linux/poky.git/meta/recipes-gnome, branch walnascar

gdk-pixbuf: fix CVE-2025-7345

2025-07-21T16:17:59+00:00

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution. (From OE-Core rev: bb80f57bc3818937d5a207040bfd44021dee4e6e) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

epiphany: upgrade 48.0 -> 48.3

2025-06-02T17:26:30+00:00

Changelog: =========== - Fix crash when opening downloaded file - Fix crash when opening incognito window - Fix Crash when trying to select download location - Fix Crash in escape_csv_field() when exporting passwords - Fix Adding WhatsApp as a web app crashes - Fix Pressing Escape key in addressbar resets the cursor to beginning of the widget - Fix Epiphay shouldn't show the privacy dialog in incognito mode - Fix (CVE-2025-3839) Require user interaction before opening URL in external application - Fix Code cleanup - Fix window: fix crash when force closing window without session - Fix Several fixes for password export - Fix Remove Granite support from Tech Preview and Canary - Fix find-toolbar: fix crash on load-changed (From OE-Core rev: fb8f221f92da60f4e1ae14e39fb3a577ff7bdb33) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (master rev: 2c60159fffd76b5dbe75bf7d6758e5f78b166714) Signed-off-by: Zhang Peng Signed-off-by: Steve Sakoman

gobject-introspection: Fix wrong PN used in MULTILIB_SCRIPTS

2025-05-14T15:33:40+00:00

The current MULTILIB_SCRIPTS entry incorrectly assigns g-ir-annotation-tool and g-ir-scanner to the ${PN} package. However, these scripts are actually installed in the gobject-introspection-tools package. This leads to incorrect symlinks being created when multilib is enabled. Therefore, this patch correctly moves them to the ${PN}-tools package. Error log: root@intel-x86-64:~# ls -l /usr/bin/g-ir-scanner lrwxrwxrwx 1 root root 27 Mar 9 2018 /usr/bin/g-ir-scanner -> /usr/bin/g-ir-scanner-lib64 root@intel-x86-64:~# ls -l /usr/bin/g-ir-scanner-lib64 ls: cannot access '/usr/bin/g-ir-scanner-lib64': No such file or directory (From OE-Core rev: 5e594b3d074900580fa83ca50f7d837937c17856) Signed-off-by: Jiaying Song Signed-off-by: Steve Sakoman

gsettings-desktop-schemas: update 47.1 -> 48.0

2025-03-24T17:29:16+00:00

This update is required for gnome-control-center-48 Major changes in 48.0 ===================== - Translation updates Major changes in 48.rc ====================== - Switch to JPEG for background image - Translation updates Major changes in 48.beta ======================== - Switch to Adwaita Fonts - Split data recording and limits in time limits schema - Set more useful defaults on stylus buttons - Translation updates Major changes in 48.alpha ========================= - Add screen limits schema - Fix gendered language in key descriptions (From OE-Core rev: 54693d6df561d4e23a1aacf2d55d7f52485008a2) Signed-off-by: Markus Volk Signed-off-by: Richard Purdie

pkg-config-native,librsvg-native: fix EXTRA_NATIVE_PKGCONFIG_PATH

2025-03-20T11:29:04+00:00

When building librsvg-native the variable PKG_CONFIG_PATH was incorrect in the bitbake environment but handled correct due to the pkg-config-native wrapper. Commit [1] and [2] introduced some inconsistens of EXTRA_NATIVE_PKGCONFIG_PATH where it was prepended in pkg-config-native wrappers but appended in native.bbclass. meta/classes-recipe/native.bbclass: PKG_CONFIG_PATH .= "${EXTRA_NATIVE_PKGCONFIG_PATH}" This commit will try to resolve this to always append the EXTRA_NATIVE_PKGCONFIG_PATH. It is tested by building librsvg-native and also checking bitbake environment before and after. [1] https://git.openembedded.org/openembedded-core/commit?id=2bc050146d47b14d890a1b0db2b55f9057a08b65 [2] https://git.openembedded.org/openembedded-core/commit?id=ae4824f4f6234884a245bce314d6305ad8eb982d (From OE-Core rev: a59fa4a4bf08bbbd79fbb1642b3e3b23181f87c9) Signed-off-by: Peter Bergin Cc: Alexander Kanavin Signed-off-by: Richard Purdie

gtk+3: depend on the librsvg pixbuf loader in gtk3-demo

2025-03-20T11:29:04+00:00

The demo uses some SVG icons, so depend on the SVG pixbuf loader so that they are visible. (From OE-Core rev: 77e18e640c42ee3992464fddc1a16760cea9bc4f) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

adwaita-icon-theme: upgrade 47.0 -> 48.0

2025-03-20T11:29:03+00:00

(From OE-Core rev: 9f761d37df5bb0eaa5645ab9cbd4109b69337909) Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

gobject-introspection: update 1.82.0 -> 1.84.0

2025-03-19T11:49:45+00:00

1.84.0 - 2025-03-15 ------------------- * No changes 1.83.4 - 2025-03-08 ------------------- * Revert support for "static" virtual functions [!526] 1.83.2 - 2025-03-01 ------------------- * Improve GType inspection helper [!494] * Parse C11's _Alignas [#520] * Respect custom Python binary [!503] * Fix build on the latest Windows SDK [!498] * Small performance improvement when looking up a signal information [!504] * Use standard imports in the JavaScript templates for g-ir-doctool [!501] * Ensure that enumeration members can be marked as deprecated [!512] * Add more test coverage for structured union types [!348] * Add an option to skip tests when building [!507] * Fix various MSVC compatibility issues [!511] * Add support for "static" virtual functions [!361] * Allow specifying the format of the documentation inside doc blocks [!401] * Handle C99's _Complex [!515] * Consider UCRT64 and CLANG64 as mingw32 compilers [!516] * Handle static NSString syntax [!518] * Add instance parameter checks to strict validation [!506, !521] * Documentation improvements [!481, !483, !485, !500] (From OE-Core rev: cc3bfd7547d88ac0ae11c11812aafb89965a659a) Signed-off-by: Markus Volk Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

libxmlb: upgrade 0.3.21 -> 0.3.22

2025-03-17T22:38:32+00:00

(From OE-Core rev: 2a79ba6e4b8197bbd42168b4a5ae00d27223df12) Signed-off-by: Richard Purdie

gcr: upgrade 4.3.0 -> 4.3.1

2025-03-17T22:38:32+00:00

(From OE-Core rev: a06c44997fd588e92c02ab4a2445c05e88677f93) Signed-off-by: Richard Purdie