summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* vlc: ignore CVE-2026-26227 and CVE-2026-26228Gyorgy Sarvari12 days1-0/+3
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-26227 https://nvd.nist.gov/vuln/detail/CVE-2026-26228 Both vulnerabilities affect only the Android version of VLC, not the other ones. Because of this, ignore these CVEs. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: upgrade 8.0.0 -> 8.0.6Gyorgy Sarvari12 days9-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: - Upstream has removed incorrect gplv3 text from the license (because agplv3 is the correct), which changed the checksum - The recipe had incorrect license indication. Redis 8 is not BSD licensed, but depending on the user's choice, it's agplv3 or sspl (or custom redis license, which is not added to the list) Changelogs: 8.0.6: - Security fix: A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply 8.0.5: Bugfixes: - HGETEX - potential crash when FIELDS is used and numfields is missing - Potential crash on HyperLogLog with 2GB+ entries - Cuckoo filter - Division by zero in Cuckoo filter insertion - Cuckoo filter - Counter overflow - Bloom filter - Arbitrary memory read/write with invalid filter - Bloom filter - Out-of-bounds access with empty chain - Bloom filter - Restore invalid filter [We thank AWS security for responsibly disclosing the security bug] - Top-k - Out-of-bounds access 8.0.4: Security fixes - (CVE-2025-49844) A Lua script may lead to remote code execution - (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE - (CVE-2025-46818) A Lua script can be executed in the context of another user - (CVE-2025-46819) LUA out-of-bound read New Features - VSIM: new EPSILON argument to specify maximum distance Bug fixes - Potential use-after-free after pubsub and Lua defrag - Potential crash on Lua script defrag - HINCRBYFLOAT removes field expiration on replica - Prevent CLIENT UNBLOCK from unblocking CLIENT PAUSE - Endless client blocking for blocking commands - Vector sets - RDB format is not compatible with big endian machines - EVAL crash when error table is empty - Gracefully handle short read errors for hashes with TTL during full sync 8.0.3: Security fixes - (CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands - (CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an error New Features - VSIM: Add new WITHATTRIBS to return the JSON attribute associated with an element Bug fixes - A short read may lead to an exit() on a replica - db->expires is not defragmented 8.0.2: Security fixes - (CVE-2025-27151) redis-check-aof may lead to stack overflow and potential RCE Bug fixes - Cron-based timers run twice as fast when active defrag is enabled Other general improvements - LOLWUT for Redis 8 8.0.1: Performance and resource utilization improvements - Vector sets - faster VSIM FILTER parsing Bug fixes - Query Engine - revert default policy search-on-timeout to RETURN - Query Engine - @__key on FT.AGGREGATE used as reserved field name preventing access to Redis keyspace - Query Engine - crash when calling FT.CURSOR DEL while retrieving from the CURSOR Notes - Fixed wrong text in the license files Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: upgrade 0.28.7 -> 0.28.8Gyorgy Sarvari12 days1-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains fixes for CVE-2026-27596, CVE-2026-25884 and CVE-2026-27631. Ptests passed successfully. Changelog: Fix leak CI: update mac runner for 0.28.x branch Add some new cameras and lenses Make DataValue::value_ public fix reading mp4 url box nested in non video/audio track fix: do not add target exiv2lib if the target already exists Add size checks to avoid large memory allocations Fix size calculation in XmpTextValue::size() Avoid calling std::find or std::string with an invalid range Backport all changes in .github/workflows from main to 0.28.x Fix out-of-bounds read in CrwMap::decode0x0805 Fix UBSAN false positive Upload crash files when fuzzing fails Remove nightly release Fix regression in Canon lens detection fix wrong timescale used to calculate fps Remove nightly release vestiges conan: update dependencies Add Tamron 18-400mm on Nikon