]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
6 weeks agopinentry: upgrade 1.3.1 -> 1.3.2
Gyorgy Sarvari [Wed, 3 Sep 2025 19:02:17 +0000 (21:02 +0200)] 
pinentry: upgrade 1.3.1 -> 1.3.2

Shortlog:

-qt: Replace icons for dark mode with 16x16 icons
-qt,qt5: Ensure that input field is large enough for generated password
-qt5: Add dark mode icon variants and detection
-Make Show/Hide Password functionality accessible
-qt5: Make Show/Hide Password functionality accessible
-m4: Update libassuan.m4.
-build: Remove defining GPG_ERR_ENABLE_ERRNO_MACROS.
-build: Fix warning about obsolete pinentry-emacs.
-curses: Factor out dialog release to separate function.
-qt: Add dark mode icon variants and detection
-m4: Update gpg-error.m4 and libassuan.m4.

Also: Simplify patch to find gpg-error with pkg-config

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Cc: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoapt: upgrade 2.6.1 -> 3.0.3
Gyorgy Sarvari [Wed, 3 Sep 2025 18:03:43 +0000 (20:03 +0200)] 
apt: upgrade 2.6.1 -> 3.0.3

Changelog:
https://metadata.ftp-master.debian.org/changelogs/main/a/apt/apt_3.0.3_changelog

Dropped patches which are included in this release, or became obsolete:
0001-Fix-compilation-error-with-clang-libc-18.patch - included in this release
0001-Fix-musl-build.patch - included in this release
0001-Raise-cmake_minimum_required-to-3.13-to-avoid-warnin.patch - included in this release
0001-Remove-using-std-binary_function.patch - became obsolete, fixed upstream
0001-aptwebserver.cc-Include-array.patch - became obsolete, fixed upstream
0001-strutl-Add-missing-include-cstdint-gcc-15.patch - included in this release

Added a new patch to avoid compilation error with musl:
error: 'basename' was not declared in this scope; did you mean 'rename'?

Adapted DEPENDS list - gnutls and gcrypt dependencies were dropped in favor of openssl
in version 2.9.19.

Added a new PACKAGECONFIG, 'usrmerge', which displays a gentle warning if the system
isn't a usrmerge system during package installation.

Added new COMMON_ARCH CMake argument - if it is not defined, CMake is trying to
determine the value of this variable by running dpkg, which is usually a futile
endeavour. It is used in config creation, and to print some system info.

Also adapt a self test: the apt-key command has been deprecated since a while,
and in this release it was completely removed. Instead sources.list file
contains the signature data, on a per-repository basis.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agowic: rename wks flag --extra-space to --extra-filesystem-space
Pierre-Loup GOSSE [Wed, 3 Sep 2025 14:45:28 +0000 (16:45 +0200)] 
wic: rename wks flag --extra-space to --extra-filesystem-space

Makes a clear distinction with --extra-partition-space flag.

Signed-off-by: Pierre-Loup GOSSE <pierre-loup.gosse@smile.fr>
CC: Alexander Kanavin <alex.kanavin@gmail.com>
CC: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agowic: add --extra-partition-space option to set unused space
Pierre-Loup GOSSE [Wed, 3 Sep 2025 14:45:27 +0000 (16:45 +0200)] 
wic: add --extra-partition-space option to set unused space

By default, the content of the partition is filled by the filesystem
without leaving any unused free space. The --extra-space flag adds
extra space to the filesystem size, not to the partition.

Unused free space after the filesystem can be useful for some cases,
such as encrypting a partition at runtime.
With --extra-partition-space 32M, we ensure that the last 32M of the
partition is unused: this space does not contain filesystem data and
can store the LUKS2 header.

The implementation sets a difference between the partition and
filesystem size:
  - With --fixed-size, the extra part space is removed from the
    filesystem size.
  - Otherwise (with or without --size flag), the extra part space is
    added to the partition size.

Signed-off-by: Pierre-Loup GOSSE <pierre-loup.gosse@smile.fr>
CC: Alexander Kanavin <alex.kanavin@gmail.com>
CC: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agokea: Upgrade to 3.0 LTS release
Khem Raj [Wed, 3 Sep 2025 06:22:30 +0000 (23:22 -0700)] 
kea: Upgrade to 3.0 LTS release

* Drop backported patch and refresh remaining
* Add fixes to build with boost 1.89.0
* Switch to meson build system
* Delete meson-info files
  There’s no Meson built-in switch to stop creating intro-*.json
  in the build dir (that’s by design), only to stop installing them is
  possible. for runtime, Kea doesn’t read it, this is just build metadata

License-Update: Removed remaining coroutine references [1]

[1] https://github.com/isc-projects/kea/commit/93bab7a99f82e2ceadca14a7a6a2440cd69fb8c8

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoboost: upgrade 1.88.0 -> 1.89.0
Gyorgy Sarvari [Wed, 3 Sep 2025 06:22:29 +0000 (23:22 -0700)] 
boost: upgrade 1.88.0 -> 1.89.0

Changelog: https://www.boost.org/releases/1.89.0/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoboost-build-native: upgrade 1.87 -> 1.89
Gyorgy Sarvari [Wed, 3 Sep 2025 06:22:28 +0000 (23:22 -0700)] 
boost-build-native: upgrade 1.87 -> 1.89

Changelog: https://www.boost.org/releases/1.89.0/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agorecipetool/create_go: Tidy up a bit
Christian Lindeberg [Tue, 2 Sep 2025 14:06:47 +0000 (16:06 +0200)] 
recipetool/create_go: Tidy up a bit

There is no need for a temporary Go module cache after moving generation
of module dependency include files to go-mod-update-modules.bbclass.

Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agogo-mod-update-modules.bbclass: Update license finding
Christian Lindeberg [Tue, 2 Sep 2025 14:06:46 +0000 (16:06 +0200)] 
go-mod-update-modules.bbclass: Update license finding

Use ${GO_INSTALL} when listing package dependencies.

Look for licenses for each package dependency continuing upwards, but not
above the module root, until some license is found.

Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agooe/license_finder: Add find_licenses_up function
Christian Lindeberg [Tue, 2 Sep 2025 14:06:45 +0000 (16:06 +0200)] 
oe/license_finder: Add find_licenses_up function

Add a function for finding licenses in a directory or upwards but not
above a top directory.

Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agooeqa/selftest/cases/gcc.py: add libitm to default installed packages.
Harish Sadineni [Tue, 2 Sep 2025 04:19:19 +0000 (21:19 -0700)] 
oeqa/selftest/cases/gcc.py: add libitm to default installed packages.

When running oe-selftest few libitm tests were getting failed due
to below error:
/tmp/runtest.923959/alloc-1.exe: error while loading shared libraries:
libitm.so.1: cannot open shared object file: No such file or directory

Adding libitm to default installed packages to fix this issue.

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agovulkan-validation-layers: fix compile failure with DEBUG_BUILD = 1
Hongxu Jia [Mon, 1 Sep 2025 07:39:58 +0000 (15:39 +0800)] 
vulkan-validation-layers: fix compile failure with DEBUG_BUILD = 1

When building with GCC 14+ using -Og (DEBUG_BUILD = 1), got
the following errors:

$ echo 'DEBUG_BUILD = "1"' >> conf/local.conf
$ echo 'DISTRO_FEATURES:append = " vulkan opengl"' >> conf/local.conf
$ bitbake vulkan-validation-layers
...
|TOPDIR/tmp/work/core2-32-wrs-linux/vulkan-validation-layers/1.4.309.0/git/layers/./external/
xxhash.h:4822:1: error: inlining failed in call to 'always_inline' 'void XXH3_scrambleAcc_sse2
(void*, const void*)': function not considered for inlining
...

Refer [1], using XXH_NO_INLINE_HINTS when compiling with -Og (DEBUG_BUILD = 1)

[1] https://github.com/Cyan4973/xxHash/issues/943

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agogit: 2.50.1 -> 2.51.0
Robert Yang [Wed, 3 Sep 2025 04:16:57 +0000 (21:16 -0700)] 
git: 2.50.1 -> 2.51.0

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agobindgen-cli: Upgrade to 0.72.1
Khem Raj [Wed, 3 Sep 2025 03:03:23 +0000 (20:03 -0700)] 
bindgen-cli: Upgrade to 0.72.1

Fixed bugs

- Apply a fix for a breaking change in Clang (see issue #3264 and related).

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-pdm: Update 2.25.4 -> 2.25.9
Khem Raj [Wed, 3 Sep 2025 03:03:22 +0000 (20:03 -0700)] 
python3-pdm: Update 2.25.4 -> 2.25.9

- Add site-packages path to pdm info and print interpreter URL in
  pdm python install -v.
- Support explicit free-threaded Python selection via version suffix t.
- Multiple lockfile/pylock improvements and hash handling fixes.
- Windows path resolution fixes for uv; CLI help formatting preserved.
- Dependencies: require packaging>22.0; bump truststore to 0.10.4.
- Misc: fix AI coding fast apply error

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-lxml: upgrading to 6.0.1
Khem Raj [Wed, 3 Sep 2025 03:03:21 +0000 (20:03 -0700)] 
python3-lxml: upgrading to 6.0.1

Bugs fixed

LP#2116333: lxml.sax._getNsTag() could fail with an exception on malformed input.

GH#467: Some test adaptations were made for libxml2 2.15. Patch by Nick Wellnhofer.

LP2119510, GH#473: A Python compatibility test was fixed for Python 3.14+. Patch by Lumír Balhar.

GH#471: Wheels for “riscv64” on recent Python versions were added. Patch by ffgan.

GH#469: The wheel build no longer requires the wheel package unconditionally. Patch by Miro Hrončok.

Binary wheels use the library version libxml2 2.14.5.

Windows binary wheels continue to use a security patched library version libxml2 2.11.9.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-rpds-py: upgrade 0.27.0 -> 0.27.1
Tim Orling [Tue, 2 Sep 2025 21:46:29 +0000 (14:46 -0700)] 
python3-rpds-py: upgrade 0.27.0 -> 0.27.1

v0.27.1:
* Include attestations in published artifacts by @EpicWink in #160

Comparing Changes:
https://github.com/crate-py/rpds/compare/v0.27.0...v0.27.1

References:
https://github.com/crate-py/rpds/pull/160

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-requests: upgrade 2.32.4 -> 2.32.5
Tim Orling [Tue, 2 Sep 2025 21:46:28 +0000 (14:46 -0700)] 
python3-requests: upgrade 2.32.4 -> 2.32.5

2.32.5 (2025-08-18)

* Bugfixes
  - The SSLContext caching feature originally introduced in 2.32.0 has
    created a new class of issues in Requests that have had negative
impact across a number of use cases. The Requests team has decided
to revert this feature as long term maintenance of it is proving to
be unsustainable in its current iteration.

