summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* udisks2: Hardening measure of CVE-2025-6019walnascar-nextwalnascarChangqing Li12 days2-0/+52
| | | | | | | | | | | | Refer [1], CVE-2025-6019 is strongly related to udisk daemon, and this is a hardening measure related to this. [1] https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt [2] https://security-tracker.debian.org/tracker/CVE-2025-6019 [3] https://ubuntu.com/blog/udisks-libblockdev-lpe-vulnerability-fixes-available Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libblockdev: fix CVE-2025-6019Changqing Li12 days2-0/+32
| | | | | | | | | | | | | | | | | | | | | | CVE-2025-6019: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation. However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system. Refer: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pycares: fix CVE-2025-48945Jiaying Song12 days2-0/+734
| | | | | | | | | | | | | | | | pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS queries are still pending. This results in a fatal Python error and interpreter crash. The vulnerability has been fixed in pycares 4.9.0 by implementing a safe channel destruction mechanism. References: https://nvd.nist.gov/vuln/detail/CVE-2025-48945 Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postfix: fix rootfs file differenceJinfeng Wang12 days2-0/+32
| | | | | | | | Rootfs file differs with the same project configure, add preliminary setting to avoid this. Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-evdev: Fix buildpaths errors and reproducibilityYoann Congal12 days2-2/+119
| | | | | | | | | Add a submitted patch to support the reproducible generation of intermediate file ecodes.c, then, use it to fix the buildpaths errors. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-evdev: Use Yocto kernel headers instead of host'sYoann Congal12 days1-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit 01ebfecf1c94 ("python3-evdev: switch to PEP-517 build backend") did not update the way build arguments are passed to the build making them unused. In python3-evdev case that meant that the build used host kernel headers instead of Yocto's. When host's and Yocto's headers were different (currently the case on Debian 12 as seen on AB[0]), that triggered: | src/evdev/ecodes.c:542:29: error: 'KEY_LINK_PHONE' undeclared (first use in this function); did you mean 'KEY_PICKUP_PHONE'? | 542 | PyModule_AddIntMacro(m, KEY_LINK_PHONE); | | ^~~~~~~~~~~~~~ [...] ERROR: Task (.../../../layers/meta-openembedded/meta-python/recipes-devtools/python/python3-evdev_1.9.1.bb:do_compile) failed with exit code '1' To fix this, use PEP517_BUILD_OPTS with the working (but weird looking) escaping. Now that correct headers are used, their paths end up in the ecode.c file which lead to a buildpaths error, skip the check for this patch. This will be fixed in a following patch. [0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/40/steps/40/logs/stdio Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-can: upgrade 4.4.2 -> 4.5.0Richard Leitner12 days1-1/+4
| | | | | | | | | | | | | | | | | python3-can 4.4.y requires msgpack~=1.0.0, but openembedded-core versions newer than scarthgap provide msgpack 1.1.0 [1], causing "pip check" to fail with the following error: python-can 4.4.2 has requirement msgpack~=1.0.0; platform_system != "Windows", but you have msgpack 1.1.0. This patch resolves the issue by updating python3-can to 4.5.0. [1] https://layers.openembedded.org/layerindex/recipe/66997/ (cherry picked from commit f048d118f2ade5f7d90b919a20960218e245ca00) Cc: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Leitner <dev@g0hl1n.net> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-moteus: Upgrade 0.3.79 -> 0.3.88Richard Leitner12 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | python3-moteus <= 0.3.87 requires numpy<2 [1], but openembedded-core versions newer than styhead provide numpy 2.x [2], causing "pip check" to fail with the following error: moteus 0.3.87 has requirement numpy<2, but you have numpy 2.3.0. This patch resolves the issue by updating python3-moteus to 0.3.88. [1] https://github.com/mjbots/moteus/issues/89 [2] https://layers.openembedded.org/layerindex/recipe/51338/ (cherry picked from commit 9af65f1680d2bb27e7c8911e8912ddeb2e38fe41) (cherry picked from commit 7414d1147ee31fda335df00a7723fa80290d20ed) (cherry picked from commit 980f7e5da4745ee56a42833114bc990412b747be) (cherry picked from commit c2c4428c313cf2de5a3af4b4932e791172000d1c) (all cherry-picks were squashed to this commit) Cc: Leon Anavi <leon.anavi@konsulko.com> Cc: Wang Mingyu <wangmy@fujitsu.com> Cc: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Leitner <dev@g0hl1n.net> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* netcf: remove EXTRA_AUTORECONFChangqing Li12 days1-2/+0
