summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* freerdp: patch CVE-2026-23530Gyorgy Sarvari2026-02-242-0/+29
| | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-23530 The related Github advisory[1] contains an amalysis of the vulenrability, describing the issue and the root cause also. Backported the commit that implemented the solution described in the advisory. [1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r4hv-852m-fq7p Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* live555: upgrade 20210824 -> 20260112Gyorgy Sarvari2026-02-242-2/+2
| | | | | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* protobuf: ignore CVE-2026-0994Gyorgy Sarvari2026-02-241-0/+2
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0994 The vulnerability impacts only the python bindings of protobuf, which is in a separate recipe (python3-protobuf, where it is patched). Ignore this CVE in this recipe due to this. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* polkit: add info about CVE-2016-2568Gyorgy Sarvari2026-02-241-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2016-2568 This commit mostly just tries to add some info to this issue, in the hope that it will save some time for others who try to investigate it. This CVE most probably will stay open in meta-oe in the foreseeable future, although it can be mitigated reasonably easily by the users of the layer. The description of the vulnerability is short enough that it can be reproduced here: "pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer." The general consensus amongst developers/major distros[1][2][3] seems to be that it should be mitigated on the kernel side, to not allow non-privileged users to fake input. To this end, the kernel has introduced a new config in v6.2, called CONFIG_LEGACY_TIOCSTI - when it is enabled, non-privileged used can also fake input. It is however by default enabled (and it is also enabled in the kernels shipped in oe-core, at least at the time of writing this). Disabling this kernel config is considered to be the mitigation, to allow input-faking only by privileged users. [1]: https://security-tracker.debian.org/tracker/CVE-2016-2568 [2]: https://bugzilla.suse.com/show_bug.cgi?id=968674 [3]: https://marc.info/?t=145694748900001&r=1&w=2 / https://marc.info/?l=util-linux-ng&m=145702209921574&w=2 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openjpeg: patch CVE-2023-39327Gyorgy Sarvari2026-02-242-0/+51
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2023-39327 Take the patch that is used by OpenSUSE to mitigate this vulnerability. Upstream seems to be unresponsive to this issue. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcdio: mark CVE-2024-36600 fixedGyorgy Sarvari2026-02-241-0/+2
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-36600 The vulnerability is fixed since 2.2.1.rc1[1], and officially since v2.3.0. However NVD tracks it like v2.3.0 was still vulnerable. Mark the CVE explicitly patched. [1]: https://github.com/libcdio/libcdio/blob/master/NEWS.md Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp: ignore CVE-2026-22853Gyorgy Sarvari2026-02-241-0/+1
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22853 The vulnerable feature was introduced in v3.9.0[1], the recipe version is not affected. Ignore this CVE. [1]: https://github.com/FreeRDP/FreeRDP/commit/a4bd5ba8863c0959501d4604159042a311dae85a Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp: patch CVE-2026-22852Gyorgy Sarvari2026-02-242-0/+28
| | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22852 The related github advisory[1] comes with an analysis of the vulnerability, including pointing to the vulnerable code snippet. Backported the commit that touched the mentioned code part in the fixed version, and is in line with the description of the issue. Ptests passed successfully. [1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9chc-g79v-4qq4 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgpiod: update to v2.2.3Bartosz Golaszewski2026-02-241-1/+1
| | | | | | | Bug-fix release addressing a couple problems in gpio-manager and tests. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Revert "libsdl3-image: update 3.2.6 -> 3.4.0"Khem Raj2026-02-242-16/+15
| | | | This reverts commit 0d686b2c5bbe92f4acadb2547b6fc81bf21979de.