* Deprecations
  - Added support for Python 3.14.
  - Dropped support for Python 3.8 following its end of support.

https://requests.readthedocs.io/en/latest/community/updates/#release-history

Comparing Changes:
https://github.com/psf/requests/compare/v2.32.4...v2.32.5

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-typing-extensions: upgrade 4.14.1 -> 4.15.0
Tim Orling [Tue, 2 Sep 2025 21:46:27 +0000 (14:46 -0700)] 
python3-typing-extensions: upgrade 4.14.1 -> 4.15.0

Release 4.15.0 (August 25, 2025)
* No user-facing changes since 4.15.0rc1.

https://github.com/python/typing_extensions/blob/main/CHANGELOG.md#release-4150-august-25-2025

Release 4.15.0rc1 (August 18, 2025)
* Add the @typing_extensions.disjoint_base decorator, as specified in
  PEP 800. Patch by Jelle Zijlstra.
* Add typing_extensions.type_repr, a backport of annotationlib.type_repr,
  introduced in Python 3.14 (CPython PR #124551, originally by Jelle
  Zijlstra). Patch by Semyon Moroz.
* Fix behavior of type params in typing_extensions.evaluate_forward_ref.
  Backport of CPython PR #137227 by Jelle Zijlstra.

https://github.com/python/typing_extensions/blob/main/CHANGELOG.md#release-4150rc1-august-18-2025

Comparing Changes:
https://github.com/python/typing_extensions/compare/4.14.1...4.15.0

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-cryptography{-vectors}: upgrade to 45.0.7
Tim Orling [Tue, 2 Sep 2025 21:46:26 +0000 (14:46 -0700)] 
python3-cryptography{-vectors}: upgrade to 45.0.7

45.0.7 - 2025-09-01

* Added a function to support an upcoming pyOpenSSL release.

https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst#4507---2025-09-01

Comparing Changes:
https://github.com/pyca/cryptography/compare/45.0.6...45.0.7

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-maturin: upgrade 1.9.3 -> 1.9.4
Tim Orling [Tue, 2 Sep 2025 21:46:25 +0000 (14:46 -0700)] 
python3-maturin: upgrade 1.9.3 -> 1.9.4

1.9.4:
* Add a use-base-python option to pyproject.toml with the same behaviour
  as MATURIN_PEP517_USE_BASE_PYTHON.
* Add builtin sysconfigs for GraalPy
* Fix calculation of platform tag for FreeBSD

https://github.com/PyO3/maturin/blob/main/Changelog.md#194

Comparing Changes:
https://github.com/PyO3/maturin/compare/v1.9.3...v1.9.4

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-setuptools-rust: upgrade 1.11.1 -> 1.12.0
Tim Orling [Tue, 2 Sep 2025 21:46:24 +0000 (14:46 -0700)] 
python3-setuptools-rust: upgrade 1.11.1 -> 1.12.0

1.12.0 (2025-08-29)

* Set PYO3_BUILD_EXTENSION_MODULE environment variable when building
PyO3 extensions. #540

https://github.com/PyO3/setuptools-rust/blob/main/CHANGELOG.md#1120-2025-08-29

Reference:
https://github.com/PyO3/setuptools-rust/pull/540

Comparing Changes:
https://github.com/PyO3/setuptools-rust/compare/v1.11.1...v1.12.0

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agosystemd: stop enabling non-standard MAC policy when using the 'pni-names' DISTRO_FEATURE
Koen Kooi [Tue, 2 Sep 2025 09:09:25 +0000 (11:09 +0200)] 
systemd: stop enabling non-standard MAC policy when using the 'pni-names' DISTRO_FEATURE

This recipe enabled an additional, non-standard policy for predictable
network names: the MAC policy. This is a deviation from upstream
policies and in cases where no MAC address is available, it makes it
actively worse by changing the name(s) every boot.

Change the logic to disable predictable naming when the DISTRO_FEATURE
isn't enabled and only use upstream logic with it *is* enabled.

For DISTROs that wish to use non-standard policies, a DISTRO layer is the correct place.
E.g. in DISTRO_LAYER/recipes-core/systemd/systemd_%.bbappend:

do_install:append:DISTRO() {
       if ${@bb.utils.contains('PACKAGECONFIG', 'pni-names', 'true', 'false', d)}; then
               if ! grep -q '^NamePolicy=.*mac' ${D}${nonarch_libdir}/systemd/network/99-default.link; then
                       sed -i '/^NamePolicy=/s/$/ mac/' ${D}${nonarch_libdir}/systemd/network/99-default.link
               fi
               if ! grep -q 'AlternativeNamesPolicy=.*mac' ${D}${nonarch_libdir}/systemd/network/99-default.link; then
                       sed -i '/AlternativeNamesPolicy=/s/$/ mac/' ${D}${nonarch_libdir}/systemd/network/99-default.link
               fi
}

Signed-off-by: Koen Kooi <koen.kooi@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agotiff: Add PACKAGECONFIG for liblerc
Zoltán Böszörményi [Tue, 2 Sep 2025 07:19:13 +0000 (09:19 +0200)] 
tiff: Add PACKAGECONFIG for liblerc

tiff-native may pick up liblerc from the host using the .so
symlink, in which case it's added as a private requirement
in libtiff-4.pc. That in turn causes a build error in
gtk4-native in Yocto because Lerc.pc does not exist.

This was observed on Fedora 42 with gdk-pixbuf2-devel installed
on the host where libtiff is a dependency of gdk-pixbuf2 and
libtiff 4.7.0 is built with liblerc enabled.

Add a new PACKAGECONFIG setting for liblerc but keep it disabled
since liblerc does not exist in Yocto at the moment.

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Backport-to: walnascar
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agotiff: fix CVE-2025-8534
Yogita Urade [Tue, 2 Sep 2025 04:57:42 +0000 (10:27 +0530)] 
tiff: fix CVE-2025-8534

A vulnerability classified as problematic was found in libtiff
4.6.0. This vulnerability affects the function PS_Lvl2page of
the file tools/tiff2ps.c of the component tiff2ps. The
manipulation leads to null pointer dereference. It is possible
to launch the attack on the local host. The complexity of an
attack is rather high. The exploitation appears to be difficult.
The exploit has been disclosed to the public and may be used.
The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b.
It is recommended to apply a patch to fix this issue. One of the
maintainers explains, that "[t]his error only occurs if
DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD")
option is used."

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-8534

Upstream patch:
https://gitlab.com/libtiff/libtiff/-/commit/6ba36f159fd396ad11bf6b7874554197736ecc8b

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopulseaudio: Add audio group explicitly
Kyungjik Min [Tue, 2 Sep 2025 06:08:56 +0000 (15:08 +0900)] 
pulseaudio: Add audio group explicitly

Since pulseaudio-server requires the audio group, we explicitly add it.

When use useradd-staticids or do not use the default group in
base-passwd, an error will occur because the audio group is not defined.

NOTE: pulseaudio: Performing useradd with [--root
TOPDIR/tmp/work/cortexa72-poky-linux/pulseaudio/17.0/recipe-sysroot
--home-dir /var/run/pulse --gid 998 --groups audio,pulse
--no-create-home --system --shell /bin/false --uid 998 pulse]
useradd: group 'audio' does not exist
ERROR: pulseaudio: useradd command did not succeed.

Signed-off-by: Kyungjik Min <dpmin7@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agotcl: also skip chanio-13.6
Ross Burton [Fri, 5 Sep 2025 12:43:03 +0000 (13:43 +0100)] 
tcl: also skip chanio-13.6

The io-* tests and chanio-* tests are in sync, so we should skip both
io-13.6 and chanio-13.6.

[ YOCTO #15421 ]

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolttng-tools: Add link to issue reported upstream for musl failures
Khem Raj [Tue, 2 Sep 2025 01:45:11 +0000 (18:45 -0700)] 
lttng-tools: Add link to issue reported upstream for musl failures

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolibpcre2: upgrade 10.45 -> 10.46
Markus Kurz [Mon, 1 Sep 2025 21:09:09 +0000 (23:09 +0200)] 
libpcre2: upgrade 10.45 -> 10.46

For the changelog see:
https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.46

This is a security-only release, to address CVE-2025-58050:
https://nvd.nist.gov/vuln/detail/CVE-2025-58050

Signed-off-by: Markus Kurz <m.kurz92@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoconnman: Revert removal of no-version-scripts patch
Peter Tatrai [Thu, 28 Aug 2025 10:40:47 +0000 (12:40 +0200)] 
connman: Revert removal of no-version-scripts patch

This commit restores the no-version-scripts.patch for ConnMan,
which was removed in the commit (5c269ba9a396832af3f8139ecaa0cfd9f7d4d1b5)
as part of cleaning up gold and MIPS binutils workarounds.

The removal of this patch caused runtime crashes (segfaults)
on the powerpc target due to symbol visibility issues with glib
and stdio. Re-adding the patch resolves these crashes by disabling
version scripts in the linker flags.

Signed-off-by: Peter Tatrai <peter.tatrai.ext@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agorust-target-config: fix nativesdk-libstd-rs build with baremetal
Ovidiu Panait [Mon, 1 Sep 2025 10:34:17 +0000 (13:34 +0300)] 
rust-target-config: fix nativesdk-libstd-rs build with baremetal

If TCLIBC='baremetal' is set in local.conf, nativesdk-libstd-rs build fails
with:

| error[E0412]: cannot find type `c_char` in the crate root
|   --> /usr/src/debug/libstd-rs/1.75.0/rustc-1.75.0-src/vendor/libc/src/unix/mod.rs:56:29
|    |
| 6  | pub type c_schar = i8;
|    | ---------------------- similarly named type alias `c_schar` defined here
| ...
| 56 |         pub gr_name: *mut ::c_char,
|    |                             ^^^^^^

This happens because rust_gen_target() sets os="none" when TCLIBC is
'baremetal' - even for nativesdk targets. However, nativesdk packages are
built against glibc, so the correct 'os' value should be "linux".

Fix this by setting the os field based on {TARGET,HOST,BUILD}_OS variables,
as it is already done in rust_base_triple(), instead of relying on TCLIBC.

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agocoreutils_9.7.bb: fix update-alternative support for base32
Keerthivasan Raghavan [Mon, 1 Sep 2025 05:10:41 +0000 (10:40 +0530)] 
coreutils_9.7.bb: fix update-alternative support for base32

base32 is listed as update-alternative binary but does not
set the alternatie variables for it to take effect causing
the original ELF file to be installed in the destination
instead of the symlink. Fix this by setting the alternative
variables and by moving the original binary into subdir.

Signed-off-by: Keerthivasan Raghavan <kraghava@qti.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agorepo: upgrade 2.56 -> 2.58
Markus Kurz [Mon, 1 Sep 2025 00:13:24 +0000 (02:13 +0200)] 
repo: upgrade 2.56 -> 2.58

For changelog, check https://gerrit.googlesource.com/git-repo

Signed-off-by: Markus Kurz <m.kurz92@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agostress-ng: upgrade 0.19.02 -> 0.19.03
Randy MacLeod [Sat, 30 Aug 2025 17:02:37 +0000 (13:02 -0400)] 
stress-ng: upgrade 0.19.02 -> 0.19.03

Improvements
    More progress feedback when sending ^C (SIGINT)
    Clean up manual
    Improved portability

Changelog:
   https://github.com/ColinIanKing/stress-ng/releases/tag/V0.19.03

Re-enable DEBUG_BUILDs since the upstream defect:
   https://github.com/ColinIanKing/stress-ng/issues/315
is resolved by:
   6e62dc1fb   2023-08-31   Makefile: force vnni to be built with at least -O2

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoutil-linux: include/mount-api-utils: avoid using sys/mount.h
Randy MacLeod [Sat, 30 Aug 2025 17:02:36 +0000 (13:02 -0400)] 
util-linux: include/mount-api-utils: avoid using sys/mount.h

Avoid compile error:
| In file included from /usr/include/linux/fs.h:19,
|                  from /usr/include/linux/btrfs.h:29,
|                  from ../sources/util-linux-2.41.1/libmount/src/btrfs.c:18:
| /usr/include/x86_64-linux-gnu/sys/mount.h:35:3: \
                   error: expected identifier before numeric constant
|    35 |   MS_RDONLY = 1,                /* Mount read-only.  */
|       |   ^~~~~~~~~

This is seen on PopOS 22.04, an Ubuntu/Debian-based distro.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agostrace: skip nanosleep test
Osama Abdelkader [Fri, 29 Aug 2025 23:03:44 +0000 (01:03 +0200)] 
strace: skip nanosleep test

Add nanosleep to the skipped tests since it's load-sensitive

fixes:

failed ptests {'strace': ['nanosleep.gen.test', 'nanosleep.gen']}
https://bugzilla.yoctoproject.org/show_bug.cgi?id=15524

Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agohwdata: upgrade 0.397 -> 0.398
Gyorgy Sarvari [Fri, 29 Aug 2025 09:25:34 +0000 (11:25 +0200)] 
hwdata: upgrade 0.397 -> 0.398

Changelog: Update pci, usb and vendor ids

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agovte: upgrade 0.78.2 -> 0.80.3
Gyorgy Sarvari [Fri, 29 Aug 2025 09:18:16 +0000 (11:18 +0200)] 
vte: upgrade 0.78.2 -> 0.80.3

0004-fast_float-Add-single-header-library-for-from_char-i.patch
and 0005-color-parser-Use-fast_float-implementation-for-from_.patch
patches dropped: upstream has adopted the changes, and oe-core also
provides now fastfloat, no need to vendor it with a patch.

