summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* imagemagick: Fix CVE-2025-68950Naman Jain2026-05-012-0/+25
| | | | | | | | | | | | | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file will be affected. Version 7.1.2-12 fixes the issue. This is a minimal patch required for this cve. Signed-off-by: Naman Jain <namanj1@kpit.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* ttf-vlgothic: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The old one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* unicode-ucd: fix license hash (again)Gyorgy Sarvari2026-04-231-3/+3
| | | | | | | | | The unicode license changed slightly once again (copyright year updated), which makes the do_fetch task to fall back to a mirror. Update the hashes. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libubox: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | | | It seems the project's git repo doesn't allow anonymous ssh fetch anymore. Switch to https. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* ttf-sazanami: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* sblim-sfcc: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libsodium: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The tarball was moved to a subfolder on the source server. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* driverctl: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | Anonymous fetch with ssh stopped working from gitlab apparently - switch to https. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* ipc-run: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The source branch was renamed from master to main. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* dnfdragora: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The source branch was renamed from master to main. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* logwatch: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* tomoyo-tools: fix SRC_URIGyorgy Sarvari2026-04-231-1/+1
| | | | | | The previous one stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* rocksdb: fix typo in PACKAGECONFIGZahir Hussain2026-04-191-1/+1
| | | | | | | | Corrected 'gflagsi' to 'gflags' to ensure proper dependency resolution during the build process. Signed-off-by: Zahir Hussain <zahir.basha@kpit.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-62594Shaik Moin2026-04-172-0/+198
| | | | | | | | | | | | | | | | | | | | | | | | | | | Backport the fix for CVE-2025-62594 Changes are made with 7.0.10 version code and only required and compatible code is taken into patch. image-private.h:- Integrated only the essential and compatible updates from the 7.0.10 upstream patch. Specifically, the changes related to the Macro's and CastDoubleToPtrdiffT were adopted, as these updates are directly tied to the vulnerability fix. The remaining modifications in this file were excluded because they do not affect the execution paths relevant to our codebase. composite.c:- This file was intentionally left unchanged. The upstream patch contains only a formatting update (a trailing space adjustment) with no functional relevance or security impact, so the change was not included in our patch. enhance.c:- All functional hunks from the upstream vulnerability fix were applied. These modifications directly contribute to addressing the CVE by strengthening bounds handling and improving input validation in the enhancement routines. Signed-off-by: Shaik Moin <careers.myinfo@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* neon: Backport redirect test debug improvementsBhabu Bindu2026-04-075-0/+196
| | | | | | | | | | | | | | | | | | The redirect test in neon 0.30.2 intermittently fails with "did not get NE_REDIRECT", making it hard to debug. Backport relevant upstream changes from updated neon version to: - log actual return value when NE_REDIRECT is not received - use double_serve_sstring for improved test reliability Upstream-Status: Backport [https://github.com/notroj/neon/commit/f7a3d8f1366c7df6578d79af3b5d28a316011be0] [https://github.com/notroj/neon/commit/0f8dec6c8e7d672f74bb5f81fc7c6bd0d5c56619] [https://github.com/notroj/neon/commit/1e562888d85efc492c434474c8d90cef3aaa8b18] [https://github.com/notroj/neon/commit/9e836bb63bf41fd78e12175cd7b35bfb07a031e3] Signed-off-by: Bhabu Bindu <bhabu.bindu@kpit.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* fmt: Updated master->main in SRC_URI.Tyler Park2026-04-071-1/+1
| | | | | | | | | fmt github repo has sometime recently changed their master branch to main. This change is reflected in the SRC_URI. Solves https://github.com/openembedded/meta-openembedded/issues/1041 (#1041) Signed-off-by: Tyler Park <tyler.park@wavetronix.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libssh: Fix CVE-2026-0964Vijay Anusuri2026-03-292-0/+47
| | | | | | | | | | Pick commit according to [1] [1] https://security-tracker.debian.org/tracker/CVE-2026-0964 [2] https://www.libssh.org/security/advisories/CVE-2026-0964.txt Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libssh: Update CVE-2026-0966-2.patchVijay Anusuri2026-03-291-1/+1
| | | | | | | Corrected the ssh_print_hexa to ssh_print_hash in the patch Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libssh: Fix CVE-2026-0966Vijay Anusuri2026-03-293-0/+102
