summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* dovecot: mark CVE-2026-0394 patchedGyorgy Sarvari2026-04-241-0/+1
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0394 As identified[1] by Debian, the recipe version already contains the commits that fix this. Due to this mark it as patched. [1]: https://security-tracker.debian.org/tracker/CVE-2026-0394 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* dovecot: patch CVE-2025-59031Gyorgy Sarvari2026-04-242-0/+143
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-59031 Backport the patch that was identified[1] by Debian. [1]: https://security-tracker.debian.org/tracker/CVE-2025-59031 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* strongswan: patch CVE-2026-25075Ankur Tyagi2026-04-212-1/+51
| | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-25075 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* ettercap: patch CVE-2026-3603Gyorgy Sarvari2026-03-262-1/+51
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3606 Pick the commit that is marked to solve the related Github issue[1]. Its commit message also references the CVE ID explicitly. [1]: https://github.com/Ettercap/ettercap/issues/1297 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* libcacard: upgrade 2.8.1 -> 2.8.2Wang Mingyu2026-03-091-2/+2
| | | | | | | | | | | | | | | | Changelog: ========== - Sort certificates by underlying objects CKA_ID to provide deterministic object order - Avoid using uninitialized memory - Improve test coverage and build scripts - Improve compatibility with modern compilers (avoid strict warnings) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit bf0ea3fc286a432e6eb6c1e538d4db4a7455d7f4) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* unbound: patch CVE-2025-5994Gyorgy Sarvari2026-03-092-0/+280
| | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-5994 Backport the patch[1] provided by upstream, which is linked in the upstream advisory[2] referenced by the NVD report. Tests passed successfully in a locally prepared ptest image. [1]: https://nlnetlabs.nl/downloads/unbound/patch_CVE-2025-5994_2.diff [1]: https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* wireshark: patch CVE-2026-0962Gyorgy Sarvari2026-02-192-0/+132
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0962 Backport the commit that is referenced in the related gitlab issue[1]. [1]: https://gitlab.com/wireshark/wireshark/-/issues/20945 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* linux-atm: fix SRC_URIGyorgy Sarvari2026-02-031-1/+1
| | | | | | | | | The original SRC_URI's certificate has expired - change it to a working URL. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a1baa1c027cba6ba86d92b4ad5c2db0b7bba0d1f) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* ndpi: ignore CVE-2025-25066Gyorgy Sarvari2026-02-031-1/+2
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-25066 The vulnerable code was introduced in version 4.12[1], and the recipe version is not vulnerable yet. Due to this, ignore this CVE. [1]: https://github.com/ntop/nDPI/commit/b9348e9d6e0e754c4b17661c643ca258f1540ca1 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* libowfat: update SRC_URIGyorgy Sarvari2026-01-211-1/+1
| | | | | | | | | | The https link does not work anymore, it just refuses the connection. http still works though. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8cab2b2977f7cfbbf7bf1aa617070163e2eaf002) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* ncp: update SRC_URIGyorgy Sarvari2026-01-211-1/+1
| | | | | | | | | | The https link does not work anymore, it just refuses the connection. http still works though. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8da9f2fea2e4c2f525e9357814f21b70669b8d8b) Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* tinyproxy: patch CVE-2025-63938Gyorgy Sarvari2026-01-202-0/+44
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-63938 Pick the patch referenced by the nvd report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 7981f52062d444aed1759c674bd3ec024a4f232c) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* openvpn: upgrade 2.6.16 -> 2.6.17Gyorgy Sarvari2026-01-061-1/+1
| | | | | | | Contains fix for CVE-2025-13751 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* fetchmail: patch CVE-2025-61962Ankur Tyagi2026-01-062-0/+52
| | | | | | | | | | Details https://nvd.nist.gov/vuln/detail/CVE-2025-61962 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> (cherry picked from commit 0d9da1105276f04cb23046de5f31fc75f09e2e89) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* dovecot: patch CVE-2025-30189Gyorgy Sarvari2026-01-068-0/+489
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-30189 Pick the patches referenced by the advisory[1] from the Full Disclosure list. [1]: https://seclists.org/fulldisclosure/2025/Oct/29 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* cifs-utils: patch CVE-2025-2312Gyorgy Sarvari2026-01-062-1/+138
