mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-14 05:49:57 +00:00
Code Issues Projects Releases Wiki Activity
Files
e06fe48896aee83cc8a5cb581b6e1c0c3ddcf563
meta-openembedded/meta-oe/recipes-support
T
History
Yogita Urade 199ca4579c poppler: fix CVE-2025-52885 
Poppler ia a library for rendering PDF files, and examining or
modifying their structure. A use-after-free (write) vulnerability
has been detected in versions Poppler prior to 25.10.0 within the
StructTreeRoot class. The issue arises from the use of raw pointers
to elements of a `std::vector`, which can lead to dangling pointers
when the vector is resized. The vulnerability stems from the way that
refToParentMap stores references to `std::vector` elements using raw
pointers. These pointers may become invalid when the vector is resized.
This vulnerability is a common security problem involving the use of
raw pointers to `std::vectors`. Internally, `std::vector `stores its
elements in a dynamically allocated array. When the array reaches its
capacity and a new element is added, the vector reallocates a larger
block of memory and moves all the existing elements to the new location.
At this point if any pointers to elements are stored before a resize
occurs, they become dangling pointers once the reallocation happens.
Version 25.10.0 contains a patch for the issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-52885

Upstream patch:
https://gitlab.freedesktop.org/poppler/poppler/-/commit/4ce27cc826bf90cc8dbbd8a8c87bd913cccd7ec0

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-17 10:51:27 +02:00
..
ace-cloud-editor
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
anthy
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
asio
asio: Add ptest support
2024-12-31 09:02:31 -05:00
atop
meta-oe: ignore patched CVEs
2022-07-21 07:17:15 -07:00
augeas
augeas: Check for __GLIBC__ to use gnu extention for strerror_r
2025-09-18 13:50:00 +02:00
avro
avro-c: upgrade 1.11.2 -> 1.11.3
2025-09-18 13:50:00 +02:00
bdwgc
bdwgc: Fix typo in EXTRA_OECONF and remove unneeded extra CFLAGS
2025-09-18 13:50:00 +02:00
boost-sml
boost-sml: Disable examples
2022-04-13 19:21:41 -07:00
c-ares
c-ares: fix CVE-2024-25629
2024-03-25 07:11:05 -04:00
c-periphery
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
canonical-multitouch
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
ccid
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
ceres-solver
ceres-solver: upgrade 2.0.0 -> 2.1.0
2022-04-06 20:25:34 -04:00
ckermit
…
cli11
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
cmark
cmark: upgrade 0.30.2 -> 0.30.3
2025-09-19 15:51:19 +02:00
colord
colord-native: upgrade 1.4.6 -> 1.4.7
2025-09-19 15:51:46 +02:00
consolation
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
cpp-netlib
Convert to new override syntax
2021-08-03 10:21:25 -07:00
cpprest
…
ctapi-common
ctapi-common: Use archives.fedoraproject.org to fetch srpm
2025-09-19 15:58:31 +02:00
daemonize
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
daemontools
Convert to new override syntax
2021-08-03 10:21:25 -07:00
devmem2
devmem2: the source and patches moved to github repo
2022-06-03 07:01:39 -07:00
dfu-util
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
dhex
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
digitemp
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
dool
dool: Add patch to fix rebuild
2022-12-11 16:18:53 -05:00
driverctl
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
eject
eject: fix do_fetch error
2025-03-29 14:24:38 -04:00
emacs
meta-oe: ignore patched CVEs
2022-07-21 07:17:15 -07:00
enca
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
epeg
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
espeak
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
evemu-tools
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
exiv2
exiv2: fix SRC_URI
2023-03-05 07:44:28 -05:00
farsight
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
fbset
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
fftw
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
fltk
fltk: upgrade 1.3.8 -> 1.3.9
2025-09-19 15:58:31 +02:00
fmt
fmt: upgrade 8.0.1 -> 8.1.1
2022-01-24 09:11:01 -08:00
freerdp
freerdp: fix CVE-2022-39316/39318/39319
2023-05-22 10:07:17 -04:00
function2
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
gd
gd: Fix build with clang-15
2022-09-15 08:27:50 -04:00
gengetopt
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
gflags
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
glog
meta-oe-components: Avoid usage of nobranch=1
2023-09-04 12:01:53 -04:00
gnulib
gnulib: Update SRC_URI
2025-09-19 15:58:31 +02:00
googlebenchmark
googlebenchmark: add 1.6.1
2022-02-14 15:23:32 -08:00
gosu
gosu: add new recipe
2022-03-04 08:28:06 -08:00
gperftools
gperftools: Disable cpu profiles for ppc/musl
2022-03-26 18:15:11 -07:00
gpm
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
gradm
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
gsl
gsl: Disable on musl/ppc
2022-03-26 18:15:11 -07:00
gsoap
Convert to new override syntax
2021-08-03 10:21:25 -07:00
hddtemp
hddtemp: Add missing prototype for ata_get_powermode in sata.c
2025-09-19 15:58:31 +02:00
hdf5
hdf5: add -Wno-error to allow building native with gcc-14 on host
2025-02-09 07:58:21 -08:00
hidapi
hidapi: upgrade 0.10.1 -> 0.11.2
2022-04-11 07:46:51 -07:00
hstr
hstr: add new recipe
2022-03-03 08:50:19 -08:00
htop
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
hunspell
hunspell-dictionaries: fix SRC_URI
2025-09-06 16:27:59 +02:00
hwdata
hwdata: upgrade 0.357 -> 0.358
2022-04-11 07:46:51 -07:00
idevicerestore
idevicerestore: add recipe
2022-03-31 11:54:44 -07:00
iksemel
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
imagemagick
imagemagick: Fix CVE-2022-28463
