Commit Graph

14815 Commits

Author SHA1 Message Date
Leon Anavi 5f6094aee0 ssd1306: Update to newer version
Update to the latest version of the source code in GitHub:

- Use snprintf to replace strncpy without null string at last

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c8ef8ccd8d)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Wang Mingyu 13cf5df3ea tk: upgrade 9.0.1 -> 9.0.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b3adc834d1)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Yi Zhao 01b157a564 tk8: upgrade 8.6.15 -> 8.6.17
ChangeLog:
  2024-12-19 (bug) [844c0b] Menu entry underline does not consider
             activeborderwidth
  2025-01-03 (bug) [13ac26] wm iconbitmap does not correctly set the
             icon pixmap hint on macOS
  2025-01-27 (bug) [080a28] Aqua: tk_getOpenFile crash
  2025-01-28 (bug) [c99266] console menu zh_cn translations
  2025-03-17 (bug) [159aa5] MS-Win: Incorrect system menu entries for
             transient toplevels
  2025-03-17 (bug) [91d0e9] MS-Win: Withdrawn Tk transient windows can
             reappear in Windows taskbar preview
  2025-04-26 (bug) [111f66] Aqua: cannot iconify all windows
  2025-05-17 (bug) [7231bf99] Setting ttk state may change the variable
             passed by value
  2025-05-29 (feature) [17b509] Win: support PNG images in icon files.
  2025-06-01 (bug) [5d0bc3] block cursor size on a tab is too large
  2025-07-03 (bug) [6b0f77] gcc 14 breaks configure test for bigendian
             leading to broken floating point
  2025-07-14 (bug) [d25b72] error popup on ttk::scale with invisible
             trough
  2025-07-16 (bug) [770fa0]  loading windows dll's in Cygwin doesn't
             work with high-entropy-va
  2025-07-25 (bug) [3d13f8,e90e8c] Aqua: dark mode improvements
  2025-07-25 (bug) [e94c8b] interop with clipboard managers
  2025-08-11 (bug) [dc38c9] Aqua: NSHighResolutionCapable should be a
             Boolean value
  2025-08-11 (bug) [4e1e10] Aqua: CGRect/NSRect type mismatch on 32-bit

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3564ff8f30)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Wang Mingyu 2070d3316f valijson: upgrade 1.0.5 -> 1.0.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 108183d40f)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Wang Mingyu d96df0a9c5 valijson: upgrade 1.0.4 -> 1.0.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit dd018dabf8)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Wang Mingyu cf356329ae mm-common: upgrade 1.0.6 -> 1.0.7
License-Update:
 - signature "Ty Coon" changed to "Moe Ghoul"
 - modify the whitespace

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fbf96a5bdd)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Jason Schonberg a3ec67d2ce Remove the use of http://ftp.gnome.org/pub/gnome
Use https://download.gnome.org instead.

In SRC_URI where the reference is https://download.gnome.org/sources
${GNOME_MIRROR} can be substituted.

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a9b7b0113d)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Wang Mingyu c105150e0c ser2net: upgrade 4.6.4 -> 4.6.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6cb5569898)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Wang Mingyu c85fd40c11 libimobiledevice-glue: upgrade 1.3.1 -> 1.3.2
Changelog:
=============
- socket: [macOS] Fix build on older macOS
- socket: [Windows] Prevent crash by properly initializing memory buffers
- Switch to better initializer strategy
- Fix compilation on MSVC
- Add extern "C" guards to public headers
- socket: Improve error message output/verbose logging
- socket: [Windows] Make sure errno is set in error conditions
- socket: Allow setting debug level via environment variable
- socket: [Windows] Use WSAAddressToStringA (ANSI version)
- socket: [Windows] Use inet_ntop instead of WSAAddressToStringA for >= Vista

