summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* python3-pytest-httpx: upgrade 0.36.0 -> 0.36.2Wang Mingyu2026-04-141-2/+2
| | | | | | | | | | License-Update: Copyright year updated to 2026. Fixed: Document how to ignore query parameters while matching on URL. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pymodbus: upgrade 3.12.1 -> 3.13.0Wang Mingyu2026-04-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ - Correct missing types. - Altherma heat pump control, with Home Assistant and updating server. - SimDevice, use_bit_address allows different addressing for BITS. - Remove 3.5char frame time check. - Fixed Modbus*Context. - Fix bug in ModbusDeviceContext. - Fix log level in examples - Fix CSS lookup for simulator server - Fix usage docs in examples: add missing option --baudrate - Doc:Finalice server/simulator narrative - Fix codespell bug. - Datastores uses SimData/SimDevice. - Doc on how to convert to SimData/SimDevice. - Fix Read Fifo Query RTU Frame Size - Update server documentation (datstore). - Update server examples to use SimData/SimDevice. - Add server.async_get/setValues. - Solve codeql caching problem. - Remove unused methods in datastore. - Remove datastore get/setValues (async_get/set exist) - Revert "Combine ModbusSparseDataBlock with ModbusSequentialDataBlock." - Combine ModbusSparseDataBlock with ModbusSequentialDataBlock. - Remove RemoteDeviceContext datastore. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pyais: upgrade 2.20.1 -> 3.0.0Wang Mingyu2026-04-141-2/+2
| | | | | | | | | | | | | | | | | | | | | Changelog: =========== - ~35% faster compared to v2 - breaking Changes removed bitarray dependency. Replaced with a custom bit_vector renamed AISSentence.bit_array to AISSentence.bv renamed Payload.from_bitarray() to Payload.from_vector() renamed Payload.to_bitarray() to Payload.to_bytes() changed overflow encoding behavior deprecated NonPrintableCharacterException dropped support for Python 3.9 - removed bitarray as an external dependency - improved performance through a custom bit vector implementation - optimized single-fragment message assembly - NOTE: If you are not ready to migrate, v2 continues to receive bugfixes on the legacy branch Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-platformdirs: upgrade 4.9.4 -> 4.9.6Wang Mingyu2026-04-141-1/+1
| | | | | | | | fix: use double quotes for tag variable expansion Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-inline-snapshot: upgrade 0.32.5 -> 0.32.6Wang Mingyu2026-04-141-1/+1
| | | | | | | | | | | Fix: - Pydantic models, attrs and dataclasses with NewType-typed fields now generate correct snapshots that wrap the field value with the NewType constructor (e.g. Something(some_id=SomeID(1)) instead of Something(some_id=1)). This could only be fixed for Python >= 3.10. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-imgtool: upgrade 2.3.0 -> 2.4.0Wang Mingyu2026-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-greenlet: upgrade 3.3.2 -> 3.4.0Wang Mingyu2026-04-141-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========== - Publish binary wheels for RiscV 64. - Fix multiple rare crash paths during interpreter shutdown. - Note that this now relies on the atexit module, and introduces subtle API changes during interpreter shutdown (for example, getcurrent is no longer available once the atexit callback fires). - Address the results of an automated code audit performed by Daniel Diniz. This includes several minor correctness changes that theoretically could have been crashing bugs, but typically only in very rare circumstances. - Fix several race conditions that could arise in free-threaded builds when using greenlet objects from multiple threads, some of which could lead to assertion failures or interpreter crashes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-google-auth: upgrade 2.48.0 -> 2.49.2Wang Mingyu2026-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-git-pw: upgrade 2.7.1 -> 2.8.0Wang Mingyu2026-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-gevent: upgrade 25.9.1 -> 26.4.0Wang Mingyu2026-04-141-1/+1
