Commit Graph

14235 Commits

Author SHA1 Message Date
Peter Marko f4a6966bf0 libtinyxml: patch CVE-2023-34194
Take patch from Debian:
https://salsa.debian.org/debian/tinyxml/-/commit/2366e1f23d059d4c20c43c54176b6bd78d6a83fc

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 16:49:01 -08:00
Peter Marko 066cf35ae5 libtinyxml: patch CVE-2021-42260
Take patch from Debian:
https://salsa.debian.org/debian/tinyxml/-/commit/38db99c12e43d7d6e349403ce4d39a706708603d

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 16:49:01 -08:00
Akash Hadke 59614eafb0 fitimage.bbclass: Remove True option to getVar calls
getVar() now defaults to expanding by default, thus remove the True
option from getVar() calls with a regex search and replace.

Signed-off-by: Akash Hadke <akash.hadke27@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 09:33:53 -08:00
Khem Raj a32b953c14 spdlog: Switch to latest on 1.x branch
This gets up fmt 11.1 support

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 09:33:52 -08:00
Christian Lindeberg 8d635b0510 crucible: Use go module fetcher
Use the go module fetcher instead of allowing network access during the
compile task.
Reorder variables according to the recipe style guide.

Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 09:33:51 -08:00
Khem Raj ef917bce9a mariadb: Upgrade to 10.11.10
Drop 0001-Use-a-lambda-function-as-deleter-prototype-in-unique.patch its
already in this version

Drop ppc musl patch, a check for glibc is already added in this version

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-10 09:33:23 -08:00
Khem Raj d81e3e2520 spdlog: Upgrade to 1.15.0
Use bundled fmt, it still needs 11.0.x and one in OE-core has moved to
11.1.x

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-08 20:41:39 -08:00
Jason Schonberg 51e0cf9d93 c-ares: upgrade 1.29.0 -> 1.30.0
License-Update: Whitespace changes.

Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.30.0

Features:

    Basic support for SIG RR record (RFC 2931 / RFC 2535) PR #773

Changes:

    Validation that DNS strings can only consist of printable ascii characters
    otherwise will trigger a parse failure. 75de16c and 40fb125
    Windows: use GetTickCount64() for a monotonic timer that does not wrap. 1dff8f6

Bugfixes:

    QueryCache: Fix issue where purging on server changes wasn't working. a6c8fe6
    Windows: Fix Y2K38 issue by creating our own ares_timeval_t datatype. PR #772
    Fix packaging issue affecting MacOS due to a missing header. 55afad6
    MacOS: Fix UBSAN warnings that are likely meaningless due to alignment issues
    in new MacOS config reader.
    Android: arm 32bit build failure due to missing symbol. d1722e6

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-08 16:37:35 -08:00
Jason Schonberg a3f31bcbc6 onig: upgrade 6.9.9 -> 6.9.10
Changelog:

  * Update Unicode version 16.0
  * Add new operator (*SKIP)
  * Fixed: ONIG_SYN_CONTEXT_INDEP_REPEAT_OPS not working for ^* pattern (Issue #292)

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 19:39:34 -08:00
Khem Raj 14b3a5ccb2 pocketpy: Add pic options to cflags
Ensures that PIC is always used to build

Fixes
error: relocation R_386_PC32 cannot be used against symbol 'LZ4_compress_fast_extState'; recompile with -fPIC

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 18:41:11 -08:00
Khem Raj 7b6d24f9de mozjs-128: Fix riscv arch specification in triplets
Rust needs it these days

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 18:41:10 -08:00
Wang Mingyu b9a1eaa15f pocketpy: upgrade 2.0.3 -> 2.0.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 18:41:10 -08:00
Jason Schonberg 7be5024b70 c-ares: upgrade 1.28.1 -> 1.29.0
Changelog : https://github.com/c-ares/c-ares/releases/tag/cares-1_29_0

Features:

    When using ARES_OPT_EVENT_THREAD, automatically reload system configuration
    when network conditions change. PR #759
    Apple: reimplement DNS configuration reading to more accurately pull DNS
    settings. PR #750
    Add observability into DNS server health via a server state callback, invoked
    whenever a query finishes. PR #744
    Add server failover retry behavior, where failed servers are retried with
    small probability after a minimum delay. PR #731

Changes:

    Mark ares_channel_t * as const in more places in the public API. PR #758

Bugfixes:

    Due to a logic flaw dns name compression writing was not properly implemented
    which would result in the name prefix not being written for a partial match.
    This could cause issues in various record types such as MX records when using
    the deprecated API. Regression introduced in 1.28.0. Issue #757
    Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say it does and
    causes c-ares to become non-functional. PR #754
    ares_getnameinfo(): loosen validation on salen parameter. Issue #752
    cmake: Android requires C99. PR #748
    ares_queue_wait_empty() does not honor timeout_ms >= 0. Issue #742

