summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* xmlsec1: Switch SRC_URI to use github releaseKhem Raj2024-11-191-1/+1
| | | | | | | | | | This ensures that we do not have to do the toggling from releases to old-release in LTS release branches Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Jiaying Song <jiaying.song.cn@windriver.com> (cherry picked from commit 24048ef4b084385b513a75792c65e7321d4164e0) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vlock: fix do_fetch errorJiaying Song2024-11-191-1/+1
| | | | | | | | | | | Change the SRC_URI to the correct value due to the following error: WARNING: vlock-2.2.3-r0.vr2401 do_fetch: Failed to fetch URL http://distfiles.gentoo.org/distfiles/vlock-2.2.3.tar.gz, attempting MIRRORS if available Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 784942b68ef0a9533defee6c6f3d695e1c02cd3f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nmap: Fix off-by-one overflow in the IP protocol table.Wang Mingyu2024-11-192-0/+166
| | | | | | | | | Add patch to fix core dumped error when using "nmap -sO" Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 6a5b26d467c692c3537aaebf9bd088736dc93dc4) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: cleanupJ. S.2024-11-192-118/+0
| | | | | | | | | | | | Drop two patches which haven't been referenced by the nodejs recipe since the 20.11.0 version checkin. 0001-build-fix-build-with-Python-3.12.patch 0001-gyp-resolve-python-3.12-issues.patch Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 2698039ac432d861465b84fc650fcaa8526c8a3c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xmlrpc-c: update SRCREVMartin Jansa2024-11-191-1/+1
| | | | | | | | | | | | | | | | * github repo was force pushed and git history re-written since 2018 commit: 69ee98df Release 1.43.07 * $ git branch -a --contains 352aeaa9ae49e90e55187cbda839f2113df06278 $ * $ git diff 352aeaa9ae49e90e55187cbda839f2113df06278 08b052692b70171a6fcb437d4f52a46977eda62e $ * so at least the 1.59.01 content is the same Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* kernel-selftest: Update to allow for turning on all testsRyan Eatmon2024-11-191-16/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | In testing adding in more kernel-selftests there were a number of issues that arose that require changes that are more appropriate for the main recipe and not a bbappend. 1) Stop looping over TEST_LIST ourselves and use the TARGETS="" provided by the kernel-sefltest Makefiles. This correctly sets up various variables that the selftest Makefiles all need. Also, do_install becomes cleaner because the main Makefile already installs the list of tests and the top level script. 2) Add DEBUG_PREFIX_MAP to the CC setting to avoid some "buildpaths" QA errors. 3) Add two INSANE_SKIPS for "already-stripped" and "ldflags". Some of the selftest Makefiles are adding flags to their compiles that basically break the above checks. Since these compiles are not really meant as user level tools and instead testing, it should be ok to just always set INSANE_SKIP for these two. Signed-off-by: Ryan Eatmon <reatmon@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit dc6d6e06aa3394d1f4db38d63f06d5bec43426b8) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* rsyslog: Enable 64bit atomics checkKhem Raj2024-11-191-5/+6
| | | | | | | | | | | Build checks for this during configure but the test is a runtime test, which does not work when cross-compiling, therefore prescribe this by caching it for architecture/compiler options where it will work ok. Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 91c7ac099beca35f7081facd82bee27d9aaf46ba) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sound-theme-freedesktop: Update SRC_URILiyin Zhang2024-11-191-1/+1