| | | | | | | | | | | Refer [1], Makefile.am already set ACLOCAL_AMFLAGS = -I gnulib/m4, set EXTRA_AUTORECONF will cause do_configure failure with long build path, just drop EXTRA_AUTORECONF. [1] https://git.openembedded.org/openembedded-core/commit/meta/classes-recipe/autotools.bbclass?id=e718d1be2c4fb54cf363c23f929358e1be68c724 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xmlsec1: avoid hardcoded ${RECIPE_SYSROOT} in xmlsec1-gnutls.pcJiaying Song12 days1-2/+5
| | | | | | | | | | | Fix do_package_qa error by removing ${RECIPE_SYSROOT} from the installed xmlsec1-gnutls.pc file. This ensures the generated .pc file does not leak build-time paths, complying with QA checks. Fixes QA error: ERROR: xmlsec1-1.3.7-r0.wr2500 do_package_qa: QA Issue: File /usr/lib/pkgconfig/xmlsec1-gnutls.pc in package xmlsec1-dev contains reference to TMPDIR [buildpaths] Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* glade: fix CVE-2020-36774Zhang Peng12 days2-0/+55
| | | | | | | | | | | | | | | | CVE-2020-36774: plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash). Reference: [https://nvd.nist.gov/vuln/detail/CVE-2020-36774] Upstream patches: [https://gitlab.gnome.org/GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17] Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* glade: update 3.22.2 -> 3.36.0Jason Schonberg12 days2-32/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix HOMEPAGE License Update: COPYING.GPL - whitespace changes and change of address of the Free Software Foundation. COPYING.LGPL - whitespace changes and change of address of the Free Software Foundation. | checking for itstool... no | configure: error: itstool not found add itstool-native to DEPENDS to address configure failure. | ERROR: glade-3.36.0-r0 do_configure: QA Issue: AM_GNU_GETTEXT used but no inherit gettext [configure-gettext] inherit gettext to address QA error. The code of gladeui/glade-command.c has changed from using G_OBJECT (prop) to GLADE_PROPERTY (prop) G_OBJECT (widget) to GLADE_WIDGET (widget) thus resolving the incompatible pointer types seen in glade 3.22.2. Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (master: ecca54d9307a523d6f644e70294a37d6f89548ee) Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* open-vm-tools: fix CVE-2025-22247Yogita Urade12 days2-0/+379
| | | | | | | | | | | | | | | | VMware Tools contains an insecure file handling vulnerability. \xa0A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-22247 Upstream patch: https://github.com/vmware/open-vm-tools/blob/CVE-2025-22247.patch/CVE-2025-22247-1230-1250-VGAuth-updates.patch Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* canutils: use https instead of git protocolBastian Krause12 days1-1/+1
| | | | | | | | The git server at git.pengutronix.de no longer supports the git protocol, so switch to https. Signed-off-by: Bastian Krause <bst@pengutronix.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libsocketcan: use https instead of git protocolBastian Krause12 days1-1/+1
| | | | | | | | The git server at git.pengutronix.de no longer supports the git protocol, so switch to https. Signed-off-by: Bastian Krause <bst@pengutronix.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: upgrade 17.4 -> 17.5Wang Mingyu2025-06-204-21/+12
