summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
* gnupg: upgrade 2.5.3 -> 2.5.4Hongxu Jia2025-02-186-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Noteworthy changes in version 2.5.4 (2025-02-12) ------------------------------------------------ * gpg: New option --disable-pqc-encryption. [rG00c31f8b04] * gpg: Fix --quick-add-key for Weierstrass ECC with usage given.[T7506] * gpg: Fix handling with no CRC armor. [T7071] * gpg: New private Kyber keys are now cross-referenced using a new Link attribute. [T6638] * gpg: Fix an import problem with keys having another primary key as a subkey. [T7527] * gpgsm: Allow unattended PKCS#12 export without passphrase. [rG159e801043] * gpgsm: Allow CSR generation with an unprotected key. [rG89055f24f4] * agent: New option --change-std-env-name. [T7522] * agent: Fix ssh-agent's request_identities for skipped Brainpool keys. [rG2469dc5aae] * Do not package zlib and bzip2 object files in a speedo release build. [T7442] See-also: gnupg-announce/2025q1/000490.html Release-info: https://dev.gnupg.org/T7480 https://dev.gnupg.org/source/gnupg/browse/master/NEWS (From OE-Core rev: 59f26c7311ae3d5596f517b739e7c3435db070a3) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* setuptools3-base.bbclass: override default subprocess timeoutHongxu Jia2025-02-181-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | The environment variable SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT allows to override the subprocess timeout. The default is 40 seconds and should work for most needs.[1] However, it was not enough while using git shallow tarball and starting multiple Yocto world builds in one host. |   File "tmp/work/x86_64-linux/python3-scancode-native/32.1.0/recipe-sysroot- native/usr/lib/python3.13/subprocess.py", line 1263, in _check_timeout |     raise TimeoutExpired( |     ...<2 lines>... |             stderr=b''.join(stderr_seq) if stderr_seq else None) | subprocess.TimeoutExpired: Command '['git', '--git-dir', 'tmp/work/x86_64- linux/python3-scancode-native/32.1.0/git/.git', 'status', '--porcelain', '--untracked-files=no']' timed out after 40 seconds Explicitly set variable SETUPTOOLS_SCM_SUBPROCESS_TIMEOUT to 600s in bbclass, and we could override it in local.conf [1] https://github.com/pypa/setuptools-scm/blob/main/docs/overrides.md (From OE-Core rev: a3a2edbf7139b7f8c665c2b0b13e094a334e4441) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check.bbclass: Mitigate symlink related errorNiko Mauno2025-02-181-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to Yocto reference manual, in description of the IMAGE_LINK_NAME variable, it is said that It is possible to set this to "" to disable symlink creation, however, you also need to set :term:`IMAGE_NAME` to still have a reasonable value e.g.:: IMAGE_LINK_NAME = "" IMAGE_NAME = "${IMAGE_BASENAME}${IMAGE_MACHINE_SUFFIX}${IMAGE_VERSION_SUFFIX}" However, when using following additions in local.conf file: INHERIT += "cve-check" IMAGE_LINK_NAME = "" IMAGE_NAME = "${IMAGE_BASENAME}${IMAGE_MACHINE_SUFFIX}${IMAGE_VERSION_SUFFIX}" the implicit symlink creation in cve_check_write_rootfs_manifest leads to following build failure $ bitbake core-image-minimal core-image-base ... ERROR: core-image-base-1.0-r0 do_image_complete: Recipe core-image-base is trying to install files into a shared area when those files already exist. The files and the manifests listing them are: /home/poky/build/tmp/deploy/images/qemux86-64/.json (matched in manifest-qemux86_64-core-image-minimal.image_complete) Please adjust the recipes so only one recipe provides a given file. Mitigate the issue by creating the symlink only in case IMAGE_LINK_NAME has not been set to empty string. (From OE-Core rev: 64bfec359bd909761ce0a6a716286d938ed162d1) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd/systemd-boot: upgrade from 257.1 to 257.3Chen Qi2025-02-185-125/+1
| | | | | | | | | | | 0001-ukify-measure-Revert-changes-to-use-SizeOfImage-from.patch is dropped as it is in the new version. (From OE-Core rev: 5c72734dc99d1287e805530d925a37c9aa70ba9d) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* psplash: update to latest revYi Zhao2025-02-181-1/+1
