Commit Graph
40618 Commits
Author SHA1 Message Date
Ankur Tyagi 568c569c2f tinyproxy: patch CVE-2026-31842
Backport commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-31842

[1]https://security-tracker.debian.org/tracker/CVE-2026-31842

(cherry picked from commit 985acd9e7c)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:15 -07:00
Ankur Tyagi d015851ed9 libyang: patch CVE-2026-41401
Backport patch identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-41401

[1]https://security-tracker.debian.org/tracker/CVE-2026-41401

(cherry picked from commit 6b06704ac1)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:14 -07:00
Ankur Tyagi 2c888ebe75 miniupnpd: patch CVE-2026-107159
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-107159

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:14 -07:00
Ankur Tyagi 0f8cf2b6f7 libiec61850: mark CVE-2024-45969 patched
NVD[1] mentions commit[2] for v1.5 but is also present in v1.6[3]

[1] https://nvd.nist.gov/vuln/detail/cve-2024-45969
[2] https://github.com/mz-automation/libiec61850/commit/7afa40390b26ad1f4cf93deaa0052fe7e357ef33
[3] https://github.com/mz-automation/libiec61850/commit/d1ab50298fcba3f87b1e58dabff92f8615b14ee7

(cherry picked from commit a7088b0fda)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:14 -07:00
Ankur Tyagi 796a3d4adb hdf5: patch CVE-2026-19025
Backport patch from the PR[1] fixing the issue[2] mentioned in the NVD[3].

[1] https://github.com/HDFGroup/hdf5/pull/6508
[2] https://github.com/HDFGroup/hdf5/issues/6491
[3] https://nvd.nist.gov/vuln/detail/cve-2026-19025

(cherry picked from commit df3f814ab8)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:14 -07:00
Ankur Tyagi 0cdf123177 hdf5: patch CVE-2026-17574
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-17574

(cherry picked from commit 637f437de9)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:14 -07:00
Ankur Tyagi 5ac7a070e3 hdf5: patch CVE-2026-17573
Backport patch from the PR[1] fixing the issue[2] mentioned in the NVD[3].
Debian[4] has also identified the commit.

[1] https://github.com/HDFGroup/hdf5/pull/6160
[2] https://github.com/HDFGroup/hdf5/issues/6124
[3] https://nvd.nist.gov/vuln/detail/cve-2026-17573
[4] https://security-tracker.debian.org/tracker/CVE-2026-17573

(cherry picked from commit f46990293c)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:14 -07:00
Ankur Tyagi 5468d43cbd hdf5: patch CVE-2026-17572
Backport patch from the PR[1] fixing the issue[2] mentioned in the NVD[3].
Debian[4] has also identified the commit.

[1] https://github.com/HDFGroup/hdf5/pull/6499
[2] https://github.com/HDFGroup/hdf5/issues/6501
[3] https://nvd.nist.gov/vuln/detail/cve-2026-17572
[4] https://security-tracker.debian.org/tracker/CVE-2026-17572

(cherry picked from commit c279e9e688)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:14 -07:00
Ankur Tyagi ed7807e83b python3-gunicorn: mark CVE-2024-1135 patched
Debian[1] also identified the commit.

Details:
https://nvd.nist.gov/vuln/detail/cve-2024-1135

[1]https://security-tracker.debian.org/tracker/CVE-2024-1135

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:41 -07:00
Ankur Tyagi 2873762621 wolfssl: mark CVEs patched
CVE-2023-6937[1] and CVE-2024-5814[2] are patched in current version.