| | | | | | | | | | | | 0003-configure.ac-bypass-autoconf-2.69-version-check.patch 0004-config_info.c-not-expose-build-info.patch not-check-libperl.patch refreshed for 17.5 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* valkey: upgrade 8.1.0 -> 8.1.1Wang Mingyu2025-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | ChangeLog: https://github.com/valkey-io/valkey/releases/tag/8.1.1 Security fixes (CVE-2025-21605) Limit output buffer for unauthenticated clients Bug fixes Fix the build on less common platforms in zmalloc.c Fix: add samples to stream object consumer trees Fix crash during TLS handshake with I/O threads Fix cluster slot stats assertion during promotion of replica Fix panic in primary when blocking shutdown after previous block with timeout Ignore stale gossip packets that arrive out of order Fix incorrect lag reported in XINFO GROUPS Fix engine crash on module client blocking during keyspace events Avoid shard id update of replica if not matching with primary shard id Only enable defrag for vendored jemalloc Allow scripts to support null characters again Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: update 1.34.4 -> 1.34.5Jason Schonberg2025-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.5 Security: CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-6hxc-62jh-p29v Changes: Restore Windows XP support. PR #958 Bugfixes: A missing mutex initialization would make busy polling for configuration changes (platforms other than Windows, Linux, MacOS) eat too much CPU PR #974 Pkgconfig may be generated wrong for static builds in relation to -pthread PR #965 Localhost resolution can fail if only one address family is in /etc/hosts PR #947 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: upgrade 1.34.3 -> 1.34.4Jason Schonberg2025-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.4 Changes: QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938 Bugfixes: Empty TXT records were not being preserved. PR #922 docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910 license: some files weren't properly updated. PR #920 Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935 CMake: set policy version to prevent deprecation warnings. PR #932 CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933 Update to latest autoconf archive macros for enhanced system compatibility. PR #936 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* jq: upgrade 1.7.1 -> 1.8.0Vijay Anusuri2025-06-201-5/+2
| | | | | | | | | | | | | | | | | | | | | Changelog: ========== https://github.com/jqlang/jq/releases/tag/jq-1.8.0 Security fixes * CVE-2024-23337: Fix signed integer overflow in jvp_array_write and jvp_object_rehash. @itchyny de21386 The fix for this issue now limits the maximum size of arrays and objects to 536870912 (2^29) elements. * CVE-2024-53427: Reject NaN with payload while parsing JSON. @itchyny a09a4df The fix for this issue now drops support for NaN with payload in JSON (like NaN123). Other JSON extensions like NaN and Infinity are still supported. * CVE-2025-48060: Fix heap buffer overflow in jv_string_vfmt. @itchyny c6e0416 * Fix use of uninitialized value in check_literal. @itchyny #3324 * Fix segmentation fault on strftime/1, strflocaltime/1. @itchyny #3271 * Fix unhandled overflow in @base64d. @emanuele6 #3080 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: upgrade 6.2.16 -> 6.2.18Vijay Anusuri2025-06-201-1/+1
| | | | | | | | | | | | | | Changelog: https://github.com/redis/redis/releases/tag/6.2.17 https://github.com/redis/redis/releases/tag/6.2.18 Security fixes ============== * (CVE-2024-46981) Lua script commands may lead to remote code execution * (CVE-2025-21605) An unauthenticated client can cause an unlimited growth of output buffers Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* check-version-mismatch.bbclass: make it work for walnascarChen Qi2025-06-201-1/+32
| | | | | | | | | The oe-core master has qemu.bbclass refactoring, but walnascar does not. So we will need to copy all the needed functions and settings from qemu.bbclass here to make things work. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* redis: upgrade 7.2.7 -> 7.2.8Vijay Anusuri2025-06-2010-1/+1
| | | | | | | | | | | | | | | | | | | | ChangeLog: https://github.com/redis/redis/releases/tag/7.2.8 Update urgency: SECURITY: There are security fixes in the release. Security fixes ================== * (CVE-2025-21605) An unauthenticated client can cause an unlimited growth of output buffers Bug fixes ================= * #12817, #12905 Fix race condition issues between the main thread and module threads * #13863 RANDOMKEY - infinite loop during client pause * #13877 ShardID inconsistency when both primary and replica support it Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* chrony: use inherit_defer for conditional inherit of useraddClayton Casciato2025-06-201-1/+1