| | | | | | | | | | * 5a32cf6 psplash.c: fix crash from length becoming negative (From OE-Core rev: 1845f785359a689add866881286fdac38753e5bb) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Upgrade to latest tip of trunkKhem Raj2025-02-181-1/+1
| | | | | | | | | | | | | | | | | | | * c47ad25e iconv: harden UTF-8 output code path against input decoder bugs * 4c4f15da hasmntopt: match only whole options not arbitrary substrings * e5adcd97 iconv: fix erroneous input validation in EUC-KR decoder * 5e594aea iconv: fix erroneous decoding of some invalid ShiftJIS sequences * 6af4f25b s390x: manually inline __tls_get_addr in __tls_get_offset * 5ccf05d8 ldso: don't reclaim zero-memory-sized segments * 1a985764 sched.h: reduce namespace conflicts in _GNU_SOURCE profile * d36e5bf8 mq: add x32-specific implementations to work around mismatched kernel ABI * 561cd07d SIGEV_THREAD timers: re-block signals when reusing kernel thread * 47fa6e4f SIGEV_THREAD timers: fix fatal signal if internal SIGTIMER becomes unblocked (From OE-Core rev: bfcc61f7b0ec42fafdcc7441bd50c8a75f456693) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxcrypt-compat,libxcrypt: upgrade 4.4.37 -> 4.4.38Khem Raj2025-02-184-34/+1
| | | | | | | | | | | | Drop patch which is already applied upstream [1] since 4.4.20 [1] https://github.com/besser82/libxcrypt/commit/fed81d1a98fab52839b60a55447d368899034847 (From OE-Core rev: 7b802e4e55b37e985cc7151a8a8561b206563509) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-lxml: upgrade 5.3.0 -> 5.3.1Khem Raj2025-02-181-1/+1
| | | | | | | | (From OE-Core rev: 4572eee91b73e0a0b50c8537a4ea6ebad1476b66) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux/util-linux-libuuid: upgrade from 2.40.2 to 2.40.4Chen Qi2025-02-187-337/+198
| | | | | | | | | | | | | | | | | | | | | The following patch dropped because it is in the new version: - 0001-autotools-fix-securedir-and-pam_lastlog2-install.patch libfdisk-cfdisk-and-sfdisk-sector-size-improvements.patch is replaced by two new patches: - 0001-cfdisk-add-sector-size-commanand-line-option.patch - 0002-sfdisk-add-sector-size-commanand-line-option.patch This is because the original patch is a squash of four patches and two of them are in the new version. So extract the remaining two that are not in the current version and make them separate patches for better tracking. (From OE-Core rev: e87b9bccc52bfba0c48db4920c0996d7dd6a0866) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsdl2: upgrade 2.30.11 -> 2.30.12Yi Zhao2025-02-181-1/+1
| | | | | | | | | | | | | | | | | | | This is a stable bugfix release, with the following changes: Improved XInput controller detection on Windows Added support for the 8BitDo Ultimate 2C Wireless in Bluetooth mode Fixed Steam Deck controller not being visible to games running on Proton 9 and older Fixed a crash when hot-plugging keyboards and mice on Linux Fixed a crash when disconnecting a Bluetooth audio device on macOS Fixed building with Xcode using older Apple SDKs Fixed a crash when disconnecting an external display on iOS Fixed detection of function keys on Emscripten (From OE-Core rev: 01a8dba6281ad1f026ab6d42a5d509207789b04f) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* webkitgtk: upgrade 2.46.5 -> 2.46.6Yogita Urade2025-02-182-38/+1
| | | | | | | | | | | | | | | | | | Includes fix for CVE-2025-24143, CVE-2025-24150, CVE-2025-24158 and CVE-2025-24162 Drop 0001-Support-ICU-76.1-build.patch fix is part of upgrade. Changelog: ========== - Fix a crash when enabling Skia CPU rendering. - Fix several crashes and rendering issues. (From OE-Core rev: 289e09c1a090d06146406886d4763dd22203c231) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: fix header file conflict in case of multilibChen Qi2025-02-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | When enabling multilib for qemuarm64, populate_sdk would fail with the following error: Error: Transaction test error: file /usr/include/bits/indirect-return.h conflicts between installs of lib32-libc6-dev-2.41 and libc6-dev-2.41+ The problem could be reproduced by adding the following lines in local.conf and then run 'bitbake core-image-minimal -c populate_sdk': MACHINE ?