summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* README: update listed maintainerwrynoseAnuj Mittal2026-05-2912-20/+12
| | | | Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* layer.conf: remove dead BBFILES_DYNAMIC entry for clang-layerJiaying Song2026-05-291-2/+0
| | | | | | | | | | The dynamic-layers/clang-layer/ directory does not exist under meta-oe. Remove the stale BBFILES_DYNAMIC references as they match nothing. Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit a07b2ddc51d0538269eb156f546df39f180fb9e7) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* kmscon: fix zlib cross-compiling errorsAdam Duskett2026-05-292-1/+55
| | | | | | | | | | | | | | | | | | zlib compression was introduced in version 9.3.3. However, when cross-compiling kmscon for an architecture other than x86_64, the genunifont executable tries to use the build-systems zlib instead of the hosts zlib. This leads to the following error during compiling: libz.so: error adding symbols: file in wrong format Fix this by adding a new native zlib dependency specifically for the genunifont executable. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 72154f38fc5384729ef3a42eb7c4ca0afaf1664b) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* nodejs: upgrade 22.22.2 -> 22.22.3Jason Schonberg2026-05-294-174/+1
| | | | | | | | | | | | | With this upgrade, nodejs updated the llhttp dependency to version 9.3.1 So some of the patches are nolonger necessary. Changelog: https://github.com/nodejs/node/releases/tag/v22.22.3 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit ea56a5e3ae463a1b9d28298f47f27b40e519ca6d) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* imagemagick: upgrade 7.1.2-22 -> 7.1.2-23Ankur Tyagi2026-05-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | Bug and security fixes https://github.com/ImageMagick/ImageMagick/compare/7.1.2-22...7.1.2-23 PTEST passed: root@qemuarm64:~# ptest-runner imagemagick START: ptest-runner 2026-05-23T03:43 BEGIN: /usr/lib/imagemagick/ptest ... ... DURATION: 1 END: /usr/lib/imagemagick/ptest 2026-05-23T03:43 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* pipewire: update 1.6.3 -> 1.6.5Markus Volk2026-05-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PipeWire 1.6.5 (2026-05-13) This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. Highlights - Fix muted output in some cases. - Removed the pipe filter in filter-graph. - More fixes and improvements. PipeWire - Fix an issue in pw-filter where it could end up in a loop where buffers are stuck on a port and the port becomes silent. (#5249) Modules - Improve ROC receiver start/stop, fixes memory leaks. (#5250) - Remove the pipe filter from filter-graph, it's broken by design and a security nightmare. - Fix the midi buffer size in jack-tunnel. SPA - Rate limit out-of-buffers errors. (#5249) - Partially revert the line-out mute patch, it seems to break things and leave audio muted when plugging-unplugging jacks. (#5246) - Improve renegotiation in audioconvert when the graph rate changes and the resampler was disabled. (#4933). - Fix potential crash in alsa when logging. Pulse-server - A whole bunch of extra security checks and hardening fixes. Older versions: PipeWire 1.6.4 (2026-04-22) This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. Highlights - Small improvements and seqfault fixes. - Try to not emit ports that JACK doesn't understand. Fixes glitches in ardour and other JACK apps. PipeWire - Refuse to load plugins and crash when pw_init() was not called. (!2784) SPA - Fix LADSPA plugin loading, support LADSPA_PATH ending with / - Fix segfault in alsa-seq when removing devices in some cases. (#5221) - Allow negative gain in mixer. (#5228) - Improve alsa-seq port names, add : between client and port. (#5229) - ACP: don’t override user-selected port on availability changes. Bluetooth - Backport some important fixes and minor improvements. JACK - Ignore non DSP ports to avoid emitting extra callbacks. GStreamer - Fix crop metadata. Tools - Fix WAVEX saving in pw-cat. (#5233) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit babcd8741435f1d97c759f7379dbfbd3ba3982f9) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* dnsmasq: fix CVE-2026-5172Abhishek Bachiphale2026-05-292-0/+35
