summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
...
* nghttp2: upgrade 1.63.0 -> 1.64.0Wang Mingyu2024-11-181-1/+1
| | | | | | | | | | | | | | | | Changelog: =========== - The internal :authoriy and host field value validation now treats @ as invalid. nghttp2_check_authority still treats it as a valid character. - Fix c-ares v1.34.0 version detection failure. - Fix race condition on h1 connection close. - Fix UDP datagram send/recv metric. (From OE-Core rev: 415f91dc13e3126d4b81c7809f511b3a8262cca8) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnl: upgrade 3.10.0 -> 3.11.0Wang Mingyu2024-11-181-1/+1
| | | | | | | | (From OE-Core rev: 8c05c01b165afa9d44624c7c7220327530ccbe25) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap: upgrade 2.70 -> 2.71Wang Mingyu2024-11-181-1/+1
| | | | | | | | (From OE-Core rev: e57f3af3c287c8367496216b29939fb6c0eeef43) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: upgrade 277 -> 283Wang Mingyu2024-11-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * Fix crash when objdump is missing when checking .EFI files. * Ignore errors when listing .ar archives. * Update copyright years. * Don't try and test with systemd-ukify within Debian stable. * Add support for UKI files. * Drop Depends on deprecated python3-pkg-resources. * Drop removal of calculated basename from readelf output. * Temporarily remove procyon-decompiler from Build-Depends as it was removed from testing * Add a helpful contextual message to the output if comparing Debian .orig tarballs within .dsc files without the ability to "fuzzy-match" away the leading directory. * Correctly invert "X% similar" value and do not emit "100% similar". * Update copyright years. (From OE-Core rev: 8bd657763c66b56446665f5568e0e900a82db0f9) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* attr: Fix the ptest path to test-driverOla x Nilsson2024-11-141-4/+7
| | | | | | | | | | | | | | | | | | Add a sed substitution for ${PTEST_PATH}/Makefile that transforms TEST_LOG_DRIVER = $(SHELL) $(top_srcdir)/build-aux/test-driver to TEST_LOG_DRIVER = $(SHELL) $(top_builddir)/build-aux/test-driver which is where the test-driver script can be found when installed. There used to be an oe-core automake patch to do this, but it broke non-ptest use of automake. Relates to [YOCTO #15635] (From OE-Core rev: 289db96b441e01c4ba1bbcd76fcf52b3258f2613) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* acl: Fix the ptest path to test-driverOla x Nilsson2024-11-141-4/+6
| | | | | | | | | | | | | | | | | | Add a sed substitution for ${PTEST_PATH}/Makefile that transforms TEST_LOG_DRIVER = $(SHELL) $(top_srcdir)/build-aux/test-driver to TEST_LOG_DRIVER = $(SHELL) $(top_builddir)/build-aux/test-driver which is where the test-driver script can be found when installed. There used to be an oe-core automake patch to do this, but it broke non-ptest use of automake. Relates to [YOCTO #15635] (From OE-Core rev: a951447ca3b51f77272381c8e0c5837671fabbbd) Signed-off-by: Ola x Nilsson <olani@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner: correct PV from 2.5.1 to 2.4.5.1Alexander Kanavin2024-10-291-1/+0
| | | | | | | | | | | 2.4.5.1 is an actual version, 2.5.1 was a typo mistake. That merged less than an hour ago, so no one should trip over version going backwards hopefully. (From OE-Core rev: d5e0f51bccae7410b10c98a93fa5853155c2f59e) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner: upgrade 2.4.5 -> 2.5.1Wang Mingyu2024-10-291-1/+1
| | | | | | | | (From OE-Core rev: d4497ba3fed93807f59c00925056aa21e72c2189) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunistring: upgrade 1.2 -> 1.3Wang Mingyu2024-10-291-1/+1
| | | | | | | | | | | | | | | | | | Changelog: =========== * The data tables and algorithms have been updated to Unicode version 16.0.0. * New function uc_is_property_modifier_combining_mark and new constant UC_PROPERTY_MODIFIER_COMBINING_MARK. * Fixed a bug in the *printf functions: The %ls and %lc directives could lead to a crash on Solaris and MSVC. (From OE-Core rev: 04aec6458c43c9d785738d77cdc16d95185a0020) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: 1.36.1 -> 1.37.0Andrej Valek2024-10-241-1/+2