Details:
https://nvd.nist.gov/vuln/detail/cve-2023-6937
https://nvd.nist.gov/vuln/detail/cve-2024-5814

[1]https://github.com/wolfSSL/wolfssl/blob/v5.6.6-stable/ChangeLog.md#vulnerabilities
[2]https://github.com/wolfSSL/wolfssl/blob/v5.7.2-stable/ChangeLog.md#vulnerabilities

(cherry picked from commit c12fcc9b48)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:41 -07:00
Ankur Tyagi 58ca5eac91 iniparser: mark CVE-2025-0633 pached
Also mentioned in the release notes[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2025-0633

[1] https://gitlab.com/iniparser/iniparser/-/releases/v4.2.6

(cherry picked from commit 86fba2b580)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:41 -07:00
Ankur Tyagi bef03c1c45 gerbera: ignore CVE-2025-23386
Details:
https://nvd.nist.gov/vuln/detail/cve-2025-23386

This vulnerability is due to openSUSE specific packaging issue.

(cherry picked from commit 369d962967)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:41 -07:00
Ankur Tyagi 34576300e0 gpm: ignore CVE-2025-4558
Details:
https://nvd.nist.gov/vuln/detail/cve-2025-4558

(cherry picked from commit e134adc8f3)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:41 -07:00
Ankur Tyagi 997a8ab5af haveged: ignore CVE-2026-41054
Debian[1] also confirms the fixed version.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-41054

[1] https://security-tracker.debian.org/tracker/CVE-2026-41054

(cherry picked from commit 086a780db0)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:40 -07:00
Ankur Tyagi 0b890c4745 dool: patch CVE-2026-56652
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56652

(cherry picked from commit 53bbf2771b)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:40 -07:00
Ankur Tyagi 0a807241ff dool: patch CVE-2026-56651
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56651

(cherry picked from commit 2e1445decd)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:40 -07:00
Ankur Tyagi 567dad7713 bcc: correct CVE_PRODUCT mapping
Use "iovisor:bpf_compiler_collection", the exact NVD identity for the
https://github.com/iovisor/bcc source.

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:40 -07:00
Ankur Tyagi 13d46c5cb2 gpsd: patch CVE-2026-58459
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-58459

(cherry picked from commit 57e1f7d3d2)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:40 -07:00
Ankur Tyagi 6ed50c8a2b eject: ignore CVE-2026-28065
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-28065

(cherry picked from commit e6d111c169)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:40 -07:00
Ankur Tyagi ead8f70fa6 dovecot: ignore already fixed CVEs
Upstream has confirmed that these vulnerabilities are fixed,
and Debian has also identified the relevant commits:

CVE-2025-59028: https://security-tracker.debian.org/tracker/CVE-2025-59028
CVE-2025-59032: https://security-tracker.debian.org/tracker/CVE-2025-59032
CVE-2026-27859: https://security-tracker.debian.org/tracker/CVE-2026-27859
CVE-2026-27851: https://security-tracker.debian.org/tracker/CVE-2026-27851
CVE-2026-33603: https://security-tracker.debian.org/tracker/CVE-2026-33603
CVE-2026-40016: https://security-tracker.debian.org/tracker/CVE-2026-40016
CVE-2026-40020: https://security-tracker.debian.org/tracker/CVE-2026-40020
CVE-2026-42006: https://security-tracker.debian.org/tracker/CVE-2026-42006

(cherry picked from commit 86a9ad852a)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:39 -07:00
Ankur Tyagi 187e2890da civetweb: ignore CVE-2026-5789
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-5789

(cherry picked from commit db080436aa)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:39 -07:00
Ankur Tyagi 52ef4850f4 capnproto: ignore CVE-2026-59704
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-59704

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:39 -07:00
Johannes Schneider 3de9f29b7f imx-cst: restore PKCS#11 signing on OpenSSL 4 via the provider
0015-fix-openssl-4-engine-api-removal made CST build against OpenSSL 4 by
stubbing out the removed ENGINE API, but left PKCS#11-backed signing broken:
ENGINE_by_id("pkcs11") returns NULL, so engine_ctx_init() fails. Add a patch
that reimplements the pkcs11 certificate and key loading on OSSL_STORE and the
pkcs11 provider (pkcs11-provider), restoring HSM/token-backed signing on
OpenSSL 4. OpenSSL 3 builds are unaffected.

