Commit Graph

16630 Commits

Author SHA1 Message Date
Wang Mingyu ba51ea1631 parallel: upgrade 20260322 -> 20260422
Changelog:
===========
* Remote jobs are spawned via pipe to perl, so environment can be bigger.
* --pipe-part -a supports -L/-N if zextract is installed.
* --pipe-part -a supports .gz, .bz2, .zst-files if zextract is installed.
* Comments in code is redone.
* Bug fixes and man page updates.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:42 -07:00
Wang Mingyu e0a827fdfa nss: upgrade 3.122 -> 3.123.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:42 -07:00
Wang Mingyu 0bdd1f596e neatvnc: upgrade 0.9.5 -> 0.9.6
0001-Use-aml-v1.patch
refreshed for 0.9.6

Changelog:
===========
- auth: rsa-aes: Fix potential buffer overflow
- auth: vencrypt: Reject excessively long usernames and passwords

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:41 -07:00
Wang Mingyu 88a60a81da md4c: upgrade 0.5.2 -> 0.5.3
Changes:
==========
- Avoid repeated prefix language- in code block language specification if the
  input already explicitly includes the prefix.
- Permissive autolink extensions (MD_FLAG_PERMISSIVExxxAUTOLINKS) are now tiny
  bit more permissive, allowing + and - characters to be anywhere in the path
  portion of the URL. This also improves compatibility with GFM.
- Make Unicode-specific code compliant to Unicode 18.0.

Fixes: ===========
- #236: Fix quadratic time behavior caused by one-by-one walking over block
  lines instead of calling md_lookup_line().
- #238: Fix quadratic time and output size behavior caused by malicious misuse
  of link reference definitions.
- #242: The strike-through extension (with flag MD_FLAG_STRIKETHROUGH) now
  follows same logic as other emphasis spans in respect to punctuation
  character and word boundaries.
- #248: Fix handling tab when removing trailing whitespace, especially in
  connection with ATX headers.
- #266: We now correctly abort the parser when a callback returns non-zero.
  (Previously it worked correctly only for negative values, values greater than
  zero were causing strange and inconsistent behavior.)
- #271: Fix handling a code span whose closer is on the next line and yet
  another text follows. In the case we erroneously outputted the closer code
  span mark as part of the text.
- #275: Fix md_decode_utf16le_before__(). (Only affected MD4C builds built with
  -MD4C_USE_UTF16 on Windows.)
- #278, #294: Do not try to interpret characters in a link URL as Markdown
  syntax characters.
- #292: Fix detection of closing code block fence if it has a trailing
  tabulator.
- #299: Fix invalid free() in an error path.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:41 -07:00
Wang Mingyu 90c3bdba27 libtsm: upgrade 4.4.3 -> 4.5.0
Changelog:
=============
- Support for terminal bell and keyboard LEDs
- Fix build musl
- test/vte: fix memory leak in vte tests
- Refactor scrollback and selection
- screen: Fix wrong attribute for new cells when resizing
- Fix remove from sb
- Fix get next line
- Fix scrollback position
- test: robustness, make the test faster.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:41 -07:00
Wang Mingyu 3b933f038d libtorrent: upgrade 0.16.9 -> 0.16.10
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:40 -07:00
Wang Mingyu 7806daa715 libfido2: upgrade 1.16.0 -> 1.17.0
License-Update: Copyright year updated to 2026

Changelog:
=============
- Added CTAP 2.3 support.
- Restrict webauthn.dll search paths; YSA-2026-01.
- Support application-managed PIN/UV Auth tokens; gh#806.
- Support 64-byte hmac-secret salts when using windows://hello.
- Fixed a U2F transaction handling bug when a timeout had been set; gh#917.
- Fixed a bug where stdin was closed on fido_nl_new failure; gh#923.
- fido2-token: new -G -t mode to to retrieve a PPUAT.
- fido2-token: new -I -t mode for deciphering encrypted fields.
- fido2-cred -M: support the -t toggle argument
- Improved documentation and examples.
- Removed tools from SDK packaging on Windows.
- New API calls

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:40 -07:00
Wang Mingyu 75377adee6 libblockdev: upgrade 3.4.0 -> 3.5.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:40 -07:00
Wang Mingyu 037d8ec930 lcms: upgrade 2.18 -> 2.19
CVE-2026-41254_1.patch
CVE-2026-41254_2.patch
removed since they're included in 2.19