| | | | | | | | | | | | | | | | | | - update to next stable version 1.37.0 - refresh defconfig - disable new applets (ip_link_can) - enable new applets (time64, find_exec_ok, getfattr, udhcpd_bootp) - disable sha acceleration by default - enable it just for x86-64, other possible option (x86) is broken - submitted to mailing list - fix problem with syslogd when nothing was logged - fix problem with start-stop-daemon tests - remove and refresh already merged patches (From OE-Core rev: 21753f16a364e32050cf8d79bfa7e0f89be52ce7) Signed-off-by: Andrej Valek <andrej.v@skyrain.eu> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libssh2: upgrade 1.11.0 -> 1.11.1Trevor Gamblin2024-10-243-643/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://github.com/libssh2/libssh2/releases/tag/libssh2-1.11.1 Patches '0001-disable-DSA-by-default.patch' and 'CVE-2023-48795.patch' were both dropped as they're included in version 1.11.1. License-Update: Copyright symbols were changed from (C) to lowercase (c) ptest results: |root@qemux86-64:~# ptest-runner libssh2 |START: ptest-runner |2024-10-22T20:15 |BEGIN: /usr/lib/libssh2/ptest |PASS: mansyntax.sh |PASS: test_simple |PASS: test_sshd.test |DURATION: 3 |END: /usr/lib/libssh2/ptest |2024-10-22T20:15 |STOP: ptest-runner |TOTAL: 1 FAIL: 0 (From OE-Core rev: bcd178082a50b81405019699d5acc3cd8273b732) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgit2: upgrade 1.8.1 -> 1.8.2Trevor Gamblin2024-10-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog (https://github.com/libgit2/libgit2/releases/tag/v1.8.2): - This release reverts a const-correctness change introduced in v1.8.0 for the git_commit_create functions. We now retain the const-behavior for the commits arguments from prior to v1.8.0. This change was meant to resolve compatibility issues with bindings and downstream users. What's Changed New features - Introduce a stricter debugging allocator for testing by ethomson in #6811 Bug fixes - Fix constness issue introduced in #6716 by ethomson in #6829 Build and CI improvements - README: add experimental builds to ci table by ethomson in #6816 (From OE-Core rev: 258e6c2f12e072e94c4e546baa4b7a0ebfb37427) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 9.1.0698 -> 9.1.0764Rohini Sangam2024-10-221-2/+2
| | | | | | | | | | | | | | | This includes CVE-fix for CVE-2024-45306 and CVE-2024-47814 Changes between 9.1.0698 -> 9.1.0764 ==================================== https://github.com/vim/vim/compare/v9.1.0698...v9.1.0764 (From OE-Core rev: 2f0e5e63399e544063c79b0b1f9555c820b0604c) Signed-off-by: Rohini Sangam <rsangam@mvista.com> Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: use explicit uri for all sourceforge upstream version checksAlexander Kanavin2024-10-153-6/+9
| | | | | | | | | | | | | | | | | Previously the check for some recipes relied on sourceforge redirecting from downloads.sourceforge.net (SRC_URI is set to that) into the actual project page. Sourceforge does this for interactive browsers, but not for wget. With the check no longer mimicking a browser, and being truthful about coming from wget we need to explicitly fetch the project page in all cases, which is what this commit does. (many recipes already set this explicitly and don't need to be tweaked) (From OE-Core rev: 4c21ce6e34f6ce8fbf4db7bc2fd017c8f7a811b4) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libproxy: upgrade 0.5.8 -> 0.5.9Wang Mingyu2024-10-111-1/+1
| | | | | | | | | | | | | | | | Changelog: ========== - Ignore invalid proxy URL - Memleak fixes - kde: Add ReversedException support - Fix memory leak using PX_FORCE_CONFIG - Update msys2 build steps - Remove white space in key value (From OE-Core rev: 4c3e4babdb072961a8e828405c17f0c6db438bb6) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* fribidi: upgrade 1.0.15 -> 1.0.16Wang Mingyu2024-10-111-1/+1
| | | | | | | | | | Changelog: Update Unicode character databases to v16.0.0 (From OE-Core rev: 9ac5ae1650fc3e4b873c1bfac936441816b88010) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: Upgrade to 0.78.0Khem Raj2024-10-116-3/+4125
| | | | | | | | | | * Needed for Gnome-47 components e.g. gnome-console * Add backports to fix build with clang libc++ (From OE-Core rev: 21b1248d6ebaeb45555280a54af150e61a235c8c) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Upgrade 8.9.1 -> 8.10.1Peter Marko2024-09-302-45/+3
