summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* python3-soupsieve: fix tests with Python 3.10.20kirkstoneGyorgy Sarvari2026-05-042-4/+194
| | | | | | | | The latest Python upgrade in oe-core has broken some ptests. This backported patch fixes them, they should work with both the latest and previous versions. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-68950Naman Jain2026-05-012-0/+25
| | | | | | | | | | | | | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file will be affected. Version 7.1.2-12 fixes the issue. This is a minimal patch required for this cve. Signed-off-by: Naman Jain <namanj1@kpit.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* nginx: fix CVE-2026-32647Hitendra Prajapati2026-04-232-0/+79
| | | | | | | | | | | | As per the advisory[1] mentioned in NVD[2], version 1.28.3 contains the fix. Backport the commit[3] from 1.28.3 changelog matching the description. [1] https://my.f5.com/manage/s/article/K000160366 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-32647 [3] https://github.com/nginx/nginx/commit/a172c880cb51f882a5dc999437e8b3a4f87630cc Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* nginx: fix multiple CVEsHitendra Prajapati2026-04-234-0/+211
| | | | | | | | | | | | | | | | | | Pick up patch from NVD report. More details : [1]: https://nvd.nist.gov/vuln/detail/CVE-2026-27651 [2]: https://nvd.nist.gov/vuln/detail/CVE-2026-27654 [3]: https://nvd.nist.gov/vuln/detail/CVE-2026-28753 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Debian links, referencing these commits: https://security-tracker.debian.org/tracker/CVE-2026-27651 https://security-tracker.debian.org/tracker/CVE-2026-27654 https://security-tracker.debian.org/tracker/CVE-2026-28753 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* ttf-vlgothic: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The old one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* unicode-ucd: fix license hash (again)Gyorgy Sarvari2026-04-231-3/+3
| | | | | | | | | The unicode license changed slightly once again (copyright year updated), which makes the do_fetch task to fall back to a mirror. Update the hashes. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libubox: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | | | It seems the project's git repo doesn't allow anonymous ssh fetch anymore. Switch to https. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* ttf-sazanami: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* sblim-sfcc: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libsodium: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The tarball was moved to a subfolder on the source server. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* driverctl: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | Anonymous fetch with ssh stopped working from gitlab apparently - switch to https. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* linux-atm: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* ipc-run: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The source branch was renamed from master to main. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* dnfdragora: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The source branch was renamed from master to main. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* logwatch: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* tomoyo-tools: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* rocksdb: fix typo in PACKAGECONFIGZahir Hussain2026-04-191-1/+1
| | | | | | | | Corrected 'gflagsi' to 'gflags' to ensure proper dependency resolution during the build process. Signed-off-by: Zahir Hussain <zahir.basha@kpit.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-62594Shaik Moin2026-04-172-0/+198
| | | | | | | | | | | | | | | | | | | | | | | | | | | Backport the fix for CVE-2025-62594 Changes are made with 7.0.10 version code and only required and compatible code is taken into patch. image-private.h:- Integrated only the essential and compatible updates from the 7.0.10 upstream patch. Specifically, the changes related to the Macro's and CastDoubleToPtrdiffT were adopted, as these updates are directly tied to the vulnerability fix. The remaining modifications in this file were excluded because they do not affect the execution paths relevant to our codebase. composite.c:- This file was intentionally left unchanged. The upstream patch contains only a formatting update (a trailing space adjustment) with no functional relevance or security impact, so the change was not included in our patch. enhance.c:- All functional hunks from the upstream vulnerability fix were applied. These modifications directly contribute to addressing the CVE by strengthening bounds handling and improving input validation in the enhancement routines. Signed-off-by: Shaik Moin <careers.myinfo@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* nginx: set CVE_PRODUCTGyorgy Sarvari2026-04-171-0/+2