= "qemuarm64" require conf/multilib.conf MULTILIBS ?= "multilib:lib32" DEFAULTTUNE:virtclass-multilib-lib32 ?= "armv7athf-neon" Use oe_multilib_header to handle bits/indrect-return.h to fix this issue. (From OE-Core rev: e13d464db8db4e0fdec6c076aecff5284a27c510) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* psplash: start via udev if framebuffer device detectedMikko Rapeli2025-02-184-11/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | psplash-start.service expected to find /dev/fb0 and failed if device was not found. This failure breaks systemd oeqa runtime test with "runqemu nographic". Starting psplash based on detected framebuffer device fixes systemd boot status and systemd oeqa runtime tests for qemu boots with and without graphics support. Note that psplash-systemd.service still depends on /dev/fb0 so startup with multiple framebuffer devices may not work correctly. I don't have devices with multiple framebuffer devices to test with. On qemu machine with graphics, psplash displays yocto logo correctly and boot progress bar as well. Once boot completes to systemd "running" state, the logo is replaced by login prompt. On qemu machine without graphics, boot completes without psplash or failures and login over serial console works normally. Tested with genericarm64 machine poky-altcfg distro and core-image-base image on qemu. AMD kv260 tested as well but graphics stack is not yet working there so boot is similar to qemu without graphics. (From OE-Core rev: 3820f6f342c2309ba7d51d3c08b3a951c2c17781) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest/cases/signing.py: Re-enable self-testZoltán Böszörményi2025-02-181-1/+2
| | | | | | | | | With all the pieces in place, the self test can be re-enabled. (From OE-Core rev: 46e8b94582ea9734117d20cd62c39fb4450c00c4) Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dnf: Set SEQUOIA_CRYPTO_POLICY in wrapped toolsZoltán Böszörményi2025-02-181-0/+1
| | | | | | | | | Point to the crypto policy file so dnf can work with signed packages. (From OE-Core rev: 7067d469742f0be4dd2b9ea3953fb039a4410085) Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm: Set SEQUOIA_CRYPTO_POLICY in wrapped toolsZoltán Böszörményi2025-02-181-0/+1
| | | | | | | | | Point to the crypto policy file so RPM signing may work. (From OE-Core rev: 23083b72e3e6587dca9ca5a16762676e981b4a3b) Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm-sequoia: New recipe for version 1.7.0Zoltán Böszörményi2025-02-183-0/+547
| | | | | | | | | | | | rpm 4.20 removed the built-in code to handle signed packages and uses rpm-sequoia as a more feature complete library. Runtime-depend on rpm-sequoia-crypto-policy. (From OE-Core rev: d8b01b436d37f4deb2de5d234e8f04c957719ca3) Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm-sequoia-crypto-policy: New recipeZoltán Böszörményi2025-02-182-0/+39
| | | | | | | | | This ships a crypto policy file for rpm-sequoia. (From OE-Core rev: 8e499cefab6bfb40b40ae3eb811ca3eb51a7d4bc) Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: upgrade 20250109 -> 20250211Vivek Puar2025-02-181-5/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add DSP firmware for Qualcomm SA8775P / QCS9100 platforms to ${PN}-qcom-sa8775p-{audio, compute, generalpurpose} packages, and updating it with correct license information. Add QCA6698AQ package ${PN}-ath11k-qca6698aq to ath11k firmware. Add bluetooth WCN3950 package ${PN}-qca-wcn3950, bluetooth QCA6698 package ${PN}-qca-qca6698 to qca firmware. Add two more WCN3950 1.3 NVM files to ${PN}-qca-wcn3950 package. Add device specific ath11k firmware to QCM6490 boards in ${PN}-qcom-qcm6490-wifi package. Add Firmware files for Lenovo T14s G6 Qualcomm platform to ${PN}-qcom-x1e80100-lenovo-t14s-g6-{adreno, audio, compute} packages. License-Update: additional files (From OE-Core rev: 6148a282509106879388138fe682721d07968452) Signed-off-by: Vivek Puar <quic_vpuar@quicinc.com> Cc: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils: upgrade from 9.5 to 9.6Chen Qi2025-02-181-2/+3
