summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
* The poky repository master branch is no longer being updated.Richard Purdie2025-11-07507-35632/+0
| | | | | | | | | | | | | | | | | | | | | You can either: a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs b) use the new bitbake-setup You can find information about either approach in our documentation: https://docs.yoctoproject.org/ Note that "poky" the distro setting is still available in meta-yocto as before and we continue to use and maintain that. Long live Poky! Some further information on the background of this change can be found in: https://lists.openembedded.org/g/openembedded-architecture/message/2179 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* readline: backport a patch to fix for caller setting rl_prompt to NULLJoão Henrique Ferreira de Freitas2025-11-062-0/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I've observed this issue affecting iwctl and connmanctl. Patching readline solves the issue. The original patch from [5] mixes many fixes in one commit. I've extract only what matters to solve the issues observed with connman and iwd. The final patch is the same patch sent by readline author to readline's mail list [6]. References: 1: https://gitlab.archlinux.org/archlinux/packaging/packages/readline/-/issues/1 2: https://gitlab.archlinux.org/archlinux/packaging/packages/readline/-/commit/b30636dc66fc783a091af51b049dc5240f861dd0 3: https://lists.gnu.org/archive/html/bug-readline/2025-07/msg00007.html 4: https://lore.kernel.org/connman/20251018212411.181909-1-jsbronder@cold-front.org/ 5: https://cgit.git.savannah.gnu.org/cgit/readline.git/commit/display.c?h=devel&id=488d7edc22894d30b6de7f2d4190bf7403f63ffd 6: https://lists.gnu.org/archive/html/bug-readline/2025-07/txtmA7rksnmmi.txt Fixes [YOCTO #16047] CC Paul Barker <paul@pbarker.dev> CC: Jose Quaresma <quaresma.jose@gmail.com> CC: Khem Raj <raj.khem@gmail.com> (From OE-Core rev: 8ce0359c4eade11b445bc227c42f7f1212a2d9c3) Signed-off-by: João Henrique Ferreira de Freitas <joaohf@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Omit trailing whitespacesKhem Raj2025-11-031-3/+3
| | | | | | | | (From OE-Core rev: e76e1cb7d1c109455ad6cf64244549966b93008e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-framework: drop redundant /var/lock directory creationRicardo Salveti2025-10-271-2/+2
| | | | | | | | | | | | | | | | | base-files already provides /var/lock as a symbolic link to /run/lock, and since /run is created and mounted as tmpfs during init, there is no need to explicitly create /var/lock within initramfs. This avoids the following spurious error during boot: mkdir: can't create directory '/var/lock': No such file or directory (From OE-Core rev: 24629a0e81291900edf0967bb218ba51dfa90ce9) Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: install bitbake+oe-core+meta-yocto, not pokyRoss Burton2025-10-271-13/+21
| | | | | | | | | | | | | | | Change the build-appliance image to include current git trees of the separate bitbake/openembedded-core/meta-yocto repositories, instead of the merged poky repository as that is being discontinued. [ YOCTO #16002 ] (From OE-Core rev: 501e78ea84979d175f5e6b7978c669f3f80a4355) (From OE-Core rev: 57dbe13f87cc2cfc87ed12dcca12382ba710be94) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2025-10-171-1/+1
| | | | | | (From OE-Core rev: 5298d01663f897e38380116edf23973d2a156cbc) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2025-10-161-1/+1
| | | | | | (From OE-Core rev: 58558b97c157469f060bb2ad59a40254fb6181e4) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: patch CVE-2025-46394Peter Marko2025-10-063-0/+91
| | | | | | | | | | Pick commit mentioning this CVE. (From OE-Core rev: 7b71962c282d296e29bc1bd6ab778b8ad2646919) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* udev-extraconf: Avoid slashes in mountpoint namesRobert Tiemann2025-10-061-1/+1
| | | | | | | | | | | | | | | | Devices with labels such as "Hello/World/Foo/Bar" cause mount.sh to create the directory structure @MOUNT_BASE@/Hello/World/Foo/Bar. The partition is mounted to the nested "Bar" directory. On device removal, the directory structure is not cleaned up. This commit replaces all forward slashes in partition labels by underscores to avoid this edge case. (From OE-Core rev: aa071e2f44b9f76883a7c316ea79c60ae3824d6c) Signed-off-by: Robert Tiemann <rtie@gmx.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* udev-extraconf: Speed up mount.shRobert Tiemann2025-10-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On devices with many partitions, running blkid without parameters can be rather slow because all block devices are inspected: $ time /sbin/blkid real 0m0.474s user 0m0.026s sys 0m0.172s versus $ time /sbin/blkid /dev/mmcblk0p10 real 0m0.027s user 0m0.002s sys 0m0.018s Plugging in a device with 5 partitions means that mount.sh is going to be executed 5 times, and so will be blkid. In the real-world case outlined above, this adds up to an overhead of about 2.3 seconds for blkid alone. This commit changes mount.sh so that the block device of interest is passed directly to blkid such that blkid inspects only that device, leading to significant speedup. (From OE-Core rev: 5e90348ce2fa400c77641062aa0b1efb52c9f955) Signed-off-by: Robert Tiemann <rtie@gmx.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Update to tip of trunkKhem Raj2025-10-021-1/+1
| | | | | | | | | | | | | | Brings * 0ccaf057 printf: fix buffer overflow in floating point decimal formatting * 0b86d60b riscv: fix setjmp assembly when compiling for ilp32f/lp64f. * f6944eb3 powerpc[64]: fix missing ctr and xer regs in syscall asm clobberlists * a6244de1 fix erroneous definition of IN6_IS_ADDR_V4COMPAT (From OE-Core rev: 9ba3fbf1d4ed63b22d108d4d2beebcbcfa352884) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2025-10-011-1/+1