D90 Add Ricoh GR IV HDF and Monochrome IDs Refresh translations Add build provenance attestation Add fuzz target for previews Align some docs to main Update README.md add enforce to prevent integer overflow Add enforce to check for integer overflow Release Exiv2 version 0.28.8 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiftool: upgrade 13.48 -> 13.52Gyorgy Sarvari12 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also fixes CVE-2026-3102 Changelog: 13.52: - Added a number of new XMP tags written by Adobe software - Added UTF-16 support for a few different metadata types in which only UCS-2 was previously implemented - Added a few more Canon FlashModel values and decode FlashModel for the 5DmkII - Added a new Canon LensType - Added some missing file attribute bits to two of the new LNK tags - Decode internal serial number for the 5DmkII - Decode another OwnerName for the 5DmkII - Decode some timed GPS for a couple of new DJI drones - Enable WindowsLongPath by default only if Win32::API is available - Renamed the Pentax K3III AFInfo tag to AFInfoK3III 13.51: - Added a new Nikon LensID - Decode more tags from Windows LNK files - Decode another LIGOGPSINFO variant - Decode some new Canon tags - Decode some new Nikon tags - Split decoding on Nikon BurstGroupID into separate tags - Fixed round-off error in GPSDateTime seconds for camm6 metadata in MP4 videos introduced in 13.45 - Fixed bug generating the default-language version of QuickTime:LocationInformation 13.50: - Added a few new Sony lenses - Added a couple of new Canon lenses - Decode another Samsung trailer tag - Decode BlackLevels from some Canon CRW files - Updated Sony maker note decoding for the ILCE-7M5 - Patched potential MacOS security issue - Fixed -list options so reading image files beforehand doesn't add tags to the output when running multiple commands using the -execute feature 13.49: - Decode a couple of new Samsung trailer tags - Disabled decoding of MenuSettings for the Nikon Z6III firmware 2.0 until the changes can be worked through in detail - Fixed problem where Google Photos had problems displaying ExifTool-edited HEIC MotionPhoto images. Files written by older versions of ExifTool may be repaired by re-writing with 13.49 or later Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-protobuf: mark CVE-2026-0994 patchedGyorgy Sarvari12 days1-0/+1
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0994 It is fixed already in the currently used version, however NVD tracks it without any version info, so it still shows up in CVE reports. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp3: upgrade 3.22.0 -> 3.23.0Gyorgy Sarvari12 days1-1/+1
| | | | | | | | | Contains many CVE and bugfixes. Changelog: https://github.com/FreeRDP/FreeRDP/releases/tag/3.23.0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bcc: Add ARM and AArch64 support to static tracepointsHarish Sadineni12 days3-0/+94
| | | | | | | | | | | | This resolves USDT probe test failures on ARM64 platforms. Without these changes, the .note.stapsdt section containing probe information was missing entirely on ARM64, causing test failures when attempting to find and attach to USDT probes in the BCC test suite. Upstream-Status: Submitted [https://github.com/iovisor/bcc/pull/5491] Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bcc: Add riscv syscall prefix detection in C++ APIHarish Sadineni12 days2-0/+33
| | | | | | | | | | | Fixes issue where bpf.get_syscall_fnname() on riscv64 returns bare syscall name instead of the prefixed _riscv_sys variant, causing kprobe attachment failures. Upstream-Status: Submitted [https://github.com/iovisor/bcc/pull/5490] Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bcc: Add ARM64 syscall prefix detection in C++ APIHarish Sadineni12 days2-0/+36
| | | | | | | | | | | Fixes issue where bpf.get_syscall_fnname() on ARM64 returns bare syscall name instead of the prefixed _arm64_sys variant, causing kprobe attachment failures. Now detects ARM64 prefix alongside x64 (x64_sys) and generic (sys) prefixes. Upstream-Status: Submitted [https://github.com/iovisor/bcc/pull/5489] Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: upgrade 22.22.0 -> 22.22.1Jason Schonberg12 days1-3/+3