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0be8ef7617)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Peter Kjellerstedt 90c18d88a7 hostapd: Backport a patch to build SAE-PK correctly
SAE-PK needs base64_decode(), but if no other feature is enabled that
needs base64 support, then it is missing.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c9922073e4)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Wang Mingyu 47989d62a5 gensio: upgrade 2.8.7 -> 2.8.15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9a9564afe2)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Gyorgy Sarvari 7fa2585dee tokyocabinet: fix license
The application is distributed under the LGPL license, not GPL.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Gyorgy Sarvari a3b09a0a8a tokyocabinet: switch to working SRC_URI
The original source seems to be long gone.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Gyorgy Sarvari 2959a76181 pm-qa: update git fetch protocol
Apparently the git repo in the SRC_URI stopped supporting git
protocol. Switch to https to be able to fetch the source successfully.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Sunil Dora 1915f0442c layer.conf: add bpftrace to NON_MULTILIB_RECIPES
bpftrace need line up with kernel architecture type,
so add it to NON_MULTILIB_RECIPES.

bpftrace must be built with the same architecture (32-bit/64-bit) as the kernel
to ensure compatibility when tracing kernel functions and using eBPF features.

(cherry-picked from f8498f2699 in master )

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Ankur Tyagi 739baff583 lsscsi: fix versioning
PE bump is needed because previous PV "030" > current PV "0.32"

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Changqing Li dd477d1633 lsscsi: upgrade to version 0.32
Upstream changelogs:
https://sg.danny.cz/scsi/lsscsi.ChangeLog

Changes in this commit are referenced from 51e410a84e.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 51e410a84e)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Mikko Rapeli a9d033d426 fwupd-efi: update from 1.6 to 1.7
Remove upstreamed patch.

https://github.com/fwupd/fwupd-efi/releases/tag/1.7

This release fixes the following bugs:

    Fix compilation with GNU-EFI 4.0

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b572fdf8e1)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Wang Mingyu 9ea05dc658 bolt: upgrade 0.9.6 -> 0.9.10
Changelog:
============
- Fix bolt exits when opening an empty version file
- Fix failure on integration test due to the change of the latest pygobject
- Several CI improvements and fixes.
- Fixed memory leak in boltctl
- The unused codes were removed from daemon
- Fixed a NULL syspath variable causes SIGSEGV
- A new NHI for REMBRANDT.
- CI fixes.
- Don't install an empty DB directory.
- Fixed: Determine the string length before writing file.
- Fixed: Free on error to prevent resource leak.
- Add a 'nopcie' security level since some devices report 'nopcie' when Thunderbolt
  is disabled through BIOS setting.
- Markdown lint styling is used for documents.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 98969e3b44)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Praveen Kumar 87f82e5f1d polkit: fix CVE-2025-7519
A flaw was found in polkit. When processing an XML policy with 32 or
more nested elements in depth, an out-of-bounds write can be triggered.
This issue can lead to a crash or other unexpected behavior, and
arbitrary code execution is not discarded. To exploit this flaw, a
high-privilege account is needed as it's required to place the
malicious policy file properly.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-7519

Upstream-patch:
https://github.com/polkit-org/polkit/commit/107d3801361b9f9084f78710178e683391f1d245

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 13:26:29 +02:00
Zoltán Böszörményi 2dd93e6068 gutenprint: 5.3.5
This fixes an installation error:

| make[5]: Entering directory '.../tmp/work/corei7-64-oe-linux/gutenprint/5.3.4/build/src/cups'
| chmod 700 .../tmp/work/corei7-64-oe-linux/gutenprint/5.3.4/image/usr/libexec/cups/backend/backend_gutenprint
| chmod: cannot access '.../tmp/work/corei7-64-oe-linux/gutenprint/5.3.4/image/usr/libexec/cups/backend/backend_gutenprint': No such file or directory

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 22:12:44 +02:00
Yoann Congal b4925dbf65 gutenprint: fix a build race-condition
Gutenprint install hooks run in parallel but depend on each other. This
is a race condition and might trigger a build failure (e.g on AB [0]):
| chmod 700 $WORKDIR/image/usr/libexec/cups/backend/backend_gutenprint
| chmod: cannot access '$WORKDIR/image/usr/libexec/cups/backend/backend_gutenprint': Not a directory
| make[5]: *** [Makefile:2166: install-exec-hook] Error 1

Fixes this by adding an explicit dependency between the dependent
targets.