| | | | | | | | | | | | | Upgrade coreutils from 9.5 to 9.6. License-Update: Update copyright year (2024 -> 2025). Fix do_install_ptest for new version to avoid buildpath QA issue. (From OE-Core rev: b3de417033fda92956db093cf17a0b5134bd2f88) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffutils: upgrade from 3.10 to 3.11Chen Qi2025-02-181-1/+1
| | | | | | | | | Upgrade diffutils from 3.10 to 3.11. (From OE-Core rev: deb6b9a2ef250143d181c0a603606d3368de464f) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: upgrade from 4.17.1 to 4.17.2Chen Qi2025-02-182-31/+1
| | | | | | | | | | | | Upgrade shadow from 4.17.1 to 4.17.2. 0001-lib-attr.h-use-C23-attributes-only-with-gcc-10.patch is dropped because it has been merged. (From OE-Core rev: 6170d60175237dd4a0471d6f88cee2db4a37b7c4) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat: upgrade from 12.7.6 to 12.7.7Chen Qi2025-02-181-1/+1
| | | | | | | | | Upgrade sysstat from 12.7.6 to 12.7.7. (From OE-Core rev: a925302d95e8c8fbd9141db7d9e5e4dcbd26c78b) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-check: allow feed choiceMarta Rybczynska2025-02-181-2/+12
| | | | | | | | | | | | | | | | | | | Allow choice of one of three feeds and update task dependencies accordingly. All feeds contain data from NVD and are stored in different files. Set the NVD_DB_VERSION variable to choose feed: NVD2 (default) - the NVD feed with API version 2 NVD1 - the NVD JSON feed (deprecated) FKIE - the FKIE-CAD feed reconstruction In case of malformed database feed name, we default to NVD2 and show an error. (From OE-Core rev: f265812bfb6797aee10e7be42865736c9ff3478f) Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: add the fkie sourceMarta Rybczynska2025-02-181-13/+113
| | | | | | | | | | | | Add support for FKIE-CAD reconstruction of NVD feed from https://github.com/fkie-cad/nvd-json-data-feeds We download this feed directly from github releases. (From OE-Core rev: f6253ac8189db09fbe87141aca1733cb37a4d78f) Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: update structureMarta Rybczynska2025-02-181-7/+21
| | | | | | | | | | | | | | | Update the database structure and tasks to fit the current YP master. This means: - add the unpack task - update the database structure (CVSS, vector string) - use the temporary database in the same directory as the download However, the old feed does not include CVSS4 (From OE-Core rev: dd249921a5d6b8e472242b57415de3f210dc81f1) Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-db-native: restoreMarta Rybczynska2025-02-181-0/+291
| | | | | | | | | | | Restore cve-update-db from kirkstone Use cve-update-db-native.bb from OE 8c10f4a4dc12f65212576e6e568fa4369014aaa0 (From OE-Core rev: c84e19edc15b622bfe4d7e268ca5cb18312f09d6) Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: Start nfsv4 utilities with sysvinitDaniel McGregor2025-02-182-48/+289
| | | | | | | | | | Rewrite the nfs sysvinit scripts to start the services required by nfsv4: gssd, idmapd, and statd. (From OE-Core rev: 2cca2dfb6acc25f1a6a25dc60423708a78cef85d) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: Configure nfsv4 ID mapping & KerberosDaniel McGregor2025-02-186-344/+219
| | | | | | | | | | | | | | Add support for the nfsv4 user ID mapping daemon, configured with a sensible default, and add a packageconfig for Kerberos support. This is reasonably tested in production in our environment, but only systemd support. There'll be some more work to do to get GSSAPI and NFS idmapd support integreated into that. (From OE-Core rev: a7ea135108e445197a58b19601d77eb9d287af69) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: Use upstream systemd service filesDaniel McGregor2025-02-188-204/+11
| | | | | | | | | | | | | | Reduce diffs against upstream by using the service files provided by them. This reduces our dependence on patches that simply change the names of a service. This also changes the way some nfs options get set for systemd, it introduces the nfs.conf file for configuration, which all daemons already support. (From OE-Core rev: eeab3fa1423d499f9b39fda7a7514e619a3ac010) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: clean up startupDaniel McGregor2025-02-182-9/+8
