summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* corosync: patch CVE-2025-30472Peter Marko2025-10-302-0/+70
| | | | | | | | | | | | | | | Pick commit from [1] mentioned in [2] from [3] [1] https://github.com/corosync/corosync/issues/778 [2] https://github.com/corosync/corosync/pull/779 [3] https://nvd.nist.gov/vuln/detail/CVE-2025-30472 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> (cherry picked from commit eab04e462009f938fcaefefdde5e67cc94c525e8) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* corosync: upgrade 3.1.6 -> 3.1.9Peter Marko2025-10-301-7/+3
| | | | | | | | | | | | | | | dbus dir was changed from sysconfdir to datadir drop unused configure code License-Update: copyright years refreshed Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> (cherry picked from commit 950c603f21d14b07874f7bfdfb71eae86f6de3c7) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* corosync: fix upstream version checkPeter Marko2025-10-301-3/+3
| | | | | | | | | | | | | | | | | | github-releases is needed that it work at all: ERROR: Automatic discovery of latest version/revision failed - you must provide a version using the --version/-V option, or for recipes that fetch from an SCM such as git, the --srcrev/-S option. UPSTREAM_CHECK_GITTAGREGEX is needed to get correct version, otherwise: $ devtool latest-version corosync ... INFO: Current version: 3.1.6 INFO: Latest version: 414.336.75.75.75 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> (cherry picked from commit 9aed476a9031577e7acfc2ba2f4ff0abd5106580) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* corosync: reproducibility issueChristos Gavros2025-10-301-0/+3
| | | | | | | | | | | | | | | | | | | | Corosync is not reproducible due to change of value in NETSNMP_SYS_CONTACT which is set in net-snmp: NETSNMP_SYS_CONTACT = "$ME@$LOC" $ME = whoami $LOC assigned domain name from /etc/resolv.conf Use build in'--with-sys-contact' to overwrite it https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/30/steps/28/logs/stdio CC: Yoann Congal <yoann.congal@smile.fr> CC: Randy MacLeod <randy.macleod@windriver.com> Signed-off-by: Christos Gavros <gavrosc@yahoo.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit bb138b9f6b0ae7a77b5be468356a9ed0d7787c88) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* redis: upgrade 7.2.8 -> 7.2.11Vijay Anusuri2025-10-3011-229/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ChangeLog: https://github.com/redis/redis/releases/tag/7.2.9 https://github.com/redis/redis/releases/tag/7.2.10 https://github.com/redis/redis/releases/tag/7.2.11 https://github.com/redis/redis/compare/7.2.8...7.2.11 7.2.11 Security fixes (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE (CVE-2025-46818) A Lua script can be executed in the context of another user (CVE-2025-46819) LUA out-of-bound read 7.2.10 Security fixes (CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands (CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an error 7.2.9 Security fixes (CVE-2025-27151) redis-check-aof may lead to stack overflow and potential RCE Dropped CVE-2025-32023.patch Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32662Gyorgy Sarvari2025-10-302-0/+29
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32662 Pick the patch that is mentioned in the above vulnerability report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32661Gyorgy Sarvari2025-10-302-0/+29
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32661 Pick the patch that is mentioned in the above vulnerability report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32660Gyorgy Sarvari2025-10-302-0/+152
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32660 Pick the patch that is mentioned in the above CVE report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2025-32659Gyorgy Sarvari2025-10-302-0/+28
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32659 Pick the commit that mentioned in the above CVE report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32658Gyorgy Sarvari2025-10-302-0/+36
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32658 Pick the commit that is marked to resolve the related github advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32460Gyorgy Sarvari2025-10-302-0/+27
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32460 Pick the commit that marked as a solution for the related github advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32459Gyorgy Sarvari2025-10-302-0/+31
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32459 Pick the patch that is marked to resolve the related github advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32458Gyorgy Sarvari2025-10-302-0/+120