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-2312 Pick the patch that is referenced by the NVD report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* openipmi: Pass BUILD_CFLAGS to BUILD_CCMingli Yu2025-12-172-0/+36
| | | | | | | | | | | | | | | | | | | | * The option -fcanon-prefix-map is added to CFLAGS after the commit [1] introduced and result in the below build error. Making all in sdrcomp make[3]: Entering directory '/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37/lanserv/sdrcomp' aarch64-wrs-linux-gcc -mcpu=cortex-a57+crc -mbranch-protection=standard -fstack-protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security --sysroot=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot -DHAVE_CONFIG_H -I. -I../.. -DSTATEDIR='"/var"' -Wall -Wsign-compare -I../../include -I../../lanserv -I../../utils -O2 -g -fcanon-prefix-map -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37 -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37 -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot= -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot-native= -pipe -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -c -o sdrcomp.o sdrcomp.c gcc -o sdrcomp_build ../../lanserv/sdrcomp/sdrcomp.c -O2 -g -fcanon-prefix-map -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37 -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37 -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot= -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot-native= -pipe -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Wall -Wsign-compare -I../../include -I../../lanserv -I../../utils -lm gcc: error: unrecognized command-line option ‘-fcanon-prefix-map’; did you mean ‘-fmacro-prefix-map=’? * Pass BUILD_CFLAGS for BUILD_CC to fix the above build issue. [1] https://git.openembedded.org/openembedded-core/commit/?id=3dbc4a79f01ebfc54da024c1460c06772659088d Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c41fb791faaebf9e86b021d039d860ccf5ff45f1) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* pgpool2: 4.6.3 -> 4.6.4Liu Yiding2025-12-173-379/+1
| | | | | | | | | | | Drop 0001-snprintf-Add-math.h-to-ensure-isnan-and-isinf-are-de.patch and v1-0001-Make-time-calculations-always-long-long.patch as those were merged upstream. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 7fb4910ccb6a156bf67eb773ff1b421b30536b58) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* openvpn: upgrade 2.6.15 -> 2.6.16Wang Mingyu2025-12-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Code maintenance / Compat changes --------------------------------- - adapt to new "encrypt-then-mac" cipher suites in OpenSSL 3.6.0 - these need special handling which we don't do, so the t_lpback self-test failed on them. Exclude from list of allowed ciphers, as there is no strong reason today to make OpenVPN use these. - fix various compile-time warnings Documentation updates --------------------- - fix outdated and non-HTTPS URLs throughout the tree (doxygen, warnings, manpage, ...) Bugfixes -------- - Fix memcmp check for the hmac verification in the 3way handshake. This bug renders the HMAC based protection against state exhaustion on receiving spoofed TLS handshake packets in the OpenVPN server inefficient. CVE: 2025-13086 - fix invalid pointer creation in tls_pre_decrypt() - technically this is a memory over-read issue, in practice, the compilers optimize it away so no negative effects could be observed. - Windows: in the interactive service, fix the "undo DNS config" handling. - Windows: in the interactive service, disallow using of "stdin" for the config file, unless the caller is authorized OpenVPN Administrator - Windows: in the interactive service, change all netsh calls to use interface index and not interface name - sidesteps all possible attack avenues with special characters in interface names. - Windows: in the interactive service, improve error handling in some "unlikely to happen" paths. - auth plugin/script handling: properly check for errors in creation on $auth_failed_reason_file (arf). - for incoming TCP connections, close-on-exec option was applied to the wrong socket fd, leaking socket FDs to child processes. - sitnl: set close-on-exec flag on netlink socket - ssl_mbedtls: fix missing perf_pop() call (optional performance profiling) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 351ac662131944f4c40ea8410a0077cc715053a2) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
* open-vm-tools: Avoid GLib g_free macro redefinition errorKhem Raj2025-11-212-0/+32
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lkcp-tools: Fix test_1_to_1_recvfrom ptest failureKhem Raj2025-11-192-0/+48
