summaryrefslogtreecommitdiffstats
path: root/meta
Commit message (Collapse)AuthorAgeFilesLines
...
* ovmf: Upgrade to 202502 releaseKhem Raj2025-05-193-32/+16
| | | | | | | | | | Refresh patches (From OE-Core rev: 903f5855135980eef0ba8e6cd9d64ee7f53d6096) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* m4: Upgrade to 1.4.20 releaseKhem Raj2025-05-198-143/+9
| | | | | | | | | | | | | | | | | | | | This has been 4 years in making, it has fixes to build with gcc-15 and some patches are upstream [1] [2] This release collects several years of portability improvements, as well as a couple of minor optimizations to performance. Notable improvements in this release include faster execution of the 'eval' builtin. More details [3] [1] https://github.com/coreutils/gnulib/commit/2d830e4a792fcd9f614ed08a7f18584b8b21d23b [2] https://git.savannah.gnu.org/gitweb/?p=libsigsegv.git;a=commitdiff;h=a6ff69873110c0a8ba6f7fd90532dbc11224828c [3] https://lists.gnu.org/archive/html/m4-announce/2025-05/msg00000.html (From OE-Core rev: b30b952d82af8d505728123023344aac3d9204b8) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zip: fix a buffer overflow detected issueMing Liu2025-05-192-0/+39
| | | | | | | | | | | | | | | | | | A "buffer overflow detected" issue was observed as follows: | *** buffer overflow detected ***: terminated | | zip error: Interrupted (aborting) This issue is addressed by: https://bugzilla.redhat.com/show_bug.cgi?id=2165653 Port the fix. (From OE-Core rev: e2f3eeaedc0ea896f5f5b23f756056331b1647cf) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "xserver-xorg: mark CVEs fixed in 21.1.16 as fixed"Ross Burton2025-05-191-4/+0
| | | | | | | | | | | | | The CPE data in the NVD database is now complete, so these overrides are no longer needed. This reverts commit e3419fbaf2999a821e1890a12ab27285cc25b577. (From OE-Core rev: 252b52ce3fd51acda6ab9108ea6354cb0885a4f7) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "xwayland: mark CVEs fixed in 24.1.6 as fixed"Ross Burton2025-05-191-4/+0
| | | | | | | | | | | | | The CPE data in the NVD database is now complete, so these overrides are no longer needed. This reverts commit 76c7bb2b9c1b5300f957f11e1601816f8f90b501. (From OE-Core rev: 693f79b94edb6793d718f97457b6ebd4fa4bfb43) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* insane.bbclass: Add unimplemented-ptest detection for cargo-based testsInes KCHELFI2025-05-191-0/+7
| | | | | | | | | | | | | | | | | | | | | | Extend unimplemented-ptest QA check to detect Rust tests. Note: To enable this QA check, add the following to your local.conf: WARN_QA += "unimplemented-ptest" Examples of Rust-based meta-oe packages triggering unimplemented-ptest: WARNING: cbindgen-0.28.0-r0 do_patch: QA Issue: cbindgen: cargo-based tests detected [unimplemented-ptest] WARNING: fdfindd-10.2-r0 do_patch: QA Issue: fdfindd: cargo-based tests detected [unimplemented-ptest] WARNING: deqp-runner-0.20.3-r0 do_patch: QA Issue: deqp-runner: cargo-based tests detected [unimplemented-ptest] WARNING: bindgen-cli-0.71.1-r0 do_patch: QA Issue: bindgen-cli: cargo-based tests detected [unimplemented-ptest] WARNING: python3-maturin-1.8.3-r0 do_patch: QA Issue: python3-maturin: cargo-based tests detected [unimplemented-ptest] WARNING: uutils-coreutils-0.0.30-r0 do_patch: QA Issue: uutils-coreutils: cargo-based tests detected [unimplemented-ptest] (From OE-Core rev: c3c10f00b1f4d4a092e5d3834ec0ba6abd6ac969) Signed-off-by: Ines KCHELFI <ines.kchelfi@smile.fr> Reviewed-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux: add CVE_STATUS for a chrome* bugRandy MacLeod2025-05-191-0/+2
| | | | | | | | | | | | | | | | | | This is not a linux-yocto CVE yet it shows up in the reports as: linux-yocto-custom CVE-2023-3079 0.0 8.8 Unpatched https://nvd.nist.gov/vuln/detail/CVE-2023-3079 For reference, the CPE says: Affects cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* So affects all Linux systems, Running on/with cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* [ YOCTO #15780 ] (From OE-Core rev: 22ef4d2d116afb9d603a05fb107dd9da0e74558b) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cryptodev-linux: clean up do_installRoss Burton2025-05-191-2/+1