[0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/46/steps/33/logs/stdio

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-23 13:21:25 +02:00
Jiaying Song 196cac5ad0 webkitgtk3: fix do_configure error on beaglebone-yocto
* According to latest comment [1] and the mentioned pull request [2],
  build an ENABLE(WEBASSEMBLY) && !ENABLE(JIT) configuration is
  supported, so original issue already fixed in current version, the
  EXTRA_OECMAKE setting is not needed anymore.

* This EXTRA_OECMAKE setting causes following configure error on
  beaglebone-yocto, remove the setting to let the configure process
  decide the configuration:
  CMake Error at Source/cmake/WebKitFeatures.cmake:312 (message):
  ENABLE_JIT conflicts with ENABLE_C_LOOP.You must disable one or the
  other.

[YOCTO #15254]

[1] https://github.com/WebKit/WebKit/pull/17447
[2] https://github.com/WebKit/WebKit/pull/17688

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 09:49:31 +02:00
Jiaying Song 78cc371eb8 webkitgtk3: fix build failure with DEBUG_BUILD enabled
It fails to compile webkitgtk when debug build enabled:

| /path_to//tmp/work/core2-64-poky-linux/webkitgtk3/2.48.1/webkitgtk-2.48.1/Source/bmalloc/libpas/src/libpas/bmalloc_heap_config.h:82:36:
  error: inlining failed in call to 'always_inline' 'pas_page_base* bmalloc_heap_config_page_header(uintptr_t)':
  function not considered for inlining
|    82 | PAS_BASIC_HEAP_CONFIG_DECLARATIONS(bmalloc, BMALLOC);
|       |

Add a cmake variable WEBKIT_NO_INLINE_HINTS to disable gcc function attribute `always_inline` when debug build is enabled.

And adjust indent as well.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 09:48:58 +02:00
Changqing Li e4688a5871 pahole: fix a Segmentation fault error
Command "pahole --btf_features=default -J" will segmentation fault when
kernel-dbg package is also installed.

$pahole --btf_features=default -J
pahole[599]: segfault at 8 ip 00007f7c92d819e2 sp 00007f7c799febe0
error 6 in libdwarves.so.1.0.0[189e2,7f7c92d72000+1c000] likely on CPU 0
(core 0, socket 0)
Code: 74 19 ff ff 48 39 dd 75 ef 4c 89 ef e8 67 19 ff ff 49 8b 7c 24 18
e8 8d 13 ff ff 49 8b 14 24 49 8b 44 24 08 4c 89 e7 45 31 e4 <48> 89 42
08 48 89 10 e8 42 19 ff ff e9 30 ff ff ff e8 58 0a ff ff
Segmentation fault (core dumped)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 09:02:42 +02:00
Praveen Kumar 4f1f7f89f5 fix: CVE-2025-53644
OpenCV is an Open Source Computer Vision Library. Versions prior to
4.12.0 have an uninitialized pointer variable on stack that may lead
to arbitrary heap buffer write when reading crafted JPEG images.
Version 4.12.0 fixes the vulnerability.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-53644

Upstream-patch:
https://github.com/opencv/opencv/commit/a39db41390de546d18962ee1278bd6dbb715f466

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 09:01:44 +02:00
Gyorgy Sarvari cecc91c084 ledmon: fix building on 32-bit x86
Building the recipe on x86 platform fails with the following error:
| ../../git/src/utils.c: In function 'get_uint64':
| ../../git/src/utils.c:105:18: error: passing argument 1 of 'str_toul' from incompatible pointer type [-Wincompatible-pointer-types]
|   105 |         str_toul(&defval, p, NULL, 16);

