summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* indent: fix CVE-2023-40305Yogita Urade2025-09-273-0/+8452
| | | | | | | | | | | | | | | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. Reference: https://savannah.gnu.org/bugs/index.php?64503 (cherry picked from commit 7da6cb848bc42b3e6bd5d2b37b52ba75510a6ca0) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-oe: only add clinfo if DISTRO_FEATURES has openclYoann Congal2025-09-261-1/+1
| | | | | | | | | | | | | | Since commit f65ae714d885 ("opencl: make use of the 'opencl' DISTRO_FEATURE"), clinfo has a feature check on "opencl". Only add it to its meta-oe package groups if the opencl is in DISTRO_FEATURES. Fixes this warning (as seen on AB[0]): stdio: WARNING: Nothing RPROVIDES 'clinfo' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/82/builds/453/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosh: set working SRC_URIGyorgy Sarvari2025-09-261-2/+4
| | | | | | | | The project switched to storing their releases on Github, and the original links stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.4.12 -> 8.4.13Jason Schonberg2025-09-261-1/+1
| | | | | | | | | This is a bugfix release. There are integer overflow and memory leak fixes included. Changelog: https://www.php.net/ChangeLog-8.php#8.4.13 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iwd: update 3.9 -> 3.10Markus Volk2025-09-261-1/+1
| | | | | | | | | | ver 3.10: Fix issue with handling neighbor report on BSS TM request. Fix issue with handling deauth and FT association failure. Fix issue with handling roaming and old frequencies. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lsscsi: fix versioningAnkur Tyagi2025-09-251-0/+2
| | | | | | | PE bump is needed because previous PV "030" > current PV "0.32" Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmime-types-perl: upgrade 2.28 -> 2.29Wang Mingyu2025-09-241-2/+2
| | | | | | | License-Update: the license declaration has shifted from line 11 to line 13. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Fix the multilib configLiu Yiding2025-09-241-2/+2
| | | | | | | | | | | | | When enabling multilib with lib32, the radiusd will use etc file for lib32 as default #systemctl status radiusd ...... /usr/sbin/radiusd -d /etc/lib32-raddb It should be lib64 as default. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: upgrade 22.19.0 -> 22.20.0Jason Schonberg2025-09-243-1/+1
| | | | | | | Chagelog: https://github.com/nodejs/node/releases/tag/v22.20.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* znc: upgrade 1.8.2 -> 1.10.1Gyorgy Sarvari2025-09-242-26/+22
| | | | | | | | | | The project has switched to cmake since the last update. The changelog is long, but there is a link: https://github.com/znc/znc/blob/master/ChangeLog.md Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dbus-broker: Add a runtime dependency on dbus-toolsPeter Kjellerstedt2025-09-241-1/+1
| | | | | | | | This matches dbus' runtime dependencies and is needed for the dbus-broker package to be a drop-in replacement for the dbus package. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: upgrade 2.1.2 -> 2.1.2aGyorgy Sarvari2025-09-241-2/+2
| | | | | | | | | Changelog: - dig wrapper function was broken since 2.1.2 - No longer send nslookup/dig stderr to /dev/null Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: upgrade 7.22 -> 7.24Gyorgy Sarvari2025-09-242-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: 7.24 Userspace changes Improve fixing commas in sorted json output Fix extra quotes around elements in json output (bugzilla #1793, issue 3.) Fix commas in sorted json output (bugzilla #1793, issue 4) Fix unquoted port range in json output (bugzilla #1793, issue 1) Fix extraneous comma in terse list json output (Joachim, bugzilla #1793, issue 2) bash-completion: restore fix for syntax error (Jeremy Sowden) Correct typo in man-page (Jeremy Sowden) Kernel part changes netfilter: ipset: fix region locking in hash types Handle "netfilter: ipset: Fix for recursive locking warning" patch for backward compatibility netfilter: ipset: Fix for recursive locking warning 7.23 Userspace changes tests: runtest.sh: Keep running, print summary of failed tests (Phil Sutter) tests: cidr.sh: Fix for quirks in RHEL's ipcalc (Phil Sutter) tests: cidr.sh: Respect IPSET_BIN env var (Phil Sutter) ipset: Fix implicit declaration of function basename (Mike Pagano) tests: Reduce testsuite run-time (Phil Sutter) lib: ipset: Avoid 'argv' array overstepping (Phil Sutter) lib: data: Fix for global-buffer-overflow warning by ASAN (Phil Sutter) Kernel part changes netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) netfilter: ipset: Fix suspicious rcu_dereference_protected() Replace BUG_ON() with WARN_ON_ONCE() according to usage policy. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyproj: added nativeJan Vermaete2025-09-241-0/+3