| | | | | | | | | | | | The upstream Makefile now supports installing the headers directly[1], so use the target instead of calling install manually. [1] https://github.com/cryptodev-linux/cryptodev-linux/commit/e3962fea4e1816df420c36ad72845f90dfcfb611 (From OE-Core rev: 749de43ccc13488c0ec74e4a4257cc25cbf89370) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* opensbi: Pass CROSS_COMPILE and REPRODUCIBLE flagsKhem Raj2025-05-192-3/+54
| | | | | | | | | | When using clang pass LLVM=y to makefile so it can select needed bits using clang (From OE-Core rev: 9f95660886db562669d064f380d963353eef524c) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iputils: Security fix for CVE-2025-47268Yi Zhao2025-05-192-1/+146
| | | | | | | | | | | | | | | | | | | CVE-2025-47268 ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-47268 Patch from: https://github.com/iputils/iputils/commit/070cfacd7348386173231fb16fad4983d4e6ae40 (From OE-Core rev: a4a58d3f6cd49a54a8c271abaad8098958d4f27f) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* connman: Fix CVE-2025-32366Praveen Kumar2025-05-192-0/+42
| | | | | | | | | | | | | | | | | | | | | In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., *rdlen=ntohs(rr->rdlen) and memcpy(response+offset,*end,*rdlen) without a check for whether the sum of *end and *rdlen exceeds max. Consequently, *rdlen may be larger than the amount of remaining packet data in the current state of parsing. Values of stack memory locations may be sent over the network in a response. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-32366 Upstream-patch: https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=8d3be0285f1d4667bfe85dba555c663eb3d704b4 (From OE-Core rev: 548eddd84f23c6cb0352b9a692144050da8ba37a) Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* babeltrace2: Update patch to upstreamed version of patchKhem Raj2025-05-191-11/+12
| | | | | | | | | Update to the version of patch that landed upstream (From OE-Core rev: 916dceb531d4bf5a852864af30913c972ea31cf0) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemtap: Remove unneeded -Wno-dangling-pointerKhem Raj2025-05-191-3/+0
| | | | | | | | | | | | This was added by me in below commit [1] to overcome a RISCV build failure with gcc 13, the issue is gone with gcc-15 [1] https://git.yoctoproject.org/poky/commit/?id=4f09a93611134351381415d69228317d8a779014 (From OE-Core rev: 46a6fedf368c77a06d9a18d7c84a3f2e079c8f49) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-packagelists: Add riscv64 exclusions so we can add testingRichard Purdie2025-05-151-0/+4
| | | | | | | | | | | Add failing tests to the list of broken tests for riscv64 so we can then start running the working tests and spot regressions. We can them aim to remove these over time as they start working. (From OE-Core rev: 22736c5281892dcd6b2134c62f33ae13ed14650c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest/rust: Add exclusion to fix riscv64 buildsRichard Purdie2025-05-151-0/+1
| | | | | | | | | There was one failure occurring in rust testing for qemuriscv64. Exclude that test so we can enable in automated testing. (From OE-Core rev: a7f6ea5b20aa91e4a1b00dbea7a6447effb9220d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gcc: Fix riscv multilib issues in plain toolchainsRichard Purdie2025-05-152-0/+11
| | | | | | | | | | | | | | | RISC-V multilib currently doesn't work at all. We could disable multilib for the riscv platform but that would then behave differently to all our others. Instead, copy the non-multilib config over the multilib config for now for riscv, meaning we can keep the platforms similar. This isn't quite enough as the triplet specific c++ headers are in the wrong place leading to compiler issues and testimage failures. Work around that too until someone adds full multilib support for the platform (if desired). (From OE-Core rev: 3081f62c18fcee642ab43efa717c8f71d51ae587) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dropbear: upgrade 2024.86 -> dropbear_2025.88Peter Marko2025-05-154-33/+78
