summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* indent: fix CVE-2024-0911hongxu2025-09-272-0/+124
| | | | | | | | | | | | | Backport a fix from upstream to resolve CVE-2024-0911 https://git.savannah.gnu.org/git/indent.git feb2b646e6c3a05018e132515c5eda98ca13d50d (cherry picked from commit 26ef6a9c2da06b7de4116c483f9197fd4cf2a4cb) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* indent: fix CVE-2023-40305Yogita Urade2025-09-273-0/+8452
| | | | | | | | | | | | | | | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. Reference: https://savannah.gnu.org/bugs/index.php?64503 (cherry picked from commit 7da6cb848bc42b3e6bd5d2b37b52ba75510a6ca0) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-oe: only add clinfo if DISTRO_FEATURES has openclYoann Congal2025-09-261-1/+1
| | | | | | | | | | | | | | Since commit f65ae714d885 ("opencl: make use of the 'opencl' DISTRO_FEATURE"), clinfo has a feature check on "opencl". Only add it to its meta-oe package groups if the opencl is in DISTRO_FEATURES. Fixes this warning (as seen on AB[0]): stdio: WARNING: Nothing RPROVIDES 'clinfo' (but [...]/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) [0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/82/builds/453/steps/12/logs/warnings Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosh: set working SRC_URIGyorgy Sarvari2025-09-261-2/+4
| | | | | | | | The project switched to storing their releases on Github, and the original links stopped working. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.4.12 -> 8.4.13Jason Schonberg2025-09-261-1/+1
| | | | | | | | | This is a bugfix release. There are integer overflow and memory leak fixes included. Changelog: https://www.php.net/ChangeLog-8.php#8.4.13 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iwd: update 3.9 -> 3.10Markus Volk2025-09-261-1/+1
| | | | | | | | | | ver 3.10: Fix issue with handling neighbor report on BSS TM request. Fix issue with handling deauth and FT association failure. Fix issue with handling roaming and old frequencies. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lsscsi: fix versioningAnkur Tyagi2025-09-251-0/+2
| | | | | | | PE bump is needed because previous PV "030" > current PV "0.32" Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: upgrade 22.19.0 -> 22.20.0Jason Schonberg2025-09-243-1/+1
| | | | | | | Chagelog: https://github.com/nodejs/node/releases/tag/v22.20.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dbus-broker: Add a runtime dependency on dbus-toolsPeter Kjellerstedt2025-09-241-1/+1
| | | | | | | | This matches dbus' runtime dependencies and is needed for the dbus-broker package to be a drop-in replacement for the dbus package. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openjpeg: upgrade 2.5.3 -> 2.5.4Wang Mingyu2025-09-242-46/+1
| | | | | | | | CVE-2025-54874.patch removed since it's included in 2.5.4 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mcelog: upgrade 204 -> 206Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* leptonica: upgrade 1.85.0 -> 1.86.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jsoncons: upgrade 1.4.0 -> 1.4.1Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* inotify-tools: upgrade 4.23.9.0 -> 4.25.9.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeipmi: upgrade 1.6.15 -> 1.6.16Wang Mingyu2025-09-242-47/+2
| | | | | | | | 0001-Fix-for-GCC15-C23-build-failure.patch removed since it's included in 1.6.16 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dash: upgrade 0.5.12 -> 0.5.13Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.2.20250907.0 -> 6.2.20250921.0Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* btop: upgrade 1.4.4 -> 1.4.5Wang Mingyu2025-09-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zlog: upgrade 1.2.16 -> 1.2.18Gyorgy Sarvari2025-09-244-16/+68
| | | | | | | | | | | | | | | | | | | | | | Switched to cmake. Added a backported patch to be able to use the latest version of cmake. Also, add a new patch to avoid overwritingg all the CFLAGS set by Yocto, which helps with avoiding the inclusion of TMPDIR in the generated files. License-Update: License changed to Apache2: https://github.com/HardySimpson/zlog/commit/1a7b1a6fb956b92a4079ccc91f30da21f34ca063 Changelog: 1.2.18: - patched severe vulnerability CVE-2024-22857 - restructured build system 1.2.17: - Change Lience to Apache 2.0, for more people Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencv: Backport a patch to rename BlocksCompensator::feed()Peter Kjellerstedt2025-09-232-0/+56
| | | | | | | | This avoids a clash with the base class' pure virtual method with the same name. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hostapd: Backport a patch to build SAE-PK correctlyPeter Kjellerstedt2025-09-232-0/+41
| | | | | | | | SAE-PK needs base64_decode(), but if no other feature is enabled that needs base64 support, then it is missing. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tokyocabinet: fix licenseGyorgy Sarvari2025-09-231-1/+1