| | | | | | | | | | | | [ Upstream commit 63df976d8eec0fa714e8da30f4333f8af23c57d3 ] conditionnal inherit is missed when PACKAGECONFIG privdrop is activated after this inherit, eg in .bbappend. Signed-off-by: Andreas Fenkart <afenkart@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xfce4 update HOMEPAGEsJ. S.2025-06-2027-27/+27
| | | | | | | | | | | | | | https://goodies.xfce.org/ states "Starting this month (November 2019), a project is starting to migrate the goodies.xfce.org documentation to https://docs.xfce.org/start. The goal is to remove deprecated projects and, eventually, de-commission the goodies.xfce.org URLs. Additional information will be posted on https://wiki.xfce.org/projects/goodies-decomm/start as the project proceeds." This patch updates the URLs being used in the HOMEPAGEs to reflect where the address is actually resolving. Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* kernel-hardening-checker: Set recipe as machine specificChris Paterson2025-06-201-0/+2
| | | | | | | | | | | | | | | | | | This fixes an issue where running the test_machine_signatures yocto-layer-check tst case fails when using a BSP layer that depends on meta-oe. e.g. bitbake-diffsigs -t kernel-hardening-checker do_create_package_spdx -s 6397093de4edf0eb568d56526704b178944f788bf0d0bdc8f6ce1b181ee00baa 8adadf9e2c0461de5c377b9a0590f6c05b03ff8c1b8eb89fff94e5c3235a0c9a Hash for task dependency linux-cip:do_create_spdx changed from 4db4e1b424d7969ba80c8e03450ec70e88bab266b1e43054381ab1c572cf580a to bfebcc3195aa0106630e2d3cf7fc8335df8768ad059143d54f715b399eea8b69 Hash for task dependency linux-cip:do_collect_spdx_deps changed from ae22171bab2f456b4743fb0ca05de91a16b65fe6bbddd4cb97d2ed04e5d4f651 to e43ed3f2cee8198d91535ce38057d996cdb8e72c10d7509c2542e6676782ebdc Hash for task dependency linux-cip:do_unpack changed from 6cf2e7fd1e1d67578f6bed761378953f91a8a58df0107698cc259c1989674da1 to 5d98fa31606f06f0e4416f9df82f97fdc6f63799b65486912dc4a3fc7f871f3c basehash changed from 556fad4e4426a9390de6ccdcc631aeb35d391ccc9676f6a4810237e2f501cf85 to 72beced62420cc92f276f8a31cd4de3d6f9e3877b14fff9d82ff7d863855b7da Variable MACHINE value changed from 'hihope-rzg2h' to 'hihope-rzg2m' Link: https://lists.openembedded.org/g/openembedded-devel/topic/issue_meta_oe_walnascar/113168928 Signed-off-by: Chris Paterson <chris.paterson2@renesas.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* spectre-meltdown-checker: Set recipe as machine specificChris Paterson2025-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | This fixes an issue where running the test_machine_signatures yocto-layer-check tst case fails when using a BSP layer that depends on meta-oe. e.g. bitbake-diffsigs -t spectre-meltdown-checker do_package_write_rpm -s 3efb5226ab4e83ef90cf33f0a474314d345c675707b3476dde1d3c42f79cc3d0 e268e68c02265542bf80fd51f8c4f26f63b668746639826fbdb870d91e2ba2fd Hash for task dependency linux-cip:do_packagedata changed from 7feeecd5cbda152da452be41a8b0babe91e48f3097c4e5bb33f6dc426dd203e3 to f466574a3f8a32b23393fe4154b4fb6d172bb75d82ea5424405386d00c30b57d Hash for task dependency linux-cip:do_package changed from 2281027d1d4da253d371c2c0aebb829aa262b9b2a563247a3bd95621621abdb6 to a8d245eb965ab2f20b4a9d620e5c3af1e4437a5e08665b05f5c52706454642eb Hash for task dependency linux-cip:do_install changed from 75e91702bbcdd891ada3b08d884f6842fa94c01dcb52917dc0d0e85239799569 to 2cb117e47f68e5e1ba21b19934e1be2a14501d9ec72e0565f409dbbdd024ff24 Hash for task dependency linux-cip:do_compile changed from 015e60756358bf4b46b1c2570d70c334285b38c54d8c515c1fd301044a73e123 to ce97c36a37c0438254ad429e9c53a7520abade5e513180bc52850b683de4df5c Hash for task dependency linux-cip:do_configure changed from 188050940f59e4ec4a20bea82f6a9b8261126e716fec07bacbeadbb9f5989882 to 111fa8c18085e992ce52a0bb1ee53276e36720092288dead4f70cf3a64f8fb05 Hash for task dependency linux-cip:do_deploy_source_date_epoch changed