0002-lib-Typo-fix.patch is dropped, because it was a backport, and
it is included in this release.

Shortlog: https://gitlab.gnome.org/GNOME/vte/-/compare/0.80.3...0.78.2

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agolicense.py: drop visit_Str
Martin Jansa [Fri, 29 Aug 2025 09:04:48 +0000 (11:04 +0200)] 
license.py: drop visit_Str

In https://git.openembedded.org/openembedded-core/commit/?h=kirkstone&id=abc93390a3f19bc4cc159c5690a478b9e2270906
visit_Constant was added for compatibility with Python 3.8 and newer, but
visit_Str was kept, because at that time bitbake did require Python 3.6.

Now latest bitbake requires 3.9 and even version 2.4 used in mickledore
builds requires 3.8 since:
https://git.openembedded.org/bitbake/commit/?h=2.4&id=744310f360d2288ac2ef07745abc86852126b5b9
so we can safely remove these.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agobabeltrace2: Disable ccache explicitly and inherit setuptools3-base
Khem Raj [Thu, 28 Aug 2025 19:37:50 +0000 (12:37 -0700)] 
babeltrace2: Disable ccache explicitly and inherit setuptools3-base

ccache does not work with this package

python plugins use setuptools/distutils to build and it tries to compute
LDCXXSHARED as described in [1] in /src/bindings/python/bt2/setup.py.in
It gets confused and ends up specifying compiler twice and the result is
that linker fails with cryptic errors e.g.

| /mnt/b/yoe/master/sources/poky/build/tmp/work/x86-64-v3-poky-linux-musl/babeltrace2/2.1.1/recipe-sysroot-native/usr/bin/x86_64-poky-linux-musl/../../libexec/x86_64-poky-linux-musl/gcc/x86_64-poky-linux-musl/15.2.0/ld: cannot find x86_64-poky-linux-musl-g++: No such file or directory
| collect2: error: ld returned 1 exit status
| error: command '/mnt/b/yoe/master/sources/poky/build/tmp/hosttools/ccache' failed with exit code 1
| make[3]: *** [Makefile:741: build-python-bindings.stamp] Error 1
| make[3]: Leaving directory '/mnt/b/yoe/master/sources/poky/build/tmp/work/x86-64-v3-poky-linux-musl/babeltrace2/2.1.1/build/src/bindings/python/bt2'

This is because first occurance of linker is encountering second linker on its
cmdline and tries to treat it as an input object to linker

It seems LDCXXSHARED computation gets confused when CXX contains ccache

[1] https://github.com/pypa/setuptools/commit/2c937116cc0dcd9b26b6070e89a3dc5dcbedc2ae

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agolibffi: upgrade 3.5.1 -> 3.5.2
Gyorgy Sarvari [Thu, 28 Aug 2025 18:21:33 +0000 (20:21 +0200)] 
libffi: upgrade 3.5.1 -> 3.5.2

Changelog:
-fix: enable FFI_MMAP_EXEC_WRIT for DragonFly BSD
-Emscripten: Add wasm64 target
-fix: Ensure trampoline file descriptors are closed on exec.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agoxf86-input-vmmouse, xf86-input-mouse: drop recipes
Gyorgy Sarvari [Thu, 28 Aug 2025 18:17:48 +0000 (20:17 +0200)] 
xf86-input-vmmouse, xf86-input-mouse: drop recipes

xf86-input-mouse has dropped Linux support[1], so drop the obsolete
recipe. Only xf86-input-vmmouse is dependent on this recipe, so drop
that also. Could not find recipes depending on on xf86-input-vmmouse.

[1]: https://gitlab.freedesktop.org/xorg/driver/xf86-input-mouse/-/commit/d719d0588c580ac0ffb8546e864c05c521b1ab9d

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agorpm-sequoia: remove rc initialisation from run-ptest
Yoann Congal [Thu, 28 Aug 2025 18:13:24 +0000 (20:13 +0200)] 
rpm-sequoia: remove rc initialisation from run-ptest

With the previous patch "ptest-cargo: move run-ptest rc variable
initialisation", rc is initialised by the ptest-cargo class.
Remove the (now) redundant initialisation and the related comment.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agoptest-cargo: move run-ptest rc variable initialisation
Yoann Congal [Thu, 28 Aug 2025 18:13:23 +0000 (20:13 +0200)] 
ptest-cargo: move run-ptest rc variable initialisation

ptest-cargo run-ptest can be generated in two fashions: generated from
scratch or appended to an exiting run-ptest file. The rc variable used
to track tests failure was only initialized in "generated from scratch"
case. Which lead to errors in the "appended" case.

Move the rc variable initialisation to the common code of both case to
fix this problem.

Only initialize rc if it was not already affected in the recipe provided
run-ptest.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Cc: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agopuzzles: upgrade to latest revision
Gyorgy Sarvari [Thu, 28 Aug 2025 17:30:55 +0000 (19:30 +0200)] 
puzzles: upgrade to latest revision

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agopython3-numpy: upgrade 2.3.1 -> 2.3.2
Trevor Gamblin [Thu, 28 Aug 2025 10:18:56 +0000 (06:18 -0400)] 
python3-numpy: upgrade 2.3.1 -> 2.3.2

Release notes (https://github.com/numpy/numpy/releases/tag/v2.3.2):

|The NumPy 2.3.2 release is a patch release with a number of bug fixes
|and maintenance updates. The highlights are:
|
|    Wheels for Python 3.14.0rc1
|    PyPy updated to the latest stable release
|    OpenBLAS updated to 0.3.30
|
|This release supports Python versions 3.11-3.14

Reproducibility OK:

|2025-08-28 05:50:44,703 - oe-selftest - INFO - ----------------------------------------------------------------------
|2025-08-28 05:50:44,703 - oe-selftest - INFO - Ran 1 test in 1440.103s
|2025-08-28 05:50:44,703 - oe-selftest - INFO - OK
|2025-08-28 05:50:49,531 - oe-selftest - INFO - RESULTS:
|2025-08-28 05:50:49,531 - oe-selftest - INFO - RESULTS - reproducible.ReproducibleTests.test_reproducible_builds: PASSED (1400.47s)
|2025-08-28 05:50:49,724 - oe-selftest - INFO - SUMMARY:
|2025-08-28 05:50:49,724 - oe-selftest - INFO - oe-selftest () - Ran 1 test in 1440.103s
|2025-08-28 05:50:49,724 - oe-selftest - INFO - oe-selftest - OK - All required tests passed (successes=1, skipped=0, failures=0, errors=0)

ptests OK:

|============================================================================
|Testsuite summary
|# TOTAL: 48921
|# PASS: 46457
|# SKIP: 2426
|# XFAIL: 33
|# FAIL: 0
|# XPASS: 5
|# ERROR: 0
|DURATION: 193
|END: /usr/lib/python3-numpy/ptest
|2025-08-28T09:14
|STOP: ptest-runner
|TOTAL: 1 FAIL: 0
|root@qemux86-64:~#

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agosdk: Remove go from SDK_TOOLCHAIN_LANGS for powerpc
Peter Tatrai [Thu, 28 Aug 2025 11:13:19 +0000 (13:13 +0200)] 
sdk: Remove go from SDK_TOOLCHAIN_LANGS for powerpc

PowerPC 32bit port of go compiler does not exist, remove it from list
Fixes SDK builds for qemupowerpc and other powerpc machines

Signed-off-by: Peter Tatrai <peter.tatrai.ext@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agolttng-tools: Filter out regression testsuite on musl systems
Khem Raj [Thu, 28 Aug 2025 02:51:34 +0000 (19:51 -0700)] 
lttng-tools: Filter out regression testsuite on musl systems

regression testsuite does not run to finish on musl systems, some of
the issues seen

* python is OOM'ing which is fixed by asking for 8G memory for qemu
* It hits the timeout limits of ptest-runner even -t 2400 does not finish it
* Use make -j1 and running run-ptest script directly ( outside
  ptest-runner to avoid timeout limit) causes it to run forever

Lets disable this testsuite for musl systems for now.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
7 weeks agokea: Upgrade to 2.6.4 release
Khem Raj [Thu, 28 Aug 2025 02:50:11 +0000 (19:50 -0700)] 
kea: Upgrade to 2.6.4 release

The following bug fixes have been implemented since the previous stable
release, version 2.6.3:

1. **Syslog logging fix**: We corrected an issue in logging
configuration when parsing "syslog:<facility name>" [#3921, #3992].

2. **Fix for misconfigured global reservations**: Earlier Kea versions
could crash when handling misconfigured global reservations. The problem
is now fixed [#3910, #3911, #4001].

3. **Recent Sphinx support**: Support for recent versions of Sphinx, a
tool used to generate documentation, was added. This allows Kea
documentation and packages to be built on recent systems, while
maintaining compatibility with older versions. This fix was tested with
Sphinx 1.8.4 on Debian 10, 8.1.3 on Fedora 42, and 8.2.3 on ArchLinux
[#3800].

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agodefault-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue
Deepak Rathore [Thu, 28 Aug 2025 10:56:09 +0000 (03:56 -0700)] 
default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue

The default CONNECTIVITY_CHECK_URIS uses "https://yoctoproject.org/connectivity.html"
which redirect to "https://www.yoctoproject.org/connectivity.html".

Some network configurations with proxies or restricted internet access
don't handle HTTP redirects properly during the sanity check phase,
causing build failures with:

ERROR:  OE-core's config sanity checker detected a potential misconfiguration.
Either fix the cause of this error or at your own risk disable the checker (see sanity.conf).
Following is the list of potential problems / advisories:

Fetcher failure for URL: 'https://yoctoproject.org/connectivity.html'. URL doesn't work.

Updated the default URL to use the final destination directly to avoid
redirect-related connectivity check failures.

Also updated SDK test cases in https.py to use the corrected URL for
consistency.