* hplip: set CVE_PRODUCTGyorgy Sarvari2026-02-201-0/+2
| | | | | | | | | | | | | | | | | This recipe gets CVEs with two CPEs: hplip and linux_imaging_and_printing. Set the CVE_PRODUCT accordingly. See CVE db query: sqlite> select * from PRODUCTs where PRODUCT in ('hplip', 'linux_imaging_and_printing'); CVE-2009-0122|hp|hplip|2.7.7|=|| CVE-2009-0122|hp|hplip|2.8.2|=|| CVE-2015-0839|hp|linux_imaging_and_printing|||3.17.7|<= CVE-2025-43023|hp|linux_imaging_and_printing|||3.25.2|< Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* can-isotp: drop recipeGyorgy Sarvari2026-02-201-20/+0
| | | | | | | | | | | | This out-of-tree kernel module was mainlined in Linux 5.10. The previous LTS kernel, 5.4 is EOL, and oe-core ships with newer kernels - there is no need to keep this recipe around. It also has an explicit SKIP_RECIPE tag, it wasn't tested since a long time. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cfengine: upgrade 3.21.0 -> 3.26.0Gyorgy Sarvari2026-02-202-101/+10
| | | | | | | | | | | | | | | Changelog: https://github.com/cfengine/core/blob/3.26.0/ChangeLog License-Update: The project switched from pcre to pcre2. This small change is incorporated in the license, where the dependencies are listed. libpcre2 and OpenSSL is now a mandatory dependencies, the corresponding PACKAGECONFIGs are dropped. Patch that was incorporated in this release is also dropped. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cfengine: remove SKIP_RECIPE tagGyorgy Sarvari2026-02-201-4/+4
| | | | | | | | | | The recipe compiles fine with OpenSSL 3, compatibility has been added in version 3.20. While here, fix some broken PACKAGECONFIGs too. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* thermald: fix upstream checkAnuj Mittal2026-02-201-1/+2
| | | | | | | | | | Look at the correct URL for new tags and exclude incorrectly tagged [1] 2.15.10 release. [1] https://github.com/intel/thermal_daemon/issues/504 Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* thermald: include the correct HOMEPAGEAnuj Mittal2026-02-201-1/+1
| | | | | Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* thermald: import from meta-intelAnuj Mittal2026-02-201-0/+43
| | | | | | | | | | | | | thermald now supports ARM platforms [1], so move it out of meta-intel to allow broader reuse. This version remains compatible only with x86 but a future recipe upgrade should fix COMPATIBLE_MACHINE. [1] thermal_daemon 1931a12e7e ("Add ARM backend and enable ARM platform detection") Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sessreg: upgrade 1.1.3 -> 1.1.4Gyorgy Sarvari2026-02-202-36/+3
| | | | | | | | | | | | | | | | | | Drop 0001-Makefile.am-Error-Fix.patch - the error doesn't seem to happen anymore. License-Update: Removed the words "All rights reserved" from Oracle copyright notices. Shortlog: Remove "All rights reserved" from Oracle copyright notices meson: Add option to build with meson Add --help and --version options Improve man page formatting man pages: fix warnings from `mandoc -T lint` and `groff -rCHECKSTYLE=10` Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: Add redis 8.0.0 recipeEric Meyers2026-02-209-0/+1722
| | | | | | | | | | | Adding base 8.0.0 recipe for redis without any module configuration. See https://github.com/redis/redis/tree/8.0.0?tab=readme-ov-file#redis-data-types-processing-engines-and-capabilities for more details. Signed-off-by: Eric Meyers <eric.meyers@arthrex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snapper: update 0.12.2 -> 0.13.0Markus Volk2026-02-202-96/+5
