Commit Graph

34679 Commits

Author SHA1 Message Date
Changqing Li 41ffcb51e1 libsoup-2.4: fix CVE-2025-4969
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/447

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:25 -07:00
Changqing Li 63e3fe6083 libsoup-2.4: fix CVE-2025-4948
Refer:
http://gitlab.gnome.org/GNOME/libsoup/-/issues/449

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:25 -07:00
Changqing Li ea6292e9d6 libsoup-2.4: fix CVE-2025-32907
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/428

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:25 -07:00
Changqing Li 249a78537c libsoup-2.4: fix CVE-2025-4476
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/440

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:25 -07:00
Changqing Li b6818dd34c libsoup-2.4: fix CVE-2024-52531
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/423

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:25 -07:00
Changqing Li e9f7afcfb4 libsoup-2.4: fix CVE-2025-32912
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/434

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:25 -07:00
Changqing Li 2bf1705ee2 libsoup-2.4: fix CVE-2025-32910
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/432

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:24 -07:00
Changqing Li 2d814c5023 libsoup-2.4: fix CVE-2025-32909
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/431

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:24 -07:00
Changqing Li fa920154e3 libsoup-2.4: fix CVE-2025-32052
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/425

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:24 -07:00
Changqing Li dbb6b8f14a libsoup-2.4: fix CVE-2025-32050
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/424

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:24 -07:00
Changqing Li bc1ee46fc9 libsoup-2.4: fix CVE-2025-46421
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/439

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:24 -07:00
Changqing Li 03da2fde24 libsoup-2.4: fix CVE-2025-46420
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/438

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:24 -07:00
Changqing Li beaf391696 libsoup-2.4: fix CVE-2025-32914
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/450

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:24 -07:00
Changqing Li 49742855a0 libsoup-2.4: fix CVE-2025-32906
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/404

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:23 -07:00
Changqing Li 1838ac3c60 libsoup-2.4: fix CVE-2024-52530
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/377

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:23 -07:00
Changqing Li 4b861e84d9 libsoup-2.4: fix CVE-2025-2784
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/422

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:23 -07:00
Changqing Li f7b0f9cd33 libsoup-2.4: fix CVE-2025-32053
Refer:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/426

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-13 13:11:23 -07:00
Ross Burton 096dc20f88 directfb: remove sysfsutils DEPENDS
This was removed upstream in 1.6.0.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-12 06:34:20 -07:00
Ross Burton 297ed52add libhugetlbfs: remove obsolete python/perl dependencies
There is no perl used in the build, and no python installed in ${PN}.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-12 06:34:20 -07:00
Ross Burton 71ecefa94a libhugetlbfs: remove sysfsutils DEPENDS
This doesn't appear to have ever been needed as a build dependency.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-12 06:34:20 -07:00
Ross Burton ca201985da bridge-utils: remove sysfsutils DEPENDS
This dependency was removed in bridge-utils 1.2 back in 2006[1].

[1] bridge-utils 29cd6d997cacb9191d1f869ec83fc86045885527.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-12 06:34:19 -07:00
Hongxu Jia e355e9af79 dialog: fix /usr/bin/dialog not found for multilib
While multilib was enabled, /usr/bin/dialog was not found,
but /usr/bin/lib32-dialog existed

root@intel-x86-64:~# which dialog
which: no dialog in (/usr/local/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin)

root@intel-x86-64:~# which lib32-dialog
/usr/bin/lib32-dialog

Due to commit [2f7b184cda dialogp: By default, dialog_1.3-20250116
renames /usr/bin/dialog to /usr/bin/${HOST_SYS}-dialog.] applied,
it created a symlink for dialog, use BPN to instead of PN to fix
the issue

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-12 06:34:19 -07:00
Bastian Krause e1b4a4d594 canutils: use https instead of git protocol
The git server at git.pengutronix.de no longer supports the git
protocol, so switch to https.

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:57 -07:00
Bastian Krause 6dcd76f353 libsocketcan: use https instead of git protocol
The git server at git.pengutronix.de no longer supports the git
protocol, so switch to https.