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agorust: handle softfp fpu
Peter Marko [Thu, 21 Aug 2025 12:26:55 +0000 (14:26 +0200)] 
rust: handle softfp fpu

With TARGET_FPU set to "softfp" stdlib-rs fails with:
error: Error loading target specification: ARM targets must specify their float ABI. Run `rustc --print target-list` for a list of built-in targets

This fpu type is set for example for arm in file
meta/conf/machine/include/arm/feature-arm-vfp.inc
when TUNE_FEATURES do not contain "callconvention-hard",
e.g. when using tune
DEFAULTTUNE = "cortexa8"

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolibnss-nis: Do not export _nss_nis_getsecretkey when libc does not have xdecrypt
Khem Raj [Wed, 27 Aug 2025 06:43:32 +0000 (23:43 -0700)] 
libnss-nis: Do not export _nss_nis_getsecretkey when libc does not have xdecrypt

Fixes build errors ( seen with lld particularly )

| x86_64-yoesdk-linux-ld.lld: error: version script assignment of 'NSS_NIS_PRIVATE_2.0' to symbol '_nss_nis_getsecretkey' failed: symbol not defined
| x86_64-yoesdk-linux-clang: error: linker command failed with exit code 1 (use -v to see invocation)
| make[3]: *** [Makefile:642: libnss_nis.la] Error 1
| make[3]: Leaving directory '/mnt/b/yoe/master/build/tmp/work/x86_64-nativesdk-yoesdk-linux/nativesdk-libnss-nis/3.2/build/src'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolibgcrypt: 1.11.1 -> 1.11.2
Hongxu Jia [Wed, 27 Aug 2025 05:18:52 +0000 (13:18 +0800)] 
libgcrypt: 1.11.1 -> 1.11.2

Refresh patches:
- 0004-tests-Makefile.am-fix-undefined-reference-to-pthread.patch
- 0001-tests-Fix-link-errors-for-t-thread-local.patch

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agoman-pages: 6.14 -> 6.15
Hongxu Jia [Wed, 27 Aug 2025 05:18:51 +0000 (13:18 +0800)] 
man-pages: 6.14 -> 6.15

License-Update: No change, `README: Files: Update man/ path'

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agorpcbind: 1.2.7 -> 1.2.8
Hongxu Jia [Wed, 27 Aug 2025 05:18:50 +0000 (13:18 +0800)] 
rpcbind: 1.2.7 -> 1.2.8

Refresh patches
- rpcbind_add_option_to_fix_port_number.patch
- 0001-systemd-use-EnvironmentFile.patch

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agoreadline: backport a patch to fix issue that readline can't work with samba
Liu Yiding [Wed, 27 Aug 2025 03:05:16 +0000 (11:05 +0800)] 
readline: backport a patch to fix issue that readline can't work with samba

smbclient can't accept input after readline upgrade to 8.3
| root # smbclient //192.168.2.16/test -N
|       Try "help" to get a list of possible commands.
|       smb: \>

similar issue has been reported:
https://lists.gnu.org/archive/html/bug-readline/2025-07/msg00011.html

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agosdk: Remove go from SDK_TOOLCHAIN_LANGS for rv32
Khem Raj [Tue, 26 Aug 2025 20:55:22 +0000 (13:55 -0700)] 
sdk: Remove go from SDK_TOOLCHAIN_LANGS for rv32

RISCV32 port of go compiler does not yet exist remove it from list
Fixes SDK builds for qemuriscv32 and other rv32 machines

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agosstate: Open file with context manager
Ola x Nilsson [Tue, 26 Aug 2025 13:41:34 +0000 (15:41 +0200)] 
sstate: Open file with context manager

In sstat_install and sstate_clean_cache.

Signed-off-by: Ola x Nilsson <olani@axis.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolinux-yocto/6.16: cfg fix configuration audit warnings
Bruce Ashfield [Wed, 27 Aug 2025 02:46:58 +0000 (22:46 -0400)] 
linux-yocto/6.16: cfg fix configuration audit warnings

Integrating the following commit(s) to linux-yocto/.:

1/1 [
    Author: Bruce Ashfield
    Email: bruce.ashfield@gmail.com
    Subject: arm/6.16: remove unsettable and obsolete options
    Date: Tue, 26 Aug 2025 22:43:01 -0400

    These crypto options are only selected or have been dropped
    from 6.16, so we drop them from our configs.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolinux-yocto/6.12: update CVE exclusions (6.12.42)
Bruce Ashfield [Thu, 21 Aug 2025 14:03:22 +0000 (10:03 -0400)] 
linux-yocto/6.12: update CVE exclusions (6.12.42)

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 2 changes (2 new | 0 updated): - 2 new CVEs: CVE-2025-47184, CVE-2025-9300 - 0 updated CVEs:
        Date: Thu, 21 Aug 2025 13:06:23 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolinux-yocto/6.12: update to v6.12.42
Bruce Ashfield [Thu, 21 Aug 2025 14:03:21 +0000 (10:03 -0400)] 
linux-yocto/6.12: update to v6.12.42

