summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* dlt-daemon: upgrade 2.18.10 to 3.0.0Changqing Li18 hours10-260/+1088
| | | | | | | | | | | | | | | | | | | | | Changes: https://github.com/COVESA/dlt-daemon/releases Remove patches already in 3.0.0: 544.patch 567.patch 0001-CMakeLists-txt-make-DLT_WatchdogSec-can-be-set-by-user.patch 0003-allow-build-with-cmake-4.patch Add patches to fix build failures 0001-Fix-compile-failure-related-to-gzlog.patch 0001-Fix-kinds-of-build-failure.patch 0001-Fix-build-failures.patch 0001-fix-build-failure-when-systemd-is-enabled.patch 0001-Fix-build-failure-with-glibc-2.43.patch Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fd-find: update 10.3.0 -> 10.4.2Deepesh Varatharajan18 hours3-161/+199
| | | | | | | | Changes are here: https://github.com/sharkdp/fd/compare/v10.3.0...v10.4.2 Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis 8: Update licenceDaniel McGregor18 hours1-1/+1
| | | | | | | | | | Redis 8.0 and later are tri-licensed, the licence options are: * Redis Source Available License v2 * Server Side Public License v1.0 * GNU Affero GPL v3.0 Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lockfile-progs: upgrade from 0.1.19 to 0.2.0Chen Qi18 hours1-2/+4
| | | | | | | | In this new version, we need to 'rewrite-time' first as it's a build host tool that is used during the actual build. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcbor: upgrade 0.12.0 -> 0.13.0Andrej Kozemcak18 hours2-43/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove patch, the change is already in code. Changelog: https://github.com/PJK/libcbor/releases/tag/v0.13.0 Changed: - Fix small typo in release script - Fix failing 32 bit tests due to cmocka macro repeating stack pushes - Set cmake_minimum_required to 3.5 - Fix float_ctrl ctrl assertions failing in debug mode - Check in vscode setup - Add CBOR sequences example - Add riscv64 config to CircleCI - Add a test for malformed definite maps - Add [[nodiscard]] support and auto-update to C23 in cmake - Configure ctest on to export the test results to CircleCI - Revamp the introduction doc into a more useful crash course - Add OSX asan/lsan supression config - Add cbor_copy_definite - Improve handling and coverage reporting of exhaustive enum switches - Add references to readme - Update python deps and related docs - Link tutorial in readme (and fix embedded RST formatting) - Add a doc note on lto linking - Add a doc for the reference count in cbor_array_set(). - Add gh link to docs - Add #355 to changelog - Bump version to 0.13.0 Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tmux: upgrade 3.6 -> 3.6aLiu Yiding43 hours1-2/+2
| | | | | | | | | | 1. Change log: https://raw.githubusercontent.com/tmux/tmux/3.6a/CHANGES 2. Change HOMEPAGE to github. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bit7z: upgrade 4.0.9 -> 4.0.11Liu Yiding43 hours7-255/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Changelog: https://github.com/rikyoz/bit7z/releases/tag/v4.0.11 2. Drop following patches as they were merged upstream. 0001-Fix-reinterpret-cast-compiler-errors.patch 0001-Fix-int8_t-storage-in-BitPropVariant-on-Arm-architec.patch 0001-Allow-running-tests-on-target-when-cross-compiling.patch 0001-Allow-specifying-path-to-7z-library-in-tests.patch 0001-Fix-tests-with-musl.patch 3. Adjust Ptest SRCREV to adopt to latest bit7z SRCREV_filesystem refer to bit7z-4.0.11/cmake/Dependencies.cmake SRCREV_catch2 refer to bit7z-4.0.11/tests/CMakeLists.txt SRCHASH_CPM and TAG_CPM refer to bit7z-4.0.11/cmake/Dependencies.cmake 4.cmake/Dependencies.cmake has redefined to check and download CPM_${CPM_DOWNLOAD_VERSION}.cmake file to CPM_SOURCE_CACHE, so it will show error in do_configure as ./build/cpm_cache/cpm/CPM_0.42.0.cmake is empty | -- Downloading CPM.cmake to ...bit7z/4.0.11/build/cpm_cache/cpm/CPM_0.42.0.cmake | CMake Error at cmake/Dependencies.cmake:15 (file): | file DOWNLOAD cannot compute hash on failed download | | from url: "https://github.com/cpm-cmake/CPM.cmake/releases/download/v0.42.0/CPM.cmake" | status: [6;"Could not resolve hostname"] So change ${B}/cmake to ${B}/cpm_cache/cpm/ to fix this issue. ./build/cpm_cache/cpm/CPM_0.42.0.cmake 