summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* spectre-meltdown-checker: Update 0.46 -> gitJörg Sommer2026-03-201-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The git repo gained some bugfixes, esp. for arm32. But there was no release since mid 2023. So, use the git repo. a20641f fix: handle non-numeric ARM CPU architecture values d550ea8 fix: harmless 'dmesg: write error' that could happen on some systems 8e33a1d fix: set cpu_* vars to a default value 68b4617 update: fwdb from v345+i20251110+4df2 to v347+i20251110+615b, 2 microcode changes 9fed5ce update: fwdb from v344+i20250811+1523 to v345+i20251110+4df2, 45 microcode changes 72bce72 chore: really fix autoupdate workflow to avoid useless PRs 5f18e67 chore: fix autoupdate workflow a8466b7 fix CVE-2017-5715 reporting when IBRS_FW is enabled b99be23 update: fwdb from v296+i20240514+988c to v344+i20250811+1523, 128 microcode changes ee4cfd0 chore: add autoupdate workflow for fwdb c2c60e0 chore: fix recent shellcheck warnings bae43d8 Replace head -1 by head -n1 34c6095 fix: Linux 6.9+ changed some config options names (#490) e806e4b chore: docker compose v2 388d44e Fix Retpoline detection for Linux 6.9+ (issue #490) bd0c7c9 fix: typo introduced by #483, fixes #486 d70e4c2 fwdb: update to v296+i20240514+988c 4e29fb5 fix: ucode_platformid_mask is hexa (fixes #485) 0f2edb1 feat: blacklist some more microcodes (fixes #475) 8ac2539 fix: microcode check now supports pf_mask (fixes #482) 97f4d5f feat(reptar): add detection and mitigation of Reptar 9b7b09a fix(inception): continued mitigation detection c94811e fix(inception): Zen1/2 results based on kernel mitigations 3e67047 feat(inception): README ecee757 feat(inception): kernel checks + sbpb support detection fb6933d feat(inception): Zen1/2 IBPB and SMT checks dc6921a feat(inception): handle sysfs interface 3167762 feat(inception): start supporting AMD inception 44223c5 fix: bsd: kernel version detection dbe208f enh: downfall: detect kernel mitigation without sysfs aca4e2a enh: move root warning to the bottom c1c1ac4 feat(downfall): detection of the kernel mitigation relying on dmesg ba0daa6 feat: downfall: add kernel soft mitigation support check 227c0aa feat(downfall): add downfall checks 8ba3751 fwdb: update to latest Intel ucode versions d013c0a doc: add kernel src as additional ucode version source cbe8ba1 fix: inteldb: cpuid 0x00090660 and 0x000A0680 9c2587b enh: when CPUID can't be read, built it by ourselves 2a5ddc8 feat: add Intel known affected processors DB 2ef6c1c enh: factorize file download func 3c22401 chore: update disclaimer and FAQ Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wowlan-udev: set S to UNPACKDIRAnuj Mittal2026-03-201-0/+2
| | | | | | | | | | | | Since there are no sources being fetched, set S to UNPACKDIR to fix: | WARNING: wowlan-udev-1.0-r0 do_unpack: wowlan-udev: the directory | ${UNPACKDIR}/${BP} ... pointed to by the S variable doesn't exist | - please set S within the recipe to point to where the source has | been unpacked to. Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: Backport two patches to build with glibc 2.43Peter Kjellerstedt2026-03-203-0/+55
| | | | | | | | | | | | | | This avoids the following error: In file included from spa/plugins/alsa/acp/compat.c:26: spa/plugins/alsa/acp/compat.h: In function 'pa_path_get_filename': spa/plugins/alsa/acp/compat.h:437:13: error: assignment discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers] 437 | if ((fn = strrchr(p, PA_PATH_SEP_CHAR))) | ^ Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* minicoredumper: backport patch to build with glibc 2.43Gyorgy Sarvari2026-03-202-0/+45
| | | | | | | | | | | | As the subject says. Fixes compilation error: | ../../../sources/minicoredumper-2.0.7/src/coreinject/main.c: In function 'inject_data': | ../../../sources/minicoredumper-2.0.7/src/coreinject/main.c:248:11: error: assignment discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers] | 248 | p = strrchr(b_fname, '/'); Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* liboauth2: Backport a patch to build with glibc 2.43Peter Kjellerstedt2026-03-202-1/+34