Updating linux-yocto/6.12 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    880e4ff5d6c8 Linux 6.12.42
    5f06ee9f9a36 usb: gadget : fix use-after-free in composite_dev_cleanup()
    0ab3ae768c48 USB: gadget: f_hid: Fix memory leak in hidg_bind error path
    ba08cc6801ec HID: apple: validate feature-report field count to prevent NULL pointer dereference
    68e5579f4de1 media: ti: j721e-csi2rx: fix list_del corruption
    efee62c5fc8c perf/arm-ni: Set initial IRQ affinity
    91b370800b3f mm: swap: fix potential buffer overflow in setup_clusters()
    f7c75406b7e6 mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop
    b85fe4c7403f mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
    1beca07bd954 MIPS: mm: tlb-r4k: Uniquify TLB entries on init
    082a639b1c67 s390/mm: Remove possible false-positive warning in pte_free_defer()
    296742ab73c2 x86/fpu: Delay instruction pointer fixup until after warning
    860d93bd6a21 platform/x86/intel/pmt: fix a crashlog NULL pointer access
    76563060ec75 ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26)
    9fb7f010eb2e ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx
    0e1c67e9b8bb ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx
    e1c508818cba ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
    0f158abad0ce ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
    aed15fc08f15 x86/sev: Evict cache lines during SNP memory validation
    c884cab3bb60 net: usbnet: Fix the wrong netif_carrier_on() call
    d68a867d7401 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
    8c2b840c5443 Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
    1331e908f2f4 PCI/ASPM: Fix L1SS saving
    78b3007eb08b PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state()
    8d2026704a79 USB: serial: option: add Foxconn T99W709
    f54eef9be3cf smb: server: Fix extension string in ksmbd_extract_shortname()
    7e5d91d3e6c6 ksmbd: limit repeated connections from clients with the same IP
    68300f2738e0 ksmbd: fix corrupted mtime and ctime in smb2_open
    edeecc7871e8 ksmbd: fix Preauh_HashValue race condition
    2a30ed6428ce ksmbd: fix null pointer dereference error in generate_encryptionkey
    7384e0637fa8 drm/i915/ddi: only call shutdown hooks for valid encoders
    4a764acf4ab3 drm/i915/display: add intel_encoder_is_hdmi()
    428434769e45 drm/i915/ddi: gracefully handle errors from intel_ddi_init_hdmi_connector()
    743de353a434 drm/i915/hdmi: add error handling in g4x_hdmi_init()
    7edff90dc154 drm/i915/hdmi: propagate errors from intel_hdmi_init_connector()
    5913410e4962 drm/i915/ddi: change intel_ddi_init_{dp, hdmi}_connector() return type
    acd6f757f66c selftests/bpf: Fix build error with llvm 19
    01d1f298ba86 selftests/bpf: Add a test for arena range tree algorithm
    22d89925e37e ice/ptp: fix crosstimestamp reporting
    43a27836ac98 Revert "bcache: remove heap-related macros and switch to generic min_heap"
    be8a5602b05b accel/ivpu: Fix reset_engine debugfs file logic
    32950b190791 vsock: Do not allow binding to VMADDR_PORT_ANY
    f2e8fcfd2b1b net/packet: fix a race in packet_set_ring() and packet_notifier()
    15a77e9cb924 selftests/perf_events: Add a mmap() correctness test
    e529888b7e80 perf/core: Prevent VMA split of buffer mappings
    92043120a2e9 perf/core: Exit early on perf_mmap() fail
    8c67899a5295 perf/core: Don't leak AUX buffer refcount on allocation failure
    25bb3647d30a sunrpc: fix handling of server side tls alerts
    39f8e0cf1798 smb: client: return an error if rdma_connect does not return within 5 seconds
    8cb7f685af10 pptp: fix pptp_xmit() error path
    7d0f3072f999 nvmet: exit debugfs after discovery subsystem exits
    8c221b55d0c2 smb: client: let recv_done() avoid touching data_transfer after cleanup/move
    c5b3ce5cc7f6 smb: client: let recv_done() cleanup before notifying the callers.
    501eed35cac6 smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    d6917b434919 smb: client: remove separate empty_packet_queue
    0d6d86b0a575 smb: server: let recv_done() avoid touching data_transfer after cleanup/move
    3d970a2f2472 smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
    896af4c26100 smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    17d675f6390b smb: server: remove separate empty_recvmsg_queue
    b9a8a3f60b9c ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
    02541f9d5c58 irqchip: Build IMX_MU_MSI only on ARM
    04d5f4dbef26 eth: fbnic: remove the debugging trick of super high page bias
    9432bcabeeee s390/mm: Allocate page table with PAGE_SIZE granularity
    d00e4125680f net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
    0ddfe8b127ef benet: fix BUG when creating VFs
    788c5e28cf48 x86/irq: Plug vector setup race
    c36b2fbd60e8 sunrpc: fix client side handling of tls alerts
    034d210f9d56 net/sched: taprio: enforce minimum value for picos_per_byte
    c0ec2e47f1e9 net: drop UFO packets in udp_rcv_segment()
    714b84653841 net: mdio: mdio-bcm-unimac: Correct rate fallback logic
    5489e7fc6f8b ipv6: reject malicious packets in ipv6_gso_segment()
    15c0847df624 net/mlx5: Correctly set gso_segs when LRO is used
    674328102baa spi: cs42l43: Property entry should be a null-terminated array
    e1e15033dfba ASoC: tas2781: Fix the wrong step for TLV on tas2781
    0257dc08a404 block: ensure discard_granularity is zero when discard is not supported
    3ff8fe9194a7 block: Fix default IO priority if there is no IO context
    495cb1e8ec8a netlink: specs: ethtool: fix module EEPROM input/output arguments
    7175bf8a2af5 s390/ap: Unmask SLCF bit in card and queue ap functions sysfs
    929aa980dacf nvmet: initialize discovery subsys after debugfs is initialized
    ea99b88b1999 pptp: ensure minimal skb length in pptp_xmit()
    39468480b321 net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
    e56e1842289d phy: mscc: Fix parsing of unicast frames
    75b59af723c4 netpoll: prevent hanging NAPI when netcons gets enabled
    1f3a7f53874a md/md-cluster: handle REMOVE message earlier
    b6f47385e457 NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
    d4ebe94673b3 NFSv4.2: another fix for listxattr
    2ad40b7992aa NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
    bb96d6dbd005 NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
    ac9a6b863827 sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
    531914fd74e8 pNFS/flexfiles: don't attempt pnfs on fatal DS errors
    48c6935a3498 PCI: pnv_php: Fix surprise plug detection and recovery
    d2c60a8a387e powerpc/eeh: Make EEH driver device hotplug safe
    5ea0d23aa954 powerpc/eeh: Export eeh_unfreeze_pe()
    11fa01706a4f PCI: pnv_php: Work around switches with broken presence detection
    28aa3cfce124 PCI: pnv_php: Clean up allocated IRQs on unplug
    3df959fd51d6 sched/psi: Fix psi_seq initialization
    c4a0d62bbe99 kconfig: qconf: fix ConfigList::updateListAllforAll()
    74b3fedc57d1 scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
    d710ed68c54a scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
    13a501f95e22 scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
    13510a36a22f scsi: mpt3sas: Fix a fw_event memory leak
    fa1607f943f4 vfio/pci: Separate SR-IOV VF dev_set
    1df8150ab4cc vfio/pds: Fix missing detach_ioas op
    12964e77c8c1 vfio: Prevent open_count decrement to negative
    7b2db63ad836 vfio: Fix unbalanced vfio_df_close call in no-iommu mode
    89efd90ec672 i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe()
    6038537c4a26 exfat: fdatasync flag should be same like generic_write_sync()
    82765ce5c7a5 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
    4b069ec86c33 f2fs: fix to calculate dirty data during has_not_enough_free_secs()
    3908f15df598 f2fs: fix to update upper_p in __get_secs_required() correctly
    0fe7976b6254 f2fs: vm_unmap_ram() may be called from an invalid context
    70849d33130a f2fs: fix to avoid out-of-boundary access in devs.path
    97df495d7541 f2fs: fix to avoid panic in f2fs_evict_inode
    dea243f58a83 f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    09a8915e0fcc f2fs: doc: fix wrong quota mount option description
    ca525a64bb92 f2fs: fix to check upper boundary for gc_no_zoned_gc_percent
    1f1efc11132a f2fs: fix to check upper boundary for gc_valid_thresh_ratio
    46f24b1fbf6b f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent
    44a79437309e f2fs: fix KMSAN uninit-value in extent_info usage
    334afc40c41c f2fs: fix bio memleak when committing super block
    8b1f1f83e377 f2fs: turn off one_time when forcibly set to foreground GC
    b0002acbec11 rtc: rv3028: fix incorrect maximum clock rate handling
    b6612b05de8e rtc: pcf8563: fix incorrect maximum clock rate handling
    b82c5074f6fc rtc: pcf85063: fix incorrect maximum clock rate handling
    e57edc34bcf7 rtc: nct3018y: fix incorrect maximum clock rate handling
    189ddb44f88c rtc: hym8563: fix incorrect maximum clock rate handling
    6ccd7f451e0e rtc: ds1307: fix incorrect maximum clock rate handling
    a721da19eac7 ucount: fix atomic_long_inc_below() argument type
    db38ade47be4 module: Restore the moduleparam prefix length check
    ff24854e8547 apparmor: Fix unaligned memory accesses in KUnit test
    277bb68f6576 apparmor: fix loop detection used in conflicting attachment resolution
    991a32f71538 apparmor: ensure WB_HISTORY_SIZE value is a power of 2
    258d42024fad bpf: Check netfilter ctx accesses are aligned
    eb2035c1adeb bpf: Check flow_dissector ctx accesses are aligned
    b2a3018e8325 vhost: Reintroduce kthread API and add mode selection
    3c8a15f2229d vdpa: Fix IDR memory leak in VDUSE module exit
    37f26b9013b4 vdpa/mlx5: Fix release of uninitialized resources on error path
    8ed657604bfd vhost-scsi: Fix log flooding with target does not exist errors
    65c9eeff9308 vdpa/mlx5: Fix needs_teardown flag calculation
    966460bace9e perf record: Cache build-ID of hit DSOs only
    0a98771d1e50 selftests: ALSA: fix memory leak in utimer test
    6f7ac9c5ad75 drm/xe/vf: Disable CSC support on VF
    81b117f4a5a3 mtd: rawnand: atmel: set pmecc data setup time
    2529fc0a1873 mtd: rawnand: rockchip: Add missing check after DMA map
    3e2d8d39a328 mtd: rawnand: atmel: Fix dma_mapping_error() address
    3406bd02dee3 jfs: fix metapage reference count leak in dbAllocCtl
    40f0a51f6c54 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
    a434ce6643de crypto: qat - fix seq_file position update in adf_ring_next()
    71c31562d23b crypto: qat - fix DMA direction for compression on GEN2 devices
    309b23f7b5bc perf tools: Remove libtraceevent in .gitignore
    112ed94f2a45 sh: Do not use hyphen in exported variable name
    32b106dc4622 ASoC: fsl_xcvr: get channel status data when PHY is not exists
    a5f147a934ef dmaengine: nbpfaxi: Add missing check after DMA map
    2c0b57e55d89 dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
    39c4454ed669 fs/orangefs: Allow 2 more characters in do_c_string()
    e3d729db128d remoteproc: xlnx: Disable unsupported features
    c1dead8bb303 clk: imx95-blk-ctl: Fix synchronous abort
    875bdd2f9bbc PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
    9cf0d1dbfa44 soundwire: stream: restore params when prepare ports fail
    a510a9869d21 crypto: qat - disable ZUC-256 capability for QAT GEN5
    bcd9cdc74974 crypto: img-hash - Fix dma_unmap_sg() nents value
    44b07ee87c4f crypto: keembay - Fix dma_unmap_sg() nents value
    f63bd615e58f hwrng: mtk - handle devm_pm_runtime_enable errors
    1a43f53b0e9e clk: at91: sam9x7: update pll clk ranges
    b2e294216bf1 ext4: Make sure BH_New bit is cleared in ->write_end handler
    0a844a32e07a watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
    7aa077df2357 scsi: isci: Fix dma_unmap_sg() nents value
    ef42bea6c105 scsi: mvsas: Fix dma_unmap_sg() nents value
    ad1fbfab0dcf scsi: elx: efct: Fix dma_unmap_sg() nents value
    6a9f573ebdb6 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
    49a6266113f0 clk: sunxi-ng: v3s: Fix de clock definition
    ea11b0d213cc clk: thead: th1520-ap: Correctly refer the parent of osc_12m
    87be3d8ca00b RDMA/mana_ib: Fix DSCP value in modify QP
    c149e3475cac perf tests bp_account: Fix leaked file descriptor
    9ea3f6b9a67b pinmux: fix race causing mux_owner NULL with active mux_usecount
    fc1072d934f6 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
    ec437d015968 kernel: trace: preemptirq_delay_test: use offstack cpu mask
    5f3c0301540b RDMA/hns: Fix -Wframe-larger-than issue
    81c0bdb09cfa RDMA/hns: Drop GFP_NOWARN
    bb8899d40600 RDMA/hns: Fix accessing uninitialized resources
    1209e33fe3af RDMA/hns: Get message length of ack_req from FW
    9dea08eac4f6 crypto: ccp - Fix crash when rebind ccp device for ccp.ko
    c88a902cc5d3 crypto: inside-secure - Fix `dma_unmap_sg()` nents value
    155c1d4c4907 crypto: ccp - Fix locking on alloc failure handling
    88d4191073a5 RDMA/hns: Fix HW configurations not cleared in error flow
    dab173bae330 RDMA/hns: Fix double destruction of rsv_qp
    ffc3c00a0e83 perf sched: Fix memory leaks in 'perf sched latency'
    f7786e6a4f9c perf sched: Use RC_CHK_EQUAL() to compare pointers
    f34d54d2c276 perf sched: Fix memory leaks for evsel->priv in timehist
    31a549b3a294 perf sched: Fix memory leaks in 'perf sched map'
    4b3ab5f3639e perf sched: Free thread->priv using priv_destructor
    5c42686e56fc perf sched: Make sure it frees the usage string
    c2e061c2a5ec mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER
    ea90bb43be7c perf dso: Add missed dso__put to dso__load_kcore
    e9136a4afe3b perf tools: Fix use-after-free in help_unknown_cmd()
    16ab43828c48 Fix dma_unmap_sg() nents value
    40fd96ce4e60 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
    de07e1183139 fanotify: sanitize handle_type values when reporting fid
    faa05c6d5ae1 phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers
    e7d11d7da5e0 dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning
    b2b740a884eb pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state()
    230b23da10d5 pinctrl: sunxi: Fix memory leak on krealloc failure
    c63ca4d3870c PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
    0e29430d700a crypto: arm/aes-neonbs - work around gcc-15 warning
    99490f243390 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
    f642500aa7ed power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
    f1a1be99d5ae clk: xilinx: vcu: unregister pll_post only if registered correctly
    1ff541ea9e0c media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
    7943ed1f05f5 clk: davinci: Add NULL check in davinci_lpsc_clk_register()
    a508da16feac mtd: fix possible integer overflow in erase_xfer()
    55ece6d9c370 crypto: qat - fix state restore for banks with exceptions
    a32cd73f66b7 crypto: qat - allow enabling VFs in the absence of IOMMU
    bfd78c42f0d7 crypto: marvell/cesa - Fix engine load inaccuracy
    e555e28232b3 crypto: qat - use unmanaged allocation for dc_data
    beea9197b2e9 crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
    e3992ee81eba clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks
    a0acd38f75de PCI: rockchip-host: Fix "Unexpected Completion" log message
    5f176b9ea18c fortify: Fix incorrect reporting of read buffer size
    3d672fe065aa staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
    0dbef493cae7 bpf, arm64: Fix fp initialization for exception boundary
    87b34d935109 bpf/preload: Don't select USERMODE_DRIVER
    0c58f74f8aa9 ipv6: annotate data-races around rt->fib6_nsiblings
    db65739d406c ipv6: fix possible infinite loop in fib6_info_uses_dev()
    cd8d8bbd9ced ipv6: prevent infinite loop in rt6_nlmsg_size()
    c2241478d248 vrf: Drop existing dst reference in vrf_ip6_input_dst
    f4f5a1a751aa selftests: rtnetlink.sh: remove esp4_offload after test
    77b05e7a2d66 stmmac: xsk: fix negative overflow of budget in zerocopy mode
    5d761dc79f4a net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863
    781a0bbf3774 net/mlx5e: Remove skb secpath if xfrm state is not found
    c04bc84aa5e9 net/mlx5e: Clear Read-Only port buffer size in PBMC before update
    7c1ae471da69 netfilter: xt_nfacct: don't assume acct name is null-terminated
    bd5908c1f60d can: kvaser_usb: Assign netdev.dev_port based on device channel index
    4bee385bc330 can: kvaser_pciefd: Store device channel index
    f2880c9cf1ed can: peak_usb: fix USB FD devices potential malfunction
    176784dc75ae selftests: drv-net: Fix remote command checking in require_cmd()
    208040490a4f tools/rv: Do not skip idle in trace
    62f6175d145e bpf: Disable migration in nf_hook_run_bpf().
    cca34a0a767f Bluetooth: hci_event: Mask data status from LE ext adv reports
    16852eccbdfa Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
    f15d94491094 memcg_slabinfo: Fix use of PG_slab
    1e30043ee358 kcsan: test: Initialize dummy variable
    5763daf5ca4f ring-buffer: Remove ring_buffer_read_prepare_sync()
    24bf1d10a04a wifi: nl80211: Set num_sub_specs before looping through sub_specs
    471a7904f82f wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
    27244ed7403c wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
    0c5c0c898314 wifi: ath12k: fix endianness handling while accessing wmi service bit
    f0a0bc39fc52 Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
    01aa86f93e70 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
    f92ad4f8ecb9 wifi: mac80211: Don't call fq_flow_idx() for management frames
    eadf83a687fd wifi: mac80211: Do not schedule stopped TXQs
    ad1c484f1b81 wifi: plfxlc: Fix error handling in usb driver probe
    af72badd5ee4 wifi: mac80211: reject TDLS operations when station is not associated
    c200ecdd820f rcu: Fix delayed execution of hurry callbacks
    f14341cf874e iommu/amd: Fix geometry.aperture_end for V2 tables
    39dfbf77c6e4 drm/amdgpu/gfx10: fix kiq locking in KCQ reset
    6db9f958b43f drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset
    b9f5d112e5e3 drm/amdgpu/gfx9: fix kiq locking in KCQ reset
    9c0e3144924c wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
    da4d3fd5920a mwl8k: Add missing check after DMA map
    4db9ac2246a7 wifi: rtw88: Fix macid assigned to TDLS station
    2bc4c07394cb wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
    e9c3ae88e4f4 tcp: call tcp_measure_rcv_mss() for ooo packets
    81990ac1d1f0 xen/gntdev: remove struct gntdev_copy_batch from stack
    e59078852604 xen: fix UAF in dmabuf_exp_from_pages()
    19c262401e12 RDMA/mlx5: Fix UMR modifying of mkey page size
    bdb956891c9c net_sched: act_ctinfo: use atomic64_t for three counters
    795cb393e389 net/sched: Restrict conditions for adding duplicating netems to qdisc tree
    6aa95f56a6a7 iommu/amd: Enable PASID and ATS capabilities in the correct order
    67925d8b0d63 um: rtc: Avoid shadowing err in uml_rtc_start()
    fe6345dbae40 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
    a9ca56ca4f19 netfilter: nf_tables: adjust lockdep assertions handling
    765eeb44b1a3 netfilter: nf_tables: Drop dead code from fill_*_info routines
    69be0a3c4e5b fbcon: Fix outdated registered_fb reference in comment
    c1cbee3aae2a sched/psi: Optimize psi_group_change() cpu_clock() usage
    82f2cd70222c drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
    08cfbe7acac0 refscale: Check that nreaders and loops multiplication doesn't overflow
    ac984f610628 m68k: Don't unregister boot console needlessly
    d89943d1e3a0 drm/msm/dpu: Fill in min_prefill_lines for SC8180X
    6434ca4429eb bpf: Ensure RCU lock is held around bpf_prog_ksym_find
    7989a6056c7e kselftest/arm64: Fix check for setting new VLs in sve-ptrace
    939135ddeae2 net: dst: annotate data-races around dst->output
    002bb5722d7e net: dst: annotate data-races around dst->input
    4249f1307932 net/mlx5: Check device memory pointer before usage
    bfb595e79319 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
    72a48be1f539 wifi: ath11k: clear initialized flag for deinit-ed srng lists
    7dd6350307af iwlwifi: Add missing check for alloc_ordered_workqueue
    a84858649b32 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
    7858a95566f4 wifi: rtl818x: Kill URBs before clearing tx status queue
    77a7a48f87d6 wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
    1b8397c2d14e caif: reduce stack size, again
    3f91bec30811 powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add
    c9c7b91bc1a0 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
    bcdd7499bdef drm/amdgpu: Remove nbiov7.9 replay count reporting
    b56acee24e33 drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
    94927ae3d5c1 net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
    443430e67868 selftests/bpf: Fix unintentional switch case fall through
    274bf55fcd3f selftests/bpf: fix signedness bug in redir_partial()
    ee03766d79de bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
    538b19886ca0 bpf, sockmap: Fix psock incorrectly pointing to sk
    66d64d42d297 drm/panthor: Add missing explicit padding in drm_panthor_gpu_info
    de7834d100f2 drm/panfrost: Fix panfrost device variable name in devfreq
    439b30af0ea9 drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
    33cb946a8c73 selftests/tracing: Fix false failure of subsystem event test
    e7d59358a7e3 staging: nvec: Fix incorrect null termination of battery manufacturer
    c458492e2ab8 bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640
    7d4f49b9141a interconnect: qcom: sc8180x: specify num_nodes
    3f693357f551 interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
    8eaeb8df9159 soc: qcom: pmic_glink: fix OF node leak
    4c80835f6af4 samples: mei: Fix building on musl libc
    c2f05fc69f4a staging: greybus: gbphy: fix up const issue with the match callback
    8e4b38710dd4 cpufreq: Init policy->rwsem before it may be possibly used
    494c213792f3 cpufreq: Initialize cpufreq-based frequency-invariance later
    667eb5aeecd2 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
    7db3a7b2e413 PM / devfreq: Fix a index typo in trans_stat
    d5632359dbc4 PM / devfreq: Check governor before using governor->name
    a7d23e71a66e arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
    6e6c9e2d29b5 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
    6d5a85e3bb67 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
    11be9a6e3483 selftests: breakpoints: use suspend_stats to reliably check suspend success
    bed9fa51068f arm64: dts: st: fix timer used for ticks
    e2a57054e999 soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
    bf8d808f77b9 arm: dts: ti: omap: Fixup pinheader typo
    cd865df971c6 usb: early: xhci-dbc: Fix early_ioremap leak
    8374ac7d69a5 powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
    3e3ebf358cda Revert "vmci: Prevent the dispatching of uninitialized payloads"
    576fc220fb6c selftests: vDSO: chacha: Correctly skip test if necessary
    6ee761012d1a pps: fix poll support
    87f8f8654e55 vmci: Prevent the dispatching of uninitialized payloads
    a3177955f8da staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
    a7645815edf4 spi: stm32: Check for cfg availability in stm32_spi_probe
    5786ccbd317c mei: vsc: Unset the event callback on remove and probe errors
    173a7f17103c mei: vsc: Event notifier fixes
    4a958702b7cc mei: vsc: Destroy mutex after freeing the IRQ
    ae77ebdc4822 usb: typec: ucsi: yoga-c630: fix error and remove paths
    7101b26f7e96 firmware: arm_scmi: Fix up turbo frequencies selection
    e579ab62fefd cpufreq: armada-8k: make both cpu masks static
    1de0e54aaf49 arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size
    ac0f8fca09f2 arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports
    8209fc45b04e usb: misc: apple-mfi-fastcharge: Make power supply names unique
    1d88e8e66b68 usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe()
    d9632823a400 ARM: dts: vfxxx: Correctly use two tuples for timer address
    e7e370264098 arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
    cac895bcbcf2 arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc
    0f35f4df0590 arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes
    72ee9c7b7c61 arm64: dts: qcom: sc7180: Expand IMEM region
    db9d963622d9 arm64: dts: qcom: sdm845: Expand IMEM region
    04e7717dddc0 soc: qcom: QMI encoding/decoding for big endian
    90040a48030e selftests: Fix errno checking in syscall_user_dispatch test
    c814023c82ae arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV
    3b13b5a4f29e ASoC: mediatek: use reserved memory or enable buffer pre-allocation
    a9d00b7f374b ASoC: ops: dynamically allocate struct snd_ctl_elem_value
    2d9ee65b6d84 ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
    cd89d86dd1d5 io_uring: fix breakage in EXPERT menu
    f5426ffbec97 gfs2: No more self recovery
    b356ee013a79 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
    5055b7db9411 hfsplus: remove mutex_lock check in hfsplus_free_extents
    b53a10073f28 hfs: make splice write available again
    248d605319fe hfsplus: make splice write available again
    0e5c17c2376b ublk: use vmalloc for ublk_device's __queues
    3ed2cc6a6e93 fs/ntfs3: cancle set bad inode after removing name fails
    47706f9acfee fs_context: fix parameter name in infofc() macro
    bb80f7618832 parse_longname(): strrchr() expects NUL-terminated string
    2f6c33b9fab0 audit,module: restore audit logging in load failure case
    6b4b30b863ee ASoC: amd: yc: add DMI quirk for ASUS M6501RM
    362ea99022c9 ASoC: Intel: fix SND_SOC_SOF dependencies
    9b25e1643cc7 ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX
    bf0d05941955 ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
    f13486ac6b5b ethernet: intel: fix building with large NR_CPUS
    60291de0c56c ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agorust: Upgrade 1.88.0 -> 1.89.0
Jayasurya Maganuru [Mon, 25 Aug 2025 12:33:31 +0000 (05:33 -0700)] 
rust: Upgrade 1.88.0 -> 1.89.0