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 18:41:10 -08:00
Wang Mingyu 63c10fdf0a libbpf: upgrade 1.4.7 -> 1.5.0
Changelog:
 https://github.com/libbpf/libbpf/releases/tag/v1.5.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Wang Mingyu baace33210 composefs: upgrade 1.0.5 -> 1.0.8
License-Update: Relicense most code under GPL-2.0-or-later OR Apache-2.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Wang Mingyu be2c8c1f0b byacc: upgrade 20230219 -> 20241231
0001-byacc-do-not-reorder-CC-and-CFLAGS.patch
refreshed for 20241231

Licese-Update: copyright year updated to 2024

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Wang Mingyu 5ba86eafe5 doxygen: upgrade 1.13.0 -> 1.13.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Wang Mingyu b5fa11eb22 ctags: upgrade 6.1.20241229.0 -> 6.1.20250105.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:13 -08:00
Preeti Sachan d634c5c1a6 bpftool: fix libelf.h not found error
When build host machine is not installed with elfutils-libelf-devel, it
throws compile error "libelf.h: No such file or directory". Fix missing
headers file by including path ${STAGING_INCDIR_NATIVE} via CFLAGS variable.
Use headers file from ${STAGING_INCDIR_NATIVE} instead of host machine.

Error:
| libbpf_internal.h:19:10: fatal error: libelf.h: No such file or directory

Signed-off-by: Preeti Sachan <preeti.sachan@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:13 -08:00
Jörg Sommer 2b2c15d774 kernel-hardening-checker: New recipe to check security options
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-06 07:22:29 -08:00
Yi Zhao 6387b30d30 malcontent: set pam module path to ${base_libdir}/security
Set pam module path to ${base_libdir}/security as this is the default
path in libpam.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-06 07:22:29 -08:00
Yi Zhao ff119e949e mariadb: set pam module path to ${base_libdir}/security
Set pam module path to ${base_libdir}/security as this is the default
path in libpam.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-06 07:22:29 -08:00
Yi Zhao 83a8e761ed snapper: set pam module path to ${base_libdir}/security
Set pam module path to ${base_libdir}/security as this is the default
path in libpam.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-06 07:22:29 -08:00
Darrel Griët d89fc818b7 polkit: Install rules in subdir
https://github.com/openembedded/meta-openembedded/commit/d5e90541f8e35916abc930b2da6de037b23d51a1
moved the rules to /usr/share/ instead of /etc/. The commit also removed the
install:prepend() step.
This results in the rules being installed as file /usr/share/polkit-1/rules.d
instead of in that folder.

This commit adds back the install prepend step such that the rules are installed
in said folder.

Signed-off-by: Darrel Griët <dgriet@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-05 22:46:36 -08:00
Jörg Sommer 1c60b8ccf7 libtinyxml2: set CVE product to tinyxml2
This library gets tracked with the product name tinyxml2:

https://nvd.nist.gov/products/cpe/detail/5A6C04CB-E6AD-4740-882A-34620AEC060A

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-03 11:34:03 -08:00
Jörg Sommer c5ef63d685 libtinyxml: set CVE product to tinyxml
This library gets tracked with the product name tinyxml:

https://nvd.nist.gov/products/cpe/detail/95BDA29F-257C-4C44-8847-25CFC107228D

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-03 11:34:03 -08:00
Divya Chellam 5c2793258e grpc: upgrade 1.66.1 -> 1.68.0
This includes CVE-fix for CVE-2024-11407

Changelog:
==================================
https://github.com/grpc/grpc/releases/tag/v1.68.0
https://github.com/grpc/grpc/compare/v1.66.1...v1.68.0

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-03 10:17:22 -08:00
Ayoub Zaki 338e2ff78b botan: update 3.5.0 -> 3.6.1
* update to latest 3.6.1 Version
* add packaging for botan binary and botan-test tool

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-03 10:17:22 -08:00
Ayoub Zaki 8bdd4740b2 bmap-writer: update to latest git version
* switch to libarchive to handle a larger decompression schemes

* implement own sha256 hashing and drop openssl dependency

* compute maximum buffer size before writing each range

* bmap file optional: if not provided, it will be searched in the same path as the input

* print time/speed of the writing operation

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:49:49 -08:00
Bartosz Szostak 33bc1313cf yyjson: add new recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:49:49 -08:00
Bartosz Szostak 21ce886005 ctre: add new recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:49:49 -08:00
Bartosz Szostak 5bd1d5ad77 jsoncons: add new recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:49:48 -08:00
Yi Zhao 07cdb574a5 libbpf: upgrade 1.4.6 -> 1.4.7
ChangLog:
https://github.com/libbpf/libbpf/releases/tag/v1.4.7

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:19 -08:00
Yi Zhao de93141c92 pahole: upgrade 1.27 -> 1.28
ChangeLog:
https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tree/changes-v1.28