| | | | | | | Signed-off-by: Liyin Zhang <liyin.zhang.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 3fbeee6aa5c39dea65d89fc32e5495742250d585) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup: fix udev PACKAGECONFIGMarkus Volk2024-11-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit removed the lvm2-udevrules package. [https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=c37c867e1adddd6fa39cf3f3d4c6688ea6dc825a] Align accordingly to avoid error at do_rootfs Error: Problem 1: package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libblockdev.so.3()(64bit), but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libbd_utils.so.3()(64bit), but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libblockdev >= 3.2.0, but none of the providers can be installed - package gvfs-1.56.0-r0.corei7_64 from oe-repo requires udisks2, but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12()(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.0)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.4)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.7)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires cryptsetup >= 2.7.5, but none of the providers can be installed - conflicting requests - nothing provides lvm2-udevrules needed by cryptsetup-2.7.5-r0.corei7_64 from oe-repo Problem 2: package gvfs-1.56.0-r0.corei7_64 from oe-repo requires udisks2, but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libblockdev.so.3()(64bit), but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libbd_utils.so.3()(64bit), but none of the providers can be installed - package udisks2-2.10.1-r0.corei7_64 from oe-repo requires libblockdev >= 3.2.0, but none of the providers can be installed - package gvfsd-trash-1.56.0-r0.corei7_64 from oe-repo requires libgvfscommon.so()(64bit), but none of the providers can be installed - package gvfsd-trash-1.56.0-r0.corei7_64 from oe-repo requires libgvfsdaemon.so()(64bit), but none of the providers can be installed - package gvfsd-trash-1.56.0-r0.corei7_64 from oe-repo requires gvfs >= 1.56.0, but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12()(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.0)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.4)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires libcryptsetup.so.12(CRYPTSETUP_2.7)(64bit), but none of the providers can be installed - package libblockdev-3.2.0-r0.corei7_64 from oe-repo requires cryptsetup >= 2.7.5, but none of the providers can be installed - conflicting requests - nothing provides lvm2-udevrules needed by cryptsetup-2.7.5-r0.corei7_64 from oe-repo (try to add '--skip-broken' to skip uninstallable packages) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1ca8df16af411871e10f268064570146cdef54cb) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* jansson: add JSON_INTEGER_IS_LONG_LONG for cmakeChen Qi2024-11-192-0/+52
| | | | | | | | | | | This macro is documented, so it should be consistent across different build systems. It's defined in autotools, but not cmake. Add it for cmake. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a3854f6893afb53d896394ddcc26568b25d04d91) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* wtmpdb: fix installed-vs-shipped build errorYoann Congal2024-11-191-0/+1
| | | | | | | | | | | | | | | | | | | wtmpdb installs a PAM plugin in "${base_libdir}/security/pam_wtmpdb.so". This path is not in default FILES. Add this path to FILES:${PN} to fix this error: ERROR: wtmpdb-0.11.0-r0 do_package: QA Issue: wtmpdb: Files/directories were installed but not shipped in any package: /lib/security/pam_wtmpdb.so Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. wtmpdb: 1 installed and not shipped files. [installed-vs-shipped] ERROR: wtmpdb-0.11.0-r0 do_package: Fatal QA errors were found, failing task. ERROR: Logfile of failure stored in: .../poky/build-master/tmp/work/core2-64-poky-linux/wtmpdb/0.11.0/temp/log.do_package.939726 ERROR: Task (.../poky/meta-openembedded/meta-oe/recipes-extended/wtmpdb/wtmpdb_0.11.0.bb:do_package) failed with exit code '1' Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a090cd3e0ef554d7171eb84488661599d72fa3e9) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nodejs: upgrade 20.17.0 -> 20.18.0J. S.2024-11-194-3/+3
| | | | | | | | | | | | | | | | License checksum change due to whitespace changes. https://github.com/nodejs/node/commit/1dfd238781 libatomic.patch change due to changes in node.gyp https://github.com/nodejs/node/commit/25c788009f1fa7a392af51cb97d0a55f0f4a6983 Changelog : https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V20.md#20.18.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 410a442f89ea394710d20d337b9da397b537cc25) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* webkitgtk3: Fix build break with latest girKhem Raj2024-11-192-0/+34