| | | | | | | The application is distributed under the LGPL license, not GPL. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tokyocabinet: switch to working SRC_URIGyorgy Sarvari2025-09-231-1/+1
| | | | | | | The original source seems to be long gone. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* trompeloeil: upgrade 47 -> 49Gyorgy Sarvari2025-09-231-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: v49: https://github.com/rollbear/trompeloeil/releases/tag/v49 Highlights: - Added mocking macros that infers function arity from a trailing return type syntax signature. - Added .RT_TIMES() to exceptations, which works like .TIMES() but where the limits are only known at runtime. - Added several new composable matchers. - When an expectation is constrained by several .WITH() clauses, a violation report will only include the first failed condition, short cirquiting the logic. v48: https://github.com/rollbear/trompeloeil/releases/tag/v48 Highlights: - Fixed memory leak when adding an action (.RETURN, .SIDE_EFFECT, etc) throws. - Dropped older compilers from CI builds (gcc <= 6 and clang <= 7) since GitHub actions now require node-20, and no build environment is currently available that both supports node-20 and older compilers. - Support for STDMETHOD functions for COM. - Fixed issue with std::expected causing compilation error. - Silenced gcc -Weffc++ warnings. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iperf3: Fix CVE-2025-54350Nitin Wankhade2025-09-232-0/+25
| | | | | | | | | | remove assert to prevent crash due to assertion failure on malformed authentication attempt Reference: https://github.com/esnet/iperf/commit/4eab661da0bbaac04493fa40164e928c6df7934a Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iperf3: Fix CVE-2025-54349Nitin Wankhade2025-09-232-1/+82
| | | | | | | | | This commit fix heap overflow for iperf3 package Reference: https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf Signed-off-by: Nitin Wankhade <nitin.wankhade333@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: ignore CVE-2024-3566Jeroen Hofstee2025-09-231-0/+1
| | | | | | | CVE-2024-3566 only effects Microsoft Windows. Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pkcs11-provider: Upgrade 1.0 -> 1.1Ayoub Zaki2025-09-211-1/+3
| | | | | | | https://github.com/latchset/pkcs11-provider/releases/tag/v1.1.0 https://github.com/latchset/pkcs11-provider/compare/v1.0...v1.1.0 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crucible: Inherit go-mod-update-modulesFabio Estevam2025-09-211-1/+1
| | | | | | | | Inherit go-mod-update-modules to make future recipe updates easier. Suggested-by: Christian Lindeberg <christian.lindeberg@axis.com> Signed-off-by: Fabio Estevam <festevam@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* epeg: update to latest revisionGyorgy Sarvari2025-09-192-37/+2
| | | | | | | | | | | | | | | | | | | | Dropped patch that has been incorporated into this version. Shortlog: configure: Fix checks for libjpeg and libexif parenthesis fix minor fix on CMakeLists fix to build command line tool with cmake fix CMakeLists.txt & Epeg.h so that they work on a WIN32 target bug fix: memleak in epeg_close add epeg_orientation_set add epeg_orientation_get add CMakeLists.txt Use archive.org link for Sune's blog post Fix XMP rotation bug Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* daemonize: update to latest revisionGyorgy Sarvari2025-09-192-48/+1
| | | | | | | | | Drop a patch that has been incorporated into this version. (That is also the changelog - the only change is the accepted patch) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* minifi-cpp: fix reproducibility issueYi Zhao2025-09-192-0/+36
| | | | | | | | | | | | | Minifi-cpp will add a build identifier to the binary. If not specified, a random build identifier will be generated for each build. This breaks reproducibility. Set BUILD_IDENTIFIER to ${PV} to ensure the identifier remains constant across builds. Additionally, set BUILD_DATE to SOURCE_DATE_EPOCH to use reproducible timestamp. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pm-qa: update git fetch protocolGyorgy Sarvari2025-09-191-1/+1
| | | | | | | | Apparently the git repo in the SRC_URI stopped supporting git protocol. Switch to https to be able to fetch the source successfully. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* README.md: Change maintainer from Andreas to Khem for gnome, multimedia, xfceMartin Jansa2025-09-191-1/+1
| | | | | | | | | | | | Confirmed by Andreas off list. Add Khem as he is main maintainer of meta-oe, but surely he would accept any help in these areas, don't be shy to step up. Just add uppercase L in meta-oe README.md for consistency. Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webkitgtk3: Fix a typo OFFF -> OFFJiaying Song2025-09-171-1/+1
| | | | | | | | The CMake option for disabling always_inline hints in debug build was misspelled as OFFF. This patch corrects it to OFF. Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencl: make use of the 'opencl' DISTRO_FEATUREDmitry Baryshkov2025-09-175-4/+14