from 5e39db86fcde43fb0d0afd08e2d22c4c2e6b2fbf1e2e9017f1cc6f541c6798b0 to f621317487884d32348672899270c7841f7d4739140e35eb09d2378fccd90213 Hash for task dependency linux-cip:do_patch changed from a8da5639ab6a39a57122a59758aad964d199a10ce0ae5a3e36f17e6830ee3f97 to 77fbb8bbb5e3c0141b731b3afc001370f28ba796f09b6361de04c93ec2f165b9 Hash for task dependency linux-cip:do_kernel_metadata changed from 0099cc1d4d35547ff1e4b1d448934304c1708ecfc42abaf38de23abdaf986310 to 08b1d5c2fe80e6a074b8ac8a27370caf0f8713eae85ca0d861140d28e443c59c Hash for task dependency linux-cip:do_kernel_checkout changed from aa1bb0aeef7b4aa5ec2d01d3a99d7addd3a262b496962c9bfea9345bbccfac1e to ffb0021b913cdad6ab0bdd7e7a51c49c4afbc24087d4b410aa097faa73bf2e8b Hash for task dependency linux-cip:do_symlink_kernsrc changed from 14695f6b8d892af536305c58a130d67fdca751a0dabeba2edf708787d067c8ba to 9d9d7511d5feed853c5e450dd93994e0f0b263c9e6d5d389e8c85471696e5df2 Hash for task dependency linux-cip:do_unpack changed from 6cf2e7fd1e1d67578f6bed761378953f91a8a58df0107698cc259c1989674da1 to 5d98fa31606f06f0e4416f9df82f97fdc6f63799b65486912dc4a3fc7f871f3c basehash changed from 556fad4e4426a9390de6ccdcc631aeb35d391ccc9676f6a4810237e2f501cf85 to 72beced62420cc92f276f8a31cd4de3d6f9e3877b14fff9d82ff7d863855b7da Variable MACHINE value changed from 'hihope-rzg2h' to 'hihope-rzg2m' Link: https://lists.openembedded.org/g/openembedded-devel/topic/issue_meta_oe_walnascar/113168928 Signed-off-by: Chris Paterson <chris.paterson2@renesas.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smarty: Drop allarchChris Paterson2025-06-201-3/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | allarch is causing issues when running yocto-layer-check for test_machine_signatures on a BSP layer that depends on meta-oe: bitbake-diffsigs -t smarty do_package_qa -s 416787047ca76d43b094860cf617234f957d11895e7b7be20cbe9203289f27e1 1e482ffc1ead26bcd1f89d4dcf92e497dd6223933941b3ec6e483cb0072c9f5d Hash for task dependency php:do_packagedata changed from 6bfffcbbcd4507bd0be6cf3138583b92d82e75099c13dcf58363aaa938ed6f9a to 24c5373ca06af905e35fa48b7ca3477283add52fc54348fee9dd5a28efd1bc05 Hash for task dependency php:do_package changed from cc9a8c60aeb862dd19eda30bd6ed137beb2ddd8b5b730a8b996fc58681a2ccdd to e8d7465054669b47fcf933f060e1fb69a3871d1d1e3d5b9a9610644edd17d2a8 Hash for task dependency bzip2:do_packagedata changed from c00269772615a22d528f4205b4a1ce88a2325c9acd08de20445d20e22e255b1c to c3629ef771a2b92ed5eb9c36cffd96557537542e2bae0568e191225af0c5f4fc Hash for task dependency bzip2:do_package changed from bf71dc096cc85a6f6cdddebb908709f47b55ed8401a7f56fc7810484f8d0a226 to 3326e837bd452b74e32ab6b4f96fca7ed69e4d5cbbdd57acc6c9325201638cc4 Hash for task dependency bzip2:do_install changed from 9e253b0c997975295046712d52a305e50d73148a00b6970aa39d5e548d66dc91 to a78a2933308498a16e713a934c1cc59480d5fd4c8bedf6b055c2ef6608836f78 Hash for task dependency bzip2:do_compile changed from b515ce5b36cc71307ce02f27a4b5187482acfeeddc74e6679c60ebef46ab6e1d to fe7f086dbf72dc1924bf9b4f7ddd54e519627fd7782434b50f67b245ce72073f Hash for task dependency bzip2:do_configure changed from 52680e9abaad7c7ec1ba6098f965bfd991924a5ce1a57db73725eb8917cfda31 to 3395d5acb3b7d42a4ff2cfd010d4d05c0595f91d36f8d9cd9888a367987ddb4f Hash for task dependency bzip2:do_deploy_source_date_epoch changed from b3cb06d6eb2fcd84f94c4f66c8e68dcb4f277622e1e3e5809fe2ea02ab589b31 to a6eade80d249c35f50b8b4d7ba5d72ccaed07068dde6529a5f219b918a7c5294 basehash changed from f275277525924e477f47fb1b0bd4eb782ef2818fa2bd930159cd5ae5960f1e91 to 7aaec6b4c1f6b5ce5726d99f3a040678c1e49a5aa6f2f22d28503563b8e6fb32 Variable TUNE_CCARGS value changed: " [--mcpu=cortex-a57.cortex-a53+crc-] {+-mcpu=cortex-a57+crc+} -mbranch-protection=standard" allarch was introduced to smarty in 0f33416ad038 ("smarty: update 4.5.5 -> 5.4.2") which was first introduced for Walnascar hence the issue wasn't caught until now. Removing the allarch inheritance fixes the issue. Also remove extra whitespace after comment. Link: https://lists.openembedded.org/g/openembedded-devel/topic/issue_meta_oe_walnascar/113168928 Signed-off-by: Chris Paterson <chris.paterson2@renesas.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-posix-ipc: improve build_supportMartin Jansa2025-06-204-0/+166