| | | | | | | | | | | | | | | | resolves CVE-2024-8096 possibility to set random was removed in commit https://github.com/curl/curl/commit/269fdd4c6ed5d837d57448ac977f6f300968df15 tests have new perl module dependency removed backported patch present in new version (From OE-Core rev: 64c06dd06d747d7b53fb6ae6cf0550e13d63d8f6) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libjitterentropy: upgrade 3.5.0 -> 3.6.0Wang Mingyu2024-09-301-1/+1
| | | | | | | | | | | | | Changelog: =========== * Remove bi-modal behavior of conditioning function * Make jent_read_entropy_safe safer by retrying the health test * Move the version information to make them available at compile time (From OE-Core rev: 020656db7d3267775536ce36710844119476ca6e) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libevdev: upgrade 1.13.2 -> 1.13.3Wang Mingyu2024-09-301-1/+1
| | | | | | | | | | Changelog: include: sync event codes with kernel 6.10 (From OE-Core rev: 8c0167807a9c681b24f3025e6e762df1b3c97157) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iso-codes: upgrade 4.16.0 -> 4.17.0Wang Mingyu2024-09-301-1/+1
| | | | | | | | | | | | | Changelog: =========== * Add letter 'g' to conversion script for Tatar * Regenerate cyrillic Tatar from latin Tatar * Update Romanian translation and remove most pre- and suffixes (From OE-Core rev: ea4c6fe29ef4db612aa2479af29d7c4a4894e764) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: upgrade 2.52.0 -> 2.54.0Wang Mingyu2024-09-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * Make ATSPI_ROLE_PUSH_BUTTON an enum value again. * atk: Align button role with AT-SPI one. * Fix warning when atspi_event_quit is called multiple times. * tests: Clean up test application on SIGABRT/SIGSEGV. * Set (allow-none) for nullable parameters to atspi_match_rule_new. * collection: Allow specifying specific action names in match rules. * atk-adaptor: For collections, don't return objects with 0 actions as supporting AtkAction. * Rename ATSPI_ROLE_PUSH_BUTTON to ATSPI_ROLE_BUTTON. * Replace disable_p2p with an ATSPI_DISABLE_P2P environment variable. * Drop use of deprecated eaves-dropping option in dbus configuration * Notify about HelpText attribute change. * Fix possible double unref in add_accessible_from_iter. * tests: Fix missing declaration for getpid(). (From OE-Core rev: c1c0c996e6db852b84d6bfff9cbc3eec628446a2) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnutls: upgrade to 3.8.7.1Ross Burton2024-09-302-1/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | A notable change in 3.8.7 is that the linkage to compression libraries was changed to use a new tool called dlwrap, so these libraries should be loaded at runtime with dlopen() instead of dynamically linked at build time. However, the dlopen() detection fails in cross builds[1] and it falls back to dynamic linking so this isn't an issue we need to deal with at present. Also note that whilst dlwrap is a tool written in rust that needs the clang includes, it's a maintainer tool and the generated files are in git, so we should never need to rerun it. Backport a patch to fix AM_CONDITIONAL to resolve linkage problems. The 3.8.7.1 tarball is actually just a rebuild of 3.8.7 with the translations included (which were missing in 3.8.7), so set S explicitly for this release. [1] https://gitlab.com/gnutls/gnutls/-/issues/1583 (From OE-Core rev: d38f32f493192fa5965f7271ef6ba5aae33849f5) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* icu: update patch Upstream-StatusRoss Burton2024-09-301-3/+1
| | | | | | | (From OE-Core rev: 717eb63df55f11d3eb4353ae1364a5781adfce76) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpcre2: Update base uri PhilipHazel -> PCRE2ProjectKhem Raj2024-09-171-1/+1
| | | | | | | (From OE-Core rev: bd6d18228835773163a085070651e13ed961d66d) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* taglib: upgrade 2.0.1 -> 2.0.2Wang Mingyu2024-09-041-1/+1
| | | | | | | | | | | | | | | Changelog: =========== * Fix parsing of ID3v2.2 frames. * Tolerate MP4 files with unknown atom types as generated by Android tools. * Support setting properties with arbitrary names in MP4 tags. * Windows: Fix "-p" option in tagwriter example. * Support building with older utfcpp versions. (From OE-Core rev: 0a442926436ac98c164242b983ead73a6c195169) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nghttp2: upgrade 1.62.1 -> 1.63.0Wang Mingyu2024-09-041-1/+1