5. Add 0001-cmake-disable-filesystem-gitclone.patch to fix filesystem git clone error Fix error log as following: | fatal: unable to access 'https://github.com/rikyoz/filesystem.git/': Could not resolve host: github.com | Had to git clone more than once: 3 times. | CMake Error at bit7z/4.0.11/build/_deps/ghc_filesystem-subbuild/ghc_filesystem-populate-prefix/tmp/ghc_filesystem-populate-gitclone.cmake:50 (message): | Failed to clone repository: 'https://github.com/rikyoz/filesystem.git' Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmodbus: upgrade 3.1.11 -> 3.1.12Andrej Kozemcak43 hours1-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | Add 'tag' to SRC_URI Changelog: https://github.com/stephane/libmodbus/releases/tag/v3.1.12 Changes: - Fix FD_SET overflow when socket fd >= FD_SETSIZE. - Check dest pointer not null and nb in read functions. - NULL check for src and nb < 1 validation in write functions. - modbus_reply: don't compute address for FC 0x07/0x11. - Use O_NONBLOCK instead of deprecated O_NDELAY - Explicit cast for Coverity CID 416366. - Document required buffer size of modbus_receive. - Document macros for error codes corresponding to Modbus exceptions - Fix example of modbus_rtu_set_serial_mode - Test filesystem provides symlink in autogen.sh - Sync API signatures with the documentation. - Many documentation fixes and typo corrections. - Add coverage target and helper script. Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jansson: upgrade 2.14.1 -> 2.15.0Andrej Kozemcak43 hours2-40/+1
| | | | | | | | | | | | | | | | | | | Removed patch included in this release Changelog: https://github.com/akheron/jansson/releases/tag/v2.15.0 Features: - Add support for realloc by adding json_set_alloc_funcs2, json_get_alloc_funcs2 Fixes: - Optimize serializatio - Fix docstrings in hashtable.h Build: - Use target-based cmake settings Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fluentbit: upgrade 4.2.2 -> 4.2.3.1Andrej Kozemcak43 hours1-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tag is not on any branch. Changelog: https://github.com/fluent/fluent-bit/releases?q=4.2.3.1 Changes: - release: update to 4.2.3 - copyright: update year to 2026 - filter_kubernetes: fix parser annotation leak - github: scripts: commit_linter: Handle bin prefix for fluent-bit.c - bin: Handle CONT signal properly under leaks command - filter_wasm: Handle group metadata - cmake: kafka: fix OAuth Bearer detection on Windows - maintenance: update branch and security EOL info - github: scripts: commit_prefix_check: add config format rules on linter - readme: update active branch 4.2 - out_opentelemetry: on HTTP/2, read and process gRPC status code - config_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2] - filter_log_to_metrics: fix initialization and exception cleanup - out_stackdriver: clean up oauth2 cache lifecycle - filter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport] - in_winevtlog: Add text format for event rendering [Backport to 4.2] - in_tail: Add skipped_lines counter [Backport to 4.2] - in_splunk: Implement handling remote addr feature [Backport to 4.2] - aws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport] - plugin_proxy: enable event_type specification for proxy plugins (4.2 Backport) - in_splunk: Plug memory issues [Backport to 4.2] - dockerfiles: install minimum components and avoiding to use includeRecommended Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: remove unneeded CVE_STATUS tagsGyorgy Sarvari43 hours1-5/+0
| | | | | | | | | These CVEs were ignored because they were tracked by NVD using incorrect version information. Since then this information seems to be reflected correctly, it is not needed to ignore them explicitly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: upgrade 8.0.0 -> 8.0.6Gyorgy Sarvari43 hours9-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: - Upstream has removed incorrect gplv3 text from the license (because agplv3 is the correct), which changed the checksum - The recipe had incorrect license indication. Redis 8 is not BSD licensed, but depending on the user's choice, it's agplv3 or sspl (or custom redis license, which is not