| | | | | | | | | - Remove 0001-Fix-build-with-boost-1.89.patch. Seems to be fixed upstream - Use manpages class Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl3: update 3.2.30 -> 3.4.0Markus Volk2026-02-201-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - dont explicitly disable xinput support to fix compilation if x11 support is enabled (error: unknown type name 'XIRawEvent') - add missing dependencies for libxcursor, xtst, xinput In addition to lots of bug fixes and general system improvements, this release has some major themes of improved interoperability between the 3D GPU API and the 2D rendering API, improved Emscripten support, improved pen handling, and native support for PNG images. Here is a full list of the API changes since the last release: General: Added SDL_CreateAnimatedCursor() to create animated color cursors Added SDL_HINT_MOUSE_DPI_SCALE_CURSORS to automatically scale cursors based on the display scale Added SDL_SetWindowProgressState(), SDL_SetWindowProgressValue(), SDL_GetWindowProgressState(), and SDL_GetWindowProgressValue() to show progress in the window's taskbar icon on Windows and Linux Added GPU device creation properties to enable the GPU API on older hardware if you're not using these features: SDL_PROP_GPU_DEVICE_CREATE_FEATURE_CLIP_DISTANCE_BOOLEAN SDL_PROP_GPU_DEVICE_CREATE_FEATURE_DEPTH_CLAMPING_BOOLEAN SDL_PROP_GPU_DEVICE_CREATE_FEATURE_INDIRECT_DRAW_FIRST_INSTANCE_BOOLEAN SDL_PROP_GPU_DEVICE_CREATE_FEATURE_ANISOTROPY_BOOLEAN SDL_PROP_GPU_DEVICE_CREATE_D3D12_ALLOW_FEWER_RESOURCE_SLOTS_BOOLEAN Added SDL_PROP_GPU_DEVICE_CREATE_VULKAN_OPTIONS_POINTER to enable configuring Vulkan features when creating a GPU device Added SDL_PROP_GPU_DEVICE_CREATE_VULKAN_REQUIRE_HARDWARE_ACCELERATION_BOOLEAN to allow requiring Vulkan hardware acceleration when creating a GPU device Added SDL_GetGPUDeviceProperties() to query information from a GPU device: SDL_PROP_GPU_DEVICE_NAME_STRING SDL_PROP_GPU_DEVICE_DRIVER_NAME_STRING SDL_PROP_GPU_DEVICE_DRIVER_VERSION_STRING SDL_PROP_GPU_DEVICE_DRIVER_INFO_STRING Added SDL_GetPixelFormatFromGPUTextureFormat() and SDL_GetGPUTextureFormatFromPixelFormat() Added SDL_CreateGPURenderer() and SDL_GetGPURendererDevice() to create a 2D renderer for use with GPU rendering. Added SDL_CreateGPURenderState(), SDL_SetGPURenderStateFragmentUniforms(), SDL_SetGPURenderState(), and SDL_DestroyGPURenderState() to use fragment shaders with a GPU 2D renderer Added SDL_PROP_TEXTURE_CREATE_GPU_TEXTURE_POINTER to create a 2D texture from an existing GPU texture Added SDL_PROP_TEXTURE_GPU_TEXTURE_POINTER to get the GPU texture from a 2D texture when using the GPU 2D renderer Added support for YUV textures and HDR colorspaces to the GPU 2D renderer Added support for textures with palettes, and SDL_GetTexturePalette() and SDL_SetTexturePalette() to interact with them Added SDL_RenderTexture9GridTiled() to do tiled instead of stretched 9-grid texture rendering Added SDL_GetDefaultTextureScaleMode() and SDL_SetDefaultTextureScaleMode() to set the texture scale mode for new textures Added SDL_GetRenderTextureAddressMode() and SDL_SetRenderTextureAddressMode() to change the texture addressing mode Added SDL_TEXTURE_ADDRESS_WRAP to allow wrapping of textures if the renderer has SDL_PROP_RENDERER_TEXTURE_WRAPPING_BOOLEAN set The default YUV colorspace is BT.601 limited range, for compatibility with SDL2 Added SDL_SCALEMODE_PIXELART as an improved scaling algorithm for pixel art without introducing blurring Added SDL_FLIP_HORIZONTAL_AND_VERTICAL to flip a surface both horizontally and vertically Added SDL_LoadPNG(), SDL_LoadPNG_IO(), SDL_SavePNG(), and SDL_SavePNG_IO() to load and save PNG images Added SDL_LoadSurface() and SDL_LoadSurface_IO() to detect BMP and PNG formats and load them as surfaces Added SDL_PROP_SURFACE_ROTATION_FLOAT to indicate the rotation needed to display camera images upright Added SDL_RotateSurface() to create a rotated copy of a surface SDL_EVENT_WINDOW_EXPOSED now sets data1 to true if it is sent during live resizing Added SDL_EVENT_DISPLAY_USABLE_BOUNDS_CHANGED, which is sent when the usable desktop bounds