summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* curl: ignore CVE-2025-4947 and CVE-2025-5025Peter Marko2025-07-211-0/+2
| | | | | | | | | | | | These CVEs are for integration with WolfSSL which is not supported by this recipe. Ignore it if openssl packageconfig is enabled as it was done also in scarthgap branch. (From OE-Core rev: 93ae0758ef35031c21a29f84e5481d99c218a232) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup: fix CVE-2025-4945Changqing Li2025-07-172-0/+119
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/448 (From OE-Core rev: db607024fdf95a03d7e08d728a6fdb6537835eee) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-4945Changqing Li2025-07-172-0/+118
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/448 (From OE-Core rev: 5d0cab3103f336d741e07ff4a2439450846f7273) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* icu: fix CVE-2025-5222Changqing Li2025-07-172-0/+167
| | | | | | | | | | | | | | | | | | CVE-2025-5222: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. Refer: https://nvd.nist.gov/vuln/detail/CVE-2025-5222 https://unicode-org.atlassian.net/browse/ICU-22957 https://github.com/unicode-org/icu/commit/2c667e31cfd0b6bb1923627a932fd3453a5bac77 (From OE-Core rev: 674a3780bb76f4c8adf92d4f91cc9146d32787aa) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup: fix CVE-2025-4969Changqing Li2025-06-132-0/+79
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/447 (From OE-Core rev: 2fd6621812f62acc2bbce47db9e9dc96349d8e3e) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup: fix CVE-2025-4948Changqing Li2025-06-132-1/+100
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/449 (From OE-Core rev: c6a014352ae480d90b84ca26653654814a7bda52) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup: fix CVE-2025-32908Changqing Li2025-06-133-1/+145
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/429 (From OE-Core rev: 6605a2b1f00e70e0756f73febc73ef01967ecb2a) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup: fix CVE-2025-32907Changqing Li2025-06-133-1/+271
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/429 (From OE-Core rev: fd541857dddeb8cf1da03c50a1087b65deb728ed) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup: fix CVE-2025-4476Changqing Li2025-06-132-1/+41
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/440 (From OE-Core rev: 0b93d8cedfd102fcd723786b975a5cf684c2b0e8) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup: fix CVE-2025-32914Changqing Li2025-06-132-1/+114
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/436 (From OE-Core rev: 323ee2ba9008eb1bdcd1082ca2a8952e30a8e333) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-4969Changqing Li2025-06-132-0/+38
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/447 (From OE-Core rev: e6f07ad948254c445bc9f5c94211148c8b7b7a68) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-4948Changqing Li2025-06-132-0/+39
| | | | | | | | | | Refer: http://gitlab.gnome.org/GNOME/libsoup/-/issues/449 (From OE-Core rev: 080c655c5a4590c55e8cc7d0e7a90676a3ed78ab) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32907Changqing Li2025-06-132-0/+40
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/428 (From OE-Core rev: 771a05a7f65c391b0e2ad01e509f63d14fd0a7f2) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup: upgrade 3.6.4 -> 3.6.5Changqing Li2025-06-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Changes in libsoup from 3.6.4 to 3.6.5: * session: Strip authentication credentials on cross-origin redirects [Patrick Griffis] * build: Use pkg-config instead of krb5-config for the gssapi dependency [Patrick Griffis] * http1: When using chunked encoding report an error in case of unexpected stream end [Andrzej Surdej] * http2: When a message has no content still respect its Content-Type [Patrick Griffis] * http2: Revert manual window size management temporarily, as it could stall [Patrick Griffis] * sniffer: Fix potential overflows [Patrick Griffis] * hsts: Fix minor leak [Patrick Griffis] * headers: Fix a few parsing edge cases that could be an out of bound read [Patrick Griffis] * connection: Avoid ever calling disconnect twice [Patrick Griffis] * auth-digest: Fix handling when a nonce isn't present [Patrick Griffis] * cookies: Limit max size of max-age, path, and domain attributes to 1024 bytes [Patrick Griffis] * cookies: Limit max size of name and value to 4096 bytes [Patrick Griffis] * docs: Remove references to old libsoup domain [Simon McVittie] Refer: https://gitlab.gnome.org/GNOME/libsoup/-/commit/766e17528251c9b696a6076300ac61adc95536ac (From OE-Core rev: a5585378dd9a2ecd8261958d02c34ecce1be5c0f) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-4476Changqing Li2025-06-132-0/+39
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/440 (From OE-Core rev: d5fa3329cc58713c3476559b61b0797ace819fbd) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2024-52531Changqing Li2025-06-133-0/+174
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/423 (From OE-Core rev: 34e9c7cfd832ed03b71fc4c23d82e853ff8c1711) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32912Changqing Li2025-06-132-0/+33
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/434 (From OE-Core rev: d1f3c8a62388133acd5df33ec857e06cc23ab9d0) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32910Changqing Li2025-06-134-0/+157
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/432 (From OE-Core rev: 1ecca7b624a7f33513d5e585bedec6438acef3e8) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32909Changqing Li2025-06-132-0/+39
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/431 (From OE-Core rev: 2329f4f77fc9403e42b0c97dbd693c5d8bc906ae) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32052Changqing Li2025-06-132-0/+33
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/425 (From OE-Core rev: ea01c691da88233ae8c767b59b9a7196351489fc) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32050Changqing Li2025-06-132-0/+30
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/424 (From OE-Core rev: 8de43e4c2d202a0bbb242cbc0dc096d07b78f0c1) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-46421Changqing Li2025-06-132-0/+48
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/439 (From OE-Core rev: 1012345aa97804da17867e7569a19259f37c2e25) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-46420Changqing Li2025-06-132-0/+62
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/438 (From OE-Core rev: 131a975cac59061f1b3013ce626a93160bf8d2be) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32914Changqing Li2025-06-132-0/+36
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/450 (From OE-Core rev: 1b3ed35fe9afa00987f64415a43ae9ed4f53e7f3) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32906Changqing Li2025-06-132-0/+72
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/404 (From OE-Core rev: 8bd48ff06234b7dc387e0c578c61429359894edd) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2024-52530Changqing Li2025-06-132-0/+151
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/377 (From OE-Core rev: 5fb04759fcc5b74ea7c2c47fbd1971755a6acb55) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-2784Changqing Li2025-06-132-0/+57
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/422 (From OE-Core rev: 1d00d1aa58b15adefb9f6ef5e85517018377aa63) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32053Changqing Li2025-06-132-1/+42
| | | | | | | | | | Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/426 (From OE-Core rev: 2f8307a3795ccaff50fbfb4fe716cdf37f1c82f2) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: update patch 0001-CVE-2025-32911.patchChangqing Li2025-06-131-1/+1
| | | | | | | | | | | | CVE-2025-32913 also fixed in this patch Refer: https://gitlab.gnome.org/GNOME/libsoup/-/issues/435 (From OE-Core rev: d95ddd4ebb4ea78fc64cfb025306f1f953ded3f9) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* sqlite3: mark CVE-2025-29087 as patchedPeter Marko2025-06-021-0/+1
| | | | | | | | | | | | | | Description of CVE-2025-29087 and CVE-2025-3277 are very similar. There is no lonk from NVD, but [1] and [2] from Debian mark these two CVEs as duplicates with the same link for patch. [1] https://security-tracker.debian.org/tracker/CVE-2025-29087 [2] https://security-tracker.debian.org/tracker/CVE-2025-3277 (From OE-Core rev: a9386d9f3f4f5256dca2eee6355e3cc74d77af1d) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* sqlite3: patch CVE-2025-29088Peter Marko2025-06-022-0/+180
| | | | | | | | | | | | Pick commit [1] mentioned in [2]. [1] https://github.com/sqlite/sqlite/commit/56d2fd008b108109f489339f5fd55212bb50afd4 [2] https://nvd.nist.gov/vuln/detail/CVE-2025-29088 (From OE-Core rev: bf22e18843bf10418e7f8f182036eaf78de98413) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* sqlite3: patch CVE-2025-3277Peter Marko2025-06-022-1/+31
| | | | | | | | | | | | Pick commit [1] mentioned in [2]. [1] https://sqlite.org/src/info/498e3f1cf57f164f [2] https://nvd.nist.gov/vuln/detail/CVE-2025-3277 (From OE-Core rev: 341297828a5b7c77e6d9113d5abcd22c3a0c224a) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* icu: set ac_cv_path_install to ensure install tool reproducibilityChangqing Li2025-05-191-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | icu will check program install path during do_configure, eg: checking for a BSD-compatible install... /path/to/install -c And this path will be writen into pkgdata.inc: INSTALL_CMD=$(INSTALL-L) Decided by if install is installed into recipe-sysroot-native during do_configure stage, the INSTALL_CMD could be /build/tmp/work/corei7-64-wrs-linux/icu/76-1/recipe-sysroot-native/usr/bin/install or /build/tmp/hosttools/install if the build is rerun after the sysroot was extended. set ac_cv_path_install to install under hosttools to make a deterministic result of INSTALL_CMD, avoid vary caused by the execute sequence of another task which DEPENDS on coreutils-native and independent with do_configure [RP: Removed paths from ac_cv_path_install to simplify and avoid QA error too] (From OE-Core rev: 208143e060cda6e22ae1e8c618e033fa9144b323) (From OE-Core rev: 60a38959a5b740b16044bf8644046b3ed4816ae7) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2024-52532Changqing Li2025-05-194-1/+132
| | | | | | | | | | | | | | CVE-2024-52532: GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. Refer: https://nvd.nist.gov/vuln/detail/CVE-2024-52532 (From OE-Core rev: e91fb129f132aae628b3a942afe9259c25f1b539) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* buildtools-tarball: Make buildtools respects host CA certificatesChangqing Li2025-05-141-3/+18
| | | | | | | | | | | | | | | | | | | | | | | To adapt user network enviroment, buildtools should first try to use the user configured envs like SSL_CERT_FILE/CURL_CA_BUNDLE/..., if these envs is not set, then use the auto-detected ca file and ca path, and finally use the CA certificates in buildtools. nativesdk-openssl set OPENSSLDIR as "/not/builtin", need set SSL_CERT_FILE/SSL_CERT_DIR to work nativesdk-curl don't set default ca file, need SSL_CERT_FILE/SSL_CERT_DIR or CURL_CA_BUNDLE/CURL_CA_PATH to work nativesdk-git actually use libcurl, and GIT_SSL_CAPATH/GIT_SSL_CAINFO also works nativesdk-python3-requests will use cacert.pem under python module certifi by default, need to set REQUESTS_CA_BUNDLE (From OE-Core rev: 0d5f241eee19c0dff9f9f59949485414935edaa2) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* buildtools-tarball: add envvars into BB_ENV_PASSTHROUGH_ADDITIONSChangqing Li2025-05-141-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Here is one testcase: For recipe tensorflow-lite-host-tools_2.18.0.bb, refer [1], do_configure[network] = "1" and it will git clone some repos in CMakeLists.txt When buildtools is used and nativesdk-git is installed into sdk, do_configure failed with error: [1/9] Performing download step (git clone) for 'protobuf-populate' Cloning into 'protobuf'... fatal: unable to access 'https://github.com/protocolbuffers/protobuf/': error setting certificate file: /usr/local/oe-sdk-hardcoded-buildpath/sysroots/x86_64-wrlinuxsdk-linux/etc/ssl/certs/ca-certificates.crt Fix by adding GIT_SSL_CAINFO in BB_ENV_PASSTHROUGH_ADDITIONS, so that user can export GIT_SSL_CAINFO=${GIT_SSL_CAINFO} in their do_configure:prepend() to fix above do_configure failure CURL_CA_BUNDLE and REQUESTS_CA_BUNDLE is similar envvars, so all add into BB_ENV_PASSTHROUGH_ADDITIONS [1] https://github.com/nxp-imx/meta-imx/blob/styhead-6.12.3-1.0.0/meta-imx-ml/recipes-libraries/tensorflow-lite/tensorflow-lite-host-tools_2.18.0.bb (From OE-Core rev: 5fa8cb40395977722d0d5a2271c8044598fb1f01) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* buildtools-tarball: move setting of envvars to respective envfileChangqing Li2025-05-142-0/+12
| | | | | | | | | | | | * make git,curl,python3-requests align with openssl, move the setting of envvars into respective envfile * for environment.d-openssl.sh, also check if ca-certificates.crt exist before export envvars (From OE-Core rev: 5c915fcada5868bdbb8aa3e28c18a26cfc41914f) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libsoup-2.4: fix CVE-2025-32911Changqing Li2025-05-142-1/+76
| | | | | | | | | | | | | | | | | | CVE-2025-32911: A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server. Backport patches to fix it [1] https://nvd.nist.gov/vuln/detail/CVE-2025-32911 [2] https://gitlab.gnome.org/GNOME/libsoup/-/issues/433 (From OE-Core rev: 75f1c57a5171859d1bfc58d69b3923d017b14303) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* acl: improve ptest packagingRoss Burton2025-03-276-137/+135
| | | | | | | | | | | | | | | | | | | | | | | | | As there's a small number of test binaries in acl, instead of installing large chunks of the build tree we can install just those and use a boilerplate test runner. Drop 0001-tests-do-not-hardcode-the-build-path-into-a-helper-l.patch and replace with an explicit -DBASEDIR= flag passed at build time. Drop 0001-test-patch-out-failing-bits.patch and delete the tests that fail entirely as they won't work without a specific user/group setup. Backport a patch from upstream so that some tests don't use excessive amounts of memory. Backport a patch from upstream to cater for both glibc and musl's behaviour with interleaved stdout/stderr, fixing the tests on musl. Clean up dependencies now that we're not shipping the build system. (From OE-Core rev: 2d82d5ea612ae6d7ac177f2a2792b3e3fdac1c70) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* attr: improve ptest packagingRoss Burton2025-03-272-36/+38
| | | | | | | | | | | | | | As there's just a few test binaries in attr, instead of installing large chunks of the build tree we can install just those and use a boilerplate test runner. Also add a comment explaining why we have to sed the test suite if musl is used. (From OE-Core rev: baa1cbab47326656f762562303ddf4b0d9cc2b5c) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* attr: merge .bb and .incRoss Burton2025-03-272-77/+74
| | | | | | | | | There's only one recipe using the .inc so the split is mostly pointless. (From OE-Core rev: a6f29ced550251487211d8a83dc00e98b306e544) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* db: Disable incompatible-pointer-types warning as errorKhem Raj2025-03-271-2/+3
| | | | | | | | | GCC-15 treats this warning as error (From OE-Core rev: f2fce342022f2d87a8679e6aeccfc20c380af5fe) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: Fix build with GCC-15Khem Raj2025-03-272-0/+45
| | | | | | | | | These signatures are exposed when build with musl particularly (From OE-Core rev: 2379010dfecffedc8d4253a03d5cb348f17ecee9) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: only set CA bundle in target buildMatthias Schiffer2025-03-241-1/+3
| | | | | | | | | | | | | | | In native/nativesdk builds, sysconfdir refers to a recipe sysroot directory, which will disappear once the workdir is cleaned up, breaking libcurl's HTTPS connections. By simply not setting --with-ca-bundle at all in non-target builds, curl defaults to the host system's CA certificates, which is desirable anyways to allow builds in environments that require local CA certificates. (From OE-Core rev: 4909a46e93ba774c960c3d3c277e2a669af3fea6) Signed-off-by: Matthias Schiffer <matthias.schiffer@ew.tq-group.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade 3.47.2 -> 3.48.0Jason Schonberg2025-03-202-8/+8
| | | | | | | | | | | Changelog: https://www.sqlite.org/releaselog/3_48_0.html (From OE-Core rev: db32c9d19fa21b0d1cd556dc86c2f60eb6de0593) Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libjitterentropy: upgrade 3.6.1 -> 3.6.2Wang Mingyu2025-03-191-2/+2
| | | | | | | | | | License-Update: Copyright year uptated to 2025 (From OE-Core rev: af6cc5ea16f557fb63114f6150e1207d15483eea) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: upgrade 2.54.1 -> 2.56.0Wang Mingyu2025-03-191-1/+1
| | | | | | | | (From OE-Core rev: 0a9da6b761997796405a73230a09227d5f5b2e78) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 9.1.1115 -> 9.1.1198Vijay Anusuri2025-03-191-2/+2
| | | | | | | | | | | | | | This includes CVE-fix for CVE-2025-27423 and CVE-2025-29768 Changes between 9.1.1115 -> 9.1.1198 ==================================== https://github.com/vim/vim/compare/v9.1.1115...v9.1.1198 (From OE-Core rev: 8e540bd287fd56e3a714f81395b59dd508a6d957) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gdbm: Use C11 standardKhem Raj2025-03-191-0/+3
| | | | | | | | | | GCC15 is switching defaults to C23 and gdbm is not yet ready to compile using C23 std. (From OE-Core rev: e0f13f9bc96a0dd4c5f6750a8106422a6d015359) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap: upgrade to 2.75Ross Burton2025-03-181-1/+1
| | | | | | | | | Just one change, to fix the Go psx module build. (From OE-Core rev: 8b95a195e31a1e01b3b508ca0a77908fa87f5d02) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-06 22:55:23 +0000