Assisted-by: Claude:claude-opus-4-8
Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 11:03:51 -07:00
Ankur Tyagi cf030e73b8 apache2: upgrade 2.4.68 -> 2.4.69
Changelog:
https://downloads.apache.org/httpd/CHANGES_2.4.69

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-10 06:12:32 -07:00
Ross Burton 4d617d1b20 python3-pytz: add recipe (from oe-core)
This recipe is being removed from core as it is now deprecated and no
longer needed with Python 3.9 onwards, which integrated the zoneinfo
module.

All users of pytz in meta-python should be reviewed as the dependencies
may be obsolete.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:43 -07:00
Markus Volk 9c32badf01 gtkmm4: upgrade 4.22.0 -> 4.24.0
GdkCursor became a final type in GTK 4.24, so gtkmm 4.22 no longer
compiles against it:

  error: conflicting declaration 'using GdkCursorClass = struct _GdkCursorClass'

Depends on the gtk4 4.24.0 upgrade in oe-core.

AI-Generated: Uses Claude Code (Claude Opus 5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:43 -07:00
Vaibhav Jindal b7c86d875d meta-oe: update benchmark patch metadata
Add missing Signed-off-by tags to benchmark package patches and
update Upstream-Status annotations where appropriate.

Mark the coremark-pro toolchain override patch as OE-specific
cross-compilation support, update the unixbench patch to reflect
that it is needed for the OpenEmbedded runtime packaging model,
and add the missing Signed-off-by tag to the wrk2 patch.

Signed-off-by: Vaibhav Jindal <vaibjind@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:42 -07:00
Etienne Cordonnier ec5c55a1b9 android-tools: make adbd fs_config opt-in via PACKAGECONFIG
On non-Android builds should_use_fs_config() in adbd's
file_sync_service.cpp unconditionally returns true, so every
`adb push` destination, including paths under /data, is routed through
Android's fs_config tables. Those tables have a catch-all directory entry
for "data" (mode 0771, AID_SYSTEM) but no equivalent file entry, so a
freshly pushed directory and the file inside it end up with inconsistent
owners, and non-root/system processes can't list the directory.

On non-Android builds should_use_fs_config() now returns false by
default: adbd then honours the mode sent by the host and leaves
ownership untouched.

Add a "fs-config" PACKAGECONFIG (disabled by default) which defines
ADBD_USE_FS_CONFIG and re-enables fs_config, scoped to /system, /vendor
and /oem, for BSPs that rely on it.

Behaviour change: fs_config is no longer applied on non-Android builds
unless PACKAGECONFIG contains "fs-config".

AI-Generated: Uses Claude Code (Claude Sonnet 5.5)

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:42 -07:00
Bastian Krause 46fad8b381 pcsc-lite: create pcscd user and group also via useradd
The recipe currently only does this via systemd-sysusers. This does not
work for read-only root filesystems, though. So use useradd to create
the pcscd user and group.

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:42 -07:00
Peter Marko 201c25456e libwebsockets: upgrade 4.5.8 -> 5.0.0
Release notes: [1]

Solves (at least) CVE-2026-19773 and CVE-2026-78161.
[2] claims that there are many security fixes available.

Drop patch included in this release.
Drop LIB_SUFFIX which now only throws deprecation warning.
Disable WERROR to keep build green.

Add new option http3 to packageconfig and disable it as it cannot use
openssl which is now enabled for ssl package option.
It can be used together with openssl for ssl and gnutls for https but
that would be weird.
Added possibility to switch gnutls as SSL backend.