| | | | | | | | | | | | | | | | A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-5172 ] Signed-off-by: Abhishek Bachiphale <Abhishek.Bachiphale@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 44c8962f48a67fbe0fbc8fd830d2f51ae15541a4) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* dnsmasq: fix CVE-2026-4893Abhishek Bachiphale2026-05-292-0/+35
| | | | | | | | | | | | | | | An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4893 ] Signed-off-by: Abhishek Bachiphale <Abhishek.Bachiphale@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit b4c48536242d9aa7d1eaf968152fc83edea41923) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* dnsmasq: fix CVE-2026-4892Abhishek Bachiphale2026-05-292-0/+37
| | | | | | | | | | | | | | | A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4892 ] Signed-off-by: Abhishek Bachiphale <Abhishek.Bachiphale@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 21c3d7eb6f94f967b5e02fc61cc027d3893764a0) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* dnsmasq: fix CVE-2026-4891Abhishek Bachiphale2026-05-292-0/+41
| | | | | | | | | | | | | | | A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4891 ] Signed-off-by: Abhishek Bachiphale <Abhishek.Bachiphale@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit a9de48a9fa55a254c0bf2eb528c81bd90e015c03) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* lldpd: upgrade 1.0.21 -> 1.0.22Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | | | | | | * Fix: + Fix out-of-bound read access when removing VLAN tag (CVE-2026-46433, #787) + Reject 0-length management address in LLDP + Fix race condition when creating the control socket + Fix FDP MAC address + Fix memory leak in the BSD bridge query path + Fix duplicate management addresses when merging EDP VLAN frames Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 74cd808dbd01a5adf6d0c969fb024d8fda8fede2) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* postgresql: upgrade 17.8 -> 17.10Guocai He2026-05-292-2/+2
| | | | | | | | | | | | | | | | | | Refreshed 0003-configure.ac-bypass-autoconf-2.69-version-check.patch for 17.10 Includes fix for CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6637, CVE-2026-6638 CVE-2026-6575 Release Notes: https://www.postgresql.org/docs/release/17.10/ Signed-off-by: Guocai He <guocai.he.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 83cad3966c320b236137a5b033374e59f87ca220) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* uriparser: upgrade 1.0.1 -> 1.0.2Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ============== * Fixed: [CVE-2026-44927] Stop truncating 'ptrdiff_t' to 'int' * Fixed: [CVE-2026-44928] Fix 'EqualsUri' with regard to '.absolutePath' * Fixed: Fix OOM related memory leak in 'CopyUriMm' * Improved: Simplify internal function 'CompareRange' into 'RangeEquals' * Improved: Make function 'RangeEquals' use size_t' internally * Soname: 3:2:2 - see https://verbump.de/ for what these numbers do Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit a0589ae5a4442d574aace469fc54265154741f8f) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* uriparser: upgrade 1.0.0 -> 1.0.1Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 03255a83e3cfff9c295a03636e0ca09cd3b024b0) https://github.com/uriparser/uriparser/blob/uriparser-1.0.1/ChangeLog Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* bit7z: upgrade 4.0.11 -> 4.0.12Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 84d4d96d9f08467fce3ac5ead28e8d967b100e1f) https://github.com/rikyoz/bit7z/releases/tag/v4.0.12 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* imagemagick: upgrade 7.1.2-21 -> 7.1.2-22Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 5063ac8e48bf20c7a889614410a3685e3950ddd7) Bug and security fixes https://github.com/ImageMagick/ImageMagick/compare/7.1.2-21...7.1.2-22 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* swagger-ui: upgrade 5.32.5 -> 5.32.6Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit a86ee0d4f6134d08b5873dcd9fcd203550708f59) Bugfix release https://github.com/swagger-api/swagger-ui/releases/tag/v5.32.6 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* swagger-ui: upgrade 5.32.2 -> 5.32.5Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 137e8d240eb8a8116563cef051194955dbdeb497) Bugfixes and performance improvements: https://github.com/swagger-api/swagger-ui/releases/tag/v5.32.3 https://github.com/swagger-api/swagger-ui/releases/tag/v5.32.4 https://github.com/swagger-api/swagger-ui/releases/tag/v5.32.5 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* python3-django: upgrade 6.0.4 -> 6.0.5Ankur Tyagi2026-05-291-1/+1