change Added SDL_EVENT_SCREEN_KEYBOARD_SHOWN, which is sent when the on-screen keyboard has been shown Added SDL_EVENT_SCREEN_KEYBOARD_HIDDEN, which is sent when the on-screen keyboard has been hidden Added pinch gesture events: SDL_EVENT_PINCH_BEGIN, SDL_EVENT_PINCH_UPDATE, SDL_EVENT_PINCH_END SDL_EVENT_AUDIO_DEVICE_ADDED will be sent during initialization for each audio device SDL_GetCameraPermissionState() returns SDL_CameraPermissionState instead of int Added SDL_PutAudioStreamDataNoCopy() to do more efficient audio stream processing in some cases Added SDL_PutAudioStreamPlanarData() to add planar audio data instead of interleaved data to an audio stream Added SDL_HINT_AUDIO_DEVICE_RAW_STREAM to signal that the OS shouldn't do further audio processing, useful for applications that handle noise canceling, etc. Added SDL_PROP_AUDIOSTREAM_AUTO_CLEANUP_BOOLEAN to allow streams that persist beyond the audio subsystem lifetime. Added enhanced support for 8BitDo controllers Added enhanced support for FlyDigi controllers Added enhanced support for Hand Held Legend SInput controllers Added support for wired Nintendo Switch 2 controllers when built with libusb Added SDL_hid_get_properties() to associate SDL properties with HID devices Added SDL_PROP_HIDAPI_LIBUSB_DEVICE_HANDLE_POINTER to query the libusb handle from an SDL_hid_device, if it's been opened with libusb Added SDL_SetRelativeMouseTransform() to add custom mouse input transformation Added SDL_GetPenDeviceType() to determine whether a pen is on the screen or on a separate touchpad SDL_HINT_MAIN_CALLBACK_RATE may be set to a floating point callback rate Added SDL_GetEventDescription() to get an English description of an event, suitable for logging Added SDL_PROP_IOSTREAM_MEMORY_FREE_FUNC_POINTER to allow custom freeing of the memory used by SDL_IOFromMem() and SDL_IOFromConstMem() Added SDL_PROP_PROCESS_CREATE_WORKING_DIRECTORY_STRING to set the working directory for new processes Added verbose log output when the DEBUG_INVOCATION environment variable is set to "1" Added SDL_AddAtomicU32() Added SDL_GetSystemPageSize() to get the system page size Added SDL_ALIGNED() to signal that data should have a specific alignment Windows: Added SDL_HINT_RENDER_DIRECT3D11_WARP to enable D3D11 software rasterization Using SDL_InsertGPUDebugLabel(), SDL_PushGPUDebugGroup(), and SDL_PopGPUDebugGroup() requires WinPixEventRuntime.dll to be in your PATH or in the same directory as your executable Added SDL_PROP_DISPLAY_WINDOWS_HMONITOR_POINTER so you can query the HMONITOR associated with a display SDL_HINT_AUDIO_DEVICE_STREAM_ROLE is used by the WASAPI audio driver to set the audio stream category Added SDL_HINT_AUDIO_DEVICE_RAW_STREAM to signal whether the OS audio driver should do additional signal processing Added SDL_HINT_WINDOWS_RAW_KEYBOARD_EXCLUDE_HOTKEYS to allow disabling some system hotkeys when in raw input mode SDL_HINT_WINDOWS_GAMEINPUT is disabled by default macOS: Added SDL_HINT_MAC_PRESS_AND_HOLD to control whether holding down a key will repeat the pressed key or open the accents menu Linux: Added atomic support for KMSDRM Added SDL_HINT_KMSDRM_ATOMIC to control whether KMSDRM will use atomic functionality Added SDL_PROP_DISPLAY_WAYLAND_WL_OUTPUT_POINTER so you can query the wl_output associated with a display Emscripten: Added SDL_WINDOW_FILL_DOCUMENT to indicate that windows expand to fill the whole browser window Added SDL_SetWindowFillDocument() to change whether windows expand to fill the whole browser window Added SDL_PROP_WINDOW_CREATE_EMSCRIPTEN_CANVAS_ID_STRING to allow setting the SDL canvas ID, and SDL_PROP_WINDOW_EMSCRIPTEN_CANVAS_ID_STRING to query it on existing windows Added SDL_PROP_WINDOW_CREATE_EMSCRIPTEN_KEYBOARD_ELEMENT_STRING to specify where keyboard input is bound, and SDL_PROP_WINDOW_EMSCRIPTEN_KEYBOARD_ELEMENT_STRING