2025-10-17 10:51:26 +02:00
imapfilter
Convert to new override syntax
2021-08-03 10:21:25 -07:00
inih
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
iniparser
iniparser: Fix CVE-2025-0633
2025-10-17 10:51:26 +02:00
inotify-tools
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
joe
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
lcms
lcms: upgrade 2.12 -> 2.13.1
2022-02-08 08:59:08 -08:00
lcov
lcov: Fix Perl Path
2025-10-01 19:40:59 +02:00
libatasmart
libatasmart: Update SRC_URI to fix fetch issue
2024-10-13 11:19:48 -04:00
libb64
libb64: Add recipe
2021-03-28 12:12:58 -07:00
libbytesize
libbytesize: update github branch to 'main'
2024-01-12 07:14:16 -05:00
libcanberra
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libcereal
libcereal: Enable for glibc/ppc
2022-05-17 05:57:10 -07:00
libcppkafka
libcppkafka: Use CMAKE_INSTALL_LIBDIR instead of hardcoding lib
2022-03-21 08:25:11 -07:00
libcyusbserial
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libee
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libeigen
libeigen: Update GPL-3.0-only to GPL-2.0-only
2024-05-26 15:21:58 -04:00
libestr
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libfann
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libftdi
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libgpiod
libgpiod: move test dependencies to ptest package
2022-06-22 16:24:17 -07:00
libgusb
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libharu
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
libiio
libiio: use main branch instead of master
2023-09-04 12:01:32 -04:00
libjs
libjs-jquery-icheck: Correct LIC_FILES_CHKSUM
2025-10-01 19:40:58 +02:00
liblinebreak
…
libmanette
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libmimetic
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
libmxml
meta-oe-components: Avoid usage of nobranch=1
2023-09-04 12:01:53 -04:00
liboauth
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libol
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
liboop
liboop: set correct LICENSE
2025-10-01 19:40:58 +02:00
libp11
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libraw
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libraw1394
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
librdkafka
librdkafka: Use CMAKE_INSTALL_LIBDIR
2022-03-21 08:25:11 -07:00
librsync
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libsmi
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libsoc
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libssh
libssh: fix CVE-2025-4877
2025-09-06 16:27:52 +02:00
libtar
libtar: patch CVEs
2025-10-01 19:40:58 +02:00
libteam
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libtinyxml
libtinyxml: patch CVE-2023-34194
2025-10-01 19:40:58 +02:00
libtinyxml2
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
liburing
liburing: Define libdir based on environment variable
2022-03-21 08:25:11 -07:00
libusb
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libusbg
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libusbgx
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
libutempter
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
links
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
lio-utils
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
lockdev
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
log4c
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
log4cpp
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
logwarn
Convert to new override syntax
2021-08-03 10:21:25 -07:00
lvm2
libdevmapper: Inherit nopackages
2024-10-13 11:12:49 -04:00
mailcap
Convert to new override syntax
2021-08-03 10:21:25 -07:00
mbuffer
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
mcelog
mcelog: fix compile error
2022-03-31 21:23:05 -07:00
mg
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
mime-support
Convert to new override syntax
2021-08-03 10:21:25 -07:00
minini
…
monit
monit: upgrade 5.31.0 -> 5.32.0
2022-03-29 08:28:38 -07:00
mscgen
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
multipath-tools
multipath-tools: Use https for github
2025-10-01 19:40:58 +02:00
nano
nano: Security fix for CVE-2024-5742
2024-06-27 11:25:07 -04:00
ne10
ne10: append +git instead of gitr+
2025-10-01 19:40:58 +02:00
neon
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
nmon
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
nspr
nspr: Fix build with clang16
2024-12-31 08:56:41 -05:00
nss
nss: patch CVE-2024-6609
2024-12-08 14:39:17 -05:00
onig
onig: add oniguruma to PROVIDES
2021-04-21 08:27:01 -07:00
opencl
clinfo: Upgrade 2.2.18.04.06 -> 3.0.21.02.21
2022-04-15 21:45:45 -07:00
openct
openct: Fix typo in SUMMARY variable
2025-10-01 19:40:58 +02:00
opencv
opencv: fix reproducibility issues
2024-03-25 07:11:05 -04:00
openldap
ITS#10094 libldap/OpenSSL: fix setting ciphersuites
2024-05-28 06:17:26 -04:00
opensc
opensc: fix CVE-2024-45620
2025-01-22 19:28:56 -05:00
opensync
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
p910nd
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
pcp
pcp: Do not search headers on build host during cross compile
2022-03-11 08:00:40 -08:00
pcsc-lite
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
pcsc-tools
pcsc-tools: upgrade 1.5.8 -> 1.6.0
2022-04-14 19:42:10 -07:00
picocom
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
pidgin
meta-oe: ignore patched CVEs
2022-07-21 07:17:15 -07:00
pngcheck
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
poco
poco: Fix ptests
2025-07-13 14:41:35 -04:00
poppler
poppler: fix CVE-2025-52885
2025-10-17 10:51:27 +02:00
portaudio
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
pps-tools
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
procmail
procmail: patch CVE-2017-16844.