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32458 Pick the commit that is marked to resolve the related github advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32040Gyorgy Sarvari2025-10-302-0/+30
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32040 Pick the patch that is marked to resolve the related github advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: patch CVE-2024-32039 and CVE-2024-32041Gyorgy Sarvari2025-10-302-1/+71
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-32039 https://nvd.nist.gov/vuln/detail/CVE-2024-32041 Pick the patch that is marked as fixing the related github advisory. The same commit fixes both vulnerabilities. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp3: set CVE_PRODUCTPeter Marko2025-10-301-0/+2
| | | | | | | | | | | | CPE does not contain mnajor version number, so set VE product to just freerdp. Without this there are no (fixed) CVEs in reports. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 4058959d6c273c241d48278b5e979a6270152959) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp: mark CVE-2024-32662 as fixedPeter Marko2025-10-301-0/+2
| | | | | | | | | | | 2.x is not affected, bug was introduced in 3.0.0. See e.g. https://security-tracker.debian.org/tracker/CVE-2024-32662 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a7f20510686d181b236eb78d79dc2a56bb4c3bba) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp: patch CVE-2024-32661Peter Marko2025-10-302-0/+28
| | | | | | | | | | | | | | Pick commit [1] as mentioned in [2] or [3]. [1] https://github.com/FreeRDP/FreeRDP/commit/71e463e31b4d69f4022d36bfc814592f56600793 [2] https://nvd.nist.gov/vuln/detail/CVE-2024-32661 [3] https://security-tracker.debian.org/tracker/CVE-2024-32661 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c91d6a2c6574d828f249b85dcae50462ee3aacb5) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* freerdp: Upgrade 2.11.2 -> 2.11.7Khem Raj2025-10-302-1/+29
| | | | | | | | | | | | | | | Partially backport a fix to build with gcc-14 Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 4b14dacf555167e792a469fb6de7b35c0b6a884a) This bugfix update also contains fixes for the following vulnerabilities: CVE-2024-22211, CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* evince: Update status for CVE-2011-0433 and CVE-2011-5244Alexandre Truong2025-10-301-0/+4
| | | | | | | | | | | | | | | | The current version 46.0 is not affected by the issues. Both issues have been fixed in commit [0]. The fix is in effect since early versions of evince (3.1.2). Thus, both can be safely ignored. [0]: https://gitlab.gnome.org/GNOME/evince/-/commit/efadec4ffcdde3373f6f4ca0eaac98dc963c4fd5 Signed-off-by: Alexandre Truong <alexandre.truong@smile.fr> Reviewed-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 492b1b1adc1c546efd10b659d220a810736cc04a) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* etcd: patch CVE-2023-32082Gyorgy Sarvari2025-10-302-0/+87
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2023-32082 Pick the patch mentioned in the details of the report. (It was backported to the 3.5 tree) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* emlog: set CVE_PRODUCTPeter Marko2025-10-301-0/+2
| | | | | | | | | | | This will remove false-positive CVE-2024-50655 from reports. There are different emlog components from other vendors around. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d8d45d909315f5c784234261bb3e97d2e1f0a102) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* poppler: Fix CVE-2025-43718Vijay Anusuri2025-10-302-0/+32
| | | | | | | | | Upstream patch: https://gitlab.freedesktop.org/poppler/poppler/-/commit/f54b815672117c250420787c8c006de98e8c7408 Reference: https://ubuntu.com/security/CVE-2025-43718 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* xsp: CVE status update for CVE-2006-2658Ninette Adhikari2025-10-301-0/+2
| | | | | | | | | | | | The recipe used in the `meta-openembedded` is a different xsp package compared to the one which has the CVE issue. Package used in `meta-embedded`: maemo xsp http://repository.maemo.org/pool/maemo/ossw/source/x/xsp/ Package with CVE issue: mono xsp https://github.com/mono/xsp Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 3cb411a05744eaa6e822c3d435d9205aa87ff632) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* jasper: patch CVE-2025-8837Gyorgy Sarvari2025-10-302-0/+63
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-8837 Pick the patch from the details of the above link. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* jasper: patch CVE-2025-8836Gyorgy Sarvari2025-10-302-0/+79