| | | | | | | | Reported with clang-19 Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 7be0d59669f9bc102895bc0596c30805be0eda23) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* webkitgtk3: Always use -g1 for debug flagsKhem Raj2024-11-191-3/+2
| | | | | | | | | Ensures that debugging symbols do not explode modeled on oe-core commit [1] [1] https://git.openembedded.org/openembedded-core/commit/?id=9badf68d78d995f7d5d4cf27e045f029fc6d4044 Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c5fb1e0d3d63096f69d818b00b373639e1d0462a) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhugetlbfs: Fix contains reference to TMPDIR [buildpaths] erroralperak2024-11-191-0/+1
| | | | | | | | | | ERROR: libhugetlbfs-1_2.24-r0 do_package_qa: QA Issue: File /usr/lib/libhugetlbfs/tests/obj64/dummy.ldscript in package libhugetlbfs-tests contains reference to TMPDIR [buildpaths] ERROR: libhugetlbfs-1_2.24-r0 do_package_qa: Fatal QA errors were found, failing task. Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1c346f1829e032c2c924b1aed3c5997ca91c7fa4) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhugetlbfs: Use linker wrapper during buildKhem Raj2024-11-191-1/+9
| | | | | | | | | | | | | | | | | | | ld.hugetlbfs is munging certain linker commandline options and presenting a differently named options to its users, in summary its expecting linker process to call ld.hugetlbfs which calls the final linker with additional decorations. This patch makes space for that by adding -B option to compiler so it finds this the linker in S and then we creates symlinks for linker name that clang/gcc are expecting. Fixes libhugetlbfs/2.24/recipe-sysroot-native/usr/bin/x86_64-yoe-linux/x86_64-yoe-linux-ld.bfd: unrecognized option '--hugetlbfs-link=B' Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit dc84a9e699caa852adc043e9ba1eb134880f055d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhugetlbfs: upgrade 2.23 -> 2.24Yi Zhao2024-11-1916-330/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ChangeLog: https://github.com/libhugetlbfs/libhugetlbfs/blob/2.24/NEWS * Refresh patches * Drop backport patches * Inherit autotools-brokensep since it has switched to automake * Add a patch to fix build on musl Test Results: $ mkdir -p /mnt/hugetlbfs $ mount -t hugetlbfs none /mnt/hugetlbfs $ hugeadm --pool-pages-min 2MB:64 $ hugeadm --pool-pages-max 2MB:256 $ cd /usr/lib/libhugetlbfs/tests/ $ ./run_tests.py PASS zero_filesize_segment (2M: 64): PASS test_root (2M: 64): PASS meminfo_nohuge (2M: 64): PASS gethugepagesize (2M: 64): PASS gethugepagesizes (2M: 64): PASS HUGETLB_VERBOSE=1 empty_mounts (2M: 64): PASS HUGETLB_VERBOSE=1 large_mounts (2M: 64): PASS find_path (2M: 64): PASS unlinked_fd (2M: 64): PASS readback (2M: 64): PASS truncate (2M: 64): PASS shared (2M: 64): PASS mprotect (2M: 64): PASS mlock (2M: 64): PASS misalign (2M: 64): PASS fallocate_basic.sh (2M: 64): PASS fallocate_align.sh (2M: 64): PASS ptrace-write-hugepage (2M: 64): PASS icache-hygiene (2M: 64): PASS slbpacaflush (2M: 64): PASS (inconclusive) straddle_4GB_static (2M: 64): PASS huge_at_4GB_normal_below_static (2M: 64): PASS huge_below_4GB_normal_above_static (2M: 64): PASS map_high_truncate_2 (2M: 64): PASS misaligned_offset (2M: 64): PASS (inconclusive) truncate_above_4GB (2M: 64): PASS brk_near_huge (2M: 64): Fatal glibc error: malloc.c:2599 (sysmalloc): assertion failed: (old_top == initial_top (av) && old_size = = 0) || ((unsigned long) (old_size) >= MINSIZE && prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) == 0) task-size-overrun (2M: 64): PASS stack_grow_into_huge (2M: 64): PASS corrupt-by-cow-opt (2M: 64): PASS noresv-preserve-resv-page (2M: 64): PASS noresv-regarded-as-resv (2M: 64): PASS readahead_reserve.sh (2M: 64): PASS madvise_reserve.sh (2M: 64): PASS fadvise_reserve.sh (2M: 64): PASS mremap-expand-slice-collision.sh (2M: 64): PASS mremap-fixed-normal-near-huge.sh (2M: 64): PASS mremap-fixed-huge-near-normal.sh (2M: 64): PASS set shmmax limit to 67108864 shm-perms (2M: 64): PASS private (2M: 64): PASS fork-cow (2M: 64): PASS direct (2M: 64): PASS malloc (2M: 64): PASS LD_PRELOAD=libhugetlbfs.so HUGETLB_MORECORE=yes malloc (2M: 64): SKIPPED LD_PRELOAD=libhugetlbfs.so HUGETLB_MORECORE=yes HUGETLB_RESTRICT_EXE=unknown:none