linux/meta-openembedded.git/meta-gnome, branch whinlatter

gjs: upgrade 1.84.1 -> 1.84.2

2026-04-24T15:43:20+00:00

Version 1.84.2 -------------- - Closed bugs and merge requests: * GtkNotebook.pages GListModel is inaccessible from GJS [#686, !992, Philip Chimento] Signed-off-by: Liu Yiding Signed-off-by: Khem Raj (cherry picked from commit 3797a82feeff34abd161fe7f2daf88a9fbd05cee) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

libwnck3: upgrade 43.2 -> 43.3

2026-04-21T03:27:47+00:00

Version 43.3 ============ * Fix clang warnings. (!66, !68) * Fix regression with class group and application names. (#166) Drop ef0e40d59c32d7ebeb94d242436e3144cefc174a.patch, already included in 43.3. Signed-off-by: Zhang Peng Signed-off-by: Khem Raj (cherry picked from commit 7d1d00858a031e371b3e6c411340b4fc76be4ccd) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

gvfs: upgrade 1.58.2 -> 1.58.4

2026-04-21T03:27:47+00:00

Major changes in 1.58.4 ======================= * Re-release of 1.58.3 due to incorrect release tag; no code changes. Major changes in 1.58.3 ======================= * CVE-2026-28296: ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (Ondrej Holy) * monitor: Do not load monitors when GIO_USE_VFS=local (Ondrej Holy) https://gitlab.gnome.org/GNOME/gvfs/-/blob/1.58.4/NEWS?ref_type=tags Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

gvfs: upgrade 1.58.1 -> 1.58.2

2026-04-21T03:27:47+00:00

Major changes in 1.58.2 ======================= * client: Fix use-after-free when creating async proxy failed (Ondrej Holy) * daemon: Fix race on subscribers list when on thread (Ondrej Holy) * ftp: Validate fe_size when parsing symlink target (Ondrej Holy) * ftp: Check localtime() return value before use (Ondrej Holy) * CVE-2026-28295: ftp: Use control connection address for PASV data (Ondrej Holy) * CVE-2026-28296: ftp: Reject paths containing CR/LF characters (Ondrej Holy) * gphoto2: Use g_try_realloc() instead of g_realloc() (Ondrej Holy) * cdda: Reject path traversal in mount URI host (Ondrej Holy) * client: Fail when URI has invalid UTF-8 chars (Ondrej Holy) * Some other fixes (correctmost, Ondrej Holy) Signed-off-by: Zhang Peng Signed-off-by: Khem Raj (cherry picked from commit 57045ecd657e9d50fa891b4a7c0c91aaec94b7e1) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

gvfs: upgrade 1.58.0 -> 1.58.1

2026-04-21T03:27:47+00:00

Major changes in 1.58.1 ======================= * cdda: Fix duration of last track for some media * build: Fix build when google option is disabled * Fix various memory leaks * Some other fixes * Translation updates Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit a216ab3f7689c4d064644d9a07787833bd29c1b5) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

nautilus: update 49.4 -> 49.5

2026-04-21T03:27:47+00:00

Major Changes in 49.5 ===================== * Bugfixes: - Avoid unnecessary delay before enabling Skip button (parzival) - Fix crash when searching in Starred (Shivam) * Translation updates (GNOME Translation Project contributors) Signed-off-by: Markus Volk Signed-off-by: Khem Raj (cherry picked from commit 866d0d78d50b5a67db44515feb3da426a2236cca) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

nautilus: upgrade 49.3 -> 49.4

2026-04-21T03:27:47+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 7d09cfdb841411136ac81123aaf531cfc41a54e6) Major Changes in 49.4 ===================== * Bugfixes: - Fix crash with gone MTP devices (Adithya) - Don't count children for autofs mountpoints (Ondrej Holy) - Correctly check for invalid thumbnails (Khalid Abu Shawarib) - Don't invalidate thumbnails on access (Khalid Abu Shawarib) - Fix path for script run from Recent (Khalid Abu Shawarib) - Fix icon cache (Khalid Abu Shawarib) - Fix crash on trashing in bind mounts (Khalid Abu Shawarib) - Fix dragged sidebar row margins (Khalid Abu Shawarib) - Fix handling of early rename popover closure (Alessandro Astone) * Translation updates (GNOME Translation Project contributors) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

nautilus: upgrade 49.2 -> 49.3

2026-04-21T03:27:47+00:00

Changelog: ========= - Don't waste resources on images with extreme dimensions - Consider thumbnailing finished at correct time - Redraw view when screen scale factor changes - Fix potential outdated view item usage - Correctly close mime type program chooser dialog Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit ec8cdac89c5302a17ce30d96c6299e983512b3a8) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

gimp: ignore already fixed CVEs

2026-03-06T04:39:09+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0797 https://nvd.nist.gov/vuln/detail/CVE-2026-2044 https://nvd.nist.gov/vuln/detail/CVE-2026-2045 https://nvd.nist.gov/vuln/detail/CVE-2026-2047 https://nvd.nist.gov/vuln/detail/CVE-2026-2048 All these CVEs are already fixed in the recipe version, however NVD tracks them currently without CPE info. Ignore them. Relevant upstream commits: CVE-2026-0797: https://gitlab.gnome.org/GNOME/gimp/-/commit/ca449c745d58daa3f4b1ed4c2030d35d401a009d Note that the commit referenced by NVD is incorrect. This commit was identified from the relevant upstream Gitlab issue: https://gitlab.gnome.org/GNOME/gimp/-/issues/15555 CVE-2026-2044: https://gitlab.gnome.org/GNOME/gimp/-/commit/3b5f9ec2b4c03cf4a51a5414f2793844c26747e5 CVE-2026-2045: https://gitlab.gnome.org/GNOME/gimp/-/commit/bb896f67942557658b3fbfc67a1c073775c002c7 CVE-2026-2047: https://gitlab.gnome.org/GNOME/gimp/-/commit/5873e16f80cf4152d25a4c86b08553008a331e90 CVE-2026-2048: https://gitlab.gnome.org/GNOME/gimp/-/commit/fa69ac5ec5692f675de5c50a6df758f7d3e45117 Signed-off-by: Anuj Mittal

gnome-shell: ignore CVE-2021-3982

2026-03-06T04:39:09+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2021-3982 The vulnerability is about a privilege escalation, in case the host distribution sets CAP_SYS_NICE capability on the gnome-shell binary. OE distros don't do that, and due to this this recipe is not affected by this issue. The CVE is ignored. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal