summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
...
* recipes: Drop ld-is-gold supportRichard Purdie2025-02-101-1/+1
| | | | | | | | | | | Gold hasn't seen development in some time and is being dropped from binutils releases. Drop the small number of special cases for it we were carrying. This patch also turns off gold in the binutils recipe. (From OE-Core rev: a4addb9ab63011e7c604fc5daff95559e7d214e7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libseccomp: Upgrade 2.5.5 -> 2.6Simone Weiß2025-02-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: - Update the syscall table for Linux v6.13 - Add support for new arches: SuperH little and big endian, LoongArch, and 32-bit Motorola 68000 - Add multiplexed syscall support for more arches: MIPS, SuperH, and PPC - Consolidate and simplify handling of multiplexed syscalls - Add support for the SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV flag - Add support for transactions with the seccomp_transaction_start(), seccomp_transaction_commit(), and seccomp_transaction_reject() APIs - Add a seccomp_precompute() API to generate the seccomp BPF filter prior to seccomp_load() or seccomp_export_bpf_mem() - Add support for binary tree filters without syscalls - Add support for the kernel’s implementation change of SECCOMP_IOCTL_NOTIF_ID_VALID - Add Python binding support for retrieving the notification file descriptor - Improved tooling to help track syscall table updates in the Linux kernel - Handle EINVAL error from the kernel when the WAIT_KILLABLE_RECV flag is erroneously provided to the kernel - Fix a seccomp userspace notification issue where the file descriptor was being requested more than once - Fix a bug where the internal filter state could be corrupted when a filter rule addition fails - Fix potential memory leak in the internal management of filter snapshots - Utilize Cython rather than distutils in the Python bindings, due to distutils’ deprecation - Many test and CI improvements and fixes - Many documentation improvements and updates (From OE-Core rev: 549a477660bd6ccda842b4ed34814b53470d08d8) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup: upgrade 3.6.1 -> 3.6.4Richard Purdie2025-02-051-1/+1
| | | | | | (From OE-Core rev: c9f4a0ab15b4a8879c9447907e19df6f48efaba7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libexif: upgrade 0.6.24 -> 0.6.25Richard Purdie2025-02-052-4/+4
| | | | | | (From OE-Core rev: 3914200a88c1139ad84390fb1b1a9682a01babf3) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: upgrade 2.5.2 -> 2.5.3Richard Purdie2025-02-056-7/+7
| | | | | | (From OE-Core rev: 58c6af60d95c8527b4ac7f80192dd9e14186fc85) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: upgrade 284 -> 287Richard Purdie2025-02-051-1/+1
| | | | | | (From OE-Core rev: 07619aaa4f749d4add5c8514c9a95c1f23fcb5b5) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: upgrade 2.54.0 -> 2.54.1Richard Purdie2025-02-051-1/+1
| | | | | | (From OE-Core rev: b7ff37bebfaf756491790062148a1902ec6f873c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* hwdata: Use SPDX identifierBastian Germann2025-02-051-1/+1
| | | | | | | | | | | | The XFree86-1.0 (non-SPDX) license and the X11 (SPDX) license are the same. Reference the X11 license in hwdata. License-Update: use SPDX identifier (From OE-Core rev: 891dfdf294e4ac88239dba70d6a5958cc42cbc92) Signed-off-by: Bastian Germann <bage@debian.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta/meta-selftest: Fix variable assignment whitespaceRichard Purdie2025-02-014-5/+5
| | | | | | | | | | Recipes are much more readable with whitespace around the assignment operators. Fix various assignments in OE-Core to show this is definitely the preferred formatting. (From OE-Core rev: 30ea609d3357fb3de911f2f6a5e6856c151b976a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: remove obsolete patchGuðni Már Gilbert2025-01-272-34/+0