| | | | | | | (From OE-Core rev: 41671d39d54e4225e16ee39b25e64f6935534dba) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* liburcu: upgrade 0.14.0 -> 0.14.1Wang Mingyu2024-09-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== * Fix: missing typename in URCU_FORCE_CAST * Allow building with GCC >= 13.3 on RISC-V * pointer.h: Fix the rcu_cmpxchg_pointer documentation * Adjust shell script to allow Bash in other locations * fix: handle EINTR correctly in get_cpu_mask_from_sysfs * Relicense src/compat-smp.h to MIT * ppc.h: use mftb on ppc * Fix: allow clang to build liburcu on RISC-V * Fix -Walloc-size * urcu/uatomic/riscv: Mark RISC-V as broken * Fix: urcu-bp: misaligned reader accesses * LoongArch: Document that byte and short atomics are implemented with LL/SC * Add LoongArch support * tests/regression/rcutorture: Add wait state * urcu-wait: Initialize node in URCU_WAIT_NODE_INIT * Fix: urcu-wait: add missing futex.h include * Adjust shell scripts to allow Bash in other locations * Add support for OpenBSD * Revert "compiler.h: Introduce caa_unqual_scalar_typeof" * rculfhash: Use caa_container_of_check_null in cds_lfht_entry * compiler.h: Introduce caa_container_of_check_null * compiler.h: Introduce caa_unqual_scalar_typeof * Avoid calling caa_container_of on NULL pointer in cds_lfht macros * Fix: revise urcu_read_lock_update() comment * Fix: uatomic powerpc comment about lwsync * fix: aarch64: allow RHEL7 gcc 4.8.5-11 * fix: warning 'noreturn' function does return on ppc * Fix: use __noreturn__ for C11-compatibility (From OE-Core rev: 1800756f155975071d14021f3329a87b5f91c4cb) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup: upgrade 3.4.4 -> 3.6.0Wang Mingyu2024-09-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * Allow HTTP/2 to be used with non-HTTP proxies * Strictly forbid NUL bytes in headers * Fix minor leaks * Add 'SOUP_METHOD_PATCH' * websocket: Add 'SoupWebsocketConnection:keepalive-pong-timeout' property * Increase maxmimum size of HTTP headers * Fix 'soup_uri_copy()' in Vala * Fix leak in 'soup_message_new_from_encoded_form()' * multipart: Improve handling of messages missing termination * logger: Fix request filter function being called with response user data * logger: Fix response bodies never being logged if request bodies aren't * logger: Add Soup-Host to logged headers for when Host is missing * cookies: Fix incorrect logic in determining same-site cookies * cookie-jar-db: Explicitly handle old databases lacking same-site column * cookies: Limit the Max-Age to 1 year (From OE-Core rev: f879d942d4b980a59b1000c1b0710282e08991f5) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: upgrade 276 -> 277Wang Mingyu2024-09-041-1/+1
| | | | | | | | | | | | Changelog: =========== - Don't crash when attempting to hashing symlinks with targets that point to a directory. (From OE-Core rev: 6f21fa5bb71349a5cf6b6fd71548f78c3421ff22) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* aspell: Backport a fix to build with gcc-15/clang-19Khem Raj2024-09-012-1/+44
| | | | | | | (From OE-Core rev: d6cb53c0773d28f57b5699125ef825936d4725d1) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* apr: upgrade 1.7.4 -> 1.7.5Vijay Anusuri2024-09-012-2/+2
| | | | | | | | | | | | | | | Refreshed patch 0001-configure-Remove-runtime-test-for-mmap-that-can-map-.patch Includes security fix CVE-2023-49582 changelog: https://downloads.apache.org/apr/CHANGES-APR-1.7 (From OE-Core rev: c5d9498466526451910fa02862f8860b2bb81df8) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lz4: Disable static libraries againRichard Purdie2024-08-291-1/+1
| | | | | | | | | This option was incorrectly removed in the recent upgrade. We don't use/need the static library so disable the build of it to save time/disk usage. (From OE-Core rev: 2ba36d98bb0fcdd8d918da8fb69f09a06b75fd46) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lz4: Fix static library reproducibility issueRichard Purdie2024-08-293-2/+35
| | | | | | | | | | | | The autobuilder was seeing an intermittent reproducbility issue in lz4 with regard to symbol ordering in the static library. Add a patch to fix this which has been submitted upstream. Fix the SRC_URI whitespace and cleanup the patch directory naming whilst here. (From OE-Core rev: 79d6d0fa239ab0cf271c01d8169a7d41811f8b4e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 9.1.0682 -> 9.1.0698Siddharth Doshi2024-08-291-2/+2
