Changelog:
===========
- Surface the org itself in the FUNDING config
- Replace prettier with mdformat and yamlfmt
- build: use test dependency group in internal envs
- feat(python): match free-threaded and debug interpreter builds
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==============
- NEW: Drop Python 3.9 support.
- NEW: Lazy compile selector patterns to improve initial import speed.
- FIX: Correct :nth-child/:nth-of-type (and -last- variants) for An+B values whose sequence steps onto
- index 0 or onto the last child (e.g. :nth-child(2n-2), :nth-child(n-1), :nth-child(n+5)), which previously
- matched the wrong elements or nothing at all
- FIX: More efficient CSS ID matching
- FIX: Fix inefficient trimming of comments and white space
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- Add Persian short month names for %b
- Drop legacy Python 2 bytes support from strftime
- typing: align date/datetime dunder annotations with typeshed
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
============
- fix passing PYTHONPATH, PYTHONWARNINGS, and PYTHONDONTWRITEBYTECODE while
running the test suite.
- fix passing PYTEST_DISABLE_PLUGIN_AUTOLOAD and PYTEST_PLUGINS while running
the test suite.
- inline-snapshot now tracks source files that use external() in
.inline-snapshot/files_using_external.txt (inside storage-dir) and uses this
tracked list to detect and trim unused external snapshots.
- The tool.inline-snapshot.test-dir configuration option is only used as a
compatibility fallback when files_using_external.txt does not exist yet.
- Documentation examples now use rich terminal snapshots to show pytest output
with colors and formatting.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically
increased memory use during reporting for large projects.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- Updated getting_started.py example to remove multi-line command usage
- [Settable] description argument can now be rich text
- Removed redundant ipython import which slowed application startup time
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* improving free-threading readiness, see also #251:
- initialize tables at module import, not lazily
- remove caching imported Python objects (which are already caches)
- added 75 critical sections in Python-facing operations
- updated Trove Classifier to ;Free Threading :: 2 - Beta;
* clip arguments in ;.bytereverse(); instead of raising ;IndexError;
* remove ;ssize_richcompare(); in favor of ;Py_RETURN_RICHCOMPARE; macro
* add tests for frozenbitarrays created by methods when ;self; is a
frozenbitarray, e.g. slicing a frozenbitarray
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- (ntfscat) Fix heap memory corruption when processing a corrupt or maliciously
crafted filesystem. (CVE-2026-42616)
- Fix heap memory corruption when copying index data from root to an index
block in a corrupt or maliciously crafted filesystem. (CVE-2026-42617)
- Fix single-byte heap buffer overflow when decompressing maliciously crafted
compressed file data. (CVE-2026-42618)
- Fix heap buffer overflow when copying the tail data of an index block to a
freshly allocated block. (CVE-2026-46569)
- Fix out-of-bounds read when processing symlink reparse data in a corrupt or
maliciously crafted filesystem. (CVE-2026-46571)
- Fix heap memory corruption for maliciously crafted or corrupt index data
descending to an out-of-bounds tree depth. (CVE-2026-46570)
- Fix heap buffer overflow for maliciously crafted or corrupt index data during
a node split. (CVE-2026-46572)
- Fix heap buffer overflow when building inherited ACL data. (CVE-2026-56135)
- Fix out of bounds access when clearing an index root in maliciously crafted
or corrupt index data. (CVE-2026-56136)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
=============
- Documentation issue for Net::DNS::RR::RRSIG::verify()
- Denial of Service via long DNS compression chains
- Remote code injection via EDNS EXTENDED ERROR
- UNIX.pm: Unreachable code warning using Apache/mod_perl
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* Fix inverted comparisons for strings in DBI::SQL::Nano (CVE-2026-15043)
* Document that IS NULL matches empty strings in DBI::SQL::Nano
* Fix DBD::File to ensure that the table is not a symlink outside of f_dir (CVE-2026-15392)
* Fix an out-of-bounds error when a statement handle has no fields but the source row is not empty (CVE-2026-60082)
* Add an overridable upper bound $MAX_PATH_DEPTH for DBI::ProfileData (CVE-2026-60081)
* *** WARNING: Next release will require perl-5.12
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- avoid possible double free of found in idbm_rec_update_param (#528)
- Modify log function to print session id (#498)
- Add tcp.congestion_control configuration option (#520)
- iscsi-gen-initiatorname use @IQN_PREFIX@ as default
- iscsi-init.service: Use iscsi-gen-initiatorname
- Fix issue with IPv6 adapter interfaces (#508)
- Small cleanups for firmware discovery. (#522)
- Fix unused variable warning in usr/io.c (#524)
- Make iface.example a doc file. (#526)
- Fix security issues recently discovered by Keith at Linneman Labs (#535)
- Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
- fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
- Fix incorrect parsing of node.discovery_type "static" and "fw" (#518)
- doc: fixup iscsiadm man page option for -r (#501)
- Fix typo in initiator.c (#507)
- iscsi: validate interface IP against target address family (#527)
- iscsi: delay reconnect until interface has valid IP. (#511)
- Fix minor typo ("authenticaton") (#500)
- iscsi_net_util: avoid copying NULL pointers with strlcpy()
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
chisel does #include "lua.h" and links libluajit-5.1.so, but the link
failed with undefined Lua symbols (luaL_openselectedlibs, lua_setglobal,
lua_getglobal, lua_pcallk). Those come from the stock Lua >= 5.4 header,
not LuaJIT.
The stray stock lua.h reaches the target compile line via ncurses.cmake:
find_package(Curses) resolves CURSES_INCLUDE_DIR to the native sysroot
(recipe-sysroot-native/usr/include, which also carries ncurses.h/form.h
and, dragged in by lua-native, lua.h), then include_directories() places
that dir ahead of the LuaJIT include dir. The prior CXXFLAGS -I workaround
could not win because CMake orders target include_directories before
CMAKE_CXX_FLAGS.
Pin CURSES_INCLUDE_DIR/CURSES_LIBRARIES to the target sysroot so the native
include dir never leaks into the target build; lua.h then resolves through
LUAJIT_INCLUDE and matches the linked library.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
xterm do_configure runs gnu-configize (to refresh config.sub/config.guess),
newer versions of gnu-config needs to specify the directory for configure scripts
Fixes a build error abort in do_configure:
gnu-configize: error: 'configure.ac' is required
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_compile panicked in rice-c/build.rs:
thread 'main' panicked at rice-c/build.rs:101:
Could not find rice-proto.h header
rice-c/build.rs builds the internal rice-proto C library in-tree via
"cargo cinstall --prefix <OUT_DIR>/rice-proto-cbuild" and then locates
it through system-deps + pkg-config. The generated rice-proto.pc carries
an absolute prefix pointing into the in-build OUT_DIR. pkgconfig.bbclass
exports PKG_CONFIG_SYSROOT_DIR=${STAGING_DIR_HOST}, and pkgconf prepends
that sysroot onto the already-absolute prefix, yielding a doubled,
non-existent include path (recipe-sysroot/<abs-build-path>/include/rice).
The header search then fails. The internal lib is never staged in the
sysroot, so sysroot rewriting must not be applied to its .pc.
Clear PKG_CONFIG_SYSROOT_DIR so the internal prefix is used verbatim.
openssl-sys is the only other pkg-config consumer in the crate graph and
would break without the sysroot, so point it at the target openssl
directly via OPENSSL_LIB_DIR/OPENSSL_INCLUDE_DIR (openssl-sys returns
those and skips its pkg-config probe when both are set). Verified a clean
build: rice-proto.h is found and librice-proto/librice-io plus the header
are packaged.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_compile failed building the userspace mount helper:
mount.vboxsf.c:38:10: fatal error: errno.h: No such file or directory
vbsfmount.c:36:10: fatal error: assert.h: No such file or directory
The kernel modules build fine; only the userspace utility fails. This
recipe inherits module, and module.bbclass sets INHIBIT_DEFAULT_DEPS=1
(kernel modules build -nostdinc and do not need libc). That suppresses
BASE_DEFAULT_DEPS (virtual/cross-cc virtual/compilerlibs virtual/libc)
and only re-adds virtual/cross-cc + virtual/cross-binutils, so the
target libc headers and crt objects are never staged into
recipe-sysroot. But this recipe also compiles an ordinary hosted
userspace program (utils/mount.vboxsf), which needs libc.
Add back virtual/compilerlibs and virtual/libc. Using the same
virtual/* provider names OE lists in BASE_DEFAULT_DEPS keeps this
correct across libc (glibc/musl) and toolchain (gcc/clang) choices.
Verified errno.h is staged and mount.vboxsf compiles, links and is
packaged into ${base_sbindir}.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_package failed with a fatal QA error:
QA Issue: ufw: Files/directories were installed but not shipped in
any package: /usr/usr/lib/ufw/... (and on repeated rebuilds
/usr/usr/usr/lib/ufw/...) [installed-vs-shipped]
Under the usrmerge DISTRO_FEATURE, do_configure:prepend rewrites the
single os.path.join('/lib', 'ufw') in setup.py to nonarch_base_libdir
(/usr/lib) with an in-place sed. The pattern '/lib' is not anchored, so
when do_configure re-runs against an already-patched ${S} (cached
unpack/patch, as happens on world rebuilds) it matches the '/lib' inside
the previously substituted '/usr/lib' and prepends another /usr, giving
/usr/usr/lib and then /usr/usr/usr/lib. FILES:${PN} ships
${nonarch_base_libdir}/ufw (/usr/lib/ufw), so the doubled paths are
unshipped and QA fails.
Anchor the substitution to the quoted literal '/lib'. After the first
run the text is '/usr/lib', which no longer contains '/lib', so
re-running do_configure is a no-op. Verified two forced do_configure
runs leave os.path.join('/usr/lib', 'ufw') and do_package succeeds.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Canmatrix implements a "Python Can Matrix Object", which describes the can-communication
and the needed objects (Boardunits, Frames, Signals, Values, ...).
Signed-off-by: Fabian Pfitzner <f.pfitzner@pengutronix.de>
The pypi class default python:h11 doesn't match how h11 is tracked
in the CVE databases. NVD has no CPE for it yet; the only existing
record (CVE-2025-43859) carries python-hyper:h11 in its CNA affected
entry [1], so set that pair.