to query it on existing windows iOS: SDL now supports window scenes, fixing the warning "CLIENT OF UIKIT REQUIRES UPDATE" Added SDL_PROP_WINDOW_CREATE_WINDOWSCENE_POINTER to specify the window scene for a window visionOS: The default refresh rate has been increased to 90Hz SDL_SetWindowSize() changes the size of the window on Vision Pro headsets PlayStation 2: Added the following hints to control the display parameters: SDL_HINT_PS2_GS_WIDTH, SDL_HINT_PS2_GS_HEIGHT, SDL_HINT_PS2_GS_PROGRESSIVE, SDL_HINT_PS2_GS_MODE Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl2-compat: update 2.32.62 -> 2.32.64Markus Volk2026-02-201-2/+2
| | | | | | | | | | | | | - fix license checkksum: Copyright year has been changed This is a stable bugfix release, with the following changes: Fixed surface memory leak in some circumstances Fixed mouse grab not persisting past window recreation Fixed picking the correct fullscreen resolution Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl3-image: update 3.2.6 -> 3.4.0Markus Volk2026-02-202-15/+16
| | | | | | | | - Fix license checksum: Copyright year has been changed - Add support for av1 and jxl Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postgresql: upgrade 17.7 -> 17.8Ankur Tyagi2026-02-207-21/+15
| | | | | | | | | | | | | | License-Update: Update license year to 2026 Refreshed patches for version 17.8 Includes fix for CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006 Release Notes: https://www.postgresql.org/docs/release/17.8/ Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libjxl: upgrade 0.11.1 -> 0.11.2Ankur Tyagi2026-02-201-2/+2
| | | | | | | | | | | | - fix tile dimension in low memory rendering pipeline (CVE-2025-12474) - fix number of channels for gray-to-gray color transform (CVE-2026-1837) - djxl: reject decoding JXL files if "packed" representation size overflows size_t https://github.com/libjxl/libjxl/releases/tag/v0.11.2 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dbus-cxx: update 2.6.0 -> 2.6.1Frede Hoey Braendstrup2026-02-201-1/+1
| | | | | | | | | Changelog from upstream: Some minor fixes for code generation. Qt6 is now properly detected. Signed-off-by: Frede Hoey Braendstrup <frederikbraendstrup@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: move SRCREV below SRC_URIAdam Duskett2026-02-171-5/+5
| | | | | | | | According to the recipe style guide, SRCREV should be placed below SRC_URI. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: add a BBCLASSEXTENDAdam Duskett2026-02-171-0/+2
| | | | | | | | A native version of libtoml11 may be needed for recipes such as dnf5 in the future. Add it now. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: add a cve_productAdam Duskett2026-02-171-0/+1
| | | | | Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: Add a bugtracker urlAdam Duskett2026-02-171-0/+1
| | | | | Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: check PTEST_ENABLED instead of DISTRO_FEATURESAdam Duskett2026-02-171-1/+1
| | | | | | | | Checking for PTEST_ENABLED 1 is the preferred method for enabling and disabling ptests for packages. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: use gitsm for SRC_URIAdam Duskett2026-02-171-7/+1
| | | | | | | Using gitsm also allows for the revmoval of SRCREV_json and SRCREV_doctest. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11/files/0001-Remove-whitespace-in-operator.patch: change upstream-statusAdam Duskett2026-02-171-1/+1
| | | | | | | | Change "Submitted" in 0001-Remove-whitespace-in-operator.patch to "Backport" with the appropraite link to the relevant commit hash. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11/files/run-ptest: cleanupAdam Duskett2026-02-171-5/+6
