixes: CVE-2026-23530, CVE-2026-23531, CVE-2026-23532, CVE-2026-23533,
  CVE-2026-23534, CVE-2026-23732, CVE-2026-23883, CVE-2026-23884
- [client,sdl] fix monitor resolution
- [codec,progressive] fix progressive_rfx_upgrade_block
- Krb cache fix
- Rdpdr improved checks
- Codec advanced length checks
- Glyph fix length checks
- Wlog printf format string checks
- [warnings,format] fix format string warnings
- Double free fixes
- [clang-tidy] clean up code warnings

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:19 -08:00
Gyorgy Sarvari bfbd962813 nodejs: extend libatomic patch to x86
This patch isn't intended to introduce new behavior, rather it
changes the order of some existing LDFLAGS to fix a workaround that
stopped working at some point in the past.

LDFLAGS:x86 contains libatomic, because linking with this library
is required for this platform.

However when gyp links, it invokes the following (pseudo-)command:
$LD $LDFLAGS $RESOURCES_TO_LINK $EXTRA_LIBS $EXTRA_LDFLAGS

The EXTRA* arguments are coming from the gyp config. Since
LDFLAGS appears very early in the command, libatomic also
appears early amongst the resources, and the linker couldn't
find the relevant symbols when compiled for x86 platform (as
it was processed the very last):

| [...] undefined reference to `__atomic_compare_exchange'

Using this patch the library appears at the end, along with
the other EXTRA_LIBS, after the list of linked resources,
allowing linking to succeed.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-06 10:06:18 -08:00
Etienne Cordonnier 5ff9251b94 uutils-coreutils: upgrade 0.5.0 -> 0.6.0
See https://github.com/uutils/coreutils/releases/tag/0.6.0

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-04 20:53:30 -08:00
Gianfranco Costamagna 04ce4bf518 vboxguestdrivers: Upgrade to 7.2.6
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-04 20:53:30 -08:00
Yogesh Tyagi 0feab39283 abseil-cpp: Set CMAKE_CXX_STANDARD to 17
The compiler defaults to C++ < 17 which causes build failures.
Abseil requires C++17 or higher, so explicitly set CMAKE_CXX_STANDARD=17
to ensure the build uses the correct C++ standard.

Error:
CMake Error at CMake/AbseilDll.cmake:745 (message):
  The compiler defaults to or is configured for C++ < 17.  C++ >= 17 is
  required and Abseil and all libraries that use Abseil must use the same C++
  language standard

Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-04 20:53:30 -08:00
Gyorgy Sarvari 7c54c935cb xrdp: upgrade 0.10.4.1 -> 0.10.5
Contains fix for CVE-2025-68670.
Drop patch that is included in this release.

Changelog:
Security fixes:
- CVE-2025-68670

New features:
- It is now possible to start the xrdp daemon entirely unprivileged from the service manager.
  If you do this certain restrictions will apply. See
  https://github.com/neutrinolabs/xrdp/wiki/Running-the-xrdp-process-as-non-root for details.
- TLS pre-master secrets can now be recorded for packet captures
- Add a FuseRootReportMaxFree to work around 'no free space' issues with some file managers
- Alternate shell names can now be passed to startwm.sh in an environment variable for more
  system management control
- Updated Xorg paths in sesman.ini to include more recent distros
- Add Slovenian keyboard
- xrdpapi: Add a way to monitor connect/disconnect events

Bug fixes:
- Allow an empty X11 UTF8_STRING to be pasted to the clipboard
- Fix a regression introduced in v0.10.x, where it became impossible to connect to a VNC server
  which did not support the ExtendedDesktopSize encoding
- Fix a regression introduced in v0.10.x related to PAM groups handling
- Inconsistencies with [MS-RDPBCGR] have been addressed
- A reference to uninitialised data within the verify_user_pam_userpass.c module has been fixed
- Prevent some possible crashes when the RFX encoder is resized
- Fixes a regression introduced by GFX development which prevented the JPEG encoder from working
  correctly
- Fixes a regression introduced by #2974 which resulted in the xrdp PID file being deleted
  unexpectedly
- Do not overwrite a VNC port set by the user when not using sesman
- Fix regression from 0.9.x when freerdp client uses /workarea
- Fixes a crash where a resize is attempted with drdynvc disabled
- getgrouplist() now compiles on MacOS
- Various Coverity warnings have been addressed
- Documentation improvements