Upstream has already changed this function to avoid overflow due to the
size difference in the pointer - this change backports that patch.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-14 16:50:04 +02:00
Martin Jansa eabddce219 libiodbc: use gnu17 and ignore incompatible-pointer-types to allow building with gcc-15
A fix was sent in:
https://lists.openembedded.org/g/openembedded-devel/message/116537
but it causes issues with clang as well as older gcc as reported on
ML and also in upstream PR:
https://github.com/openlink/iODBC/pull/111

Use gnu17 until this is properly resolved to avoid:
http://errors.yoctoproject.org/Errors/Details/852861/

In file included from ../../libiodbc-3.52.16/iodbc/execute.c:94:
../../libiodbc-3.52.16/iodbc/execute.c: In function '_ReBindParam':
../../libiodbc-3.52.16/iodbc/execute.c:643:49: error: too many arguments to function 'hproc3'; expected 0, have 8
  643 |       CALL_DRIVER (pstmt->hdbc, pstmt, retcode, hproc3,
      |                                                 ^~~~~~

http://errors.yoctoproject.org/Errors/Details/853276/
../../libiodbc-3.52.16/iodbcinst/unicode.c: In function 'dm_AtoUW':
../../libiodbc-3.52.16/iodbcinst/unicode.c:1565:16: error: initialization of 'ucs4_t *' {aka 'unsigned int *'} from incompatible pointer type 'wchar_t *' {aka 'long int *'} [-Wincompatible-pointer-types]
 1565 |   ucs4_t *us = dest;
      |                ^~~~

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-14 16:50:04 +02:00
Khem Raj 8832aa3ca8 gtkwave: Add libtirpc to depends
It was missing as the recipe is using --with-tirpc

Signed-off-by: Khem Raj <raj.khem@gmail.com>

Adapted for Walnascar
Signed-off-by: Gyorgy Sarvari <gyorgy.sarvari@gmail.com>
2025-09-07 14:32:50 +02:00
Hitendra Prajapati 5d0643f194 openjpeg: fix for CVE-2025-54874
Upstream-Status: Backport https://github.com/uclouvain/openjpeg/commit/f809b80c67717c152a5ad30bf06774f00da4fd2d

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Wang Mingyu bd42142b14 jq: upgrade 1.8.0 -> 1.8.1
License-Update: Add LICENSE notice of NetBSD's strptime() to COPYING

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Khem Raj d1b8b7e068 jq: Add tzdata to ptest rdeps
This is needed for some ptests to pass

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Marc Ferland 00b23ad771 libvncserver: fix generated LibVNCServerTargets.cmake
The currently generated LibVNCServerTargets.cmake will include the
following 'set_target_properties':

    set_target_properties(LibVNCServer::vncclient PROPERTIES
      INTERFACE_INCLUDE_DIRECTORIES "${_IMPORT_PREFIX}/include"
      INTERFACE_LINK_LIBRARIES "systemd;/usr/lib/libz.so;/usr/lib/liblzo2.so;/usr/lib/libjpeg.so;/usr/lib/libgcrypt.so;/usr/lib/libgnutls.so"
    )

INTERFACE_LINK_LIBRARIES here points to absolute paths which hardcodes
the library paths. From CMake doc [1]:

    Note that it is not advisable to populate the INTERFACE_LINK_LIBRARIES
    of a target with absolute paths to dependencies. That would hard-code
    into installed packages the library file paths for dependencies as
    found on the machine the package was made on.

This breaks krfb build (kde desktop sharing server) since CMake cannot
find these libraries. Removing the absolute paths solves the issue.

Note: I also added a 'inherit pkgconfig' since libvncserver uses it to
detect libsystemd presence.