| | | | | | | | | | https://docs.djangoproject.com/en/dev/releases/6.0.5/ Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 2f64c27b186011958ac392aea9214b2c134e14a3) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* python3-django: upgrade 5.2.13 -> 5.2.14Ankur Tyagi2026-05-291-1/+1
| | | | | | | | | | https://docs.djangoproject.com/en/dev/releases/5.2.14/ Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit ef903fca830e8bc31294ca2bec4957e85c4418b1) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* python3-huey: upgrade 3.0.0 -> 3.0.1Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | | | | | Changelog: ========== - Fix bug in redis version parsing when using Elasticache or any other that sends major/minor. redis-py incorrectly parses these as floats because there's only a single decimal, so the version check was breaking. - Rename max task option --max-tasks (previously was --max_tasks). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit c14a56b3581d43ba8665e86f17aa3b473d7dcb57) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* python3-typeguard: upgrade 4.5.1 -> 4.5.2Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | Changelog: Fixed IndexError raised from check_signature_compatible when the subject method has no positional parameters Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 537a4c4484786553795001e387e5c186113d6d77) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* python3-tzdata: upgrade 2026.1 -> 2026.2Wang Mingyu2026-05-291-1/+1
| | | | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 6321202865f920d6e6e45a0a5e6cd7c5752a1374) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* python3-inline-snapshot: upgrade 0.32.6 -> 0.32.7Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ============ - Fixed snapshot comparison for dicts where keys are dataclass instances (or other custom objects used as dict keys), which previously caused corrupted snapshots - either collapsing multiple entries into one or appending duplicate keys on subsequent runs - Fixed tuple snapshot updates to compare elements positionally rather than using sequence alignment, so existing expressions (e.g. 3 + 3) are preserved when elements are removed from or added to a tuple. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit fe086de31ae8fe4c8d63306c112dbe8e41db1e59) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* neatvnc: upgrade 0.9.5 -> 0.9.6Wang Mingyu2026-05-292-13/+10
| | | | | | | | | | | | | | | | 0001-Use-aml-v1.patch refreshed for 0.9.6 Changelog: =========== - auth: rsa-aes: Fix potential buffer overflow - auth: vencrypt: Reject excessively long usernames and passwords Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 9222ec03c3bb15a9b927cff1a744b180aa4d1dff) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* localsearch: upgrade 3.11.0 -> 3.11.1Wang Mingyu2026-05-291-1/+1
| | | | | | | | | | | Changelog: Fix possible failures when extracting metadata from EPUB, ODF and OOXML documents Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 5a08d78f858b8530143a39a1e819c541afd3681e) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* Update README.md example with new branch name.Jason Schonberg2026-05-299-9/+9
| | | | | Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* libtsm: upgrade 4.4.3 -> 4.5.0Wang Mingyu2026-05-171-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ============= - Support for terminal bell and keyboard LEDs - Fix build musl - test/vte: fix memory leak in vte tests - Refactor scrollback and selection - screen: Fix wrong attribute for new cells when resizing - Fix remove from sb - Fix get next line - Fix scrollback position - test: robustness, make the test faster. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 6d7794e799c5c7a9c5ee4ef578706b1228ef20a6) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* nftables: improve reproducibilityYi Zhao2026-05-172-0/+42