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:57 -07:00
Jason Schonberg 832f14d4af xfce4-screenshooter: upgrade 1.10.4 -> 1.10.6
Changelog: https://gitlab.xfce.org/apps/xfce4-screenshooter/-/tags/xfce4-screenshooter-1.10.6

Changelog: https://gitlab.xfce.org/apps/xfce4-screenshooter/-/tags/xfce4-screenshooter-1.10.5

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:56 -07:00
Jason Schonberg d3881717cd ristretto: upgrade 0.13.1 -> 0.13.3
Changelog: https://gitlab.xfce.org/apps/ristretto/-/tags/ristretto-0.13.3

Changelog: https://gitlab.xfce.org/apps/ristretto/-/tags/ristretto-0.13.2

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:56 -07:00
Jason Schonberg 854f313042 orage: upgrade 4.18.0 -> 4.20.1
Changelog: https://gitlab.xfce.org/apps/orage/-/tags/orage-4.20.1

Changelog: https://gitlab.xfce.org/apps/orage/-/tags/orage-4.20.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:56 -07:00
Jason Schonberg 9a0dea32c2 xfce4-terminal: upgrade 1.0.4 -> 1.1.0
Changelog: https://gitlab.xfce.org/apps/xfce4-terminal/-/tags/xfce4-terminal-1.1.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:56 -07:00
Jason Schonberg 6d5fa13f87 xfdesktop: upgrade 4.20.0 -> 4.20.1
Changelog: https://gitlab.xfce.org/xfce/xfdesktop/-/tags/xfdesktop-4.20.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:56 -07:00
Jason Schonberg 227cbc07c5 xfce4-screensaver: upgrade 4.18.1 -> 4.18.4
Changelog: https://gitlab.xfce.org/apps/xfce4-screensaver/-/tags/xfce4-screensaver-4.18.4

Changelog: https://gitlab.xfce.org/apps/xfce4-screensaver/-/tags/xfce4-screensaver-4.18.3

Changelog: https://gitlab.xfce.org/apps/xfce4-screensaver/-/tags/xfce4-screensaver-4.18.2

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:56 -07:00
Leon Anavi 0a77b901a9 python3-prompt-toolkit: Upgrade 3.0.50 -> 3.0.51
Upgrade to release 3.0.51:

- Use pyproject.toml instead of setup.py.
- Fix edge case in formatted_text.split_lines when the input starts
  with a line ending.

Fixes:

WARNING: python3-prompt-toolkit-3.0.51-r0 do_check_backend:
QA Issue: inherits setuptools3 but has pyproject.toml with
setuptools.build_meta, use the correct class [pep517-backend]

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:55 -07:00
Leon Anavi 9e9da4e6df python3-html2text: Upgrade 2024.2.26 -> 2025.4.15
Upgrade to release 2025.4.15:

- Fix CI for Python 3.12
- ci: publish wheels to pypi
- Upgrade Build Tools to Latest
- Support tri-backquote style code block and fix ordered list indent
- Fix invalid character reference parsing
- Fix a typo in docs/usage.md
- Modernization of wheel building process

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:55 -07:00
Hongxu Jia 6b676fe3aa xmlrpc-c: switch to advanced release
According to [1], there are 3 Xmlrpc-c releases: Super Stable,
Stable and Advanced, and Advanced is newly updated.

The version in stable sub directory is 1.60.0 which is mismatch
with recipe version

Switch to advanced sub directory, in which the version is 1.64.0

root@intel-x86-64:~# xmlrpc-c-config  --version
1.64.0

[1] https://xmlrpc-c.sourceforge.io/downloading.php

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:55 -07:00
Wang Mingyu ed0de14f94 xcursorgen: upgrade 1.0.8 -> 1.0.9
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:17 -07:00
Wang Mingyu 7ee2cfbaf9 wireguard-tools: upgrade 1.0.20210914 -> 1.0.20250521
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:17 -07:00
Wang Mingyu 108183d40f valijson: upgrade 1.0.5 -> 1.0.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:17 -07:00
Wang Mingyu 0f9f2ecabc thrift: upgrade 0.21.0 -> 0.22.0
0002-THRIFT-5842-Add-missing-cstdint-include-for-int64_t.patch
removed since it's included in 0.22.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:17 -07:00
Wang Mingyu 8782f1012d tesseract: upgrade 5.5.0 -> 5.5.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:17 -07:00
Wang Mingyu 289ee5e410 stunnel: upgrade 5.74 -> 5.75
License-Update: Copyright year updated to 2025

