Commit Graph

23937 Commits

Author SHA1 Message Date
Divya Chellam 63bb7a478e mariadb: fix CVE-2025-21490
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior
and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged
attacker with network access via multiple protocols to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized ability to
cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector:
(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-21490
https://security-tracker.debian.org/tracker/CVE-2025-21490

Upstream-patch:
https://github.com/MariaDB/server/commit/82310f926b7c6547f25dd80e4edf3f38b22913e5

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:59 +01:00
Praveen Kumar 9f802bd1a3 cjson: upgrade 1.7.18 -> 1.7.19
This includes CVE-fix for CVE-2023-26819.

Removed CVE-2025-57052, as the issue was already resolved
in v1.7.19.

Changelog:
==========
https://github.com/DaveGamble/cJSON/blob/master/CHANGELOG.md

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:59 +01:00
Gyorgy Sarvari 4384648768 python3-gunicorn: add patch work with geventlet
python3-gunicorn depends on python3-geventlet. geventlet has made some
breaking changes (which is part of meta-oe/kirkstone), however gunicorn
wasn't adapted to this, and it broke some features (at least ptests).

This patch backports the change that adapts gunicorn to the used version
of geventlet.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:53 +01:00
Gyorgy Sarvari 8c59686618 python3-gevent: fix syntax error in cve patch
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:48 +01:00
Gyorgy Sarvari 5c7400ca76 python3-pint: fix ptests
1. Add missing ptest dependency (pytest-subtest)

2. The testsuite is installed in both the site-packages and ${PTEST_PATH}
folders, however some dependencies are only available in the site-packages
folder, so many test cases fail.
At this point of the branch lifecycle I decided not to refactor the recipe, but
rather to just use the installation in the site-packages dir to run the
tests (switch to that folder in the run-ptest script)

3. Fix the run-ptest script to output PASS/FAIL status.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:43 +01:00
Gyorgy Sarvari 1ff49e5d78 python3-requests-toolbelt: disable tests with expired certificate
The application ships with a self signed certificate as part of the test suite.
Unfortunately this certificate has expired in 2021, and since then the tests
refuse to use it, they just fail.

Upstream has fixed this issue by refactoring these tests[1] not to use a vendored
certificate, but rather to use the "python3-trustme" module - however this
is not part of Kirkstone meta-oe, so that patch cannot be used.

Due to this, disable these particular test cases.

[1]: https://github.com/requests/toolbelt/commit/b93b4067ea1ded1e33959920ae5ff4163fdd6939

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:38 +01:00
Gyorgy Sarvari a943a21152 python3-py-cpuinfo: fix ptests
The tests require the library to be present in the folder of test execution,
otherwise many of them fail.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:36 +01:00
Vijay Anusuri d342d283b3 unbound: Fix CVE-2022-3204
Upstream-Status: Backport from https://github.com/NLnetLabs/unbound/commit/137719522a8ea5b380fbb6206d2466f402f5b554

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:35 +01:00
Vijay Anusuri 0bf05b6de8 unbound: Fix for CVE-2022-30698 and CVE-2022-30699
Upstream-Status: Backport from https://github.com/NLnetLabs/unbound/commit/f6753a0f1018133df552347a199e0362fc1dac68

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:35 +01:00
Gyorgy Sarvari 88be6af76b squid: fix esi PACKAGECONFIG
libxml has derecated the "xmlSetFeature" call, and hid is behind a special
config flag (--with-legacy), which is not used by default in oe-core.

This makes compilation fail, when "esi" PACKAGECONFIG is enabled:

Libxml2Parser.cc:94:5: error: 'xmlSetFeature' was not declared in this scope; did you mean 'xmlHasFeature'?

This backported patch fixes this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:33 +01:00
Gyorgy Sarvari efbc247121 squid: patch CVE-2025-59362
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-59362

Pick the PR content that's referenced in the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:30 +01:00
Gyorgy Sarvari bb7620585c squid: patch CVE-2023-46724
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-46724

Pick the patch from the details of the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:28 +01:00
Gyorgy Sarvari 4c30475f5d squid: patch CVE-2022-41318
Details: https://nvd.nist.gov/vuln/detail/CVE-2022-41318

Pick the v4 patch referenced in the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:25 +01:00
Gyorgy Sarvari 3183e67999 squid: patch CVE-2022-41317
Details: https://nvd.nist.gov/vuln/detail/CVE-2022-41317

Pick the v4 patch referenced in the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:22 +01:00
Gyorgy Sarvari ccfa20cea9 squid: patch CVE-2021-46784
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-46784

Pick the backported patch from v4 branch, that referenced the same PR[1]
that the patch[2] from the nvd report refers to.