added to the list) Changelogs: 8.0.6: - Security fix: A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply 8.0.5: Bugfixes: - HGETEX - potential crash when FIELDS is used and numfields is missing - Potential crash on HyperLogLog with 2GB+ entries - Cuckoo filter - Division by zero in Cuckoo filter insertion - Cuckoo filter - Counter overflow - Bloom filter - Arbitrary memory read/write with invalid filter - Bloom filter - Out-of-bounds access with empty chain - Bloom filter - Restore invalid filter [We thank AWS security for responsibly disclosing the security bug] - Top-k - Out-of-bounds access 8.0.4: Security fixes - (CVE-2025-49844) A Lua script may lead to remote code execution - (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE - (CVE-2025-46818) A Lua script can be executed in the context of another user - (CVE-2025-46819) LUA out-of-bound read New Features - VSIM: new EPSILON argument to specify maximum distance Bug fixes - Potential use-after-free after pubsub and Lua defrag - Potential crash on Lua script defrag - HINCRBYFLOAT removes field expiration on replica - Prevent CLIENT UNBLOCK from unblocking CLIENT PAUSE - Endless client blocking for blocking commands - Vector sets - RDB format is not compatible with big endian machines - EVAL crash when error table is empty - Gracefully handle short read errors for hashes with TTL during full sync 8.0.3: Security fixes - (CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands - (CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an error New Features - VSIM: Add new WITHATTRIBS to return the JSON attribute associated with an element Bug fixes - A short read may lead to an exit() on a replica - db->expires is not defragmented 8.0.2: Security fixes - (CVE-2025-27151) redis-check-aof may lead to stack overflow and potential RCE Bug fixes - Cron-based timers run twice as fast when active defrag is enabled Other general improvements - LOLWUT for Redis 8 8.0.1: Performance and resource utilization improvements - Vector sets - faster VSIM FILTER parsing Bug fixes - Query Engine - revert default policy search-on-timeout to RETURN - Query Engine - @__key on FT.AGGREGATE used as reserved field name preventing access to Redis keyspace - Query Engine - crash when calling FT.CURSOR DEL while retrieving from the CURSOR Notes - Fixed wrong text in the license files Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: drop recipe for v7.2.12Gyorgy Sarvari3 days10-1763/+0
| | | | | | | | | | This version has been EOL since the end of February. There is a recipe available for v8, which is still supported. Drop this version. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* brotli: update 1.1.0 -> 1.2.0Markus Volk2026-03-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [1.2.0] - 2025-10-27 SECURITY python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan) Added decoder / encoder: added static initialization to reduce binary size python: allow limiting decoder output (see SECURITY section) CLI: brcat alias; allow decoding concatenated brotli streams kt: pure Kotlin decoder cgo: support "raw" dictionaries build: Bazel modules Removed java: dropped finalize() for native entities Fixed java: in compress pass correct length to native encoder Improved build: install man pages build: updated / fixed / refined Bazel buildfiles encoder: faster encoding cgo: link via pkg-config python: modernize extension / allow multi-phase module initialization Changed decoder / encoder: static tables use "small" model (allows 2GiB+ binaries) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hplip: upgrade 3.22.10 -> 3.25.8Gyorgy Sarvari2026-03-036-124/+35
| | | | | | | | | | | | Contains fix for CVE-2025-43023, and support for many new printers. Drop patches that are included in this release (or the underlying problem was solved on another way) Changelog: https://developers.hp.com/hp-linux-imaging-and-printing/release_notes Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nushell: Add nushell recipeDeepesh Varatharajan2026-03-032-0/+1510