| | | | | | | Build it with fortify disabled to get the intended behavior of the test Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.36 -> 2.0.37Wang Mingyu2025-11-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.12 -> 1.45.14Wang Mingyu2025-11-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcpr: upgrade 1.12.0 -> 1.13.0Wang Mingyu2025-11-181-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Implement support for CURLOPT_CAINFO_BLOB - Added support for CURLOPT_SSLCERT_BLOB - Refactor: Pass std::string_view by value instead of by const reference - Add connection pool option (V3) - fix: Calling empty callbacks - fix: callback function pointer type mismatch in writeFunction - 1.12.0 CI Fixes - fix: Cmake config file - fix: make is_same_v check constexpr in set_option_internal - cpr::MultiPerform fixes - #1047 and #1186 - Bump actions/setup-python from 5 to 6 - Bump actions/checkout from 3 to 5 - Allow disabling PSL - Make curl dependency management optional - curl_container: allow calling GetContent without CurlHolder - Bump stefanzweifel/git-auto-commit-action from 6 to 7 - Bump actions/upload-artifact from 4 to 5 - Bump actions/setup-python from 1 to 5 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: remove buildtime installation of /var/lib/chronyVishwas Udupa2025-11-131-6/+8
| | | | | | | | | | | | | Since commit 3200122d68 (chrony: create /var/lib/chrony by systemd-tmpfiles) tmpfiles.d mechanism already ensures populating /var/lib/chrony at runtime. Introduce volatiles mechanism to make sure the directory is created at runtime for sysvinit as well. Since /var/lib/chrony is populated at runtime, stop packaging at build time. this helps to align towards stateless system expectations or when updates are done via meta-updater. Signed-off-by: Vishwas Udupa <vudupa@qti.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: add UPSTREAM_CHECK_URIYi Zhao2025-11-131-0/+1
| | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_URI to check the correct latest stable verison. Before the patch: $ devtool latest-version ntp INFO: Current version: 4.2.8p18 INFO: Latest version: After the patch: $ devtool latest-version ntp INFO: Current version: 4.2.8p18 INFO: Latest version: 4.2.8p18 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* atftp,tftp-hpa,vsftpd,dante,stunnel: Disable and remove tcp-wrapper supportKhem Raj2025-11-111-2/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: Fix build with glibc 2.43Khem Raj2025-11-102-0/+249
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: fix pytalloc package orderingMoraless Philius2025-11-101-4/+6
| | | | | | | | | | The libtalloc recipe did not properly populate the pytalloc package because pytalloc was listed after the main libtalloc package in the PACKAGES variable. As a result, the pytalloc package contained only talloc.so and was missing other required files. Signed-off-by: Moraless Philius <moraless.philius5@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tunctl: inherit sourceforge-releases classYi Zhao2025-11-091-0/+2
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version tunctl INFO: Current version: 1.5 INFO: Latest version: After the patch: $ devtool latest-version tunctl INFO: Current version: 1.5 INFO: Latest version: 1.5 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: add UPSTREAM_CHECK_REGEXYi Zhao2025-11-091-0/+1
| | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version tcpreplay INFO: Current version: 4.5.2 INFO: Latest version: After the patch: $ devtool latest-version tcpreplay INFO: Current version: 4.5.2 INFO: Latest version: 4.5.2 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: inherit sourceforge-releases classYi Zhao2025-11-091-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version openipmi INFO: Current version: 2.0.36 INFO: Latest version: After the patch: $ devtool latest-version openipmi INFO: Current version: 2.0.36 INFO: Latest version: 2.0.37 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* PATCH 2/8] netcat: inherit sourceforge-releases classYi Zhao2025-11-091-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version netcat INFO: Current version: 0.7.1 INFO: Latest version: After the patch: $ devtool latest-version netcat INFO: Current version: 0.7.1 INFO: Latest version: 0.7.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netsniff-ng: upgarde 0.6.8 -> 0.6.9Gyorgy Sarvari2025-11-082-33/+2
| | | | | | | | | | | | | | | | | | Source branch was renamed from master to main. Drop patch that was incorporated in this release. Changelog: Use GitHub actions for CI Allow to manually define CPUs for trafgen Fix make install and output netsniff-ng stats on stderr trafgen: Fix for ipv6 header generation when L3-only devices are present mausezahn: use getopt_long instead of getopt build: fix install dependencies in Makefile template trafgen: move cpu stats temp file to /tmp ring_tx: handle EINTR from sendto Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* http-parser: fix SRC_URI branchGyorgy Sarvari2025-11-081-1/+1