| | | | | | | | | | | | | Remove a patch which is already merged in v2.5.1 See for reference: https://github.com/gpg/gnupg/commit/1d5cfa9b7fd22e1c46eeed5fa9fed2af6f81d34f https://dev.gnupg.org/T7193 (From OE-Core rev: 79c10b2ad17bacec024427693eb025659f455a20) Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libbsd: Drop licenses that were removed upstreamBastian Germann2025-01-271-5/+2
| | | | | | | | | | | | The libbsd project has gotten rid of BSD-4-Clause licensed material. Version 0.11.8 is the first not to contain any such material anymore. License-Update: removed upstream (From OE-Core rev: 362435b0aec5c2610690fe2f39eb5bdb28a36e14) Signed-off-by: Bastian Germann <bage@debian.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgit2: update 1.8.4 -> 1.9.0Alexander Kanavin2025-01-102-2/+40
| | | | | | | | | | Make the cmake files reproducible and rather than hardcode-installed into /usr/lib. [RP: Tweak commit message] (From OE-Core rev: 5d16b99ad74fe4acadfb1752b975e6eebacf9d1c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* liburcu: update 0.14.1 -> 0.15.0Alexander Kanavin2025-01-101-4/+6
| | | | | | | | | License-update: formatting, file rename, spdx tags. (From OE-Core rev: a8fdac57d9fe55c3dff8d3dc24c6245c5d6af476) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: update 1.86.0 -> 1.87.0Alexander Kanavin2025-01-106-7/+7
| | | | | | | | | Backport a kea patch to address 1.87.0 compatibility. (From OE-Core rev: ac328183d4592ad146c41e48c2c92d1dbb53a894) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* hwdata: upgrade 0.390 -> 0.391Wang Mingyu2025-01-091-1/+1
| | | | | | | | (From OE-Core rev: a7a1a393900ba4e3e6a526480c6ef44df9e6804f) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: fix do_fetch errorJiaying Song2025-01-041-1/+1
| | | | | | | | | | Change the SRC_URI to the correct value due to the following error: WARNING: boost-native-1.86.0-r0 do_fetch: Checksum failure encountered with download of https://boostorg.jfrog.io/artifactory/main/release/1.86.0/source/boost_1_86_0.tar.bz2 - will attempt other sources if available (From OE-Core rev: 8dd4814c5994ff008969591e863f931692740361) Signed-off-by: Jiaying Song <jsong-cn@ala-lpggp7.wrs.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xxhash: upgrade 0.8.2 -> 0.8.3Richard Purdie2025-01-031-1/+1
| | | | | | (From OE-Core rev: 15216916a2ea00738553ff96734e90146a1f184c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: upgrade 3.10 -> 3.10.1Richard Purdie2025-01-033-12/+6
| | | | | | (From OE-Core rev: 601327a0c8a66226877f03b21bad0c7e67ee14de) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libical: upgrade 3.0.18 -> 3.0.19Richard Purdie2025-01-032-6/+3
| | | | | | (From OE-Core rev: 0045f51478e49755b61088f5ff6a4e6d3efbb06b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap: upgrade 2.71 -> 2.73Richard Purdie2025-01-034-7/+7
| | | | | | (From OE-Core rev: 4b5978ca9c7280beaf1ca7cf3c1f9f1baed0bd08) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gpgme: upgrade 1.24.0 -> 1.24.1Richard Purdie2025-01-0310-39/+27
| | | | | | (From OE-Core rev: abbc6639b74fe7e19802e764ca438d897b9ae92c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* debianutils: upgrade 5.20 -> 5.21Richard Purdie2025-01-031-1/+1
| | | | | | (From OE-Core rev: 34907f324c1362d1510300501a5bdff6eb99ae9b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ca-certificates: upgrade 20240203 -> 20241223Richard Purdie2025-01-036-29/+38
| | | | | | (From OE-Core rev: 48a236c2f78fee5e6db19c6be23b4a18df025607) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash-completion: upgrade 2.15.0 -> 2.16.0Richard Purdie2025-01-031-1/+1