1: https://cmake.org/cmake/help/latest/prop_tgt/INTERFACE_LINK_LIBRARIES.html

Signed-off-by: Marc Ferland <marc.ferland@sonatest.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2156942867)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Marc Ferland a2da0d25a0 freerdp3: add bindir to SYSROOT_DIRS
This is required in order to build krdp (KDE's remote desktop
integration).

The do_configure task for krdp expects both 'winpr-makecert3' and
'winpr-hash3' to be present, failure to do so results in:

| CMake Error at /path/to/krdp/6.4.4/recipe-sysroot/usr/lib/cmake/WinPR3/WinPRTargets.cmake:98 (message):
|   The imported target "winpr-makecert" references the file
|
|      "/path/to/krdp/6.4.4/recipe-sysroot/usr/bin/winpr-makecert3"
|
|   but this file does not exist.  Possible reasons include:
|
|   * The file was deleted, renamed, or moved to another location.
|
|   * An install or uninstall procedure did not complete successfully.
|
|   * The installation package was faulty and contained
|
|      "/path/to/6.4.4/recipe-sysroot/usr/lib/cmake/WinPR3/WinPRTargets.cmake"
|
|   but not all the files it references.
|
| Call Stack (most recent call first):
|   /path/to/krdp/6.4.4/recipe-sysroot/usr/lib/cmake/WinPR3/WinPRConfig.cmake:44 (include)
|   /path/to/krdp/6.4.4/recipe-sysroot-native/usr/share/cmake-3.31/Modules/CMakeFindDependencyMacro.cmake:76 (find_package)
|   /path/to/krdp/6.4.4/recipe-sysroot/usr/lib/cmake/FreeRDP3/FreeRDPConfig.cmake:2 (find_dependency)
|   CMakeLists.txt:45 (find_package)
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Marc Ferland <marc.ferland@sonatest.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6c30f47645)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Chen Qi 67d9f0fdaa protobuf: upgrade from 5.29.4 to 5.29.5
This is a small version bump. It includes to following two
commits to fix CVE-2025-4565.

  05ba1a810 Add recursion depth limits to pure python
  1ef3f01c4 Internal pure python fixes

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Jef Driesen 0cd6283a41 lcov: Add missing RDEPENDS for nativesdk
When building an SDK with lcov included, gcov isn't included in the SDK
by default. Running lcov to generate coverage fails, because it tries to
use the gcov binary from the host system instead and that cause problems
if the gcc versions do not match.

Signed-off-by: Jef Driesen <jefdriesen@telenet.be>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Yogita Urade 6841fa4ff5 postgresql: upgrade 17.5 -> 17.6
Includes fix for CVE-2025-8713, CVE-2025-8714, CVE-2025-8715

License-Update: Align organization wording in copyright statement

Changelog:
https://www.postgresql.org/docs/release/17.6/

Refreshed 0003-configure.ac-bypass-autoconf-2.69-version-check.patch
for 17.6

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Peter Marko 1e6dbd183b fontforge: patch CVE-2024-25081 and CVE-2024-25082
Pick commit from PR [1] linked from [2] and [3] which mlso entions both
these CVEs.

[1] https://github.com/fontforge/fontforge/pull/5367
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-25081
[3] https://nvd.nist.gov/vuln/detail/CVE-2024-25082

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Peter Marko ef46848da1 libbpf: patch CVE-2025-29481
Backport patch which mentions PoC [1] which is also linked from [2].