2025-10-01 19:40:59 +02:00
pv
pv: update from 1.6.6 to 1.6.20
2022-03-24 09:45:25 -07:00
pxaregs
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
raptor2
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
rdfind
rdfind: fix build with gcc-13
2024-06-27 11:32:10 -04:00
re2
re2: fix branch name from master to main
2022-11-02 06:50:29 -04:00
read-edid
…
remmina
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
rsnapshot
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
rtc-tools
rtc-tools: Update to 2022.02
2022-02-17 11:12:44 -08:00
sass
libsass: upgrade 3.6.5 -> 3.6.6
2025-01-22 19:12:58 -05:00
satyr
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
sdparm
Convert to new override syntax
2021-08-03 10:21:25 -07:00
serial-utils
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
sg3-utils
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
sharutils
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
smarty
smarty: upgrade 4.1.0 -> 4.1.1
2025-10-01 19:40:59 +02:00
span-lite
span-lite: do not inherit ptest
2025-10-01 19:40:59 +02:00
spdlog
spdlog: patch CVE-2025-6140
2025-07-13 14:41:25 -04:00
spitools
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
srecord
srecord: build fix
2022-04-07 17:32:48 -04:00
ssiapi
Convert to new override syntax
2021-08-03 10:21:25 -07:00
stm32flash
stm32flash: upgrade 0.6 -> 0.7
2022-03-29 08:28:38 -07:00
synergy
synergy: patch CVE-2020-15117
2025-10-01 19:40:59 +02:00
syslog-ng
syslog-ng: fix CVE-2024-47619
2025-07-02 20:30:36 -04:00
system-config-keyboard
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
tbb
tbb: upgrade to 2021.5.0
2022-01-12 09:22:34 -08:00
thin-provisioning-tools
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
tokyocabinet
tokyocabinet: fix license
2025-09-26 13:17:10 +02:00
toscoterm
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
tree
tree: fix broken links
2025-10-01 19:40:59 +02:00
uchardet
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
udisks
udisks2: fix CVE-2025-8067
2025-10-17 10:51:23 +02:00
uhubctl
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
uim
uim: Fix build with libtool 2.4.7
2022-03-19 01:45:03 -07:00
unicode-ucd
unicode-ucd: set downloadfilename to include PV
2021-11-01 05:45:17 -07:00
unixodbc
unixodbc: fix odbc.pc file generation
2025-09-06 16:27:30 +02:00
upower
upower: fix location of udev-rules with sysvinit
2022-04-06 20:25:34 -04:00
uriparser
uriparser: upgrade 0.9.6 -> 0.9.8
2024-05-26 15:22:08 -04:00
usb-modeswitch
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
uthash
recipes: Update SRC_URI branch and protocols
2021-11-03 06:57:49 -07:00
utouch
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
vboxguestdrivers
vboxguestdrivers: upgrade 6.1.32 -> 6.1.34
2022-05-17 05:57:10 -07:00
websocketpp
websocketpp: Apply upstream proposed patch to fix a Scons 4.2.0+ build failure
2022-02-14 08:33:23 -08:00
xdelta
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
xdg-user-dirs
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
xmlsec1
xmlsec1: enable native build
2021-12-29 18:32:15 -08:00
xmlstarlet
…
xorg-xrdp
xorg-xrdp: Upgraded from 0.2.5 to 0.2.18.
2022-01-19 09:01:04 -08:00
xrdp
xrdp: Fix buildpaths warning.
2022-08-09 09:54:49 -07:00
xserver-xorg-cvt
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
yaml-cpp
yaml-cpp: Fix cmake export
2023-07-25 07:23:53 -04:00
zbar
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00
zchunk
zchunk: patch CVE-2023-46228
2025-10-17 10:51:27 +02:00
zile
recipes: Update LICENSE variable to use SPDX license identifiers
2022-03-04 17:41:45 -08:00