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes: https://lists.openembedded.org/g/openembedded-devel/message/117255 DEBUG: Executing shell function do_compile * Getting build dependencies for wheel... /usr/lib/ld-linux-aarch64.so.1: No such file or directory Traceback (most recent call last): File "TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/recipe-sysroot-native/usr/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 389, in <module> main() ~~~~^^ File "TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/recipe-sysroot-native/usr/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 373, in main json_out["return_val"] = hook(**hook_input["kwargs"]) ~~~~^^^^^^^^^^^^^^^^^^^^^^^^ File "TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/recipe-sysroot-native/usr/lib/python3.13/site-packages/pyproject_hooks/_in_process/_in_process.py", line 143, in get_requires_for_build_wheel return hook(config_settings) File "TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/recipe-sysroot-native/usr/lib/python3.13/site-packages/setuptools/build_meta.py", line 334, in get_requires_for_build_wheel return self._get_build_requires(config_settings, requirements=[]) ~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/recipe-sysroot-native/usr/lib/python3.13/site-packages/setuptools/build_meta.py", line 304, in _get_build_requires self.run_setup() ~~~~~~~~~~~~~~^^ File "TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/recipe-sysroot-native/usr/lib/python3.13/site-packages/setuptools/build_meta.py", line 320, in run_setup exec(code, locals()) ~~~~^^^^^^^^^^^^^^^^ File "<string>", line 23, in <module> File "TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/posix_ipc-1.2.0/build_support/discover_system_info.py", line 409, in discover d["QUEUE_PRIORITY_MAX"] = sniff_mq_prio_max() ~~~~~~~~~~~~~~~~~^^ File "TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/posix_ipc-1.2.0/build_support/discover_system_info.py", line 238, in sniff_mq_prio_max if max_priority < 0: ^^^^^^^^^^^^^^^^ TypeError: '<' not supported between instances of 'str' and 'int' ERROR Backend subprocess exited when trying to invoke get_requires_for_build_wheel WARNING: TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/temp/run.do_compile.2736023:168 exit 1 from 'nativepython3 -m build --no-isolation --wheel --outdir TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/dist TOPDIR/BUILD/work/raspberrypi4_64-webos-linux/python3-posix-ipc/1.2.0/posix_ipc-1.2.0' WARNING: Backtrace (BB generated script): On some hosts. Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pipewire: Avoid having pipewire-native depend on pipewirePeter Kjellerstedt2025-05-171-1/+3
| | | | | | | | | Make pipewire-pulse only depend on pipewire-modules-protocol-pulse for target. Otherwise the magic behind BBCLASSEXTEND and PACKAGES_DYNAMIC results in pipewire-native ending up depending on pipewire (for target). Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-posix-ipc: switch to PEP-517 build backendKhem Raj2025-05-171-1/+1
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-posix-ipc: upgrade 1.1.1 -> 1.2.0Wang Mingyu2025-05-172-49/+2
| | | | | | | | | | | | 0001-Use-default-cc-from-environment-variable.patch removed since it's not available in 1.2.0 License-Update: Reorg and rename files; add pyproject.toml Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lvm2: correct PKGV for package libdevmapperChangqing Li2025-05-171-0/+23
| | | | | | | | | | | | | | | | | | | | Refer [1] about relations about recipe lvm2 and libdevmapper, package libdevmapper is generated by recipe lvm2. And lvm2 and libdevmapper has different release version, refer [2], VERSION is for lvm2, and VERSION_DM is for libdevmapper. Refer following way in configure.ac to get PKGV of libdevmapper: [snip of configure.ac] DM_LIB_PATCHLEVEL=$($AWK -F '[[-. ]]' '{printf "%s.%s.%s",$1,$2,$3}' "$srcdir"/VERSION_DM) [snip] Other distros like ubuntu, suse also use VERSION_DM as version of libdevmapper [1] https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=3f64779eae2d8312f569bee863f90ec4f8176e6c [2] https://sourceware.org/git/?p=lvm2.git;a=tree Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* turbostat: make turbostat's version align with kernel versionChangqing Li2025-05-172-0/+8