Internal changes:
- An unnecessary include of sys/signal.h causing a compile warning on MUSL-C has been removed

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-04 20:53:30 -08:00
Gyorgy Sarvari 5a74edf28b libcupsfilters: patch CVE-2025-64503
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-64503

Pick the patch that explicitly refernces the CVE ID in its message.
(The NVD advisory mentions only the cups-filters patch, but
the developer indicated the CVE ID in the libcupsfilters patch also)

Between this recipe version and the patch the project has decided to
eliminate c++ from the project, and use c only. The patch however
is straightforward enough that it could be backported with very small
modifications.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-04 20:53:29 -08:00
Gyorgy Sarvari 1a31d20cea libcdio: upgrade 2.2.0 -> 2.3.0
Includes fix for CVE-2024-36600

Changelog: https://github.com/libcdio/libcdio/releases/tag/2.3.0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-04 20:53:29 -08:00
Gyorgy Sarvari 713739da29 fontforge: patch CVE-2025-15270
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15270

Pick the patch that mentions this vulnerbaility explicitly
in its description.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 19:54:39 -08:00
Wang Mingyu e39458314e exiftool: upgrade 13.46 -> 13.48
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 19:54:39 -08:00
Wang Mingyu 9111684d67 cryptsetup: upgrade 2.8.3 -> 2.8.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 19:54:39 -08:00
Gyorgy Sarvari ec5cbced92 unicode-ucd: rename license file
After the previous hash update the license file was not renamed,
which causes it to clash in the DL_DIR if it was already downloaded
with the previous hash.

This change renames the file to avoid this clash.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 00:23:13 -08:00
Markus Volk e0839aed46 libsdl2-compat: update 2.32.58 -> 2.32.62
- Starting with [https://github.com/libsdl-org/sdl2-compat/pull/536], it
  is possible to compile without x11. Remove x11 from
  REQUIRED_DISTRO_FEATURES

Changelog:

2.32.62:
This is a stable bugfix release, with the following changes:
Improved support for GNU/Hurd
Fixed crash if hidapi strings are not available

2.32.60:
This is a stable bugfix release, with the following changes:
Fixed crash at startup in Dwarf Fortress
Fixed crash at startup in Stellaris
Fixed mouse stuttering in Amiberry
Fixed the viewport not being reset when the window is resized

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 00:23:13 -08:00
Gyorgy Sarvari 19fdc49db3 libx86-1: upgrade 1.1 -> 1.1.1
Bugfix release, mostly with patches applied from other distros.
Also fixes the SRC_URI which became inaccessible over time.
Drop patches that are included in this release.

Shortlog:
https://gitlab.archlinux.org/grawlinson/libx86/-/compare/v1.1...v1.1.1

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 00:23:13 -08:00
Peter Marko ad890c16e8 protobuf: upgrade 6.31.1 -> 6.33.5
* rebase existing patches
* drop mips clang patch as this was fixed upstream via [1] to build only
  for platforms supporting it.
* add PV to SRC_URI
* add variables to automatically calculate branch and tag
* fix includedir for utf8_range in ptest compilation

[1] https://github.com/protocolbuffers/protobuf/commit/719f3037032b2e952afe7fc49152cc4be38fa7a3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-02 00:23:13 -08:00
Gyorgy Sarvari 3a8beb7eef media-types: add recipe
This recipe is one of the successors of mime-support, which
provided mailcap and mime.types files. This recipe contains
only the mime.types portion.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-01 14:08:50 -08:00
Gyorgy Sarvari 10f3a928ab mailcap: add recipe
This recipe is one of the successors of the mime-support, which
provided mailcap and mime.types files. This recipe contains
only the mailcap portion.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-01 14:08:49 -08:00
Gyorgy Sarvari 25eab2bf01 mime-support: drop recipe
Debian has split this package into two sepatare packages:
media-types and mailcap. This package hasn't been updated
since 2020 (but the other two packages are regularly updated).

Beside this the SRC_URI has been inaccessible since a while also.

Drop this recipe (and substitute it with the up to date packages
in followup patches).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-01 14:08:49 -08:00