| | | | | | | | | | | | | | | | | | Handles CVE-2025-47203 SHA1 algorithms were removed by default, so patch for disabling it was removed together with its package option. Doing it with conditional patch was anyway a bad design. If someone still needs it, it should be done via sed command on the config file. Refreshed remaining patches. Added patch to fix regression of the CVE fix. (From OE-Core rev: c01205e7a4816d78e99d01f86a396ab23d9bde34) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dropbear: add mirrorPeter Marko2025-05-151-0/+1
| | | | | | | | | | Main download page is currently unavailable, switch to mirror listed in README file of the dropbear repository and release tarballs. (From OE-Core rev: 49e1947dfcb24afe6ffca129ce38602d3d6a6a64) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* valgrind: Fix build with clangKhem Raj2025-05-152-0/+32
| | | | | | | (From OE-Core rev: fbf60d5077bcf37df96b7b6358db8c30e073a656) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kernel-devsrc.bb: Replace extra System.map file with symlinkErick Shepherd2025-05-151-1/+2
| | | | | | | | | | | | | | | Currently there are two .map files being copied to $kerneldir/build. One of the files is System.map and the other is System.map-<kernel version>. Each .map file takes up about 5MB and have identical sha256sum hashes. This change will make it so only System.map-<kernel version> is copied in order to save disk space. It also recreates System.map as a symlink to that .map file. (From OE-Core rev: cc971fffb134aa6af9edeabb7a5f4143dee2151e) Signed-off-by: Erick Shepherd <erick.shepherd@ni.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxcvt: allow native buildMarkus Volk2025-05-151-0/+2
| | | | | | | | | | | | | | | | 'mutter' requires the 'cvt' binary at compile time to build the native backend For this it depends on xserver-xorg-cvt-native, which is currently broken and also deprecated. [https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/637] This commit would allow to use libxcvt-native to provide the needed binary instead. (From OE-Core rev: 4b06a88a2c1cc704dad1aacfecc9bab662f3dc7d) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils: Drop 0001-local.mk-fix-cross-compiling-problem.patchRobert Yang2025-05-152-29/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The patch is used for fixing: | Makefile:3418: *** Recursive variable 'INSTALL' references itself (eventually). Stop. Now the code and check and set that correctly: if CROSS_COMPILING cu_install_program = @INSTALL@ else cu_install_program = src/ginstall endif So just drop the patch. And also remove the ginstall hack to fix ptest case failure when single-binary is enabled, I can't find the reason on why it was needed from git log. Fixed: install: missing file operand Try 'install --help' for more information. * Reproducer: DISTRO_FEATURES:append = " ptest" EXTRA_IMAGE_FEATURES:append = " ptest-pkgs" IMAGE_INSTALL:append = " coreutils" PACKAGECONFIG:append:pn-coreutils = " single-binary" $ bitbake core-image-sato $ runqemu tmp/deploy/images/qemux86-64/ nographic kvm On target: $ cd /usr/lib/coreutils/ptest $ ./run-ptest ============================================================================ Testsuite summary for GNU coreutils 9.6 ============================================================================ TOTAL: 655 PASS: 529 SKIP: 126 XFAIL: 0 FAIL: 0 XPASS: 0 ERROR: 0 ============================================================================ make[1]: Leaving directory '/usr/lib/coreutils/ptest' (From OE-Core rev: 8728815f74f73723e86ba25b56a66b3fb46d6596) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils: Fix file-rdeps for single-binaryRobert Yang2025-05-151-1/+8
| | | | | | | | | | | | | | Fixed: DISTRO_FEATURES:append = " ptest" PACKAGECONFIG:append:pn-coreutils = " single-binary" $ bitbake coreutils ERROR: coreutils-9.6-r0 do_package_qa: QA Issue: /usr/lib/coreutils/ptest/src/yes contained in package coreutils-ptest requires /path/to//tmp/work/core2-64-poky-linux/coreutils/9.6/build/src/coreutils, but no providers found in RDEPENDS:coreutils-ptest? [file-rdeps] (From OE-Core rev: 5174ec4a82a66b49ff7a8988ab52731b775bffb6) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* testimage: get real os-release filePeter Marko2025-05-151-1/+3