| | | | | | (From OE-Core rev: 9f1a1fc1a163e74602d8a359483087f1117f23c2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* expat: upgrade to 2.7.3Ross Burton2025-10-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security fixes: - Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 from #1034 (of Expat 2.7.2 and related backports) - Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 fix pull request #973 (of Expat 2.7.0 and related backports). Please check the added unit tests for example documents. Other changes: - Prove and regression-proof absence of integer overflow from function expat_realloc - Remove "harmless" cast that truncated a size_t to unsigned - Autotools: Remove "ln -s" discovery - docs: Be consistent with use of floating point around XML_SetAllocTrackerMaximumAmplification - docs: Make it explicit that XML_GetCurrentColumnNumber starts at 0 - docs: Better integrate the effect of the activation thresholds - docs: Fix an in-comment typo in expat.h - docs: Fix a typo in README.md - docs: Improve change log of release 2.7.2 - xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber - Windows: Normalize .bat files to CRLF line endings - Version info bumped from 12:0:11 (libexpat*.so.1.11.0) to 12:1:11 (libexpat*.so.1.11.1); see https://verbump.de/ for what these numbers do (From OE-Core rev: 6b1833cd2eb78be55ba03da73937358fcf25d9ec) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: stable 2.42 branch updatesDeepesh Varatharajan2025-09-221-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | git log --oneline d2097651cc57834dbfcaa102ddfacae0d86cfb66..e34453cd6a8c592c325756ff3c7ac0afd3975cb4 e34453cd6a (HEAD, origin/release/2.42/master) AArch64: Fix SVE powf routine [BZ #33299] e87844ec42 i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129] 7a8f3c6ee4 x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212] 3970785beb x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129] d0f72b96f2 i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221] 8dbaecbe92 Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234] d7274d718e malloc: Fix checking for small negative values of tcache_key a96a82c4a5 malloc: Make sure tcache_key is odd enough c491dabd8a malloc: Fix MAX_TCACHE_SMALL_SIZE 8a726b6304 malloc: Remove redundant NULL check c5476b7907 hurd: support: Fix running SGID tests e5754399b5 Revert "tst-freopen4-main.c: Call support_capture_subprocess with chroot" c090b0cb1c tst-env-setuid: Delete LD_DEBUG_OUTPUT output 41a77b78cf tst-freopen4-main.c: Call support_capture_subprocess with chroot 9ec7a532ff tst-fopen-threaded.c: Delete temporary file 9d5bf9c17d Delete temporary files in support_subprocess b38f3f60d5 nptl: Fix SYSCALL_CANCEL for return values larger than INT_MAX (BZ 33245) 5e298d2d93 elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943) 2fadee5301 elf: Extract rtld_setup_phdr function from dl_main fd18059c0f stdlib: resolve a double lock init issue after fork [BZ #32994] bc13db7393 inet-fortified: fix namespace violation (bug 33227) 3ec4dd77f6 NEWS: add new section bdea6c3719 Replace advisories directory with pointer file Testing Results: Before After Diff PASS 5842 5855 +13 XPASS 4 4 0 FAIL 868 859 -9 XFAIL 16 16 0 UNSUPPORTED 396 396 0 Testcases changes testcase-name before after elf/check-dt-x86-64-plt(new) - PASS elf/check-gnu2-tls(new) - PASS elf/tst-link-map-contiguous-ldso(new) - PASS elf/tst-link-map-contiguous-libc(new) - PASS malloc/tst-malloc_info-malloc-hugetlb1 FAIL PASS nptl/tst-thread-affinity-pthread FAIL PASS resolv/tst-resolv-aliases FAIL PASS stdio-common/tst-printf-format-d-llong FAIL PASS stdio-common/tst-printf-format-sn-ushort FAIL PASS stdio-common/tst-printf-format-vs-char FAIL PASS stdio-common/tst-printf-format-vd-ullong FAIL PASS string/test-strcmp FAIL PASS string/tst-cmp FAIL PASS (From OE-Core rev: e4d73b2021535473f1f2970edf53d0105f10ba5a) Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: double test runner timeout in run-ptestTrevor Gamblin2025-09-221-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The gnome-desktop-testing-runner has a default timeout of 300s. With qemuriscv64, some tests in the glib-2.0 test suite (notably codegen.py.test and gi-compile-repository.py.test) can take a long time and exceed this timeout limit, resulting in intermittent test failures. To avoid this problem, double the timeout by passing '-t 600' to gnome-desktop-testing-runner. Although not a perfect comparison (I have to use 'taskset --cpu-list 0' to simulate loading in order to make the tests fail consistently on my local machine), it's worth noting that the timeout increase does result in a slightly longer test run. Here is an example of the duration when a failure happens under 'taskset --cpu-list 0 runqemu nographic snapshot':: |SUMMARY: total=298; passed=296; skipped=1; failed=1; user=606.7s; system=1388.3s; maxrss=170976 |FAIL: glib/codegen.py.test (Child process killed by signal 9) | |ERROR: Exit status is 2 |DURATION: 1368 |END: /usr/lib/glib-2.0/ptest |2025-09-18T19:04 |STOP: ptest-runner |TOTAL: 1 FAIL: 1 and a pass: |SUMMARY: total=298; passed=297; skipped=1; failed=0; user=682.2s; system=1295.0s; maxrss=170476 |+ userdel glib2-test |DURATION: 1402 |END: /usr/lib/glib-2.0/ptest |2025-09-18T17:23 |STOP: ptest-runner |TOTAL: 1 FAIL: 0 [YOCTO #15891] (From OE-Core rev: f634098ed6c5674d81028a7ea8e18a7a93a77fab) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* expat: upgrade to 2.7.2Ross Burton2025-09-181-1/+1
| | | | | | | | | | | | | | Primarily to fix CVE-2025-59375 (Disallow use of disproportional amounts of dynamic memory from within an Expat parser) but the full list of changes are available: https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes (From OE-Core rev: fbe5f76ba6af0983cd90a05d4077e453e2ebb475) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: remove 'which' from -ptest RDEPENDSRoss Burton2025-09-181-1/+1
