linux/meta-openembedded.git/meta-oe/recipes-connectivity, branch kirkstoneMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=kirkstone2026-01-08T21:03:02+00:00thrift: fix SRC_URI2026-01-08T21:03:02+00:00Gyorgy Sarvariskandigraun@gmail.com2025-12-28T12:10:57+00:00urn:sha1:11b7fe9a918d311e720337c895ec0b8ed5c0914c
The tarball was moved to an archive server, so the link stopped
working. Update it to the new location.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
zabbix: patch CVE-2025-496432025-12-25T09:17:02+00:00Gyorgy Sarvariskandigraun@gmail.com2025-12-24T19:34:33+00:00urn:sha1:12807d9007b806e1c9e729909f40b5004800174a
The actual patch was identified by checking the file that was modified
in the tag 6.0.42, and also by looking at the Jira item referenced by it:
the patch references DEV-4466, the same ID that is referenced in the
Jira ticket[1] referenced by the NVD report (look in the "All Activity" tab).
[1]: https://support.zabbix.com/browse/ZBX-27284
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
krb5: fix for CVE-2024-35962025-12-25T09:17:01+00:00Hitendra Prajapatihprajapati@mvista.com2025-12-23T04:59:32+00:00urn:sha1:4ac316bf47260fa7b6bfba546dd38e02f9440d4b
Upstream-Status: Backport from https://github.com/krb5/krb5/commit/871125fea8ce0370a972bf65f7d1de63f619b06c
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
libtorrent: ignore CVE-2016-53012025-11-30T14:13:57+00:00Gyorgy Sarvariskandigraun@gmail.com2025-11-22T19:31:22+00:00urn:sha1:b91b961b3f89e686b7f9b7f12d1c766164437f39
Details: https://nvd.nist.gov/vuln/detail/CVE-2016-5301
This vulnerability is for another libtorrent (https://github.com/arvidn/libtorrent)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
libwebsockets: fix buildpath warnings from libcap.so2025-11-30T14:13:57+00:00Martin Jansamartin.jansa@gmail.com2025-11-17T09:56:59+00:00urn:sha1:44689d795c05bd1e31aa74c7d917df818b1a0264
The ${STAGING_LIBDIR} used in scarthgap doesn't catch this, because
in kirkstone without usrmerge libcap is installed in base_libdir which
is different from libdir.
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
libwebsockets: remove STAGING_LIBDIR with /2025-11-30T14:13:57+00:00Martin Jansamartin.jansa@gmail.com2025-11-17T09:56:58+00:00urn:sha1:3a29688a371f5b50217b9ab9f5d6049f41c47051
* after buildpath warnings fix from:
https://git.openembedded.org/meta-openembedded/commit/?id=eeef1fddd9052bed4b1a91565260518eb042fed2
the LibwebsocketsTargets.cmake ends with:
INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/libcap.so;-lpthread"
instead of:
INTERFACE_LINK_LIBRARIES "ssl;crypto;ssl;crypto;/OE/build/.../libwebsockets/4.3.3/lib32-recipe-sysroot/usr/lib/libcap.so;-lpthread"
which causes e.g. mosquitto to fail in do_compile with:
ninja: error: '/libcap.so', needed by 'src/mosquitto', missing and no known rule to make it
* this happens only when libwebsocket is built with libcap enabled
(by libcap in DEPENDS)
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
libwebsockets: fix buildpath warnings2025-11-30T14:13:57+00:00Gerard Salvatellagerard.salvatella@siemens.com2025-11-17T09:56:57+00:00urn:sha1:94188ba65787edb263423e34a3857a129e030072
In order to remove absolute paths from the cmake artifacts, paths from
the `$lib` folder should also be stripped off, otherwise internally
linked libraries (e.g. libz) may appear.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
libwebsockets: Fix reference to TMPDIR2025-11-30T14:13:57+00:00Khem Rajraj.khem@gmail.com2025-11-17T09:56:56+00:00urn:sha1:ae9b7bf469b1c888ffdd9b22683d4adc1cf2ad5f
.cmake files encoded absolute paths, fixed thusly
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
linuxptp: ignore CVE-2024-428612025-11-30T14:13:57+00:00Gyorgy Sarvariskandigraun@gmail.com2025-11-15T18:29:34+00:00urn:sha1:7590de304ab4823fd24892119a618fc5e5de65ad
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-42861
The vulnerability report is considered to be bogus and a non-issue
(or at least not a security issue) by upstream[1] and by major
Linux distros[2][3][4].
[1]: https://lists.nwtime.org/sympa/arc/linuxptp-devel/2024-09/msg00080.html
[2]: Ubuntu: https://ubuntu.com/security/CVE-2024-42861
[3]: Debian: https://security-tracker.debian.org/tracker/CVE-2024-42861
[4]: Suse: https://bugzilla.suse.com/show_bug.cgi?id=1230935
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
wifi-test-suite: correct SRC_URI2025-11-17T08:08:36+00:00Gyorgy Sarvariskandigraun@gmail.com2025-11-12T19:35:37+00:00urn:sha1:7c6260ef531c448fb7c990063ec3757f8b307b00
The commit from the recipe got got detached from the master branch - use nobranch to
avoid fetching failure.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fcd57a086d3e2833d2230441c9ce4e03707243da)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>