Commit Graph

38060 Commits

Author SHA1 Message Date
Gyorgy Sarvari 701b22fda3 corosync: patch CVE-2026-35091
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-35091

Pick the patch that mentions the CVE ID explicitly (it was identified
by Debian also as the fix[1])

[1]: https://security-tracker.debian.org/tracker/CVE-2026-35091

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-13 15:28:24 -07:00
Khem Raj f58d124eb5 tbb: Fix build with LLD linker
fixes
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'ITT_DoOneTimeInitialization' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'TBB_runtime_interface_version' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'get_memcpy_largest_cachelinesize' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'get_memcpy_largest_cache_size' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'get_mem_ops_method' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'init_mem_ops_method' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'irc__get_msg' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'irc__print' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'override_mem_ops_method' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'set_memcpy_largest_cachelinesize' failed: symbol not defined
| aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'set_memcpy_largest_cache_size' failed: symbol not defined
| aarch64-yoe-linux-clang: error: linker command failed with exit code 1 (use -v to see invocation)
| [45/49] Linking CXX shared library clang_22.1_cxx11_64_release/libtbb.so.12.17

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-13 08:14:44 -07:00
Khem Raj b65b0206b5 keyutils: Fix build with lld linker
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-13 07:59:59 -07:00
Jiaying Song 3551db3839 python3-blivet: upgrade 3.12.1 -> 3.13.2
Changelog:
https://github.com/storaged-project/blivet/releases

1. Drop 0008-use-oe-variable-to-replace-hardcoded-dir.patch and add
   do_install:append to manually install D-Bus and systemd files:
   Upstream commit 0f0fd84d [1] removed data_files from setup.py and
   moved their installation to a Makefile target (install-dbus), but
   OE uses setuptools3_legacy which only runs setup.py install and
   does not invoke the Makefile.

2. Add missing RDEPENDS:
   - python3-dasbus: upstream replaced the internal safe_dbus module
     with the external dasbus library [2].
   - python3-pygobject: was always required (gi.repository for
     libblockdev) but missing from old recipe.
   - util-linux: blivet directly calls lsblk, mount, umount and
     blockdev via subprocess.

[1] https://github.com/storaged-project/blivet/commit/0f0fd84d
[2] https://github.com/storaged-project/blivet/commit/1e7c5409

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-13 07:47:53 -07:00
Ayoub Zaki 96a803a50d tailscale: upgrade 1.84.3 -> 1.94.2
-Update tailscale recipe to version 1.94.2
-Regenerate go module dependencies and license checksums
-Export GOFLAGS with build tags so do_update_modules discovers all dependencies
-Manually verify and complete Unknown license entries

Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-12 16:42:05 -07:00
Jörg Sommer 174ab7dff1 atop: Fix binmerge
In case $sbindir = $bindir we have to pass this setting to make install.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-12 16:42:05 -07:00
Jörg Sommer 22e23418d2 atop: Add packages atop-acctd and atop-gpud
For some users these programmes might be useful.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-12 16:42:04 -07:00
Khem Raj a2d9a9be5f ltrace: Upgrade to 0.8.1 and clang build errors
Drop the upstream applied patches
Add patches to fix build with clang-22
Bump PE to account for version going from 7.x to 0.8

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-12 16:42:04 -07:00
Khem Raj 9583c6c401 netperf: Fix build with std=gnu23
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-12 16:42:04 -07:00
Khem Raj 90609e9751 libwebsockets: Add missing dep on libcap when ssl is enabled
Disable tests, they do not build in cross-build environment

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-11 10:52:40 -07:00
Khem Raj 476b8eb5eb log4c: convert K&R function declarations to ANSI C prototypes
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-11 08:44:33 -07:00
Khem Raj f76f6ebdd1 dlt-daemon: Fix build with clang-22
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-11 08:44:33 -07:00
Gyorgy Sarvari dd885c12e4 samba: upgrade 4.19.9 -> 4.23.5
Samba has a new build-time dependency, libquic[1]. The repository
builds an out-of-tree  kernel module and a regular userspace library
with the same build script, however the Makefile seems to be fairly
hostile to cross-compilation. The Samba tarball also vendors the
same with their own build script - for now, this venodred version is used.

There are some efforts that the kernel part is mainlined[2], once it
happens it should be possible to easily remove this from the recipe.

pyldb was removed from RDEPENDS, as it seems that samba now builds its
own version of it.

Patches updated, unneeded patches dropped. Some patches contained a
considerable amount of whitespace changes - those were trimmed for
the ease of rebasing.