Changes:
========
- CMake build system. Thanks to Vlad Erium for the initial implementation and
  kmilos for improvements.
- Large files support to use profiles up to 4Gb
- Black point compensation works on multi-channel profiles
- Added more test platforms/architectures in GitHub tests, Cygwin and MSYS are
  now fully checked.
- jpgicc banner is not shown on normal operation, only when help is requested.
- Added a way to access internal transform pipelines. For read only.
- Add a way to retrieve the CMM signature
- Added extra checks on postscript undocumented functions
- Added guard on integer overflow when reading .cube files
- Added unneeded checks as a try to get rid of spam reports about
  "vulnerabilities" that are not real.
- Utility program names generated by Visual Studio 2026 are now same as all
  other platforms.
- Creating an output profile by cmsTransform2DeviceLink does not propagate
  correctly the colorant table. Fixed.
- Added some profile class definitions from iccMAX
- Deprecated uint16 and uint32 types removed from tifdiff
- fixed generation of tifdiff on Cmake and meson

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:40 -07:00
Wang Mingyu 551c3606b1 jsoncons: upgrade 1.6.0 -> 1.7.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:40 -07:00
Wang Mingyu 7f8cfe70ae jemalloc: upgrade 5.3.0 -> 5.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:40 -07:00
Wang Mingyu 3e4ca12fbc isocline: upgrade 1.0.9 -> 1.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:39 -07:00
Wang Mingyu dd0d516fe1 imagemagick: upgrade 7.1.2-19 -> 7.1.2-21
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:39 -07:00
Wang Mingyu ec2c452f4f iceauth: upgrade 1.0.10 -> 1.0.11
Changelog:
==========
- meson: Add option to build with meson
- gitlab CI: drop the ci-fairy check-mr job
- Improve man page formatting
- Add --help and --version options

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:39 -07:00
Wang Mingyu bb54f9366d highway: upgrade 1.3.0 -> 1.4.0
Add:
=======
- Fast* math functions, sum_array example
- HWY_ARCH_MAX_BYTES, HWY_MIN_BYTES, HWY_NATIVE_MASK, HWY_REGISTERS
- HWY_EXPORT_AND_TEST_BEST_P
- InterleaveLower/UpperBlocks, Lookup8, XorAndNot
- MinMax algo, AtomicBitSet
- RVV and LSX/LASX runtime dispatch, FreeBSD futex

Improvements:
==============
- MulByPow2, PopulationCount, SumsOfAdjQuadAbsDiff
- ReorderWidenMulAccumulate, SumOfMulQuadAccumulate
- Re-enable SVE, add i8mm for SVE/NEON_BF16

Fixes:
========
- EVEX512 compiler change workaround, Timer::start() result truncation
- BF16 dot on SVE, doc formatting, StringTable race, warnings

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:39 -07:00
Wang Mingyu 2ee332346e glaze: upgrade 7.3.3 -> 7.4.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:39 -07:00
Wang Mingyu e22ae5b251 fluentbit: upgrade 5.0.2 -> 5.0.3
Changelog:
=============
- tests: integration: introduce in-tree integration test suite
- parser: Address wrong assignments of timezone at midnight
- release: update to 5.0.3
- workflows: Unify steps of downloading built macOS packages
- record accessor: fix CFL root-key matching and container translation
- env: add new extended format to handle environment variables
- out_s3: fix retry_limit semantics and multipart upload memory leaks
- lib: cmetrics: upgrade to v2.1.2
- in_tail: harden db offset restore across restart
- oauth2: restore legacy context creation behavior
- network: Handle baraketed ipv6 addresses
- in_opentelemetry: fix tag routing issue
- http_server: add settings for ingress queue
- out_syslog: address invalid configurations on in syslog
- input_thread: replace raw read() with pipe abstraction to fix crash
- workflows: Windows docker insufficient disk space fix
- http_client: enhance parser in timeouts and protocol parsing
- in_ebpf: add tcp trace

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:39 -07:00
Wang Mingyu e61d33aa53 fastfetch: upgrade 2.61.0 -> 2.62.1
Changelog:
==========
- Fixes Host module not working on some devices
- Logos : Adds EN-OS, LimeOS, Redrose and Uzbek