| | | | | | | | | | Use SOURCE_DATE_EPOCH to set MAKE_STAMP instead of using the current time, thereby improving reproducibility. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit a3b407c9821509388fd4abd10b9f4c9fbf28cdaf) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* python3-ujson: upgrade 5.12.0 -> 5.12.1Wang Mingyu2026-05-171-1/+1
| | | | | | | | | | | | Changelog: ========== - Fix encoding ref leak with non-English character - Fix memory leak when ujson.dump() is unable to write to its file Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 6887661fec82e3472553ec982c49fef36f8023cf) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* znc: upgrade 1.10.1 -> 1.10.2Wang Mingyu2026-05-171-1/+1
| | | | | | | | | | | | | | Changelog: ============= - Fix build with SWIG 4.4. - Fix build in the event some parts of Boost are installed but Boost.Locale is not. - Make GetClient() work in the OnClientGetSASLMechanisms module callback. - Stop accidentally requiring new perl 5.35.1, regression from 1.10.0. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 8b4ce3276c57cf2408f97a26a91464263e971e49) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* orage: upgrade 4.20.2 -> 4.20.3Jason Schonberg2026-05-171-1/+1
| | | | | | | | | - Fixed use-after-free in sound command execution (Issues #47 and #48). Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 3bdbc82938282afc6d49c3bf25beb2d0db073b6c) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* hunspell: upgrade 1.7.2 -> 1.7.3Wang Mingyu2026-05-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Fix stack-buffer-overflow in Hunzip::getline - Fix stack overflow in compound_check on Hungarian dictionaries under certain conditions - Fix UB when SFX condition starts with '^' (#1095) - Bounds-check continuation bytes in u8_u16 (#1110) - oss-fuzz timeout/OOM hardenings - Fix #715 CHECKCOMPOUNDCASE considers digits uppercase - Fix #748 hzip: cannot write file - Fix #1024 std::string bounds check - Fix #1044 tools/analyze crash - Fix #1076 flags 65520/65521 wrongly rejected - Fix #1058 don't suggest the input word as its own correction - Fix #1002 exact word marked as a near miss - Fix tdf#125600 dotted-I regression - Partial Unicode table refresh for Mc combining marks (#1057) - Add Hunspell_add_with_flags / Hunspell::add_with_flags - New SPELL_BEST_SUG flag, MAXBREAKDEPTH limit - Replace clock() with std::chrono for suggestion time limits (#716) - Improve exception safety (#587) - Document analyze/stem/generate requirements (#554) - Report iconv direction on private dic load failures (#619) - Show dic load errors unconditionally (#1012) - Rename es_EU to eu (#1113) - Build fixes: out-of-tree, Windows ARM64, MSVC hzip tmpfile (#919), --disable-shared with mingw32 (#698), iconv on msys2 (#723), ncurses with separate tinfo - New fuzzers: hzfuzzer, persdicfuzzer, parserfuzzer, affdicfuzzer - Coverity-flagged fixes - Merge in weblate translations Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit dad06c74bb94e509ecb03b89fb6655cc67604968) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* libauthen-sasl-perl: upgrade 2.1800 -> 2.2000Wang Mingyu2026-05-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | [Added] - Documentation for the security layer [Fixed] - CVE-2025-40918 (Insecure source of randomness), required addition of dependency on Crypt::URandom - Several public functions missing from the API documentation [Changed] - Modules Authen::SASL::Perl::CRAM_MD5, Authen::SASL::Perl::DIGEST_MD5 and Authen::SASL::CRAM_MD5 marked as deprecated based on the respective RFC documents; thanks to @robrwo for the suggestion and @neustradamus for the pointers to the documentation - Update module metadata to point to the new 'perl-authen-sasl' org on GitHub to which the modules moved - Use VERSION declarations in 'package' statements, since our minimum Perl version is 5.14 anyway Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit bfd93bafbba771386dde525fdc6202b21f0e85fb) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* valkey: upgrade 9.0.3 -> 9.0.4Wang Mingyu2026-05-171-1/+1