| | | | | | | | | | License Update: Add sorttable.js under the MIT license - https://github.com/nodejs/node/pull/61348/files Update minimatch to the Blue Oak Model License - https://github.com/nodejs/node/commit/e72da8c7544727f90b857ba86b8c7755e631fe96 Changelog: https://github.com/nodejs/node/releases/tag/v22.22.1 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* emlog: bump to latest revisionGyorgy Sarvari12 days2-34/+1
| | | | | | | | | | Drop the patch that is included in this release. Actually that is also the changelog since the previous version - there were no other changes beside the accepted patch. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dropwatch: upgrade 1.5.4 -> 1.5.5Gyorgy Sarvari12 days1-2/+2
| | | | | | | | | | | Changes: - Added abilty to build and run in a docker container - kas is the default symbol lookup method now - Fix building without libtool installed - Misc fixes for kas lookup logic Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* curlpp: upgrade to latest revisionGyorgy Sarvari12 days2-38/+5
| | | | | | | | | | | | | The last release was almost a decade ago, but there are quite a few commits that were added to the project since that. Instead of waiting for a new release, use the tip of the repository. Changelog: https://github.com/jpbarrette/curlpp/compare/v0.8.1...ec1b66e699557cd9d608d322c013a1ebda16bd08 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arptables: remove unused checksumsGyorgy Sarvari12 days1-3/+1
| | | | | | | | | | | | It is fetched from git, so the checksums are not doing anything. While touching it, switch to the project's own license file instead of using a generic one from the COMMON_LICENSE_DIR. The license itself has not changed, still gpl 2.0, only. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 51.0 -> 62.0Gyorgy Sarvari12 days4-102/+4
| | | | | | | | | | | | | | | | | | | | | | | | v51 series will get support only for about 2 more years, but v62 just started its ~4 years long support cycle. Drop patches that are included in this release, or were solved on another way by upstream. Changelog: 62.0: https://github.com/linux-rdma/rdma-core/releases/tag/v62.0 61.0: https://github.com/linux-rdma/rdma-core/releases/tag/v61.0 60.0: https://github.com/linux-rdma/rdma-core/releases/tag/v60.0 59.0: https://github.com/linux-rdma/rdma-core/releases/tag/v59.0 58.0: https://github.com/linux-rdma/rdma-core/releases/tag/v58.0 57.0: https://github.com/linux-rdma/rdma-core/releases/tag/v57.0 56.0: https://github.com/linux-rdma/rdma-core/releases/tag/v56.0 55.0: https://github.com/linux-rdma/rdma-core/releases/tag/v55.0 54.0: https://github.com/linux-rdma/rdma-core/releases/tag/v54.0 53.0: https://github.com/linux-rdma/rdma-core/releases/tag/v53.0 52.0: https://github.com/linux-rdma/rdma-core/releases/tag/v52.0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: drop obsolete patchGyorgy Sarvari12 days2-62/+1
| | | | | | | | | | | | | The patch removed manual generation completely from the build scripts, however upstream has added a configure option in version 1.11.0[1] to do it in a more gentle way. Drop the patch, and use the configure option instead. [1]: https://github.com/tinyproxy/tinyproxy/commit/5ba958829f73ecc02658a46f5b1bba5ffed2281d Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tunctl: update patch statusGyorgy Sarvari12 days1-1/+1
| | | | | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* udpcast: update patch statusGyorgy Sarvari12 days1-1/+1
| | | | | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.6.3 -> 4.6.4Gyorgy Sarvari12 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix release. Changes: - USB HID dissector memory exhaustion. CVE-2026-3201. - NTS-KE dissector crash. CVE-2026-3202. - RF4CE Profile dissector crash. CVE-2026-3203. - Wireshark doesn’t start if Npcap is configured with "Restrict Npcap driver’s Access to Administrators only" - PQC signature algorithm not reported in signature_algorithms. - Unexpected JA4 ALPN values when space characters sent. - Expert Info seems to have quadratic performance (gets slower and slower) - IKEv2 EMERGENCY_CALL_NUMBERS Notify payload cannot be decoded. - TShark and editcap fails with segmentation fault when output format (-F) set to blf. - Fuzz job crash: fuzz-2026-02-01-12944805400.pcap [Zigbee Direct Tunneling Zigbee NWK PDUs NULL hash table] - Wiretap writes pcapng custom options with string values invalidly. - RDM status in Output Status (GoodOutputB) field incorrectly decoded in Art-Net PollReply dissector. - Wiretap writes invalid pcapng Darwin option blocks. - TDS dissector desynchronizes on RPC DATENTYPE (0x28) due to incorrect expectation of TYPE_VARLEN (MaxLen) - Only first HTTP POST is parsed inside SOCKS with "Decode As". - TShark: Bogus "Dissector bug" messages generated in pipelines where something after tshark exits before reading all its input. - New Diameter RAT-Types in TS 29.212 not decoded. - Malformed packet error on Trigger HE Basic frames. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntpsec: upgrade 1.2.2a -> 1.2.4G B12 days1-8/+12
| | | | | | | | | Upgrade to latest upstream release 1.2.4. Release notes: https://blog.ntpsec.org/2025/04/18/version-1.2.4.html Signed-off-by: G B <gitbeam@proton.me> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fio: fix musl buildsMax Krummenacher12 days2-1/+42
| | | | | | | | | | | | fio 3.40 added the commit 4175f4dbec5d ("oslib: blkzoned: add blkzoned_move_zone_wp() helper function") which uses FALLOC_FL_ZERO_RANGE which in a musl build is undefined without including its header. Backport the upstream fix. Signed-off-by: Max Krummenacher <max.oss.09@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rtla: add recipe for real-time linux analysis toolPeter Bergin12 days2-0/+48
| | | | | | | | | | | | | | rtla source code is present in the kernel source tree at tools/tracing/rtla. There is another build option for rtla to enable bpf bindings, this was not a quick one to get working and left as a future improvement. Makefile for rtla has evolved in newer kernels (v6.9). Some fixes needed for support with older kernels. This commit was tested against 6.18 and 6.8. Also add rtla to packagegroup-meta-oe-benchmarks. Signed-off-by: Peter Bergin <peter@berginkonsult.se> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cpupower: keep header files for other packages and package systemd servicePeter Bergin12 days2-4/+6
| | | | | | | | | | | | | | | | When having a DEPENDS against cpupower it need to leave its header files. Remove that cleanup that has been present since the beginning of the recipe without any (to me) known reason. cpupower ship a systemd service and config file in kernel source tree since kernel 6.16. Package them as a separate package cpupower-systemd to be installed if wanted. Add cpupower to packagegroup-meta-oe to be included in builds of all packages. Signed-off-by: Peter Bergin <peter@berginkonsult.se> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: backport fix for build with glibc-2.43Martin Jansa12 days2-2/+92
| | | | | | | | | | | Fixes: ../sources/pipewire-1.6.0/spa/plugins/support/logger.c:121:5: error: assigning to 'char *' from 'const char *' discards qualifiers [-Werror,-Wincompatible-pointer-types-discards-qualifiers] 121 | s = strrchr(file, '/'); | ^ ~~~~~~~~~~~~~~~~~~ 1 error generated. Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ngtcp2: add recipeGyorgy Sarvari13 days1-0/+20
| | | | | | | | | ngtcp2 project is an effort to implement IETF QUIC protocol It is a dependency of the new Samba recipe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp3: add recipeGyorgy Sarvari13 days1-0/+24
| | | | | | | | | HTTP/3 library written in C A new dependency for Samba recipe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-django: upgrade 5.2.11 -> 5.2.12Gyorgy Sarvari13 days1-1/+1
| | | | | | | | | | | | Ptests passed successfully. Changelog: https://docs.djangoproject.com/en/6.0/releases/5.2.12/ - Fixed CVE-2026-25673 and CVE-2026-25674 - Fixed NameError when inspecting functions making use of deferred annotations in Python 3.14. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-django: upgrade 6.0.2 -> 6.0.3Gyorgy Sarvari13 days1-1/+1
