Commit Graph

10854 Commits

Author SHA1 Message Date
Soumya Sambu df81889606 iperf3: Fix CVE-2024-53580
iperf v3.17.1 was discovered to contain a segmentation violation via
the iperf_exchange_parameters() function.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-53580
https://security-tracker.debian.org/tracker/CVE-2024-53580

Upstream patch:
https://github.com/esnet/iperf/commit/3f66f604df7f1038a49108c48612c2f4fe71331f

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Soumya Sambu b8333d7c6f iperf3: Fix CVE-2024-26306
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA
authentication, allows a timing side channel in RSA decryption operations. This
side channel could be sufficient for an attacker to recover credential plaintext.
It requires the attacker to send a large number of messages for decryption, as
described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-26306
https://security-tracker.debian.org/tracker/CVE-2024-26306

Upstream patch:
https://github.com/esnet/iperf/commit/299b356df6939f71619bf45bf7a7d2222e17d840

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:12:59 +02:00
Soumya Sambu 0a0ba8f467 iperf3: Fix CVE-2023-7250
A flaw was found in iperf, a utility for testing network performance using TCP, UDP,
and SCTP. A malicious or malfunctioning client can send less than the expected amount
of data to the iperf server, which can cause the server to hang indefinitely waiting
for the remainder or until the connection gets closed. This will prevent other
connections to the server, leading to a denial of service.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-7250
https://security-tracker.debian.org/tracker/CVE-2023-7250

Upstream patch:
https://github.com/esnet/iperf/commit/5e3704dd850a5df2fb2b3eafd117963d017d07b4

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:01:57 +02:00
Nitin Wankhade 8f65fa4e2e iperf3: Fix CVE-2025-54349
This commit fix heap overflow for iperf3 package

Reference: https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf

Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:01:57 +02:00
Nitin Wankhade bfa5f662db iperf3: Fix CVE-2025-54350
remove assert to prevent crash due to assertion failure
on malformed authentication attempt

Reference: https://github.com/esnet/iperf/commit/4eab661da0bbaac04493fa40164e928c6df7934a

Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:01:57 +02:00
AshishKumar Mishra 4c10114c66 image_types_sparse: backport optionally remove RAW image
When creating sparse images, the RAW image is no longer needed in
some workflows such as Android and CI pipelines. These RAW images
can be multi-GB artifacts and consume significant disk space.

This change introduces a configuration option
`DELETE_RAWIMAGE_AFTER_SPARSE_CMD` which, when set to "1",
removes the RAW image after sparse image generation.

This reduces disk usage in builds where sparse images are the
final deliverables and RAW images are not required.

Default behavior is unchanged: RAW images are kept unless the
variable is explicitly enabled:

This change corresponds to upstream  f5246b7df4

    DELETE_RAWIMAGE_AFTER_SPARSE_CMD = "1"   # Delete RAW image
    DELETE_RAWIMAGE_AFTER_SPARSE_CMD = "0"   # Default behavior

Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:19:55 +02:00
Sean Anderson 1f2a86393f image_types_sparse: backport generate "don't care" chunks
By default, img2simg will only generate raw and fill chunks. This adds
support for "don't care" chunks, based on file holes. This is similar to
how bmaptool works. "don't care" chunks do not need to be written,
speeding up flashing time.
This change corresponds to upstream  9862a017fa

Signed-off-by: Sean Anderson <sean.anderson@seco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:19:53 +02:00
Sean Anderson b414502a08 image_types_sparse: backport fix pad source image to block size
If the source image's size is not aligned to the sparse image's block
size, then conversion will fail with

img2simg: libsparse/sparse.cpp:133: int write_all_blocks(sparse_file*, output_file*): Assertion `pad >= 0' failed.

This is a bug in img2simg, but an easy way to work around it is to pad
the source image ourselves. The default block size of 4096 matches
img2simg's default block size.

This change corresponds to upstream fb331cb62e

Signed-off-by: Sean Anderson <sean.anderson@seco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: AshishKumar Mishra <emailaddress.ashish@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:19:48 +02:00
Praveen Kumar 033f224986 polkit: fix CVE-2025-7519
A flaw was found in polkit. When processing an XML policy with 32 or
more nested elements in depth, an out-of-bounds write can be triggered.
This issue can lead to a crash or other unexpected behavior, and
arbitrary code execution is not discarded. To exploit this flaw, a
high-privilege account is needed as it's required to place the
malicious policy file properly.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-7519

Upstream-patch:
https://github.com/polkit-org/polkit/commit/107d3801361b9f9084f78710178e683391f1d245