[1] https://github.com/libbpf/libbpf/commit/806b4e0a9f658d831119cece11a082ba1578b800
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-29481

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:56 +02:00
Wang Mingyu 9fb2e5ddd7 libssh: upgrade 0.11.1 -> 0.11.2
* Security:
   * CVE-2025-4877 - Write beyond bounds in binary to base64 conversion
   * CVE-2025-4878 - Use of uninitialized variable in privatekey_from_file()
   * CVE-2025-5318 - Likely read beyond bounds in sftp server handle management
   * CVE-2025-5351 - Double free in functions exporting keys
   * CVE-2025-5372 - ssh_kdf() returns a success code on certain failures
   * CVE-2025-5449 - Likely read beyond bounds in sftp server message decoding
   * CVE-2025-5987 - Invalid return code for chacha20 poly1305 with OpenSSL
 * Compatibility
   * Fixed compatibility with CPM.cmake
   * Compatibility with OpenSSH 10.0
   * Tests compatibility with new Dropbear releases
   * Removed p11-kit remoting from the pkcs11 testsuite
 * Bugfixes
   * Implement missing packet filter for DH GEX
   * Properly process the SSH2_MSG_DEBUG message
   * Allow escaping quotes in quoted arguments to ssh configuration
   * Do not fail with unknown match keywords in ssh configuration
   * Process packets before selecting signature algorithm during authentication
   * Do not fail hard when the SFTP status message is not sent by noncompliant
     servers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-07 07:37:55 +02:00
Jinfeng Wang ddaf16f1ca iperf3: Fix CVE-2025-54349
Pick commit [1] as listed in [2].

[1] https://github.com/esnet/iperf/commit/42280d2292ed5f213bfcb33b2206ebcdb151ae66
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-54349

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:42 +02:00
Jason Schonberg eb81fa0880 c-ares: backport a patch for a memory leak
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:37 +02:00
Yogita Urade 9eab4307c3 poppler: upgrade 25.06.0 -> 25.08.0
This upgrade includes fix for CVE-2025-50420.

poppler 25.08.0 changelog:
==========================
core:
* FormWidgetSignature::signDocumentWithAppearance: add imagePath parameter
* Fix parsing Distinguished Names that end with a hex string
* Fix crashes in malformed documents

glib:
* Add poppler_page_render_transparent_selection()
* Add missing since to the documentation

poppler 25.07.0 changelog:
==========================
core:
* Changed rendering of malformed documents to mimic what Adobe Reader does. Issue #1602
* Improvemenst in signature validation in the NSS backend
* Add more detailed output when signing fails
* Internal code improvements
* Fix crashes in malformed documents

utils:
* pdfsig: command line option for allowing PGP signatures in GnuPG backend

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:15 +02:00
Jiaying Song 4987555720 softhsm: switch source to GitHub repository
The original source URL is unavailable, so it has been replaced with the
official GitHub repository.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:15 +02:00
Jiaying Song 824c5a2d93 libconfig: switch source to GitHub repository
The original tarball URL no longer provides version 1.7.3 or any other
historical releases.To ensure reproducible builds, the source has been
switched to the official GitHub repository.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:15 +02:00
Jiaying Song f042d2bf85 passwdqc: correct the SRC_URI
Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:15 +02:00
Jiaying Song 937dd582d8 debootstrap: correct the SRC_URI
The original tarball URL is no longer valid, as it has been moved to an
archive location. This update points to the new location.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:15 +02:00
Gijs Peskens 2dd64947d4 php: fix removal of --with-zlib-dir configure option
PHP has removed the --with-zlib-dir configure option since that is now
taken over by pkg-config, this breaks building PHP on Walnascar when zip
is enabled via PACKAGECONFIG.
So remove it.

Signed-off-by: Gijs Peskens <gijs.peskens@munisense.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 90fa225b86)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:15 +02:00
Jason Schonberg 72986eaadd php: upgrade 8.4.8 -> 8.4.10
This is a security update.

There are fixes for memory leaks, segfaults and CVEs.

CVE-2025-1735
CVE-2025-1220
CVE-2025-6491

Changelog: https://www.php.net/ChangeLog-8.php#8.4.10

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:15 +02:00
Jason Schonberg 14f8e98855 php: upgrade 8.4.6 -> 8.4.8
Changelog: https://www.php.net/ChangeLog-8.php#8.4.8
Changelog: https://www.php.net/ChangeLog-8.php#8.4.7

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:17:15 +02:00