License-Update: Addend additional files [3]

[1] https://github.com/warmcat/libwebsockets/blob/v5.0.0/README.md?plain=1#L29
[2] https://github.com/warmcat/libwebsockets/commit/ed1d8f3bc5b7772f283f05d77dec3b4ced0c95b3
[3] https://github.com/warmcat/libwebsockets/commit/a64f8d72c7442d8a982cce5fc0754d87c8db7ee7

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:42 -07:00
Martin Hundebøll 3e423e21e5 polkit: enable the agent helper socket
The polkit agent helper socket is is used for authorization requests
from (among others) systemd applications that requires administrative
privileges. When available, the polkit-agent-helper-1 executable doesn't
need the setuid bit for authorization to work.

Enable authorization without requiring setuid by configuring the systemd
bbclass to enable the polkit agent helper socket at package install
time.

For the enablement to actually happen, the SYSTEMD_AUTO_ENABLE variable
is changed back to (its default) enable value. This is okay, since it
was originally assigned to not enable the polkit.service unit. That unit
doesn't include an install section, so it cannot be enablet.

Signed-off-by: Martin Hundebøll <martin@geanix.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:42 -07:00
Markus Volk 57eb41f43d kmscon: upgrade 10.0.1 -> 10.0.4
Drop the pty patch, the problem is fixed upstream since 10.0.2.
Refresh the platform GPU patch to the version merged upstream,
which also excludes USB displays from the primary GPUs. Backport the
libseat build fix, 10.0.4 does not build with libseat otherwise.
Tested on a Raspberry Pi 4 with gpus=primary.

License-Update: COPYING now states that the Unifont font is licensed
under OFL-1.1 instead of GPL, drops the third-party notices for the
dbus-loop, wcwidth and vt.c code and updates the path of the htable
code to src/shl/htable.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:42 -07:00
Thorsten Schmelzer 1ffc422c40 lvgl-demo-fb: update defconfig
Update the defconfig to use more linux default settings. Most
settings are imported from the get_started.defconfig from the source
repository. This includes the following changes:
- use libc based malloc, string, sprintf
- use OS based pthread implementation
- include fonts
- include performance monitor
- remove CONFIG_LV_MEM_SIZE_KILOBYTES, not necessary when using libc
  memory management
- set refresh period to 16 ms (60 FPS max)
- increase LV_DRAW_LAYER_SIMPLE_BUF_SIZE and LV_DRAW_THREAD_STACK_SIZE

Signed-off-by: Thorsten Schmelzer <t.schmelzer@phytec.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:42 -07:00
Thorsten Schmelzer 11d7a35275 lvgl-demo-fb: Update to 9.6.0
Drop setting KCONFIG_CONFIG_ROOTDIR to the lvgl subfolder. The demo repo
has now its own Kconfig file.

Signed-off-by: Thorsten Schmelzer <t.schmelzer@phytec.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:41 -07:00
Thorsten Schmelzer 8ae75b7ad6 lvgl: lv-conf.inc: add wayland packageconfig
Add the possibility to use wayland as lvgl backend. Add a config snippet
to enable wayland and add the necessary dependencies. The lvgl cmake
needs SYSROOT to be set to RECIPE_SYSROOT to find the wayland protocols.

Signed-off-by: Thorsten Schmelzer <t.schmelzer@phytec.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:41 -07:00
Thorsten Schmelzer 916651ab0d lvgl: Update defconfig
Update the defconfig to use Linux default settings. Settings are taken
from the linux.defconfig from the source repository. This includes the
following changes:
- use libc based malloc, string, sprintf. Using libc based memory
  allocation eliminates the risk that the lvgl application runs out of
  memory because of fixed internal memory size.
- use OS based pthread implementation
- set refresh period to 16 ms (60 FPS max)
- increase LV_DRAW_LAYER_SIMPLE_BUF_SIZE and
  CONFIG_LV_DRAW_THREAD_STACK_SIZE

Signed-off-by: Thorsten Schmelzer <t.schmelzer@phytec.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:41 -07:00
Thorsten Schmelzer 2bb57b5d81 lvgl: Update to 9.6.0
Add pkgconfig inherit and drop manually adding include paths to CFLAGS
and CXXFLAGS. The lvgl cmake can handle this meanwhile.