| | | | | | | | | | | The 'kill' test case which to find a kill binary (not built-in). The which implementation in busybox is perfectly sufficient for this purpose. (From OE-Core rev: b84d2d80df91b7789570a389c35a78f922e37d02) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: remove fcntl-lockRasmus Villemoes2025-09-183-341/+0
| | | | | | | | | | | | Since upstream util-linux's flock command now supports the --fcntl flag, there is no longer any reason to keep building the separate fcntl-lock binary. (From OE-Core rev: f42becf48a22f8f40e4076d962693e18d38aa264) Signed-off-by: Rasmus Villemoes <ravi@prevas.dk> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ovmf: update 202502 -> 202508Alexander Kanavin2025-09-1511-438/+43
| | | | | | | | | | Remove backports. (From OE-Core rev: 172587a0288cde8137c836147d261fd50072ff05) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ovmf-shell-image: move .wks file to its own directoryAlexander Kanavin2025-09-152-1/+1
| | | | | | | | | | | | If it's in ovmf/, devtool thinks it belongs to the ovmf recipe and then deletes the file as it is not referred to by that recipe anywhere. (From OE-Core rev: 47ff80080f336098c962281675026901978a09bc) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "coreutils-native: don't install groups"Peter Kjellerstedt2025-09-151-3/+1
| | | | | | | | | | | | | | | This reverts commit 113225b93c55d55a330fcca7d9f996ec039fb953. The groups command was previously installed by shadow. Therefore the one provided by coreutils was removed for native to avoid a conflict. However, since version 4.17.0, shadow no longer installs a groups command and thus there is no conflict anymore. (From OE-Core rev: f1bfe923d06dc82c391b8d774e5c596016130150) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-tarball: handle missing host pkg-config gracefullyDaniel Wagenknecht2025-09-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | The host might not have pkg-config installed, which is OK when using the buildtools-extended-tarball, since that contains pkg-config. So the command in the generated environment-setup-* script for setting HOST_PKG_PATH is expected to fail in some cases without this being an error. The generated environment-setup-* script might be sourced in a shell with activated `errexit` option. Prevent the expected failure of this command from being treated as an error. The only usage of the HOST_PKG_PATH variable is in this script and already handles the case of the variable being empty. The variable is not exposed to anywhere outside this script so the effects of this change are limited to this script. (From OE-Core rev: 049a802cef23f9ecb5d373c0d27753a891a4b5a6) Signed-off-by: Daniel Wagenknecht <dwagenknecht@emlix.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-systemctl-native: Install systemd-sysv-installPeter Kjellerstedt2025-09-113-8/+56
| | | | | | | | | | | | | | It is needed when support for both systemd and sysvinit are enabled. This also adds a patch for systemctl to call systemd-sysv-install without a hardcoded path and instead relies on finding it in $PATH. This is needed when calling systemctl from a recipe sysroot. (From OE-Core rev: 30140cb9354fa535f68fab58e73b76f0cca342e4) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: upgrade 2.14.5 -> 2.14.6Wang Mingyu2025-09-111-1/+1
| | | | | | | | (From OE-Core rev: 28af77eea6fe04c923d57b8b20ad24414ffc8621) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: change pni-names logic to something less confusingKoen Kooi2025-09-111-1/+1
| | | | | | | | | | | | | | | Using bb.utils.contains in negative logic leads to either overly verbose or plain confusing code, so harness the power of Ross and Antonin to make this less verbose and slightly clearer. This moves the negative logic from the inline python ('true if not') to bash ('if !'). (From OE-Core rev: 52ea4612f9262a9e607fb3eee08906ec687197ee) Signed-off-by: Koen Kooi <koen.kooi@oss.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gettext, gettext-minimal-native: upgrade 0.23.1 -> 0.26Gyorgy Sarvari2025-09-086-26/+69
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: 0.24: https://lists.gnu.org/archive/html/info-gnu/2025-02/msg00010.html 0.25: https://lists.gnu.org/archive/html/info-gnu/2025-05/msg00000.html 0.26: https://lists.gnu.org/archive/html/info-gnu/2025-07/msg00007.html - gettext-minimal-native recipe adapted to the new macro name (aclocal_DATA -> macros_DATA) - install Makevars.template to gettext-minimal-native to be able to update missing variables The file is renamed in the desitanion to Makevars.template.minimal, to avoid clashing with the full gettext package (some recipes have both as dependency). - autotools.bbclass: search for all po folders, and update the Makefile.in.in file in each of them. This is required, because without this the old Makefile.in.in files in these non ${S}/po folders are not updated with the new version of gettext, and the compilation routinely fails due to this. As part of the same change, also concatenate the source's Makevars files with the gettext Makevars.template: this allows all variables to be defined, even the new ones that the source didn't contain originally. First set the gettext template, and then append the source's original Makevars to it, so it should override the variables that it was setting originally, and keep the new variables at their default value. - Add new PACKAGECONFIG to use libselinux, and also fix libselinux discovery in autotools (use pkg-config instead of autotools discovery, because autotools' library search doesn't respect custom sysroot) Ptest results: ======================= All 626 tests passed (40 tests were not run) ======================= DURATION: 36 END: /usr/lib/gettext/ptest 2025-08-30T17:49 STOP: ptest-runner TOTAL: 1 FAIL: 0 With the previous version: All 545 tests passed (34 tests were not run) (From OE-Core rev: f4b240b4d2c4b424e5dc8f739d8702c736f32d13) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: update 2.84.4 -> 