fix-openssl-no-des.patch
refreshed for 5.75

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:16 -07:00
Wang Mingyu 1522313b61 sip: upgrade 6.11.0 -> 6.12.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:16 -07:00
Wang Mingyu 3f5a08d0dc python3-xmlschema: upgrade 4.0.1 -> 4.1.0
Changelog:
=============
- Add XPath selectors: ElementSelector and ElementPathSelectors
- Add selector argument to XMLResource and iterparse filters
- Fix element substitution
- Restore v3.4.5 builder methods as helpers
- Add overall_min_occurs and overall_max_occurs helpers to XsdElement
- Extend error message for XML syntax errors
- Fix query/fragment like for filenames

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:16 -07:00
Wang Mingyu feeee41d0b python3-web3: upgrade 7.11.1 -> 7.12.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:16 -07:00
Wang Mingyu 21c0810143 python3-typeguard: upgrade 4.4.2 -> 4.4.3
Changelog:
===========
- Fixed @typechecked unable to find the target function or method if it or the
  containing class had PEP 695 type parameters on them
- Fixed handling of union types on Python 3.14
- Fixed __type_params__ getting lost when a function is instrumented

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:16 -07:00
Wang Mingyu c9975ad47b python3-tornado: upgrade 6.5 -> 6.5.1
Changelog:
- Fixed a bug in ''multipart/form-data'' parsing that could incorrectly reject
  filenames containing characters above U+00FF

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:16 -07:00
Wang Mingyu 410e0bb3f1 python3-tomlkit: upgrade 0.13.2 -> 0.13.3
Changelog:
============
- fix: register encoder's doc incorrectly mentions TypeError
- [pre-commit.ci] pre-commit autoupdate
- chore(deps-dev): bump virtualenv from 20.26.1 to 20.26.6
- chore(deps): bump jinja2 from 3.1.4 to 3.1.5 in /docs
- [pre-commit.ci] pre-commit autoupdate
- chore(deps-dev): bump jinja2 from 3.1.4 to 3.1.5
- [pre-commit.ci] pre-commit autoupdate
- feat: add .item() method to retrieve the item object
- Fix: Inconsistent newlines on Windows
- Replace pytest's legacy tmpdir fixture with tmp_path
- Update README.md
- Prevent repeated whitespace items in arrays
- Aot setitem not implemented fix
- [pre-commit.ci] pre-commit autoupdate
- Fix removal of items from Arrays
- Fix: reject single keys that aren't strings
- [pre-commit.ci] pre-commit autoupdate
- fix: Invalid serialization when overwriting out-of-order table key
- fix: Dumping a subelement of a parsed toml fails starting on 4rd level of nesting
- chore(deps-dev): bump jinja2 from 3.1.5 to 3.1.6
- fix: ensure unique table indices when adding items to out-of-order tables
- fix: add newline indentation after existing items in Container class
- fix: Missing newline at end of file with multiple array of tables can corrupt during dumping
- chore: update version to 0.13.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:16 -07:00
Wang Mingyu bf8973e360 python3-thrift: upgrade 0.21.0 -> 0.22.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:15 -07:00
Wang Mingyu 0a464ffd88 python3-scikit-build-core: upgrade 0.11.3 -> 0.11.4
Changelog:
=============
Fixes:
- Typo in license-files
- Fix dynamic-metadata iteration (only affected GraalPy)
- Better abiflags implementation, uses ABIFLAGS on 3.14+, supports GraalPy
- File API commandFragments is optional
- Add python -m scikit_build_core printout and a few CLI issues
- Add some platform info to logging

Internal:
- Explicit mypy ignores
- Adjust typing to be ready for next mypy release

Documentation:
- Refactor the documentation to use single-line summaries

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:15 -07:00
Wang Mingyu 467d587b24 python3-robotframework: upgrade 7.2.2 -> 7.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:15 -07:00
Wang Mingyu 65c8d25064 python3-pytest-lazy-fixtures: upgrade 1.1.2 -> 1.1.4
Changelog:
===========
- Fix non-deterministic test function names due to usage of sets
- Fix duplicate parametrization error

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:15 -07:00
Wang Mingyu 1850040292 python3-pyais: upgrade 2.9.2 -> 2.9.4
Changelog:
============
* better error handling of invalid fragment counts
* add support for variant of message type 8

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:15 -07:00