| | | | | | | | | | | | | | | | Currently packages like Mesa list 'opengl' and 'vulkan' as required DISTRO_FEATURES, disabling GPU support for non-graphics-enabled cases. However in the modern world it's a perfectly fine usecase to have a headless box with GPU being used by OpenCL only. The OE-Core has added the 'opencl' DISTRO_FEATURE, making it possible to specify whether OpenCL is enabled or not and also making it possible to enable GPU packages if only OpenCL is required. Follow the example of GLVND and vulkan-loader and disable OpenCL ICD packages if corresponding feature is not enabled. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencl-icd-loader: pull in ICD packagesDmitry Baryshkov2025-09-171-0/+1
| | | | | | | | | Make the OpenCL ICD loader RRECOMMEND the virtual ICD (Installable Client Driver) package, making sure that the BSP can define the most suitable OpenCL driver. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp3: depend on virtual/libopencl1 instead of opencl-icd-loaderDmitry Baryshkov2025-09-171-1/+1
| | | | | | | | Make the package depend on the OpenCL virtual package rather than the exact implementation. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencl-cts: depend on virtual/libopencl1 instead of opencl-icd-loaderDmitry Baryshkov2025-09-171-1/+1
| | | | | | | | Make OpenCL CTS package depend on the OpenCL virtual package rather than the exact implementation. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencl: rename virtual/opencl-icd to virtual/libopencl1Dmitry Baryshkov2025-09-177-8/+7
| | | | | | | | | The ocl-icd and opencl-icd-loader provide libOpenCL.so.1 rather than the OpenCL Installable Client Driver (ICD). Rename the virtual package accordingly. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ocl-icd, opencl-icd-loader: drop RPROVIDES for virtual-opencl-icdDmitry Baryshkov2025-09-173-4/+0
| | | | | | | | | | These two packages don't provide ICD drivers at runtime. They provide the libOpenCL.so.1. Corresponding package is selected at the build time via the PROVIDES_virtual/opencl-icd. Drop the useless and incorrect RPROVIDES for virtual-opencl-icd. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crucible: Update to 2025.05.28Fabio Estevam2025-09-173-66/+143
| | | | | | | Update to the latest 2025.05.28 revision. Signed-off-by: Fabio Estevam <festevam@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp3: Upgrade to 3.17.1Khem Raj2025-09-171-3/+10
| | | | | | | | | * Package proxy-plugins into their own package * Add missing dependency on json-c * While new plugins have solib prefix .so are still packaged for compatibility Signed-off-by: Khem Raj <raj.khem@gmail.com>
* idevicerestore: Upgrade to tip of trunkKhem Raj2025-09-171-2/+2
| | | | | | Add missing dep on libtatsu Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtatsu: Add recipeKhem Raj2025-09-171-0/+10
| | | | | | New dependency needed for idevicerestore package Signed-off-by: Khem Raj <raj.khem@gmail.com>
* utf8proc: Fixes the recipe when built in offline modeSebastien LEFEVRE2025-09-171-0/+1
| | | | | | | | | It is necessary to set the revision number to prevent it from being fetched from the remote. The revision number has been configured relative to release 2.10.0. Signed-off-by: Sebastien LEFEVRE <sebastien.lefevre@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webkitgtk3: fix build failure with DEBUG_BUILD enabledJiaying Song2025-09-172-0/+76
| | | | | | | | | | | | | | | | | | It fails to compile webkitgtk when debug build enabled: | /path_to/tmp/work/core2-64-poky-linux/webkitgtk/2.40.5/webkitgtk-2.40.5/Source/bmalloc/libpas/src/libpas/pas_allocation_result.h:76:1: error: inlining failed in call to 'always_inline' 'pas_allocation_result pas_allocation_result_identity(pas_allocation_result)': function not considered for inlining | 76 | pas_allocation_result_identity(pas_allocation_result result) | | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Add a cmake variable WEBKIT_NO_INLINE_HINTS to disable gcc function attribute `always_inline` when debug build is enabled. And adjust indent as well. Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pahole: fix a Segmentation fault errorChangqing Li2025-09-172-1/+56
| | | | | | | | | | | | | | | | | Command "pahole --btf_features=default -J" will segmentation fault when kernel-dbg package is also installed. $pahole --btf_features=default -J pahole[599]: segfault at 8 ip 00007f7c92d819e2 sp 00007f7c799febe0 error 6 in libdwarves.so.1.0.0[189e2,7f7c92d72000+1c000] likely on CPU 0 (core 0, socket 0) Code: 74 19 ff ff 48 39 dd 75 ef 4c 89 ef e8 67 19 ff ff 49 8b 7c 24 18 e8 8d 13 ff ff 49 8b 14 24 49 8b 44 24 08 4c 89 e7 45 31 e4 <48> 89 42 08 48 89 10 e8 42 19 ff ff e9 30 ff ff ff e8 58 0a ff ff Segmentation fault (core dumped) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xterm: upgrade 401 -> 402Wang Mingyu2025-09-161-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-psycopg: upgrade 3.2.9 -> 3.2.10Wang Mingyu2025-09-161-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-07-22 02:17:18 +0000