Add a patch to fix missing version and links for installed .so files.

Signed-off-by: Thorsten Schmelzer <t.schmelzer@phytec.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:41 -07:00
Markus Volk 8056cc2aa9 libtsm: upgrade 4.7.1 -> 4.8.0
kmscon 10.0.4 requires libtsm 4.8.0.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:41 -07:00
Ankur Tyagi 67eb8c7bfc fluentbit: upgrade 5.1.2 -> 5.1.3
Refresh 0001-lib-Do-not-use-private-makefile-targets-in-CMakelist.patch

Changelog:
https://github.com/fluent/fluent-bit/releases/tag/v5.1.3

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:41 -07:00
Ankur Tyagi 192d012d9a pgpool2: upgrade 4.7.2 -> 4.7.3
Changelog:
https://www.pgpool.net/docs/latest/en/html/release-4-7-3.html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:40 -07:00
Ankur Tyagi 92defc3fb1 freeipmi: upgrade 1.6.19 -> 1.6.20
- The format specifier %h was used for two different format fields.
  Use %H as target host specifier.
- Fix minor output errors in Intel Node Manager DIMMs and Windmill
  device IDs.
- Fix ipmi-oem command line parsing bugs.
- In ipmi-oem, fix error in with wistron get/set-ipv6-trap-settings.
- In ipmi-oem, fix output error in dell get-system-info cmc-info.
- In libipmidetect fix potential hostname sscanf bound overflow.
- In ipmi-oem fujitsu get-sel-entry-long-text, fix potential memory
  buffer overflow.
- Fix ipmiconsole workaround flag parsing issues.
- Fix minor libfreeipmi corner cases (e.g. parameter input corner cases).
- Fix minor SEL output corner cases in several OEM vendors.
- Fix libfreeipmi macro inconsistencies / errors.
- Minor documentation fixes.

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:40 -07:00
Ankur Tyagi 3fe4c22474 smarty: upgrade 5.8.4 -> 5.8.5
Changelog:
https://github.com/smarty-php/smarty/releases/tag/v5.8.5

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:40 -07:00
Ankur Tyagi dae1e050ed upower: upgrade 1.91.4 -> 1.91.5
Changelog:
https://gitlab.freedesktop.org/upower/upower/-/blob/v1.91.5/NEWS?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:40 -07:00
Ankur Tyagi 1b1057cf48 python3-cmake: upgrade 4.4.3 -> 4.4.4
Changelog:
https://github.com/scikit-build/cmake-python-distributions/releases/tag/4.4.4

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:40 -07:00
Ankur Tyagi 486ef820db python3-astroid: upgrade 4.3.2 -> 4.3.3
Changelog:
https://github.com/pylint-dev/astroid/releases/tag/v4.3.3

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:40 -07:00
Ankur Tyagi 91320f5638 python3-aiohttp: upgrade 3.14.3 -> 3.14.4
Refer to changelog for removals and backward incompatible breaking changes.

Changelog:
https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:39 -07:00
Ankur Tyagi c39562d398 python3-django: upgrade 6.0.8 -> 6.0.9
Changelog:
https://docs.djangoproject.com/en/dev/releases/6.0.9/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:39 -07:00
Ankur Tyagi 0640fa901d python3-django: upgrade 5.2.17 -> 5.2.18
Changelog:
https://docs.djangoproject.com/en/dev/releases/5.2.18/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:39 -07:00
Ankur Tyagi 01bd918ea8 python3-tzdata: upgrade 2026.4 -> 2026.5
Changelog:
https://github.com/python/tzdata/releases/tag/2026.5

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:39 -07:00
Ankur Tyagi 92fff73409 python3-zeroconf: upgrade 0.151.3 -> 0.151.5
Changelog:
https://github.com/python-zeroconf/python-zeroconf/releases/tag/0.151.4
https://github.com/python-zeroconf/python-zeroconf/releases/tag/0.151.5

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:39 -07:00