| | | | | | | | | | | | | | | | | | | | | | Nushell is a modern, cross-platform shell and programming language. It is designed to work with structured data rather than plain text, and takes inspiration from traditional shells like bash, object-based shells like PowerShell, gradually typed languages such as TypeScript, functional programming, and systems programming. Add recipe for the latest release - Written in Rust - Combines a full-featured shell with a rich, structured programming language - Operates on structured data instead of plain text - Provides clear error messages and strong IDE support - Designed for modern, cross-platform workflows More information: https://crates.io/crates/nu Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* librelp: update PACKAGECONFIG setting related to valgrindChen Qi2026-03-021-2/+5
| | | | | | | | | The riscv64 is now in COMPATIBLE_HOST of valgrind. The armv4/armv5/armv6 are not in COMPATIBLE_HOST of valgrind. Update the settings accordingly. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rrdtool: takes graph only with x11 or waylandLouis Rannou2026-03-021-1/+5
| | | | | | | | rrdtool package configuration 'graph' relies on graphical support. Ignore it if none of x11 org wayland is in the distro features. Signed-off-by: Louis Rannou <louis.rannou@non.se.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* valkey: upgrade 9.0.2 -> 9.0.3Wang Mingyu2026-03-021-1/+1
| | | | | | | | | | | | | | | | | Security fixes ----------------- (CVE-2025-67733) RESP Protocol Injection via Lua error_reply (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (CVE-2026-27623) Reset request type after handling empty requests Bug fixes ------------ Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand Fix server assert on ACL LOAD when current user loses permission to channels Fix bug causing no response flush sometimes when IO threads are busy Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* 7zip: upgrade 25.01 -> 26.00Peter Marko2026-03-021-3/+3
| | | | | | | | | | | | | | | | | | | Release notes [1]: * improved code for ZIP, CPIO, RAR, UFD, QCOW, Compound. * 7-Zip File Manager: improved sorting order of the file list. It uses file name as secondary sorting key. * 7-Zip File Manager: improved Benchmark to support systems with more than 64 CPU threads. * the bug was fixed: 7-Zip could not correctly extract TAR archives containing sparse files. * some bugs were fixed. License-Update: copyright years refreshed [1] https://github.com/ip7z/7zip/releases/tag/26.00 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: drop recipe for v6.2.21Gyorgy Sarvari2026-03-0210-1746/+0
| | | | | | | | | | This version has been EOL for a year now. There are recipes for two other, still maintained versions in the layer. Drop this version. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* parallel: upgrade 20251122 -> 20260222Wang Mingyu2026-03-021-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mstpd: upgrade 0.1.0 -> 0.1.1Wang Mingyu2026-03-021-4/+2
| | | | | | | | | | | | | | | | | | Changelog: =========== - mstpctl: add showportparams cmd - bridge-stp.in: use short-hand arguments for logger command - bridge-stp.in: support different versions of pidof - mstpctl-utils-functions.sh: fix shellcheck warnings - Update bridge_track.c - netif_utils: fix speeds > 65G - ifupdown.sh.in: fix new shellcheck warnings - libnetlink: fix socket file descriptor leak on error paths - fix compilation for with GCC 15 / C23 - do not leak stack memory via struct holes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* byacc: upgrade 20241231 -> 20260126Wang Mingyu2026-02-251-2/+2
| | | | | | | License-Update: Copyright year updated to 2026. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* polkit: add info about CVE-2016-2568Gyorgy Sarvari2026-02-241-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2016-2568 This commit mostly just tries to add some info to this issue, in the hope that it will save some time for others who try to investigate it. This CVE most probably will stay open in meta-oe in the foreseeable future, although it can be mitigated reasonably easily by the users of the layer. The description of the vulnerability is short enough that it can be reproduced here: "pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer." The general consensus amongst developers/major distros[1][2][3] seems to be that it should be mitigated on the kernel side, to not allow non-privileged users to fake input. To this end, the kernel has introduced a new config in v6.2, called CONFIG_LEGACY_TIOCSTI - when it is enabled, non-privileged used can also fake input. It is however by default enabled (and it is also enabled in the kernels shipped in oe-core, at least at the time of writing this). Disabling this kernel config is considered to be the mitigation, to allow input-faking only by privileged users. [1]: https://security-tracker.debian.org/tracker/CVE-2016-2568 [2]: https://bugzilla.suse.com/show_bug.cgi?id=968674 [3]: https://marc.info/?t=145694748900001&r=1&w=2 / https://marc.info/?l=util-linux-ng&m=145702209921574&w=2 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hplip: set CVE_PRODUCTGyorgy Sarvari2026-02-201-0/+2
| | | | | | | | | | | | | | | | | This recipe gets CVEs with two CPEs: hplip and linux_imaging_and_printing. Set the CVE_PRODUCT accordingly. See CVE db query: sqlite> select * from PRODUCTs where PRODUCT in ('hplip', 'linux_imaging_and_printing'); CVE-2009-0122|hp|hplip|2.7.7|=|| CVE-2009-0122|hp|hplip|2.8.2|=|| CVE-2015-0839|hp|linux_imaging_and_printing|||3.17.7|<= CVE-2025-43023|hp|linux_imaging_and_printing|||3.25.2|< Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* can-isotp: drop recipeGyorgy Sarvari2026-02-201-20/+0
| | | | | | | | | | | | This out-of-tree kernel module was mainlined in Linux 5.10. The previous LTS kernel, 5.4 is EOL, and oe-core ships with newer kernels - there is no need to keep this recipe around. It also has an explicit SKIP_RECIPE tag, it wasn't tested since a long time. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cfengine: upgrade 3.21.0 -> 3.26.0Gyorgy Sarvari2026-02-202-101/+10
| | | | | | | | | | | | | | | Changelog: https://github.com/cfengine/core/blob/3.26.0/ChangeLog License-Update: The project switched from pcre to pcre2. This small change is incorporated in the license, where the dependencies are listed. libpcre2 and OpenSSL is now a mandatory dependencies, the corresponding PACKAGECONFIGs are dropped. Patch that was incorporated in this release is also dropped. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cfengine: remove SKIP_RECIPE tagGyorgy Sarvari2026-02-201-4/+4
| | | | | | | | | | The recipe compiles fine with OpenSSL 3, compatibility has been added in version 3.20. While here, fix some broken PACKAGECONFIGs too. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: Add redis 8.0.0 recipeEric Meyers2026-02-209-0/+1722
| | | | | | | | | | | Adding base 8.0.0 recipe for redis without any module configuration. See https://github.com/redis/redis/tree/8.0.0?tab=readme-ov-file#redis-data-types-processing-engines-and-capabilities for more details. Signed-off-by: Eric Meyers <eric.meyers@arthrex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wxwidgets: enable webkit PACKAGECONFIG only when opengl is availableGyorgy Sarvari2026-02-161-1/+7
| | | | | | | | The latest version of webkitgtk3 requires opengl DISTRO_FEATURE, so the webkit PACKAGECONFIG should be enabled only when opengl is available. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: add back DEBUG_PREFIX_MAP to LDFLAGSGyorgy Sarvari2026-02-161-0/+2
| | | | | | | | | | | | | | Without this redis embeds absoute build paths in the binaries, failing qa check. These LDFLAGS were recently removed from oe-core[1] - this change adds it back to this recipe. The qa error was not showing with redis 6 recipe, so it is added only to redis 7. [1]: https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* valkey: remove TMPDIR truncation in binariesGyorgy Sarvari2026-02-161-7/+0
| | | | | | | | | | | | | | | | These seds were added to remove reproducibility QA errors about TMPDIR being present in the binaries. The root of the problem was changed LDFLAGS in oe-core, and after adding back these LDFLAGS to this recipe[1], the QA error is also gone - the binaries require no changes due to this. Also remove the INSANE_SKIP, which was most likely fixed by the same LDFLAGS issue - it doesn't happen anymore. [1]: https://git.openembedded.org/meta-openembedded/commit/?id=e8981bf43163d2fe90ea28b2952a2443ceaea934 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rsyslog: fix incorrect install -d usage in do_installMikhail Anikin2026-02-161-2/+2