[1]: https://github.com/squid-cache/squid/pull/1022
[2]: https://github.com/squid-cache/squid/commit/5e2ea2b13bd98f53e29964ca26bb0d602a8a12b9

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:18 +01:00
Gyorgy Sarvari 4b772163bf renderdoc: patch CVE-2023-33863, CVE-2023-33864 and CVE-2023-33865
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-33863
https://nvd.nist.gov/vuln/detail/CVE-2023-33864
https://nvd.nist.gov/vuln/detail/CVE-2023-33865

Take the patches mentioned from the original researcher's report[1]

[1]: https://www.qualys.com/2023/06/06/renderdoc/renderdoc.txt (summary section)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:16 +01:00
Gyorgy Sarvari c7a33c2d5a netkit-telnet: patch CVE-2022-39028
Details: https://nvd.nist.gov/vuln/detail/CVE-2022-39028

Pick the patch mentioned in the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:13 +01:00
Peter Marko 91fe45b5ba dash: set CVE_PRODUCT
This removes false positive CVE-2024-21485 from cve reports.

$ sqlite3 nvdcve_2-2.db
sqlite> select * from products where product = 'dash';
CVE-2009-0854|dash|dash|0.5.4|=||
CVE-2024-21485|plotly|dash|||2.13.0|<
CVE-2024-21485|plotly|dash|2.14.0|>=|2.15.0|<

Our dash:dash did not reach major version 1 yet.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e1427013e0)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:11 +01:00
Gyorgy Sarvari 8ccc17d559 wavpack: patch CVE-2016-10169
Details: https://nvd.nist.gov/vuln/detail/CVE-2016-10169

Backport the relevant part of the linked patch.

(The full patch contains fixes for other vulnerabilities also, which
were introduced after v4.60)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:09 +01:00
Gyorgy Sarvari 0a01ebf675 zchunk: add ptest support
It takes under 5 seconds to execute.
The script is a shell conversion from the meson tests.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:17:05 +01:00
Gyorgy Sarvari a78b82d8db cryptsetup: extend licenses with Apache and CC0
The vendored argon library comes with Apache-2.0 or CC0
license, which hasn't been indicated in the license variable.

This change fixes this.

Reported-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-27 11:16:53 +01:00
Gyorgy Sarvari fd9bd9dba2 python3-yarl: fix ptests (and make it compatible with current python)
oe-core currently ships with Python 3.10.18.
Python 3.10.17 has introduced a change in urlparse library, regarding how
brackets are handled by urllib.parse.urlsplit() and urlparse() functions
(which makes it more conformant to the specification).

This has caused a regression in yarl: some tests have failed, and it also
revealed a bug in how yarl treates brackets.

This backported patch corrects this behavior, making it compatible once
again with the current Python version - and it also allows the the ptests
to pass once again.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 12:00:28 +02:00
Vijay Anusuri 6c8ae54fc3 proftpd: Fix CVE-2023-48795
Upstream-Status: Backport from https://github.com/proftpd/proftpd/commit/bcec15efe6c53dac40420731013f1cd2fd54123b

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 11:59:36 +02:00
Gyorgy Sarvari b476f98381 python3-betamax: fix ptests
1. Some tests require internet access. Set a DNS for that, if it is not
available at the start of the test.

2. Added a backported patch that fixes some failing tests, due to a
variable header value contained in a response. (fix-failing-ptest.patch)

3. Added a backported patch that avoids calling pytest fixtures directly.
If not applied, tests calling them are marked as failing by pytest.
(fix-direct-calls-to-test-fixtures.patch)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 11:59:36 +02:00
Gyorgy Sarvari 975abfa259 python3-soupsieve: fix ptests
Some ptests have started to fail, due to a change in libxml 2.9.12 (oe-core
ships with 2.9.14 currently).
See upstream issue: https://github.com/facelessuser/soupsieve/issues/220

This backported patch solves this issue.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 11:59:36 +02:00
Derek Straka 9c72ce1d33 python3-typeguard: update ptest dependencies
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit bb8e0534be)

Adapted to Kirkstone.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 11:59:36 +02:00
Gyorgy Sarvari a87113cb42 python3-ujson: fix run-ptest script
The current script doesn't execute any tests. This patch fixes the
run-ptest script.

This is mostly a backport of e183db0c8f.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 11:59:36 +02:00
Khem Raj 73115df6a4 python3-whoosh: Fix an intermittent ptest
It fails sometimes when system is under stress

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 38e2f6a9a9)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 11:59:35 +02:00
Gyorgy Sarvari bdaa00b43b sdbus-c++: fix ptest script output
The run-ptest script had incorrect output: instead of PASS/FAIL, it
is outputting OK/FAILED - that cannot be interpreted by the logparser.

This patch sets the correct run-ptest output.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:26 +02:00
Gyorgy Sarvari 223846a1e0 pv: fix ptests
Setting the RDEPENDS with "=" erased the base dependencies
(notably ${PN} itself) from the list, making the tests fail, unless
the dependencies were installed explicitly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:24 +02:00
Khem Raj e3d1e62e2b oprofile: Fix failing ptests
Files need to be in right directory structure

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 51b38953a6)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:23 +02:00
Gyorgy Sarvari 4dd49113a2 libxml++-5.0: fix ptests
The recipe inherits the ptest class, however installs no tests nor
run-ptest script.