| | | | | | | | | | | | | Changelog: ============ (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit d47ea6487bec792fc3eb01909e4426cb610f22d7) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* iwd: depend on the regulatory databaseRoss Burton2026-05-171-0/+1
| | | | | | | | | | | Doing wifi without the regulatory database is not good, so add a runtime dependency to iwd to ensure that it gets pulled into the image for the kernel drivers to use. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 51ed0fcecd3c3a7138319b3e3bcb6315add30356) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* thin-provisioning-tools: fix compile failure on 32bit BSPsHongxu Jia2026-05-171-2/+2
| | | | | | | | | | | | | | | | | | | | $ echo 'MACHINE = "qemux86"' >> conf/local.conf $ bitbake thin-provisioning-tools ``` error[E0080]: index out of bounds: the length is 1 but the index is 4 --> tmp/work/core2-32-wrs-linux/thin-provisioning-tools/1.3.1/build/target/release/build/devicemapper-sys-f88f57f28cd965d2/out/dm-bindings.rs:3:8718 | 3 | ...usize] ; ["Alignment of dm_ioctl"] [:: std :: mem :: align_of :: < dm_ioctl > () - 4usize] ; ["Offset of field: dm_ioctl::version"... | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ evaluation of `_` failed here ``` Inherit siteinfo to use SITEINFO_BITS replace TUNE_FEATURES to test 32bit BSPs Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 4fe6bf337a732e3efd2c14472a8991f0d4eefec7) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* kmscon: upgrade 9.3.3 -> 9.3.5Adam Duskett2026-05-171-1/+1
| | | | | | | | | | Changelog: https://github.com/kmscon/kmscon/releases/tag/v9.3.5 Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit f36312669ce6c501c603e4cbfbe1cf6112d0f146) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* pkcs11-provider: fix build error on 32 bit systemsFabian Pflug2026-05-172-0/+63
| | | | | | | | | | PKCS11 Provider did not build on 32 bit systems. Fixed Upstream with https://github.com/openssl-projects/pkcs11-provider/pull/689 Signed-off-by: Fabian Pflug <f.pflug@pengutronix.de> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 3608cfdc5b3374ffe31bae81ce25ec69d9d20252) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* jsoncpp: Fix C++11 ABI breakage when compiled with C++17Ernest Van Hoecke2026-05-172-0/+369
| | | | | | | | | | | | | | | | | When jsoncpp is built with C++17, 1.9.7 drops several legacy overloads that C++11 consumers can still link against. Backport the upstream fix to restore compatibility. Fixes errors such as: | undefined reference to `Json::Value::operator[](char const*)' Patch can be dropped when we move to 1.9.8. Signed-off-by: Ernest Van Hoecke <ernest.vanhoecke@toradex.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 9be9388574bbddcd6f51ffa0f006e42a11ddcf81) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* postfix: upgrade 3.10.8 -> 3.10.9Yi Zhao2026-05-152-1/+52
| | | | | | | | | | | Security fix: CVE-2026-43964 Add a patch to fix build with musl. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 7c6ce9d10011094591a4449a977e5760d38711e8) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* cryptsetup: update udev package configPeter Marko2026-05-151-1/+1
| | | | | | | | | | | | | | | | | | Commit 1ca8df16af411871e10f268064570146cdef54cb fixed a build problem in wrong way. Relevant rules from lvm2-udevrules were merged into libdevmapper (which was previously pulled by the rules package), however instead of that, the whole lvm2 package was added as dependency (which then pulls the needed libdevmapper). That is a huge package completely unneeded and due to that, this new dependency was later changed to recommendation. Switch to libdevmapper instead of whole lvm2. Keep recommendation for now as it gives more flexibility. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit a5e9c8141a0533545e87f69d57d399acc2b3910b) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* proftpd: upgrade 1.3.9 -> 1.3.9aYi Zhao2026-05-151-2/+2
| | | | | | | | | | | | Security fix: CVE-2026-42167 ChangeLog: https://github.com/proftpd/proftpd/blob/1.3.9/NEWS Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 7381ae9d2409bbf7c358db4834741651fd1e740d) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* postfix: make it can compile with linux 7.xChangqing Li2026-05-152-0/+48