| | | | | | | | Also remove PV. There is no need to set PV since the version is in the recipe file name. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cjose: Remove PVPeter Kjellerstedt2026-03-201-1/+0
| | | | | | | There is no need to set PV since the version is in the recipe file name. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pychromecast: upgrade 14.0.9 -> 14.0.10Gyorgy Sarvari2026-03-203-50/+1
| | | | | | | | | | | | | | | | | | Beside the below changelog, it also allows compiling with the latest Setuptools. Drop patches which became obsolete. Changes: - Ensure cec info is none if not supported - Add some fast pre-commit checks - Switch to ruff for checks and formatting - add D24f-J09 to const.py - Update const.py to include Lenovo Smart Display 10 - Avoid logging graceful disconnect as error - Fix datetime deprecation Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* luaposix: Upgrade to 36.3Khem Raj2026-03-181-4/+4
| | | | | | | | | | Fix build with lua 5.5 License-Update: bump copyright years to 2025 [1] [1] https://github.com/luaposix/luaposix/commit/07cf96f23c10ad01736205e6ca18375a208d05bf Signed-off-by: Khem Raj <raj.khem@gmail.com>
* links,links-x11: Upgrade to 3.20Khem Raj2026-03-184-2/+35
| | | | | | Fix build with glibc 2.43+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libfaketime: Upgrade to 0.9.11Khem Raj2026-03-183-50/+40
| | | | | | | | | | | | | | Fix build with glibc 2.43+ Changes: Fixed various cross-platform compile-time issues Honor nanosecond parameters/fields in relevant system calls Limited improvements to enhance compatibility with other LD_PRELOAD libraries Added selected more intercepted system calls Unset FAKETIME_SHARED automatically for child processes when enabling FAKETIME_FLSHM=1 Disable shared memory for child processes through FAKETIME_DISABLE_SHM=1 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layers: update for wrynose release seriesKhem Raj2026-03-1810-10/+10
| | | | | | Drop walnascar from supported release series Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: update 1.6.0 -> 1.6.2Markus Volk2026-03-183-179/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - remove two backport patches PipeWire 1.6.2 (2026-03-16) This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. Highlights - Fix a potential crash when the wrong memory was freed. - Fix a optimization with shared memory over some links that could cause errors later on. - Fix SOFA filter and default control input in LADSPA and LV2. - Some other small fixes and improvements. PipeWire - Remove an optimization to skip share mem in links, it causes problems later on. (#5159) Modules - Don't try to free invalid memory or close invalid fds when the client aborted before allocating buffer memory. (#5162) SPA - support ACP_IGNORE_DB in udev. - Use 0x as a prefix for hex values. - Mark Props as write-only in libcamera. - Small optimization in the audio mixer. - Fix initialization of control properties for SOFA and biquads in the filter-graph. (#5152) - Fix min/max default values for LADSPA and LV2. JACK - Fix jack_port_type_id(). Return values that are compatible with JACK1/2. Older versions: PipeWire 1.6.1 (2026-03-09) This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. Highlights - Fix socket activation, which could cause a failure to start PipeWire in some setups. - Fix crashes in many JACK apps when nodes/ports are quickly added/removed such as when there are notifications (like when changing the volume in KDE). - Fix playback of encoded formats in pw-cat again. - Some other smaller fixes and improvements. Modules - Fix socket activation. (#5140) - Remove node.link-group from driver nodes. SPA - Fix the libcamera stop sequence. JACK - Never return NULL from jack_port_by_id(). (#3512) GStreamer - Improve the timestamps on buffers. Tools - Fix playback of encoded formats. (#5155) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgpiod: fix gpio-tools tests failure with new coreutilsBartosz Golaszewski2026-03-182-1/+87