| | | | | | | | | | | | | Change the sysvinit script to start at the S runlevel, this matches Debian, and prevents systemd from generating a unit file for it. Also have the nfsd systemd service request the nfsd kernel filesystem mountpoint. This avoids startup failures in unpriviled containers or other setups that don't support the filesystem. (From OE-Core rev: 6110687d199bf390380fe84c330858e3b03f681d) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: Upgrade 9.1.0764 -> 9.1.1043Divya Chellam2025-02-181-2/+2
| | | | | | | | | | | | | | This includes CVE-fix for CVE-2025-22134 and CVE-2025-24014 Changes between 9.1.0764 -> 9.1.1043 ==================================== https://github.com/vim/vim/compare/v9.1.0764...v9.1.1043 (From OE-Core rev: ed871f8e4a4d4be7d88f52e3a9100476a1d2f026) Signed-off-by: Divya Chellam <divya.chellam@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: upgrade 3.4.0 -> 3.4.1Peter Marko2025-02-183-91/+1
| | | | | | | | | | | | | | | Release information: https://github.com/openssl/openssl/blob/openssl-3.4/NEWS.md#major-changes-between-openssl-340-and-openssl-341-11-feb-2025 Handles CVE-2024-12797 and CVE-2024-13176. Remove two patches included in the new version. (From OE-Core rev: d7ac886d91ccf6b91f67fb0c843fc1765d9dafb1) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-license-expression: fix ptest installationRoss Burton2025-02-181-3/+4
| | | | | | | | | | | | | This recipe was overriding do_install_ptest which is provided by the ptest-python-pytest class, so there was no tests or run-ptest installed. Use an append override, and minimise the installed files: use a symlink so that scancode-licensedb-index.json is found and install setup.cfg. (From OE-Core rev: 164876d33af9edaac37a686726727d3bc3d10aa9) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: upgrade 8.12.0 -> 8.12.1Peter Marko2025-02-182-2/+2
| | | | | | | | | Rebase patch which needs it. (From OE-Core rev: 375167de2f46338d77ca9b79325819ea4068751c) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* spdx30: Improve os.walk() handlingJoshua Watt2025-02-181-4/+16
| | | | | | | | | | | | | | | | | | There have been errors seen when assembling root file system SPDX documents where they will references files that don't exist in the package SPDX. The speculation is that this is caused by os.walk() ignoring errors when walking, causing files to be omitted. Improve the code by adding an error handler to os.walk() to report errors when they occur. In addition, sort the files and directories while walking to ensure consistent ordering of the file SPDX IDs. (From OE-Core rev: 86b581e80637cd8136ce7a7e95db94d9553d2f60) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-setuptools-scm: respect GIT_CEILING_DIRECTORIESEtienne Cordonnier2025-02-182-0/+37
| | | | | | | | | | | | | | | | | | | | | | Fixes https://bugzilla.yoctoproject.org/show_bug.cgi?id=15740 python3-setuptools-scm was ignoring GIT_CEILING_DIRECTORIES which is set by poky, and it was thus finding a wrong value of "toplevel" in ./src/setuptools_scm/_file_finders/git.py The code is supposed to generate the list of files contained in python3-setuptools-scm, but it was instead running "git archive" on whatever git repository was above the build directory, because the tarball containing the sources of python3-setuptools-scm does not contain a .git directory. This is barely noticeable when building as a subdirectory of poky which is only 48MB, but this was causing serious slowdowns of python3-setuptools-scm:do_compile when building inside a big git repository with files tracked using git-lfs (50 minutes in my use-case). Reported upstream as https://github.com/pypa/setuptools-scm/issues/1103 (From OE-Core rev: 4ebe72477484cf68165b6f736ce10373e97d0e6d) Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* package_ipk: Use preferred form of --force-postinstallRichard Purdie2025-02-111-1/+1