| | | | | | | | | | | | | | | | Changelog: =========== - Make gevent.ssl stop reusing exception instances, as this could appear to cause a memory leak if there are many short reads or writes. - Fix Greenlet.dead returning true for an active greenlet during early bootstrap. - Fix some potential GIL-related crashes during interpreter shutdown by avoiding acquiring the GIL in libev callbacks when the interpreter is finalizing. - Support for Python 3.9 has been removed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ostree: upgrade 2025.7 -> 2026.1Wang Mingyu2026-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* nano: upgrade 8.7.1 -> 9.0Wang Mingyu2026-04-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changelog: ============ - When the cursor almost goes offscreen to the right, all lines are now scrolled sideways together, by just the amount needed to keep the cursor in view. Use --solosidescroll or 'set solosidescroll' to get back the old, jerky, single-line horizontal scrolling. - The viewport can be scrolled sideways (in steps of one tabsize) with M-< and M->. See 'man nanorc' if M-< and M-> should switch between buffers (as they did earlier). - M-Left, M-Right, M-Up, and M-Down have become rebindable. - Stopping the recording of a macro immediately after starting it cancels the recording and leaves an existing macro in place. - Feature toggles no longer break a chain of ^K cuts or M-6 copies, except the M-K cut-from-cursor toggle. - With --mouse and --indicator, one can click in the scrollbar area to roughly navigate within the buffer. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* mpich: upgrade 5.0.0 -> 5.0.1Wang Mingyu2026-04-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Fix bad cast in release-gather collectives that caused data loss issues on Big-Endian 64b arches (s390x) - Fix issue with canceling MPI_ANY_SOURCE receive requests - Fix configuration issue when C++ compiler does not support complex types - Fix function signature issue in Hydra PBS support - Fix crash in MPI_Allreduce with MPI_LOGICAL type - Fix potential crash in multi-nic libfabric initialization - Fix memory leaks in Level Zero and PMIx support - Fix bug in CMA code when GPU support is enabled - Fix potential shared memory collision between multiple singleton processes on the same node - Add large count and other necessary aliases to ROMIO to avoid accidental profiling of internal MPI function usage - Add missing error checks in rndv and colletive composition code - Improve autogen.sh error message when autotools are too old Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libsodium: upgrade 1.0.21 -> 1.0.22Wang Mingyu2026-04-142-53/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-Fix-compilation-with-GCC-on-aarch64.patch removed since it's included in 1.0.22 Changelog: ============ - Post-quantum key encapsulation is now available. ML-KEM768, the NIST-standardized lattice-based KEM, is accessible through the 'crypto_kem_mlkem768_*()' functions. - X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection against both classical and quantum adversaries, is available through the 'crypto_kem_*()' functions. X-Wing is the recommended KEM for most applications. - SHA-3 hash functions are now available as 'crypto_hash_sha3256_*()' and 'crypto_hash_sha3512_*()', with both one-shot and streaming APIs. - Performance: NEON optimizations for Argon2 on ARM platforms. - Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when available on ARM platforms. - Performance: WebAssembly SIMD implementations of Argon2 have been added. - Emscripten: LTO is now disabled. With Emscripten 4, LTO produced WebAssembly modules with functions that ran significantly slower than without it. - Emscripten: a new option allows compilation with SIMD support. - Emscripten: native ESM module generation is now supported. - JavaScript sumo builds now allow up to 80 MiB memory usage, so that 'crypto_pwhash' with the interactive settings can be used in pure JavaScript, not just WebAssembly. - XOF state alignment has been relaxed. - 'crypto_core_keccak1600_state' has been added. - Export missing 'crypto_ipcrypt_nd_keygen()' helper function. - 'crypto_auth_hmacsha256_init' and 'crypto_auth_hmacsha512_init' now accept NULL key pointers (with a zero key length), for consistency with other '_init' functions. - apple-xcframework: headers are now in a Clibsodium subdirectory to prevent module.modulemap collisions with other xcframeworks. - Fixed compilation with GCC on aarch64 and gcc 4.x. - On aarch64, aes256-gcm is now enabled even when not using clang, including MSVC. - Added compatibility with Visual Studio 2026 when toolsets do not define PlatformToolsetVersion. - Libsodium can be directly used as a dependency in a Zig project. - Performance of MSVC builds has been improved. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libgedit-gfls: upgrade 0.4.0 -> 0.4.1Wang Mingyu2026-04-141-1/+1
| | | | | | | | | | Changelog: =========== - Fix a unit test on big-endian architectures. - Translation updates. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* imagemagick: upgrade 7.1.2-18 -> 7.1.2-19Wang Mingyu2026-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* graphviz: upgrade 14.1.4 -> 14.1.5Wang Mingyu2026-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gnome-online-accounts: upgrade 3.58.0 -> 3.58.1Wang Mingyu2026-04-141-1/+1
| | | | | | | | | | | | * Bugs fixed: - !391 google: Use #ifdef for GOA_GOOGLE_FILES_ENABLED * Translation updates: - Serbian - Slovak Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* glaze: upgrade 7.3.0 -> 7.3.3Wang Mingyu2026-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* geoclue: upgrade 2.8.0 -> 2.8.1Wang Mingyu2026-04-141-2/+2
| | | | | | | | | | | | | | Fixes: - Accept NMEA GGA sentences with 11 or more parts (needed 14 or more previously) - Use async D-bus 'Set' methods to set client properties in libgeoclue to improve robustness - Do not change Client Location property on updates which are below threshold to avoid leaking location to D-bus - Ignore wired WPA interfaces when finding an interface for WiFi scanning Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* babl: upgrade 0.1.124 -> 0.1.126Wang Mingyu2026-04-141-1/+1
| | | | | | | It is now possible to build with MSVC. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* b4: upgrade 0.15.1 -> 0.15.2Wang Mingyu2026-04-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* atftp: upgrade 0.8.0 -> 0.8.1Wang Mingyu2026-04-141-2/+2
| | | | | | | | | | | | | | | | | | | License-Update: update LICENSE from https://www.gnu.org/licenses/ Changelog: ============= - merge README* to single README.md - Merge pull request #2 from feckert/pr/20250902-build-fixes - Fix fortify abort when LTO is enabled - Fix uninitialized buffer data. - Enable listening on IPv6 - test.sh: redirect stderr to /dev/null when counting lines - Declare variable D as local in stop_and_clean - Fix pthread_t format warning for fprintf - Fix incompatible-pointer-types for pcre2_substring_list_free Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* webkitgtk3: fix escaping in CVE_PRODUCTRoss Burton2026-04-141-1/+1
| | | | | | | | | | The CPE parsing in oe-core's cve_check.py now handles escapes correctly[1] so we don't need to escape in CVE_PRODUCT. [1] oe-core 3c73dafd03b ("cve_check: Improve escaping of special characters in CPE 2.3") Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xerces-c: fix escaping in CVE_PRODUCTRoss Burton2026-04-141-1/+1
| | | | | | | | | | The CPE parsing in oe-core's cve_check.py now handles escapes correctly[1] so we don't need to escape in CVE_PRODUCT. [1] oe-core 3c73dafd03b ("cve_check: Improve escaping of special characters in CPE 2.3") Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* dracut: upgrade 109 -> 110Adam Duskett2026-04-142-48/+2
| | | | | | | | Drop upstream 0002-fix-broken-symlink-in-dracut-config-examples.patch Changelog: https://github.com/dracut-ng/dracut-ng/releases/tag/110 Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* openct: Drop this recipeZheng Ruoqin2026-04-149-361/+0
| | | | | | | | | 1.Drop openct as it is unmaintained upstream. 2.Remove openct in meta-oe/recipes-core/packagegroups/packagegroup-meta-oe.bb Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* parole: fix do_compile failureChangqing Li2026-04-142-1/+33