malloc (2M: 64): SKIPPED LD_PRELOAD=libhugetlbfs.so HUGETLB_MORECORE=yes HUGETLB_RESTRICT_EXE=unknown:malloc malloc (2M: 64): SKIPPED malloc_manysmall (2M: 64): PASS LD_PRELOAD=libhugetlbfs.so HUGETLB_MORECORE=yes malloc_manysmall (2M: 64): SKIPPED GLIBC_TUNABLES=glibc.malloc.tcache_count=0 heapshrink (2M: 64): PASS GLIBC_TUNABLES=glibc.malloc.tcache_count=0 LD_PRELOAD=libheapshrink.so heapshrink (2M: 64): PASS GLIBC_TUNABLES=glibc.malloc.tcache_count=0 LD_PRELOAD=libhugetlbfs.so HUGETLB_MORECORE=yes heapshrink (2M: 64): SKIPPED GLIBC_TUNABLES=glibc.malloc.tcache_count=0 LD_PRELOAD=libhugetlbfs.so libheapshrink.so HUGETLB_MORECORE=yes heapshrink (2M: 64): SKIPPED GLIBC_TUNABLES=glibc.malloc.tcache_count=0 LD_PRELOAD=libheapshrink.so HUGETLB_MORECORE=yes HUGETLB_MORECORE_SHRINK=yes heapshrink (2M: 64): SKIPPED GLIBC_TUNABLES=glibc.malloc.tcache_count=0 LD_PRELOAD=libhugetlbfs.so libheapshrink.so HUGETLB_MORECORE=yes HUGETLB_MORECORE_SHRINK=yes heapshrink (2M: 64): SKIPPED HUGETLB_VERBOSE=1 HUGETLB_MORECORE=yes heap-overflow (2M: 64): SKIPPED HUGETLB_VERBOSE=0 linkhuge_nofd (2M: 64): PASS LD_PRELOAD=libhugetlbfs.so HUGETLB_VERBOSE=0 linkhuge_nofd (2M: 64): PASS linkhuge (2M: 64): PASS LD_PRELOAD=libhugetlbfs.so linkhuge (2M: 64): PASS linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=R linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=W linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=RW linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=no linkhuge_rw (2M: 64): PASS HUGETLB_MINIMAL_COPY=no HUGETLB_ELFMAP=R linkhuge_rw (2M: 64): PASS HUGETLB_MINIMAL_COPY=no HUGETLB_ELFMAP=W linkhuge_rw (2M: 64): PASS HUGETLB_MINIMAL_COPY=no HUGETLB_ELFMAP=RW linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=R HUGETLB_SHARE=0 linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=R HUGETLB_SHARE=1 linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=W HUGETLB_SHARE=0 linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=W HUGETLB_SHARE=1 linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=RW HUGETLB_SHARE=0 linkhuge_rw (2M: 64): PASS HUGETLB_ELFMAP=RW HUGETLB_SHARE=1 linkhuge_rw (2M: 64): PASS chunk-overcommit (2M: 64): PASS alloc-instantiate-race shared (2M: 64): PASS alloc-instantiate-race private (2M: 64): PASS truncate_reserve_wraparound (2M: 64): PASS truncate_sigbus_versus_oom (2M: 64): PASS get_huge_pages (2M: 64): PASS shmoverride_linked (2M: 64): PASS HUGETLB_SHM=yes shmoverride_linked (2M: 64): PASS LD_PRELOAD=libhugetlbfs.so shmoverride_unlinked (2M: 64): PASS LD_PRELOAD=libhugetlbfs.so HUGETLB_SHM=yes shmoverride_unlinked (2M: 64): PASS quota.sh (2M: 64): PASS counters.sh (2M: 64): PASS mmap-gettest 10 64 (2M: 64): PASS mmap-cow 63 64 (2M: 64): PASS set shmmax limit to 134217728 shm-fork 10 32 (2M: 64): PASS set shmmax limit to 134217728 shm-fork 10 64 (2M: 64): PASS set shmmax limit to 134217728 shm-getraw 64 /dev/full (2M: 64): PASS fallocate_stress.sh (2M: 64): PASS ********** TEST SUMMARY * 2M * 32-bit 64-bit * Total testcases: 0 91 * Skipped: 0 9 * PASS: 0 81 * FAIL: 0 0 * Killed by signal: 0 1 * Bad configuration: 0 0 * Expected FAIL: 0 0 * Unexpected PASS: 0 0 * Test not present: 0 0 * Strange test result: 0 0 ********** Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 47ee82f0842bbd3f150fb47821fedb376ec77f30) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libtar: patch CVEsKatariina Lounento2024-11-1913-0/+854
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cve-check.bbclass reported unpatched vulnerabilities in libtar [1,2,3,4,5]. The NIST assigned base score for the worst vulnerability is 9.1 / critical. The patches were taken from the libtar [6] master branch after the latest tag v1.2.20 (the changes in libtar master mostly originate from Fedora and their patches), and from the Fedora 41 libtar source package [7] and the Debian libtar package 1.2.20-8 [8] where the patches were not available in the libtar repository itself. The Fedora patch series was taken in its entirety in order to minimize differences to Fedora's source tree instead of cherry-picking only CVE fixes. Minimizing the differences should avoid issues with potential inter-dependencies between the patches, and hopefully provide better confidence as even the newest patches have been in use in