| | | | | | | | | | | | Pick commits according to [1] [1] https://security-tracker.debian.org/tracker/CVE-2026-0966 [2] https://www.libssh.org/security/advisories/CVE-2026-0966.txt Skip the test commit as it's not applicable in libssh-0.8.9 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* giflib: Fix CVE-2026-23868Vijay Anusuri2026-03-262-0/+35
| | | | | | | | | | Pick patch according to [1] [1] https://www.facebook.com/security/advisories/cve-2026-23868 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-23868 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* mariadb: Fix CVE-2025-13699Vijay Anusuri2026-03-243-0/+265
| | | | | | | | | Pick commits according to [1] [1] https://jira.mariadb.org/browse/MDEV-37483 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2026-23876Nitin Wankhade2026-03-182-0/+64
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/2fae24192b78fdfdd27d766fd21d90aeac6ea8b8 Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2026-23874Nitin Wankhade2026-03-182-0/+37
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/2a09644b10a5b146e0a7c63b778bd74a112ebec3 Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2026-22770Nitin Wankhade2026-03-182-0/+38
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/3e0330721020e0c5bb52e4b77c347527dd71658e Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-68618Nitin Wankhade2026-03-182-0/+96
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-66628Nitin Wankhade2026-03-182-0/+24
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/bdae0681ad1e572defe62df85834218f01e6d670 Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* imagemagick: Fix CVE-2025-43965Nitin Wankhade2026-03-182-0/+22
| | | | | | | Reference: https://github.com/ImageMagick/ImageMagick/commit/bac413a26073923d3ffb258adaab07fb3fe8fdc9 Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* capnproto: patch CVE-2026-32239 and CVE-2026-32240Gyorgy Sarvari2026-03-162-0/+161
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-32239 https://nvd.nist.gov/vuln/detail/CVE-2026-32240 Backport the patch that is referenced by the NVD advisories. (Same patch for both vulnerabilities) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* postgresql: upgrade 14.21 -> 14.22Gyorgy Sarvari2026-03-162-2/+2
| | | | | | | | This is a bugfix release. Changelog: https://www.postgresql.org/docs/release/14.22/ Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* libssh: Fix CVE-2026-3731Vijay Anusuri2026-03-122-0/+45
| | | | | | | | | | | | Pick commit according to [1] [1] https://security-tracker.debian.org/tracker/CVE-2026-3731 [2] https://www.libssh.org/security/advisories/libssh-2026-sftp-extensions.txt Skip the test file change as it's not available in libssh-0.8.9 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2026-27596Gyorgy Sarvari2026-03-113-0/+84
| | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-27596 Backport the commits referenced by the NVD advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2026-25884Gyorgy Sarvari2026-03-112-0/+26
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-25884 Backport the commits referenced by the NVD advisory. Note that the regression tests are not included in this test. The patch contains binary data, which cannot be applied with any of the PATCHTOOLs in do_patch task. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* freeglut: return x11 to REQUIRED_DISTRO_FEATURESMartin Jansa2026-03-101-2/+2
| | | | | | | | | | | | | | * depends on libxi causing: ERROR: Nothing PROVIDES 'libxi' (but /OE/build/luneos-nanbield/meta-openembedded/meta-oe/recipes-graphics/freeglut/freeglut_3.4.0.bb DEPENDS on or otherwise requires it) libxi was skipped: missing required distro feature 'x11' (not in DISTRO_FEATURES) ERROR: Required build target 'meta-world-pkgdata' has no buildable providers. Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'freeglut', 'libxi'] for distros with opengl but without x11 in DISTRO_FEATURES Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* lmdb: patch CVE-2026-22185Gyorgy Sarvari2026-03-082-0/+30
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22185 Pick the patch that is mentioned as a solution in the related upstream bug[1]. [1]: https://bugs.openldap.org/show_bug.cgi?id=10421 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2021-37622Gyorgy Sarvari2026-03-013-0/+52
| | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2021-37622 Pick the patch from the PR referenced by the NVD advisory. Note that the regression test is not part of this patch, as no patchtool could apply it in do_patch task. The test patch was however manually applied during preparing this patch, and all tests were executed successfully. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2021-37621Gyorgy Sarvari2026-03-013-0/+214
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2021-37621 Backport the patch that is referenced by the NVD advisory. The regression test contains a binary patch, that couldn't be applied in the do_patch task. Due to this the test was not backported. It was however applied manually and executed successfully during the preparation of this patch. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2021-37620Gyorgy Sarvari2026-03-013-0/+334
| | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2021-37620 Pick the patches from the PR that is referenced by the NVD advisory. Two notes: 1. The regression test contains a binary patch, that couldn't be applied in the do_patch task. Due to this the test was not backported. It was however applied manually and executed successfully during the preparation of this patch. 2. The commit changes some "unsigned" types to "size_t", which is not included in this backport. They were already done by another patch (the one for CVE-2021-34334). Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2021-37619Gyorgy Sarvari2026-03-012-0/+38
| | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2021-37619 Pick the patch from the PR referenced by the NVD advisory. Note that the regression test is not part of this patch, as no patchtool could apply it in do_patch task. The test patch was however manually applied during preparing this patch, and all tests were executed successfully. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2021-37618Gyorgy Sarvari2026-03-012-0/+33
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2021-37618 Pick the patch from the PR that is referenced by the NVD advisory. Note that the regression test was not backported, because it contains a binary patch, that I couldn't apply with any of the patchtools in the do_patch step. Before submission however I have applied the patches, and ran all the tests successfully. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* exiv2: patch CVE-2021-37615 and CVE-2021-37616Gyorgy Sarvari2026-03-013-0/+224
| | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2021-37615 https://nvd.nist.gov/vuln/detail/CVE-2021-37616 Backport the patches from the PR that is referenced by the NVD advisory. Both CVEs are fixed by the same PR. Note that the patch that added a regression test is not included. This is because it contains a binary patch, which seems to be impossible to apply with all patchtools during do_patch. Though it is not included in this patch, it was applied manually during prepration, and all ptests (including the new regression test) passed successfully. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* emacs: patch CVE-2022-48337Gyorgy Sarvari2026-02-272-0/+109
| | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2022-48337 Backport the patch that is referenced by he NVD advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* fontforge: patch CVE-2025-15279Gyorgy Sarvari2026-02-273-0/+77
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15279 Pick the patch that mentions this vulnerability ID explicitly. Also, this patch has caused some regression - pick the patch also that fixed that regression. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* fontforge: patch CVE-2025-15275Gyorgy Sarvari2026-02-272-0/+34
| | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15275 Pick the patch that mentions this vulnerability ID explicitly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* fontforge: patch CVE-2025-15270Gyorgy Sarvari2026-02-272-0/+45
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15270 Pick the patch that mentions this vulnerbaility explicitly in its description. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* fontforge: patch CVE-2025-15269Gyorgy Sarvari2026-02-272-0/+36
| | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15269 Pick the patch that refers to this vulnerability ID explicitly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* protobuf: ignore CVE-2026-0994Gyorgy Sarvari2026-02-271-0/+3
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0994 The vulnerability impacts only the python bindings of protobuf, which is in a separate recipe (python3-protobuf, where it is patched). Ignore this CVE in this recipe due to this. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* cups-filters: patch CVE-2025-64503Gyorgy Sarvari2026-02-272-0/+44
| | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-64503 Pick the patch that is referenced by the NVD advisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* iperf3: remove incorrect CVE_PRODUCT settingChen Qi2026-02-261-2/+0
| | | | | | | | | | This CVE_PRODUCT setting seems to be copied from the iperf2 recipe. But the CVE_PRODUCT for iperf3 should be just iperf3. For example, https://nvd.nist.gov/vuln/detail/CVE-2023-38403. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* rocksdb: Add an option to set static libraryZahir Hussain2026-02-262-1/+75
| | | | | | | | | | | | | | | | | | Modify the CMakeLists.txt to add an Option for STATIC target import, as available for shared library. Link: https://github.com/facebook/rocksdb/pull/12890 Configure static library as option, default to ON. Provides option to make it off thru PACKCONFIG, if needed. Signed-off-by: Bhabu Bindu <bindu.bhabu@kpit.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 233079a41caded6b68972317f01dc09435ba1ae0) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 72018ca1b1a471226917e8246e8bbf9a374ccf97) Signed-off-by: Zahir Hussain <zahir.basha@kpit.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
* postgresql: upgrade 14.20 -> 14.21Hitendra Prajapati2026-02-262-4/+4
| | | | | | | | | | | | | | It contains Security fixes for CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006 and CVE-2026-2007. It also contains other bug fixes and for more details refer Release note. 0001-configure.ac-bypass-autoconf-2.69-version-check.patch refreshed for 14.21 Release notes: https://www.postgresql.org/docs/release/14.21/ Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-09-19 09:16:31 +0000