Changelog:
https://gitlab.com/samba-team/samba/-/blob/samba-4.23.5/WHATSNEW.txt?ref_type=tags
(Switch to other branches to see earlier changelogs)

[1]: https://github.com/lxin/quic/
[2]: https://github.com/lxin/net-next/commits/quic/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-11 08:44:33 -07:00
Wang Mingyu dd14e74e49 minizip: upgrade 1.3.1 -> 1.3.2
License-Update: "Version 1.1, February 14h, 2010" removed

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-04-11 08:44:33 -07:00
Khem Raj 7eed950126 libtar: Fix build with clang-22 -std=gnu23
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-11 08:44:32 -07:00
Khem Raj 0bdda372d4 cyrus-sasl: Fix build with std=gnu23
clang has dropped K&R style with std=c23

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:50 -07:00
Martin Jansa a8e0bd4d84 audit: fix build with autoconf-2.73
On hosts with gcc-13 it was trying to use -std=gnu23 and failing
with unrecognized command-line option (gnu23 needs gcc-14 and newer)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:50 -07:00
Wang Mingyu da03a64bd7 dovecot: Fix checksum mismatch
Update the sha256sum to match the current upstream archive.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:50 -07:00
Changqing Li 92637ef9eb dlt-daemon: disable DLT_USE_IPv6
There is a bug when DLT_USE_IPv6 enabled, refer [1].  This make
dlt-adaptor-udp.service startup failed with error "Bind: Invalid
argument".  Disable DLT_USE_IPv6 to workaround the issue

[1] https://github.com/COVESA/dlt-daemon/issues/849

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:49 -07:00
Changqing Li 563b91e5ca dlt-daemon: fix wrong CONFIGURATION_FILES_DIR
The not aligned value of CONFIGURATION_FILES_DIR makes the configuration
file install path is different with the default configuration file path
from where the application to read, then make the service dlt/dlt-system
not works well.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:49 -07:00
Li Zhou 389cf85390 python3-pytest-runner: remove using pkg_resources
The python3 setuptools 82 dropped pkg_resources module by now.
To avoid the failure "No module named 'pkg_resources'", replace the
functions from this module with other functions from modules
packaging and importlib.metadata.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:49 -07:00
Jason Schonberg abf8a5cfec php: upgrade 8.5.4 -> 8.5.5
This is a bug fix release.

Changelog: https://www.php.net/ChangeLog-8.php#8.5.5

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:49 -07:00
Zhang Peng 73b3a1a53b python3-pytest-codspeed: upgrade 3.0.0 -> 4.3.0
Remove explicit python3-hatchling-native from DEPENDS since it is
automatically added when inheriting python_hatchling.

Add python3-cffi-native to DEPENDS since v4.0.0 introduced
CodSpeedHQ/instrument-hooks which uses cffi FFI bindings at
build time.

Changelog:
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.3.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.2.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.1.1
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.1.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.0.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.2.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.2
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.1
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.0

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:49 -07:00
Khem Raj 7ef73b7db8 freeradius: Update to latest on 3.2 release
Drop backports which are already in this SHA update
Add -DTLS_STORAGE_CLASS=__thread via cflags

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:49 -07:00
Gargi Misra dd96b8a81e Revert "refpolicy-targeted: Added sepolicy for adb service"
This reverts commit 00616ccdaf.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 08:03:23 -07:00
Gargi Misra b9399b33ef Revert "refpolicy-targeted: Add sepolicy for adb service"
This reverts commit 801addc528.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 08:03:23 -07:00
Peter Marko ecd5f090e8 libvarlink: add new recipe
Varlink C library and command line tool.

Remove unuseful vim integration.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 08:03:23 -07:00
Peter Marko d8726e8917 mjansson-mdns: add new recipe
Public domain mDNS/DNS-SD library in C

Add github namespace to recipe name and handle it in CVE_PRODUCT because
there already is a different mdns recipe in meta-openembedded.

Example application is built but not installed.
This is good to verify that current toolchain is copatible with headers.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 08:03:23 -07:00
Peter Marko e820a14e07 ttyd: add new recipe
ttyd is a simple command-line tool for sharing terminal over the web.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 08:03:23 -07:00
Peter Marko 7c62c49ef4 crow: add new recipe
Crow is a C++ framework for creating HTTP or Websocket web services.

