Commit Graph

2264 Commits

Author SHA1 Message Date
Ankur Tyagi
3e925d43c1
redis: upgrade 6.2.20 -> 6.2.21
Changelog:
https://github.com/redis/redis/releases/tag/6.2.21

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-13 10:15:06 -08:00
Yi Zhao
b0db63dcd1
smartmontools: add UPSTREAM_CHECK_URI
Add UPSTREAM_CHECK_URI and UPSTREAM_CHECK_REGEX to check the correct
latest stable verison.

Before the patch:
$ devtool latest-version smartmontools
INFO: Current version: 7.5
INFO: Latest version:

After the patch:
$ devtool latest-version smartmontools
INFO: Current version: 7.5
INFO: Latest version: 7.5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-12 09:39:00 -08:00
Wang Mingyu
6fef3371b7
parallel: upgrade 20250922 -> 20251022
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-06 16:00:50 -08:00
Wang Mingyu
958c712bb1
libyang: upgrade 3.13.5 -> 3.13.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-06 16:00:50 -08:00
Jiaying Song
f884ac2676
minifi-cpp: fix python shebang in minifi-python-examples
Replace '/usr/bin/env python' with '/usr/bin/env python3' in the scripts
under ${libexecdir}/minifi-python-examples.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-04 23:14:25 -08:00
Ankur Tyagi
125c1317ed
redis: ignore CVE-2025-46817, CVE-2025-46818, CVE-2025-46819
Fixes for CVE 46817[1], 46818[2], 47819[3] are included in the used version
[1] fc282edb61
[2] dccb672d83
[3] 2802b52b55

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-04 16:52:47 -08:00
Ankur Tyagi
73978fa1ff
redis: upgrade 7.2.11 -> 7.2.12
and refresh patches

Changelog:
https://github.com/redis/redis/releases/tag/7.2.12

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-04 16:52:47 -08:00
Hongxu Jia
4b701ac88d libyang: explicitly add xxhash to DEPENDS
When xxhash was included indirectly, there is a QA issue
at do_package_qa
...
|ERROR: QA Issue: /usr/lib64/libyang.so.3.9.13 contained in package
libyang requires libxxhash.so.0()(64bit), but no providers found in
RDEPENDS:libyang? [file-rdeps]
...

Explicitly add xxhash to DEPENDS, then:
...log.do_configure...
-- Found XXHash: build/tmp/work/x86-64-v3-wrs-linux/libyang/3.13.5/recipe-sysroot/usr/include
-- Hash algorithm: xxhash
...log.do_configure...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-24 09:06:24 -07:00
Wang Mingyu
495224948c
liblognorm: upgrade 2.0.6 -> 2.0.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-21 20:02:40 -07:00
Wang Mingyu
c78cf4b1f0
sanlock: upgrade 4.0.0 -> 4.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-14 09:00:25 -07:00
Corentin Guillevic
3fd372d79b
libblockdev: improve reproducibility
The --with-smart option behind the feature "smart" relies on the drivedb.h
header, provided by smartmontools package (/usr/share/smartmontools/drivedb.h).

However the dependencies (DEPENDS) miss this package. Furthermore, if the
--with-drivedb option is not used, the configuration step will search for the
file first on the host's rootfs. This may result in the wrong header being picked,
or the --with-smart option being silently disabled due to incomplete dependencies
(causing missing header).

The header is now guaranteed to be present due to an added dependency in the
"smart" feature, and its location is specified by the --with-drivedb option.

Signed-off-by: Corentin Guillevic <corentin.guillevic@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 19:24:38 -07:00
Wang Mingyu
f999a83972
parallel: upgrade 20250822 -> 20250922
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Leon Anavi
0fc3ccf83a
valkey: Upgrade 8.1.3 -> 8.1.4
Upgrade to release 8.1.4:

Security fixes:
- (CVE-2025-49844) A Lua script may lead to remote code execution
- (CVE-2025-46817) A Lua script may lead to integer overflow and
  potential RCE
- (CVE-2025-46818) A Lua script can be executed in the context of
  another user
- (CVE-2025-46819) LUA out-of-bound read

Bug fixes:
- Fix accounting for dual channel RDB bytes in replication stats
- Fix EVAL to report unknown error when empty error table is
  provided
- Fix use-after-free when active expiration triggers hashtable
  to shrink
- Fix MEMORY USAGE to account for embedded keys
- Fix memory leak when shrinking a hashtable without entries
- Prevent potential assertion in active defrag handling large
  allocations
- Prevent bad memory access when NOTOUCH client gets unblocked
- Converge divergent shard-id persisted in nodes.conf to primary's
  shard id
- Fix client tracking memory overhead calculation
- Fix RDB load per slot memory pre-allocation when loading from RDB
  snapshot
- Don't use AVX2 instructions if the CPU doesn't support it
- Fix bug where active defrag may be unable to defrag sparsely
  filled pages

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Gyorgy Sarvari
8f1269507a
redis: ignore CVE-2022-3734 and CVE-2022-0543
CVE-2022-3734 only affects Windows.
CVE-2022-0543 affects only packages that were packaged for Debian and
Debian-derivative distros.

Neither of these issues is present in upstream Redis.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:01 -07:00
Gyorgy Sarvari
17ba274172
redis: ignore CVE-2025-27151
The fix has been backported by upstream, and it is included in the used
version: d0eeee6e31

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-07 09:33:36 -07:00
Gyorgy Sarvari
2ef9c8762d
redis: ignore CVE-2025-21605
The fix has been backported to both redis versions by upstream, and
both versions contain it already.

For 6.2.20 [1] contains the backported fix.

For 7.2.11 [2] contains the backported fix.

[1]: 5e93f9cb9d
[2]: 42fb340ce4

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-07 09:33:36 -07:00
Gyorgy Sarvari
24ad0ea910
redis: upgrade 7.2.10 -> 7.2.11
Changelog:
(CVE-2025-49844) A Lua script may lead to remote code execution
(CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
(CVE-2025-46818) A Lua script can be executed in the context of another user
(CVE-2025-46819) LUA out-of-bound read

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-06 14:14:37 -07:00
Gyorgy Sarvari
1a22715b82
redis: upgrade 6.2.18 -> 6.2.20
Changelog:

6.2.19:
(CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands
(CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an error

6.2.20:
(CVE-2025-49844) A Lua script may lead to remote code execution
(CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
(CVE-2025-46818) A Lua script can be executed in the context of another user
(CVE-2025-46819) LUA out-of-bound read

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-06 14:14:37 -07:00
Gyorgy Sarvari
a2aadcda20
gnuplot: upgrade 5.4.3 -> 6.0.3
This upgrade includes fixes for the following vulnerabilities:
CVE-2025-31176
CVE-2025-31178
CVE-2025-31179
CVE-2025-31180
CVE-2025-31181

This release supports qt4, qt5 and qt6 (the last one is new in this release).
There are 2 qt PACKAGECONFIGs now: qt5 and qt6 - they are mutually exclusive.

Since it is being touched, also fix lua PACKAGECONFIG, which requires lua-native
at build time.

Changelog:
http://gnuplot.info/ReleaseNotes_6_0_3.html

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-06 14:14:36 -07:00
Gyorgy Sarvari
a53e23b43b
collectd: set working SRC_URI
The project started to outsource the source hosting to Google storage
and Github.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
Gyorgy Sarvari
45172be94e
redis-plus-plus: upgrade 1.3.14 -> 1.3.15
Drop 0001-update-cmake_minimum_required-to-3.5.patch, because it is
included in this release.

Add back 0001-CMakeLists.txt-fix-substitution-for-static-libs.patch
to SRC_URI, because it was removed accidentally during a previous
update.

Changelog:
- Support cmake FetchContent feature
- Support more hash commands
- Make variant parser more efficient
- Fix event loop crash: avoid closing handle opened by hiredis

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
Gyorgy Sarvari
3505e951b9
smartmontools: upgrade 7.4 -> 7.5
Changelog:

- CI and release builds are now reproducible if same SOURCE_DATE_EPOCH,
  build recipes and toolchains are used.
- smartctl '-j -A': New JSON value 'endurance_used' (ATA/SCSI/NVMe).
- smartctl '-j -A': New JSON value 'spare_available' (ATA/NVMe).
- smartctl '-j -i': Re-added the JSON value 'model_name' also for SCSI
  devices (regression).
- smartctl '-j -c': NVMe support.
- smartctl '-j -n ...': New JSON values 'power_mode.*' (ATA only).
- smartctl '-H -A': Support for NVMe SMART/Health Information per
  namespace.
- smartctl '-i': ATA ACS-6 updates.
- smartctl '-x': No longer includes '-g wcreorder'.
- smartctl '-x', '-l scterc': No longer returns exit status 4 if SCT ERC
  is not supported by the device.
- smartctl '-l error': No longer prints bogus ATA error log entries if
  the error index is nonzero but the error count is zero.
- smartctl '-l ssd': Fixed corruption of the output of the SCSI Format
  Status log page.
- smartctl '-l ssd': Now detects 'no format since manufacture' from the
  SCSI Format Status log page.
- smartctl '-l farm': Fixed the unit of 'Write Power On' time.
- smartctl '-l farm': Fixed the byte order of ATA 'Assembly Date'.
- smartctl '-l farm': Fixed a possible segfault.
- smartctl '-l farm -q noserial': Suppresses serial and WWN also from FARM.
- smartctl '-l farm -T permissive': Overrides false negative FARM support
  check for rebranded drives.
- smartctl '-t TEST': Fixed self-tests of single namespace NVMe devices.
- smartd '-A': NVMe attribute log support.
- smartd: Ignores NSID in duplicate check of single namespace devices.
- smartd: No longer issues LOG_CRIT warnings for 'Set Feature' related
  NVMe error information log entries.
- smartd: No longer hangs on systems with large file descriptor limits.
- smartd: No longer logs invalid "old test ... not run" messages if
  staggered self-tests are used.
- smartd.conf '-l selftest[sts] -s ...': NVMe self-test support.
- smartd.conf '-H MASK': Ability to ignore specific bits of NVMe
  SMART/Health value 'Critical Warning'.
- smartd.conf '-p': Checks NVMe SMART/Health value 'Available Spare'.
- smartd.conf '-u [-f]': Checks NVMe SMART/Health values 'Percentage Used'
  and 'Media and Data Integrity Errors'.
- smartd.conf '-W ...': No longer includes individual sensors in NVMe
  temperature check as some devices report other values there.
- ATA: Device type '-d jmb39x-q2,N' for another JMB39x protocol variant
  used by QNAP-TR002 NAS devices.
- SCSI: Fixed range checks of mode page offset and VPD inquiry.
- SCSI: Fixed buffer overflow parsing of VPD page.
- SCSI: Fixed handling of multiple designators in VPD page.
- USB/NVMe: '-d sntjmicron' no longer triggers USB resets on queries of
  the self-test log.
- USB/NVMe: '-d sntasmedia' now supports log pages > 512 bytes.
- USB/NVMe/SAT: New experimental NVMe/SAT autodetection options
  '-d snt*/sat'.
- Fixed segfault on missing option argument on systems using musl libc.
- HDD, SSD and USB additions to drive database.
- automake < 1.13 are no longer supported.
- Custom make rules are now silenced if 'make V=0' is used.
- Enhanced makefile targets 'dist-*' to create reproducible source
  tarballs if SOURCE_DATE_EPOCH is set.
- The makefile no longer uses GNU make specific syntax elements
  (exception: reproducible builds for macOS).
- Dropped support for platforms without 'sigaction()'.
- configure: Now also detects MidnightBSD.
- configure: Dropped option '--with-signal-func'.
- configure: Default for '--with-nvme-devicescan' is now 'yes' also on
  NetBSD.
- Version information is now also set if build from GH R/O mirror.
- Linux: 'smartd.service' now avoids a warning about an unset environment
  variable.
- Linux: Dropped autodetection of deprecated device type '-d marvell'.
- macOS: Support for reproducible builds of the DMG image.
- OpenBSD: NVMe support.
- Windows: Increased WMI timeout.
- Windows: Support for reproducible builds of the installer.
- Windows: Uninstaller is no longer damaged if the installer is signed.
- Windows 'update-smartd-drivedb.ps1': Fixed call of 'gpg.exe' if it
  appears more than once in the PATH.
- Windows 'update-smartd-drivedb.ps1 -Verbose': Now also prints the
  download command.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
Gyorgy Sarvari
b1355592c1
indent: upgrade 2.2.12 -> 2.2.13
Drop 0001-Fix-builds-with-recent-gettext.patch - it built fine for me without it.

Building requires full makeinfo, not only a lite version, so switched the texinfo
class to texinfo-replacement-native dependency.

Changelog:
- Fix buffer overflows and use after free bugs
- Recognize binary integer literals
- New and updated translations, thanks to our translators:
  - Updated translations:
      Catalan, Croatian, French, Galician, German, Greek, Hungarian,
      Indonesian, Italian, Romanian, Serbian, Spanish, Turkish, Ukrainian
  -  New translation: Portuguese

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:15 -07:00
hongxu
d1375d37ee
indent: fix CVE-2024-0911
Backport a fix from upstream to resolve CVE-2024-0911

  https://git.savannah.gnu.org/git/indent.git feb2b646e6c3a05018e132515c5eda98ca13d50d

(cherry picked from commit 26ef6a9c2d)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:14 -07:00
Yogita Urade
91ac7b0212
indent: fix CVE-2023-40305
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace
in indent.c via a crafted file.

Reference:
https://savannah.gnu.org/bugs/index.php?64503

(cherry picked from commit 7da6cb848b)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-27 16:18:14 -07:00
Gyorgy Sarvari
8891ca8748
zlog: upgrade 1.2.16 -> 1.2.18
Switched to cmake. Added a backported patch to be able to use
the latest version of cmake.

Also, add a new patch to avoid overwritingg all the CFLAGS set by Yocto,
which helps with avoiding the inclusion of TMPDIR in the generated files.

License-Update: License changed to Apache2:
1a7b1a6fb9

Changelog:
1.2.18:
- patched severe vulnerability CVE-2024-22857
- restructured build system

1.2.17:
- Change Lience to Apache 2.0, for more people

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Yi Zhao
00fa5e02f1
minifi-cpp: fix reproducibility issue
Minifi-cpp will add a build identifier to the binary. If not specified,
a random build identifier will be generated for each build. This breaks
reproducibility. Set BUILD_IDENTIFIER to ${PV} to ensure the identifier
remains constant across builds.

Additionally, set BUILD_DATE to SOURCE_DATE_EPOCH to use reproducible
timestamp.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-19 12:22:00 -07:00
João Henrique Ferreira de Freitas
9ed5916ac8
wxwidgets: add back the possibility to add packageconfig opengl for native
Previous commit (ce604d453c) removed packageconfig
opengl for -native. The removal was done in a way that it is not possible
to append or add opengl from a .bbappend wxwidgets recipe [1].

This commit adds back the possibility to add opengl to packageconfig when native,
using a weak assignment.

1: https://docs.yoctoproject.org/bitbake/bitbake-user-manual/bitbake-user-manual-metadata.html#removal-override-style-syntax
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-15 09:55:16 -07:00
Markus Volk
1175f24271
flatpak: update 1.16.0 -> 1.16.1
1.16.1

Enhancements:

    When using parental controls, allow a child account to update existing apps by default, to ensure that security and bugfix updates can be installed. This can be overridden by setting polkit policy rules for the new org.freedesktop.Flatpak.override-parental-controls-update action if necessary. (#5552)
    Make systemd scopes easier to match to Flatpak app instances, by using the instance ID instead of the top-level process ID in the scope name (#6015)
    Access to --device=dri now includes /dev/udmabuf (#6158)
    Improve the error message for an invalid parameter to flatpak-spawn --sandbox-a11y-own-name (#6048)
    Speed up flatpak prune --dry-run by not calculating potential freed space and avoiding operations that would need to hold a lock (#5813, #6121)
    Speed up flatpak permission-reset by only writing entries that have actually changed (#5772)
    Documentation improvements (#4859, #6066, #6134)
    Look for TLS certificates at /etc/containers/certs.d when interacting with OCI registries (#5916)
    Translation updates: bg (#6120), ka (#6176), pl (#6106), pt_BR (#6076, #6188), ro (#6139), ru (#6145), sl (#6054), sv (#6193), tr (#6109)
    This is the first bugfix release of the Flatpak 1.16 series! Users and distributions are strongly encouraged to update to this version.

Bug fixes:

    Fix intermittent flatpak-portal crashes by avoiding unnecessary multi-threading (#5605)
    Don't show a confusing confirmation prompt when flatpak remove --unused removes autoprune-unless extensions that are no longer needed, such as older Nvidia drivers (#5712, #2718)
    Don't propagate $PYTHONPYCACHEPREFIX from host into sandbox (#6110)
    Don't propagate $WAYLAND_DISPLAY, $WAYLAND_SOCKET from host into sandbox if access to the Wayland socket has been denied (#3948)
    When discovering the AT-SPI bus, treat $AT_SPI_BUS_ADDRESS as higher-priority than GetAddress(), more closely matching the behaviour of AT-SPI itself (#6173)
    Fix a memory leak when installing extra-data (#6069)
    Don't show fatal transaction errors twice (#3400)
    Fix the build with -Ddefault_library=static (#6119)
    Fix incorrect error reporting (#6127, #5170)
    When using FLATPAK_TTY_PROGRESS, terminate OSC escape sequence with standard ST sequence instead of xterm-specific BEL (#6092)
    Include all options in shell completion for flatpak search (#6096)

Internal changes:

    Fix an unclear boolean expression (no functional change) (#5013)
    Avoid a duplicate redirection in the test suite (#6117)
    CI updates

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-06 10:11:38 -07:00
Michael Fitzmayer
b8d586f05c
canopenterm: Upgrade to version 1.0.13
Update license checksum: the year in the copyright notice has been
updated.

- Various improvements and bug fixes
- Visualise CAN data using graphical widgets
- Migrate from SDL2 to SDL3
- Support for CANopen profile databases (including several common
  application and device profiles)
- Basic autocomplete functionality
- Persistent command history

Signed-off-by: Michael Fitzmayer <mail@michael-fitzmayer.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-04 11:25:07 -07:00
Wang Mingyu
e52777c3ac
parallel: upgrade 20250722 -> 20250822
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-04 10:28:24 -07:00
Wang Mingyu
9e933f32e7
hwloc: upgrade 2.12.1 -> 2.12.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-04 10:28:23 -07:00
Khem Raj
d3610b7fe8
minifi-cpp: Include cstdlib in fmt for free/malloc
This helps in compiling with clang-21

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-29 22:02:54 -07:00
Khem Raj
59f2556edd
7zip: Disable Werror
Clang-21 finds more warnings, its a constant fight, lets disable
warning as errors and let upstream handle it

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-29 15:36:56 -07:00
Khem Raj
146473ce0f
hiredis: Build vendored hdr_histogram fpconv
This fixes a build race which is seen with high parallel builds ( -j 80)

Fixes
aarch64-yoe-linux-clang: error: no such file or directory: '../deps/hdr_histogram/libhdrhistogram.a'
aarch64-yoe-linux-clang: error: no such file or directory: '../deps/hdr_histogram/libhdrhistogram.a'
aarch64-yoe-linux-clang: error: no such file or directory: '../deps/fpconv/libfpconv.a'
make[1]: *** [Makefile:431: redis-benchmark] Error 1
make[1]: *** Waiting for unfinished jobs....
make[1]: *** [Makefile:407: redis-server] Error 1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-26 19:47:43 -07:00
Jiaying Song
c5de36f588
libconfig: switch source to GitHub repository
The original tarball URL no longer provides version 1.7.3 or any other
historical releases.To ensure reproducible builds, the source has been
switched to the official GitHub repository.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-26 08:27:27 -07:00
Wang Mingyu
022beece6e
libyang: upgrade 3.12.2 -> 3.13.5
License-Update: Copyright year updated to 2025

Changelog:
============
- yanglint extension-instance YANG data validation support
- compatibility fixes for FreeBSD
- minor LYB data format improvements
- lots of other bugfixes and improvements

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:09 -07:00
Wang Mingyu
d383468b25
icewm: upgrade 3.8.1 -> 3.8.2
Changelog:
===========
- Use foldspaces to remove extraneous spaces.
- Also minimize fullscreen windows when clicking on a task button. Document
  the minimization feature of task buttons and the Ctrl modifier.
- Fix for keeping a menu inside the screen area.
- Fixes for adjusting the workarea when moving/sizing a do-not-cover window
- Fix to resize maximized windows when workarea grows and fix to recompute
  the workarea when a dock exits
- Don't synchronize with icewm after _NET_WORKAREA changes as it slows icewm
  down.
- Fix typo
- When the workarea changes, adjust the positions of all desktop icons.
- Drop excessive use of square brackets around double quotes.
- Improve the abstractions for the doNotCover computation inside
  updateWorkAreaInner.
- Add new "switchmenu" and "print" actions to icesh to use icesh in a
  "switchkey" definition in the "keys" file.
- Make the -Z filter work on non-Linux.
- Add mlterm for OpenBSD.
- Explain Dock layer.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:08 -07:00
Wang Mingyu
42430643df
highway: upgrade 1.2.0 -> 1.3.0
0001-Add-cmake-check-for-deducing-32bit-or-64bit-RISCV.patch
refreshed for 1.3.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:08 -07:00
Peter Marko
2d8d6ec229
7zip: upgrade 24.09 -> 25.01
Handles CVEs:
* 25.00: CVE-2025-53816, CVE-2025-53817
* 25.01: CVE-2025-55188

License-Update: copyright years refreshed

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-13 12:25:37 -07:00
Khem Raj
72d399339e
simpleiot: Add recipe
simpleiot is a framework used to manage edge devices

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Cliff Brake <cbrake@bec-systems.com>
2025-08-09 10:22:39 -07:00
Khem Raj
acbf3e2e7e
openwsman: Fix reprodubility issue due to abs paths
dlopen is being served libssl.so with build time
absolute path of its location in target sysroot

this is being detected as reproducibility issue but
its also a runtime issue where dlopen will fail
due to non-existent path

Backport a gcc-15 build fix as well

Drop do_configure tweak its no longer needed

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-04 11:45:26 -07:00
Khem Raj
2e4fd45157
redis: Upgrade to 7.2.10
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-01 14:32:22 -07:00
Wang Mingyu
65523bc212
rsyslog: upgrade 8.2504.0 -> 8.2506.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-30 16:40:03 -07:00
Wang Mingyu
6d95399fa2
qcbor: upgrade 1.4.1 -> 1.5.3
License-Update: The last two lines of the BSD license omitted by accident are put back.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-30 16:40:03 -07:00
Wang Mingyu
482318ca41
parallel: upgrade 20250622 -> 20250722
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-30 08:03:08 -07:00
Wang Mingyu
b27d4aedff
libcec: upgrade 7.0.0 -> 7.1.1
Changelog:
==========
- [libcec] fix incorrect preprocessor command
- [cmake] Fix win x64 and arm64 detection in cmake
- add Teufel vendor id
- RPiCECAdapterDetection: Include check that we can set passive mode
- correct typo
- Fix PRId64 define
- Fix another NULL return
- Don't use Bash for setting build variables
- update ceccloader.h & make cmake obey INSTALL_BINDIR & INSTALL_LIBDIR
- add system audio mode request & system audio mode status

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-30 08:03:06 -07:00
Wang Mingyu
abf71dc48e
cfengine-masterfiles: upgrade 3.21.5 -> 3.26.0
License-Update: Copyright year updated to 2024

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-30 08:03:05 -07:00
Gyorgy Sarvari
002bb964ba
p8platform: update to latest revision
There hasn't been a release since a long time, but there are some
rare commits. One is updating cmake requirements, which allows
removing the CMAKE_POLICY_VERSION_MINIMUM macro.

License-Update: use License.md instead of source code comments

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-28 14:36:25 -07:00
Yoann Congal
e079466992
qhull: add native variant
Since commit 4042e529b9 ("python3-matplotlib: Upgrade to 3.10.1"),
python3-matplotlib depends on qhull and has native variant, so qhull
does need the native variant as well.

Fixes this warning from AB[0]:
WARNING: Nothing PROVIDES 'qhull-native' (but virtual:native:/srv/pokybuild/yocto-worker/meta-oe-mirror/build/meta-openembedded/meta-python/recipes-devtools/python/python3-matplotlib_3.10.3.bb DEPENDS on or otherwise requires it). Close matches:
[0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/82/builds/377/steps/12/logs/warnings

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-25 17:12:12 -07:00
Yi Zhao
6c21bee92a
valkey: upgrade 8.1.1 -> 8.1.3
ChangeLog:
https://github.com/valkey-io/valkey/releases/tag/8.1.2
https://github.com/valkey-io/valkey/releases/tag/8.1.3

Security fixes:
CVE-2025-27151
CVE-2025-32023
CVE-2025-48367

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-21 10:10:46 -07:00
Khem Raj
b8bdee746c
ostree: Always use libgcc for runtime with clang on x86
compiler-rt does not have 128-bit int support for 32bit x86

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-20 21:21:31 -07:00
Chen Qi
ac6f7c3665
wxwidgets: fix for multilib
In case of multilib enabled, we'll get installed-vs-shipped QA
error. This is because the hardcoded/default '/lib' is used.

Update 0002-fix-libdir-for-multilib.patch and set wxBUILD_INSTALL_xxx
variables to fix this issue.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-20 21:21:31 -07:00
Chen Qi
5abc595f6b
wxwidgets: add back SRCREV
During the last upgrade, SRCREV was accidently dropped. This will
cause parsing error when BB_NO_NETWORK is enabled.

Add back SRCREV for tag v3.2.8.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-16 22:24:55 -07:00
Wang Mingyu
83880f5acf
icewm: upgrade 3.8.0 -> 3.8.1
0001-configure.ac-skip-running-test-program-when-cross-co.patch
refreshed for 3.8.1

Fixes:
- Restore the previous code for calculating User Memory.
- Allow to reload the toolbar from the dialog.

Changes:
- Always keep message dialogs above the WindowList.
- Make the BrowseMenu much faster and use less memory.
- Document that a toolbar is a also a menu.
- Document that the OpenCommand is for the Start menu.
- Several small optimizations to reduce memory usage.
- Updated translations: Hungarian.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-15 23:54:14 -07:00
Khem Raj
804abb58c6
openwsman: Upgrade to 2.8.1 release
Fixes build with cmake4+
Drop upstreamed patches

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-15 00:25:32 -07:00
Martin Jansa
1a2fb37a4c
wxwidgets: enable webkit only with x11 or wayland
* otherwise webkit enabled by default in 7c3dccab64 will
  conflict with no_gui PACKAGECONFIG which is enabled in DISTROs without x11 and wayland
* fixes:
  ERROR: meta-oe/meta-oe/recipes-extended/wxwidgets/wxwidgets_3.2.8.bb:
  wxwidgets: PACKAGECONFIG[webkit] Conflict package config 'no_gui' set in PACKAGECONFIG.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-15 00:25:31 -07:00
Moritz Haase
cafce95171
sysdig: Allow to build with CMake 4+
The latest release seems to have support to build with CMake 4+, but updating
requires major changes to the recipe and so far I haven't managed to get a build
passing. Thus, apply the 'minimum policy version' override instead and backport
one patch to unblock builds with CMake 4.

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-15 00:25:31 -07:00
Moritz Haase
b72fb993b3
minifi-cpp: Backport patch to support builds with CMake 4+
There hasn't been a new upstream release yet that ships the required changes.

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-15 00:25:30 -07:00
Khem Raj
7c3dccab64
wxwidgets: Enable webui and mediactrl packageconfigs by default
these are required by default configuration for python3-wxgtk4

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-13 09:46:09 -07:00
Khem Raj
9117f4f1df
wxwidget: Upgrade to 3.2.8
Forward port patches

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-12 13:50:02 -07:00
Peter Marko
adfee75882
minifi-cpp: upgrade spdlog 1.15.1 -> 1.15.3
Fixes CVE-2025-6140 (in 1.15.2).

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-12 13:50:01 -07:00
Moritz Haase
82177b39ec
upm: Allow to build with CMake 4+
Upstream is inactive, so use the 'minimum policy version' override.

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-11 08:35:05 -07:00
Moritz Haase
2a0b7b4aac
redis-plus-plus: upgrade 1.3.11 -> 1.3.14
Additionally backport a patch to support to build against CMake 4+ that hasn't
made it into a release yet.

Release notes are available at [0].

[0]: https://github.com/sewenew/redis-plus-plus/releases

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-11 08:35:04 -07:00
Alper Ak
1109cc27a5
cmatrix: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:3 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-10 10:46:24 -07:00
Markus Volk
b3d6175ea4
p8platform: allow to build with cmake 4
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-10 10:46:22 -07:00
Alper Ak
ba1117fe79
konkretcmpi: Remove ancient/unmaintained recipe
Remove the konkretcmpi recipe, as the upstream has been inactive for over 8 years.
No new releases, bug fixes or security updates.

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-10 00:05:58 -07:00
Alper Ak
2254a213b8
properties-cpp: Remove ancient/unmaintained recipe
Remove the properties-cpp recipe, as the upstream has been inactive for over 10 years.
No new releases, bug fixes or security updates are expected.

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-10 00:05:57 -07:00
Liu Yiding
2181c17f8e
dialog: Fix install conflict when enable multilib
fix issue that:
file /usr/bin/dialog conflicts between attempted installs of dialog-1.3+20250116-r0.cortexa57 and lib32-dialog-1.3+20250116-r0.armv7at2hf_neon

To be noticed that dialog itself is already symlink now
xxx/image/usr/bin$ ls -l -t
total 888
lrwxrwxrwx 1 userland userland     45 Jul 10 02:15 dialog -> /usr/bin/arm-pokymllib32-linux-gnueabi-dialog
-rwxr-xr-x 1 userland userland 907748 Jul 10 02:15 arm-pokymllib32-linux-gnueabi-dialog

xxx/image/usr/bin$ ls -l -t
total 988
lrwxrwxrwx 1 userland userland      34 Jul 10 02:15 dialog -> /usr/bin/aarch64-poky-linux-dialog
-rwxr-xr-x 1 userland userland 1037624 Jul 10 02:15 aarch64-poky-linux-dialog

after this commit:
xxx/tmp/work/qemuarm64-poky-linux/core-image-minimal/1.0/rootfs/usr/bin$ ls -l -t dialog*
lrwxrwxrwx 1 userland userland 21 Mar  9  2018 dialog -> /usr/bin/dialog-lib64
lrwxrwxrwx 1 userland userland 45 Mar  9  2018 dialog-lib -> /usr/bin/arm-pokymllib32-linux-gnueabi-dialog
lrwxrwxrwx 1 userland userland 34 Mar  9  2018 dialog-lib64 -> /usr/bin/aarch64-poky-linux-dialog

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-10 00:05:57 -07:00
Alper Ak
fea7800935
dlt-daemon: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:17 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 13:35:19 -07:00
Alper Ak
882e039c19
libcbor: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 13:35:18 -07:00
Alper Ak
ad2a75a0ac
mraa: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 13:35:17 -07:00
Alper Ak
2297a31eb4
snappy: Upgrade 1.1.10 -> 1.2.2 to to allow CMake 4+ compatibility
- Dropped patch because already fixed in the newer version.

Changelog:

- We fixed a very old issue of data corruption when compressed size exceeds 4GB.
This can happen when you compress data close to 4GB and it's incompressible, for example, random data.
- Started to use minimum CMake 3.10 because older ones are not planned to be supported.
- Various other small fixes
- We restored old functions/symbols after reports of ABI incompatibility apache/arrow#41058 conda-forge/snappy-feedstock#35 #183
- Level API was added with level 2 support. Compresses 5-10% denser and decompresses 5-10% faster. The compression speed drop is about 20-30%
- Minor fixes

Fix:

| CMake Error at CMakeLists.txt:29 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 09:16:08 -07:00
Alper Ak
26e142a125
cmpi-bindings: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:4 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 09:16:07 -07:00
Alper Ak
a33826618e
qhull: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:71 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 09:16:06 -07:00
Alper Ak
9252b9bab4
hiredis: Upgrade 1.2.0 -> 1.3.0 to allow CMake 4+ compatibility
Changelog:

https://github.com/redis/hiredis/releases/tag/v1.3.0

Fix:

| CMake Error at CMakeLists.txt:1 (CMAKE_MINIMUM_REQUIRED):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 09:16:05 -07:00
Alper Ak
2147652aba
jansson: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 09:16:05 -07:00
Alper Ak
021a2cd286
docopt.cpp: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-08 23:40:32 -07:00
Alper Ak
1857f6b50a
liblightmodbus: Upgrade 2.0.2 -> 3.0 to allow CMake 4+ compatibility
- Drop 0001-cmake-Use-GNUInstallDirs-instead-of-hardcoding-lib-p.patch because it's no longer exists.
- Drop pkgconfig and cmake inherit since library is now header-only and does not require build tools
- Install lightmodbusConfig.cmake for consumers using CMake.

Changelog: https://github.com/Jacajack/liblightmodbus/releases/tag/v3.0

Fix:

| CMake Error at CMakeLists.txt:2 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-08 23:40:32 -07:00
Wang Mingyu
3afbc2b0b8
parallel: upgrade 20250522 -> 20250622
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-08 23:40:29 -07:00
Wang Mingyu
ba15042a9c
libdivecomputer: upgrade 0.8.0 -> 0.9.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-08 23:40:29 -07:00
Wang Mingyu
be2ceaad0d
icewm: upgrade 3.7.5 -> 3.8.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-08 23:40:28 -07:00
Changqing Li
1978c871f1
libblockdev: fix CVE-2025-6019
CVE-2025-6019:
A Local Privilege Escalation (LPE) vulnerability was found in
libblockdev. Generally, the "allow_active" setting in Polkit permits a
physically present user to take certain actions based on the session
type. Due to the way libblockdev interacts with the udisks daemon, an
"allow_active" user on a system may be able escalate to full root
privileges on the target host. Normally, udisks mounts user-provided
filesystem images with security flags like nosuid and nodev to prevent
privilege escalation. However, a local attacker can create a specially
crafted XFS image containing a SUID-root shell, then trick udisks into
resizing it. This mounts their malicious filesystem with root
privileges, allowing them to execute their SUID-root shell and gain
complete control of the system.

Refer:
https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-02 23:27:07 -07:00
Liu Yiding
40d15fc4fa
hwloc: upgrade 2.9.3 -> 2.12.1
Version 2.12.1
--------------
* Add hwloc-calc's --default-nodes option to hwloc-bind and hwloc-info.
* Improve the --best-memattr "default" fallback, try to use "default"
  memory nodes, and add verbose messages and warnings if some
  performance info are incomplete or missing.
  Thanks to Antoine Morvan for the report.
* Fix CPU and memory binding on different locations,
  thanks to Antoine Morvan for the report.
* Add HWLOC_LOCAL_NUMANODE_FLAG_INTERSECT_LOCALITY and enable it by
  default in hwloc-calc --local-memory for finding local NUMA nodes
  that do not exactly match input locations.
  Thanks to Antoine Morvan for the report.
* Fix a possible crash in the x86 backend when Qemu is configured to
  expose multicore/thread CPUs that are actually single-core/thread.
  Thanks to Georg Pfuetzenreuter.

Version 2.12.0
--------------
* Add hwloc_topology_get_default_nodeset() for the set of default
  NUMA nodes.
  - hwloc-calc now has --default-nodes option.
* Rework oneAPI LevelZero support to use zesInit() and avoid the need
  to set ZES_ENABLE_SYSMAN=1 in the environment.
  - zesDriverGetDeviceByUuidExp() is now required in the L0 runtime.
  - ZES/Sysman variants were added in hwloc/levelzero.h to specifically
    handle ZES/Sysman device handles.
* Fix the locality of AMD GPU partitions, thanks to Edgar Leon for
  reporting and debugging the issue.
* Better detect Cray Slingshot NICs, thanks to Edgar Leon.
* Add support for Die objects and Module groups on Windows.
* Only filter-out Dies that are identical to their Packages
  when it applies to all Dies.
* Improve hwloc-calc to handle CPU-less NUMA nodes or platforms with
  heterogeneous memory without requiring --nodeset-output.
* hwloc-calc now accepts counting/listing cpukinds and memory tiers
  with -N and -I cpukind/memorytier.
* The systemd-dbus-api output of hwloc-calc has changed, and
  --nodeset-output-format was added, to support NUMA node outputs.
  Thanks to Pierre Neyron.
* Update NVLink bandwidth and CUDA capabilities up to NVIDIA Blackwell.
* Fix some NUMA syscalls on Linux for platforms with old libc headers.
* Some minor fixes in distances.

Version 2.11.2
--------------
* Add missing CPU info attrs on aarch64 on Linux.
* Use ACPI CPPC on Linux to get better information about cpukinds,
  at least on AMD CPUs.
* Fix crash when manipulating cpukinds after topology
  duplication, thanks to Hadrien Grasland for the report.
* Fix missing input target checks in memattr functions,
  thanks to Hadrien Grasland for the report.
* Fix a memory leak when ignoring NUMA distances on FreeBSD.
* Fix build failure on old Linux distributions without accessat().
* Fix non-Windows importing of XML topologies and CPUID dumps exported
  on Windows.
* hwloc-calc --cpuset-output-format systemd-dbus-api now allows
  to generate AllowedCPUs information for systemd slices.
  See the hwloc-calc manpage for examples. Thanks to Pierre Neyron.
* Some fixes in manpage EXAMPLES and split them into subsections.

Version 2.11.1
--------------
* Fix bash completions, thanks Tavis Rudd.

Version 2.11.0
--------------
* API
  + Add HWLOC_MEMBIND_WEIGHTED_INTERLEAVE memory binding policy on
    Linux 6.9+. Thanks to Honggyu Kim for the patch.
    - weighted_interleave_membind is added to membind support bits.
    - The "weighted" policy is added to the hwloc-bind tool.
  + Add hwloc_obj_set_subtype(). Thanks to Hadrien Grasland for the report.
* GPU support
  + Don't hide the GPU NUMA node on NVIDIA Grace Hopper.
  + Get Intel GPU OpenCL device locality.
  + Add bandwidths between subdevices in the LevelZero XeLinkBandwidth
    matrix.
  + Fix PCI Gen4+ link speed of NVIDIA GPU obtained from NVML,
    thanks to Akram Sbaih for the report.
* Windows support
  + Fix Windows support when UNICODE is enabled, several hwloc features
    were missing, thanks to Martin for the report.
  + Fix the enabling of CUDA in Windows CMake build,
    Thanks to Moritz Kreutzer for the patch.
  + Fix CUDA/OpenCL test source path in Windows CMake.
* Tools
  + Option --best-memattr may now return multiple nodes. Additional
    configuration flags may be given to tweak its behavior.
  + hwloc-info has a new --get-attr option to get a single attribute.
  + hwloc-info now supports "levels", "support" and "topology"
    special keywords for backward compatibility for hwloc 3.0.
  + The --taskset command-line option is superseded by the new
    --cpuset-output-format which also allows to export as list.
  + hwloc-calc may now import bitmasks described as a list of bits
    with the new "--cpuset-input-format list".
* Misc
  + The MemoryTiersNr info attribute in the root object now says how many
    memory tiers were built. Thanks to Antoine Morvan for the report.
  + Fix the management of infinite cpusets in the bitmap printf/sscanf
    API as well as in command-line tools.
  + Add section "Compiling software on top of hwloc's C API" in the
    documentation with examples for GNU Make and CMake,
    thanks to Florent Pruvost for the help.

Version 2.10.0
--------------
* Heterogeneous Memory core improvements
  + Better heuristics to identify the subtype of memory such as HBM,
    DRAM, NVM, CXL-DRAM, etc.
  + Build memory tiers, i.e. sets of NUMA nodes with the same subtype
    and similar performance.
    - NUMA node tier ranks are exposed in the new MemoryTier info
      attribute (starts from 0 for highest bandwidth tier)..
  + See the new Heterogeneous Memory section in the documentation.
* API
  + Add hwloc_topology_free_group_object() to discard a Group created
    by hwloc_topology_alloc_group_object().
* Linux backend
  + Fix cpukinds on NVIDIA Grace to report identical cores even if they
    actually have very small frequency differences.
    Thanks to John C. Linford for the report.
  + Add CXLDevice attributes to CXL DAX objects and NUMA nodes to show
    which PCI device implements which window.
  + Ignore buggy memory-side caches and memory attributes when fake NUMA
    emulation is enabled on the Linux kernel command-line.
  + Add more info attributes in MemoryModule Misc objects,
    thanks to Zubiao Xiong for the patch.
  + Get CPUModel and CPUFamily info attributes on LoongArch platforms.
* x86 backend
  + Add support for new AMD CPUID leaf 0x80000026 for better detection
    of Core Complex and Die on Zen4 processors.
  + Improve Zhaoxin CPU topology detection.
* Tools
  + Input locations and many command-line options (e.g. hwloc-calc -I -N -H,
    lstopo --only) now accept filters such as "NUMA[HBM]" so that only
    objects are that type and subtype are considered.
    - NUMA[tier=1] is also accepted for selecting NUMA nodes depending
      on their MemoryTier info attribute.
  + Add --object-output to hwloc-calc to report the type as a prefix to
    object indexes, e.g. Core:2 instead of 2 in the output of -I.
  + hwloc-info --ancestor and --descendants now accepts kinds of objects
    instead of single types.
    - The new --first option only shows the first matching object.
  + Add --children-of-pid to hwloc-ps to show a hierarchy of processes.
    Thanks to Antoine Morvan for the suggestion.
  + Add --misc-from to lstopo to add Misc objects described in a file.
    - To be combined with the new hwloc-ps --lstopo-misc for a customizable
      lstopo --top replacement.
* Misc
  + lstopo may now configure the layout of memory object placed above,
    for instance with --children-order memory:above:vert.
  + Fix XML import from memory or stdin when using libxml2 2.12.
  + Fix installation failures when configuring with --target,
    thanks to Clement Foyer for the patch.
  + Fix support for 128bit pointer architectures.
  + Remove Netloc.

Changelog: https://github.com/open-mpi/hwloc/blob/v2.12/NEWS

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-02 09:48:26 -07:00
Yoann Congal
f23543fb6e
boinc-client: fix hostname reproducibility
The generated svn_version.h contains the hostname which makes it
non-reproducible. Fix this by removing the hostname from the file.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-30 09:48:59 -07:00
Alexander Kanavin
fc78d37ff0
meta-openembedded/all: adapt to UNPACKDIR changes
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.

I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-25 06:44:52 -07:00
Hongxu Jia
e355e9af79
dialog: fix /usr/bin/dialog not found for multilib
While multilib was enabled, /usr/bin/dialog was not found,
but /usr/bin/lib32-dialog existed

root@intel-x86-64:~# which dialog
which: no dialog in (/usr/local/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin)

root@intel-x86-64:~# which lib32-dialog
/usr/bin/lib32-dialog

Due to commit [2f7b184cda dialogp: By default, dialog_1.3-20250116
renames /usr/bin/dialog to /usr/bin/${HOST_SYS}-dialog.] applied,
it created a symlink for dialog, use BPN to instead of PN to fix
the issue

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-12 06:34:19 -07:00
Bastian Krause
e1b4a4d594
canutils: use https instead of git protocol
The git server at git.pengutronix.de no longer supports the git
protocol, so switch to https.

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:57 -07:00
Bastian Krause
6dcd76f353
libsocketcan: use https instead of git protocol
The git server at git.pengutronix.de no longer supports the git
protocol, so switch to https.

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-11 16:11:57 -07:00
Wang Mingyu
1a01da40ed
parallel: upgrade 20250422 -> 20250522
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:11 -07:00
Wang Mingyu
cc54035137
libzip: upgrade 1.11.3 -> 1.11.4
Changelog:
===========
* Use separate cmake package files for library and programs.
* Improve documentation.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:11 -07:00
Wang Mingyu
8f4704b33a
libusbmuxd: upgrade 2.1.0 -> 2.1.1
Changelog:
==========
- tools: Fix potential issue with select() in case the network fd is higher than the usbmux fd
- Switch to better initializer strategy
- Fix compilation on MSVC
- iproxy: Make sure to print correct socket error messages
- inetcat: Make sure to report correct error messages

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:10 -07:00
Wang Mingyu
e9f35175cd
iotop: upgrade 1.29 -> 1.30
Changelog:
============
- kernel commit 0bf2d83 fixes the problem with struct taskstats, now iotop 1.30
  handles only v15 of the struct in a different way, retaining compatibility
  with both old and new kernels
- show zero current values for exited processes
- flush stdout after each batch run

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:09 -07:00
Wang Mingyu
e0b9734741
icewm: upgrade 3.7.4 -> 3.7.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:09 -07:00
Vijay Anusuri
e970ff8bff
redis: upgrade 6.2.16 -> 6.2.18
Changelog:
https://github.com/redis/redis/releases/tag/6.2.17
https://github.com/redis/redis/releases/tag/6.2.18

Security fixes
==============
* (CVE-2024-46981) Lua script commands may lead to remote code execution
* (CVE-2025-21605) An unauthenticated client can cause an unlimited growth of output buffers

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 07:40:25 -07:00
Chen Qi
acacb59a48
Revert "recipes: adapt to qemu.bbclass refactoring"
This reverts commit 24ff52ba3b.

The original patch was my bad. The patches for oe-core were re-worked,
but I forgot the recall this patch.

In fact, inheriting qemu is needed because it sets a clear barriar
for people to use qemu user mode. And the QEMU_OPTIONS settings
are also in qemu.bbclass.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-29 22:28:02 -07:00
Vijay Anusuri
606849dd40
redis: upgrade 7.2.7 -> 7.2.8
ChangeLog:
https://github.com/redis/redis/releases/tag/7.2.8

Update urgency: SECURITY: There are security fixes in the release.

Security fixes
==================
* (CVE-2025-21605) An unauthenticated client can cause an unlimited growth of output buffers

Bug fixes
=================
* #12817, #12905 Fix race condition issues between the main thread and module threads
* #13863 RANDOMKEY - infinite loop during client pause
* #13877 ShardID inconsistency when both primary and replica support it

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-29 08:20:16 -07:00
Jeroen Hofstee
bc16a3b7f3
socketcand: add recipe
Socketcand allows to transfer socketcan messages over tcp/ip.

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-21 07:39:36 -07:00
Wang Mingyu
180327c8f6
sanlock: upgrade 3.9.5 -> 4.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-21 07:38:26 -07:00
Wang Mingyu
d8be830dce
rsyslog: upgrade 8.2502.0 -> 8.2504.0
0001-tests-disable-the-check-for-inotify.patch
0001-tests-tcpflood.c-Pass-correct-parameter-type-to-send.patch
use-pkgconfig-to-check-libgcrypt.patch
refreshed for 8.2504.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-21 07:38:26 -07:00