| | | | | | | master was renamed to main Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Fix CVE-2025-9817Vijay Anusuri2025-11-042-0/+33
| | | | | | | | | | | Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/39daba5e247ea495f88b0be82f0b7ebbdbf50fba Link: https://gitlab.com/wireshark/wireshark/-/issues/20642 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-9817 https://ftp.lysator.liu.se/pub/opensuse/update/leap/15.6/sle/src/wireshark-4.2.13-150600.18.26.1.src.rpm Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Upgrade 4.2.12 -> 4.2.14Vijay Anusuri2025-11-041-1/+1
| | | | | | | | | | | | | releasenote: https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html Includes security fix CVE-2025-11626 Link: https://gitlab.com/wireshark/wireshark/-/issues/20724 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 6.0.2 -> 6.0.3Yi Zhao2025-11-021-1/+1
| | | | | | | | ChangeLog: https://github.com/strongswan/strongswan/releases/tag/6.0.3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Fix service start errorLiu Yiding2025-10-311-1/+4
| | | | | | | | | | | | 1.Fix following dovecot.service starting error. dovecot[364]: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 48: cert_file: open(/etc/dovecot/ssl-cert.pem) failed: No such file or directory systemd[1]: dovecot.service: Main process exited, code=exited, status=89/n/a systemd[1]: dovecot.service: Failed with result 'exit-code'. 2. There is no need to do "touch ${D}/etc/dovecot/dovecot.conf" as it was created by dovecot after dovecot was upgraded to 2.4.1-4. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: upgrade 2.1 -> 2.4Patrick Williams2025-10-292-41/+2
| | | | | | | | mctp-2.4 was released. It includes a previously submitted patch, so drop that. Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.7 -> 4.8Bastian Krause2025-10-292-35/+1
| | | | | | | | | | | | | | | | | | | | | | | | | 0001-Fix-compilation-with-musl.patch is obsolete due to 948ecf8 ("hash: include util.h for MIN macro") included in chrony since version 3.5. From chrony's NEWS [1] for the 4.8 release: Enhancements ------------ * Add maxunreach option to limit selection of unreachable sources * Add -u option to chronyc to drop root privileges (default chronyc user is set by configure script) Bug fixes --------- * Hide chronyc socket to mitigate unsafe permissions change * Fix refclock extpps option to work on Linux >= 6.15 * Validate refclock samples for reachability updates [1] https://chrony-project.org/news.html Signed-off-by: Bastian Krause <bst@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: update 0.15.2 -> 0.16.0Markus Volk2025-10-291-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Major Changes in 0.16: Added Added DMA-BUF encoder support for GStreamer 1.24+ Implemented hardware-accelerated encoding for Intel GPUs Added environment variable SPICE_CONVERTER_PREFERRED_FORMAT to override converter format Multi-plane GL scanout support (new spice_qxl_gl_scanout2()) Changed Improved memslot to preserve address bits for ARM64 TBI/AMD UAI/Intel LAM Optimized BGR24/BGRX32 conversion when JCS_EXTENSIONS is defined Removed GStreamer 0.10 support Send real time to client, instead of synchronizing on both ends, attempting to fix latency issue Fixes Fixes a GL_DRAW cookie assertion race Add SSL_OP_NO_RENEGOTIATION fallback path, fixing w/LibreSSL 3.7.2 builds Fix Win32 builds Fix TCP_NOPUSH usage on Darwin Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocols: update 0.14.4 -> 0.14.5Markus Volk2025-10-291-1/+1
| | | | | | | | | Major changes in 0.14.5 ======================= * Add SPICE_MSG_DISPLAY_GL_SCANOUT2_UNIX * Fix for Windows Arm64 build Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.10 -> 1.45.12Wang Mingyu2025-10-291-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.75 -> 5.76Wang Mingyu2025-10-211-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.9 -> 1.45.10Wang Mingyu2025-10-211-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 2.8.1 -> 2.8.2Yi Zhao2025-10-151-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: ignore CVE-2016-4983 (again)Gyorgy Sarvari2025-10-131-0/+2
| | | | | | | | | | | I removed the CVE_STATUS setting for CVE-2016-4983 when this recipe was updated to 2.4.1-4 - but that was a mistake, the CVE database considers (incorrectly) even the latest version as vulnerable. Revert that mistake by adding back the correct CVE_STATUS to the recipe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-guest-vdagent: upgrade 0.22.1 -> 0.23.0Wang Mingyu2025-10-081-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.14 -> 2.6.15Wang Mingyu2025-10-081-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-08-14 03:32:09 +0000