Fedora for nearly 2 years (since December 2022; Fedora rpms/libtar.git commit e25b692fc7ceaa387dafb865b472510754f51bd2). The series includes even the Fedora patch libtar-1.2.20-no-static-buffer.patch, which contains changes *) that match the libtar commit ec613af2e9371d7a3e1f7c7a6822164a4255b4d1 ("decode: avoid using a static buffer in th_get_pathname()") whose commit message says Note this can break programs that expect sizeof(TAR) to be fixed. The patches applied cleanly except for the Fedora srpm patch libtar-1.2.11-bz729009.patch, which is identical with the pre-existing meta-oe patch 0002-Do-not-strip-libtar.patch and is thus omitted. The meta-openembedded recipe does not include any of the patches in Kirkstone [9] nor the current master [10]. libtar does not have newer releases, and the libtar master doesn't contain all of the changes included in the patches. Fedora's libtar.1.2.11-*.patch are not included in the libtar v1.2.20 release either but only in the master branch after the tag v1.2.20. The version number in the filename is supposedly due to the patches being created originally against v1.2.11 but have been upstreamed or at least committed to the master only after v1.2.20. The commit metadata could not be practically completed in most of the cases due to missing commit messages in the original commits and patches. The informal note about the author ("Authored by") was added to the patch commit messages where the commit message was missing the original author(s)' Signed-off-by. *) The patch also contains the changes split to the libtar commits 495d0c0eabc5648186e7d58ad54b508d14af38f4 ("Check for NULL before freeing th_pathname") and 20aa09bd7775094a2beb0f136c2c7d9e9fd6c7e6 ("Added stdlib.h for malloc() in lib/decode.c")) [1] https://nvd.nist.gov/vuln/detail/CVE-2021-33643 [2] https://nvd.nist.gov/vuln/detail/CVE-2021-33644 [3] https://nvd.nist.gov/vuln/detail/CVE-2021-33645 [4] https://nvd.nist.gov/vuln/detail/CVE-2021-33646 [5] https://nvd.nist.gov/vuln/detail/CVE-2013-4420 [6] https://repo.or.cz/libtar.git [7] https://src.fedoraproject.org/rpms/libtar/tree/f41 [8] https://sources.debian.org/patches/libtar/1.2.20-8/CVE-2013-4420.patch/ [9] https://git.openembedded.org/meta-openembedded/tree/meta-oe/recipes-support/libtar/libtar_1.2.20.bb?h=kirkstone&id=9a24b7679810628b594cc5a9b52f77f53d37004f [10] https://git.openembedded.org/meta-openembedded/tree/meta-oe/recipes-support/libtar/libtar_1.2.20.bb?h=master&id=9356340655b3a4f87f98be88f2d167bb2514a54c Signed-off-by: Katariina Lounento <katariina.lounento@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 3c9b5b36c8dc619240ac422de2a0aaed0949de08) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* audit: fix build when systemd is enabled.Armin Kuster2024-11-191-0/+6
| | | | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e68145b00260fc380242cd67579068427e501c10) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* softhsm: add destroyed global access prevention patchRouven Czerwinski2024-11-192-0/+673
| | | | | | | | | | | | | | | Currently softhsm will try to access deleted obejcts due to the order of atexit handler implementations. Add a patch which adds a global variable to track whether objects are deleted and prevents access if this is the case. This fixes a failure with the signing.bbclass where when signing multiple fitimage configurations the second signing operation will lead to a segfault. Signed-off-by: Rouven Czerwinski <r.czerwinski@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gpsd: condition the runtime dependence of pyserial on the pygpsJose Quaresma2024-11-191-1/+2
| | | | | | | | | | | | | | | | | | | | The python3-pyserial dependency was introduced in [1]. It is provided by the meta-python layer and so make it conditionally. Fixes: | NOTE: Resolving any missing task queue dependencies | ERROR: Nothing RPROVIDES 'python3-pyserial' (but ../meta-openembedded/meta-oe/recipes-navigation/gpsd/gpsd_3.25.bb RDEPENDS on or otherwise requires it) | NOTE: Runtime target 'python3-pyserial' is unbuildable, removing... | Missing or unbuildable dependency chain was: ['python3-pyserial'] | NOTE: Runtime target 'gpsd' is unbuildable, removing... | Missing or unbuildable dependency chain was: ['gpsd', 'python3-pyserial'] [1] https://git.openembedded.org/meta-openembedded/commit/?id=1266c912afa0abf118eaa5d152a0641c87665fbd Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Revert "gpsd: make the meta-python dependency conditionally"Jose Quaresma2024-11-191-1/+0