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-8836 Pick the patch mentioned in the details of the above link. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* jasper: patch CVE-2025-8835Gyorgy Sarvari2025-10-302-1/+174
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-8835 Pick the patch from the details of the above link. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* iperf2: ignore irrelevant CVEsGyorgy Sarvari2025-10-301-0/+3
| | | | | | | | | | | | These CVEs are for iperf3 - which is a similar application in its goals (and name), but an independent project from this, and the projects are independent implementations also, they share no common code. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit aedf74e08230f60c270032e8b937d1ab9bd2fc9c) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* open-vm-tools: fix CVE-2025-41244Rajeshkumar Ramasamy2025-10-302-0/+124
| | | | | | | | | | | | | | | | | VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-41244 Upstream-patch: https://github.com/vmware/open-vm-tools/commit/7ed196cf01f8acd09011815a605b6733894b8aab Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* tokyocabinet: fix licenseGyorgy Sarvari2025-10-301-1/+1
| | | | | | | | | The application is distributed under the LGPL license, not GPL. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8fd2b5c5b24335eba407b67e9805298576bdf6ca) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* tokyocabinet: switch to working SRC_URIGyorgy Sarvari2025-10-301-1/+1
| | | | | | | The original source seems to be long gone. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* pm-qa: update git fetch protocolGyorgy Sarvari2025-10-301-1/+1
| | | | | | | | Apparently the git repo in the SRC_URI stopped supporting git protocol. Switch to https to be able to fetch the source successfully. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* uim: Stick to C17Khem Raj2025-10-291-0/+2
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5cac401d00bfdf0b243bcca247b4dd691fe4aa43) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* audiofile: patch CVE-2017-6839Peter Marko2025-10-062-0/+127
| | | | | | | | | | | Use patch from buildroot: https://github.com/buildroot/buildroot/commit/844a7c6281eb442881330a5d36d5a0719f2870bf Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 88faae83b2b0e68827c457f4f348f7d7868f5258) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* audiofile: patch CVE-2017-6831Peter Marko2025-10-062-0/+47
| | | | | | | | | | | Use patch from buildroot: https://github.com/buildroot/buildroot/commit/bd5f84d301c4e74ca200a9336eca88468ec0e1f3 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9d668989b1447fb19aff55c1a47acdf8d4e8c5e2) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* audiofile: fix multiple CVEsPeter Marko2025-10-062-0/+80
| | | | | | | | | | | | | CVE-2017-6830 / CVE-2017-6834 / CVE-2017-6836 / CVE-2017-6838 Use patch from buildroot: https://github.com/buildroot/buildroot/commit/4a1a8277bba490d227f413e218138e39f1fe1203 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 75f2bd2b3b145d8282db9926d8212c6d81bde99e) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* audiofile: patch CVE-2017-6829Peter Marko2025-10-062-0/+44
| | | | | | | | | | | Use patch from buildroot: https://github.com/buildroot/buildroot/commit/434890df2a7c131b40fec1c49e6239972ab299d2 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f29fbaa4650201a059c65572947ed8faa991fcd8) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* audiofile: fix multiple CVEsPeter Marko2025-10-062-0/+46
| | | | | | | | | | | | | CVE-2017-6827 / CVE-2017-6828 / CVE-2017-6832 / CVE-2017-6833 / CVE-2017-6835 / CVE-2017-6837 Use patch from buildroot: https://github.com/buildroot/buildroot/commit/cc00bde57fc20d11f8fa4e8ec5f193c091714c55 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 634cbcb91c3ab7154e0cda707663a1e4aa500f4a) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* dovecot: patch CVE-2022-30550Gyorgy Sarvari2025-10-062-0/+138
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2022-30550 Pick the commit referenced in https://www.openwall.com/lists/oss-security/2022/07/08/1 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* civetweb: patch CVE-2025-55763Gyorgy Sarvari2025-10-062-0/+58
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-55763 Pick the relevant commit from https://github.com/civetweb/civetweb/pull/1347/ Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* apache2: ignore irrelevant CVEsGyorgy Sarvari2025-10-061-0/+12