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:17:10 +02:00
Gyorgy Sarvari 3f7af540fd tokyocabinet: fix license
The application is distributed under the LGPL license, not GPL.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:17:10 +02:00
Gyorgy Sarvari 2e091da4f5 tokyocabinet: switch to working SRC_URI
The original source seems to be long gone.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:17:10 +02:00
Sunil Dora d5e460bcd9 layer.conf: add bpftrace to NON_MULTILIB_RECIPES
bpftrace need line up with kernel architecture type,
so add it to NON_MULTILIB_RECIPES.

bpftrace must be built with the same architecture (32-bit/64-bit) as the kernel
to ensure compatibility when tracing kernel functions and using eBPF features.

(cherry-picked from f8498f2699 in master )

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:17:10 +02:00
Gyorgy Sarvari e02fb92000 krb5: fix packaging with ldap PACKAGECONFIG
In case ldap PACKAGECONFIG is enabled, packaging fails with the following error:

ERROR: krb5-1.17.2-r0 do_package: QA Issue: krb5: Files/directories were installed but not shipped in any package:
  /usr/lib/libkdb_ldap.so.1.0
  /usr/lib/libkdb_ldap.so.1

Fix it by adding the file to the krb5-kdc-ldap package (the same that
Debian also uses to ship this file).

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:17:09 +02:00
Divya Chellam 4cf505e5e5 krb5: fix CVE-2025-24528
In MIT krb5 release 1.7 and later with incremental propagation
enabled, an authenticated attacker can cause kadmind to write beyond
the end of the mapped region for the iprop log file, likely causing a
process crash.

https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-24528

Upstream-patch:
https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 13:17:09 +02:00
Shubham Pushpkar 24d495df72 cjson 1.7.18: Fix CVE-2025-57052
Upstream Repository: https://github.com/DaveGamble/cJSON.git

Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2025-57052
Type: Security Fix
CVE: CVE-2025-57052
Score: 9.8
Patch: https://github.com/DaveGamble/cJSON/commit/74e1ff4994aa

Signed-off-by: Shubham Pushpkar <spushpka@cisco.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-23 09:07:36 +02:00
Soumya Sambu 13130163ab php: upgrade 8.1.31 -> 8.1.33
Includes fix for CVE-2025-1735, CVE-2025-6491, CVE-2025-1220, CVE-2025-1861,
CVE-2025-1219, CVE-2025-1217, CVE-2025-1734 and CVE-2025-1736.

Changelog:
https://www.php.net/ChangeLog-8.php#8.1.33
https://www.php.net/ChangeLog-8.php#8.1.32

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-23 08:59:41 +02:00
Khem Raj e7021d8f78 hddtemp: Add missing prototype for ata_get_powermode in sata.c
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fdb8bc38b1)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:58:31 +02:00
Mingli Yu 0b02a2b912 gnulib: Update SRC_URI
Update the SRC_URI to fix the do_fetch warning.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 37d158db78)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:58:31 +02:00
Yi Zhao 46a3fd1743 fltk: upgrade 1.3.8 -> 1.3.9
Release Notes:
https://www.fltk.org/articles.php?L1898

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7e124168f9)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:58:31 +02:00
Kai Kang fe1f061641 fltk-native: fix libdl link issue
It fails to build fltk-native on Ubuntu 20.04 with glibc 2.31:

| /path_to/tmp/hosttools/ld: lib/libfltk.a(Fl_Native_File_Chooser.cxx.o): in function `fl_dlopen(char const*, char const*)':
| Fl_Native_File_Chooser.cxx:(.text+0x61a): undefined reference to `dlopen'
| /path_to/tmp/hosttools/ld: lib/libfltk.a(Fl_Native_File_Chooser.cxx.o): in function `Fl_GTK_File_Chooser::probe_for_GTK_libs()':
| Fl_Native_File_Chooser.cxx:(.text+0xf92): undefined reference to `dlerror'

The original fix in fltk-native recipe does not work any more because '-ldl'
appears before lib/libfltk.a and causes dlopen() unresolved. The reason why it
doesn't fail on other hosts is that the functions dlopen(), dlerror() etc. have
been moved to libc.so since glibc 2.34 via the commits in glibc:

0c1c3a771e dlfcn: Move dlopen into libc
add8d7ea01 dlfcn: Move dlvsym into libc
6dfc0207eb dlfcn: Move dlinfo into libc
492560a32e dlfcn: Move dladdr1 into libc
6a1ed32789 dlfcn: Move dlmopen into libc
77f876c0e3 dlfcn: Move dlsym into libc
602252b553 dlfcn: Move dladdr into libc
d8cce17d2a dlfcn: Move dlclose into libc

