Commit Graph

38086 Commits

Author SHA1 Message Date
Gyorgy Sarvari f22e17508e libgphoto2: patch CVE-2026-40338
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40338

Backport the patch referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:35 -07:00
Gyorgy Sarvari 078f26b084 libgphoto2: patch CVE-2026-40336
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40336

Backport the patch referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:35 -07:00
Gyorgy Sarvari f735ea20b1 libgphoto2: patch CVE-2026-40335
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40335

Backport the patch that is referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:34 -07:00
Gyorgy Sarvari ce3fa8ad2a libgphoto2: patch CVE-2026-40334
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40334

Backport the patch that is referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:34 -07:00
Gyorgy Sarvari 754e02c668 libgphoto2: patch CVE-2026-40333
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40333

Backport the patch referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:34 -07:00
Gyorgy Sarvari 24d9844515 gphoto2: upgrade 2.5.28 -> 2.5.32
Drop patches that were merged in this release.

Changelog:
- --get-exif , --get-all-exif added
- --reverse modifier option added for fileoperations commands
- kill -USR2 can now stop --capture-movie
- updated translations

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:34 -07:00
Gyorgy Sarvari f896922914 libcoap: upgrade 4.3.5a -> 4.3.5b
Contains fix fox CVE-2026-29013

Shortlog:
https://github.com/obgm/libcoap/compare/v4.3.5a...v4.3.5b

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:34 -07:00
Gyorgy Sarvari c0a8cec24e lcms: patch CVE-2026-41254
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-41254

Backport the patches referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:34 -07:00
Gyorgy Sarvari 2b1e34f0f5 jq: patch CVE-2026-39979
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-39979

Backport the patch that is referenced by the NVD advisory.y

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:33 -07:00
Gyorgy Sarvari 8d399af333 jq: patch CVE-2026-33948
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33948

Backport the patch that is referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:33 -07:00
Gyorgy Sarvari 525e18ce21 jq: patch CVE-2026-33947
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33947

Backport the patch that is referenced by the NVD report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:33 -07:00
Gyorgy Sarvari e94ab85126 jq: patch CVE-2026-32316
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-32316

Backport the patch that is referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:33 -07:00
Gyorgy Sarvari 6fb954e736 fio: upgrade 3.41 -> 3.42
Contains fix for CVE-2026-30656. Also mark this CVE as patched
explicitly, as NVD tracks it without version info.

Drop patches that are included in this release.

Changelog:
https://github.com/axboe/fio/releases/tag/fio-3.42

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>

fio

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:33 -07:00
Markus Volk 7bf89d06a4 libdvdread: use https for fetching code
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 13:47:20 -07:00
Markus Volk ae92a2993c libdvdcss: use https for fetching code
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 13:47:19 -07:00
Markus Volk b50fbdd66b libdvdnav: use https for fetching code
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 13:47:19 -07:00
Khem Raj 5f254f737c enca: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 00:11:35 -07:00
Khem Raj b620c1f7a6 libkcapi: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 00:11:35 -07:00
Khem Raj 7d0bd988bb highway: Update to latest tip of trunk
This brings fixes to build with clang-22 and C23 support

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-18 00:11:35 -07:00
Khem Raj 626ce67c53 dlt-daemon: fix sign-conversion warning in dlt_timer_conn_types array type
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 23:39:32 -07:00
Khem Raj 9707426b83 liboauth2: Add knob for code coverage
Keep the knob disabled by default, as it will need
c runtime to provide profiling runtime, which is not
compiled into compiler-rt by default. So it ends up
with build failures e.g.

| aarch64-yoe-linux-ld.lld: error: cannot open /mnt/b/yoe/master/kas-build/tmp/work/cortexa72-yoe-linux/liboauth2/2.2.0/recipe-sysroot/usr/lib/clang/22.1.3/lib/aarch64-yoe-linux/libclang_rt.profile.a: No such file or directory
| aarch64-yoe-linux-clang: error: linker command failed with exit code 1 (use -v to see invocation)

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:16:04 -07:00
Khem Raj ee394862b9 sdbus-c++-libsystemd: Upgrade to 259.5
It matches OE-core and has musl support upstream

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:16:04 -07:00
Khem Raj 2a1772dbc8 libcppconnman: Upgrade to 1.0.0
It has one change over last release
https://github.com/amarula/libcppconnman/commit/84fa99d3ba0908ff9debd9191c4eddabf08079d4

Fixes build errors e.g.
| CMake Error at cmake/VersionFromGit.cmake:59 (message):
|   [VersionFromGit] Failed to execute Git: fatal: No names found, cannot
|   describe anything.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:16:04 -07:00
Wenlin Kang 93286ad8b7 xfce4-screensaver: add dependencies libpam and systemd
The meson_options.txt sets authentication-scheme to 'pam' and
session-manager to 'systemd' by default, which requires libpam
and systemd at build time. Add them to DEPENDS to fix the
configuration failures:

../sources/xfce4-screensaver-4.20.2/meson.build:167:20: ERROR: C shared or static library 'pam' not found
../sources/xfce4-screensaver-4.20.2/meson.build:265:26: ERROR: Dependency "libsystemd" not found, tried pkgconfig

Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:16:04 -07:00
Haiqing Bai 70144adc98 drbd-utils: upgrade 9.30.0 -> 9.34.0
Changes:
- Drop 0001-Fix-build-with-gcc-15.patch (merged upstream).
- Add 0001-fix-the-hardcoded-legacy-helper-path.patch: replace the
  hardcoded "/lib/drbd" path in add_lib_drbd_to_path() with the
  build-configured DRBD_LEGACY_LIB_DIR derived from LIBDIR
- Remove sed fixup for the now-absent ocf.ra@.service.
- Install new upstream 50-drbd.preset into systemd system-preset

Signed-off-by: Haiqing Bai <haiqing.bai@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:16:04 -07:00
Khem Raj 574aa17a02 libtoml11: Fix build with C23 and clang
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-17 14:15:58 -07:00
Khem Raj 3e04c621c4 magic-enum: Upgrade to latest
It has fixes for C23 and Clang-22 added also fixes/workarounds for
libstdc++-14 combinations with different versions of gcc and clang.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 16:30:37 -07:00
Khem Raj c1765cd254 streamripper: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 16:30:37 -07:00
Khem Raj 515a0ba30d composefs: Fix incompatible pointer type qualifier mismatches
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 16:30:37 -07:00
Peter Marko d4e052c45e poco: upgrade 1.15.1 -> 1.15.2
Remove explicit libatomic code from recipe as upstream has implemented
it in cmake. Tested build with all 4 qemu<arch> machines.

Release notes [1]:

Release 1.15.2 (2026-04-16)
===========================

Summary of Changes:

This release focuses on security hardening and bug fixes. Key changes include
TLS 1.3 support for NetSSL_Win, building Crypto and NetSSL with
OPENSSL_NO_DEPRECATED, removal of deprecated non-EVP OpenSSL code (breaking
change), significant multipart parsing performance improvements, Prometheus
thread/CPU metrics, GNU Hurd platform support, and numerous bug fixes across
networking, cryptography, and data handling. All bundled third-party libraries
have been updated to their latest releases.

Breaking Changes:

- GH #4602 OpenSSL: Remove deprecated non EVP code

Security Fixes:

- PR #5306 chore(dependencies): refresh bundled third-party libraries
- GH #5296 Crypto and NetSSL_OpenSSL should build with OPENSSL_NO_DEPRECATED defined
- GH #5278 NetSSL_Win does not support TLS 1.3

Bundled Third-Party Library Upgrades:

- libpng 1.6.55 -> 1.6.57 - security fixes
- libharu (hpdf) 2.4.5 -> 2.4.6 - security (TTF fixes) + memory alloc / Windows build fixes
- SQLite 3.51.2 -> 3.53.0 - WAL-reset database corruption fix, query planner improvements
- Quill 11.0.2 -> 11.1.0 - thread-local context fix, nullptr checks, backend poll hooks

Features and Enhancements:

- PR #5305 enh(Foundation): auto-disable FastLogger on unsupported platforms
- PR #5303 enh: bump macOS deployment target to 15.0 (Sequoia)
- PR #5300 chore(PropertyConfigurationFile): use '=' as default separator
- PR #5298 Foundation: Fix sign-compare warnings in StreamConverter
- PR #5294 Link with atomic library on architectures that need it
- GH #5292 enh: reduce binary size growth since 1.14.2
- GH #5291 Component Install Support
- PR #5286 fix(cmake,DNSSD): build fixes and cmake dependency resolution
- GH #5280 Remove WinDriver.cpp files
- GH #5275 Prometheus: add memory and thread metrics
- GH #5266 PropertyFileConfiguration: add include file capability
- GH #5250 Poco::Net::Context::addCertificateAuthority() could include a call to SSL_CTX_load_verify_locations()
- GH #4846 NetSSL/Crypto: Replace deprecated OpenSSL features

Bug Fixes and Improvements:

- PR #5309 fix(Redis,XML,CppParser): replace dynamic_cast with static_cast for hidden visibility
- GH #5308 Net: SocketProactor reports success on TCP write after non-blocking connect refusal
- PR #5304 fix(MongoDB): suppress false topology change notifications on heartbeat
- PR #5293 Port library to GNU Hurd
- GH #5288 Fuzzing Issue in MailMessage
- GH #5287 Fuzzing Issue in DateTime
- PR #5284 fix(Redis): use shared_ptr for NotificationCenter, harden AsyncNotificationCenter::stop()
- PR #5283 fix(ApacheConnector,Foundation): fix compile warnings with GCC 15
- GH #5269 Pipe close deadlocks on
- PR #5264 fix(Data): Robust date/time parsing in SQLite/PostgreSQL extractor
- GH #5263 X509Certificate validFrom method throws exception for timestamps ending with Z
- GH #4883 SecureSocketImpl::shutdown() regression since 1.14.0
- GH #4772 InvalidCertificateHandler onInvalidCertificate wrong exception
- GH #4118 Poco Multipart parsing is 10x slower than its Boost/beat or restinio equivalent
- GH #1097 Process::isRunning returns true for defunct tagged process

[1] https://github.com/pocoproject/poco/blob/poco-1.15.2-release/CHANGELOG

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 16:30:37 -07:00
Scott Murray a38bcc23f7 mpd: Fix systemd user unit installation
systemd_system_unitdir was accidentally used as the destination for
the user systemd unit, which means it overwrites the system unit.
Correct it to systemd_user_unitdir to fix starting with the system
unit.

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 16:30:37 -07:00
Jörg Sommer 750982ed27 fswebcam: Add RRECOMMENDS ttf-dejavu-sans
Add a recommendation for a sans serif font to print text on images. But
fswebcam works fine without a font to save only plain images.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 13:08:19 -07:00
Jörg Sommer ee20c1a573 libraqm: New recipe for a library for complex text layout
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 13:08:19 -07:00
Jörg Sommer be9f029b6c gd: Support PACKAGECONFIG
Some recipes (like fswebcam) need gd with support of fontconfig to really
work. Otherwise font selection is not that easy.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 13:08:19 -07:00
Changqing Li 2df018ea4b dlt-daemon: fix missing application description
Running "dlt-example-user 'test'",
Check "dlt-control -j localhost", will not get application description:
APID:LOG-

Expected:
APID:LOG- Test Application for Logging

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Khem Raj 2b16c16389 packagegroup-meta-python: Enable python3-pyatspi conditional upon GI data
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Khem Raj 268b24cf14 packagegroup-meta-oe: Make pcp and remmina depend upon x11 distro feature
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Khem Raj d7386465ee xrdp: Guard ptests with x11 distro feature
xrdp only builds when x11 is enabled, make it consistent

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Khem Raj 0c5517ff10 hiawatha: Upgrade to 12.1 release
- HTTP/2 support added via the nghttp2 library
  (credits to Heiko Zimmermann) — noted as experimental, so
  testing carefully before enabling on production servers is
  recommended.
- mbed TLS updated from 4.0.0 to 4.1.0.
- ssi-cgi removed — the release notes suggest using
  Hiawatha's XSLT support as a more advanced alternative.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj dd3221a5e7 taisei: Fix build with glibc 2.43 + c23
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj ec5480d068 eog: Update to 49.3
Turn color management into packageconfig knob which is turned
off by default as it needs x11 support.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj 975376f1c7 ruli: Delete -ansi and -pedantic from compiler commandline
The build fails because ruli is compiled with -ansi
(which implies C89/C90), but glibc's memchr macro
uses _Generic, a C11 feature. Clang treats this as
an error via -Werror,-Wc11-extensions.

Fixes build with glibc 2.43+

| ruli_conf.c:86:12: error: '_Generic' is a C11 extension [-Werror,-Wc11-extensions]
|    86 |       if (!memchr(inbuf, '\0', LOAD_SEARCH_LIST_INBUFSZ))
|       |            ^

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj e1f95af4ba meta-oe/recipes: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj e488423e25 audiofile: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Drop enforcing -std=c++14 as thats no longer needed

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:07 -07:00
Khem Raj 0581dcc49b sthttpd: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:06 -07:00
Khem Raj 6b90623439 dante,openflow,linux-atm: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:06 -07:00
Khem Raj 9954723208 ruli: disable C23 support to fix build
Avoid potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:06 -07:00
Khem Raj 2571280d86 dhcp-relay: disable C23 support to fix configure check
Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23
compiler support, avoiding potential build failures as the package
is not yet fully ported to support C23 standard.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:06 -07:00
Khem Raj 930d936313 libvarlink: Fix build with C23 support in glibc
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 22:46:00 -07:00
Khem Raj 0d39d65c0e systemd-netlogd: Upgrade to 1.4.5 release
Fix build on 32-bit with 64-bit time_t
Fix build with C23 on

For full details:
https://github.com/systemd/systemd-netlogd/releases/tag/v1.4.5

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 22:46:00 -07:00