Rust stable version upgraded to 1.89.0
https://blog.rust-lang.org/2025/08/07/Rust-1.89.0/

* Drop merged patches with rust v1.89.0.
  - 0001-Disable-libunwind-cross-architecture-unwinding.patch
  - triagebot.patch

* Update and rebase existing patches with rust v1.89.0.
  - revert-link-std-statically-in-rustc_driver-feature.patch
  - rust-oe-selftest.patch
  - 0001-src-core-build_steps-tool.rs-switch-off-lto-for-rust.patch
  - 0001-riscv32-Define-plain-syscalls-as-their-time64-varian.patch
    (To fix build failures for riscv with musl, this patch adds
     aliases for plain syscalls to their time64 variants in libc-0.2.174,
     These changes are in addition to similar fixes already applied
     to libc-0.2.172)
  - 0001-Define-more-ioctl-codes-on-riscv32gc-unknown-linux-g.patch
    (Changes for libc-0.2.170 are no longer needed, as that version
     is not present in rust v1.89.0 vendor sources)

* OE-selftests:
  - Doc-tests fail in 55 crates,test-float-parse tests also fail.
    These tests are excluded to ensure the overall test suite passes.

   Test Results Summary:
   +-----------+--------+---------+
   | Machine   | Passed | Ignored |
   +-----------+--------+---------+
   | arm-32    | 29,239 | 1,468   |
   | arm-64    | 29,329 | 1,412   |
   | x86-32    | 29,231 | 1,449   |
   | x86-64    | 29,484 | 1,225   |
   | riscv-64  | 29,304 | 1,436   |
   +-----------+--------+---------+

Signed-off-by: Jayasurya Maganuru <Maganuru.Jayasurya@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agospirv-tools: Add SPV_INTEL_function_variants
Khem Raj [Tue, 19 Aug 2025 01:01:27 +0000 (18:01 -0700)] 
spirv-tools: Add SPV_INTEL_function_variants

Needed for compiling clang-21

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agospirv-headers: Add SPV_INTEL_function_variants
Khem Raj [Tue, 19 Aug 2025 01:01:26 +0000 (18:01 -0700)] 
spirv-headers: Add SPV_INTEL_function_variants

Needed for the clang 21 upgrade

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agoopenmp: add openmp to CVE_PRODUCT
Peter Marko [Sun, 24 Aug 2025 16:55:23 +0000 (18:55 +0200)] 
openmp: add openmp to CVE_PRODUCT

Currently CVE_PRODUCT is set to llvm:llvm from common.inc.
There is historical entry for openmp in the DB.
This entry is ignored, but it shows that there can also be future ones.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agorecipes: cleanup CVE_STATUS which are resolved now
Peter Marko [Sun, 24 Aug 2025 16:55:22 +0000 (18:55 +0200)] 
recipes: cleanup CVE_STATUS which are resolved now

The don't show up in CVE metrics anymore since they were either fixed
upstream or recipe version was upgraded meanwhile.