| | | | | | | | | | | | | openembedded-core updated to coreutils v9.10 in which commit 8c2461933411 ("timeout: honor ignored signal dispositions") changed the behavior of timeout. It will no longer propagate SIGINT to background shell jobs which breaks test-cases for gpio-tools which verify that they exit correctly after receiving SIGINT. This backports the patch sent upstream that removed the offending test-cases as we already have a similar set of tests for SIGTERM. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Add xxhash to DEPENDSJörg Sommer2026-03-181-1/+13
| | | | | | | | | | | | Currently, the build of wireshark fails with ERROR: wireshark-1_4.6.3-r0 do_package_qa: QA Issue: /usr/lib/libwsutil.so.17.0.0 contained in package wireshark requires libxxhash.so.0()(64bit), but no providers found in RDEPENDS:wireshark? [file-rdeps] ERROR: wireshark-1_4.6.3-r0 do_package_qa: Fatal QA errors were found, failing task. ERROR: Logfile of failure stored in: /build/tmp/work/core2-64-poky-linux/wireshark/4.6.3/temp/log.do_package_qa.302606 ERROR: Task (/build/../work/layers-3rdparty/openembedded/meta-networking/recipes-support/wireshark/wireshark_4.6.3.bb:do_package_qa) failed with exit code '1' Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlt-daemon: upgrade 2.18.10 to 3.0.0Changqing Li2026-03-1810-260/+1088
| | | | | | | | | | | | | | | | | | | | | Changes: https://github.com/COVESA/dlt-daemon/releases Remove patches already in 3.0.0: 544.patch 567.patch 0001-CMakeLists-txt-make-DLT_WatchdogSec-can-be-set-by-user.patch 0003-allow-build-with-cmake-4.patch Add patches to fix build failures 0001-Fix-compile-failure-related-to-gzlog.patch 0001-Fix-kinds-of-build-failure.patch 0001-Fix-build-failures.patch 0001-fix-build-failure-when-systemd-is-enabled.patch 0001-Fix-build-failure-with-glibc-2.43.patch Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-redis: upgrade 5.3.1->7.3.0Jiaying Song2026-03-181-2/+2
| | | | | | | | | | Switch build system from setuptools3 to python_hatchling Changelog: https://github.com/redis/redis-py/releases Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-paramiko: upgrade 3.5.1->4.0.0Jiaying Song2026-03-181-2/+2
| | | | | | | | Changelog: https://www.paramiko.org/changelog.html Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* android-tools-conf-configfs: make USB gadget IDs configurableViswanath Kraleti2026-03-181-3/+6
| | | | | | | | | | | | | | The android-gadget-setup script currently hardcodes the USB vendor ID, product ID, and configuration string. This makes it difficult for BSP layers to customize USB gadget identity with platform specific values. Introduce variables for the vendor ID, product ID, and configuration string when populating the configfs attributes. This allows machine or distro specific overrides via `/etc/android-gadget-setup.machine`, while preserving the existing default values. Signed-off-by: Viswanath Kraleti <viswanath.kraleti@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-m2crypto: fix do_compile error using clangWang Mingyu2026-03-182-1/+51
| | | | | | | | | | | | | | | | | | | erre message: | INFO:mkpath:creating build/temp.linux-aarch64-cpython-314/src/SWIG | INFO:spawn:aarch64-yoe-linux-clang -mcpu=cortex-a57+crc --dyld-prefix=/usr -fstack-protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -fstack-protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security --sysroot=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/recipe-sysroot -O2 -g -ffile-prefix-map=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/sources/m2crypto-0.47.0=/usr/src/debug/python3-m2crypto/0.47.0 -ffile-prefix-map=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/sources/m2crypto-0.47.0=/usr/src/debug/python3-m2crypto/0.47.0 -ffile-prefix-map=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/recipe-sysroot= -ffile-prefix-map=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/recipe-sysroot-native= -pipe -fPIC -I/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/recipe-sysroot/usr/include/python3.14 -I/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/sources/m2crypto-0.47.0/src/SWIG -c src/SWIG/_m2crypto_wrap.c -o build/temp.linux-aarch64-cpython-314/src/SWIG/_m2crypto_wrap.o -DTHREADING -Wno-deprecated-declarations | src/SWIG/_m2crypto_wrap.c:4455:1: error: unknown type name 'PRAGMA_IGNORE_UNUSED_LABEL' | 4455 | PRAGMA_IGNORE_UNUSED_LABEL | | ^ | src/SWIG/_m2crypto_wrap.c:4456:30: error: expected ';' after top level declarator | 4456 | PRAGMA_WARN_STRICT_PROTOTYPES | | ^ | | ; | 2 errors generated. Add patch 0001-fix-swig-avoid-clang-GNUC-pragma-block-before-_lib.h.patch to avoid clang GNUC pragma block before _lib.h Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.22.01 -> 5.26.02Liu Yiding2026-03-186-452/+83
| | | | | | | | | | | | | 1.Add new patch 0001-To-fix-Werror-discarded-qualifiers-error.patch to fix build error 2.Remove following patches as merged upstream 0001-Fix-build-with-fno-common.patch 0001-include-missing-array-header.patch 0001-include-cstdint-for-uintXX_t-types.patch 0002-Fix-Werror-enum-int-mismatch-with-gcc13.patch Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fd-find: update 10.3.0 -> 10.4.2Deepesh Varatharajan2026-03-183-161/+199
| | | | | | | | Changes are here: https://github.com/sharkdp/fd/compare/v10.3.0...v10.4.2 Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libde265: upgrade 1.0.16 -> 1.0.17Ankur Tyagi2026-03-181-1/+3
| | | | | | | | | | Also fix packaging QA errors about staticlibs and dev-so Release Notes: https://github.com/strukturag/libde265/releases/tag/v1.0.17 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libheif: CVE-2026-3949Gyorgy Sarvari2026-03-182-1/+53
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3949 Backport the patch that is referenced by the NVD report (in the description) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unixodbc: mark CVE-2024-1013 patchedGyorgy Sarvari2026-03-181-0/+2
| | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-1013 The vulnerability has been patched since 2.3.13[1], however NVD tracks it without version info. Due to this, mark it patched explicitly. [1]: https://github.com/lurcher/unixODBC/commit/249bfcc511e89431b910ce2c62ae0b62bb9cc214 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python-pyjwt: upgrade 2.11.0 -> 2.12.1Gyorgy Sarvari2026-03-181-1/+3
| | | | | | | | | | | | | | | | | | | | | | | Contains fix for CVE-2026-32597. Since NVD tracks this CVE without version info, mark the CVE explicitly patched. Changes: 2.12.1: Add typing_extensions dependency for Python < 3.11 2.12.0: chore(docs): fix docs build Annotate PyJWKSet.keys for pyright fix: close HTTPError to prevent ResourceWarning on Python 3.14 chore: remove superfluous constants chore(tests): enable mypy Bump actions/download-artifact from 7 to 8 fix: do not store reference to algorithms dict on PyJWK Use PyJWK algorithm when encoding without explicit algorithm Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. (CVE-2026-32597) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ettercap: fix typo in CVE IDGyorgy Sarvari2026-03-182-1/+1
| | | | | | | | The CVE fix is correct, but the CVE ID contains a typo. The correct ID is CVE-2026-3606. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: mark CVE-2026-27631 patchedGyorgy Sarvari2026-03-181-0/+2
| | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-27631 Though NVD indicates that 0.28.8 is still vulnerable, that does not seem to be the case: the fix that is referenced by the advisory has been backported[1] to this verison. Due to this, mark this CVE as patched. [1]: https://github.com/Exiv2/exiv2/commit/21d129c842212c198dd887dbaafc5ce734e9dfad Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsodium: mark CVE-2025-69277 patchedGyorgy Sarvari2026-03-181-0/+2
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69277 The vulnerability has been fixed[1] since version 1.0.20, but NVD tracks it without version info. Mark it patched explicitly. [1]: https://github.com/jedisct1/libsodium/commit/f2da4cd8cb26599a0285a6ab0c02948e361a674a Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gimp: update 3.0.8 -> 3.2.0Markus Volk2026-03-185-94/+58