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:39 -07:00
Wang Mingyu e953ab856d dash: upgrade 0.5.13.2 -> 0.5.13.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:38 -07:00
Wang Mingyu 7bb3014384 ctags: upgrade 6.2.20260329.0 -> 6.2.20260426.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:38 -07:00
Wang Mingyu 8cb0926b53 bubblewrap: upgrade 0.11.1 -> 0.11.2
Changelog:
===========
- bug fix: CVE-2026-41163
- enhancement : New build option -Dsupport_setuid, which if set to false (which
  is the default) disables the support for setuid.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:38 -07:00
Wang Mingyu 506bd38398 7zip: upgrade 26.00 -> 26.01
Changelog:
=============
- linux version of 7-Zip can use huge pages (2 MB pages). It can increase
  compression speed for 10% for 7z/xz/LZMA/LZMA2 compression.
- new -spo[d|c|r] switch specifies the path generation mode for the output
  directory for archive extraction. The output directory path is generated from
  the path specified in the -o{dir_path} switch and the name of the archive being
  unpacked.
- some bugs were fixed.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:38 -07:00
Liu Yiding f50db12058 exiftool: upgrade 13.52 -> 13.57
1. ChangeLog
  https://github.com/exiftool/exiftool/blob/master/Changes

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:37 -07:00
Liu Yiding 1f2864a3d5 editorconfig-core-c: upgrade 0.12.9 -> 0.12.11
1. ChangeLog
  https://github.com/editorconfig/editorconfig-core-c/releases/tag/v0.12.11

2. Fix HOMEPAGE

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:37 -07:00
Yi Zhao e265577249 webkitgtk3: fix build on riscv64
Fix the following build failure:
Source/ThirdParty/skia/modules/skcms/src/Transform_inl.h:810:71:
error: cannot tail-call: tail call production failed
  810 |         DECLARE_STAGE(name, arg, [[clang::musttail]] return (*list.fn)(list, ctx, src, dst, \
      |                                                             ~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~
  811 |                                                                        r, g, b, a, i))
      |                                                                        ~~~~~~~~~~~~~~

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:37 -07:00
Gianfranco Costamagna fbe399b230 vboxguestdrivers: Upgrade to 7.2.8
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:36 -07:00
Philip Balister 62104ea1db fftw_3.3.11.bb: Update version.
Apr 21st, 2026
New API fftw_copy_plan()
Support for SVE SIMD instructions.
Support for LoongArch LSX and LASX SIMD instructions.
Support for Apple ARM, RISCV, and LoongArch cycle counters.

Enabling the cycle counters needs a
kernel module to permit access from user space. We need to add
SVE (and other architectures) support to the recipe.