| | | | | | | | | | | | nginx has a long history, and has used multiple CPEs over time. Set CVE_PRODUCT to reflect current and historic vendor:product pairs. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d25aadbbb53d54382b4b82b1f78a69d4d117fd28) Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* python3-cbor2: more patch indent and test fixesGyorgy Sarvari2026-04-133-4/+53
| | | | | | | | | | | Similar to a previous patch, the CVE-2025-68131 patch contained some more indentation errors, in the tests. Also, the backported tests were inserted between an existing test and its parameters - a new patch corrects that. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* python3-cbor2: return correct error code from run-ptestGyorgy Sarvari2026-04-131-1/+2
| | | | | | | | | | | | | | | | In case the test fails to even start executing, and there is no output on stdout, there are no logs stored of the test run, so the test log parser will not report a failure. Also, since the run-ptest command is a piped script, by default the last command's return code is set as the exit code, which is always 0. To report the result correctly return the test executions's return code as the exit code (instead of the last command in the pipe), and redirect the error output to standard out, to create a logfile that can be parsed after the execution. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* python3-cbor2: Fix CVE-2025-68131 CVE patch errorJon Mason2026-04-131-15/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The patch for CVE-2025-68131 does not actually match https://github.com/agronholm/cbor2/commit/f1d701cd2c411ee40bb1fe383afe7f365f35abf0 Specifically, the indenting in decode_from_bytes This is causing an error in trusted-firmware-m of | Traceback (most recent call last): | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/git/tfm/bl2/ext/mcuboot/scripts/wrapper/wrapper.py", line 21, in <module> | import imgtool.main | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/git/mcuboot/scripts/imgtool/main.py", line 25, in <module> | from imgtool import image, imgtool_version | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/git/mcuboot/scripts/imgtool/image.py", line 24, in <module> | from .boot_record import create_sw_component_data | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/git/mcuboot/scripts/imgtool/boot_record.py", line 21, in <module> | from cbor2 import dumps | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/recipe-sysroot-native/usr/lib/python3.10/site-packages/cbor2/__init__.py", line 1, in <module> | from .decoder import load, loads, CBORDecoder # noqa | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/recipe-sysroot-native/usr/lib/python3.10/site-packages/cbor2/decoder.py", line 215 | with BytesIO(buf) as fp: | ^ | IndentationError: expected an indented block after 'with' statement on line 214 Indenting to match the original patch fixes this. Also, because this version of cbor2 is older, it doesn't include commit 53e21063ed1d72ac8f911044dd598a7f9ef72406, which adds 'Any' to encode.py Because that is missing, we see the following error: | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/recipe-sysroot-native/usr/lib/python3.10/site-packages/cbor2/__init__.py", line 2, in <module> | from .encoder import dump, dumps, CBOREncoder, shareable_encoder # noqa | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/recipe-sysroot-native/usr/lib/python3.10/site-packages/cbor2/encoder.py", line 68, in <module> | class CBOREncoder: | File "/builder/meta-arm/build/tmp/work/corstone1000_fvp-poky-linux-musl/trusted-firmware-m/1.5.0+gitAUTOINC+f8c7e5361b-r0/recipe-sysroot-native/usr/lib/python3.10/site-packages/cbor2/encoder.py", line 266, in CBOREncoder | def _encode_value(self, obj: Any) -> None: To get around this issue, remove the "Any" from the encoder.py. The logic behind this (instead of importing typing) is that this is the only instance, and since this is not something that will be updated frequently with patches from upstream. Signed-off-by: Jon Mason <jon.mason@arm.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* neon: Backport redirect test debug improvementsBhabu Bindu2026-04-075-0/+196