* bind CVE-2019-6470: cpe got corrected in nvd db
* libxml2 CVE-2023-45322: version is now higher than NVD cpe
* zlib CVE-2023-45853: version is now higher than NVD cpe
* gcc CVE-2021-37322: version is now higher than NVD cpe
* python3
  * CVE-2007-4559: version is now higher than NVD cpe
  * CVE-2019-18348: version is now higher than NVD cpe
  * CVE-2020-15523: version is now higher than NVD cpe
  * CVE-2022-26488: version is now higher than NVD cpe
  * CVE-2015-20107: version is now higher than NVD cpe
  * CVE-2023-36632: version is now higher than NVD cpe
* rust
  * CVE-2024-24576: NVD has no cpe, but we have newer version as fix
  * CVE-2024-43402: version is now higher than NVD cpe
* cups CVE-2021-25317: version is now higher than NVD cpe
* ghostscript CVE-2023-38559: version is now higher than NVD cpe
* libtirpc CVE-2021-46828: version is now higher than NVD cpe
* unzip CVE-2008-0888: version is now higher than NVD cpe
* ffmpeg CVE-2023-39018: cpe got corrected in nvd db
* libxslt CVE-2022-29824: version is now higher than NVD cpe
* libyaml
  * CVE-2024-35325: CVE is now rejected in NVD DB
  * CVE-2024-35326: CVE is now rejected in NVD DB
  * CVE-2024-35328: CVE is now rejected in NVD DB

Also add comment for iputils regarding reports for FKIE/NVD2.

Also remove some trailing spaces in python recipe.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agopython3-jsonschema: upgrade 4.24.0 -> 4.25.0
Liu Yiding [Mon, 25 Aug 2025 03:51:09 +0000 (11:51 +0800)] 
python3-jsonschema: upgrade 4.24.0 -> 4.25.0

Changelog:
=========
- Add support for the iri and iri-reference formats to the format-nongpl

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agopython3-hatch-vcs: upgrade 0.4.0 -> 0.5.0
Liu Yiding [Mon, 25 Aug 2025 03:51:08 +0000 (11:51 +0800)] 
python3-hatch-vcs: upgrade 0.4.0 -> 0.5.0

Changelog:
==========
- Drop support for Python 3.8
- Officially support Python 3.13
- Avoid a deprecation warning emitted by a dependency when using the tag-pattern option

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agopython3-dtschema: upgrade 2025.6.1 -> 2025.8
Liu Yiding [Mon, 25 Aug 2025 03:51:07 +0000 (11:51 +0800)] 
python3-dtschema: upgrade 2025.6.1 -> 2025.8

Changelog:
==========
- Add /chosen bootsource property
- Add /chosen KHO (for Linux kernel kexec) properties
- Extend wakeup-source property to define modes
- Add system level idle states
- Add '-db' property unit suffix

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agopython3-cython: upgrade 3.1.2 -> 3.1.3
Liu Yiding [Mon, 25 Aug 2025 03:51:06 +0000 (11:51 +0800)] 
python3-cython: upgrade 3.1.2 -> 3.1.3

Changelog:
==========
- Some method calls with 0 or 1 argument failed to use ``PyObject_VectorCallMethod()``.
- Walrus assignments of literal Python integers could generate invalid C code.
  (Github issue :issue:`6989`)
- ``cython.pythread_type_lock`` (also used as fallback for ``cython.pymutex``)
  could stall on heavily contended locks.
  (Github issue :issue:`6999`)
- C string arrays (not pointers) always coerced to the Python default string type,
  even on explicit casts to other string types.
  (Github issue :issue:`7020`)
- Unterminated ``\N{}`` character escapes in strings could unrail the parser.
  (Github issue :issue:`7056`)
- An internal C function was not marked as ``static`` and leaked a linker symbol.
  (Github issue :issue:`6957`)
- Some Unicode letters were not recognised as lexically valid name parts.
  (Github issue :issue:`7059`)
- Compatibility with PyPy3.8 was lost by accident.
- The Linux binary wheels of 3.1.2 used SSSE3 CPU instructions which are not available on some CPUs.
  (Github issue :issue:`7038`)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agopython3-click: upgrade 8.2.1 -> 8.2.2
Liu Yiding [Mon, 25 Aug 2025 03:51:05 +0000 (11:51 +0800)] 
python3-click: upgrade 8.2.1 -> 8.2.2

Changelog:
==========
- Fix reconciliation of default, flag_value and type parameters for
  flag options, as well as parsing and normalization of environment variables.
- Fix typing issue in BadParameter and MissingParameter exceptions for the
  parameter param_hint that did not allow for a sequence of string where the
  underlying functino _join_param_hints allows for it.
- Use the value of Enum choices to render their default value in help
  screen.
- Fix completion for the Z shell (zsh) for completion items containing
  colons.
- Don't include envvar in error hint when not configured.
- Fix a rare race in click.testing.StreamMixer's finalization that manifested
  as a ValueError on close in a multi-threaded test session.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolibxmlb: upgrade 0.3.22 -> 0.3.23
Liu Yiding [Mon, 25 Aug 2025 03:51:04 +0000 (11:51 +0800)] 
libxmlb: upgrade 0.3.22 -> 0.3.23

Changelog:
- Do not reallocate the final silo blob when compiling to reduce peak RSS by about ~6%

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolibxkbcommon: upgrade 1.10.0 -> 1.11.0
Liu Yiding [Mon, 25 Aug 2025 03:51:03 +0000 (11:51 +0800)] 
libxkbcommon: upgrade 1.10.0 -> 1.11.0

Release notes:
https://github.com/xkbcommon/libxkbcommon/blob/master/NEWS.md#libxkbcommon-1110--2025-08-08

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolibrsvg: upgrade 2.60.0 -> 2.61.0
Liu Yiding [Mon, 25 Aug 2025 03:51:02 +0000 (11:51 +0800)] 
librsvg: upgrade 2.60.0 -> 2.61.0

Changelog:
============
- The minimum supported Rust version (MSRV) is 1.85.1.
- #1178: Improved performance when using an application-supplied
  stylesheet for an SVG handle - do cascading only once in that case
  instead of twice.
- #1164: Don't panic if there are no fonts installed - this happens
  easily in Alpine containers (Lovell Fuller).
- Update to gtk-rs-core 0.21 (Maximiliano Sandoval).
- Vastly improved infrastructure to generate the development guide and
  the rsvg-convert manual page (Toluwaleke Ogundipe).
- Start implementing the SVG2 text stack (Adetoye Anointing, from his
  Outreachy internship).
- Fixed the Windows CI (Chun-wei Fan).
- Lots of internal cleanups to make it easier to remove Cairo in the future.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agolibinput: upgrade 1.28.1 -> 1.29.0
Liu Yiding [Mon, 25 Aug 2025 03:51:01 +0000 (11:51 +0800)] 
libinput: upgrade 1.28.1 -> 1.29.0

Changelog:
===========
- High-resolution scroll wheels have better heuristics to avoid inadvertent
  scrolls. This should also help with not-so-high-resolution scroll wheels which
  can skip those heuristics now, resulting in better responsiveness.
- Virtual devices (e.g. uinput) are now detected in libinput and some internal
  heuristics are disabled for those (e.g. tablet smoothing)
- Tablet tools with an fixed eraser button (almost all these days) can now
  configure that eraser button to be a regular button instead.
- Jumping cursors on Asus "ASUE..." touchpads have lost their excitement and
  are no longer jumping.
- libinput now uses a plugin pipeline internally. This prepares the way for
  public plugins, planned for libinput 1.30.
- mtdev is now an optional dependency
- libinput debug-tablet-pad is a new tool for interactive tablet pad debugging
- a lot of internal code modernization, making the code nicer to work on and
  test cases easier to write

Release notes:
https://gitlab.freedesktop.org/libinput/libinput/-/releases/1.29.0

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agoharfbuzz: upgrade 11.2.1 -> 11.4.1
Liu Yiding [Mon, 25 Aug 2025 03:51:00 +0000 (11:51 +0800)] 
harfbuzz: upgrade 11.2.1 -> 11.4.1

Changelog:
=============
- Speed up handling fonts with very large number of variations:
  - Drawing by up to 40%.
  - Calculating glyph extents by up to 15%.
  - Getting horizontal glyph advances by up to 45%.
  - Speed up getting horizontal and vertical glyph advances by up to 24%.
- Significantly speed up vertical text shaping.
- Various documentation improvements.
- Various build improvements.
- Various subsetting improvements.
- Various improvements to Rust font functions (fontations integration) and shaper (HarfRust integration).
- Rename harfruzz option and shaper to harfrust following upstream rename.
- Implement hb_face_reference_blob() for DirectWrite font functions.
- New API:
  +hb_font_get_glyph_origins_func_t
  +hb_font_get_glyph_h_origins_func_t
  +hb_font_get_glyph_v_origins_func_t
  +hb_font_funcs_set_glyph_h_origins_func()
  +hb_font_funcs_set_glyph_v_origins_func()
  +hb_font_get_glyph_h_origins()
  +hb_font_get_glyph_v_origins()
- Fix crasher in the glyph_v_origin function introduced in 11.3.0
- Fix build with non-compliant C++11 compilers that don't recognize the "and" keyword
- Fix bug in vertical shaping of fonts without the vmtx table
- General shaping and subsetting speedups.
- Fix in Graphite shaping backend when glyph advances became negative.
- Subsetting improvements, pruning empty mark-attachment lookups.
- Don't use the macro name _S, which is reserved by system liberaries.
- Build fixes and speedup.
- Add a kbts shaping backend that calls into the kb_text_shape
  single-header shaping library.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agocve-update: log timestamps and add force update for future time
Peter Marko [Tue, 26 Aug 2025 18:59:22 +0000 (20:59 +0200)] 
cve-update: log timestamps and add force update for future time

CVE update is currently not working properly on autobuilder.
This improves logging for problem analysis.

Future time is something which could be reason for current autobuilder
problems since the DB was not updated for more than 3 months by now.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agocve-update-db-native: FKIE CVE parsing: Use Secondary metric
Jonathan Schnitzler [Sun, 24 Aug 2025 14:57:45 +0000 (16:57 +0200)] 
cve-update-db-native: FKIE CVE parsing: Use Secondary metric

If there is no primary metric use the Secondary one.

Signed-off-by: Jonathan Schnitzler <jonathan.schnitzler@faro.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agocve-update-db-native: Fix FKIE CVE accessVector parsing
Jonathan Schnitzler [Sun, 24 Aug 2025 14:57:44 +0000 (16:57 +0200)] 
cve-update-db-native: Fix FKIE CVE accessVector parsing

Use "attackVector" for CVSS >= 3 as it only CVSS v2 uses "accessVector".

Signed-off-by: Jonathan Schnitzler <jonathan.schnitzler@faro.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agocve-update: remove cleanup of db_file in downloads
Peter Marko [Sun, 24 Aug 2025 14:57:43 +0000 (16:57 +0200)] 
cve-update: remove cleanup of db_file in downloads

Since the code was changed to update the DB in temporary file, code
cleaning the final file in downloads is never executed.
Remove it.