| | | | | | | | | Fix build failure: /build/tmp/work/x86-64-v3-poky-linux/parole/4.18.2/recipe-sysroot-native/usr/bin/x86_64-poky-linux/x86_64-poky-linux-ld: parole-conf.o: undefined reference to symbol 'xfce_rc_close' /build/tmp/work/x86-64-v3-poky-linux/parole/4.18.2/recipe-sysroot-native/usr/bin/x86_64-poky-linux/x86_64-poky-linux-ld: /build/tmp/work/x86-64-v3-poky-linux/parole/4.18.2/recipe-sysroot/usr/lib/libxfce4util.so.7: error adding symbols: DSO missing from command line Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libxfce4ui: add wayland PACKAGECONFIGChangqing Li2026-04-141-5/+4
| | | | | | | | Add wayland PACKAGECONFIG and add wayland and x11 dependency explicitly Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* thunar: remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li2026-04-144-8/+44
| | | | | | | | | We add x11 into REQUIRED_DISTRO_FEATURES since xfce4-panel requires it, now, xfce4-panel not require x11, so remove x11 from REQUIRED_DISTRO_FEATURES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xfce4-panel: Remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li2026-04-141-5/+7
| | | | | | | | Dependency on libwnck3 is moved into PACKAGECONFIG, so we can remove x11 from REQUIRED_DISTRO_FEATURES, set ANY_OF_DISTRO_FEATURES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xfce4-pulseaudio-plugin: remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li2026-04-141-1/+1
| | | | | | | | | We add x11 into REQUIRED_DISTRO_FEATURES because one of the dependency pavucontrol requires x11, now, pavucontrol doesn't require x11, so remove x11 from REQUIRED_DISTRO_FEATURES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* pavucontrol: remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li2026-04-141-1/+0
| | | | | | | | | We add x11 into REQUIRED_DISTRO_FEATURES because one of the dependency gtkmm4 require x11, now, gtkmm4 don't require x11, so remove x11 from REQUIRED_DISTRO_FEATURES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gtkmm4: remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li2026-04-141-2/+2
| | | | | | | | | | | We add x11 into REQUIRED_DISTRO_FEATURES because one of the dependency atkmm requires x11, refer [1], remove atkmm from dependency, and remove x11 from REQUIRED_DISTRO_FEATURES [1] https://gitlab.gnome.org/GNOME/gtkmm/-/commit/0fc81d346f50bfc30f6fb78afe6a15331c5a8790 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xdg-dbus-proxy: upgrade 0.1.6 -> 0.1.7Gyorgy Sarvari2026-04-143-36/+5
| | | | | | | | | | | | | | | | | | | | Contains fix for CVE-2026-34080. Since it is tracked without version info by NVD, mark it explicitily as patched. Drop the patch that is included in this release. While here, also add the recipe to the ptest list - it's a fast one, runs under a second. Changelog: - Drop the autotools build system - Unbreak the CI - Prevent a crash on disconnect - Fix building with glibc >= 2.43 - Fix the eavesdrop filtering to prevent message interception Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* wolfssl: upgrade 5.9.0 -> 5.9.1Gyorgy Sarvari2026-04-141-1/+10
| | | | | | | | | | | | | | | | Contains many CVE fixes. Changelog: https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.1-stable There are a number of fixed CVEs in this version that are tracked without version by NVD - mark them as patched explicitly. Ptests passed: Test script returned: 0 unit_test: Success for all configured tests. PASS: Wolfssl Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ntp: Fix build with -std=gnu23Khem Raj2026-04-133-0/+136
| | | | | | | Backport a patch from openLDAP to fix the configure errors with clang-22 -std=gnu23 Fix another issue by dropping C89 signatures in favor of C99 function prototypes Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-django: upgrade 5.2.12 -> 5.2.13Gyorgy Sarvari2026-04-131-1/+1
| | | | | | | | | | | | | | | Contains fixes for CVE-2026-3902, CVE-2026-4277, CVE-2026-4292, CVE-2026-33033 and CVE-2026-33034. Changelog: https://docs.djangoproject.com/en/6.0/releases/5.2.13/ Ptests passed successfully: Ran 18163 tests in 457.705s OK (skipped=1389, expected failures=5) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-django: upgrade 6.0.3 -> 6.0.4Gyorgy Sarvari2026-04-131-1/+1