| | | | | | | | | | | | | | | | | Ignore a number of CVEs for this recipe (because they are for another software, outdated version, or because they affect only non-Linux platforms). This commit is a backport of a number of commits from the master branch (which uses the same version of the recipe): 0e7733f1b8f51949ec91d82267d5d864ac0be16a 1b86a60f6283b08acadc50914075d93dd362700b 59d3949e3ed673bd049aadfd2238213b550f1461 1b86a60f6283b08acadc50914075d93dd362700b da2b5e8b93c248363581b1bd4ff67ff1d8357c41 0e7733f1b8f51949ec91d82267d5d864ac0be16a Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* ace: ignore CVE-2009-1147Peter Marko2025-10-061-0/+2
| | | | | | | | | This CVE is for vmware ace. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* mariadb: correct STACK_DIRECTION settingChangqing Li2025-10-061-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | STACK_DIRECTION = 1 means stack grow upwards STACK_DIRECTION = -1 means stack grow downwards In the majority of modern architectures, stack grows downwards. So set STACK_DIRECTION = 1 is not right. But the failure is not exposed before, mysqld can start normally, and simple runtime operation like create db, table, select info, works well. But it is exposed after commit [1] is merged, mysqld will start failed with error: 2025-02-12 3:18:19 0 [ERROR] Could not open mysql.plugin table: "Thread stack overrun: 16752824 bytes used of a 299008 byte stack, and 81920 bytes needed Since commit [2], mariadb started to determine the default STACK_DIRECTION in CMake based on the ISA, and we have set correct CMAKE_SYSTEM_PROCESSOR in cmake.bbclass, so just don't pass it. [1] https://github.com/MariaDB/server/commit/bddbef3573349b0565c43c27beba47c89358f39f [2] https://github.com/MariaDB/server/commit/d0abbdf56e11ccc88447c1dc80caaf355c94be3b [3] https://jira.mariadb.org/browse/MDEV-36051 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit cdd8b41d6e3b20ca562df49aa0710f07a6218f20) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* thrift: fix build with gcc 15Adrian Freihofer2025-10-062-1/+53
| | | | | | | | Cherry-pick a patch adding missing cstdint include for int64_t in Mutex.h Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* srecord: fix build failure with gcc-15mark.yang2025-10-062-1/+39
| | | | | | | | | | | | | | | | | | srecord/input/file/hp64k.h:82:21: error: ‘uint16_t’ has not been declared 82 | bool read_u16be(uint16_t *dest); | ^~~~~~~~ /home/abuild/rpmbuild/BUILD/srecord-1.65.0-build/srecord-1.65.0-Source/./srecord/input/file/hp64k.h:1:1: note: ‘uint16_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’ +++ |+#include <cstdint> 1 | // make[2]: *** [srecord/CMakeFiles/lib_srecord.dir/build.make:222: srecord/CMakeFiles/lib_srecord.dir/arglex/tool/input.cc.o] Error 1 * From gcc 13, cstdint header must be explicitly included for uint_X data types. * See also: https://gcc.gnu.org/gcc-13/porting_to.html#header-dep-changes Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* udisks2: upgrade 2.10.1 -> 2.10.2Saravanan2025-10-062-53/+1
| | | | | | | | | | | | This patch addresses below CVE's: CVE-2025-6019 CVE-2025-8067 Changelog: https://github.com/storaged-project/udisks/releases Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* libusbgx: fix gadget-stop installGrygorii Tertychnyi2025-10-061-1/+1
| | | | | | | | | | It was by mistake installed gadget-start instead. Signed-off-by: Grygorii Tertychnyi <grembeter@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b8e970395ef84b16e955f6bcd0ff4c866ecef447) Signed-off-by: Kurt Kiefer <kekiefer@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* collectd: set working SRC_URIGyorgy Sarvari2025-10-061-2/+2
| | | | | | | | The project started to outsource the source hosting to Google storage and Github. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* indent: fix CVE-2024-0911hongxu2025-10-062-0/+124
| | | | | | | | | | | | Backport a fix from upstream to resolve CVE-2024-0911 https://git.savannah.gnu.org/git/indent.git feb2b646e6c3a05018e132515c5eda98ca13d50d Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 26ef6a9c2da06b7de4116c483f9197fd4cf2a4cb) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
* indent: fix CVE-2023-40305Yogita Urade2025-10-063-0/+8452
| | | | | | | | | | | | | | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. Reference: https://savannah.gnu.org/bugs/index.php?64503 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 7da6cb848bc42b3e6bd5d2b37b52ba75510a6ca0) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-07-29 02:16:20 +0000