| | | | | | | | | | | | | | | | /etc/os-release is a symlink to /usr/lib. Symlink is retrieved as a dead link which points to nowhere if also the original file is not accompanying it. Fetch the real file in addition to this link. Alternative could be to use "tar -h" (supported also by busybox tar), however that could lose some important information if links are relevant for failure analysis. (From OE-Core rev: ed43f9ccb3c08845259e24440912631afd780d12) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust: re-enable the unit tests that are previously ignoredDeepesh Varatharajan2025-05-151-44/+0
| | | | | | | | | | | | Some unit tests were previously marked as ignored due to failures in earlier versions of Rust. With the upgrade to Rust 1.85.1, these tests are now passing consistently. They've been re-enabled and verified to run successfully on the latest version. (From OE-Core rev: 56149c8c2108973666251e21609a7210a91984cf) Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Upgrade 9.9p2 -> 10.0p1Richard Purdie2025-05-152-5/+5
| | | | | | | | | | | Fix sshd by ensuring the agent daemon is included. Internally, this release is versioned as 10.0p2 but upstream don't plan to change this or re-release. (From OE-Core rev: 2a4dd93e98ca9e61644213aa00c1cb837fb27316) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup-2.4: Drop recipe as obsoleteRichard Purdie2025-05-1510-502/+0
| | | | | | | | | | The last user in OE-Core was gst-examples. This has been upgraded and the dependency dropped, all other users can use libsoup3 instead. Therefore remove the obsolete and deprecated version. (From OE-Core rev: 94ebc5b798aed6eea642c5e2a4df24b386520636) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-examples: Update 1.18.6 -> 1.26.1Richard Purdie2025-05-152-17/+17
| | | | | | | | | | | | | Update to the version from the gstreamer monorepo, bringing it back into line with the other gstreamer revisions. Drop the libsoup-2.4 dependency which disables the webrtc code, we weren't building that anyway as it needs libnice enabled in gstreamer-plugins-bad. (From OE-Core rev: 446fadaa147be6656e37c612de772fa04607130f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* u-boot: ensure keys are generated before assembling U-Boot FIT imageRogerio Guerra Borin2025-05-151-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add the task dependency: do_uboot_assemble_fitimage -> virtual/kernel:do_kernel_generate_rsa_keys to ensure the kernel FIT image signing keys are available when creating the U-Boot DTB. This is done only if the signing of the kernel FIT image is enabled (UBOOT_SIGN_ENABLE="1"). The lack of the dependency causes build errors when executing a build with no kernel FIT keys initially present in the keys directory. In such cases one would see an output like this in the Bitbake logs: Log data follows: | DEBUG: Executing shell function do_uboot_assemble_fitimage | Couldn't open RSA private key: '/workdir/build/keys/fit/dev.key': No such file or directory | Failed to sign 'signature' signature node in 'conf-1' conf node | FIT description: Kernel Image image with one or more FDT blobs | ... This issue was introduced by commit 259bfa86f384 where the dependency between U-Boot and the kernel was removed (for good reasons). Before that commit the dependency was set via DEPENDS so that, in terms of tasks, one had: u-boot:do_configure -> virtual/kernel:do_populate_sysroot and the chain leading to the key generation was: virtual/kernel:do_populate_sysroot -> virtual/kernel:do_install virtual/kernel:do_install -> virtual/kernel:do_assemble_fitimage virtual/kernel:do_assemble_fitimage -> virtual/kernel:do_kernel_generate_rsa_keys With the removal of the first dependency, no more guarantees exist that the keys would be present when assembling the U-Boot FIT image. That's the situation we are solving with the present commit. Fixes: 259bfa86f384 ("u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled") (From OE-Core rev: 036f20156b3c7d0a8b912e90aa29a9b986106d5a) Signed-off-by: Rogerio Guerra Borin <rogerio.borin@toradex.com> Cc: Marek Vasut <marex@denx.de> Cc: Sean Anderson <sean.anderson@seco.com> Cc: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpm-sequoia: add ptestInes KCHELFI2025-05-153-2/+60