| | | | | | | | | | | | | | | Contains fixes for CVE-2026-3902, CVE-2026-4277, CVE-2026-4292, CVE-2026-33033 and CVE-2026-33034. Changelog: https://docs.djangoproject.com/en/6.0/releases/6.0.4/ Ptests passed successfully: Ran 18691 tests in 149.800s OK (skipped=1397, expected failures=5) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* nodejs: mark CVE-2026-21710 patchedGyorgy Sarvari2026-04-131-0/+1
| | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-21710 The CVE is fixed in the current recipe version[1], but NVD tracks it without verison info. Mark it as patched in the recipe. [1]: https://github.com/nodejs/node/blob/v22.x/doc/changelogs/CHANGELOG_V22.md Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* minio: ignore irrelevant CVEsGyorgy Sarvari2026-04-131-1/+1
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33419 https://nvd.nist.gov/vuln/detail/CVE-2026-34204 These CVEs were filed against minio server, but this recipe is for minio client tools, which is a related, but different project. Ignore these CVEs. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libraw: mark fixed CVEs patchedGyorgy Sarvari2026-04-131-0/+2
| | | | | | | | | | | | | | | | | | | These CVEs have been fixed already in the current version, however NVD tracks them with incorrect version information. Commits that fix them: CVE-2026-20884: https://github.com/LibRaw/LibRaw/commit/aa4458eb511daeae90676c1ce5c587106e4aaec1 CVE-2026-24450: https://github.com/LibRaw/LibRaw/commit/c911c9b9edffa5fab99f828d0fee6dd2d0f6105f These commits were identified from the changelog of this version[1], which mentions the Talos ID of the vulnerabilities (and the Talos ID is mentioned in the NVD reports[2][3]). [1]: https://github.com/LibRaw/LibRaw/releases/tag/0.22.1 [2]: https://nvd.nist.gov/vuln/detail/CVE-2026-24450 [3]: https://nvd.nist.gov/vuln/detail/CVE-2026-20884 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* flatpak: upgrade 1.17.3 -> 1.17.6Gyorgy Sarvari2026-04-131-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains fixes for CVE-2026-34078 and CVE-2026-34079 Add explicit CVE_STATUS tags for these CVEs, because they are tracked without version info by NVD at this time. Changelog: 17.6: Bug fixes: - Fix the remaining regression for Chromium based browsers by not leaking file descriptors down to wrapped command - Fix a regression when installing extra-data without a runtime, which is the case for openh264 - Fix the remaining regression for Epiphany by ignoring unusable sandbox-expose paths for sub-sandboxes in the portal - Fix the installed tests by allowing to add a new ref to an existing temporary ostree repo - Avoid closing fds 0/1/2 when they are used as a bad argument to flatpak-run, and reduce duplication in handling file descriptor arguments Enhancements: - Disable auto-pin in flatpak-repair to preserve the pin state across re-installs - Small improvements for the tests 17.5: Bug fixes: - Fix regressions caused by the sandbox escape security fix, which impact some browsers, browser-based apps and Steam (#6577, #6569, #6576, #6574) Enhancements: - Expand test coverage of flatpak-run features used by flatpak-portal (#6573) 17.4: Security fixes: - Fix a complete sandbox escape which leads to host file access and code execution in the host context (CVE-2026-34078) - Prevent arbitrary file deletion on the host filesystem (CVE-2026-34079) - Prevent arbitrary read-access to files in the system-helper context (GHSA-2fxp-43j9-pwvc) - Prevent orphaning cross-user pull operations (GHSA-89xm-3m96-w3jg) Enhancements: - Enable ntsync unconditionally - Automatic branch following for extensions to ensure that "no-autodownload" extensions stay functional after an update that requires a new branch - Translation updates: eo, kk, sr, zh_CN Bug fixes: - Prevent CPR sequence from showing up in the terminal - Fix a crash for apps/runtimes with multiarch permission - Fixes for Coverity warnings - Add test-preinstall.sh to the test matrix source - Fix a test message to refer to "systemd-localed" instead of "located" Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ez-ipupdate: add CVE tag to CVE-fixing patchGyorgy Sarvari2026-04-131-1/+6