| | | | | | | | | | | | | | | | | | The redirect test in neon 0.30.2 intermittently fails with "did not get NE_REDIRECT", making it hard to debug. Backport relevant upstream changes from updated neon version to: - log actual return value when NE_REDIRECT is not received - use double_serve_sstring for improved test reliability Upstream-Status: Backport [https://github.com/notroj/neon/commit/f7a3d8f1366c7df6578d79af3b5d28a316011be0] [https://github.com/notroj/neon/commit/0f8dec6c8e7d672f74bb5f81fc7c6bd0d5c56619] [https://github.com/notroj/neon/commit/1e562888d85efc492c434474c8d90cef3aaa8b18] [https://github.com/notroj/neon/commit/9e836bb63bf41fd78e12175cd7b35bfb07a031e3] Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* nginx: fix CVE-2026-27784, CVE-2026-28755Hitendra Prajapati2026-04-073-0/+141
| | | | | | | | | | | | | Pick up patch [1] and [2] from Debian report. [1] https://security-tracker.debian.org/tracker/CVE-2026-27784 [2] https://security-tracker.debian.org/tracker/CVE-2026-28755 More details : [1]: https://nvd.nist.gov/vuln/detail/CVE-2026-27784 [2]: https://nvd.nist.gov/vuln/detail/CVE-2026-28755 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* fmt: Updated master->main in SRC_URI.Tyler Park2026-04-071-1/+1
| | | | | | | | | fmt github repo has sometime recently changed their master branch to main. This change is reflected in the SRC_URI. Solves https://github.com/openembedded/meta-openembedded/issues/1041 (#1041) Signed-off-by: Tyler Park <tyler.park@wavetronix.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* strongswan: Fix CVE-2026-25075Vijay Anusuri2026-04-072-0/+51
| | | | | | | | | | Pick patch according to [1] [1] https://download.strongswan.org/security/CVE-2026-25075/ [2] https://www.strongswan.org/blog/2026/03/23/strongswan-vulnerability-(cve-2026-25075).html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* python3-protobuf: ignore CVE-2024-7254Naman Jain2026-04-031-0/+3
| | | | | | | | | | | | | | | | | | | | CVE-2024-7254 is a stack overflow vulnerability caused by unbounded recursion, specifically within the Java Protobuf Lite and Full runtimes (including Kotlin and JRuby bindings). The python3-protobuf recipe builds the Python implementation using the C++ backend (--cpp_implementation). This implementation does not contain the vulnerable Java-specific parsing logic (such as DiscardUnknownFieldsParser or ArrayDecoders). Authoritative security sources, including Red Hat and GitHub Advisory have confirmed that non-Java implementations (Python/C++) are not affected by this specific flaw. Reference: https://access.redhat.com/security/cve/cve-2024-7254 Signed-off-by: Naman Jain <namanj1@kpit.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libssh: Fix CVE-2026-0964Vijay Anusuri2026-03-292-0/+47
| | | | | | | | | | Pick commit according to [1] [1] https://security-tracker.debian.org/tracker/CVE-2026-0964 [2] https://www.libssh.org/security/advisories/CVE-2026-0964.txt Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libssh: Update CVE-2026-0966-2.patchVijay Anusuri2026-03-291-1/+1
| | | | | | | Corrected the ssh_print_hexa to ssh_print_hash in the patch Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libssh: Fix CVE-2026-0966Vijay Anusuri2026-03-293-0/+102
| | | | | | | | | | | | Pick commits according to [1] [1] https://security-tracker.debian.org/tracker/CVE-2026-0966 [2] https://www.libssh.org/security/advisories/CVE-2026-0966.txt Skip the test commit as it's not applicable in libssh-0.8.9 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* giflib: Fix CVE-2026-23868Vijay Anusuri2026-03-262-0/+35
| | | | | | | | | | Pick patch according to [1] [1] https://www.facebook.com/security/advisories/cve-2026-23868 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-23868 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* wireshark: fix CVE-2025-5601Hitendra Prajapati2026-03-252-0/+69
| | | | | | | | | | | | | Pick patch from [1]. [1] https://security-tracker.debian.org/tracker/CVE-2025-5601 [2] https://gitlab.com/wireshark/wireshark/-/issues/20509 More details : https://nvd.nist.gov/vuln/detail/CVE-2025-5601 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* mariadb: Fix CVE-2025-13699Vijay Anusuri2026-03-243-0/+265
| | | | | | | | | Pick commits according to [1] [1] https://jira.mariadb.org/browse/MDEV-37483 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libde265: patch CVE-2025-61147Gyorgy Sarvari2026-03-212-0/+85