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In rpm-sequoia, some default paths in test code (OUT_DIR, CARGO_MANIFEST_DIR) are invalid at runtime and cause test failures. To fix this, patch the test code (symbols.rs) to support overriding these paths via optional environment variables: FORCE_RUNTIME_PATH_LIB and FORCE_RUNTIME_PATH_SRC. Also make -ptest package RDEPEND on -dev package. Tests take less than a second so this is added to PTEST_FAST. ptest result: |root@qemux86-64:~# ptest-runner rpm-sequoia |START: ptest-runner |2025-05-02T15:57 |BEGIN: /usr/lib/rpm-sequoia/ptest | |running 1 test |test symbols ... ok | |test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s | | |running 2 tests |test tests::merge_certs_mismatch ... ok |test tests::merge_certs ... ok | |test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s | |DURATION: 0 |END: /usr/lib/rpm-sequoia/ptest |2025-05-02T15:57 |STOP: ptest-runner |TOTAL: 1 FAIL: 0 (From OE-Core rev: 16499cf903718e6bf022a13baa09df610cd43d62) Signed-off-by: Ines KCHELFI <ines.kchelfi@smile.fr> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-cargo: fix tests output format for testimageInes KCHELFI2025-05-151-1/+11
| | | | | | | | | | | | | | | | | | | | | In testimage, the ptest-runner output parser expects test results to follow a specific format,with lines beginning with PASS:, FAIL:, or SKIP:. ptest-cargo, currently, does not emit any of those lines and the parser treats the test section as having no results, causing a test failure with : AssertionError: ptests which had no test results: ['<package>'] This patch ensures that the recipes using ptest-cargo class explicitly emits PASS: or FAIL: lines, making the results compatible with the test parser and preventing test failures. (From OE-Core rev: 6a9356346f13556a06d4a99bd7924992c7e29d66) Signed-off-by: Ines KCHELFI <ines.kchelfi@smile.fr> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-cython: upgrade 3.0.12 -> 3.1.0Trevor Gamblin2025-05-152-75/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Many changes are included with this release, including support for freethreading builds of CPython 3.13, cleanup of legacy code, and many other features and bug fixes. Changelog: https://github.com/cython/cython/blob/master/CHANGES.rst Patch '0001-Output-import-relative-paths-in-generated-C-code.-GH.patch' is included in 3.1.0, so we no longer need the backport: |tgamblin@megalith ~/workspace/git/pythonsrc/cython (master)$ git tag --contains 20bceea6b19ffc2f65b9fba2e4f737f09e5a2b20 |3.1.0 |3.1.0-1 |3.1.0a1 |3.1.0b1 |3.1.0rc1 |3.1.0rc2 Reproducibility looks OK. (From OE-Core rev: 26a73392524f648015d55bf421a9b1bf5ac0d955) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: upgrade 3.13.2 -> 3.13.3Trevor Gamblin2025-05-152-4/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds some security fixes and many new changes to the library. Changelog: https://docs.python.org/3/whatsnew/changelog.html#python-3-13-3-final Modify 0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch to remove 'test_types' from the pgo-wrapper call, since that fails now under qemu. Reproducibility looks OK. ptest results OK: |== Tests result: SUCCESS == | |29 tests skipped: | test.test_asyncio.test_windows_events | test.test_asyncio.test_windows_utils test.test_gdb.test_backtrace | test.test_gdb.test_cfunction test.test_gdb.test_cfunction_full | test.test_gdb.test_misc test.test_gdb.test_pretty_print | test_android test_apple test_asdl_parser test_clinic test_devpoll | test_free_threading test_generated_cases test_idle test_ioctl | test_kqueue test_launcher test_msvcrt test_startfile test_tcl | test_tkinter test_ttk test_ttk_textonly test_turtle test_winapi | test_winconsoleio test_winreg test_wmi | |9 tests skipped (resource denied): | test_curses test_peg_generator test_pyrepl test_smtpnet | test_socketserver test_urllib2net test_urllibnet test_winsound | test_zipfile64 | |442 tests OK. | |Total duration: 2 min 48 sec |Total tests: run=43,896 skipped=2,268 |Total test files: run=471/480 skipped=29 resource_denied=9 |Result: SUCCESS |DURATION: 169 |END: /usr/lib/python3/ptest |2025-05-12T12:34 |STOP: ptest-runner |TOTAL: 1 FAIL: 0 |root@qemux86-64:~# (From OE-Core rev: 063d5a5fb2f71b523f378b95167553b28804c3ad) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: upgrade 20250410 -> 20250509Vivek Puar2025-05-151-3/+6