| | | | | | | | | | | | | The rsyslog recipe incorrectly passes the permission mode as a positional argument to install -d. In this form, the value is treated as a directory name rather than as a mode, which will create an additional directory and may result in unexpected behavior during installation. Use the -m option to ensure the directory is created with the intended permissions. Signed-off-by: Mikhail Anikin <mikhail.anikin@solid-run.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* valkey: Upgrade 9.0.1 -> 9.0.2Leon Anavi2026-02-061-1/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 9.0.2: - Avoid memory leak of new argv when HEXPIRE commands target only non-exiting fields - Fix HINCRBY and HINCRBYFLOAT to update volatile key tracking - Avoid empty hash object when HSETEX added no fields - Fix case-sensitive check for the FNX and FXX arguments in HSETEX - Prevent assertion in active expiration job after a hash with volatile fields is overwritten - Fix HRANDFIELD to return null response when no field could be found - Fix HEXPIRE to not delete items when validation rules fail and expiration is in the past - Fix how hash is handling overriding of expired fields overwrite - HSETEX - Always issue keyspace notifications after validation - Make zero a valid TTL for hash fields during import mode and data loading - Trigger prepareCommand on argc change in module command filters - Restrict TTL from being negative and avoid crash in import-mode - Fix chained replica crash when doing dual channel replication - Skip slot cache optimization for AOF client to prevent key duplication and data corruption - Fix used_memory_dataset underflow due to miscalculated used_memory_overhead - Avoid duplicate calculations of network-bytes-out in slot stats with copy-avoidance - Fix XREAD returning error on empty stream with + ID - Track reply bytes in I/O threads if commandlog-reply-larger-than is -1 - This makes it possible to mitigate a performance regression in 9.0.1 caused by the related bug fix Fixes references to TMPDIR [buildpaths] and avoids [already-stripped]. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* valkey: Restore DEBUG_PREFIX_MAP in TARGET_LDFLAGSMingli Yu2026-02-061-0/+2
| | | | | | | | | | | | | | | oe-core has removed DEBUG_PREFIX_MAP from TARGET_LDFLAGS [1], restore it to fix the below error. ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-cli in package valkey-dbg contains reference to TMPDIR [buildpaths] ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-server in package valkey-dbg contains reference to TMPDIR [buildpaths] ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: QA Issue: File /usr/bin/.debug/valkey-benchmark in package valkey-dbg contains reference to TMPDIR [buildpaths] ERROR: valkey-9.0.1-r0.wr2600 do_package_qa: Fatal QA errors were found, failing task. [1] https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libx86-1: upgrade 1.1 -> 1.1.1Gyorgy Sarvari2026-02-026-247/+4
| | | | | | | | | | | | Bugfix release, mostly with patches applied from other distros. Also fixes the SRC_URI which became inaccessible over time. Drop patches that are included in this release. Shortlog: https://gitlab.archlinux.org/grawlinson/libx86/-/compare/v1.1...v1.1.1 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iotop: upgrade 1.30 -> 1.31Wang Mingyu2026-01-301-2/+2
| | | | | | | License-Update: Copyright year updated to 1.31 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sblim-sfcc: fix SRC_URIGyorgy Sarvari2026-01-271-1/+1
| | | | | | | The old URL is gone - set a working mirror. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsigrokdecode: add Python 3.14 supportTrevor Gamblin2026-01-271-3/+10
| | | | | | | | | Refresh a patch to include python-3.14-embed in the configure.ac file, so that libsigrokdecode (and by extension, libsigrok, sigrok-cli, etc.) can build. Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mozjs-128: update 128.5.2 -> 128.14.0Markus Volk2026-01-272-16/+86