| | | | | | | | This reverts commit eb731aa8660b280a15684dc81954dbcd4d54fdb6. Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* capnproto: Add "capnp" to CVE_PRODUCTs-tokumoto2024-11-191-0/+2
| | | | | | | | | | | Vulnerabilities against capnproto are sometimes reported as "capnp", so add "capnp" to CVE_PRODUCT. https://nvd.nist.gov/vuln/detail/CVE-2022-46149 Signed-off-by: Shunsuke Tokumoto <s-tokumoto@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* polkit: Update Upstream-Status of a merged patchYoann Congal2024-11-191-1/+1
| | | | | | | | | https://github.com/polkit-org/polkit/pull/497 was merged as https://github.com/polkit-org/polkit/commit/1d4f7f4d9f3d74fb2649c96faa8677416c1aefc2 Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* syslog-ng: upgrade 4.6.0 -> 4.7.0J. S.2024-11-192-43/+2
| | | | | | | | | | | | | | Changelog : https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.7.0 Dropped patch - merged in this version : * 0001-macros-guard-ipv6-code-with-SYSLOG_NG_ENABLE_IPV6.patch New json-c dependency fixes configure failure. Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* perfetto: upgrade 31.0 -> 47.0Etienne Cordonnier2024-11-198-93/+114
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release Notes: https://github.com/google/perfetto/releases/tag/v47.0 Test procedure: Tested with TOOLCHAIN="clang" and MACHINE="qemux86-64" (using ARGS="is_debug=false enable_perfetto_x64_cpu_opt=false" in perfetto.bb because of missing SSE4.2,BMI2,AVX2 inside qemu): ``` root@qemux86-64:~# tracebox --out /tmp/perfetto dmesg sched freq idle am wm gfx view binder_driver hal dalvik camera input res memory [100.634] service.cc:232 Started traced, listening on @traced-p-310 @traced-c-310 [100.804] probes.cc:104 Starting traced_probes service [100.852] probes_producer.cc:332 Connected to the service [100.957] perf_producer.cc:1201 Connected to the service [100.979] perfetto_cmd.cc:1100 Connected to the Perfetto traced service, TTL: 10s [101.029] ng_service_impl.cc:1125 Configured tracing session 1, #sources:4, duration:10000 ms, #buffers:1, total buffer size:32768 KB, total sessions:1, uid:0 session name: "" [101.571] probes_producer.cc:132 Ftrace setup (target_buf=1) [101.574] ftrace_procfs.cc:441 disabled ftrace in /sys/kernel/tracing/ [101.679] ftrace_procfs.cc:295 Failed to setup event triggers for synthetic:rss_stat_throttled (errno: 22, Invalid argument) [101.682] atrace_wrapper.cc:196 Atrace only supported on Android. [101.757] ftrace_procfs.cc:438 enabled ftrace in /sys/kernel/tracing/ [111.091] ng_service_impl.cc:2103 FlushAndDisableTracing(1) done, success=1 [111.097] probes_producer.cc:445 Producer stop (id=1) [111.168] ftrace_procfs.cc:441 disabled ftrace in /sys/kernel/tracing/ [111.181] ftrace_procfs.cc:441 disabled ftrace in /sys/kernel/tracing/ [111.194] probes_producer.cc:445 Producer stop (id=2) [111.200] probes_producer.cc:445 Producer stop (id=3) [111.308] perfetto_cmd.cc:1263 Wrote 390764 bytes into /tmp/perfetto root@qemux86-64:~# ls -l /tmp/perfetto -rw------- 1 root root 390764 Sep 24 09:25 /tmp/perfetto ``` I then manually verified the file using https://ui.perfetto.dev/ Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* audit: Fix CVE_PRODUCTShinji Matsunaga2024-11-191-0/+2
| | | | | | | | | | | | | | | Fix "audit" set in CVE_PRODUCT to "linux:audit" to detect only vulnerabilities where the vendor is "linux". Currently, CVE_PRODUCT also detects vulnerabilities where the vendor is "visionsoft", which are unrelated to the "audit" in this recipe. https://www.opencve.io/cve?vendor=visionsoft&product=audit In addition, all the vulnerabilities currently detected in "audit" have the vendor of "visionsoft" or "linux". Therefore, fix "audit" set in CVE_PRODUCT to "linux:audit". Signed-off-by: Shinji Matsunaga <shin.matsunaga@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gpsd: make the meta-python dependency conditionallyJose Quaresma2024-11-191-0/+1