This change rectifies this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:22 +02:00
Khem Raj 04aa6c4b63 libteam: Add missing dependencies revealed by ptests
Fixes ptests provided kernel has team driver enabled

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit df35bef3ae)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:22 +02:00
Gyorgy Sarvari b58e57f35d libmanette: fix ptests
The original content of the ptest package, manette-test, is a helper demo
application (like evtest), and not a test suite. Also, the recipe did not
provide a run-ptest script.

Fix it by installing the actual tests, and adding a run-ptest script.

Note that the test folder structure looks like a gnome desktop test suite
(and the application is under the gnome umbrella), however the project
doesn't provide all necessary scaffolding for gnome-desktop-test to work, so
the tests are executed directly from the run-ptest script.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:20 +02:00
Gyorgy Sarvari b5f0ba6b5b libjcat: fix ptests
Some files are not installed with the testsuite, making it fail.

Both of these were fixed upstream, however only one patch applies cleanly.
The other is fixed with a single "install" command.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:18 +02:00
Gyorgy Sarvari b5f2f4dbbd libdbi-perl: fix ptests
Add missing runtime dependencies for the ptest package.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:14 +02:00
Wentao Zhang d5f1ba9300 jemalloc: include the missing shell scripts and source the corresponds shell scripts for some test cases.
The test cases in jemalloc require the appropriate value to be exported
to MALLOC_CONF, which is stored in shell scripts.
The privious script just ran the test cases without exporting value, causing
the tests to fail.
Include the missing shell scripts, and source them before running the test
cases now.

Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b3274b4e90)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:14 +02:00
Gyorgy Sarvari 2c264246c9 keyutils: add missing ptest dependencies
ptests failed due to missing "make", "file" and full "head" command.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:09 +02:00
Changqing Li b6aaee4b8e keyutils: fix ptest failed since "+++ Can't Determine Endianness"
All the ptest cases are failed since error "+++ Can't Determine Endianness",
update the regex for matching the endianness to fix this issue.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6de9b46cc7)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:08 +02:00
Gyorgy Sarvari 6d17a28ac2 kernel-selftest: fix ptest
The run-ptest script was trying to call test_align executable, which
doesn't exist (anymore?).

Instead align more to master branch, and execute the selftests themselves.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:04 +02:00
Gyorgy Sarvari e735c00c42 function2: fix ptests
The recipe has inherited the ptest class, however it did not install
not execute any tests.

This change installs the tests and add a script to execute them.

The tests are quick, execution takes single digit seconds.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:53:00 +02:00
Gyorgy Sarvari 7579becc3b fmt: fix ptests
The recipe has inherited the ptest class, however it did not install
not execute any tests.

This change installs the tests and add a script to execute them.

The tests are quick, execution takes single digit seconds.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:52:57 +02:00
Gyorgy Sarvari c1171b8db7 cli11: fix ptests
The recipe inherits the ptest class, however it doesn't install
the actual tests, nor executes them.

This change installs the tests, and add a run-ptest script to
execute them also.

The tests are fairly quick, it takes single digit seconds on my
machine to execute.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-20 08:52:52 +02:00
Gyorgy Sarvari 1918af644e faad2: patch CVE-2021-32278
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-32278

Pick the patch that is marked to revolve the issue linked in the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-17 10:51:27 +02:00
Gyorgy Sarvari d301a4324b faad2: patch CVE-2021-32274 and CVE-2021-32277
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-32274
https://nvd.nist.gov/vuln/detail/CVE-2021-32277

Pick the patch that resolved the issues linked in the nvd reports
(same patch fixes both vulnerabilities).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>

merge to CVE-2021-32274
2025-10-17 10:51:27 +02:00
Gyorgy Sarvari e06fe48896 faad2: patch CVE-2021-32273
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-32273

Pick the patch that resolved the issue linked in the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-17 10:51:27 +02:00
Gyorgy Sarvari a84d373085 faad2: patch CVE-2021-32272
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-32272

Pick the patch that is mentioned in the ncv report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-17 10:51:27 +02:00
Vijay Anusuri 3396d38876 redis: Fix CVE-2025-49844
Upstream-Status: Backport from https://github.com/redis/redis/commit/db884a49bfbbccd7a0463ddc6aa486b52f28386f

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-17 10:51:27 +02:00
Vijay Anusuri e44b4561a9 redis: Fix CVE-2025-46819
Upstream-Status: Backport from https://github.com/redis/redis/commit/2802b52b554cb9f0f249a24474c9fba94e933dbb

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-17 10:51:27 +02:00
Vijay Anusuri abe7f83cc6 redis: Fix CVE-2025-46818
Upstream-Status: Backport from https://github.com/redis/redis/commit/dccb672d838f05c940f040c27b74fde6fb47b2a7

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-17 10:51:27 +02:00