| | | | | | | - add a patch to fix build with python 3.14 Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* plocate: upgrade 1.1.23 -> 1.1.24Wang Mingyu2026-01-221-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* liblognorm: upgrade 2.0.8 -> 2.0.9Ankur Tyagi2026-01-201-1/+1
| | | | | | | | | | - fix build issue on some platforms - guard compile pragma use - remove unneeded variable - fix memory leak when a custom type in rules does not match Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* highway: allow native buildMarkus Volk2026-01-201-0/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* boinc-client: mark CVE-2013-2018 patchedGyorgy Sarvari2026-01-121-0/+1
| | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2013-2018 According to oss-security email[1], version 7.0.45 included the fixes[2][3][4] [1]: https://www.openwall.com/lists/oss-security/2013/04/29/11 [2]: https://github.com/BOINC/boinc/commit/6e205de096da83b12ffb2f0183b43e51261eb0c4 [3]: https://github.com/BOINC/boinc/commit/e8d6c33fe158129a5616e18eb84a7a9d44aca15f [4]: https://github.com/BOINC/boinc/commit/ce3110489bc139b8218252ba1cb0862d69f72ae3 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* boinc-client: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+3
| | | | | | | | | | | | | | | | The relevant CVEs are tracked with underscore in their name. See CVE db query: sqlite> select vendor, product, count(*) from PRODUCTs where product like '%boinc%' group by 1, 2; berkeley|boinc_client|2 berkeley|boinc_forum|1 universityofcalifornia|boinc_client|165 universityofcalifornia|boinc_server|5 Set the CVE_PRODUCT accordingly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mozjs-128: Fix build error with arm and muslAnkur Tyagi2026-01-1214-32/+75
| | | | | | | | | | | | | Build fails for qemuarm with musl with following error: mozglue/misc/StackWalk.o: in function `unwind_callback(_Unwind_Context*, void*)': | /usr/src/debug/mozjs-128/128.5.2/mozglue/misc/StackWalk.cpp:810:(.text._ZL15unwind_callbackP15_Unwind_ContextPv+0x4): undefined reference to `_Unwind_GetIP' Referenced commit[1] for the fix, also refreshed patches. [1] https://github.com/OSSystems/meta-browser/commit/bb8662912354dae13634c0ec35c3803c344b1e72 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ddrescue: upgrade 1.29.1 -> 1.30Wang Mingyu2026-01-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== * Replace pass 5 of copying with a sweeping phase after trimming. * New option '-N, --no-sweep' to disable reading of skipped areas. Reassign short name '-N' from option '--no-trim' to '--no-sweep'. * main.cc. Make '--size=output' use the size of outfile. (do_rescue): Make '-x 0' extend outfile to size of infile. * main_common.cc (strtoll_): New function accepting underscores. * rescuebook.cc (fcopy_non_tried, rcopy_non_tried): Limit pass 2 to blocks adjacent to a finished block. (Delimit bad area as a whole). (trim_errors): Trim only edges adjacent to a finished block. Initial skip size now defaults to (infile_size / 32_768). Only retrim blocks adjacent to a non-tried or finished block. (update_rates): Don't force update of a_rate, c_rate, ts. (Rescuebook): Estimate remaining time from last 60 seconds. * genbook.cc (format_time), loggers.cc (format_time_dhms): Add years. * loggers.cc (Event_logger): Add finished_size, a_rate, read errors. * ddrescuelog.cc: New option '-H, --make-test'. * ddrescue.texi: Document rescue with lziprecover's recovery record. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tmux: add packageconfig for sixel supportMarkus Volk2025-12-311-0/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fluentbit: upgrade 4.2.1 -> 4.2.2Wang Mingyu2025-12-291-1/+1
| | | | | | | | | | | | | | | Changelog: ========== - packaging: script: Use rockylinux prefix on package testing script - security: Update supporting timeline - out_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests - aws: Implement simple_aggregation operation - out_kinesis_firehose: enable HTTP debugging for AWS client requests - http_client: add ipv6 bracket if missing from host address - lib: updates 20251223 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-03-19 15:03:36 +0000