| | | | | | (From OE-Core rev: 4be37279bf7b098382966fc81b24962a157b31c3) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: upgrade 283 -> 284Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | | Changelog: ========= * Simplify tests_quines.py::test_{differences,differences_deb} to use assert_diff and not mangle the expected test output. * Update some tests to support file(1) version 5.46. (From OE-Core rev: 476ce326937652d99f53f86269e40d305f916837) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* re2c: upgrade 4.0.1 -> 4.0.2Wang Mingyu2024-12-181-1/+1
| | | | | | | | | | | | | | | Changelog: =========== - CMake build system: fixed bug `#515 <https://github.com/skvadrik/re2c/issues/515>`_ where language-specific binaries erroneously defaulted to generating code for C. - Playground: address bar now reflects navigation between examples, editors use a more high-contrast CSS theme. (From OE-Core rev: 53ad3915b465ecb9f4d96c12a5522296e89a18e2) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libjitterentropy: upgrade 3.6.0 -> 3.6.1Wang Mingyu2024-12-181-1/+1
| | | | | | | | | | | | | | | Changelog: =========== * Add more test code * Add support for SunPRO compiler * Fix compilation on OpenBSD by replacing sed with tr * internal timer: Add support for Apple * Various small fixes to compilation to imporve portability (From OE-Core rev: cdb92925d6a8a943337e73d659984ac7bc4305f7) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* appstream: upgrade 1.0.3 -> 1.0.4Wang Mingyu2024-12-183-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-remove-hardcoded-path.patch 0002-Do-not-build-qt-tests.patch refreshed for 1.0.4 Changelog: =========== Features: * bundle: Add AS_BUNDLE_KIND_SYSUPDATE * desktop-style-ids: Add dark support for Plasma * desktop-style-ids: add pantheon:dark * qt: Expose branding color * sysinfo: Add memory size detection support for Illumos and Solaris * sysinfo: Add memory size detection support for GNU/Hurd * validator: Don't fail validation if a snapshot release is missing a time Specification: * docs: Note that support for some legacy path was dropped in 1.0 * docs: Update fd.o spec URLs * docs: Better explain desktop applications * Update ESRA website URL Bugfixes: * validator: Make sure we read an initialised variable * qt: Specify utc as the dates' timezone * tests: Ignore some tests on Windows * sysinfo: make uname() usage POSIX compliant * Only emit legacy compat tag developer_name for catalog data * compose: Allow file discovery even in symlinked directories * Avoid a race condition when loading GResource data * validator: Mention length limit in summary length warning message * utils: Explicitly set permissions on installed metadata files * as-vercmp: Fix gtkdoc to not start with '>' Miscellaneous: * desktop-style-ids: Remove Endless * ci: Fix FreeBSD build (update 'py-gi-docgen') * ci: Update to Ubuntu 24.04 for Debian Testing builds * utils: Assume 64px as size when installing an icon tarball of unknown size (From OE-Core rev: 9655af038a0bc7d6775858e6c32d302eec5b3b9b) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: upgrade 8.11.0 -> 8.11.1Peter Marko2024-12-132-41/+1
| | | | | | | | | | | | | | Bugfix release for 8.11.0 regressions. Solves CVE-2024-11053 Drop patch which was done differently upstream. (From OE-Core rev: 57731284008c18eee566df3412eaf6d13a59d498) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: upgrade 8.10.1 -> 8.11.0Peter Marko2024-12-133-4/+46
| | | | | | | | | | | | | | | | | | | | | Solves CVE-2024-9681 * refresh patch * add patch for buildpaths issue * add new options for ipfs and websockets, keep them configure as they were previously configures * drop notexists.pl from ptest install as it was removed and code was integrated into the test framework in [1] * add ptest dependency on perl-module-i18n-langinfo due to [2] [1] https://github.com/curl/curl/commit/56183c1d6f7f4d0c18d9065cf870c4cd3fc329eb [2] https://github.com/curl/curl/commit/0b70b23ef4d007031bc2ae4fc63d5ed9136bc2b5 (From OE-Core rev: 86dd3aca63248e1982c2d8c9dc68ae34a358cf8b) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: upgrade 0.78.1 -> 0.78.2Wang Mingyu2024-12-121-1/+1
| | | | | | | (From OE-Core rev: 24dd3233c70659a0797d5e9a01c32e4b7f3d3d52) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade 3.47.0 -> 3.47.2Wang Mingyu2024-12-121-1/+1
| | | | | | | (From OE-Core rev: 30ca306e0ee4adb1c15283e262b3b0e2dc1ead09) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* re2c: upgrade 4.0 -> 4.0.1Wang Mingyu2024-12-121-1/+1
| | | | | | | (From OE-Core rev: d35ed87c4c7713d1ee38efc0863fbaf3515b1b9b) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* hwdata: upgrade 0.389 -> 0.390Wang Mingyu2024-12-121-1/+1
| | | | | | | (From OE-Core rev: 49b782f89516548c70be5330ad6107e15b29fbf8) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: upgrade 2.5.1 -> 2.5.2Wang Mingyu2024-12-123-14/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-fix-compile-failure-with-musl.patch relocate.patch refreshed for 2.5.2 Changelog: ============ * gpg: Add option 16 to --full-gen-key to create ECC+Kyber. * gpg: For composite algos add the algo string to the colons listings. * gpg: Validate the trustdb after the import of a trusted key. * gpg: Exclude expired trusted keys from the key validation process. * gpg: Fix a wrong decryption failed status for signed and OCB encrypted messages without a signature verification key. * gpg: Retain binary representation for import->export with Ed25519 key signatures. * gpg: Fix comparing ed448 to ed25519 with --assert-pubkey-algo. * gpg: Avoid a failure exit code for expired ultimately trusted keys. * gpg: Emit status error for an invalid ADSK. * gpg: Allow the use of an ADSK subkey as ADSK subkey. * gpg: Fix --quick-set-expire for V5 subkey fingerprints. * gpg: Robust error handling for SCD READKEY. * gpg: Fix cv25519 v5 export regression. * gpgsm: Nearly fourfold speedup of validated certificate listings. * gpgsm: Improvement for some rare P12 files. * gpgsm: Terminate key listing on output write error. * agent: Add option --status to the LISTRUSTED command. * agent: Fix detection of the yet unused trustflag de-vs. * agent: Allow ssh to sign data larger than the Assuan line length. * keyboxd: Fix a race condition on the database handle. * dirmngr: A list of used URLs for loaded CRLs is printed first in the output of the LISTCRL command. * scd: More mitigations against lock ups with multiple cards or apps. * gpgtar: Use log-file from common.conf only in --batch mode. * gpgtar: Fix directory creation during extraction. * gpg-mail-tube: Minor fixes. * gpgconf: Add list flag to trusted-key et al. * Implement GNUPG_ASSUME_COMPLIANCE envvar and registry key for testing de-vs compliance mode. * Enable additional runtime protections in speedo builds for windows. * Fix a race condition in creating the socket directory. * Fix a build problem on macOS (missing unistd.h). (From OE-Core rev: 2ab817c434ac443e29d66105056675d6256e8a2c) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash-completion: upgrade 2.14.0 -> 2.15.0Wang Mingyu2024-12-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== * _comp_abspath:** handle ".." * _comp_compgen_filedir,_comp_compgen_filedir_xspec:** don’t suggest . nor .. nor */. nor */.. unless the user input is .. or */.. * associate unzip and friends with *.vsix * curl:** Complete "%", "-" for --trace[-ascii] * curl:** Complete files for --json, --write-out * curl:** Complete stdin "-" in file locations * fprintd-*:** new completions * iftop:** -G, -s, -L, and -o arg (non-)completions * ip:** complete ip ntable show * java:** enable .java filename completion for java command * kata-runtime:** add 3rd party fallback completion loader * nerdctl:** add 3rd party fallback completion loader * ngrok:** add 3rd party fallback completion loader * openssl:** Stop having subcommands hardcoded * python,pyvenv:** versioned 3.13 executable support * set:** more featureful completion * slabtop:** new completion * sops:** add 3rd party fallback completion loader * tar:** use long option compression options * todoist:** add 3rd party fallback completion loader * uv:** add 3rd party fallback completion loader * uvx:** add 3rd party fallback completion loader * wine:** complete with '*.bat' and '*.cmd' * xv:** associate with *.webp and *.pnm * xxd:** add -n, -o, and -R arg (non-)completions * _comp_compgen:** use 'compgen -V array_name' in 'bash &gt;= 5.3' * _comp_expand_glob:** set LC_COLLATE for the sorting order * _comp_expand_glob:** work around GLOBSORT in Bash 5.3 * compatdir:** use _comp_expand_glob for the correct order * curl:** Complete all and category for --help * dpkg:** Add missing short option -R * rsync,ssh:** do not overescape spaces in remote filenames * source files using absolute paths for absolute BASH_SOURCE * tar:** Complete added files with long opts * update-alternatives:** fix the "--help" parsing (From OE-Core rev: 35ab69c7b824cb51b5bf869beb16eb118331c176) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libssh2: remove status for CVE-2023-48795Peter Marko2024-12-091-3/+0
| | | | | | | | | | Entry for this CVE was corrected in NVD DB, we no longer need to set status for it. (From OE-Core rev: 459f9ebc0695f44bc6d45f62c89f504a0bfa21ee) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgit2: update 1.8.2 -> 1.8.4Alexander Kanavin2024-12-051-2/+2
| | | | | | | | (From OE-Core rev: b67904b25834b32228a72dc8b0baad591e51f975) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* utfcpp: update 4.0.5 -> 4.0.6Alexander Kanavin2024-12-051-1/+1
| | | | | | | | (From OE-Core rev: 6d01795fd3437841dad31a80f2abe18c09b839da) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: upgrade 2.5.0 -> 2.5.1hongxu2024-11-297-26/+15
| | | | | | | | | | | | | | | | | | Due to upstream [build: Remove configure option --enable-gpg-is-gpg2][1], drop option --enable-gpg-is-gpg2 and remove gpg2/gpgv2 installation Due to upsream [doc: Remove included yat2m and build HTML versions of the man pages.][2], it used standard detection on yat2m other than build it from source. Because no native recipe provide yat2m in Yocto, explicitly disable doc via option --disable-doc [1] https://github.com/gpg/gnupg/commit/2125f228d36c0882a87bce433a18253154653d50 [2] https://github.com/gpg/gnupg/commit/60c541f5880e8c603ca9372d3ca8b7ad68b97018 (From OE-Core rev: 3a00465f4b0c01580fb27e0c462696bd4f840828) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gpgme: upgrade 1.23.2 -> 1.24.0hongxu2024-11-295-102/+39
| | | | | | | | | | | | | | | | | Reabse patches: - 0001-pkgconfig.patch - 0001-autogen.sh-remove-unknown-in-version.patch Drop backport patch: - 0004-python-import.patch Drop obsolete patch: - 0008-do-not-auto-check-var-PYTHON.patch (From OE-Core rev: 181205d5ccb3ba0473813cd62b19d95ba034ab0a) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libssh2: mark CVE-2023-48795 as fixedPeter Marko2024-11-281-0/+3
| | | | | | | | | | | NVD DB has typo in version (1.11.10 instead of 1.11.1) Version 1.11.1 is the currently the latest one, there is no .10 (From OE-Core rev: 92886f91dc6ed3f41771bc984aa11269bd68abe0) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* re2c: upgrade 3.1 -> 4.0Wang Mingyu2024-11-271-1/+1
| | | | | | | | | | Changelog: https://re2c.org/releases/release_notes.html#release-4-0 (From OE-Core rev: 0b1a648f073e2aced0428cdb2069c23a824f6aae) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup: upgrade 3.6.0 -> 3.6.1Wang Mingyu2024-11-271-1/+1