| | | | | | | | | - remove a backport patch - rework the fix for host systems that dont provide iso-codes - update mypaint-brushes dependency to 2.x Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libwebsockets: upgrade 4.5.2 -> 4.5.7Peter Marko2026-03-181-1/+1
| | | | | | | Update to latest v4.5-stable patch level. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntfs-3g-ntfsprogs: update UPSTREAM_CHECK_GITTAGREGEXYi Zhao2026-03-181-2/+1
| | | | | | | | | | | | | | | | | | | Update UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version ntfs-3g-ntfsprogs INFO: Current version: 2022.10.3 INFO: Latest version: 20070925 INFO: Latest version's commit: e859b1b1099d6fb8080f84db7f3790ab2bdc92e4 $ devtool latest-version ntfs-3g-ntfsprogs INFO: Current version: 2022.10.3 INFO: Latest version: 2022.10.3 INFO: Latest version's commit: 78414d93613532fd82f3a82aba5d4a1c32898781 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp3: upgrade 3.23.0 -> 3.24.0Gyorgy Sarvari2026-03-181-1/+3
| | | | | | | | | | | | | | | | | | Contains many bugfixes and CVE fixes: https://github.com/FreeRDP/FreeRDP/releases/tag/3.24.0 Added build option to use internal rc4 and md4 ciphers: this is due to a recent change in oe-core. OpenSSL's legacy ciphers (like RC4 and MD4) are now disabled by default (with 'legacy' PACKAGECONFIG), however FreeRDP3 relies on them. To ensure that the required ciphers are available, build the recipe with this ciphers' internal implementations instead of expecting OpenSSL to support them. Ptests passed successfully. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* imagemagick: upgrade 7.1.2-16 -> 7.1.2-17Gyorgy Sarvari2026-03-181-1/+1
| | | | | | | | Contains bugfixes and a couple of CVE fixes: https://github.com/ImageMagick/ImageMagick/compare/7.1.2-16...7.1.2-17 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* glibmm-2.68: upgrade 2.80.0 to 2.86.0Changqing Li2026-03-181-3/+3
| | | | | | | | | | | | License-Update: Remove obsolete FSF address NEWS: https://gitlab.gnome.org/GNOME/glibmm/-/blob/2.86.0/NEWS [1] https://github.com/GNOME/glibmm/commit/727b086bc5bc29fbbfb3fb90198499364cc65dac Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kronosnet: upgrade 1.31 -> 1.33Liu Yiding2026-03-181-1/+1
| | | | | | | | Changelog https://github.com/kronosnet/kronosnet/releases/tag/v1.33 Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 7.4 -> 7.5Peter Marko2026-03-181-2/+2
| | | | | | | | | | | | | | | | | License-Update: updated to latest GPLv2 text version [1] Changelog [2] - Bug 5501: Squid may exit when ACLs decode an invalid URI - ICP: Fix HttpRequest lifetime for ICP v3 queries - ICP: Fix validation of packet sizes and URLs - Do not escape malformed URI twice when sending ICP errors - ... and some code, CI, and documentation cleanups [1] https://github.com/squid-cache/squid/commit/765c7f4e7fa45ce87134b4a38ad175db4bda06dd [2] https://github.com/squid-cache/squid/releases/tag/SQUID_7_5 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: fix UPSTREAM_CHECK_REGEXPeter Marko2026-03-181-1/+1
| | | | | | | | | | Squid tags are in form SQUID_<MAJ>_<MIN>. This can also be seen in SRC_URI download link. This change will make "devtool latest-version squid" correctly show 7.5 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opengl-es-cts: upgrade 3.2.13.0 -> 3.2.14.0Dmitry Baryshkov2026-03-182-9/+9
| | | | | | | | Upgrade OpenGL ES CTS to the last release, mostly bringing up fixes for the existing tests. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vulkan-cts: upgrade 1.4.5.1 -> 1.4.5.2Dmitry Baryshkov2026-03-182-2/+2
| | | | | | | Upgrade Vulkan CTS, fixing several small issues in the tests. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: enable libva-x11 and drop gstreamer1.0-vaapiDmitry Baryshkov2026-03-181-1/+1
| | | | | | | | | OE-Core has dropped gstreamer1.0-vaaapi, breaking spice-gtk. Drop the dependency and, while we are at it, enable libva as a dependency, making sure VA-API is enabled. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis 8: Update licenceDaniel McGregor2026-03-182-1/+164