| | | | | | | | | | | | | | | | An already existing patch fixes a CVE (CVE-2004-0980), but it since the patch didn't have the CVE tag, the cve checker did not pick it up. Rectify this ommission. CVE details: https://nvd.nist.gov/vuln/detail/CVE-2004-0980 The same patch is used by Gentoo to mitigate this issue. Gentoo CVE advisory: https://security.gentoo.org/glsa/200411-20 Linked Gentoo bug, containing this patch: https://bugs.gentoo.org/69658 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* corosync: patch CVE-2026-35092Gyorgy Sarvari2026-04-132-0/+58
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-35092 Pick the patch that mentions the CVE ID explicitly (the same commit was identified by Debian also[1]) [1]: https://security-tracker.debian.org/tracker/CVE-2026-35092 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* corosync: patch CVE-2026-35091Gyorgy Sarvari2026-04-132-0/+48
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-35091 Pick the patch that mentions the CVE ID explicitly (it was identified by Debian also as the fix[1]) [1]: https://security-tracker.debian.org/tracker/CVE-2026-35091 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* tbb: Fix build with LLD linkerKhem Raj2026-04-131-0/+1
| | | | | | | | | | | | | | | | | | | fixes | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'ITT_DoOneTimeInitialization' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'TBB_runtime_interface_version' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'get_memcpy_largest_cachelinesize' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'get_memcpy_largest_cache_size' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'get_mem_ops_method' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'init_mem_ops_method' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'irc__get_msg' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'irc__print' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'override_mem_ops_method' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'set_memcpy_largest_cachelinesize' failed: symbol not defined | aarch64-yoe-linux-ld.lld: error: version script assignment of 'local' to symbol 'set_memcpy_largest_cache_size' failed: symbol not defined | aarch64-yoe-linux-clang: error: linker command failed with exit code 1 (use -v to see invocation) | [45/49] Linking CXX shared library clang_22.1_cxx11_64_release/libtbb.so.12.17 Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* keyutils: Fix build with lld linkerKhem Raj2026-04-131-0/+2
| | | | Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-blivet: upgrade 3.12.1 -> 3.13.2Jiaying Song2026-04-132-38/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/storaged-project/blivet/releases 1. Drop 0008-use-oe-variable-to-replace-hardcoded-dir.patch and add do_install:append to manually install D-Bus and systemd files: Upstream commit 0f0fd84d [1] removed data_files from setup.py and moved their installation to a Makefile target (install-dbus), but OE uses setuptools3_legacy which only runs setup.py install and does not invoke the Makefile. 2. Add missing RDEPENDS: - python3-dasbus: upstream replaced the internal safe_dbus module with the external dasbus library [2]. - python3-pygobject: was always required (gi.repository for libblockdev) but missing from old recipe. - util-linux: blivet directly calls lsblk, mount, umount and blockdev via subprocess. [1] https://github.com/storaged-project/blivet/commit/0f0fd84d [2] https://github.com/storaged-project/blivet/commit/1e7c5409 Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* tailscale: upgrade 1.84.3 -> 1.94.2Ayoub Zaki2026-04-123-64/+95
| | | | | | | | | | -Update tailscale recipe to version 1.94.2 -Regenerate go module dependencies and license checksums -Export GOFLAGS with build tags so do_update_modules discovers all dependencies -Manually verify and complete Unknown license entries Signed-off-by: Ayoub Zaki <ayoub.zaki@embetrix.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-05-23 05:17:40 +0000