| | | | | | | | | | | | | | | | | | | | Ptests passed successfully. Changelog: https://docs.djangoproject.com/en/6.0/releases/6.0.3/ - Fix CVE-2026-25673 and CVE-2026-25674 - Fixed NameError when inspecting functions making use of deferred annotations in Python 3.14 - Fixed AttributeError when subclassing builtin lookups and neglecting to override as_sql() to accept any sequence - Fixed TypeError when deprecation warnings are emitted in environments importing Django by namespace - Fixed a visual regression where fieldset legends were misaligned in the admin. - Prevented the django.tasks.signals.task_finished signal from writing extraneous log messages when no exceptions are encountered Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: drop recipe for v7.2.12Gyorgy Sarvari13 days10-1763/+0
| | | | | | | | | | This version has been EOL since the end of February. There is a recipe available for v8, which is still supported. Drop this version. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-oe: libcppconnman: add recipeAndrea Ricchi2026-03-051-0/+17
| | | | | | | | | libcppconnman is a C++ library to control ConnMan via D-Bus. It exposes simple aync methods to perform all the controls that ConnMan allow via D-Bus. Signed-off-by: Andrea Ricchi <andrea.ricchi@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mariadb: Upgrade 11.4.9 -> 11.4.10Mingli Yu2026-03-045-143/+1
| | | | | | | | | | | | | | | | | Remove 0001-Remove-x86-specific-loop-in-my_convert.patch as it's fixed in new version [1]. Remove 0001-MDEV-38029-my_tzinfo-t-fails-for-certain-TZ-values-o.patch as its logic is included in new version [2]. Release note: https://mariadb.com/docs/release-notes/community-server/11.4/11.4.10 [1] https://github.com/MariaDB/server/commit/470487c [2] https://github.com/MariaDB/server/commit/a61a746 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: add signing_create_uri_pem helper functionFabian Pflug2026-03-041-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | The PKCS#11 provider has a mechanism [1] to support older applications which have not yet migrated to the OSSL_STORE API [2]. It works by encoding the 'pkcs11:' URI into a PEM file and passing that to an application as a file. From the application's perspective it loads the private key from a file, but OpenSSL will transparently use select the provider to access it via PKCS#11 instead. Instead of upstream's Python-based tool [3] (which would pull in asn1crypto as a dependency), we just generate the ASN.1 for the PEM using OpenSSL's 'asn1parse -genconf'. It has been tested with RAUC, U-Boot's mkimage (for signed FITs) and NXP's CST. [1] https://github.com/latchset/pkcs11-provider/blob/main/docs/provider-pkcs11.7.md#use-in-older-applications-uris-in-pem-files [2] https://docs.openssl.org/master/man7/ossl_store/ [3] https://github.com/latchset/pkcs11-provider/blob/main/tools/uri2pem.py Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Fabian Pflug <f.pflug@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: add support for OpenSSL PKCS#11 providerFabian Pflug2026-03-041-8/+24
| | | | | | | | | | | | | | | | | | | OpenSSL 4.0 will drop support for engines and use providers instead. To access SoftHSM and other PKCS#11 modules via the provider API, we rely on https://github.com/latchset/pkcs11-provider, which is already available as via pkcs11-provider recipe. We enable this provider by using a specific OpenSSL config when signing. This means that recipes inheriting this class can decide whether they want to use the engine or provider to access the key. SoftHSM seems to produce broken keys when calling the C_CopyObject, so disable caching in the provider for now. Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Fabian Pflug <f.pflug@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: remove trailing white spaceJan Luebbe2026-03-041-2/+2
| | | | | Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-m2crypto: upgrade 0.46.2 -> 0.47.0Wang Mingyu2026-03-043-118/+2