| | | | | | | | | | | | | | | | | | Shellcheck -oall warnings fixed: - exit 1 if `cd tests` failes (SC2164) - Double quote `./${atest}` to prevent globbing and word splitting. (SC2086) - Check the test exit code directly intead of using $? (SC2181) Other fixes: - The shebang sould traditionally be /usr/bin/env sh in case sh is not located in /bin. - Do not remove tests.log for every test. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cups-filters: update link to homepagePeter Marko2026-02-171-1/+1
| | | | | | | The old link redirects here now. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kmscon: bump version to 9.3.2Adam Duskett2026-02-161-1/+1
| | | | | Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webkitgtk3: upgrade 2.48.7 -> 2.50.5Gyorgy Sarvari2026-02-162-14/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes fixes for CVE-2025-13502, CVE-2025-13947, CVE-2025-43421, CVE-2025-43458 and CVE-2025-66287. Drop libsoup2 support. Even though this particular version still supports it, this is the last major version that is not libsoup3-only. Starting with version 2.52 (which is only 3-4 weeks away at the time of writing this message) upstream is dropping libsoup2 support completely[1]. This is a proactive removal of this feature, the sooner users start the migration, the better. Made opengl a mandatory DISTRO_FEATURE: libepoxy requires it, which is both a direct dependency, and an indirect one from gtk+3. Changelogs: https://webkitgtk.org/2026/02/09/webkitgtk2.50.5-released.html https://webkitgtk.org/2025/12/16/webkitgtk2.50.4-released.html https://webkitgtk.org/2025/12/04/webkitgtk2.50.3-released.html https://webkitgtk.org/2025/11/19/webkitgtk2.50.2-released.html https://webkitgtk.org/2025/10/10/webkitgtk2.50.1-released.html https://webkitgtk.org/2025/09/17/webkitgtk2.50.0-released.html [1]: https://webkitgtk.org/2025/10/07/webkitgtk-soup2-deprecation.html Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wxwidgets: enable webkit PACKAGECONFIG only when opengl is availableGyorgy Sarvari2026-02-161-1/+7
| | | | | | | | The latest version of webkitgtk3 requires opengl DISTRO_FEATURE, so the webkit PACKAGECONFIG should be enabled only when opengl is available. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ttf-sazanami: fix SRC_URIGyorgy Sarvari2026-02-161-1/+1
| | | | | | | The original SRC_URI became inaccessible a while ago. Switch to a working source. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iwd: update 3.10 -> 3.11Markus Volk2026-02-161-1/+1
| | | | | | | | ver 3.11: Fix issue with interface registration before acquiring name. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vulkan-cts: upgrade 1.4.5.0 -> 1.4.5.1Dmitry Baryshkov2026-02-162-3/+3
| | | | | | | | Bump Vulkan CTS revision, picking up fixes for sevaral Vulkan tests (and updating VVS to 0.3.9). Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vk-gl-cts: ensure that the SRCREV is correctDmitry Baryshkov2026-02-161-1/+1
| | | | | | | | Use tag=${BP} in SRC_URI in order to ensure that the SRCREV is correctly updated together with the package version. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.5.2 -> 8.5.3Jason Schonberg2026-02-161-1/+1
| | | | | | | | | This is a bug fix release. Changelog: https://www.php.net/ChangeLog-8.php#8.5.3 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* waylandpp: Move wayland-scanner++ to -dev packageMike Crowe2026-02-161-0/+2
| | | | | | | | | wayland-scanner++ is only used during development so it's not usually required to be installed on the target. wayland-scanner++.pc is already in the -dev package. Signed-off-by: Mike Crowe <mac@mcrowe.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: add back DEBUG_PREFIX_MAP to LDFLAGSGyorgy Sarvari2026-02-161-0/+2