| | | | | | | | | | | | | | | | | | | | The python3-pyserial dependency was introduced in [1]. It is provided by the meta-python layer and so make it conditionally. Fixes: | NOTE: Resolving any missing task queue dependencies | ERROR: Nothing RPROVIDES 'python3-pyserial' (but ../meta-openembedded/meta-oe/recipes-navigation/gpsd/gpsd_3.25.bb RDEPENDS on or otherwise requires it) | NOTE: Runtime target 'python3-pyserial' is unbuildable, removing... | Missing or unbuildable dependency chain was: ['python3-pyserial'] | NOTE: Runtime target 'gpsd' is unbuildable, removing... | Missing or unbuildable dependency chain was: ['gpsd', 'python3-pyserial'] [1] https://git.openembedded.org/meta-openembedded/commit/?id=1266c912afa0abf118eaa5d152a0641c87665fbd Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* protobuf: upgrade 4.25.4 -> 4.25.5Yi Zhao2024-11-191-1/+1
| | | | | | | | | ChangeLog: https://github.com/protocolbuffers/protobuf/releases/tag/v25.5 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* protobuf: add abseil-cpp to RDEPENDSYi Zhao2024-11-191-0/+2
| | | | | | | | | | | | | | | Since commit[1], the libraries of abseil-cpp have been splitted into separate packages. When protobuf is installed into the image, only 48 abseil libraries are installed as runtime dependencies. But the output of 'pkg-config --libs protobuf' lists 66 abseil-cpp libraries are required. Add abseil-cpp to RDEPENDS to ensure that all required abseil-cpp libraries are installed. [1] https://git.openembedded.org/meta-openembedded/commit/?id=dd6421e65eb75c35a904f4b487ba022075035ecc Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* abseil-cpp: upgrade 20240116.2 -> 20240722.0Yi Zhao2024-11-196-119/+56
| | | | | | | | | | | | | ChangeLog: https://github.com/abseil/abseil-cpp/releases/tag/20240722.0 * Drop backport patch: 0004-PR-1644-unscaledcycleclock-remove-RISC-V-support.patch * Refresh patches Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* opencv: upgrade 4.9.0 -> 4.10.0ptak2024-11-191-2/+2
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-psycopg: upgrade 3.2.1 -> 3.2.2Wang Mingyu2024-11-191-1/+1
| | | | | | | | | | | | Changelog: =========== - Drop TypeDef specifications as string from public modules, as they cannot be composed by users as typing objects previously could - Release Python 3.13 binary packages. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pegtl: upgrade 3.2.7 -> 3.2.8Wang Mingyu2024-11-191-1/+1
| | | | | | | | | Changelog: Fixed build with '-Wshorten-64-to-32' Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmanette: upgrade 0.2.7 -> 0.2.9Wang Mingyu2024-11-191-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: =========== * Update and clean up the game controller mapping database * ManetteDevice - add manette_device_get_mapping() and manette_device_get_guid() - Handle keycodes before BTN_MISC as well * ManetteMapping - Allow to map paddle1-4, misc1-6 and touchpad buttons - Improve error handling * ManetteMappingManager - Check if user mapping file exists * Tests - Test default mappings Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ctags: upgrade 6.1.20240908.0 -> 6.1.20240915.0Wang Mingyu2024-11-191-1/+1
| | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bdwgc: upgrade 8.2.6 -> 8.2.8Wang Mingyu2024-11-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Chaneglog: ========= * Allow GC_size() argument to be null * Disable backtrace saving at garbage collections if DONT_SAVE_TO_LAST_STACK * Eliminate 'cast signed to bigger unsigned' CSA warnings in GC_find_limit * Eliminate 'x might be clobbered by longjmp' gcc warning in setjmp_t.c * Fix 'un-mprotect vdb failed' abort with out-of-memory reason on Linux * Fix ADD_CALL_CHAIN() placement to follow GC_store_debug_info_inner call * Fix GC_debug_realloc to support custom kind * Fix GC_is_visible for case of arg pointing exactly to object upper bound * Fix GC_print_trace_inner to print the last element of the circular buffer * Fix cordtst2.tmp file deletion in cordtest on Windows * Fix double lock in GC_malloc called from backtrace() * Fix handling of page-unaligned boundaries in soft_set_grungy_pages * Fix heap blocks size computation by GC_get_memory_use * Fix indent of a closing curly braces in GC_apply_to_all_blocks * Fix infinite resend lost signals if a thread is restarted by SIGQUIT * Fix null pointer dereference in GC_is_visible if type_descr is null * Fix