2.86.0Markus Volk2025-09-085-135/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Overview of changes in GLib 2.86.0, 2025-09-05 ============================================== * Rework how platform-specific introspected GIO APIs have to be imported to fix problems with backwards-compatibility provision for it, by removing duplicate platform-specific symbols from `Gio-2.0`. Users of platform-specific GIO APIs should be unaffected, as `GIRepository` will now automatically import `GioWin32-2.0` or `GioUnix-2.0` when asked to import `Gio-2.0`. However, projects generating introspection data which depends on types from either of those platform-specific GIRs must make sure they depend on those GIRs explicitly, rather than just transitively depending on them through `Gio-2.0` (#3744, work by Emmanuele Bassi, Marco Trevisan, Florian Müllner, and others) * Fix file existence queries on Solaris, broken due to unexpected flags handling within `faccessat()` (#3770, work by Niveditha Rau) * Bugs fixed: - #3744 GDesktopAppInfo API disappeared after girepository-2.0 port (Emmanuele Bassi) - #3768 g_test_trap_subprocess does not check G_TEST_SUBPROCESS_INHERIT_STDIN (Philip Withnall) - !4751 gtestutils: Fix a slightly broken example in a doc comment - !4754 Update Polish translation 250825 - !4758 Update Swedish translation - !4762 gio: gmemorymonitorpsi: Replace GRegex with g_str_has_prefix() - !4765 girepository: Add an assertion to help scan-build - !4767 glocalfile: Disable faccessat()-based query_exists on Solaris - !4768 gmessages: Fix win32_keep_fatal_message regression - !4769 docs: Fix typos - !4770 Update Chinese translation - !4771 Update Georgian translation - !4772 po: Update Persian translation. * Translation updates: - Chinese (China) (lumingzh) - Georgian (NorwayFun) - Persian (Danial Behzadi) - Polish (Piotr Drąg) - Swedish (Anders Jonsson) Overview of changes in GLib 2.85.4, 2025-08-22 ============================================== * Follow symlink (instead of overwriting it) when updating `mimeapps.list` (#3579, work by Rafael Girão) * Bugs fixed: - #3579 mimeapps.list is overwritten if it is a symlink (Rafael Girão) - #3724 Crash in g_hash_table_add after 252645135 elements (Tobias Stoeckmann) - #3743 g_utf8_validate out parameter has wrong type (two) - #3751 meta: clang-format refers to a broken link (Rafael Girão) - #3758 Out-of-bounds read in GMemoryMonitorPoll (Philip Withnall) - #3760 Stack overflow when recursing within g_log_structured() with `G_LOG_FLAG_RECURSION` (Tobias Stoeckmann) - #3761 Regression in g_printf() - can no longer output formatted values containing NUL bytes (Luca Bacci) - #3766 Update sl.po (Slovenian) (Martin) - !4714 gmain: Reformat docs to fully use gi-docgen and match style guide - !4720 Disable GMemoryMonitorPsi on Solaris - !4727 garray: Improve and migrate documentation to gi-docgen - !4735 build: Fix stp files for development versions - !4736 systemtap: Use correct formatters/types - !4738 docs: Add Thomas Haller as a co-maintainer of GObject - !4739 Annotate ref/unref functions as transfer full - !4740 gstrfuncs: Check parameter validity - !4742 garray: Fix g_array_binary_search description - !4743 Update Russian translation - !4744 tests/gio: skip Unix socket-mock tests on Windows - !4747 tests/printf: Use proper compare helper for unsigned types - !4748 gconstructor: Add attribute used for TLS callback pointer * Translation updates: - Russian (jtux270) - Slovenian (Martin) Overview of changes in GLib 2.85.3, 2025-08-08 ============================================== * Fix encoding of output from `g_print()` and `g_printerr()` when locale is set to `.utf8` on Windows (#3341, work by Luca Bacci) * Bugs fixed: - #3341 `g_print` and `g_printerr` will cause encoding errors on Windows when locale is set to `.utf8` (Luca Bacci) - #3739 Crash in accept_ready() of GThreadedSocketService Under High Load (Philip Withnall) - #3740 Documentation of g_win32_error_message does not contain information about the behaviour when FormatMessageW failed (Philip Withnall) - #3755 AIX: Unwanted symbol needs to be removed for AIX platform: getpwnam_r, getpwuid_r (Parth Patel) - !4706 gthreadpool: Clean up when g_thread_pool_new fails - !4707 tests: Skip slow mainloop test on valgrind - !4708 gfilenamecompleter: Fix g_object_unref() of undefined value - !4709 tests: Connect to GMemoryMonitor signals earlier - !4712 tests/thread-pool: Add a thread-pool fail test - !4713 Fix test error for GMemoryMonitor - !4715 gdbuserror: Reformat docs to fully use gi-docgen and match style guide - !4722 tests: Add missing unistd.h header to thread-pool test - !4723 tests: Add a missing poll condition to socket-listener test - !4724 garray: Pass errors through GByteArray functions - !4725 garray: Add checks to g_ptr_array_extend_and_steal - !4726 Add a basic GFilenameCompleter test - !4728 gbitlock: Fix documentation issues - !4729 [RFC] Tests: do not set a timeout in Python tests - !4730 gstrfuncs: Always treat G_MININT64 in g_ascii_strtoll - !4731 glocalfile: Disable faccessat()-based query_exists on OpenBSD - !4733 gvalue: Reformat docs to fully use gi-docgen and match style guide - !4734 gspawn: Improve docstring for g_spawn_async() Overview of changes in GLib 2.85.2, 2025-07-21 ============================================== * New Linux PSI based backend for `GMemoryMonitor` as an option to use instead of the existing Low Memory Monitor daemon backend (!4481, work by Kate Hsuan) * Bugs fixed: - #1443 Deadlock between g_module_open() and dlopen() when called from a constructor - #2848 Doc: clarification request regarding g_match_info_fetch_pos return value (Mark Lautman) - #3712 Crash in g_thread_pool_new_full - #3713 call g_file_enumerator_close in g_file_enumerator_finalize is not safe (fbrouille) - #3716 (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file() (Michael Catanzaro) - #3721 GFile leak in g_local_file_set_display_name during error handling (Philip Withnall, Michael Catanzaro) - #3725 Deadlock on source_destroy_lock inside g_main_context_unref() and g_source_destroy() (with child sources) (Matthew Waters) - #3726 GApplication sometimes fails to call before_emit (Matthias Clasen) - !4481 gio: gmemorymonitorpsi: Replace GMemoryMonitor backend with kernel PSI event - !4665 gio: enums: Fix GBusNameOwnerFlags's annotation - !4667 Incorrect output parameter handling in closure helper of g_settings_bind_with_mapping_closures - !4669 Add missing `(array zero-terminated=1)` annotations - !4676 Fix IPv6 scope-id from DNS responses being lost - !4680 gbacktrace: Correctly wait for children on Unix - !4681 (CVE-2025-6052) gstring: Improve g_string_expand/g_string_append_len_inline checks - !4682 gio-tool-launch: fix %k field code expansion - !4683 gio-tool-launch: Fix mismatched curly quotes in translatable strings - !4684 garray: Support unallocated zero terminated arrays - !4685 garray: Use g_array_elt_len/pos where appropriate - !4687 gstring: Fix g_string_append_vprintf overflow - !4690 garray: Fix out of boundary write in g_ptr_array_copy - !4692 tests: Fix a minor leak in array-test - !4693 tests: Loosen string comparison assertion in gio-tool.py - !4694 tests: Do not always skip array overflow checks - !4695 garray: Add more element_size > 0 checks - !4698 garray: Avoid exponential growth in g_array_copy - !4699 garray: Set capacity in terminated take functions - !4700 gfileutils: Fix OOB read in g_build_path(name)_va - !4701 gbacktrace: Fix OOB write in stack_trace - !4702 gio/filenamecompleter: Fix leaks - !4703 application: NULL check for options - !4704 tests: Add a regression test for GApplication command line handling Overview of changes in GLib 2.85.1, 2025-06-13 ============================================== * Re-add the option of a singleton to `GIRepository` (#3664, work by Christian Hergert) * Add support for the `e` flag (O_CLOEXEC) to `g_fopen()` (!4564, work by Luca Bacci and Philip Withnall) * Make the `sysprof` Meson option yield when using GLib as a subproject (!4659, work by Matthias Clasen) * Use the Meson built-in `localedir` option (!4661, work by Kleis Auke Wolthuizen) * Bugs fixed: - #1665 g_file_trash() should return PERMISSION_DENIED if files can't be deleted (Ignacy Kuchciński) - #3664 Lack of g_irepository_get_default() equivalent makes cross-library integration extremely difficult (Christian Hergert) - #3698 Misleading autogenerated hints in the documentation of g_async_queue_pop() (Alicia Boya García) - !4560 glib/gnulib/printf.c: Sync with gnulib - !4564 gstdio: Add support for the `e` flag (O_CLOEXEC) to g_fopen() - !4637 Rework Windows implementation of g_getenv() - !4641 [th/gobj-drop-bit-lock] gobject: drop object_bit_lock() functions - !4642 [th/gobj-empty-notify-queue] gobject: optimize notify-queue handling for a single freeze - !4643 GRegex: apply monospace typeface in description - !4644 gio: add annotations on parameters of 'g_file_monitor_emit_event' and of 'g_vfs_get_file_for_path' - !4645 gregex: Clarify docs for end_pos - !4646 GRegex: update class description - !4649 GAsyncQueue: assert non-null data in push_sorted() - !4650 tests: Add atomics to asyncqueue test global variables - !4651 Meson: Add libglib_static dependency for use in tests - !4652 gobject: clarify in documentation that g_value_set_boxed copies - !4654 Fix buffer overflow in string-test - !4655 gstring: Fix overflow check when expanding the string - !4657 docs: Stop hiding the Unix-like APIs which are in Gio-2.0.gir - !4658 gmarkup: make documentation more discoverable - !4659 Make the sysprof feature yield - !4661 meson: Use the appropriate localedir option Overview of changes in GLib 2.85.0, 2025-05-20 ============================================== * Preserve mode for existing file when creating a temporary file for atomic updates with g_file_set_contents() (dconf#76, work by Wesley Hershberger) * Fix race conditions between g_main_context_unref() and g_source_*() methods (#803, work by Matthew Waters) * Allow file handles inside nested containers when using the `gdbus call` command (#3624, work by Julian Sparber) * Fix DNS resolution of local addresses in offline mode (#3641, work by Patrick Griffis) * Various performance improvements to GObject locking (various MRs by Thomas Haller) * Prefer matches occurring earlier in the string when searching `GDesktopAppInfo`s, improving search for apps in gnome-shell (!4369, work by Fina Wilke) * Fix thread safety of `GClosure` flags (!4575, !4577, work by Sam James and Philip Withnall) * Bugs fixed: - GNOME/dconf#76 dconf update can set incorrect permissions to dconf system db (Wesley Hershberger) - #490 Not clearly documented behavior of g_key_file_set_comment function. (marklkram) - #803 g_main_context_unref() versus g_source_*() race (Matthew Waters) - #1002 GObject doesn't support removing a weak reference in a GWeakNotify for the same object - #1250 gsocketlistener: Fix IPv4 listen() error-handling resulting in use- after-free - #2377 Document that `g_socket_address_get_native_size()` can return `-1` on errors - #2544 Consider `g_log_always_fatal` for aborting in `g_log_structured_array()` (sid) - #3405 Enable -Wconversion warnings by default (progress towards this, but it is not complete) - #3616 docs: Broken link in GioActionEntry (Philip Withnall) - #3617 Add generalised version of g_date_get_monday_week_of_year() (Philip Withnall) - #3624 `gdbus call` should look for file handles inside nested containers (Julian Sparber) - #3630 2.84.0 build failure on Linux: ../gio/gnetworkmonitornetlink.c:47:10: fatal error: netlink/netlink_route.h: No such file or directory (Philip Withnall) - #3634 test failure with gobject-introspection 1.83.4: warning: element doc:format from state 3 is unknown, ignoring (Philip Withnall) - #3636 gio/trash does not handle special characters well - #3641 GResolver: Local DNS resolution failure in offline mode (Patrick Griffis) - #3642 `g_cancellable_connect()` documentation incorrect (Marco Trevisan (Treviño)) - #3643 g_cancellable_connect(): is it safe to unref cancellable from callback? (Marco Trevisan (Treviño)) - #3649 Crash with some registry key values in GWin32AppInfo (Philip Withnall) - #3656 Set SYSLOG_IDENTIFIER when logging to journald (Axel Karjalainen) - #3657 girepository: Wrong typelib path on Windows - #3663 Cannot use GZlibCompressor in GTK testsuite (Benjamin Otte) - #3684 UAF in GSignalGroup weak notify callbacks (Thomas Haller) - #3686 docs.gtk.org doesn't mention that GSourceFuncs.finalize may be NULL (BZZZZ) - #3693 Random failures in debian-i386-stable - !4185 [th/gobject-no-object-locks-pt1-notify] use `g_datalist_id_update_atomic()` instead of OPTIONAL_BIT_LOCK_NOTIFY - !4247 mappedfile: Avoid some allocations - !4369 gdesktopappinfo: Prefer matches that occur earlier in the match string - !4387 Fix various -Wshorten-64-to-32 warnings - !4484 Memory sanitizer fixes - !4489 gobject: Be consistent in using atomic logic to handle the GParamSpecPool - !4520 [th/gdataset-cleanup] minor cleanups of gdataset - !4536 [th/gobj-closure-array-atomic] use g_datalist_id_update_atomic() for array of closure watches - !4541 gsettings: Port docs to gi-docgen format, add missing annotations and make various improvements - !4544 tests: Don't install runner scripts without installed_tests - !4545 Update French translation - !4547 Update Catalan translation - !4548 Update Turkish translation - !4551 Updated Danish translation - !4552 Update Persian translation - !4553 docs: Document GSignalFlags members added after 2.0 - !4554 Update Indonesian translation - !4555 tests: Add a test for g_object_freeze_notify() being called too often - !4557 gfileinfo: Slightly expand docs for g_file_info_get_attribute_as_string() - !4558 gi: Dynamically set doc-format - !4561 tests: Various fixes to create temporary files in /tmp rather than the build directory - !4562 gdbusnameowning: Convert docs to gi-docgen linking syntax - !4563 giounix-private: Fix macro for checking for epoll_create1() - !4565 Fix LGPL in header - !4567 gutils: make documentation of g_set_prgname() clearer - !4568 docs: Add some detail - !4569 Update Romanian translation - !4570 gspawn-win32: Fix potential integer overflows in argv handling - !4571 gvarianttype: Improve docs on type validation - !4575 gclosure: fix ATOMIC_CHANGE_FIELD to read vint atomically - !4577 gclosure: Allow full set of closure flags to be queried atomically - !4578 [th/bit-lock-and-set] bitlock: add g_bit_lock_and_get() and g_bit_unlock_and_set() API - !4579 tests: Add missing unistd.h include to scannerapi.c - !4581 [th/gobj-no-weak-ref-lock] drop OPTIONAL_BIT_LOCK_WEAK_REFS object lock for `g_object_weak_{ref,unref}()` - !4583 thread: fix Linux detection - !4585 gfile: Expand documentation around file info for inaccessible files - !4586 [th/gobj-doc-weakref] clear #GWeakRef earlier in g_object_run_dispose() and reword docs about #GWeakRef - !4588 gstring: carefully handle gssize parameters - !4590 Various -Wsign-conversion warning fixes - !4591 gthreadedresolver: fix crash in loopback interface check - !4592 gstring: Make len_unsigned unsigned - !4594 Enable -Wsign-conversion for girepository, gthread, gmodule - !4596 docs: Mention how to run the test suite in CONTRIBUTING.md - !4598 gtlsconnection: Fix annotation - !4599 Mark pointer as (type gpointer) - !4601 garray: Fix annotations - !4602 docs: fix typo glong: ULONG_MAX -> LONG_MAX - !4603 Fix GNetworkMonitorNetlink operation under a FreeBSD jail with shared network stack - !4604 cocoa: add support for GBytesIcon in notification backend - !4605 gparamspecs: Use standard min/max constants rather than literals - !4606 gobject, girepository: Fix several -Wsign-conversion warnings on macOS - !4609 Update Portuguese translation - !4610 Update Ukrainian translation - !4613 Update macOS job for new CI runner - !4615 shell: Handle empty comment gracefully - !4619 gslist: Improve documentation for append / prepend / insert methods - !4620 glocalfile: Disable faccessat()-based query_exists on Android - !4621 gallocator: mark as deprecated - !4627 [th/gsignalgroup-dispose] gsignalgroup: make GSignalGroup.dispose() a bit more reentrant - !4628 [th/gdataset-fix-zero-key] fix and cleanup related to using a zero GQuark for keys in GData - !4631 Update German translation - !4632 win32: Only print one OS version - !4633 gzlibcompressor: Convert docs to gi-docgen linking syntax - !4638 docs: Fix formatting of definition lists * Translation updates: - Catalan (Jordi Mas) - Danish (Ask Hjorth Larsen) - French (Vincent Chatelain) - German (Philipp Kiemle) - Indonesian (Andika Triwidada) - Persian (Danial Behzadi) - Portuguese (Hugo Carvalho) - Romanian (Antonio Marin) - Turkish (Sabri Ünal) - Ukrainian (Yuri Chornoivan) - remove backport patches (From OE-Core rev: b1f741735c8da6eb92d2ffd94084aa9328aa665d) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: stop enabling non-standard MAC policy when using the 'pni-names' ↵Koen Kooi2025-09-081-9/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | DISTRO_FEATURE This recipe enabled an additional, non-standard policy for predictable network names: the MAC policy. This is a deviation from upstream policies and in cases where no MAC address is available, it makes it actively worse by changing the name(s) every boot. Change the logic to disable predictable naming when the DISTRO_FEATURE isn't enabled and only use upstream logic with it *is* enabled. For DISTROs that wish to use non-standard policies, a DISTRO layer is the correct place. E.g. in DISTRO_LAYER/recipes-core/systemd/systemd_%.bbappend: do_install:append:DISTRO() { if ${@bb.utils.contains('PACKAGECONFIG', 'pni-names', 'true', 'false', d)}; then if ! grep -q '^NamePolicy=.*mac' ${D}${nonarch_libdir}/systemd/network/99-default.link; then sed -i '/^NamePolicy=/s/$/ mac/' ${D}${nonarch_libdir}/systemd/network/99-default.link fi if ! grep -q 'AlternativeNamesPolicy=.*mac' ${D}${nonarch_libdir}/systemd/network/99-default.link; then sed -i '/AlternativeNamesPolicy=/s/$/ mac/' ${D}${nonarch_libdir}/systemd/network/99-default.link fi } (From OE-Core rev: 9b34a810496f4b769394aa6ba7c0f6013d18ccc8) Signed-off-by: Koen Kooi <koen.kooi@oss.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils_9.7.bb: fix update-alternative support for base32Keerthivasan Raghavan2025-09-081-2/+6
| | | | | | | | | | | | | | base32 is listed as update-alternative binary but does not set the alternatie variables for it to take effect causing the original ELF file to be installed in the destination instead of the symlink. Fix this by setting the alternative variables and by moving the original binary into subdir. (From OE-Core rev: 1eff156c4fe408699e3489cf125f30e0af94d8fd) Signed-off-by: Keerthivasan Raghavan <kraghava@qti.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: include/mount-api-utils: avoid using sys/mount.hRandy MacLeod2025-09-082-0/+30
| | | | | | | | | | | | | | | | | | | Avoid compile error: | In file included from /usr/include/linux/fs.h:19, | from /usr/include/linux/btrfs.h:29, | from ../sources/util-linux-2.41.1/libmount/src/btrfs.c:18: | /usr/include/x86_64-linux-gnu/sys/mount.h:35:3: \ error: expected identifier before numeric constant | 35 | MS_RDONLY = 1, /* Mount read-only. */ | | ^~~~~~~~~ This is seen on PopOS 22.04, an Ubuntu/Debian-based distro. (From OE-Core rev: 67f17867c605bc0e1ca69ab9dec6209e85c38c1e) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sdk: Remove go from SDK_TOOLCHAIN_LANGS for powerpcPeter Tatrai2025-09-011-0/+1
| | | | | | | | | | | PowerPC 32bit port of go compiler does not exist, remove it from list Fixes SDK builds for qemupowerpc and other powerpc machines (From OE-Core rev: 7308913fc007d1d5ea719aef6cb48079f402f417) Signed-off-by: Peter Tatrai <peter.tatrai.ext@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* readline: backport a patch to fix issue that readline can't work with sambaLiu Yiding2025-08-282-0/+56
| | | | | | | | | | | | | | | | smbclient can't accept input after readline upgrade to 8.3 | root # smbclient //192.168.2.16/test -N | Try "help" to get a list of possible commands. | smb: \> similar issue has been reported: https://lists.gnu.org/archive/html/bug-readline/2025-07/msg00011.html (From OE-Core rev: e2478467b45ed2a80c32a7ee0a673555a3c98bf5) Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sdk: Remove go from SDK_TOOLCHAIN_LANGS for rv32Khem Raj2025-08-281-0/+1
| | | | | | | | | | | RISCV32 port of go compiler does not yet exist remove it from list Fixes SDK builds for qemuriscv32 and other rv32 machines (From OE-Core rev: 9af3029cb19fd644d17f54a54da3806b7aa3e244) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: cleanup CVE_STATUS which are resolved nowPeter Marko2025-08-282-5/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The don't show up in CVE metrics anymore since they were either fixed upstream or recipe version was upgraded meanwhile. * bind CVE-2019-6470: cpe got corrected in nvd db * libxml2 CVE-2023-45322: version is now higher than NVD cpe * zlib CVE-2023-45853: version is now higher than NVD cpe * gcc CVE-2021-37322: version is now higher than NVD cpe * python3 * CVE-2007-4559: version is now higher than NVD cpe * CVE-2019-18348: version is now higher than NVD cpe * CVE-2020-15523: version is now higher than NVD cpe * CVE-2022-26488: version is now higher than NVD cpe * CVE-2015-20107: version is now higher than NVD cpe * CVE-2023-36632: version is now higher than NVD cpe * rust * CVE-2024-24576: NVD has no cpe, but we have newer version as fix * CVE-2024-43402: version is now higher than NVD cpe * cups CVE-2021-25317: version is now higher than NVD cpe * ghostscript CVE-2023-38559: version is now higher than NVD cpe * libtirpc CVE-2021-46828: version is now higher than NVD cpe * unzip CVE-2008-0888: version is now higher than NVD cpe * ffmpeg CVE-2023-39018: cpe got corrected in nvd db * libxslt CVE-2022-29824: version is now higher than NVD cpe * libyaml * CVE-2024-35325: CVE is now rejected in NVD DB * CVE-2024-35326: CVE is now rejected in NVD DB * CVE-2024-35328: CVE is now rejected in NVD DB Also add comment for iputils regarding reports for FKIE/NVD2. Also remove some trailing spaces in python recipe. (From OE-Core rev: 73ee9789183aa95072af2b51ac9e08203f4e33f9) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update: log timestamps and add force update for future timePeter Marko2025-08-282-3/+13
| | | | | | | | | | | | | | CVE update is currently not working properly on autobuilder. This improves logging for problem analysis. Future time is something which could be reason for current autobuilder problems since the DB was not updated for more than 3 months by now. (From OE-Core rev: 0098a05116624d019f8c5107940e910d867f3afc) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: FKIE CVE parsing: Use Secondary metricJonathan Schnitzler2025-08-281-20/+33
| | | | | | | | | | | If there is no primary metric use the Secondary one. (From OE-Core rev: 5ad0516aba120d9eba5f10afa3a4de3d25fd31fc) Signed-off-by: Jonathan Schnitzler <jonathan.schnitzler@faro.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: Fix FKIE CVE accessVector parsingJonathan Schnitzler2025-08-281-3/+3
| | | | | | | | | | | Use "attackVector" for CVSS >= 3 as it only CVSS v2 uses "accessVector". (From OE-Core rev: 7e4d566445a8cbe1e540e20837d45692d81af77f) Signed-off-by: Jonathan Schnitzler <jonathan.schnitzler@faro.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update: remove cleanup of db_file in downloadsPeter Marko2025-08-282-30/+4