Disable tests as they are using CPM (Cmake Dependency Manager), which
would be downloading the test dependencies in configuration step.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 08:03:22 -07:00
Khem Raj 69b6ae56b7 ostree: Fix build with C23/glibc-2.43
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:59 -07:00
Leon Anavi 7127c15a01 python3-yappi: Upgrade 1.7.3 -> 1.7.6
Upgrade to release 1.7.6:

- Fix VERSION file missing from source distribution (sdist)

>From 1.7.5:

- Fix callgrind export producing duplicate entries for top-level
  functions
- Fix various edge cases
- Add limit parameter to print_all
- Fix file reading to use UTF-8 encoding

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:59 -07:00
Leon Anavi 79bff37b73 python3-charset-normalizer: Upgrade 3.4.6 -> 3.4.7
Upgrade to release 3.4.7:

- Pre-built optimized version using mypy[c] v1.20.
- Relax setuptools constraint to setuptools>=68,<82.1.
- Correctly remove SIG remnant in utf-7 decoded string.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:59 -07:00
Leon Anavi eb59d62c00 python3-aiofiles: Upgrade 24.1.0 -> 25.1.0
Upgrade to release 25.1.0:

- Switch to uv + add Python v3.14 support.
- Add ruff formatter and linter.
- Drop Python 3.8 support. If you require it, use version 24.1.0.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:59 -07:00
Yi Zhao 6b88305138 netplan upgrade 1.1.2 -> 1.2.1
ChangeLog:
https://github.com/canonical/netplan/releases/tag/1.2
https://github.com/canonical/netplan/releases/tag/1.2.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:59 -07:00
Bartosz Golaszewski 7e24f2b5a8 python3-gpiod: update to v2.4.2
Bug-fix release addressing a buffer overflow bug discovered during an
AI-augmented security audit as well as another minor issue with
unnecessarily duplicated code.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:58 -07:00
Bartosz Golaszewski f2c5f3fadc libgpiod: update to v2.2.4
Bug-fix release addressing several issues discovered during an
AI-augmented security audit. The most severe bug was found in the C
extension code of the python bindings - which also get an update - but
there were some memory leaks and integer overflow bugs in the core C
library as well as in tools and DBus daemon.

Full changelog:

Bug fixes:
- fix buffer over-read bugs when translating uAPI structs to library types
- fix variable and argument types where necessary
- sanitize values returned by the kernel to avoid potential buffer overflows
- fix memory leaks in gpio-tools
- add missing return value checks in gpio-tools
- fix period parsing in gpio-tools
- use correct loop counter in error path in gpio-manager

Improvements:
- make tests work with newer coreutils by removing cases checking tools'
  behavior on SIGINT which stopped working due to changes in behavior of the
  timeout tool

Also: drop the patch that's now upstream from the recipe.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:58 -07:00
Wang Mingyu ffb7d752ff upower: upgrade 1.91.1 -> 1.91.2
Changelog:
===========
- Feature: Skip the systemd inhibitor when performing CriticalPowerAction
- Feature: Introduce "Auto" CriticalPowerAction using systemd-logind Sleep()
- Fix: Test CanPowerOff() availability before calling PowerOff()
- Fix: Add charge limit support for systems providing only charge_control_end_threshold

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:58 -07:00
Wang Mingyu 56e3346fa0 swagger-ui: upgrade 5.32.1 -> 5.32.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:58 -07:00
Wang Mingyu 8b19fe181e spectre-meltdown-checker: upgrade 0.46 -> 26.26.0404682
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:58 -07:00
Wang Mingyu 5420abfbc4 rtorrent: upgrade 0.16.8 -> 0.16.9
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:58 -07:00
Wang Mingyu d8c310aa52 python3-werkzeug: upgrade 3.1.7 -> 3.1.8
Request.host and get_host return the empty string if the header is missing or has invalid characters.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu 36111dde1a python3-tzdata: upgrade 2025.3 -> 2026.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu ad83f5541f python3-types-psutil: upgrade 7.2.2.20260130 -> 7.2.2.20260408
Changelog:
===========
- Use dashes instead of underscores for METADATA.toml field names
- Update most test/lint dependencies
- Update mypy to 1.20.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu 11a2e0a7b4 python3-sqlalchemy: upgrade 2.0.48 -> 2.0.49
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu f3cad077fc python3-snagboot: upgrade 2.6 -> 2.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu 882dc303c9 python3-sentry-sdk: upgrade 2.56.0 -> 2.57.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu 1813d9138c python3-regex: upgrade 2026.3.32 -> 2026.4.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu edb96b0670 python3-python-multipart: upgrade 0.0.22 -> 0.0.24
Changelog:
============
- Validate chunk_size in parse_form()
- Remove unused trust_x_headers parameter and X-File-Name fallback
- Return processed length from QuerystringParser._internal_write
- Cleanup metadata dunders from __init__.py

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu b5fb673c18 python3-pandas: upgrade 3.0.1 -> 3.0.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00