| | | | | | | | | | | | | Adding QUPv3 firmware for QCS9100 platform License-Update: additional files (From OE-Core rev: a9830286bf09ed5153bceecd0bec2c63bfbcd1a9) Signed-off-by: Vivek Puar <vpuar@qti.qualcomm.com> Cc: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* compiler-rt-sanitizers: Fix native builds on aarch64 build hostsKhem Raj2025-05-151-6/+11
| | | | | | | | | | | | | Add logic to deduce compiler-rt target architecture based on tune features Cleanup the cmake options for native/nativesdk/target recipes (From OE-Core rev: 579d4d85574624e39140fb74f6d37dcd7bf363a6) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* compile-rt: Fix building compiler-native on aarch64 build hosts.Khem Raj2025-05-151-2/+4
| | | | | | | | | | | | | | | | | | Using target triple confuses the native system compiler to find libgcc and C runtime during compiler-rt-native build Fixes | /home/khem/yoe/build/tmp/hosttools/ld: cannot find crtbeginS.o: No such file or directory | /home/khem/yoe/build/tmp/hosttools/ld: cannot find -lgcc: No such file or directory | /home/khem/yoe/build/tmp/hosttools/ld: cannot find -lgcc_s: No such file or directory | clang: error: linker command failed with exit code 1 (use -v to see invocation) | ninja: build stopped: subcommand failed. (From OE-Core rev: 1d4676d6b7c0fe40ab4f808dda436dc2f2915fd8) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* go: upgrade 1.24.2 -> 1.24.3Peter Marko2025-05-157-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to latest 1.24.x release [1]: $ git --no-pager log --oneline go1.24.2..go1.24.3 34c8b14ca9 (release-branch.go1.24) [release-branch.go1.24] go1.24.3 8947f3395e [release-branch.go1.24] os: avoid escape from Root via paths ending in ../ 06fd2f115b [release-branch.go1.24] cmd/compile: remove no-longer-necessary recursive inlining checks f66ab6521c [release-branch.go1.24] cmd/internal/obj/wasm: use i64 for large return addr c1f9c2c7b0 [release-branch.go1.24] cmd/go/internal/load: join incompatible and dirty build specifiers with . 0ab64e2caa [release-branch.go1.24] runtime: cleanup M vgetrandom state before dropping P 56eb99859d [release-branch.go1.24] internal/runtime/maps: pass proper func PC to race.WritePC/race.ReadPC 43130aff52 [release-branch.go1.24] runtime: fix 9-arg syscall on darwin/amd64 b2c005e7b2 [release-branch.go1.24] crypto/tls: fix ECH compatibility a9d9b55709 [release-branch.go1.24] cmd/link: choose one with larger size for duplicated BSS symbols fa7217f74d [release-branch.go1.24] os: avoid panic in Root when symlink references the root Fixes CVE-2025-22873 [1] https://github.com/golang/go/compare/go1.24.2...go1.24.3 (From OE-Core rev: b317570acf1e25a4cfaa0c66a2630d082b4d0bae) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* compiler-rt: Exclude sync builtins from build when arm < v6Khem Raj2025-05-152-0/+62
| | | | | | | | | | | arm architecture < v6 does not have the dmb support, therefore do not add the sync primitives to compiler-rt builtins build (From OE-Core rev: e1b143860b221600f7dab5c08e5b187aefb851dd) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* compiler-rt: Map the COMPILER_RT_DEFAULT_TARGET_ARCHKhem Raj2025-05-151-1/+10
| | | | | | | | | | | COMPILER_RT_DEFAULT_TARGET_ARCH is not 1 to 1 match with HOST_ARCH especially for armv5/arm4 (From OE-Core rev: 71f7db2e5d264bc6ed50fae48567ae674af9a700) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: add fips supportYi Zhao2025-05-151-2/+17
| | | | | | | | | | | | | | | | | | | * Add PACKAGECONFIG[fips] to enable fips build. * Split a new package openssl-ossl-module-fips for fips.so. * Add pkg_postinst_ontarget for openssl-ossl-module-fips to ensure the config file fipsmodule.cnf is created on target. This is because we should not use the same fipsmodule.cnf on different machines. The 'openssl fipsinstall' commandline in pkg_postinst_ontarget will do the following things: 1. Run the FIPS module self tests on target. 2. Generate config file fipsmodule.conf containing information about the FIPS module such as the calculated MAC of the module. (From OE-Core rev: 29979937e2d40885e7e91bb9a7e7dca6763e3d52) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux/cve-exclusion: Update exclusions after kernel updateMathieu Dubois-Briand2025-05-131-13/+907