Append 'dl' to fltk link items explictly to fix the error.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e3606c223e)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:58:31 +02:00
Khem Raj 9d2fd9b6d0 ctapi-common: Use archives.fedoraproject.org to fetch srpm
This is a better place to fetch the srpm as it is fedora's location

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e36553fcd9)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:58:31 +02:00
Khem Raj 0694ea04e0 ctapi-common: Point to working SRC_URI locations
Drop md5sum checksum

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7687cb73b2)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:58:31 +02:00
Wang Mingyu fb87b71a02 colord-native: upgrade 1.4.6 -> 1.4.7
0001-Move-the-function-cd_icc_create_from_edid-to-avoid-u.patch
refreshed for 1.4.7

Changelog:
===========
- Add various hardenings to the systemd service
- Always close the ICC profile when loading fails
- Avoid destructing LCMS plugin twice with lcms 2.14
- Do not make state files executable in tmpfiles.d/colord.conf
- Fix a double free spotted by Coverity
- Fix an error check when parsing the DTP94 data
- Fix a -Wincompatible-pointer-types warning
- Fix potential crash when reading from broken Huey hardware
- Set FILE_OFFSET_BITS explicitly
- Use a 64-bit time_t
- Use thread context for Gamut Alarm codes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f016f77796)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:51:46 +02:00
Wang Mingyu 03749ec664 colord: upgrade 1.4.5 -> 1.4.6
Changelog:
==========
Bugfixes:
 - Add missing copyright notices
 - Add Spyder X entry
 - Document where to send patches
 - Don't use exact floating point comparisons
 - Drop option for removed reverse engineering tools
 - Drop references to hughski.com
 - Fix a small memory leak in sqlite3_exec()
 - Fix typo in device-removed signal documentation
 - Make introspection optional in meson

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 706cfeb250)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:51:39 +02:00
Wang Mingyu eb8dfb2c71 cmark: upgrade 0.30.2 -> 0.30.3
Changelog:
===========
  * Fix quadratic complexity bug with repeated '![[]()'.
    Resolves CVE-2023-22486. Add new pathological test.

  * Allow declarations with no space, as per spec

  * Set 'enumi*' counter correctly in LaTeX output

  * Allow '<!DOCTYPE' to be case-insensitive.
    existing spec.)

  * Fixed HTML comment scanning. Need to handle this case: '<!--> and -->'.
    Since the scanner finds the longest match, we had to
    move some of the logic outside of the scanner.

  * Fix quadratic parsing issue with repeated '<!--' (this was not
    introduced by the previous fix, and not in a released version of cmark).
    Resolves CVE-2023-22484. Add new pathological test.

  * Update HTML comment scanner to accord with commonmark/commonmark-spec#713

  * Pathological tests: half the number of repetitions, and the timeout.
    This reduces the time needed for the pathological tests.

  * Shrink 'struct cmark_node' (#446). The 'internal_offset' member is
    only used for headings and can be moved to 'struct cmark_heading'.
    This reduces the size of 'struct cmark_node' from 112 to 104 bytes on
    64-bit systems.

  * Add '-Wstrict-prototypes' and fix offending functions.

  * Fix quadratic behavior involving 'get_containing_block' (#431).
    Instead of searching for the containing block, update the tight list
    status when entering a child of a list item or exiting a list.

  * Fix 'pathological_tests.py'
    - Use a multiprocessing.Queue to actually get results from spawned
      tests processes.
    - Fix the 'allowed_failures' test.
    - Truncate actual output when printed.
    - Prepare for testing pathological behavior of the Commonmark renderer.

  * Fix source position bug with backticks

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 69aea3d8f7)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-19 15:51:19 +02:00
Ivan Maidanski 8bd5100b42 bdwgc: Fix typo in EXTRA_OECONF and remove unneeded extra CFLAGS
* fix typo in "--enable-cplusplus"
* "-D_GNU_SOURCE -DNO_GETCONTEXT -DSEARCH_FOR_DATA_START -DUSE_MMAP -DHAVE_DL_ITERATE_PHDR" not needed any more

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d7d0d550d0)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 13:50:00 +02:00
alperak bc0fb4d568 avro-c: upgrade 1.11.2 -> 1.11.3
Changelog:

* This is a minor release, specifically addressing known issues with the 1.11.2 release, but also contains version bumps and doc fixes.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e1552304bf)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 13:50:00 +02:00
Wang Mingyu caf2c230c2 avro-c: upgrade 1.11.1 -> 1.11.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 52f35e4010)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 13:50:00 +02:00
wangmy bcadc3962d avro-c: upgrade 1.11.0 -> 1.11.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d6a30ef441)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 13:50:00 +02:00
Khem Raj 56093c6c1f augeas: Check for __GLIBC__ to use gnu extention for strerror_r
Merge .bb and .inc

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit aca683fb18)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 13:50:00 +02:00
Yoann Congal aaea7c1349 testfloat: update UPSTREAM_CHECK_* variables to fix devtool upgrades
Update UPSTREAM_CHECK_* variables to fix UNKNOWN_BROKEN status with devtool
check-upgrade-status.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr>
(cherry picked from commit 21e3280fad)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 13:50:00 +02:00
Gyorgy Sarvari eb322a5d69 pm-qa: update git fetch protocol
Apparently the git repo in the SRC_URI stopped supporting git
protocol. Switch to https to be able to fetch the source successfully.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 13:49:56 +02:00
Alexandre Truong cdaef4097d fb-test: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
When performing devtool check-upgrade-status, UNKNOWN_BROKEN status appears.
On the upstream source repository, releases are not identified by tags. So,
UPSTREAM_CHECK_COMMITS is set to 1, to find the latest upstream update.

Signed-off-by: Alexandre Truong <alexandre.truong@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 16688b0f56)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 13:16:18 +02:00
Gyorgy Sarvari d6fb7f426b readme: update maintainer
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:49:40 +02:00
Philip-Dylan Gleonec 974f15b1a8 cukinia: Fix license field
The recipe currently indicates that the cukinia package is licensed
under both GPLv3 AND Apache 2.0 licenses, but the upstream specifies
using it under GPLv3 OR Apache 2.0 license, is user's choice.

Signed-off-by: Philip-Dylan Gleonec <philip-dylan.gleonec@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cb8908b91e)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:44:04 +02:00
Martin Jansa b13d85379f cukinia: drop allarch
* it rdepends on TUNE_PKGARCH libgpiod-tools so it cannot be allarch
  (or cukinia->libgpiod-tools needs to be added to SIGGEN_EXCLUDE_SAFE_RECIPE_DEPS)

  bitbake-diffsigs \
    sstate-before/mako/all-webos-linux/cukinia/0.6.2.do_package_write_ipk.sigdata.630262028cb276fdac170d30a265aa72d4249f84a264e11ea676a5ab38f1cacc \
    sstate-before/qemux86-64/all-webos-linux/cukinia/0.6.2.do_package_write_ipk.sigdata.5d193e43c71f1270d36075be6124bb70585bb682771cff644349c4a7ffd13605
  Hash for task dependency libgpiod:do_packagedata changed from d3dffb55884b89470065c3eaf046563e2f306706400be396b022a470ceca1916 to 76e47aed399fdbd14db3c4b75ef2b83298322429f111175d4ca4f3f4c67eebf0

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1db563c310)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:43:57 +02:00
Enguerrand de Ribaucourt db86493987 cukinia: add libgpiod-tools to RRECOMMENDS
The cukinia statement `cukinia_gpio_libgpiod` requires the `gpioinfo`
command. Alternatively, the deprecated sysfs GPIO API can be used with
`cukinia_gpio_sysfs`.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit deaa4c111f)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:43:50 +02:00
Enguerrand de Ribaucourt 8aca18fe33 cukinia: inherit allarch
The recipe installs a shell script which does not depend on the
architecture. Inheriting allarch will make sure that the recipe is
built only once accross different architectures.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 97c9e5c38d)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:43:43 +02:00
Enguerrand de Ribaucourt 1ef08b7a0a cukinia: upgrade 0.6.1 -> 0.6.2
Changes:
    cukinia: add /proc/cmdline parameter check
    cukinia: add test suite and class to csv
    cukinia: add kernel config check in boot partition
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit daf73e7279)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:43:36 +02:00
Wang Mingyu 727066f75c cukinia: upgrade 0.6.0 -> 0.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5f2c3b32dd)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:43:29 +02:00
Peter Marko ca277f3e78 cpputest: add possibility to build extensions
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8c0402f7c4)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:43:22 +02:00
alperak a2d885c08a catch2: upgrade 2.13.7 -> 2.13.10
v2.13.10:
    Fixes:

        -Fixed issue with catch_discover_tests when there is multiple of 256 tests (#2401, #2503)
        -Catch2-provided main and wmain are explicitly marked as __cdecl when compiled with MSVC (#2486, #2487)
        -Improved break-into-debugger behaviour for ARM Macs. It should now be possible to step execution after the break (#2422)
        -Replaced deprecated std::aligned_storage (#2419, #2420)

v2.13.9:
    Fixes:

        -Fixed issue with -# (filename-as-tag) flag when __FILE__ expands into filename without directories (#2328, #2393)
        -Fixed CAPTURE macro not being variadic when disabled through CATCH_CONFIG_DISABLE (#2316, #2378)

v2.13.8:
    Fixes:

        -Made Approx::operator() const (#2288)
        -Improved pkg-config files (#2284)
        -Fixed warning suppression leaking out of Catch2 when compiled with clang.exe (#2280)
        -The macro-generated names for things like TEST_CASE no longer create reserved identifiers (#2336)

    Improvements:

        -Clang-tidy should no longer warn about missing virtual dispatch in FilterGenerator's constructor (#2314)

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1bdab916b1)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:43:14 +02:00
Joe Slater 6bcb03ca25 bats: use baselib
Use sed to change scripts to reference ${baselib}.  The
former set of scripts modified was incomplete.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1cc72c41af)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-18 11:43:00 +02:00
Gyorgy Sarvari 5c13812501 readme: update maintainer
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-16 09:04:49 +02:00
Gyorgy Sarvari bd7690a479 hunspell-dictionaries: fix SRC_URI
The master branch has been renamed to main.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:27:59 +02:00
Yogita Urade 110e57abb5 poppler: fix CVE-2025-52886
Poppler is a PDF rendering library. Versions prior to 25.06.0
use `std::atomic_int` for reference counting. Because
`std::atomic_int` is only 32 bits, it is possible to overflow
the reference count and trigger a use-after-free. Version 25.06.0
patches the issue.

CVE-2025-52886-0001 and CVE-2025-52886-0002 are dependent commits
while rest are actual CVE fixes.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-52886
https://security-tracker.debian.org/tracker/CVE-2025-52886

Upstream patches:
https://gitlab.freedesktop.org/poppler/poppler/-/commit/d35e11a8f84d396a9d9ef43ef852d377adc3830a
https://gitlab.freedesktop.org/poppler/poppler/-/commit/af3e1e1a3577c4e1c66cbe69ebdc6a632038e299
https://gitlab.freedesktop.org/poppler/poppler/-/commit/3449a16d3b1389870eb3e20795e802c6ae8bc04f
https://gitlab.freedesktop.org/poppler/poppler/-/commit/ac36affcc8486de38e8905a8d6547a3464ff46e5

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:27:59 +02:00
Vijay Anusuri 10b6475cf2 openjpeg: Fix CVE-2025-50952
Upstream commit:
https://github.com/uclouvain/openjpeg/commit/d903fbb4ab9ccf9b96c8bc7398fafc0007505a37

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:27:59 +02:00
Hitendra Prajapati f3a6203fa0 libssh: fix CVE-2025-4877
Upstream-Status: Backport from https://git.libssh.org/projects/libssh.git/commit/?id=6fd9cc8ce3958092a1aae11f1f2e911b2747732d

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:27:52 +02:00
Guocai He 1282441198 libnet: backport patch to remove configure time SOCK_PACKET check
Backport [1] to fix the do_configure error like below:

  checking for packet socket (PF_PACKET)... ./pf_packet-test:
  /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.34' not found

[1] https://github.com/libnet/libnet/commit/19979c4541ddcc817c64ea911a309ee71a8cc250

Signed-off-by: Qi Chen <Qi.Chen@windriver.com>
Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:27:30 +02:00
Guocai He afb55dd330 unixodbc: fix odbc.pc file generation
The build process currently succeeds but the odbc.pc file is not correctly
generated.

The error message is like below in log.do_compile and log.do_install:

  /bin/bash: line 1: ../exe/odbc_config: cannot execute binary file: Exec format error

I can see the message comes from the following line in exe/Makefile.am:

@sed "s![@]ODBC_ULEN[@]!`$(top_builddir)/exe/odbc_config$(EXEEXT) --ulen`!" \
          $(top_builddir)/DriverManager/odbc.pc > $(top_builddir)/exe/odbc.pc.tmp

It's running the exe/odbc_config program we built out. But the binary is for the target
platform and if we run it on the build host, we get that error message. The resulting ulen
and build_cflags in the final odbc.pc file are also empty.

Fix the issue by using qemu usermode to launch the target binary.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>

(master rev: 4cbd72f7b9)

Signed-off-by: Guocai He <guocai.he.cn@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-06 16:27:30 +02:00