CVE-2025-43859 (request smuggling) is fixed in 0.16.0, the version
we ship, so it resolves as not affected.
[1] https://www.cve.org/CVERecord?id=CVE-2025-43859
Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes for 1.5.4 'Sonic':
--------------------------
1.5.4 is a minor release of dav1d, focused on optimizations and maintenance:
- Support for OS/2, including API exports and assembly
- Switch to external checkasm
- Add Armv9.3-A GCS (Guarded Control Stack) support
- AArch64: optimize ipred_v, ipred_h and ipred_smooth_* 8bpc functions, and
reduce .text size
- ARM32: optimize prep_neon
- RISC-V: ipred_(dc, h, v, pal) optimizations for 8 and 16bpc,
generate_grain_y for 8bpc, and optimizations (prep/put_8tap, 6-tap and copy paths)
- Portability improvements for non-POSIX systems (signal() fallback)
- Schedule tile tasks for all passes at once, improving threading
- Precompute the quantization matrix tables at build time
- Move loop-invariant computations out of hot loops
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Added a recipe that caps the memory usage of individual systemd
services without modifying those services' own recipes. Services and
limits are given via MEMORY_CONTROL_SERVICES as space-separated
<unit>:<limit>[:<oom_policy>] entries. For each recipe, it generates
a systemd drop-in under ${systemd_system_unitdir} setting MemoryMax,
MemoryHigh (70% of max), and MemorySwapMax=0. The optional "kill" policy
also adds OOMPolicy=continue and OOMScoreAdjust=500.
The service list is empty by default, so the recipe is a no-op until a
distro, machine, or product .bbappend configures it. Drop-ins install to
the system unit directory so systemd reads them at boot with no
daemon-reload. Entries are validated at build time so a bad limit fails
the build.
Signed-off-by: Ishaan Desai <Ishaan.Desai@ibm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Inherit ptest-python-pytest and include tests for invoke.
Use -s because some tests read from stdin while output is
captured. Skip tests that require a real terminal.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Add recipe for pytest-relaxed, a relaxed test discovery/organization
for pytest, release 2.0.2:
- Fix dangling compatibility issues with pytest version 8.x.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Fixes:
WARNING: meta-multimedia/recipes-multimedia/mimic/mimic_1.3.0.1.bb: mimic: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT AND LicenseRef-BellBird AND LicenseRef-CMU-Tex AND LicenseRef-PD AND LicenseRef-Sun AND LicenseRef-flite AND LicenseRef-rateconv"
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Fixes:
WARNING: meta-oe/recipes-graphics/ktx-software/ktx-software_5.0.0.bb: ktx-software: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND CC-BY-3.0 AND CC-BY-4.0 AND CC0-1.0 AND MIT AND Zlib AND LicenseRef-Cesium-Trademark-Terms AND LicenseRef-ETCSLA AND LicenseRef-HI-Trademark AND LicenseRef-Kodak AND LicenseRef-PNGSuite AND LicenseRef-fmt"
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Fixes:
WARNING: meta-oe/recipes-support/liboauth/liboauth_1.0.3.bb: liboauth: LICENSE is using an old syntax and should be upgraded to: "GPL-2.0-only OR MIT"
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Fixes:
WARNING: meta-oe/recipes-dbs/influxdb/influxdb_1.8.10.bb: influxdb: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND EPL-1.0 AND ISC AND MIT AND MPL-2.0"
WARNING: meta-oe/recipes-support/crucible/crucible_2025.05.28.bb: crucible: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-3-Clause AND MIT"
WARNING: meta-oe/recipes-test/syzkaller/syzkaller_git.bb: syzkaller: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-3-Clause AND MIT"
WARNING: meta-oe/recipes-test/syzkaller/syzkaller_git.bb: syzkaller-native: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-3-Clause AND MIT"
WARNING: meta-oe/recipes-test/syzkaller/syzkaller_git.bb: nativesdk-syzkaller: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-3-Clause AND MIT"
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade libsimplelog to the latest upstream version 1.1.0.
Drop 0001-allow-build-with-cmake-4.patch as it is now integrated
upstream (commit 4827c4325063266f6d2a7e133a9d3a9050ff6a3c).
Update LIC_FILES_CHKSUM due to upstream updating the copyright year
range from 2024 to 2024-2026 in LICENSE.txt. The project remains fully
under the MIT license.
Append -D__LINUX__=1 and -D_GNU_SOURCE=1 to EXTRA_OECMAKE to enable
Linux and GNU-specific extensions like sched_getcpu() for better
performance effectiveness. These flags are optional; without them,
version 1.1.0 remains fully backward compatible and adapts perfectly
with strictly POSIX musl environments.
Signed-off-by: Thuận Nguyễn-Thái <nguyenthaithuanalg@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Wang Mingyu
Khem Raj
Fabian Pfitzner
Markus Volk
mark.yang
Ishaan Desai
Leon Anavi
Martin Jansa
Jason Schonberg
Thuận Nguyễn-Thái