| | | | | | | (From OE-Core rev: c695edcc33ecd5bc01b5fc91ce08a87475a9ace9) Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* swig: upgrade 4.3.0 -> 4.3.1Wang Mingyu2025-05-131-1/+1
| | | | | | | (From OE-Core rev: 43b1e1af671cbe5a76be1b97d185bb95b767efde) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shaderc: upgrade 2025.1 -> 2025.2Wang Mingyu2025-05-131-1/+1
| | | | | | | | | | | | Changelog: =========== - Update dependencies: Glslang, SPIRV-Tools, SPIRV-Headers - Supports BFloat16 floating point types (From OE-Core rev: 15d14a61b1c299f7697e91e9e15452e2ee6f6010) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* resolvconf: upgrade 1.92 -> 1.93Wang Mingyu2025-05-131-1/+1
| | | | | | | (From OE-Core rev: 0b7db214bb01284521be27656e31f9892b07441d) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* repo: upgrade 2.53 -> 2.54Wang Mingyu2025-05-131-1/+1
| | | | | | | (From OE-Core rev: a7b791ad8fd32a48febc2e3aeb81785ff561a163) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* re2c: upgrade 4.1 -> 4.2Wang Mingyu2025-05-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ - Added Swift backend - Added options: "--lang swift" "--computed-gotos-relative" - Added configurations: "re2c:cgoto:relative", "re2c:computed-gotos:relative" "re2c:yyfn:throw" - Added syntax file code templates: "code:cgoto" "code:cgoto_data" "code:yytarget_filter" "code:type_yyctable" - Added syntax file conditionals: ".cgoto.relative" ".yyfn.throw" - Added some C++ benchmarks without submatch extraction. (From OE-Core rev: 7e3df01de59b55bb3fc8fef9fb36a98ca9b007fd) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-yamllint: upgrade 1.37.0 -> 1.37.1Wang Mingyu2025-05-131-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ============= - Rule comments: tell how many spaces are expected - Rule quoted-strings: Fix only-when-needed on multiline with backslash - Config: Report if rules is not a dict - Fix test_codec_built_in_equivalent() test when run with pytest - CI: Fix TestPyPI "dev0" versions for master commits on tags - Docs: Add links to GitHub repository and releases - Docs: Fix GitLab integration example - Docs: Fix GitLab integration link - Fix the tests badge link on the README (From OE-Core rev: b49426b3577546e197c42aa28b5af4a0f3ea1c53) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-typing-extensions: upgrade 4.13.1 -> 4.13.2Wang Mingyu2025-05-131-1/+1
| | | | | | | | | | | | | | Changelog: ============= - Fix TypeError when taking the union of typing_extensions.TypeAliasType and a typing.TypeAliasType on Python 3.12 and 3.13. - Backport from CPython PR #132160 to avoid having user arguments shadowed in generated __new__ by @typing_extensions.deprecated. (From OE-Core rev: f01c7ece71f4d9887763ee5062c56d454f88ae3d) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pycairo: upgrade 1.27.0 -> 1.28.0Wang Mingyu2025-05-131-1/+1
| | | | | | | | | | Changelog: https://pycairo.readthedocs.io/en/latest/changelog.html#v1-28-0 (From OE-Core rev: 96baa620e4ce198c0042eaba85e0935b4a2741e9) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-poetry-core: upgrade 2.1.2 -> 2.1.3Wang Mingyu2025-05-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changed ---------- - Update list of supported licenses Fixed -------- - Fix an issue where the union of specific inverse or partially inverse markers was not simplified - Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section - Fix an issue where markers with === were not parsed correctly - Fix an issue where local versions with upper case letters caused an error - Fix an issue where extra markers with a value starting with "in" were not validated correctly - Fix an issue where inheriting from WheelBuilder was unnecessarily difficult (From OE-Core rev: ca51448b82abd9333ad2763d52c473cbe876d5c5) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>