| | | | | | | | | | opkg accepts both - and _ in its options but use the help text preferred format. From https://github.com/yoctoproject/poky/pull/14 from Philipp-Alexander Blum <blum@gessler.de>. (From OE-Core rev: 4bea64347407dfb1eb46dacffd05af3bd200b419) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxkbcommon: convert to gitAlexander Kanavin2025-02-111-4/+3
| | | | | | | | | Upstream no longer publishes tarballs. 1.8.0 release is git only. (From OE-Core rev: e378a1f9ced2a5674e4d60d1876410fc68350344) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meson.bbclass: Add an option to specify install tagsVyacheslav Yurkov2025-02-111-1/+7
| | | | | | | | | | The feature is available since meson 0.60.0. You can specify comma-separated list of install tags (not targets). (From OE-Core rev: a61ec67cb6f240c7593c9dd1b9a1ef5fff87c855) Signed-off-by: Vyacheslav Yurkov <uvv.mail@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: Fix install conflict when enable multilib.Wang Mingyu2025-02-111-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | The setting of want_xterm_kbs is as following: case $host_os in (*linux-gnu|*cygwin|*mingw32|*msys) want_xterm_kbs=DEL ;; (*) want_xterm_kbs=BS ;; esac The host_os when enable multilib is as folloing: host_os of aarch64 : linux-gnu host_os of aarch32 : linux-gnueabi So in lib64 package, want_xterm_kbs=DEL, and in lib32 package, want_xterm_kbs=BS. It results the differences in the terminfo files between lib32 and lib64 packages. Using --with-xterm-kbs=del to unify the packages of lib32 and lib64 into "want_xterm_kbs=DEL". (From OE-Core rev: 3868ae96ff32e8335e539ce62f51b7a223547c48) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> MAIL: wangmy@fujitsu.com Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-fitImage: Remove dependeny on initramfs image when bundled.Weisser, Pascal.ext2025-02-111-1/+1
| | | | | | | | | | | | In case the initramfs image is bundled into the kernel there's no need to specify a dependeny on the do_image_complete task of the initramfs image from the do_assemble_fitimage_initramfs task since the task won't access the image. (From OE-Core rev: af6cde746f72be761550ee28b017719fba26ea65) Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-fitImage: Take possible multiconfig into account.Weisser, Pascal.ext2025-02-111-2/+6
| | | | | | | | | | | | | | When specifying the dependencies of do_assemble_fitimage_initramfs the initramfs image might be built with another multiconfig. This needs to be taken into account. The path of the initramfs image also needs to be adapted to handle the case when it's built with another multiconfig. (From OE-Core rev: 891d58e9dc00e52f17ddecd4f12fc81c8a3c1bce) Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* toolchain-shar-relocate.sh: support multiple dynamic loaders for multilibHongxu Jia2025-02-111-3/+5
| | | | | | | | | | | | | | | | | While nativesdk support multilib, there are two dynamic loaders, $OECORE_NATIVE_SYSROOT/lib64/ld-linux-x86-64.so.2 $OECORE_NATIVE_SYSROOT/lib/ld-linux.so.2 Search them with wildcard and call relocate_sdk.py separately [ YOCTO #15722 ] (From OE-Core rev: 703187755244b1a45dd9f90aeaf620d4c92a6757) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/runtime: Add debugging if networking failsRichard Purdie2025-02-113-2/+20
| | | | | | | | | | If networking fails, we can get useful informaiton over the serial connection. Add this fallback code so that any issues can be more easily debugged by showing the host and target networking states. (From OE-Core rev: 3291f9d07ecfe7d3301dc914f5e6a80577cf1d5d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsecret: Inherit bash-completionRichard Purdie2025-02-111-2/+1