per_object_helper() after changing hb_sz units * Fix pointer relational comparison in GC_do_enumerate_reachable_objects * Fix poor thread-local allocation performance because of double EXTRA_BYTES * Fix potential GC_add_roots_inner call with an overflowed pointer (Win32) * Fix potential address overflow in GC_add_to_heap * Fix potential buffer overrun during read in GC_text_mapping * Fix various typos in comments * Prevent GC_noop_sink from scanning by the collector * Prevent redirected malloc call from a garbage collection routine * Redirect malloc_usable_size() in leak_detector.h * Remove redundant dirty/reachable_here calls in GC_malloc_explicitly_typed * Update and fix diagrams describing the tree structure for pointer lookups * Use atomic store to set GC_first_nonempty in GC_do_parallel_mark * Use atomic store to set entry id and update cache_ptr in slow_getspecific * Workaround '.obj file not found' error reported by watcom wlib Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-openemnedded: Add myself as styhead maintainerArmin Kuster2024-09-291-4/+4
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iwd: use internal ellMarkus Volk2024-09-181-3/+1
| | | | | | | | | | | | iwd and ell need to be updated in sync. This is regularly neglected. Also the fact that they reside in different layers compicates the update process. Beside iwd, there are not a lot of consumers for ell. Building with internal ell makes iwd updates easier Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iwd: update 2.19 -> 2.20Markus Volk2024-09-181-1/+1
| | | | | | | | | | ver 2.20: Fix issue with PKEX timeout and number of frequencies used. Fix issue with handling logic for handshake failures. Fix issue with handling ConnectedAccessPoint signal. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* colord: add configuration to fix runtimeMarkus Volk2024-09-182-13/+47
| | | | | | | | | | | | | | | | | | | | | | Make colord work out of the box - We already create a colord user -> make use of it by passing the username to the 'daemon_user' meson option. The conf files and systemd service file will then be created accordingly. - Add a backport patch to fix 'only root can write into /var' issue. This prevents colord from starting [https://github.com/hughsie/colord/issues/166] - Set the runtime path for hwdata pnp.ids and add hwdata to RDEPENDS:${PN} for non systemd images - inherit gtk-doc to make api-documentation available - Dont create a home-dir for colord user. It shouldn't need one. NOTE: colord will fail on first run with missing databases. After second boot it should run as expected. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* reptyr: Do not build for riscv32Khem Raj2024-09-171-0/+2
| | | | | | It needs to add platform support first Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kernel-selftest: Fix build on 32bit arches with 64bit time_tKhem Raj2024-09-172-0/+37
| | | | | | Fix warning where S is expected to exist before do_configure Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libjxl: Disable sizeless-vectors on riscv32Khem Raj2024-09-171-0/+1
| | | | | | | | | | | They endup in undefined intrinsics demanded by compiler error: use of undeclared identifier '__riscv_vsetvlmax_e8mf8' Perhaps an upgrade of vendored highway module ( when it happens) will fix it Signed-off-by: Khem Raj <raj.khem@gmail.com>
* highway: Fix cmake to detect riscv32Khem Raj2024-09-172-3/+80
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* liburing: Upgrade to 2.7 and fix build on riscv32Khem Raj2024-09-174-3/+109
| | | | | | Fix build regression with musl Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mozjs-115: Fix build on riscv32Khem Raj2024-09-171-0/+2
| | | | | | | Link with libatomic explicitly, fixes riscv32-yoe-linux-ld.lld: error: undefined symbol: __atomic_store_8 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opentelemetry-cpp: Link with libatomic on rv32Khem Raj2024-09-171-0/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* transmission: Link with libatomic on riscv32Khem Raj2024-09-171-0/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usbguard: Link with libatomic on rv32Khem Raj2024-09-171-0/+2
| | | | | | Provides needed atomic intrinsics that compiler needs. Signed-off-by: Khem Raj <raj.khem@gmail.com>