| | | | | | | | | | Redis 8.0 and later are tri-licensed, the licence options are: * Redis Source Available License v2 * Server Side Public License v1.0 * GNU Affero GPL v3.0 Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libfido2-initial: new recipeDan McGregor2026-03-181-0/+40
| | | | | | | | | | | | | | | | | Use this recipe to break a circular dependency between libfido2 and systemd when systemd's fido PACKAGECONFIG is enabled. systemd depends on libfido2, and libfido2 depends on udev provided by systemd. However, systemd only depends on the headers provided by libfido2 and its pkgconf data. systemd uses only the datatypes provided, and opportunistically enables fido support if libfido2 is found. This recipe provides only the headers and pkgconf data. This is sufficient to allow systemd to build support for libfido2. It only works with a related change I've submitted to openembedded core. Signed-off-by: Dan McGregor <danmcgr@protonmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bpftrace: Update the runtime dependenciesPeter Kjellerstedt2026-03-181-6/+5
| | | | | | | | * bash and python3 are only needed by the ptest package. * xz appears to not be needed at all. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-tornado: upgrade 6.5.4 -> 6.5.5Ankur Tyagi2026-03-181-1/+1
| | | | | | | | | Security fixes including CVE-2026-31958 https://www.tornadoweb.org/en/stable/releases/v6.5.5.html Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* perfetto: Don't copy gn native binaryWilli Ye2026-03-181-10/+1
| | | | | | | | | | | | | | | With the current recipe I am getting ``` gn: error while loading shared libraries: libc++abi.so.1: cannot open shared object file: No such file or directory ``` on my aarch64 machine This is due to gn having a relative library runpath causing the interpreter not finding the shared libraries Instead of copying the binary just directly execute it Additionally remove the unnecessary download of the prebuilt gn binary Signed-off-by: Willi Ye <zye2@snap.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* refpolicy-targeted: Added sepolicy for adb serviceGargi Misra2026-03-182-0/+81
| | | | | | | | | | - Labeled adb binary - Moved adb shell from initrc_t to unconfined_t - meta-selinux does not provide adb domain added policy in meta-oe instead of refpolicy: SELinuxProject/refpolicy#1085 Signed-off-by: Gargi Misra <gmisra@qti.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: enable aptX Bluetooth codec supportShuai Zhang2026-03-181-2/+6
| | | | | | | | | Enable aptX/aptX-HD codec support in PipeWire's Bluetooth A2DP codec. This allows A2DP streaming with aptX-capable headsets when libfreeaptx is available. Signed-off-by: Shuai Zhang <shuai.zhang@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libfreeaptx: add aptX/aptX-HD codec libraryShuai Zhang2026-03-181-0/+33
| | | | | | | | Add a libfreeaptx recipe (LGPL-2.1+) to provide aptX/aptX-HD codec support for Bluetooth A2DP audio codec. Signed-off-by: Shuai Zhang <shuai.zhang@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-nltk: mark CVE-2026-0846 patchedGyorgy Sarvari2026-03-181-0/+1
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0846 It has been fixed in version 3.9.3, however NVD tracks it without CPE/version info. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-grpcio: upgrade 1.76.0 -> 1.78.0Andrej Kozemcak2026-03-181-2/+8
| | | | | | | | | | | | | | | | | | | Change build tools from setuptools3 to python_setuptools_build_meta Add cython depends and change cython requirement from cython==3.1.1 to cython>=3.1.1. Currently we use cython version 3.2.4 Changelog: https://github.com/grpc/grpc/releases/tag/v1.78.0 Changes for python: - aio: fix race condition causing asyncio.run() to hang forever during the shutdown process. - Migrate to pyproject.toml build system from setup.py builds. - Log error details when ExecuteBatchError occurs (at DEBUG level). - Update setuptools min version to 77.0.1. Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-04-21 23:39:16 +0000