Signed-off-by: Philip Balister <philip@balister.org>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-23 07:55:52 -07:00
Zeming LIU 15d5785d28 tbb: add ptest support
Test result:
root@qemux86-64:/usr/lib/tbb/ptest# ptest-runner tbb
START: ptest-runner
2026-04-23T01:21
BEGIN: /usr/lib/tbb/ptest
PASS: test_tick_count
PASS: test_allocators
PASS: test_arena_priorities
PASS: test_dynamic_link
PASS: test_collaborative_call_once
PASS: test_concurrent_lru_cache
PASS: test_concurrent_unordered_map
PASS: test_concurrent_unordered_set
PASS: test_concurrent_map
PASS: test_concurrent_set
PASS: test_concurrent_priority_queue
PASS: test_partitioner
PASS: test_parallel_for
PASS: test_parallel_for_each
PASS: test_parallel_reduce
PASS: test_parallel_sort
PASS: test_parallel_invoke
PASS: test_parallel_scan
PASS: test_parallel_pipeline
PASS: test_eh_algorithms
PASS: test_blocked_range
PASS: test_concurrent_vector
PASS: test_task_group
PASS: test_concurrent_hash_map
PASS: test_task_arena
PASS: test_parallel_phase
PASS: test_enumerable_thread_specific
PASS: test_concurrent_queue
PASS: test_resumable_tasks
PASS: test_mutex
PASS: test_function_node
PASS: test_multifunction_node
PASS: test_broadcast_node
PASS: test_buffer_node
PASS: test_composite_node
PASS: test_continue_node
PASS: test_eh_flow_graph
PASS: test_flow_graph
PASS: test_flow_graph_priorities
PASS: test_flow_graph_whitebox
PASS: test_indexer_node
PASS: test_join_node
PASS: test_join_node_key_matching
PASS: test_join_node_key_matching_n_args
PASS: test_join_node_msg_key_matching
PASS: test_join_node_msg_key_matching_n_args
PASS: test_join_node_preview
PASS: test_limiter_node
PASS: test_priority_queue_node
PASS: test_queue_node
PASS: test_sequencer_node
PASS: test_split_node
PASS: test_tagged_msg
PASS: test_overwrite_node
PASS: test_write_once_node
PASS: test_async_node
PASS: test_input_node
PASS: test_profiling
PASS: test_concurrent_queue_whitebox
PASS: test_intrusive_list
PASS: test_semaphore
PASS: test_environment_whitebox
PASS: test_hw_concurrency
PASS: test_eh_thread
PASS: test_tbb_version
PASS: test_global_control
PASS: test_task
PASS: test_concurrent_monitor
PASS: test_scheduler_mix
PASS: test_handle_perror
PASS: test_arena_constraints
PASS: test_tbbbind
PASS: test_tbb_fork
PASS: test_tbb_header
PASS: test_openmp
PASS: conformance_tick_count
PASS: conformance_allocators
PASS: conformance_mutex
PASS: conformance_task_group
PASS: conformance_task_group_context
PASS: conformance_task_arena
PASS: conformance_collaborative_call_once
PASS: conformance_concurrent_lru_cache
PASS: conformance_concurrent_unordered_map
PASS: conformance_concurrent_unordered_set
PASS: conformance_concurrent_map
PASS: conformance_concurrent_set
PASS: conformance_concurrent_priority_queue
PASS: conformance_parallel_for
PASS: conformance_parallel_for_each
PASS: conformance_parallel_reduce
PASS: conformance_parallel_scan
PASS: conformance_parallel_sort
PASS: conformance_parallel_pipeline
PASS: conformance_parallel_invoke
PASS: conformance_blocked_range
PASS: conformance_blocked_range2d
PASS: conformance_blocked_range3d
PASS: conformance_blocked_nd_range
PASS: conformance_concurrent_vector
PASS: conformance_global_control
PASS: conformance_concurrent_hash_map
PASS: conformance_enumerable_thread_specific
PASS: conformance_combinable
PASS: conformance_concurrent_queue
PASS: conformance_resumable_tasks
PASS: conformance_version
PASS: conformance_function_node
PASS: conformance_multifunction_node
PASS: conformance_input_node
PASS: conformance_continue_node
PASS: conformance_async_node
PASS: conformance_overwrite_node
PASS: conformance_write_once_node
PASS: conformance_buffer_node
PASS: conformance_queue_node
PASS: conformance_priority_queue_node
PASS: conformance_sequencer_node
PASS: conformance_limiter_node
PASS: conformance_broadcast_node
PASS: conformance_composite_node
PASS: conformance_indexer_node
PASS: conformance_split_node
PASS: conformance_join_node
PASS: conformance_graph
PASS: conformance_arena_constraints
PASS: test_scalable_allocator
PASS: test_malloc_pools
PASS: test_malloc_init_shutdown
PASS: test_malloc_regression
PASS: test_malloc_shutdown_hang
PASS: test_malloc_compliance
PASS: test_malloc_used_by_lib
PASS: test_malloc_lib_unload
PASS: test_malloc_pure_c
PASS: test_malloc_whitebox
PASS: test_malloc_atexit
PASS: test_malloc_overload
PASS: test_malloc_overload_disable
PASS: test_malloc_new_handler
DURATION: 153
END: /usr/lib/tbb/ptest
2026-04-23T01:23
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Note:
The test will fail/timeout if executed on qemu target without kvm enabled.

Signed-off-by: Zeming LIU <zeming.liu@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-23 07:54:07 -07:00
Xiaozhan Li b5a792e209 jemalloc: fix always_inline build failure
Enable debug build flag in jemalloc to avoid error as below:
inlining failed in call to 'always_inline' 'heap_ph_cmp':
function not considered for inlining

Signed-off-by: Xiaozhan Li <Xiaozhan.Li.CN@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-23 07:54:07 -07:00
Michael Fitzmayer 6a14b73000 canopenterm: update to version 2.02+git
- This patch incorporates all previously suggested changes
- Introduced a new API function: print_result()
- Added support for configuring a dynamic number of filters when
  executing replay.lua
- Added script to interact with the STM32 CAN bootloader (stm32.lua)
- Add Unified Diagnostic Services (ISO 14229-1) script written in Lua
  (uds.lua)
- Various updates and fixes required by the Debian package and to be able
  to get certified by Microsoft
- Added manpages