| | | | | | | | Use the class available for bash compleition to simplify the recipe. (From OE-Core rev: d29577ef719d76d445c88255c4a6dfe61456c3c2) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsecret: upgrade 0.21.4 -> 0.21.6Simone Weiß2025-02-112-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade per AUH failed as with 0.21.6 libsecret now also comes with bash-completions. Put those to an additional package, as systems might come without bash, so not everyone might want them. Changelog --------- 0.21.6 * meson: Make dbus-run-session optional [!157] * meson: Actually include bash-completion subdir [!158] 0.21.5 * session: Tolerate non-approved DH parameter usage in FIPS mode [!145] * Add some missing GIR annotations [!140] * meson: Create default test setup with D-Bus [!115] * meson: Use env.prepend() for test environment setup [!141] * meson: Fix license field [!139] * build: Remove self-inclusion from secret-item.h [!149] * build: Fix compiler warnings in Vala tests [!153] * tests: Fix "\|" used in test-secret-tool.sh not portable [!150] * Fix typo in D-Bus XML [!152] * docs: Fix minor gi-docgen reference [!142] * docs: Fix Python example [!144] * docs: Mention file backend [!146] * docs: Fix link in README [!147] * Several CI-related updates * Updated translations (From OE-Core rev: 1be1cf128ba04ea1399c43a369e909a2a5a16bc4) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oe-selftest: fitimage add u-boot env scriptAdrian Freihofer2025-02-111-2/+42
| | | | | | | | | | | | | | | Extend all kernel-fitimage tests to add a boot.cmd script to the fitImage and verify the script ends up in the fitImage. The test covers the use case which is documented here: https://docs.u-boot.org/en/latest/usage/cmd/source.html#fit-image. But instead of adding the sctip inline a script file is generated. (From OE-Core rev: 816f25359935f54881b557d55c29a390dd991609) Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oe-selftest: fitimage split run_dumpimage functionAdrian Freihofer2025-02-111-21/+23
| | | | | | | | | | | Provide a re-usable function which calls the dumpimage utiliy. This is a refactoring. (From OE-Core rev: f69f54d72d89fb381ea1945ea52f4c9963552e9f) Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-fitimage.bbclass: do not use the UBOOT_ENV variableAdrian Freihofer2025-02-111-13/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The kernel-fitimage.bbclass evaluates the UBOOT_ENV variable from the u-boot recipe. Based on this variable an u-boot script might be added to the fitImage. However, the UBOOT_ENV variable is also used to install the script as an old u-boot image, usually named boot.scr into the /boot directory of the target device. This dual usage of one variable leads to several strange side effects. Some examples: - If UBOOT_ENV_SUFFIX is set to the default value scr, the boot.cmd script gets added as a legacy uImage to the fitImage. That does not look useful. - If the UBOOT_ENV_SUFFIX is set to e.g. txt the script is not converted into a legacy uImage and a usable plain text script gets added to the fitImage. But the same script ends up redundant in /boot. Another strange detail is that the UBOOT_ENV_BINARY gets set to e.g. boot.txt for this configuration. - Appending the script to the u-boot recipe and then hand it over to the kernel recipe via the staged /boot directory looks like over complicated. Such kind of over complications and u-boot kernel inter-dependencies lead to an almost unmaintainable kernel-fitimage.bbclass. - A single variable does not allow you to add a text file to the fitImage and at the same time place boot.scr file in the /boot directory of the target device. - It is not documented or obvious how the UBOOT_ENV variable should be used together with the kernel-fitimage.bbclass. The commit which introduced this feature (among other features...) is: https://git.yoctoproject.org/poky/commit/?id=8a2f4e143b52109fbd0ee8d792e327d460b8c1e6 This commit is going to remove the u-boot script part of it. The removal of this function requires a note in the migration guide. The migration should be straightforward: If UBOOT_ENV and the kernel-fitimage.bbclass are used, the u-boot script must now be appended to the kernel recipe and the new FIT_UBOOT_ENV variable must be used. (From OE-Core rev: ab7f0b5e3d3612c43f9aab9ea2b7bd554d02859d) Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-07 12:39:25 +0000