| | | | | | | | | | | | | | | | Changelog: ============ * Fix `soup_uri_copy()` reading port as a long instead of an int * Fix possible NULL deref in `soup_uri_decode_data_uri()` * Fix possible overflow in `SoupContentSniffer` * Fix assertion in `soup_uri_decode_data_uri()` on URLs with a path starting with `//` * headers: Be more robust against invalid input when parsing params * websocket: Fix possibility of being stuck in a read loop (From OE-Core rev: 565c3cc5dfb832ffd12e8010c6dbbc006a09e85e) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libdisplay-info: add recipeHiago De Franco2024-11-271-0/+16
| | | | | | | | | | | | | | | | | | libdisplay-info is a EDID and DisplayID library. Goals: - Provide a set of high-level, easy-to-use, opinionated functions as well as low-level functions to access detailed information. - Simplicity and correctness over performance and resource usage. - Well-tested and fuzzed. Since commit a16598b038b2 ("backend-drm: make libdisplay-info mandatory") from Weston, this library is now mandatory in order to build weston 14.0.1 and newer. (From OE-Core rev: aa3fe5a5c00085f5455a66c1033f4124e76239ec) Signed-off-by: Hiago De Franco <hiago.franco@toradex.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* hwdata: add recipe from meta-openembeddedHiago De Franco2024-11-271-0/+30
| | | | | | | | | | | | | | | | | Move hwdata recipe from meta-openembedded to openembedded-core. libdisplay-info is now a requirement for Weston, since commit a16598b038b2 ("backend-drm: make libdisplay-info mandatory"). However, in order to build libdisplay-info, hwdata is required. Since Weston is built inside openembedded-core, move hwdata in order to be able to upgrade Weston, so oe-core has no dependency on meta-oe. hwdata contains various hardware identification and configuration data. (From OE-Core rev: 3e5d5ba74beace1669ff04a7b0334aaa2693bdb6) Signed-off-by: Hiago De Franco <hiago.franco@toradex.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* enchant2: correct SRC_URI and other urisAlexander Kanavin2024-11-271-3/+3
| | | | | | | | | | https://github.com/AbiWord/enchant confirms the correct locations. (From OE-Core rev: 7733aae9c4d3fbaa7d4a3c69dcea3da8e54771e3) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* npth: upgrade 1.7 -> 1.8Alexander Kanavin2024-11-272-41/+2
| | | | | | | (From OE-Core rev: 9e6955dd85e8f7bfb835c1488aae38107604699c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgpg-error: upgrade 1.50 -> 1.51Alexander Kanavin2024-11-273-7/+4
| | | | | | | (From OE-Core rev: d6d4ddf023dcda0345e0ca646d6774c964c7917c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnutls: Upgrade to 3.8.8Simone Weiß2024-11-252-47/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | In 3.8.7 is that the linkage to compression libraries were changed to use a new tool called dlwrap, this caused issues during the last upgrade but is resolved now with the update to 3.8.8. Remove the workarounds for the update hence. Changes in 3.8.8 include: * libgnutls: * Experimental support for X25519MLKEM768 and SecP256r1MLKEM768 key exchange in TLS 1.3 * All records included in an OCSP response are now checked in TLS * Handling of malformed compress_certificate extension is now more standard compliant * More flexible library linking options for compression libraries, TPM, and liboqs support. The configure options, --with-zstd, --with-brotli, --with-zlib, --with-tpm2, and --with-liboqs now take 4 states: yes/link/dlopen/no, to specify how the libraries are linked or loaded. Do not set a specific library linking option but use the default(yes). (From OE-Core rev: 6620623ce280d20c2430ba87ba276a0490b05080) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>