| | | | | | | | | | | | | | | | | * Current PV 3.4 is the kernel version when the recipe is newly added, set PKGV to KERNEL_VERSION to make it always align with kernel version * turbostat has its runtime version, set CHECK_VERSION_PV to this version to mute the version mismatch warning [snip of turbostat.c] void print_version() { fprintf(outf, "turbostat version 2024.07.26 - Len Brown <lenb@kernel.org>\n"); } [snip] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libuser: correct the package versionChangqing Li2025-05-172-0/+26
| | | | | | | | correct the package version in configure.ac Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* version-check.conf: mute bridge-utils version mismatch warningChangqing Li2025-05-171-0/+1
| | | | | | | | | | | | | | Runtime version of brctl is 1.7.1, but the configure.ac set version as 1.7 (AC_INIT([bridge-utils],[1.7])). And refer [1], this utility is DEPRECATED, only critical bug fixes only, so it is nearly not possible to correct from upstream, so mute this warning since it has no critical influence. [1] https://git.kernel.org/pub/scm/network/bridge/bridge-utils.git/commit/?h=main&id=ab8a2cc330253321be7bc69dea88bfaa3d48415e Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-pyyaml-include: update SRCREVChangqing Li2025-05-171-1/+5
| | | | | | | | | | | | | | * Current SRCREV is v2.2a1, update to v2.2 * pyyaml-include use setuptools_scm to get package version, but it not works well with git shallow clone, and will return a invalid version like 0.1.dev1+gc5be2b7, make pyyaml-include is installed to a wrong path: /usr/lib/python3.13/site-packages/pyyaml_include-0.1.dev1+gc5be2b7.dist-info, and also version in PKG-INFO is wrong. export SETUPTOOLS_SCM_PRETEND_VERSION to get correct package version. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* version-check.conf: add CHECK_VERSION_PV for pn-netperfChangqing Li2025-05-171-0/+1
| | | | | | | | | | | | | | | | | For netperf, current PV is 2.7.0+git, and the SRCREV is newer than 2.7.0, and there is no tag 2.7.1, the latest tag is in 2015, refer [1], so it is not possile for us to make PV align with the runtime version below by update SRCREV now, add CHECK_VERSION_PV for pn-netperf to mute the version mismatch waring $netserver -V Netperf version 2.7.1 [1] https://github.com/HewlettPackard/netperf Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* poppler: upgrade 25.01.0 -> 25.04.0Yogita Urade2025-05-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes fix for CVE-2025-32364 and CVE-2025-32365 Changelog: =========== core: * Properly verify adbe.pkcs7.sha1 signatures * Improve errors on signing failure * Allow empty outline titles * Fix error in Distinguished Name parsing * Fix build with Android API < 29 * Fix parsing Level PG document string * Internal code improvements * Fix crashes in malformed documents utils: * pdfcairo: Fix document unit for SVG output cpp: * Add document::form_type * Add document::has_javascript build system: * cmake: Use modern Python3 cmake module Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apache2: Scrub -ffile-prefix-map in build.nice fileKhem Raj2025-05-171-1/+1
| | | | | | | | | Fixes QA Issue: File /usr/libexec/apache2/build/config.nice in package apache2-dev contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f00a3f153a0b2a1bd9e77f24f857df12b41bcbba) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: upgrade 8.4.5 -> 8.4.6Wang Mingyu2025-05-172-8/+5
| | | | | | | | | | 0003-iconv-fix-detection.patch refreshed for 8.4.6 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 250084b15e7b7bd6a4d9faeb3d1db6551504830a) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* catch2: upgrade 3.8.0 -> 3.8.1Yi Zhao2025-05-171-1/+1