| | | | | | | | | | | | | This includes CVE-fix for CVE-2024-43790 and CVE-2024-43802 Changes between 9.1.0682 -> 9.1.0698 ==================================== https://github.com/vim/vim/compare/v9.1.0682...v9.1.0698 (From OE-Core rev: e530265415d93e3f49ec7874cf720aad18ab2e22) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: upgrade 0.74.2 -> 0.76.3Alexander Kanavin2024-08-282-9/+6
| | | | | | | | | lz4 is a new required dependency. (From OE-Core rev: 74690600e2d5037a45e754ae28cd6afb39cf2c5c) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lz4: upgrade 1.9.4 -> 1.10.0Alexander Kanavin2024-08-281-5/+5
| | | | | | | | | | | | | Drop most EXTRA_OEMAKE settings as no longer necessary. (makefiles use weak assignments and shell variables then take precedence). License-Update: clarification that it's gpl2-or-later. (From OE-Core rev: a4dde4e0dcc2cc75c4eec5d78fbf2a1e47401050) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* p11-kit: update 0.25.3 -> 0.25.5Alexander Kanavin2024-08-282-35/+1
| | | | | | | (From OE-Core rev: f7b3e0d91d68459e45f57338ca5a4b85219824cd) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libksba: update 1.6.6 -> 1.6.7Alexander Kanavin2024-08-282-11/+13
| | | | | | | (From OE-Core rev: d832c99de2315a852157b9dc56c87cff2dc71a3e) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: Ignore CVE-2024-35325Peter Marko2024-08-281-0/+1
| | | | | | | | | | | This is similar CVE as the previous ones from the same author. https://github.com/yaml/libyaml/issues/303 explain why this is misuse (or wrong use) of libyaml. (From OE-Core rev: c97f00d122f60501751625e27b9c70166396d754) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Ignore CVE-2024-32928Simone Weiß2024-08-261-0/+1
| | | | | | | | | This CVE affects google cloud services that utilize libcurl wrongly. (From OE-Core rev: 27ac7879711e7119b4ec8b190b0a9da5b3ede269) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: 2.4.5 -> 2.5.0hongxu2024-08-237-27/+57
| | | | | | | | | Fix compile failure with musl (From OE-Core rev: e7bcd683365961e661c419e79a4bb641069f2a79) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxslt: 1.1.39 -> 1.1.42hongxu2024-08-231-2/+2
| | | | | | | | | | | Remove mem-debug option [1] [1] https://gitlab.gnome.org/GNOME/libxslt/-/commit/c65a7c05f98ea4e9fae1247510b45db9dd3ec907 (From OE-Core rev: 25120a49a4f3175df3e6b73d426f96acd47979fe) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libgpg-error: 1.49 -> 1.50hongxu2024-08-232-24/+38
| | | | | | | | | | | * Rebase pkgconfig.patch * No license change, just update copyright years: 2001-2023 -> 2001-2024 (From OE-Core rev: 58576504cf178faf4d18f782f5636e298e4f4175) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade 3.45.3 -> 3.46.1Alexander Kanavin2024-08-231-1/+1
| | | | | | | (From OE-Core rev: 5b6aad7c2ca3bae02a17d3d0321d4d99afe4b8ef) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nghttp2: upgrade 1.62.0 -> 1.62.1Alexander Kanavin2024-08-231-1/+1
| | | | | | | (From OE-Core rev: 348d9565c34936ee5a0f8acb710603564969f29b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnl: upgrade 3.9.0 -> 3.10.0Alexander Kanavin2024-08-232-1/+34
| | | | | | | | | | Add a patch to disable a failing test that is proving difficult to investigate. (From OE-Core rev: 0dc2dfcacaa99bdb306215d2a5e135038f72d895) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: upgrade 1.85.0 -> 1.86.0Alexander Kanavin2024-08-236-12/+14
| | | | | | | (From OE-Core rev: 9ec3b3e91bd4c7b2ce09059424ddb2931a9af442) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner: Update 2.4.4 -> 2.4.5Jörg Sommer2024-08-231-1/+1
| | | | | | | | | | | Changelog: aea9f42 ptest_list_remove: Fix pointer adjustment of prev and next (From OE-Core rev: f70ec9bcd379b5fc4c85d7479d42789c2e22f4a9) Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 9.1.0114 -> 9.1.0682Siddharth Doshi2024-08-212-42/+2
| | | | | | | | | | | | | | | | | | This includes CVE-fix for CVE-2024-41957, CVE-2024-41965 and CVE-2024-43374 Changes between 9.1.0114 -> 9.1.0682 ==================================== https://github.com/vim/vim/compare/v9.1.0114...v9.1.0682 Note: ==== Removed patch "vim-add-knob-whether-elf.h-are-checked.patch" as libelf checks are removed from configure.ac as per commit https://github.com/vim/vim/commit/1acc67ac4412aa9a75d1c58ebf93f2b29585a960 (From OE-Core rev: 6d2938e53cad5d9bf2e78a5403e9f9fab1db77b4) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>