| | | | | | | | | | | | | | Without this redis embeds absoute build paths in the binaries, failing qa check. These LDFLAGS were recently removed from oe-core[1] - this change adds it back to this recipe. The qa error was not showing with redis 6 recipe, so it is added only to redis 7. [1]: https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* valkey: remove TMPDIR truncation in binariesGyorgy Sarvari2026-02-161-7/+0
| | | | | | | | | | | | | | | | These seds were added to remove reproducibility QA errors about TMPDIR being present in the binaries. The root of the problem was changed LDFLAGS in oe-core, and after adding back these LDFLAGS to this recipe[1], the QA error is also gone - the binaries require no changes due to this. Also remove the INSANE_SKIP, which was most likely fixed by the same LDFLAGS issue - it doesn't happen anymore. [1]: https://git.openembedded.org/meta-openembedded/commit/?id=e8981bf43163d2fe90ea28b2952a2443ceaea934 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: detect NEON correctly for aarch64Gyorgy Sarvari2026-02-162-0/+52
| | | | | | | | | | | | | | | | | | | | | | | The llhttp vendored dependency of nodejs takes advantage of Arm NEON instructions when they are available, however they are detected by checking for an outdated CPU feature macro: it checks for __ARM_NEON__, however it is not defined by new compilers for aarch64, rather they set __ARM_NEON. The Arm C extension guide[1] refers to __ARM_NEON macro aswell. This patch changes the detection to check for both macros when detecting the availability of NEON instructions. The code this patch modifies is generated, so the patch itself isn't suitable for upstream submission, as the root cause of the error is in the generator itself. A PR has been submitted[2] to the generator project to rectify this issue. [1]: https://developer.arm.com/documentation/ihi0053/d/ - pdf, section 6.9 [2]: https://github.com/nodejs/llparse/pull/84 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: patch incorrect NEON intrinsicsGyorgy Sarvari2026-02-162-4/+60
| | | | | | | | | | | | | | | | | | | | | | | The llhttp dependency of nodejs uses NEON intrinsics when they are available, however some of these calls are incorrect: they the call they use don't match the parameters passed, and so the compilation fail (unless the error is suppressed): | ../deps/llhttp/src/llhttp.c: In function 'llhttp__internal__run': | ../deps/llhttp/src/llhttp.c:2645:9: note: use '-flax-vector-conversions' to permit conversions between vectors with differing element types or numbers of subparts | 2645 | ); | | ^ | ../deps/llhttp/src/llhttp.c:2643:11: error: incompatible type for argument 1 of 'vandq_u16' | 2643 | vcgeq_u8(input, vdupq_n_u8(' ')), There is a patch upstream that fixes it (though it is not merged yet). This patch is a port of that fix. This allows us to remove the extra CFLAGS also from the recipe that suppressed this error. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rsyslog: fix incorrect install -d usage in do_installMikhail Anikin2026-02-161-2/+2
| | | | | | | | | | | | | The rsyslog recipe incorrectly passes the permission mode as a positional argument to install -d. In this form, the value is treated as a directory name rather than as a mode, which will create an additional directory and may result in unexpected behavior during installation. Use the -m option to ensure the directory is created with the intended permissions. Signed-off-by: Mikhail Anikin <mikhail.anikin@solid-run.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rocksdb: support pkg-config based zstd detectionMinjae Kim2026-02-112-0/+44
| | | | | | | | | | | | In Yocto builds, zstd is built via Makefile and does not install CMake package configuration files. As a result, Findzstd.cmake fails to detect ZSTD_INCLUDE_DIRS. Add pkg-config based detection as a fallback to properly locate zstd headers and libraries. Signed-off-by: Minjae Kim <flowergom@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-08-30 19:50:37 +0000