| | | | | | | + homepage added Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-typer: upgrade 0.17.4 -> 0.19.1Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-spidev: upgrade 3.7 -> 3.8Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-regex: upgrade 2025.9.1 -> 2025.9.18Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pystemd: upgrade 0.13.4 -> 0.14.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pymongo: upgrade 4.15.0 -> 4.15.1Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-inline-snapshot: upgrade 0.28.0 -> 0.29.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-grpcio: upgrade 1.74.0 -> 1.75.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-grpcio-tools: upgrade 1.74.0 -> 1.75.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-grpcio-reflection: upgrade 1.74.0 -> 1.75.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-grpcio-channelz: upgrade 1.74.0 -> 1.75.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-gevent: upgrade 25.8.2 -> 25.9.1Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-dirty-equals: upgrade 0.9.0 -> 0.10.0Wang Mingyu2025-09-241-2/+2
| | | | | | | License-Update: add "to present" to Copyright Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-coverage: upgrade 7.10.6 -> 7.10.7Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cantools: upgrade 40.5.0 -> 40.6.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-black: upgrade 25.1.0 -> 25.9.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openjpeg: upgrade 2.5.3 -> 2.5.4Wang Mingyu2025-09-242-46/+1
| | | | | | | | CVE-2025-54874.patch removed since it's included in 2.5.4 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nautilus: upgrade 48.3 -> 49.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mcelog: upgrade 204 -> 206Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* liburi-perl: upgrade 5.32 -> 5.34Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* leptonica: upgrade 1.85.0 -> 1.86.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jsoncons: upgrade 1.4.0 -> 1.4.1Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* inotify-tools: upgrade 4.23.9.0 -> 4.25.9.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-system-monitor: upgrade 48.1 -> 49.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeipmi: upgrade 1.6.15 -> 1.6.16Wang Mingyu2025-09-242-47/+2
| | | | | | | | 0001-Fix-for-GCC15-C23-build-failure.patch removed since it's included in 1.6.16 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dconf: upgrade 0.40.0 -> 0.49.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dash: upgrade 0.5.12 -> 0.5.13Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.2.20250907.0 -> 6.2.20250921.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* btop: upgrade 1.4.4 -> 1.4.5Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zlog: upgrade 1.2.16 -> 1.2.18Gyorgy Sarvari2025-09-244-16/+68
| | | | | | | | | | | | | | | | | | | | | | Switched to cmake. Added a backported patch to be able to use the latest version of cmake. Also, add a new patch to avoid overwritingg all the CFLAGS set by Yocto, which helps with avoiding the inclusion of TMPDIR in the generated files. License-Update: License changed to Apache2: https://github.com/HardySimpson/zlog/commit/1a7b1a6fb956b92a4079ccc91f30da21f34ca063 Changelog: 1.2.18: - patched severe vulnerability CVE-2024-22857 - restructured build system 1.2.17: - Change Lience to Apache 2.0, for more people Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* keepalived: upgrade 2.3.2 -> 2.3.4Gyorgy Sarvari2025-09-243-38/+3
| | | | | | | | | | | | | 0001-vrrp-Don-t-include-linux-if_ether.h-if-not-needed.patch is included in this release, so drop the patch. Many changes and updates, easier to look in the changelogs themselves rather than pasting here: https://www.keepalived.org/release-notes/Release-2.3.3.html https://www.keepalived.org/release-notes/Release-2.3.4.html Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fdk-aac: upgrade 2.0.2 -> 2.0.3Gyorgy Sarvari2025-09-241-2/+2
| | | | | | | | | | Changelog: - Minor upstream updates - Fixed one case of a failed assert in SBR encoding - Added build support for s390x Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-gpt-image: Add native and nativesdk targets to the buildLibo Chen2025-09-241-0/+2
| | | | | | | Add the native and nativesdk to the recipe. Signed-off-by: Libo Chen <libo.chen.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencv: Backport a patch to rename BlocksCompensator::feed()Peter Kjellerstedt2025-09-232-0/+56
| | | | | | | | This avoids a clash with the base class' pure virtual method with the same name. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hostapd: Backport a patch to build SAE-PK correctlyPeter Kjellerstedt2025-09-232-0/+41
| | | | | | | | SAE-PK needs base64_decode(), but if no other feature is enabled that needs base64 support, then it is missing. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tokyocabinet: fix licenseGyorgy Sarvari2025-09-231-1/+1
| | | | | | | The application is distributed under the LGPL license, not GPL. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tokyocabinet: switch to working SRC_URIGyorgy Sarvari2025-09-231-1/+1
| | | | | | | The original source seems to be long gone. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>