Since the code always removes both files in temporary directory, remove
also comment which is trying to differentiate this code from code just
removed.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agocve-update: decrease update interval to 23 hours
Peter Marko [Sun, 24 Aug 2025 14:57:42 +0000 (16:57 +0200)] 
cve-update: decrease update interval to 23 hours

If the job runs every day at the same time, it usually updates only
every second day, because it takes non-0 time for DB update and set the
timestamp. So it does not take full 24-hours from time when the DB was
updated until the next job starts.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agocve-update-db-native: log a little more
Peter Marko [Sun, 24 Aug 2025 14:57:41 +0000 (16:57 +0200)] 
cve-update-db-native: log a little more

OE-Core rev: b64a869b9c5e1d504f1011da16b5c5ff721afbf0

This commit was not applied on nvd1/fkie fetcher.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agocve-update-db-native: Handle BB_NO_NETWORK and missing db
Peter Marko [Sun, 24 Aug 2025 14:57:40 +0000 (16:57 +0200)] 
cve-update-db-native: Handle BB_NO_NETWORK and missing db

OE-Core rev: 337c0806d2784d74bee8d6420fb8b4d48795d5fa

This commit was not applied on nvd1/fkie fetcher.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agocve-update-db-native: Use a local copy of the database during builds
Peter Marko [Sun, 24 Aug 2025 14:57:39 +0000 (16:57 +0200)] 
cve-update-db-native: Use a local copy of the database during builds

OE-Core rev: 03596904392d257572a905a182b92c780d636744

This seems to be misimplemented when re-adding update from nvd1 feed.
Use file in temporary directory instead of downloads directory for
update process.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 weeks agobinutils: set status for CVE-2025-7545 and CVE-2025-7546
Peter Marko [Sun, 24 Aug 2025 11:51:26 +0000 (13:51 +0200)] 
binutils: set status for CVE-2025-7545 and CVE-2025-7546

The patches linked in NVD reports are present in binutils-2_45-branch.
Technically the NVD is wrong (=2.45 should be <2.45), but fixing it in
the recipe is not problematic as all cpe-stable-backport will be
automatically removed in next upgrade so will not be "kept forever".

CVE-2025-7545
* https://nvd.nist.gov/vuln/detail/CVE-2025-7545
* https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944

CVE-2025-7546
* https://nvd.nist.gov/vuln/detail/CVE-2025-7546
* https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agowic: Fix --overhead-factor and --extra-space checks
Diego Sueiro [Wed, 20 Aug 2025 11:24:55 +0000 (12:24 +0100)] 
wic: Fix --overhead-factor and --extra-space checks

If --overhead-factor and --extra-space are passed with =FOO the
check fails. Fix this by checking parsed.overhead_factor and
parsed.extra_space instead.

Signed-off-by: Diego Sueiro <diego.sueiro@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agolibxml2: mark CVE-2025-6170 as fixed
Peter Marko [Sat, 23 Aug 2025 20:47:07 +0000 (22:47 +0200)] 
libxml2: mark CVE-2025-6170 as fixed

As shown in [1] when expanding tags including it.

NVD tracks this CVE as version-less.

[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/c340e419505cf4bf1d9ed7019a87cc00ec200434

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agoicu: mark CVE-2025-5222 as fixed
Peter Marko [Sat, 23 Aug 2025 20:47:06 +0000 (22:47 +0200)] 
icu: mark CVE-2025-5222 as fixed

Commit mentioned in [1] is included in 77-1.
This comit was also backported to Yocto all stable/LTS releases.

[1] https://security-tracker.debian.org/tracker/CVE-2025-5222

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agognutls: mark CVE-2025-32989 and CVE-2025-32990 as fixed
Peter Marko [Sat, 23 Aug 2025 20:47:05 +0000 (22:47 +0200)] 
gnutls: mark CVE-2025-32989 and CVE-2025-32990 as fixed

This is mentioned in [1].
NVD tracks this as version-less CVE.

[1] https://gitlab.com/gnutls/gnutls/-/blob/3.8.10/NEWS?ref_type=tags#L8

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agocve-update-db-native: fix fetcher for CVEs missing nodes
Peter Marko [Sat, 23 Aug 2025 20:15:12 +0000 (22:15 +0200)] 
cve-update-db-native: fix fetcher for CVEs missing nodes

As of now, update of CVE DB from FKIE source (which is the defailt)
fails with following error:

File: '<build>/poky/meta/recipes-core/meta/cve-update-db-native.bb', lineno: 393, function: update_db_fkie
     0389:                [cveId, cveDesc, cvssv2, cvssv3, cvssv4, date, accessVector, vectorString]).close()
     0390:
     0391:        for config in elt['configurations']:
     0392:            # This is suboptimal as it doesn't handle AND/OR and negate, but is better than nothing
 *** 0393:            for node in config["nodes"]:
     0394:                parse_node_and_insert(conn, node, cveId, False)
     0395:
     0396:def update_db(d, conn, jsondata):
     0397:    if (d.getVar("NVD_DB_VERSION") == "FKIE"):
Exception: KeyError: 'nodes'

Entry for new CVE-2025-32915 is broken.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agolibseccomp: fix seccomp_export_bpf_mem out-of-bounds read
Khem Raj [Sat, 23 Aug 2025 20:04:04 +0000 (13:04 -0700)] 
libseccomp: fix seccomp_export_bpf_mem out-of-bounds read

Fixes segfaults in ptests on musl
Failed ptests:
{'libseccomp': ['11-basic-basic_errors%%001-00001_11-basic-basic_errors_rc=139']}

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agopython3: Address failing ptests on musl
Khem Raj [Fri, 22 Aug 2025 18:33:52 +0000 (11:33 -0700)] 
python3: Address failing ptests on musl

Take a partial patch to disable portion of test_makedev, its also applied
in alpine. NODEV does not exist on musl

Add test_null_dlsym to ignore list on musl, it needs GNU ifunc support
and musl does not implement GNU ifuncs

fixes
Failed ptests:
{'python3': ['test_null_dlsym', 'test_makedev', 'python3']}

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agotiff: Security fix for CVE-2024-13978, CVE-2025-8176, CVE-2025-8177
Siddharth Doshi [Fri, 22 Aug 2025 15:14:50 +0000 (20:44 +0530)] 
tiff: Security fix for CVE-2024-13978, CVE-2025-8176, CVE-2025-8177

Upstream-Status: Backport from [https://gitlab.com/libtiff/libtiff/-/commit/7be20ccaab97455f192de0ac561ceda7cd9e12d1, https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4, https://gitlab.com/libtiff/libtiff/-/commit/3994cf3b3bc6b54c32f240ca5a412cffa11633fa, https://gitlab.com/libtiff/libtiff/-/commit/ce46f002eca4148497363f80fab33f9396bcbeda, https://gitlab.com/libtiff/libtiff/-/commit/ecc4ddbf1f0fed7957d1e20361e37f01907898e0, https://gitlab.com/libtiff/libtiff/-/commit/75d8eca6f106c01aadf76b8500a7d062b12f2d82, https://gitlab.com/libtiff/libtiff/-/commit/e8c9d6c616b19438695fd829e58ae4fde5bfbc22]

CVE's Fixed:
CVE-2024-13978 libtiff: LibTIFF Null Pointer Dereference
CVE-2025-8176 libtiff: LibTIFF Use-After-Free Vulnerability
CVE-2025-8177 libtiff: LibTIFF Buffer Overflow

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agoat-spi2-core: upgrade 2.56.3 -> 2.56.4
Tim Orling [Fri, 22 Aug 2025 14:37:09 +0000 (07:37 -0700)] 
at-spi2-core: upgrade 2.56.3 -> 2.56.4

What's new in at-spi2-core 2.56.4:

* Fix key grabs when num lock or caps lock are on under Wayland.

    atk-bridge: Don't crash when requesting a plug if not activated

* Add sanity checks for child indices received via DBus.

https://gitlab.gnome.org/GNOME/at-spi2-core/-/blob/2.56.4/NEWS?ref_type=tags

Comparing changes:
https://github.com/GNOME/at-spi2-core/compare/2.56.3...2.56.4

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agolighttpd: upgrade 1.4.79 -> 1.4.81
Michael Opdenacker [Fri, 22 Aug 2025 14:25:40 +0000 (14:25 +0000)] 
lighttpd: upgrade 1.4.79 -> 1.4.81

Remove "libev" configuration option, no longer in use since 1.4.80

Upstream changes

1.4.81:
- security: fix to reject disallowed trailers

1.4.80:
- detect and issue error trace for HTTP/2 MadeYouReset VU#767506 CVE-2025-8671
- stricter HTTP request/response header, trailer, and chunked validation/parsing
- support HTTP response trailers
- support HTTP request trailers merge to headers (if not streaming request body)
- bug fixes

Signed-off-by: Michael Opdenacker <michael.opdenacker@rootcommit.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agorust-target-config: Add has-thread-local option
Per x Johansson [Fri, 22 Aug 2025 11:58:05 +0000 (13:58 +0200)] 
rust-target-config: Add has-thread-local option

The "has-elf-tls" option was removed by the commit
8e1614a906086fb46c5dd7b7f2dffab91194165c. However is should have been
renamed to "has-thread-local", since it was renamed and not removed in
rust by this commit.
https://github.com/rust-lang/rust/commit/391332c5d9d5a5e97a0d36e011a87ad43045cfd3

Change-Id: Ia1fdf7698ebeef62a88052713645d5b499164353
Signed-off-by: Per x Johansson <perxjoh@axis.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agogcc-testsuite: Fix test failures with output pattern due to ssh warning.
Harish Sadineni [Fri, 22 Aug 2025 07:12:27 +0000 (00:12 -0700)] 
gcc-testsuite: Fix test failures with output pattern due to ssh warning.

when running oe-selftest for gcc some of the output pattern matchng test cases
were getting failed due to below issue.

Output line 1 was:
Warning: Permanently added '192.168.7
Should match (from /poky/poky/build-st/tmp/work-shared/gcc-15.1.0-r0/sources/
gcc-15.1.0/gcc/testsuite/gcc.dg/dg-output-file-1-lp64.txt):
This is a test output for lp64 target
Failed test for output line 1 This is a test output for lp64 target

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agooeqa/selftest/cases/gcc.py: Increase QEMU RAM to 4GB
Harish Sadineni [Fri, 22 Aug 2025 07:12:26 +0000 (00:12 -0700)] 
oeqa/selftest/cases/gcc.py: Increase QEMU RAM to 4GB

The test pr61599-1.c fails because it requires more than 3GB of RAM.
This change increases the allocated RAM to 4GB to prevent test failures.

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agogcc: Oe-selftest failure analysis - fix for pr90579.c test failures
Harish Sadineni [Fri, 22 Aug 2025 07:12:25 +0000 (00:12 -0700)] 
gcc: Oe-selftest failure analysis - fix for pr90579.c test failures

When gcc build with PIE enabled the following tests
were getting failed:
 FAIL: gcc.target/i386/pr90579.c scan-assembler vaddsd\tr\\+40
 FAIL: gcc.target/i386/pr90579.c scan-assembler vaddsd\tr\\+32
 FAIL: gcc.target/i386/pr90579.c scan-assembler vaddsd\tr\\+24
 FAIL: gcc.target/i386/pr90579.c scan-assembler vaddsd\tr\\+16

Detailed bug info & upstream fix is here:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=118885

Upstream Status: Backport [https://gcc.gnu.org/cgit/gcc/commit/?id=679e24f5a751663998ff7202149a749e0f7251f9]

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agogettext: Force UTF-8 runtime and skip requiring ISO-8859-1
Khem Raj [Fri, 22 Aug 2025 05:17:25 +0000 (22:17 -0700)] 
gettext: Force UTF-8 runtime and skip requiring ISO-8859-1

On musl, there is no real legacy (non-UTF-8) fr_FR locale.
These tests are designed for libcs that ship both fr_FR (ISO-8859-1)
and fr_FR.UTF-8. So the right thing will be to SKIP these tests

Unsetting LOCALE_FR will ensure that it does not enable ISO-8859-1
path, so reset it in run-ptest but thats not enough because it is
being set in the test's own init-env file as well so clear it in that
file as well.

Fixes
Failed ptests:
{'gettext': ['intl-2', 'intl-4', 'intl-thread-3', 'lang-sh', 'lang-bash']}

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>