Signed-off-by: Michael Fitzmayer <mail@michael-fitzmayer.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-23 07:48:34 -07:00
Jörg Sommer 3283baa0a4 framebuffer-vncserver: New recipe for VNC server for framebuffer
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-22 07:38:08 -07:00
Khem Raj 76700b6eaf gphoto2: Fix build with clang-22
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-21 23:12:37 -07:00
Ross Burton fa612d7971 libspdm: update SRCREV to final 3.8.2 release
The initial 3.8.2 tag pointing at 5cf0acb8 ("Update version for 3.8.2
release") was actually a pre-release and that tag has since moved.

Now that 3.8.2 has offically been released we can update the SRCREV.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-21 10:24:53 -07:00
Jose Quaresma 0c9cb5fb09 opensc: ship missed installed file
Fix packing of missed installed file:

| ERROR: opensc-0.27.1-r0 do_package: QA Issue: opensc: Files/directories were installed but not shipped in any package:
|   /usr/share/p11-kit
|   /usr/share/p11-kit/modules
|   /usr/share/p11-kit/modules/opensc.module
| Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
| opensc: 3 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Jose Quaresma <quaresma.jose@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-21 10:24:53 -07:00
Changqing Li 07d6722816 libsoup-2.4: fix several CVEs
Fix CVE-2026-1539,CVE-2026-1761,CVE-2026-1801,CVE-2026-2443,
CVE-2026-2369,CVE-2026-1760,CVE-2025-14523,CVE-2025-32049,CVE-2026-1467

Refer:
CVE-2026-1801 https://gitlab.gnome.org/GNOME/libsoup/-/issues/481
CVE-2026-1761 https://gitlab.gnome.org/GNOME/libsoup/-/issues/493
CVE-2026-2443 https://gitlab.gnome.org/GNOME/libsoup/-/issues/487
CVE-2026-1539 https://gitlab.gnome.org/GNOME/libsoup/-/issues/489
CVE-2026-2369 https://gitlab.gnome.org/GNOME/libsoup/-/issues/498
CVE-2026-1760 https://gitlab.gnome.org/GNOME/libsoup/-/issues/475
CVE-2025-14523 https://gitlab.gnome.org/GNOME/libsoup/-/issues/472
CVE-2025-32049 https://gitlab.gnome.org/GNOME/libsoup/-/issues/390
CVE-2026-1467 https://gitlab.gnome.org/GNOME/libsoup/-/issues/488

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-21 07:26:46 -07:00
Jason Schonberg 740f9f71dd webkitgtk3 update 2.50.5 -> 2.50.6
This is a bug fix release.

Changelog: https://www.webkitgtk.org/2026/03/12/webkitgtk2.50.6-released.html

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 18:28:09 -07:00
Peter Kjellerstedt 44d5012a7c ceres-solver: Improve the build configuration
* Add a PACKAGECONFIG for glog. If it is disabled, then miniglog, which
  is provided by ceres-solver, will be used instead.
* Disable CUDA and gflags. They are not expected to be found, but this
  makes it explicit.
* Disable building tests and examples as they are not used anyway.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 12:55:12 -07:00
Joao Marcos Costa 335045d3fb kernel-selftest: add missing sources if mm is enabled
Some headers come from 'mm' (in the top source directory, i.e. the root of
Linux's sources), as in the exampels below:

Makefile:LOCAL_HDRS += $(selfdir)/mm/local_config.h $(top_srcdir)/mm/gup_test.h
cow.c:#include "../../../../mm/gup_test.h"
gup_longterm.c:#include "../../../../mm/gup_test.h"
gup_test.c:#include <mm/gup_test.h>
hmm-tests.c:#include <mm/gup_test.h>
uffd-unit-tests.c:#include "../../../../mm/gup_test.h"

Add this directory to KERNEL_SELFTEST_SRC if 'mm' PACKAGECONFIG is enabled.

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:38 -07:00
Joao Marcos Costa 06ddb535df kernel-selftest: fix mm selftests dependencies
Add numa (numactl), as required by rmap, migration, and others.

Add liburing, otherwise some tests would be disabled.