| | | | | | | | | | | | | | | | | | | | Fix compile failure on host with linux 7.x | DEBUG: Executing shell function do_compile | NOTE: make -j 64 OPT= DEBUG= OPTS= makefiles | make -f Makefile.in MAKELEVEL= Makefiles | (echo "# Do not edit -- this file documents how Postfix was built for your machine."; /bin/sh makedefs) >makedefs.tmp | ATTENTION: | ATTENTION: Unknown system type: Linux 7.0.0-14-generic | ATTENTION: | make: *** [Makefile.in:33: Makefiles] Error 1 | make: *** [Makefile:22: makefiles] Error 2 | ERROR: oe_runmake failed Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit a1503aa0f27f66c731b73db9a8cb8c2547f3f32b) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* apache2: upgrade 2.4.66 -> 2.4.67Liyin Zhang2026-05-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | Security fixes: - CVE-2026-34059 - CVE-2026-34032 - CVE-2026-33857 - CVE-2026-33523 - CVE-2026-33007 - CVE-2026-33006 - CVE-2026-29169 - CVE-2026-29168 - CVE-2026-28780 - CVE-2026-24072 - CVE-2026-23918 See: https://archive.apache.org/dist/httpd/CHANGES_2.4.67 Signed-off-by: Liyin Zhang <liyin.zhang.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 3ec333fc064b0088649a3dbfb69e3f3dd06e93bd) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* strongswan: upgrade 6.0.5 -> 6.0.6Wang Mingyu2026-05-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - CVE-2026-35328 - Fixed a vulnerability in libtls related to the processing of the supported_versions extension in TLS that can result in an infinite loop. - CVE-2026-35329 - Fixed a vulnerability in libstrongswan and the pkcs7 plugin related to the processing of encrypted PKCS#7 containers that can result in a crash. - CVE-2026-35330 - Fixed a vulnerability in in libsimaka related to the processing of certain EAP-SIM/AKA attributes that can result in an infinite loop or a heap-based buffer overflow and potentially remote code execution. - CVE-2026-35331 - Fixed a vulnerability in the constraints plugin related to the processing of X.509 name constraints that can allow authentication with certificates that violate the constraints. - CVE-2026-35332 - Fixed a vulnerability in libtls related to the processing of ECDH public values in TLS < 1.3 that can result in a crash. - CVE-2026-35333 - Fixed a vulnerability in libradius related to the processing of RADIUS attributes that can result in an infinite loop or an out-of-bounds read that may cause a crash. - CVE-2026-35334 - Fixed a vulnerability in the gmp plugin related to RSA decryption that can result in a crash. - Made the Botan RNG types used/provided by the botan plugin configurable. - The fix for the vulnerability in the constraints plugin now causes all certificates that contain excluded name constraints of type directoryName (DN) to get rejected. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit b05b177ae5473395ab2fe6f341c0efd129dcfb68) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* imagemagick: upgrade 7.1.2-19 -> 7.1.2-21Wang Mingyu2026-05-151-1/+1
| | | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 963f73979dd6dfd9359fded795e968de31b66acc) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* fastfetch: upgrade 2.61.0 -> 2.62.1Wang Mingyu2026-05-151-1/+1
| | | | | | | | | | | | Changelog: ========== - Fixes Host module not working on some devices - Logos : Adds EN-OS, LimeOS, Redrose and Uzbek Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit e61d33aa5306b856eecbe912b42db4685e0515cc) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* bubblewrap: upgrade 0.11.1 -> 0.11.2Wang Mingyu2026-05-151-1/+1
| | | | | | | | | | | | | Changelog: =========== - bug fix: CVE-2026-41163 - enhancement : New build option -Dsupport_setuid, which if set to false (which is the default) disables the support for setuid. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 8cb0926b53d6b129fc301588cc64f23c8e977d8d) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* eog: Add HOMEPAGELiu Yiding2026-05-151-0/+2
| | | | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> (cherry picked from commit 76b27162f9e612d8f117df312d39a56ad66ce589) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-07-27 21:53:51 +0000