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao b2f7a5e3eb tigervnc: upgrade 1.14.0 -> 1.14.1
ChangeLog:
https://github.com/TigerVNC/tigervnc/releases/tag/v1.14.1

* Update xorg-server to 21.1.15

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao 1768156191 openldap: upgrade 2.6.8 -> 2.6.9
ChangeLog:
https://www.openldap.org/software/release/changes.html

Drop 0001-fix-incompatible-pointer-type-error.patch as the issue has
been fixed upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao f5676076df mce-inject: update to latest git rev
7668d820 simulate a MCE event happened during TDX guest context

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Jiaying Song da361d2d7c eject: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
WARNING: eject-2.1.5-r0.wr2401 do_fetch: Failed to fetch URL http://sources.openembedded.org/eject-2.1.5.tar.gz, attempting MIRRORS if available

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:17 -08:00
Yi Zhao f65596ce3e nss: upgrade 3.103 -> 3.107
* Refresh patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:17 -08:00
Yi Zhao bdb41e2659 nspr: upgrade 4.35 -> 4.36
* Refresh patches.
* Drop 0001-Fix-Wincompatible-function-pointer-types.patch as the issue
  has been fixed upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:17 -08:00
Wang Mingyu 4450ecbb31 parallel: upgrade 20241122 -> 20241222
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:04 -08:00
Wang Mingyu b9bae24144 libsdl2-image: upgrade 2.8.3 -> 2.8.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:04 -08:00
Wang Mingyu 16e5e77e5d flatbuffers: upgrade 24.3.25 -> 24.12.23
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:03 -08:00
Wang Mingyu 4685607ee0 doxygen: upgrade 1.12.0 -> 1.13.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:03 -08:00
Wang Mingyu ff5f84b316 ctags: upgrade 6.1.20241222.0 -> 6.1.20241229.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:03 -08:00
Changqing Li 230ddc9439 poppler: upgrade 24.11.0 -> 24.12.0
* Upgrade 24.11.0 -> 24.12.0
* Backport patch 0001-Don-t-update-pdfsig.pot-when-POT-Creation-date-is-th.patch
  to fix a parallel build issue, refer [1]

[1] https://gitlab.freedesktop.org/poppler/poppler/-/issues/1550

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-29 19:38:05 -08:00
Hongxu Jia 79fbbad63c pahole: update COMPATIBLE_HOST setting
Due to pahole build depend on pahole, and libbpf added more architectures
to COMPATIBLE_HOST [1], add the same COMPATIBLE_HOST setting to pahole

$ echo "MACHINE = 'qemuloongarch64'" >> conf/local.conf
$ bitbake world
ERROR: Nothing PROVIDES 'libbpf' (but meta-openembedded/meta-oe/recipes-devtools/pahole/pahole_1.27.bb DEPENDS on or otherwise requires it)
libbpf was skipped: incompatible with host loongarch64-wrs-linux (not in COMPATIBLE_HOST)
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'pahole', 'libbpf']

[1] https://git.openembedded.org/meta-openembedded/commit/?id=bb8049afe96db57707afc259743e288bec456117

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-28 08:21:24 -08:00
Markus Volk b74b4cd7b2 malcontent: update 0.12.0 -> 0.13.0
Overview of changes in malcontent 0.13.0
========================================

* Bugs fixed:
  - #48 Parental controls app: show the launcher, or merge into Settings?
    (Philip Withnall)
  - !172 Update fa.po
  - !173 Update Czech translation
  - !176 malcontent-control: Update metainfo file
  - !177 Update Swedish translation
  - !179 docs: Add list of legal references for relevant countries’ laws
  - !180 po: Update Slovenian translation
  - !181 Update Polish translation 240909
  - !182 Add Chinese translation
  - !183 application: Fix opening Settings
  - !184 malcontent-control: Call setlocale() earlier to fix early i18n
  - !185 restrict-applications-selector: Fix pending changes being lost on
    search
  - !186 libmalcontent-ui: Port to libadwaita 1.6
  - !187 app-filter: Fix logic for allowlist filtering on GAppInfo

* Translation updates:
  - Chinese (China) (lumingzh)
  - Czech (AsciiWolf)
  - Persian (Danial Behzadi)
  - Polish (Piotr Drąg)
  - Slovenian (Martin Srebotnjak)
  - Swedish (Anders Jonsson)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 23:00:37 -08:00
Peter Marko 88faae83b2 audiofile: patch CVE-2017-6839
Use patch from buildroot:
https://github.com/buildroot/buildroot/commit/844a7c6281eb442881330a5d36d5a0719f2870bf

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:44 -08:00
Peter Marko 9d668989b1 audiofile: patch CVE-2017-6831
Use patch from buildroot:
https://github.com/buildroot/buildroot/commit/bd5f84d301c4e74ca200a9336eca88468ec0e1f3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:44 -08:00