| | | | | | | | | | 0001-fix-allow-64-bit-time_t-on-32-bit-systems-in-test_is.patch 0002-fix-correct-struct-packing-on-32-bit-with-_TIME_BITS.patch removed since they're included in 0.47.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> MAIL: wangmy@fujitsu.com Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wowlan-udev: add udev rule to enable WoWLAN magic-packetMiaoqing Pan2026-03-042-0/+18
| | | | | | | | | | | | | | | | | | On some platforms (for example, QCx6490), XO (Crystal Oscillator) shutdown is prevented by Wireless Processor Subsystem votes on interconnect bandwidth and XO unless the WoWLAN magic-packet trigger is enabled. These votes are released only after running: iw phy0 wowlan enable magic-packet Add an udev rule to automatically enable WoWLAN magic-packet support when a Wi-Fi PHY is registered. This rule is provided via a dedicated wowlan-udev package and is not enabled by default. Integrators should include this package only if their platform requires automatic WoWLAN magic-packet enablement. Signed-off-by: Miaoqing Pan <miaoqing.pan@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-can: remove python3-pkg-resources from runtime dependsHongxu Jia2026-03-031-1/+0
| | | | | | | | | | | | Due to setuptools removes and deprecates pkg_resources in 82.0.0 [1], python3-can does not import `pkg_resources` in [2], then python3-pkg-resources is not necessary for us, remove it from runtime depends [1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0 [2] https://github.com/hardbyte/python-can/commit/1a3f5e3769aa565ada8c27177a94f7db43d019dc Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* audit: upgrade 4.1.2 -> 4.1.3Yi Zhao2026-03-032-40/+1
| | | | | | | | ChangeLog: https://github.com/linux-audit/audit-userspace/releases/tag/v4.1.3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* brotli: update 1.1.0 -> 1.2.0Markus Volk2026-03-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [1.2.0] - 2025-10-27 SECURITY python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan) Added decoder / encoder: added static initialization to reduce binary size python: allow limiting decoder output (see SECURITY section) CLI: brcat alias; allow decoding concatenated brotli streams kt: pure Kotlin decoder cgo: support "raw" dictionaries build: Bazel modules Removed java: dropped finalize() for native entities Fixed java: in compress pass correct length to native encoder Improved build: install man pages build: updated / fixed / refined Bazel buildfiles encoder: faster encoding cgo: link via pkg-config python: modernize extension / allow multi-phase module initialization Changed decoder / encoder: static tables use "small" model (allows 2GiB+ binaries) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hplip: upgrade 3.22.10 -> 3.25.8Gyorgy Sarvari2026-03-036-124/+35
| | | | | | | | | | | | Contains fix for CVE-2025-43023, and support for many new printers. Drop patches that are included in this release (or the underlying problem was solved on another way) Changelog: https://developers.hp.com/hp-linux-imaging-and-printing/release_notes Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nushell: Add nushell recipeDeepesh Varatharajan2026-03-032-0/+1510
| | | | | | | | | | | | | | | | | | | | | | Nushell is a modern, cross-platform shell and programming language. It is designed to work with structured data rather than plain text, and takes inspiration from traditional shells like bash, object-based shells like PowerShell, gradually typed languages such as TypeScript, functional programming, and systems programming. Add recipe for the latest release - Written in Rust - Combines a full-featured shell with a rich, structured programming language - Operates on structured data instead of plain text - Provides clear error messages and strong IDE support - Designed for modern, cross-platform workflows More information: https://crates.io/crates/nu Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* librelp: update PACKAGECONFIG setting related to valgrindChen Qi2026-03-021-2/+5
| | | | | | | | | The riscv64 is now in COMPATIBLE_HOST of valgrind. The armv4/armv5/armv6 are not in COMPATIBLE_HOST of valgrind. Update the settings accordingly. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rrdtool: takes graph only with x11 or waylandLouis Rannou2026-03-021-1/+5