| | | | | | | | | | | | | | | | Since the code was changed to update the DB in temporary file, code cleaning the final file in downloads is never executed. Remove it. Since the code always removes both files in temporary directory, remove also comment which is trying to differentiate this code from code just removed. (From OE-Core rev: bece6dbf5d0e89b2e846587e1b89766e16dd9253) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update: decrease update interval to 23 hoursPeter Marko2025-08-282-4/+4
| | | | | | | | | | | | | If the job runs every day at the same time, it usually updates only every second day, because it takes non-0 time for DB update and set the timestamp. So it does not take full 24-hours from time when the DB was updated until the next job starts. (From OE-Core rev: 4a82ae1315b034b6386a82127e1ec8d6f504ec89) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: log a little morePeter Marko2025-08-281-4/+4
| | | | | | | | | | | | OE-Core rev: b64a869b9c5e1d504f1011da16b5c5ff721afbf0 This commit was not applied on nvd1/fkie fetcher. (From OE-Core rev: dd5efc4a242ec918dd276d10da8c68f606ba8809) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: Handle BB_NO_NETWORK and missing dbPeter Marko2025-08-281-0/+5
| | | | | | | | | | | | OE-Core rev: 337c0806d2784d74bee8d6420fb8b4d48795d5fa This commit was not applied on nvd1/fkie fetcher. (From OE-Core rev: 749c8e266ded2fa81e0e0ebbfa8f1ba164a062f2) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: Use a local copy of the database during buildsPeter Marko2025-08-281-3/+3
| | | | | | | | | | | | | | OE-Core rev: 03596904392d257572a905a182b92c780d636744 This seems to be misimplemented when re-adding update from nvd1 feed. Use file in temporary directory instead of downloads directory for update process. (From OE-Core rev: e5b0a74810fdd3f72fe61e0ae1f859a444dc1fa5) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: mark CVE-2025-6170 as fixedPeter Marko2025-08-251-0/+2
| | | | | | | | | | | | | | As shown in [1] when expanding tags including it. NVD tracks this CVE as version-less. [1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/c340e419505cf4bf1d9ed7019a87cc00ec200434 (From OE-Core rev: d8a9c190811ad9658a74502a371c110f4d24d68f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: fix fetcher for CVEs missing nodesPeter Marko2025-08-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | As of now, update of CVE DB from FKIE source (which is the defailt) fails with following error: File: '<build>/poky/meta/recipes-core/meta/cve-update-db-native.bb', lineno: 393, function: update_db_fkie 0389: [cveId, cveDesc, cvssv2, cvssv3, cvssv4, date, accessVector, vectorString]).close() 0390: 0391: for config in elt['configurations']: 0392: # This is suboptimal as it doesn't handle AND/OR and negate, but is better than nothing *** 0393: for node in config["nodes"]: 0394: parse_node_and_insert(conn, node, cveId, False) 0395: 0396:def update_db(d, conn, jsondata): 0397: if (d.getVar("NVD_DB_VERSION") == "FKIE"): Exception: KeyError: 'nodes' Entry for new CVE-2025-32915 is broken. (From OE-Core rev: 152be29f6a732b2ba1c95bcf465455d2a5a3f33a) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gettext: Force UTF-8 runtime and skip requiring ISO-8859-1Khem Raj2025-08-251-0/+10
| | | | | | | | | | | | | | | | | | | | | On musl, there is no real legacy (non-UTF-8) fr_FR locale. These tests are designed for libcs that ship both fr_FR (ISO-8859-1) and fr_FR.UTF-8. So the right thing will be to SKIP these tests Unsetting LOCALE_FR will ensure that it does not enable ISO-8859-1 path, so reset it in run-ptest but thats not enough because it is being set in the test's own init-env file as well so clear it in that file as well. Fixes Failed ptests: {'gettext': ['intl-2', 'intl-4', 'intl-thread-3', 'lang-sh', 'lang-bash']} (From OE-Core rev: 0fe96efea084f4594df43f57e121cb2353bfafa7) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gettext: Skip test known to fail on muslKhem Raj2025-08-252-1/+93
| | | | | | | | | | | | * Use posix thread on musl and cache * Force using system posix complaint printf * Add coreutils to ptest dependencies (From OE-Core rev: 16b1fff0dc3f95d2f52106b0133133d175725d52) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* psplash: Do not mount PSPLASH_FIFO_DIR if the env variable is emptyFalk Bauer2025-08-251-3/+5
| | | | | | | | | | | | | | | | | | | | | | | | | The script file psplash.sh tries to mount the PSPLASH_FIFO_DIR variable. If the variable is empty, the mountpoint command returns a usage text (busybox mountpoint here, util-linux mountpoint behaves the same): BusyBox v1.37.0 () multi-call binary. Usage: mountpoint [-q] { [-dn] DIR | -x DEVICE } :~# BusyBox v1.37.0 () multi-call binary The return code with this console output is 0 and the mount command in the if statement is executed. Then this mount also fails with an empty mountpoint argument. The source code of psplash respects an empty PSPLASH_FIFO_DIR variable (see psplash.c) and makes a fallback to "/run". So the psplash.sh script should also respect the empty var. Try to mount the PSPLASH_FIFO_DIR only if the variable is not empty. (From OE-Core rev: 85a5e562c5969c407a222966ccb3170cb41fed2f) Signed-off-by: Falk Bauer <falkbauer.git@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libc-test: Ignore fma math testsKhem Raj2025-08-252-0/+292
| | | | | | | | (From OE-Core rev: 135a572cdb7c7cf487aa46ef1a5500b81593a30a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libc-test: Fix strptime and api/main testsKhem Raj2025-08-253-0/+101
| | | | | | | | (From OE-Core rev: 124921683e9a0a1d981eaeea717c5dd7d35abf90) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libc-test: Upgrade to tip of trunkKhem Raj2025-08-251-1/+1
| | | | | | | | | | | | | | Brings following changes functional: add mntent test fix malloc-brk-fail math: add fma(x,y,z) test cases for z=0 and x*y rounds to -0 (From OE-Core rev: 393ecfe64065aafdcc6c37d8374c9a3ece748d7a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-09-09 21:55:24 +0000