| | | | | | | | | | ChangeLog: https://github.com/catchorg/Catch2/releases/tag/v3.8.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 4e54d20446c509c35d030bd411a767fae8f36c3d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: upgrade 1.34.2 -> 1.34.3Jason Schonberg2025-05-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.3 Changes: Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906 Bugfixes: Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911 Android: <=7 needs sys/system_properties.h a70637c Android: CMake needs -D_GNU_SOURCE and others. PR #915 TSAN warns on missing lock, but lock isn't actually necessary. PR #915 ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558 ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7 Fix typos in man pages. PR #905 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d8eaa791dd9836a3bcba7590d208e8bdea9ef5b0) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* c-ares: upgrade 1.34.1 -> 1.34.2Jason Schonberg2025-05-171-1/+1
| | | | | | | | | | | | | Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.2 This release contains a fix for downstream packages detecting the c-ares version based on the contents of the header file rather than the distributed pkgconf or cmake files. Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b0cc9ddc32e9e81a95606cb47bd7a5bf9b674a26) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-networking/README.md: Correct the branch for dependent layersPeter Kjellerstedt2025-05-171-3/+3
| | | | | | | | | | | | This was missed in commit 0d2d2d193a1619b6dbebaf335f1ef785478049e3. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> --- PATCHv2: * Added my Signed-off-by. * Removed unintentional Change-Id.
* meta-openemnedded: Add myself as walnascar maintainerArmin Kuster2025-04-1612-59/+53
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cmatrix: Improve reproducibility patch to handle libdir!=/usr/libYoann Congal2025-04-121-4/+4
| | | | | | | | | | | | | The upstream code basically hard-code libdir to /usr/lib. This was hidden by the upstream non-reproducible path existence check. Improve the reproducibility patch to use the cmake variables derived from $libdir and $datadir : CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_DATAROOTDIR. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Reported-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pmtools: remove recipesChangqing Li2025-04-103-118/+2
| | | | | | | | | | | | | Remove this not maintained recipe. The latest commit of pmtools is 12 years ago. And it generates 3 binaries: acpidump/acpixtract/madt, but there is a recipe acpica in oe-core provides acpidump/acpixtract, and according to README.madt, it is hacked out from Linux kernel, if someone requests it, mayb user can add one recipe similar like turbostat. [1] https://github.com/anyc/pmtools/tree/master Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhrystone: fix build error with gcc-15mark.yang2025-04-102-24/+33
| | | | | | | | | | | | | | * fix too many arguments error dhry_1.c: In function 'main': dhry_1.c:176:23: error: too many arguments to function 'Func_1'; expected 0, have 2 176 | if (Enum_Loc == Func_1 (Ch_Index, 'C')) | ^~~~~~ ~~~~~~~~ dhry_1.c:33:17: note: declared here 33 | Enumeration Func_1 (); | ^~~~~~ Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lmbench: fix build error with gcc-15mark.yang2025-04-102-0/+253
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * see more details http://errors.yoctoproject.org/Errors/Details/851798/ lat_rpc.c:172:1: error: conflicting types for 'client_rpc_xact_1'; have 'char *(char *, CLIENT *)' {aka 'char *(char *, struct __rpc_client *)'} 172 | client_rpc_xact_1(char *argp, CLIENT *clnt) | ^~~~~~~~~~~~~~~~~ bench.h:349:14: note: previous declaration of 'client_rpc_xact_1' with type 'char *(void)' 349 | extern char *client_rpc_xact_1(); | ^~~~~~~~~~~~~~~~~ lat_rpc.c: In function 'rpc_xact_1': lat_rpc.c:189:1: warning: old-style function definition [-Wold-style-definition] 189 | rpc_xact_1(msg, transp) | ^~~~~~~~~~ lat_rpc.c:192:1: error: number of arguments doesn't match prototype 192 | { | ^ bench.h:348:14: error: prototype declaration 348 | extern char *rpc_xact_1(); | ^~~~~~~~~~ Fix errors due to old-style function declarations The code was using old-style function declarations without proper prototypes, which causes compilation errors with newer GCC versions. This patch updates the function declarations to use modern C syntax with proper parameter types. Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-19 08:58:43 +0000