| | | | | | | | rrdtool package configuration 'graph' relies on graphical support. Ignore it if none of x11 org wayland is in the distro features. Signed-off-by: Louis Rannou <louis.rannou@non.se.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: fix NEON llhttp ctzll undefined behaviorTelukula Jeevan Kumar Sahu2026-03-022-0/+61
| | | | | | | | | | | | | | | | | | | | | | | | | The NEON SIMD fast path in the bundled llhttp calls __builtin_ctzll(match_mask) without checking if match_mask is zero. When all 16 bytes in a NEON register are valid header value characters, match_mask is 0. Calling __builtin_ctzll(0) is undefined behavior. GCC at -O2 exploits this by optimizing "if (match_len != 16)" to always-true, causing HTTP 400 Bad Request for any header value longer than 16 characters on ARM targets with NEON enabled. Fix by explicitly checking for match_mask == 0 and setting match_len = 16. This bug affects both aarch64 and armv7 NEON targets. The code this patch modifies is generated, so the patch itself isn't suitable for upstream submission, as the root cause of the error is in the generator itself. The fix has been merged upstream[1] in llparse 7.3.1 and is included in llhttp 9.3.1. This patch can be dropped when nodejs updates its bundled llhttp to >= 9.3.1. [1]: https://github.com/nodejs/llparse/pull/83 Signed-off-by: Telukula Jeevan Kumar Sahu <j-sahu@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-identify: Upgrade 2.6.16 -> 2.6.17Leon Anavi2026-03-021-1/+2
| | | | | | | | | | | | | | | | | | | | | Upgrade to release 2.6.17: - Add support for sconstruct and sconscript extensions - Add support for 'slnx' file extension - Add 'escript' file type for Erlang - Add support for HLSL - Add jbuilder extension as ruby text files - Add support for *.diff - Add support for *.cmd - Add support for *.entitlements - Add support for *.xaml - Add support for uv.lock - Add support for Fastfile - Add support for Brewfile - Add support for xcodebuild file formats Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-yarl: Upgrade 1.22.0 -> 1.23.0Leon Anavi2026-03-022-35/+5
| | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 1.23.0: - Added support for pydantic, the :class:~yarl.URL could be used as a field type in pydantic models seamlessly. - The CI has been set up to notify Codecov about upload completion - The in-tree build backend allows the end-users appending CFLAGS and LDFLAGS by setting respective environment variables externally. - The :pep:517 build backend now supports a new config setting for controlling whether to build the project in-tree or in a temporary directory. It only affects wheels and is set up to build in a temporary directory by default. It does not affect editable wheel builds - they will keep being built in-tree regardless. - Starting this version, when building the wheels is happening in an automatically created temporary directory, the build backend makes an effort to normalize the respective file system path to a deterministic source checkout directory. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-rich: Upgrade 14.3.2 -> 14.3.3Leon Anavi2026-03-021-1/+1
| | | | | | | | | Upgrade to release 14.3.3: - Fixed infinite loop with cells.split_graphemes Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ceres-solver: Don't fail if .git/hooks/commit-msg can't be touchedPeter Kjellerstedt2026-03-021-1/+1
| | | | | | | | | The .git/hooks/commit-msg Git hook may already exist and not be writable. E.g., in our environment it is a symbolic link to a script in /usr/share. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* onig: Add CVE_PRODUCT to support product nameHet Patel2026-03-021-0/+3
| | | | | | | | - Set CVE_PRODUCT to align with the NVD CPE and ensure correct CVE reporting. Signed-off-by: Het Patel <hetpat@cisco.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Add entry to CVE_PRODUCT to support the product nameHet Patel2026-03-021-1/+1
| | | | | | | | - Added 'vmware:open_vm_tools' to CVE_PRODUCT to align with the NVD CPE and ensure accurate CVE reporting. Signed-off-by: Het Patel <hetpat@cisco.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-03-29 13:51:56 +0000