Moreover, liburing's availability is checked in a shell script executed
prior to the compilation of the individual test cases. This script,
however, does not read CFLAGS.

Backport a fix [1] from mainline to address this issue.

[1] https://github.com/torvalds/linux/commit/7f532d19c8be76ad2fcd7ab6b0c9eb618f70966b

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:38 -07:00
Joao Marcos Costa a407a3e533 kernel-selftest: drop libhugetlbfs
The support of libhugetlbfs was removed from mainline Linux a while ago,
since v6.1 [1].

Since libhugetlbfs was the main reason to remove 'mm' selftests for some
specific architectures, the respective operations should only remove bpf.

Update the recipe to remove libhugetlbfs as a dependency of mm, and thus
unblock this test category for some targets.

[1] https://github.com/torvalds/linux/commit/6f83d6c74ea5a5b267be85206822da280cae110a

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:38 -07:00
Joao Marcos Costa fcae7611c1 kernel-selftest: rename vm selftests to mm
Since v6.10 [1], this category of selftests was renamed
to 'mm'.

Update the recipe accordingly.

I left a mention to the previous name (i.e., 'vm') just in case.

[1]: https://github.com/torvalds/linux/commit/baa489fabd01596d5426d6e112b34ba5fb59ab82

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:38 -07:00
Gyorgy Sarvari 5305a97026 xrdp: upgrade 0.10.5 -> 0.10.6
Mark fixed CVEs explicitly patched,because NVD tracks them without version info.

Changelog:
Security fixes:
CVE-2026-32105
CVE-2026-32107
CVE-2026-32623
CVE-2026-32624
CVE-2026-33145
CVE-2026-33516
CVE-2026-33689
CVE-2026-35512

New features:
Support for xorgxrdp bug fixes

Bug fixes:
Honour pass_shell_as_env setting only if user sets a shell
We no longer try to create a NULL authentication file when using VNC over UDS
Problems with the Brazilian ABNT2 keyboard mapping have been corrected
A 'file exists' error when installing xrdp over an existing installation has been addressed

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:38 -07:00
Gyorgy Sarvari d696debe79 xdg-desktop-portal: upgrade 1.20.3 -> 1.20.4
Fixes CVE-2026-40354: https://github.com/flatpak/xdg-desktop-portal/releases/tag/1.20.4

Also mark the CVE explicitly patched, as it is tracked without version info
at this time.

The project now has a dependency on libglnx, which by default it tries to download
from the internet during configuring. To avoid that error, this dependency is added to the SRC_URI.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Gyorgy Sarvari aef8bc3422 protobuf, python3-protobuf: ignore CVE-2026-6409
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409

The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Gyorgy Sarvari 09050325e6 openjpeg: patch CVE-2026-6192
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6192

Backport the patch referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Samuli Piippo eb7dba674e minizip: backport fix for the missing header
Minizip release v1.3.2 is missing required ints.h header that
causes build failure on components using it:

| ../../../../../recipe-sysroot/usr/include/minizip/ioapi.h:74:10: fatal error: ints.h: No such file or directory
|    74 | #include "ints.h"
|       |          ^~~~~~~~

Backport fix from https://github.com/madler/zlib/commit/cb14dc9ade3759352417a300e6c2ed73268f1d97

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:36 -07:00
Gyorgy Sarvari 7f49deaf7e libraw: mark CVE-2026-20911 and CVE-2026-21413 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-20911
https://nvd.nist.gov/vuln/detail/CVE-2026-21413

Both CVEs are tracked with incorrect version info: NVD indicates that
0.22.1 is explicitly vulnerable, but the fixes are actually included
in this release.

Relevant commits:
CVE-2026-20911: https://github.com/LibRaw/LibRaw/commit/5357bb5fc67ac616838fb84de67260d45987489b
CVE-2026-21413: https://github.com/LibRaw/LibRaw/commit/75ed2c12a35b765b3b6ad695cc1f044f19efe644

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:35 -07:00
Gyorgy Sarvari de5f93f95d libgphoto2: patch CVE-2026-40341
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40341

Backport the patch referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:35 -07:00
Gyorgy Sarvari 420e5aec46 libgphoto2: patch CVE-2026-40340
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40340

Backport the patch referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:35 -07:00
Gyorgy Sarvari 2e3be1dddc libgphoto2: patch CVE-2026-40339
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40339

Backport the patch referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:35 -07:00