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-61147 Backport the patch referenced by the NVD advisory. Note that this is a partial backport - only the parts that are used by the application, and without pulling in c++17 headers. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2026-23876Nitin Wankhade2026-03-182-0/+64
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/2fae24192b78fdfdd27d766fd21d90aeac6ea8b8 Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2026-23874Nitin Wankhade2026-03-182-0/+37
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/2a09644b10a5b146e0a7c63b778bd74a112ebec3 Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2026-22770Nitin Wankhade2026-03-182-0/+38
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/3e0330721020e0c5bb52e4b77c347527dd71658e Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-68618Nitin Wankhade2026-03-182-0/+96
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-66628Nitin Wankhade2026-03-182-0/+24
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/bdae0681ad1e572defe62df85834218f01e6d670 Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-43965Nitin Wankhade2026-03-182-0/+22
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/bac413a26073923d3ffb258adaab07fb3fe8fdc9 Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* capnproto: patch CVE-2026-32239 and CVE-2026-32240Gyorgy Sarvari2026-03-162-0/+161
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-32239 https://nvd.nist.gov/vuln/detail/CVE-2026-32240 Backport the patch that is referenced by the NVD advisories. (Same patch for both vulnerabilities) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* postgresql: upgrade 14.21 -> 14.22Gyorgy Sarvari2026-03-162-2/+2
| | | | | | | | This is a bugfix release. Changelog: https://www.postgresql.org/docs/release/14.22/ Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* lldpd: fix xml PACKAGECONFIG dependencyAviv Daum2026-03-131-1/+1
| | | | | | | | | | | The xml PACKAGECONFIG entry uses libxm2, which is a typo and not a valid dependency in OE. Replace it with libxml2 so enabling PACKAGECONFIG:xml pulls in the correct provider. Signed-off-by: Aviv Daum <aviv.daum@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* hiawatha: fix SRC_URIGyorgy Sarvari2026-03-131-1/+1
| | | | | | The tarball was moved to a new folder on the source server. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libssh: Fix CVE-2026-3731Vijay Anusuri2026-03-122-0/+45
| | | | | | | | | | | | Pick commit according to [1] [1] https://security-tracker.debian.org/tracker/CVE-2026-3731 [2] https://www.libssh.org/security/advisories/libssh-2026-sftp-extensions.txt Skip the test file change as it's not available in libssh-0.8.9 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* ettercap: patch CVE-2026-3603Gyorgy Sarvari2026-03-112-1/+51
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3606 Pick the commit that is marked to solve the related Github issue[1]. Its commit message also references the CVE ID explicitly. [1]: https://github.com/Ettercap/ettercap/issues/1297 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2026-27596Gyorgy Sarvari2026-03-113-0/+84
| | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-27596 Backport the commits referenced by the NVD advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2026-25884Gyorgy Sarvari2026-03-112-0/+26
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-25884 Backport the commits referenced by the NVD advisory. Note that the regression tests are not included in this test. The patch contains binary data, which cannot be applied with any of the PATCHTOOLs in do_patch task. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* freeglut: return x11 to REQUIRED_DISTRO_FEATURESMartin Jansa2026-03-101-2/+2
| | | | | | | | | | | | | | * depends on libxi causing: ERROR: Nothing PROVIDES 'libxi' (but /OE/build/luneos-nanbield/meta-openembedded/meta-oe/recipes-graphics/freeglut/freeglut_3.4.0.bb DEPENDS on or otherwise requires it) libxi was skipped: missing required distro feature 'x11' (not in DISTRO_FEATURES) ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'freeglut', 'libxi'] for distros with opengl but without x11 in DISTRO_FEATURES Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* gimp: patch CVE-2025-14422Gyorgy Sarvari2026-03-102-0/+67
| | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-14422 Backport the patch referenced by the NVD advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-08-18 21:49:27 +0000