]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
3 months agolibxml2: patch CVE-2026-0989
Peter Marko [Sun, 25 Jan 2026 18:34:20 +0000 (19:34 +0100)] 
libxml2: patch CVE-2026-0989

Pick patch from [1] linked from [2].

[1] https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374
[2] https://gitlab.gnome.org/GNOME/libxml2/-/issues/998

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
3 months agoopenssh: add variable for key path
Patrick Vogelaar [Sun, 25 Jan 2026 09:15:40 +0000 (10:15 +0100)] 
openssh: add variable for key path

This patch adds a variable for the key directory path. This is especially
useful when working with a read-only file system where you want to
specify the location e.g. on a r/w partition. To be consistent, the
change was also done for the read write path.

For changing the path simply create a bbappend and override the
variable.

Signed-off-by: Patrick Vogelaar <patrick.vogelaar.dev@mailbox.org>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
3 months agoglib-2.0: patch CVE-2026-0988
Peter Marko [Sat, 24 Jan 2026 20:53:23 +0000 (21:53 +0100)] 
glib-2.0: patch CVE-2026-0988

Pick relevant commit from [2] linked from [1].

[1] https://gitlab.gnome.org/GNOME/glib/-/issues/3851
[2] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4944

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
3 months agolinux-firmware: correct wil6210 dependency
Dmitry Baryshkov [Fri, 23 Jan 2026 16:33:05 +0000 (18:33 +0200)] 
linux-firmware: correct wil6210 dependency

The LICENSE.QualcommAtheros_ath10k is already packages as
linux-firmware-ath10k-license package, making OE skip
linux-firmware-qualcommatheros-ath10k-license (because it's now empty)
and thus making linux-firmware-wil6210 uninstallable.

Drop the duplicate licence package and use linux-firmware-ath10k-license
instead.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
3 months agoqemurunner.py: replace 'codecs.open()' with 'open()'
Trevor Gamblin [Fri, 23 Jan 2026 16:28:58 +0000 (11:28 -0500)] 
qemurunner.py: replace 'codecs.open()' with 'open()'

With newer Python versions, codecs.open() is deprecated, leading to the
following warning:

|Stderr:
|/srv/pokybuild/tgamblin-qemux86/openembedded-core/meta/lib/oeqa/utils/qemurunner.py:133: DeprecationWarning: codecs.open() is deprecated. Use open() instead.
|  with codecs.open(self.logfile + extension, "ab") as f:

Note that if we try to be explicit and make the 'errors' keyword
'strict' (as the codecs.open() call defaulted to), we see other
warnings:

|ValueError: binary mode doesn't take an errors argument

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
3 months agopython3-pygobject: fix compile error with old GCC
Ross Burton [Fri, 23 Jan 2026 14:02:28 +0000 (14:02 +0000)] 
python3-pygobject: fix compile error with old GCC

If the build is done with GCC 10 (eg a native build on Debian 11) then
the build fails:

  gi/pygi-resulttuple.c:337:1: error: label at end of compound statement

Backport a patch from upstream to add a missing semicolon.

[ YOCTO #16147 ]

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
3 months agopython3-pyelftools: add python3-logging to RDEPENDS
Theo GAIGE [Fri, 23 Jan 2026 10:46:49 +0000 (11:46 +0100)] 
python3-pyelftools: add python3-logging to RDEPENDS

python3-logging is needed as a runtime dependency of python3-pyelftools
else the readelf.py script run into the following error :

```
Traceback (most recent call last):
  File "/usr/bin/readelf.py", line 31, in <module>
    from elftools.elf.elffile import ELFFile
  File "/usr/lib/python3.12/site-packages/elftools/elf/elffile.py", line 29, in <module>
    from ..dwarf.dwarfinfo import DWARFInfo, DebugSectionDescriptor, DwarfConfig
  File "/usr/lib/python3.12/site-packages/elftools/dwarf/dwarfinfo.py", line 17, in <module>
    from .structs import DWARFStructs
  File "/usr/lib/python3.12/site-packages/elftools/dwarf/structs.py", line 10, in <module>
    from logging.config import valid_ident
ModuleNotFoundError: No module named 'logging'
```

Signed-off-by: Theo GAIGE <tgaige.opensource@witekio.com>
Reviewed-by: Louis Rannou <louis.rannou@non.se.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
3 months agolibmd: add ptest for 'libmd'
Naman Jain [Fri, 23 Jan 2026 05:44:25 +0000 (11:14 +0530)] 
libmd: add ptest for 'libmd'

Adapt the compile 'test' phony target from Makefile and deploy as
ptest for libmd.
It takes less than 30seconds for ptest completion

Signed-off-by: Naman Jain <namanj1@kpit.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
3 months agobitbake.conf: remove DEBUG_PREFIX_MAP from TARGET_LDFLAGS
Randolph Sapp [Thu, 22 Jan 2026 19:50:00 +0000 (13:50 -0600)] 
bitbake.conf: remove DEBUG_PREFIX_MAP from TARGET_LDFLAGS

Now that the previous bug affecting binary reproducibility has been
addressed [1], we can revert this patch. This will resolve issues with
cgo applications becoming unreprodcible.

Currently go considers link arguments to be sacred, meaning any change
should produce a different binary output. They ensure this by baking
link arguments into the intermediary output, changing the content ID of
that step. As such, the marco prefixes inadvertently end up adding build
paths to the output binary instead of removing them if they are passed
as link arguments to cgo applications.

These paths are later stripped out again, but at this point the content
ID of the dependency has changed and thus the build ID of the end
application will be affected by the cascade of hash changes. See the
upstream bug for more information [2].

This reverts commit fddaecc88979967d0e00e2fafdbaaabec030da9f.

[1] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=101473
[2] https://github.com/golang/go/issues/77218

Signed-off-by: Randolph Sapp <rs@ti.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
3 months agolinux-yocto-dev: update to 6.19
Bruce Ashfield [Mon, 26 Jan 2026 15:23:53 +0000 (10:23 -0500)] 
linux-yocto-dev: update to 6.19

Bumping the -dev kernel to 6.19. Boot and tests have been run
on all major architectures.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolinux-yocto/6.18: update CVE exclusions (6.18.6)
Bruce Ashfield [Mon, 26 Jan 2026 15:23:52 +0000 (10:23 -0500)] 
linux-yocto/6.18: update CVE exclusions (6.18.6)

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 14 changes (0 new | 14 updated): - 0 new CVEs: - 14 updated CVEs: CVE-2024-23147, CVE-2024-23148, CVE-2024-23156, CVE-2024-23157, CVE-2024-37000, CVE-2024-37006, CVE-2025-13335, CVE-2025-63896, CVE-2025-9452, CVE-2025-9456, CVE-2025-9457, CVE-2025-9458, CVE-2026-1225, CVE-2026-1332
        Date: Thu, 22 Jan 2026 14:20:53 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolinux-yocto/6.18: update to v6.18.6
Bruce Ashfield [Mon, 26 Jan 2026 15:23:51 +0000 (10:23 -0500)] 
linux-yocto/6.18: update to v6.18.6

Updating linux-yocto/6.18 to the latest korg -stable release that comprises
the following commits:

    b6fe42bc55af Linux 6.18.6
    69695f5331d4 spi: cadence-quadspi: Prevent lost complete() call during indirect read
    81531bdea972 scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
    90f5dd44d9bf ASoC: fsl_sai: Add missing registers to cache default
    b3f89f6582e0 ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL
    65f6ae1fdf22 ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
    003994f3b014 ALSA: usb-audio: Update for native DSD support quirks
    530ec35c211e block: validate pi_offset integrity limit
    79dd3f1d9dd3 can: j1939: make j1939_session_activate() fail if device is no longer registered
    9fd86747daa6 drm/amdkfd: Fix improper NULL termination of queue restore SMI event string
    6fcfcf792ce8 spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ
    6db8e186c977 drm/amd/display: Fix DP no audio issue
    6a2049b7391b accel/amdxdna: Block running under a hypervisor
    a70fd483c4b9 ata: libata-core: Disable LPM on ST2000DM008-2FR102
    09d6074995c1 netfilter: nf_tables: avoid chain re-validation if possible
    9e2fcfc32467 powercap: fix sscanf() error return value handling
    d33cc39e9f7e powercap: fix race condition in register_control_type()
    cbbf6c1fe62b net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant
    737be05a7657 bpf: Fix reference count leak in bpf_prog_test_run_xdp()
    31e37f44b606 bpf, test_run: Subtract size of xdp_frame from allowed metadata size
    7ea26e6dcabc gpio: mpsse: fix reference leak in gpio_mpsse_probe() error paths
    7882637ea5cc gpio: mpsse: add quirk support
    472d900c8bca gpio: mpsse: ensure worker is torn down
    4374a1cac13e btrfs: fix beyond-EOF write handling
    9cb1a586c78a btrfs: use variable for end offset in extent_writepage_io()
    3b7ca18f3509 btrfs: truncate ordered extent when skipping writeback past i_size
    ebdc99345399 erofs: fix file-backed mounts no longer working on EROFS partitions
    c65f0bafc98f erofs: don't bother with s_stack_depth increasing for now
    234409e0db77 irqchip/gic-v5: Fix gicv5_its_map_event() ITTE read endianness
    72e28774e964 ublk: fix use-after-free in ublk_partition_scan_work
    949647e7771a arp: do not assume dev_hard_header() does not change skb->head
    d93ba83fc3f5 net: enetc: fix build warning when PAGE_SIZE is greater than 128K
    ce6eef731aba net: usb: pegasus: fix memory leak in update_eth_regs_async()
    51ffd447bc37 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
    1251bbdb8f5b wifi: mac80211_hwsim: fix typo in frequency notification
    72f93dc6d1a6 net: airoha: Fix schedule while atomic in airoha_ppe_deinit()
    9e17d06663f3 HID: quirks: work around VID/PID conflict for appledisplay
    fb08fec72131 sparc/PCI: Correct 64-bit non-pref -> pref BAR resources
    397691633112 trace: ftrace_dump_on_oops[] is not exported, make it static
    6c0d642e8c58 block: don't merge bios with different app_tags
    086e2928c1da net: netdevsim: fix inconsistent carrier state after link/unlink
    334bbbbf4c80 selftests: drv-net: Bring back tool() to driver __init__s
    67550a1130b6 net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy
    06dc322dcb20 net: sfp: return the number of written bytes for smbus single byte access
    0c63d5683eae udp: call skb_orphan() before skb_attempt_defer_free()
    2d6cde9953f9 Revert "dsa: mv88e6xxx: make serdes SGMII/Fiber tx amplitude configurable"
    0ad6d6e50e9d idpf: fix aux device unplugging when rdma is not supported by vport
    258e7c55f939 idpf: cap maximum Rx buffer size
    bfeb4dfc8050 idpf: Fix error handling in idpf_vport_open()
    ab92fa4dd81b idpf: Fix RSS LUT NULL ptr issue after soft reset
    9abe73eff87d idpf: Fix RSS LUT configuration on down interfaces
    b29a5a7dd1f4 idpf: Fix RSS LUT NULL pointer crash on early ethtool operations
    fe33b4252e4b idpf: fix issue with ethtool -n command display
    1aedff70a5e9 idpf: fix memory leak of flow steer list on rmmod
    a514c374edcd idpf: fix error handling in the init_task on load
    23391db8a00c idpf: fix memory leak in idpf_vc_core_deinit()
    ec602a2a4071 idpf: fix memory leak in idpf_vport_rel()
    ac122f5fb050 idpf: detach and close netdevs while handling a reset
    a9f5b61591d3 idpf: convert vport state to bitmap
    14c4fea11536 idpf: keep the netdev when a reset fails
    309a4c2fa676 PCI/VGA: Don't assume the only VGA device on a system is `boot_vga`
    c114a32a2e70 net: fix memory leak in skb_segment_list for GRO packets
    177c71d2709f riscv: pgtable: Cleanup useless VA_USER_XXX definitions
    5bfaf4fa3dc2 riscv: cpufeature: Fix Zk bundled extension missing Zknh
    8a6b410e3d0f net: airoha: Fix npu rx DMA definitions
    6d1b61b8e1e4 btrfs: fix NULL pointer dereference in do_abort_log_replay()
    07effd536ddc btrfs: only enforce free space tree if v1 cache is required for bs < ps cases
    92a559085114 btrfs: release path before initializing extent tree in btrfs_read_locked_inode()
    0185dc4b5b0e vsock: Make accept()ed sockets use custom setsockopt()
    543f8537b470 drm/amd/pm: force send pcie parmater on navi1x
    a1c0a4ccbe6d drm/amd/pm: fix wrong pcie parameter on navi1x
    deee9dfb111a perf: Ensure swevent hrtimer is properly destroyed
    088ca99dbb03 inet: frags: drop fraglist conntrack references
    a5e2d902f64c virtio_net: fix device mismatch in devm_kzalloc/devm_kfree
    e3c738138975 bnxt_en: Fix potential data corruption with HW GRO/LRO
    8181c79757cc net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
    f2c4bcfa193e net/ena: fix missing lock when update devlink params
    b46675e1c593 net/mlx5e: Dealloc forgotten PSP RX modify header
    d35ab9fb5794 net/mlx5e: Don't print error message due to invalid module
    cba6cc0f4654 net/mlx5e: Don't gate FEC histograms on ppcnt_statistical_group
    658496325824 net/mlx5: Lag, multipath, give priority for routes with smaller network prefix
    8bdc624bf33d netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
    e00b169eaac5 net: sock: fix hardened usercopy panic in sock_recv_errqueue
    fe71b71f0fe0 net: phy: mxl-86110: Add power management and soft reset support
    1511ba2d6846 inet: ping: Fix icmp out counting
    f490af47bbee net: mscc: ocelot: Fix crash when adding interface under a lag
    b53fca69f455 bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
    326a4b7e61d0 net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
    8bdafdf49000 netfilter: nf_conncount: update last_gc only when GC has been performed
    7f066cba650c netfilter: nf_tables: fix memory leak in nf_tables_newrule()
    58dac9b28a57 gpio: pca953x: handle short interrupt pulses on PCAL devices
    fb674c8f1a5d gpiolib: fix race condition for gdev->srcu
    aaa24eeb63ad gpiolib: rename GPIO chip printk macros
    97531f8e50d9 gpiolib: remove unnecessary 'out of memory' messages
    75bfb05067d6 netfilter: nft_synproxy: avoid possible data-race on update operation
    704c0258f0d7 netfilter: nft_set_pipapo: fix range overlap detection
    499c0db5862f arm64: dts: mba8mx: Fix Ethernet PHY IRQ support
    646d415f9860 arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart
    4977cac699a4 arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
    5b5ef7049ebe arm64: dts: freescale: tx8p-ml81: fix eqos nvmem-cells
    f267ced2bcb0 arm64: dts: freescale: moduline-display: fix compatible
    2c3f04f1f70c ARM: dts: imx6q-ba16: fix RTC interrupt level
    88244021003b arm64: dts: add off-on-delay-us for usdhc2 regulator
    c200328fd57f arm64: dts: imx8qm-mek: correct the light sensor interrupt type to low level
    42b66f4557a2 crypto: qat - fix duplicate restarting msg during AER error
    7fd534abaa39 pinctrl: mediatek: mt8189: restore previous register base name array order
    5b5482c0e5ee netfs: Fix early read unlock of page with EOF in middle
    b95a6e3b0d5d HID: Intel-thc-hid: Intel-thc: Fix wrong register reading
    a5eeebb994bf HID: Intel-thc-hid: Intel-thc: fix dma_unmap_sg() nents value
    737f341080f4 gpio: it87: balance superio enter/exit calls in error path
    43c2e3670334 gpu: nova-core: select RUST_FW_LOADER_ABSTRACTIONS
    93900292af11 arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings
    c5ebc38066ce arm64: dts: ti: k3-am642-phyboard-electra-x27-gpio1-spi1-uart3: Fix schema warnings
    0d4087c74869 arm64: dts: ti: k3-am642-phyboard-electra-peb-c-010: Fix icssg-prueth schema warning
    f09b0f705bd7 of: unittest: Fix memory leak in unittest_data_add()
    c8385851a543 btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node()
    99e057f3d3ef btrfs: fix NULL dereference on root when tracing inode eviction
    1ee62906cbd9 btrfs: qgroup: update all parent qgroups when doing quick inherit
    7d59377ada9f btrfs: fix qgroup_snapshot_quick_inherit() squota bug
    5f0fd06d7571 scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
    f1e2d448ccc1 scsi: ufs: core: Fix EH failure after W-LUN resume error
    3a96f7f2677a scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
    382028023669 scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1
    aba03b371632 smb/client: fix NT_STATUS_NO_DATA_DETECTED value
    d4959a7900af smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
    e2c146263966 smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
    f1ae589310e1 drm/amd/display: shrink struct members
    93ee5471731b ALSA: hda/realtek: Add support for ASUS UM3406GA
    ab775cc784f6 NFS: Fix up the automount fs_context to use the correct cred
    8e73e0ee4530 ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again)
    d82f6d1d43b3 NFSv4: ensure the open stateid seqid doesn't go backwards
    6930c0229fb3 dm-snapshot: fix 'scheduling while atomic' on real-time kernels
    232948cf600f dm-verity: disable recursive forward error correction
    fea0f86e4613 alpha: don't reference obsolete termio struct for TC* constants
    9f53cfb9f4c2 ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
    8ad9e930fb91 csky: fix csky_cmpxchg_fixup not working
    c88717b10792 ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback
    a1d420370a24 ublk: reorder tag_set initialization before queue allocation
    5647d42c47b5 libceph: make calc_target() set t->paused, not just clear it
    10b7c7281036 libceph: reset sparse-read state in osd_fault()
    9e0101e57534 libceph: return the handler error from mon_handle_auth_done()
    f21c3fdb9683 libceph: make free_choose_arg_map() resilient to partial allocation
    6348d70af847 libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
    2d653bb63d59 libceph: prevent potential out-of-bounds reads in handle_auth_done()
    b97be67dc06e wifi: mac80211: restore non-chanctx injection behaviour
    e3c35177103e wifi: avoid kernel-infoleak from struct iw_point
    5c12a13522f4 Revert "drm/mediatek: dsi: Fix DSI host and panel bridge pre-enable order"
    b7a883b0135d PM: hibernate: Fix crash when freeing invalid crypto compressor
    ea7a54393d50 pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
    391adca8e213 PCI: meson: Report that link is up while in ASPM L0s and L1 states
    2b9c15286a17 io_uring/io-wq: fix incorrect io_wq_for_each_worker() termination logic
    3aa67687d558 gpio: rockchip: mark the GPIO controller as sleeping
    b88191562d92 drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
    227997d16a53 drm/tidss: Fix enable/disable order
    124b9d19e1d5 drm/pl111: Fix error handling in pl111_amba_probe
    8a8bf7ed8230 drm/atomic-helper: Export and namespace some functions
    1f50931f79dc drm/amdgpu: Fix query for VPE block_type and ip_count
    b023b3f236e8 drm/amd/display: Apply e4479aecf658 to dml
    1d8b1ac985c9 arm64: dts: imx95: correct I3C2 pclk to IMX95_CLK_BUSWAKEUP
    00d880c469b7 ALSA: hda/tas2781: properly initialize speaker_id for TAS2563
    cb73d37ac18b ALSA: ac97: fix a double free in snd_ac97_controller_register()
    c12df0f5ca41 Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable"
    0ce45b2426f9 nouveau: don't attempt fwsec on sb on newer platforms.
    64a0d47e0c32 riscv: boot: Always make Image from vmlinux, not vmlinux.unstripped
    5b7f91acffd2 tracing: Add recursion protection in kernel stack trace recording
    425886b1f830 counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
    844f521604bd counter: 104-quad-8: Fix incorrect return value in IRQ handler
    a0b28dd06a9a lib/crypto: aes: Fix missing MMU protection for AES S-box
    30a98c97f787 rust_binder: remove spin_lock() in rust_shrink_free_page()
    86e49948b0e6 mei: me: add nova lake point S DID
    d52af58dd463 btrfs: always detect conflicting inodes when logging inode refs
    0174d5466cae bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanup
    e86c4ee5a029 arm64: Fix cleared E0POE bit after cpu_suspend()/resume()
    ffa2be496ef6 net: do not write to msg_get_inq in callee
    d82796a57cc0 net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
    4ae815bfcfad atm: Fix dma_free_coherent() size
    0f7fb819d63f NFSD: Remove NFSERR_EAGAIN
    db78fa4b9f1f NFSD: net ref data still needs to be freed even if net hasn't startup
    e06c9f6c0f55 nfsd: check that server is running in unlock_filesystem
    099a880ef541 nfsd: use correct loop termination in nfsd4_revoke_states()
    53f07d095e7e nfsd: provide locking for v4_end_grace
    a339b0168251 NFSD: Fix permission check for read access to executable-only files

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolinux-yocto/6.12: update CVE exclusions (6.12.66)
Bruce Ashfield [Mon, 26 Jan 2026 15:23:50 +0000 (10:23 -0500)] 
linux-yocto/6.12: update CVE exclusions (6.12.66)

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 10 changes (5 new | 5 updated): - 5 new CVEs: CVE-2026-22278, CVE-2026-23761, CVE-2026-23762, CVE-2026-23763, CVE-2026-23764 - 5 updated CVEs: CVE-2021-47746, CVE-2021-47748, CVE-2025-64097, CVE-2025-69821, CVE-2026-1328
        Date: Thu, 22 Jan 2026 16:23:30 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolinux-yocto/6.12: update to v6.12.66
Bruce Ashfield [Mon, 26 Jan 2026 15:23:49 +0000 (10:23 -0500)] 
linux-yocto/6.12: update to v6.12.66

Updating linux-yocto/6.12 to the latest korg -stable release that comprises
the following commits:

    f6044d1fd846 Linux 6.12.66
    9e3f8fa53348 bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
    f8b406198778 ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback
    47e676ce4d68 tpm2-sessions: Fix out of range indexing in name_size
    42440155fe27 spi: cadence-quadspi: Prevent lost complete() call during indirect read
    3762535fbbc0 scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
    0810c8e94d6b ASoC: fsl_sai: Add missing registers to cache default
    1d2a10913089 ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL
    8072299bf13f ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
    44ed8fae346f ALSA: usb-audio: Update for native DSD support quirks
    ba6f0d1832ee can: j1939: make j1939_session_activate() fail if device is no longer registered
    47206d70d1fb drm/amdkfd: Fix improper NULL termination of queue restore SMI event string
    1c06d85c3d51 spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ
    f609041424d5 drm/amd/display: Fix DP no audio issue
    9f6cf07687be ata: libata-core: Disable LPM on ST2000DM008-2FR102
    14fa3d1927f1 netfilter: nf_tables: avoid chain re-validation if possible
    feb28b6827ec powercap: fix sscanf() error return value handling
    3835d59f6999 powercap: fix race condition in register_control_type()
    7b60aed82db1 net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant
    fb9ef40cccdb bpf: Fix reference count leak in bpf_prog_test_run_xdp()
    6447e697cfa8 bpf, test_run: Subtract size of xdp_frame from allowed metadata size
    6611a73b2991 bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
    0eb6e9d3b724 bpf: Make variables in bpf_prog_test_run_xdp less confusing
    202c5b915e22 bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K
    5c647749bce3 btrfs: fix beyond-EOF write handling
    afbb57899612 btrfs: use variable for end offset in extent_writepage_io()
    a915072e5ac3 btrfs: truncate ordered extent when skipping writeback past i_size
    7216d78ca34f btrfs: remove btrfs_fs_info::sectors_per_page
    ced5459df05a btrfs: add extra error messages for delalloc range related errors
    fb4fa3f9012b btrfs: subpage: dump the involved bitmap when ASSERT() failed
    9ed14c3b787b btrfs: fix error handling of submit_uncompressed_range()
    fcc04c92cbb5 ALSA: ac97: fix a double free in snd_ac97_controller_register()
    71138011dc01 ALSA: ac97bus: Use guard() for mutex locks
    7388ba6e5ccd erofs: fix file-backed mounts no longer working on EROFS partitions
    d47b03775d55 erofs: don't bother with s_stack_depth increasing for now
    dd6ccec088ad arp: do not assume dev_hard_header() does not change skb->head
    de77d2cd178a net: enetc: fix build warning when PAGE_SIZE is greater than 128K
    471dfb97599e net: usb: pegasus: fix memory leak in update_eth_regs_async()
    43497313d0da net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
    3d67e8c22685 HID: quirks: work around VID/PID conflict for appledisplay
    4969d6fa61af net: netdevsim: fix inconsistent carrier state after link/unlink
    d916df47a031 idpf: cap maximum Rx buffer size
    a4212d6732e3 idpf: fix memory leak in idpf_vport_rel()
    be3d31276199 idpf: keep the netdev when a reset fails
    3264881431e3 net: fix memory leak in skb_segment_list for GRO packets
    92ff65c660eb riscv: pgtable: Cleanup useless VA_USER_XXX definitions
    1eeaaeceafcf btrfs: only enforce free space tree if v1 cache is required for bs < ps cases
    6762937a8b45 vsock: Make accept()ed sockets use custom setsockopt()
    f1029391e604 bnxt_en: Fix potential data corruption with HW GRO/LRO
    57f1dd8fa966 net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
    9e0f54294fae net/mlx5e: Don't print error message due to invalid module
    b71d08b96864 netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
    005671c60fcf net: sock: fix hardened usercopy panic in sock_recv_errqueue
    50f65526b33d inet: ping: Fix icmp out counting
    03fb1708b7d1 net: mscc: ocelot: Fix crash when adding interface under a lag
    269c9283ff7f bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
    3950054c9512 net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
    26a82dce2bee netfilter: nf_conncount: update last_gc only when GC has been performed
    e1a436981ac9 netfilter: nf_tables: fix memory leak in nf_tables_newrule()
    cdafa52ad39b gpio: pca953x: handle short interrupt pulses on PCAL devices
    d4f333a0155d gpio: pca953x: Add support for level-triggered interrupts
    dd42e23b6d9e netfilter: nft_synproxy: avoid possible data-race on update operation
    16b4508e8717 netfilter: nft_set_pipapo: fix range overlap detection
    b397bb9c34ac arm64: dts: mba8mx: Fix Ethernet PHY IRQ support
    97fdde3189b6 arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart
    35b38dd6a792 arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
    88d60cff3000 ARM: dts: imx6q-ba16: fix RTC interrupt level
    3e458210ee2c arm64: dts: add off-on-delay-us for usdhc2 regulator
    06b1dfa40090 crypto: qat - fix duplicate restarting msg during AER error
    8f6afb166402 arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings
    75e2bc2985f4 drm/amd/display: Apply e4479aecf658 to dml
    163df8d79a0d drm/amd/display: Respect user's CONFIG_FRAME_WARN more for dml files
    582ba48e4a4c btrfs: fix NULL dereference on root when tracing inode eviction
    ec3695dd0acd btrfs: tracepoints: use btrfs_root_id() to get the id of a root
    53df7a4c3a56 btrfs: qgroup: update all parent qgroups when doing quick inherit
    b9b19fecad7d btrfs: fix qgroup_snapshot_quick_inherit() squota bug
    dedec6e6b421 scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
    496ca70a15f4 scsi: ufs: core: Fix EH failure after W-LUN resume error
    f373695d62e0 scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
    261233f765d2 smb/client: fix NT_STATUS_NO_DATA_DETECTED value
    596d1b968660 smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
    b1dd68601676 smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
    e83af97d5c39 drm/amd/display: shrink struct members
    a8559efcd576 NFS: Fix up the automount fs_context to use the correct cred
    71029266093b ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again)
    e1df03e293a0 NFSv4: ensure the open stateid seqid doesn't go backwards
    6a1099604b0c dm-snapshot: fix 'scheduling while atomic' on real-time kernels
    f002df3a3305 alpha: don't reference obsolete termio struct for TC* constants
    1b645cd729ef ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
    7010683101b5 csky: fix csky_cmpxchg_fixup not working
    32dc49f49ea0 drm/xe: Ensure GT is in C0 during resumes
    e724d0261b7c drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally
    f09cd209359a tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
    6f468f6ff233 libceph: make calc_target() set t->paused, not just clear it
    e94075e950a6 libceph: reset sparse-read state in osd_fault()
    d2c4a5f69966 libceph: return the handler error from mon_handle_auth_done()
    c4c2152a858c libceph: make free_choose_arg_map() resilient to partial allocation
    6c6cec3db3b4 libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
    2802ef3380fa libceph: prevent potential out-of-bounds reads in handle_auth_done()
    f94f95b81736 wifi: mac80211: restore non-chanctx injection behaviour
    024f71a57d56 wifi: avoid kernel-infoleak from struct iw_point
    fcb7500bfa24 pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
    321e17ff3142 gpio: rockchip: mark the GPIO controller as sleeping
    7500ab83bad2 drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
    bc96db7051cc drm/pl111: Fix error handling in pl111_amba_probe
    90b4b130a20d drm/amdgpu: Fix query for VPE block_type and ip_count
    49a66829dd36 counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
    c61440f1e741 counter: 104-quad-8: Fix incorrect return value in IRQ handler
    196e8fd7424b lib/crypto: aes: Fix missing MMU protection for AES S-box
    97130283b83f mei: me: add nova lake point S DID
    0c2413c69129 btrfs: always detect conflicting inodes when logging inode refs
    8b402146e3a8 arm64: Fix cleared E0POE bit after cpu_suspend()/resume()
    2f05f7737e16 net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
    1320d94a4df1 atm: Fix dma_free_coherent() size
    3f5d7f3865c6 NFSD: Remove NFSERR_EAGAIN
    8c1cf63ed465 NFSD: net ref data still needs to be freed even if net hasn't startup
    d95499900fe5 nfsd: check that server is running in unlock_filesystem
    03c68f94fad1 nfsd: use correct loop termination in nfsd4_revoke_states()
    ba4811c8b433 nfsd: provide locking for v4_end_grace
    6b7ad17f4dd5 NFSD: Fix permission check for read access to executable-only files

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolinux-yocto/6.12: update CVE exclusions (6.12.65)
Bruce Ashfield [Mon, 26 Jan 2026 15:23:48 +0000 (10:23 -0500)] 
linux-yocto/6.12: update CVE exclusions (6.12.65)

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 10 changes (7 new | 3 updated): - 7 new CVEs: CVE-2025-61937, CVE-2025-61943, CVE-2025-64691, CVE-2025-64729, CVE-2025-64769, CVE-2025-65117, CVE-2025-65118 - 3 updated CVEs: CVE-2025-7195, CVE-2025-9903, CVE-2025-9904
        Date: Fri, 16 Jan 2026 00:42:12 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolinux-yocto/6.12: update to v6.12.65
Bruce Ashfield [Mon, 26 Jan 2026 15:23:47 +0000 (10:23 -0500)] 
linux-yocto/6.12: update to v6.12.65

Updating linux-yocto/6.12 to the latest korg -stable release that comprises
the following commits:

    39cb076c7dc7 Linux 6.12.65
    b00d41629d81 Revert "iommu/amd: Skip enabling command/event buffers for kdump"
    69f542a54578 pwm: stm32: Always program polarity
    828b59fdf8ef virtio_console: fix order of fields cols and rows
    1b9c118fe318 sched/fair: Proportional newidle balance
    c6ae271bc5fd sched/fair: Small cleanup to update_newidle_cost()
    52aa889c6f57 sched/fair: Small cleanup to sched_balance_newidle()
    4888e1dcc341 net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
    b03136582acb cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes
    c4d18e9540bf drm/amdgpu: Forward VMID reservation errors
    585dbb5cdbb8 net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration
    7b240a8935d5 wifi: mac80211: Discard Beacon frames to non-broadcast address
    1c7c3a9314d8 mptcp: ensure context reset on disconnect()
    58a32633d124 mm: consider non-anon swap cache folios in folio_expected_ref_count()
    11f66b84fa7e mm: simplify folio_expected_ref_count()
    914769048818 mm/page_alloc: change all pageblocks migrate type on coalescing
    79f80a7a4784 mptcp: fallback earlier on simult connection

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agobarebox/barebox-tools: upgrade 2025.12.0 -> 2026.01.0
Wang Mingyu [Fri, 23 Jan 2026 05:30:38 +0000 (13:30 +0800)] 
barebox/barebox-tools: upgrade 2025.12.0 -> 2026.01.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogpgme: ensure manpage generation is deterministic
Ross Burton [Thu, 22 Jan 2026 15:34:38 +0000 (15:34 +0000)] 
gpgme: ensure manpage generation is deterministic

In a similar way to the previous commits with pod2man, gpgme will not
generate manpages on a clean build but will on rebuilds due to
do_package -> rpm-native -> ... -> libgpg-error-native, where the
libgpg-error-native recipe provides the yat2m tool.

To ensure that we generate manpages deterministicly, depend on this
recipe.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agowget: ensure manpage generation is deterministic
Ross Burton [Thu, 22 Jan 2026 15:34:37 +0000 (15:34 +0000)] 
wget: ensure manpage generation is deterministic

Add pod2man-native to DEPENDS to ensure that pod2man is always available
and manpage generation is deterministic.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agowget: merge .bb/.inc
Ross Burton [Thu, 22 Jan 2026 15:34:36 +0000 (15:34 +0000)] 
wget: merge .bb/.inc

There's just a single recipe file that uses the .inc, so merge them.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoffmpeg: ensure manpage generation is deterministic
Ross Burton [Thu, 22 Jan 2026 15:34:35 +0000 (15:34 +0000)] 
ffmpeg: ensure manpage generation is deterministic

Add pod2man-native to DEPENDS to ensure that pod2man is always available
and manpage generation is deterministic.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoperl: provide pod2man
Ross Burton [Thu, 22 Jan 2026 15:34:34 +0000 (15:34 +0000)] 
perl: provide pod2man

Many recipes uses pod2man to generate manpages from an almost
human-readable source format, which is part of the perl recipe.

This means that we have recipes that don't install manpages, or more
accurately don't install manpages if built from clean but _do_ if they
are a rebuild (because do_package -> rpm-native -> perl-native means the
sysroot now has pod2man in).

The obvious fix here is to DEPEND on perl-native but that an often look
like a redundant dependency that can be removed as removing it doesn't
cause problems (I'm fairly confident I'm responsible for patches like
this).

So, add a PROVIDES of pod2man to perl, so that recipes can DEPEND on
pod2man-native and this dependency is both obvious as to it's purpose
and easily removed if the manpages change source format.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoglibc: stable 2.42 branch updates
Hemanth Kumar M D [Thu, 22 Jan 2026 12:14:37 +0000 (04:14 -0800)] 
glibc: stable 2.42 branch updates

git log --oneline e34453cd6a8c592c325756ff3c7ac0afd3975cb4..453e6b8dbab935257eb0802b0c97bca6b67ba30e

453e6b8dba (HEAD, origin/release/2.42/master) resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
b0ec8fb689 memalign: reinstate alignment overflow check (CVE-2026-0861)
f122d0b4d1 nptl: Optimize trylock for high cache contention workloads (BZ #33704)
a1d3294a5b support: Exit on consistency check failure in resolv_response_add_name
8dfb84ad4e support: Fix FILE * leak in check_for_unshare_hints in test-container
2a0873aa81 sprof: fix -Wformat warnings on 32-bit hosts
efdf4c0c87 sprof: check pread size and offset for overflow
b11411fe2e posix: Fix invalid flags test for p{write,read}v2
8aaf4b732d ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)
2dbf973fe0 ppc64le: Restore optimized strncmp for power10
6b2957cfe8 ppc64le: Restore optimized strcmp for power10
828b8d23f3 AArch64: Fix and improve SVE pow(f) special cases
710d7a2e83 AArch64: fix SVE tanpi(f) [BZ #33642]
0c9430ed97 AArch64: Fix instability in AdvSIMD sinh
ec041b1f53 AArch64: Fix instability in AdvSIMD tan
97297120ce AArch64: Optimise SVE scalar callbacks
17c3eab387 aarch64: fix includes in SME tests
de1fe81f47 aarch64: fix cfi directives around __libc_arm_za_disable
bf499c2a49 x86: fix wmemset ifunc stray '!' (bug 33542)
71874f167a aarch64: tests for SME
256030b984 aarch64: clear ZA state of SME before clone and clone3 syscalls
6de12fc9ad aarch64: define macro for calling __libc_arm_za_disable
ab8c1b5d62 x86: Detect Intel Nova Lake Processor
bf48b17a28 x86: Detect Intel Wildcat Lake Processor
18fd689cdc nptl: Fix MADV_GUARD_INSTALL logic for thread without guard page (BZ 33356)
46b4e37c9e nss: Group merge does not react to ERANGE during merge (bug 33361)
1166170d95 libio: Define AT_RENAME_* with the same tokens as Linux

Testing Results:
+--------------+--------+--------+------+
| Result       | Before | After  | Diff |
+--------------+--------+--------+------+
| PASS         | 6890   | 6890   | 0    |
| XPASS        | 4      | 4      | 0    |
| FAIL         | 123    | 123    | 0    |
| XFAIL        | 16     | 16     | 0    |
| UNSUPPORTED  | 104    | 104    | 0    |
+--------------+--------+--------+------+

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoless: upgrade 685 -> 691
Wang Mingyu [Thu, 22 Jan 2026 09:05:13 +0000 (17:05 +0800)] 
less: upgrade 685 -> 691

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoalsa-ucm-conf: upgrade 1.2.15.2 -> 1.2.15.3
Wang Mingyu [Thu, 22 Jan 2026 09:05:10 +0000 (17:05 +0800)] 
alsa-ucm-conf: upgrade 1.2.15.2 -> 1.2.15.3

Changelog: https://www.alsa-project.org/wiki/Changes_v1.2.15.2_v1.2.15.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
[AG: add changelog in commit message]
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoalsa-lib: upgrade 1.2.15.2 -> 1.2.15.3
Wang Mingyu [Thu, 22 Jan 2026 09:05:09 +0000 (17:05 +0800)] 
alsa-lib: upgrade 1.2.15.2 -> 1.2.15.3

Changelog: https://www.alsa-project.org/wiki/Changes_v1.2.15.2_v1.2.15.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
[AG: add changelog in commit message]
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolto.inc: add clang specific LTO configuration
mark.yang [Thu, 22 Jan 2026 05:51:43 +0000 (14:51 +0900)] 
lto.inc: add clang specific LTO configuration

This commit adds support for Clang-specific LTO options.

1. -fuse-linker-plugin is not supported by Clang.
2. -ffat-lto-objects is used to ensure that object files (.o) are generated as ELF
   even when LTO is applied. During the dwarfsrcfiles process, if LTO is used
   with the Clang toolchain, static library object files are skipped if they are
   LLVM bitcode instead of ELF. Therefore, it is recommended to add this to
   LTOEXTRA if necessary.
3. Adding 'thin-lto' to DISTRO_FEATURES enables -flto=thin.

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibxml2: Fix CVE-2026-0992
Mingli Yu [Thu, 22 Jan 2026 01:42:10 +0000 (09:42 +0800)] 
libxml2: Fix CVE-2026-0992

Backport a patch [1] to fix CVE-2026-0992.

[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/f75abfcaa419a740a3191e56c60400f3ff18988d

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibxml2: Fix CVE-2026-0990
Mingli Yu [Thu, 22 Jan 2026 01:42:09 +0000 (09:42 +0800)] 
libxml2: Fix CVE-2026-0990

Backport a patch [1] to fix CVE-2026-0990.

[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/1961208e958ca22f80a0b4e4c9d71cfa050aa982

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agooeqa/runtime: Update tests for maturin
Tim Orling [Wed, 21 Jan 2026 21:07:19 +0000 (13:07 -0800)] 
oeqa/runtime: Update tests for maturin

* The output from maturin has changed in newer releases.
* Bump guessing-game version to 0.3.0
* Update to abi3 Python3 >= 3.9 support.

NOTE: The "maturin develop" step builds around 45 crates
and needs enough RAM to run. You will also probably want
the performance of KVM. For QEMU/testimage, you will
want the following in local.conf (or a similar .conf file):

QEMU_USE_KVM = 'True'
QB_MEM = '-m 2048'

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolib/oeqa/files/maturin: update guessing_game
Tim Orling [Wed, 21 Jan 2026 21:07:18 +0000 (13:07 -0800)] 
lib/oeqa/files/maturin: update guessing_game

Update to include changes in upstream Maturin Tutorial [1]
and for newer Rust and Python.

Cargo.toml:
* version: 0.1.0 -> 0.3.0 (to align with [2])
* edition: 2021 -> 2024
* Dependencies:
  - rand: 0.8.5 -> 0.9.0
  - pyo3: 0.21.2 -> 0.27.2
  - abi3-py38 -> abi3-py39 (Python 3.8 reached EOL in October 2024)

pyproject.toml:
* restrict maturin to >=1.7 to ensure PyO3 27.0+ and python 3.13+ support

src/lib.rs:
* rand 0.9 API change: rand::thread_rng() was removed. Use rand::rng() or
  the convenience function rand::random_range().
* PyO3 0.27 has breaking API changes from 0.21. The #[pymodule] function
  signature changed from fn module_name(py: Python, m: &PyModule) to
  fn module_name(m: &Bound<'_, PyModule>).

With help from Claude.ai

[1] https://www.maturin.rs/tutorial.html
[2] https://github.com/moto-timo/guessing-game/releases/tag/v0.3.0

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-maturin: upgrade 1.10.2 -> 1.11.5
Tim Orling [Wed, 21 Jan 2026 21:07:17 +0000 (13:07 -0800)] 
python3-maturin: upgrade 1.10.2 -> 1.11.5

Release Notes:
https://github.com/PyO3/maturin/blob/main/Changelog.md#1115

* 1.11.5
  - Allow combining --compatibility pypi with other --compatibility values (#2928)
* 1.11.4
  - Support armv6l and armv7l in pypi compatibility (#2926)
  - Improve the reliability of maturin's own CI
* 1.11.3
  - Fix manylinux2014 compliance check (#2922)
* 1.11.2
  - Fix failed release
* 1.11.1
  - Fix compiled artifacts being excluded by source path matching (#2910)
  - Better error reporting for missing interpreters (#2918)
  - Ignore unreadable excluded directories (#2916)
* 1.11.0 - Yanked
  - Note: This release was yanked to a regression: #2909

  - Refactor ModuleWriter to be easier to implement and use
  - Add Android cross compilation support, fix wheel tags for Android
  - Update generate-ci to macos-15-intel and add windows arm support
  - Deprecate 'upload' and 'publish' CLI commands

Comparing changes:
https://github.com/PyO3/maturin/compare/v1.10.2...v1.11.5

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogcc: fix patch format
Etienne Cordonnier [Wed, 21 Jan 2026 16:38:29 +0000 (17:38 +0100)] 
gcc: fix patch format

This is the only gcc patch which doesn't work with git am:

```
git am gcc-15.2.0-r0/sources/*.patch
...
Applying: Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
fatal: empty ident name (for <>) not allowed
```

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agotime64/pipewire: Use consistent TIME defines
Vyacheslav Yurkov [Wed, 21 Jan 2026 15:26:35 +0000 (15:26 +0000)] 
time64/pipewire: Use consistent TIME defines

Pipewire crashes when other dependent libraries are built with the
different TIME and FILE_OFFSET defines.

Related bug report:
https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/5055

Signed-off-by: Vyacheslav Yurkov <uvv.mail@gmail.com>
Signed-off-by: Barnabás Pőcze <pobrn@protonmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agobuild-appliance-image: Update to master head revisions
Richard Purdie [Fri, 23 Jan 2026 11:56:57 +0000 (11:56 +0000)] 
build-appliance-image: Update to master head revisions

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoflac: fix compile failed on musl
Hongxu Jia [Tue, 20 Jan 2026 02:48:32 +0000 (10:48 +0800)] 
flac: fix compile failed on musl

While not including security_flags.inc

$ echo "TCLIBC = 'musl'" >> conf/local.conf
$ echo "MACHINE = 'qemux86'" >> conf/local.conf
$ bitbake flac
...
| libtool: link: (cd .libs/libFLAC++-static.lax/libFLAC-static.a && i686-oe-linux-musl-gcc-arx
"/buildarea5/hjia/oe-core/build/tmp/work/core2-32-oe-linux-musl/flac/1.5.0/build/src/libFLAC++/
../libFLAC/.libs/libFLAC-static.a")
| build/tmp/work/core2-32-oe-linux-musl/flac/1.5.0/recipe-sysroot-native/usr/bin/
i686-oe-linux-musl/../../libexec/i686-oe-linux-musl/gcc/i686-oe-linux-musl/15.2.0/ld:
.libs/metadata.o: in function `FLAC::Metadata::VorbisCo
mment::set_comment(unsigned int, FLAC::Metadata::VorbisComment::Entry const&)':
| /usr/src/debug/flac/1.5.0/src/libFLAC++/metadata.cpp:913:(.text+0x2032): undefined reference to `__stack_chk_fail_local'
...

Refer [1], make gcc pass -lssp_nonshared to the linker whether
including security_flags.inc or not

[1] https://www.openwall.com/lists/musl/2018/09/11/2

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoinitramfs-framework: add handover of PID 1's arguments
Ulrich Ölmann [Fri, 16 Jan 2026 11:56:19 +0000 (12:56 +0100)] 
initramfs-framework: add handover of PID 1's arguments

Although many PID 1 programs parse /proc/cmdline, let's follow the standard
convention and forward the command-line arguments received from the kernel to
the next PID 1 program.

Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agogstreamer1.0-plugins-good: Add Qt6 QML plugin support
Telukula Jeevan Kumar Sahu [Mon, 19 Jan 2026 11:11:36 +0000 (16:41 +0530)] 
gstreamer1.0-plugins-good: Add Qt6 QML plugin support

GStreamer 1.26 supports both Qt5 and Qt6 QML video sink plugins.
Add PACKAGECONFIG[qt6] to enable the Qt6 plugin alongside the
existing Qt5 support.

The Qt5 plugin builds ext/qt/ directory, while Qt6 builds ext/qt6/.
Both can coexist and are controlled by separate meson options
(-Dqt5 and -Dqt6).

Signed-off-by: Telukula Jeevan Kumar Sahu <j-sahu@ti.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoyocto-check-layer: Add docstring to test_readme method
Ricardo Ungerer [Tue, 20 Jan 2026 19:47:22 +0000 (19:47 +0000)] 
yocto-check-layer: Add docstring to test_readme method

Signed-off-by: Ricardo Ungerer <ungerer.ricardo@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoyocto-check-layer: Fix README email check
Ricardo Ungerer [Tue, 20 Jan 2026 19:47:21 +0000 (19:47 +0000)] 
yocto-check-layer: Fix README email check

So far the test_readme have been use of re.match to find an email
address in the README file. This only matches if the email address
is at the start of the file. This commit changes this to re.search to
find email addresses anywhere in the README file.

Signed-off-by: Ricardo Ungerer <ungerer.ricardo@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoyocto-check-layer: Add messages in test_readme assertions
Ricardo Ungerer [Tue, 20 Jan 2026 19:47:20 +0000 (19:47 +0000)] 
yocto-check-layer: Add messages in test_readme assertions

Assertions in test_readme does not provide context message when they
fail. Which leads to errors like:

  File "/media/workspace/yocto_master/openembedded-core/scripts/lib/checklayer/cases/common.py", line 41, in test_readme
    self.assertTrue(email_regex.match(data))
    AssertionError: None is not true

This patch adds context messages to the assertions to help identify the
issue when they fail.

Signed-off-by: Ricardo Ungerer <ungerer.ricardo@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agosystemd: do not let do_fetch depend on PACKAGECONFIG
Chen Qi [Thu, 15 Jan 2026 02:19:17 +0000 (10:19 +0800)] 
systemd: do not let do_fetch depend on PACKAGECONFIG

It's unnecessary to make SRC_URI contains something like:
${@bb.utils.contains('PACKAGECONFIG', 'xxx', 'file://xxx', '', d)}
This does not give us any benefit and it makes do_fetch depend
on PACKAGECONFIG, which means changing of PACKAGECONFIG will result
in rerunn of do_fetch.

Besides, the related codes in do_install already does the necessary
checks.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agodefault-providers: remove ltp entry
Ross Burton [Mon, 19 Jan 2026 11:55:13 +0000 (11:55 +0000)] 
default-providers: remove ltp entry

We have a default provider for ltp on the basis that there is an
alternative in meta-oe called ltp-ddt, but this was removed in 2017[1].

[1] meta-oe ec9e5ed062 ("recipes: remove blacklisted recipes")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agolibpng: upgrade 1.6.53 -> 1.6.54
Peter Marko [Thu, 15 Jan 2026 00:24:20 +0000 (01:24 +0100)] 
libpng: upgrade 1.6.53 -> 1.6.54

Handles CVE-2026-22695 and CVE-2026-22801.

License-Update: copyright years refreshed

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agogo: upgrade 1.25.5 -> 1.25.6
Peter Marko [Thu, 15 Jan 2026 23:50:40 +0000 (00:50 +0100)] 
go: upgrade 1.25.5 -> 1.25.6

Upgrade to latest 1.25.x release [1]:

$ git --no-pager log --oneline go1.25.5..go1.25.6
69801b25b9 (tag: go1.25.6) [release-branch.go1.25] go1.25.6
9d497df196 [release-branch.go1.25] archive/zip: reduce CPU usage in index construction
afa9b66ac0 [release-branch.go1.25] net/url: add urlmaxqueryparams GODEBUG to limit the number of query parameters
2526187481 [release-branch.go1.25] cmd/go/internal/work: sanitize flags before invoking 'pkg-config'
082365aa55 [release-branch.go1.25] cmd/go: update VCS commands to use safer flag/argument syntax
4be38528a6 [release-branch.go1.25] crypto/tls: don't copy auto-rotated session ticket keys in Config.Clone
525dd85363 [release-branch.go1.25] crypto/tls: reject trailing messages after client/server hello
ddcf27fc8c [release-branch.go1.25] Revert "errors: optimize errors.Join for single unwrappable errors"
14f50f6e3e [release-branch.go1.25] cmd/compile: handle propagating an out-of-range jump table index
4e531b2f14 [release-branch.go1.25] runtime: mark getfp as nosplit
6f07a57145 [release-branch.go1.25] runtime/race: set missing argument frame for ppc64x atomic And/Or wrappers
ea603eea37 [release-branch.go1.25] os: allow direntries to have zero inodes on Linux
93f5d1c27e [release-branch.go1.25] os,internal/poll: don't call IsNonblock for consoles and Stdin
d5bfdcbc47 [release-branch.go1.25] crypto/tls: use inner hello for earlyData when using QUIC and ECH

Fixes CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731,
      CVE-2025-68119 and CVE-2025-61730.

Release information: [2]

[1] https://github.com/golang/go/compare/go1.25.5...go1.25.6
[2] https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agomesa: upgrade 25.3.1 -> 25.3.3
Dmitry Baryshkov [Thu, 15 Jan 2026 21:26:41 +0000 (23:26 +0200)] 
mesa: upgrade 25.3.1 -> 25.3.3

Upgrade Mesa to the latest stable release, picking up several fixes
(mostly anv, radv and pan/panvk/panfrost drivers).

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agomesa: drop VDPAU remnants
Dmitry Baryshkov [Thu, 15 Jan 2026 21:26:40 +0000 (23:26 +0200)] 
mesa: drop VDPAU remnants

Mesa 25.3.x dropped support for VDPAU. Commit 88e26a937549 ("mesa:
upgrade 25.2.5 -> 25.3.1") has dropped most of VDPAU-related items,
but it didn't drop mesa-vdpau-drivers package (nor did it drop VDPAU
bits from mesa-dev). Drop those remnants.

Fixes: 88e26a937549 ("mesa: upgrade 25.2.5 -> 25.3.1")
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoqemu: 10.1.3 -> 10.2.0
Kai Kang [Thu, 15 Jan 2026 07:54:36 +0000 (15:54 +0800)] 
qemu: 10.1.3 -> 10.2.0

Upgrade qemu from 10.1.3 to 10.2.0:

* remove backported 0012 patch
* update context for patches 0002 and 0010

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agolsb.py: strip ' from os-release file
Martin Jansa [Tue, 20 Jan 2026 14:41:09 +0000 (15:41 +0100)] 
lsb.py: strip ' from os-release file

In gentoo the file looks like this:

NAME='Gentoo'
ID='gentoo'
PRETTY_NAME='Gentoo Linux'
VERSION='2.18'
VERSION_ID='2.18'
HOME_URL='https://www.gentoo.org/'
SUPPORT_URL='https://www.gentoo.org/support/'
BUG_REPORT_URL='https://bugs.gentoo.org/'
ANSI_COLOR='1;32'

' were added with:
https://github.com/gentoo/gentoo/commit/2f590e35c9d3d13d5673163527120b2de97fdc80

before that the os-release file looked like this:

NAME=Gentoo
ID=gentoo
PRETTY_NAME="Gentoo Linux"
ANSI_COLOR="1;32"
HOME_URL="https://www.gentoo.org/"
SUPPORT_URL="https://www.gentoo.org/support/"
BUG_REPORT_URL="https://bugs.gentoo.org/"
VERSION_ID="2.18"

The ' is stripped from the ID later in distro_identifier with:
    # Filter out any non-alphanumerics and convert to lowercase
    distro_id = re.sub(r'\W', '', distro_id).lower()
but not from version which results in a weird NATIVELSBSTRING like:
    NATIVELSBSTRING      = "gentoo-'2.18'"

And similarly the directory name in sstate-cache:

oe-core $ ls -d sstate-cache/gentoo-*
"sstate-cache/gentoo-'2.18'"   sstate-cache/gentoo-2.18

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoharfbuzz: Upgrade 12.2.0 -> 12.3.0
Yasir Al-Latifi [Tue, 20 Jan 2026 10:35:10 +0000 (11:35 +0100)] 
harfbuzz: Upgrade 12.2.0 -> 12.3.0

CVE: CVE-2026-22693
Signed-off-by: Yasir Al-Latifi <yasira@axis.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agooe-selftest: runqemu: use zst rootfs for test
Adrian Freihofer [Tue, 20 Jan 2026 05:54:06 +0000 (06:54 +0100)] 
oe-selftest: runqemu: use zst rootfs for test

Use .tar.zst as rootfs IMAGE_FSTYPES in the runqemu selftest to make the
test quicker and more relevant to current usage.

Simplify changing the IMAGE_FSTYPES for the test.

Improve the test speed by using get_bb_vars to get multiple bb vars at
once.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agorunqemu: support .tar.zst, .tar,xz, .tar rootfs archives
Adrian Freihofer [Tue, 20 Jan 2026 05:54:05 +0000 (06:54 +0100)] 
runqemu: support .tar.zst, .tar,xz, .tar rootfs archives

Split the tar types into a separate list and use it where needed.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agocreaterepo-c: upgrade 1.2.1 -> 1.2.2
Moritz Haase [Mon, 19 Jan 2026 10:34:25 +0000 (11:34 +0100)] 
createrepo-c: upgrade 1.2.1 -> 1.2.2

Full list of changes in this release is available at [0].

[0]: https://github.com/rpm-software-management/createrepo_c/releases/tag/1.2.2

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agogn: upgrade to latest revision
Khem Raj [Sun, 18 Jan 2026 15:07:22 +0000 (07:07 -0800)] 
gn: upgrade to latest revision

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agore2c: upgrade 4.3.1 -> 4.4
Khem Raj [Sun, 18 Jan 2026 15:07:20 +0000 (07:07 -0800)] 
re2c: upgrade 4.3.1 -> 4.4

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoopensbi: bump to 1.8.1
Thomas Perrot [Fri, 16 Jan 2026 14:31:21 +0000 (15:31 +0100)] 
opensbi: bump to 1.8.1

This intermediate release has following fixes:
- Typo fix in comments of sbi_hartindex_to_hartid()
- Fix hart protection abstraction for platforms without PMP

Allow the platform to boot without PMP, but it is still necessary to
enable PMP on QEMU; otherwise, there will be nothing to protect the
M-mode firmware (OpenSBI) from lower privilege modes.

Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
Tested-by: Michael Opdenacker <michael.opdenacker@rootcommit.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoalsa-utils: fix packaging
Ross Burton [Fri, 16 Jan 2026 17:41:28 +0000 (17:41 +0000)] 
alsa-utils: fix packaging

In the previous refactoring of this package[1] I forgot to add provides
when merging some packages, which meant that installation of alsa-utils
wouldn't succeed:

  - nothing provides alsa-utils-aplaymidi needed by alsa-utils-1.2.15.1-r0.cortexa57 from oe-repo
  - nothing provides alsa-utils-aplaymidi2 needed by alsa-utils-1.2.15.1-r0.cortexa57 from oe-repo
  - nothing provides alsa-utils-arecordmidi needed by alsa-utils-1.2.15.1-r0.cortexa57 from oe-repo
  - nothing provides alsa-utils-arecordmidi2 needed by alsa-utils-1.2.15.1-r0.cortexa57 from oe-repo
  - nothing provides alsa-utils-axfer needed by alsa-utils-1.2.15.1-r0.cortexa57 from oe-repo

This is because the auto-splitting generates a package for each of the
binaries, but there are explicit FILES that take priority which result
in the binaries being in another package.  However, the dependencies
still exist. We could filter the package list after the split, but it is
easier to add RPROVIDES for arecord and a*midi to the relevant packages,
so that the dependencies are satisfied.

Also axfer is a separate tool, so put that in its own package instead of
merging with aplay.

Finally, add a PR, as it appears that dynamically-generated packaging
isn't enough to change the hash, and the wrong packages were being pulled
from sstate.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Tested-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agozlib: ignore CVE-2026-22184
Peter Marko [Fri, 16 Jan 2026 19:39:21 +0000 (20:39 +0100)] 
zlib: ignore CVE-2026-22184

This is CVE for example tool contrib/untgz.
This is not compiled in Yocto zlib recipe.

This CVE has controversial CVSS3 score of 9.8.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agofontconfig: backport a patch to fix a build race
Ross Burton [Fri, 16 Jan 2026 18:05:01 +0000 (18:05 +0000)] 
fontconfig: backport a patch to fix a build race

There's a build race where some objects don't explicitly depend on the
generated header ftalias.h being created:

  In file included from ../sources/fontconfig-2.17.1/src/fcpat.c:23:
  ../sources/fontconfig-2.17.1/src/fcint.h:129:12: fatal error: fcalias.h: No such file or directory
    129 | #  include "fcalias.h"

Backport a patch from upstream to add the missing dependencies.

[ YOCTO #16134 ]

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agofontconfig: remove obsolete workaround
Ross Burton [Fri, 16 Jan 2026 18:05:00 +0000 (18:05 +0000)] 
fontconfig: remove obsolete workaround

We don't need to delete two stale files from the source tree anymore, as
they are no longer shipped in the tarballs[1].

[1] fontconfig 31269e35 ("Do not ship fcobjshash.h")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agocoreutils: Backport fix for lseek_copy loop
Paul Barker [Wed, 21 Jan 2026 10:41:11 +0000 (10:41 +0000)] 
coreutils: Backport fix for lseek_copy loop

We've seen intermittent failures on the autobuilder related to creating
hddimg images after updating to coreutils 9.9. The error message seen
is:

  install: cannot lseek '.../core-image-minimal/1.0/sources/core-image-minimal-1.0/hddimg/rootfs.img': Invalid argument

This corresponds to an invalid argument passed to lseek() in the
create_hole() function in src/copy-file-data.c in coreutils. This in
turn is being given bad arguments due to incorrect handling of loop
variables in lseek_copy().

The upstream bug report [1] refers to an infinite loop, which isn't
quite what we're seeing, but the cause is likely the same. So, we're
applying the upstream fixes.

[1]: https://github.com/coreutils/coreutils/issues/159

[YOCTO #16120]

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3: skip flaky test_default_timeout test
Antonin Godard [Tue, 20 Jan 2026 07:25:25 +0000 (08:25 +0100)] 
python3: skip flaky test_default_timeout test

We have been observing intermittent issues with this test on the Autobuilder:
https://bugzilla.yoctoproject.org/show_bug.cgi?id=15885

This is probably due to the Autobuilder being heavily loaded at the time
of the test.

The logs on the ticket above do not allow us to know which of the two
"test_default_timeout" tests is failing, so disable both with
self.skipTest().

Excerpt from `ptest-runner python3`:

  test_default_timeout (test.test_multiprocessing_fork.test_manager.WithManagerTestBarrier.test_default_timeout)
  SKIP: Test the barrier's default timeout 'skip flaky timeout test'

[YOCTO #15885]

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopseudo: Update to 1.9.3 release
Richard Purdie [Tue, 20 Jan 2026 08:52:27 +0000 (08:52 +0000)] 
pseudo: Update to 1.9.3 release

Pulls in the following changes:

  Makefile.in: Bump version to 1.9.3
  configure: Minor code quality changes
  pseudo: code quality scan - resolved various potential issues
  makewrappers: improve error handling and robustness
  Update COPYRIGHT files
  ports/linux/pseudo_wrappers.c: Call the wrappers where possible
  ports/linux/pseudo_wrappers.c: Workaround compile error on Debian 11
  ports/linux/pseudo_wrappers.c: Reorder the syscall operations
  ports/unix/guts/realpath.c: Fix indents
  pseudo_util.c: Skip realpath like expansion for /proc on Linux
  test/test-proc-pipe.sh: Add test case for proc pipes
  ports/unix/guts/realpath.c: realpath fails if the resolved path doesn't exist

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agodpkg: Fix ADMINDIR
Mark Hatle [Sat, 17 Jan 2026 20:57:11 +0000 (14:57 -0600)] 
dpkg: Fix ADMINDIR

dpkg has a hard coded path (from build time) for the ADMINDIR, for some
reason the "set_root" function was using this hard coded value instead
of the value from apt.conf or the environment.

Follow the example of db_dir.c and use the environment if set.

Adjust the matching oe package_manager functions to set the ADMINDIR,
even though the apt.conf sets --admindir.  Note it's unclear if the
--admindir value that is set is reasonable or not.

Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org>
[AG: add Upstream-Status - Submitted to patch]
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoselftest: uboot: Add selftests for new UBOOT_CONFIG flow
Ryan Eatmon [Thu, 8 Jan 2026 20:22:39 +0000 (14:22 -0600)] 
selftest: uboot: Add selftests for new UBOOT_CONFIG flow

This adds seven new selftests to verify the functionality of the
overhauled UBOOT_CONFIG flow.

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agou-boot: Add support for UBOOT_CONFIG_FRAGMENTS and UBOOT_FRAGMENTS
Ryan Eatmon [Thu, 8 Jan 2026 20:22:38 +0000 (14:22 -0600)] 
u-boot: Add support for UBOOT_CONFIG_FRAGMENTS and UBOOT_FRAGMENTS

There are config fragments that live in the u-boot source tree.
UBOOT_FRAGMENTS will globally add a set of fragments to the configure.
UBOOT_CONFIG_FRAGMENTS makes use of the overhauled config flow to add
support for specifying alternative fragments for each variation build.

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agou-boot: Overhaul UBOOT_CONFIG flow
Ryan Eatmon [Thu, 8 Jan 2026 20:22:37 +0000 (14:22 -0600)] 
u-boot: Overhaul UBOOT_CONFIG flow

The existing flow for setting UBOOT_CONFIG options is a little
confusing.  The comma separated list is difficult to remember which
slot is used for which option, and the order of the options cannot
be changed just added on to.

This commit overhauls the UBOOT_CONFIG flow while maintaining the
backwards compatibility with the existing settings.  Rather than use a
comma separated list, a new set of placeholder variables have been
defined where the same config flags can be used to specify all of the
needed changes:

UBOOT_CONFIG = "foo bar"
UBOOT_CONFIG[foo] = "config1,fstype1,binary1"
UBOOT_CONFIG[bar] = "config2,fstype2,binary2"

becomes:

UBOOT_CONFIG = "foo bar"
UBOOT_CONFIG[foo] = "config1"
UBOOT_CONFIG[bar] = "config2"

UBOOT_CONFIG_IMAGE_FSTYPES[foo] = "fstype1"
UBOOT_CONFIG_IMAGE_FSTYPES[bar] = "fstype2"

UBOOT_CONFIG_BINARY[foo] = "binary1"
UBOOT_CONFIG_BINARY[bar] = "binary2"

The previous addition of makeopts has been removed and replaced with:

UBOOT_CONFIG_MAKE_OPTS[config] = "opts"

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoqemurunner: Improve qmp module detection.
Tom Geelen [Mon, 12 Jan 2026 09:47:37 +0000 (10:47 +0100)] 
qemurunner: Improve qmp module detection.

Instead of using logfile to detect where qmp is located we can pass sysroot_native directly to the qemurunner so it can find the qmp module itself.

Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agobuildhistory: fix handling of RDEPENDS style strings
Adam Blank [Wed, 31 Dec 2025 11:21:01 +0000 (12:21 +0100)] 
buildhistory: fix handling of RDEPENDS style strings

RDEPENDS style strings are regex searched for entries matching
the usual, allowed package names (plus possible version flags).
RPROVIDES however, is also allowed to contain actual file paths
like '/bin/sh', which get broken by the current implementation.

Use bb.utils to handle RDEPENDS style stings.

Signed-off-by: Adam Blank <adam.blank.g@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agooeqa/selftest/wic: test recursive dir copy on ext partitions
Dragomir, Daniel [Wed, 17 Dec 2025 14:27:26 +0000 (16:27 +0200)] 
oeqa/selftest/wic: test recursive dir copy on ext partitions

Extend the wic selftests to cover recursive directory copying
into ext partitions.

Previously, copying a directory into an ext partition could
appear to succeed, but attempting to access the directory
contents would fail with:

  -l: Ext2 inode is not a directory

This was fixed in commit 4fc3b42774 ("wic/engine: fix copying
directories into wic image with ext* partition").

This test now verifies that directories copied with "wic cp"
into an ext4 partition:
  - are created with correct inode types
  - can be listed recursively with "wic ls"
  - preserve files and subdirectories
  - can be copied back out of the image without data loss

A simple directory structure is used in this test:

wic-test-cp-ext-dir/
├── topfile.txt
└── subdir/
    └── subfile.txt

Signed-off-by: Daniel Dragomir <daniel.dragomir@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agowic/engine: fix copying directories into wic image with ext* partition
Dragomir, Daniel [Fri, 3 Oct 2025 20:31:30 +0000 (23:31 +0300)] 
wic/engine: fix copying directories into wic image with ext* partition

wic uses debugfs to write on ext* partitions, but debugfs can only
write to the current working directory and it cannot copy complete
directory trees. Running 'wic ls' on a copied directory show this:
    -l: Ext2 inode is not a directory

Fix this by creating a command list for debugfs (-f parameter) when
recursive parsing the host directory in order to create a similar
directory structure (mkdir) and copy files (write) on each level
into the destination directory from the wic's ext* partition.

Signed-off-by: Daniel Dragomir <daniel.dragomir@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agolibinput: expand PACKAGECONFIG
Ross Burton [Wed, 14 Jan 2026 13:09:39 +0000 (13:09 +0000)] 
libinput: expand PACKAGECONFIG

The 1.30 release added support for Lua plugins, so add a
disabled-by-default PACKAGECONFIG for the Lua plugin support.

Move mtdev from being always on to an enabled-by-default PACKAGECONFIG.

Merge the udevdir evaluation directly into EXTRA_OEMESON, there's no
need for it to be a separate variable.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agorunqemu-extract-sdk: support tar.zst format
Alex Bradbury [Wed, 14 Jan 2026 10:26:11 +0000 (10:26 +0000)] 
runqemu-extract-sdk: support tar.zst format

Building `core-image-minimal-dev` with Poky Whinlatter, the rootfs
tarball is compressed with zstd by default, meaning this script won't
work out of the box with it.

Signed-off-by: Alex Bradbury <asb@igalia.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agolibpcre2: Limit the undefined-version to non-native variants
Khem Raj [Wed, 14 Jan 2026 00:35:53 +0000 (16:35 -0800)] 
libpcre2: Limit the undefined-version to non-native variants

Native variant maybe built with GNU linker which does not recognize.

Fixes build on ubuntu 22.04
/home/kraj200/yoe/build/tmp/hosttools/ld: unrecognized option '--undefined-version'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agosystemd-compat-units: generate masks at build time
Ross Burton [Tue, 13 Jan 2026 18:46:32 +0000 (18:46 +0000)] 
systemd-compat-units: generate masks at build time

Originally, this recipe masked the units at rootfs-time by looking to see
if the init script to be masked existed, and masking it if so.

That however suffers from a race condition where the postinst script may
be executed before the package that provides a script has been installed
so this was changed to be an on-target postinst[1], so we know that all
of the packages have been installed.

However, this now means that you can't have an image that install this
package _and_ is read-only, because we have an on-target postinst to
execute.

There's also another problem that with on-target package management, it
would be possible to install a package that should be masked after the
postinst has been executed, so the mask won't exist.

Taking a step back, a systemd unit mask is just a symlink to /dev/null
with the right name in the right path.  So instead of masking in a post-
install script, we can generate all the masks at build-time.

This change reduces this package to just a number of symlinks, with no
post-install scripts.

[ YOCTO #16109 ]
[1] oe-core e88f22da19 ("systemd-compat-units: execute postinst on target")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3: add new files to compression
Trevor Gamblin [Tue, 13 Jan 2026 17:57:58 +0000 (12:57 -0500)] 
python3: add new files to compression

As of Python 3.14, there is a new top-level compression module that
contains the gzip and tarfile modules from previous versions, along with
a new _common module. However, for compatibility reasons the project is
also leaving a copy of the gzip and tarfile modules in the original
positions (to be handled in a future deprecation cycle).

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3: add _ast_unparse to core
Trevor Gamblin [Tue, 13 Jan 2026 17:57:57 +0000 (12:57 -0500)] 
python3: add _ast_unparse to core

Without this, we will see import errors for modules that use
annotationlib like so:

|../../python3.14/annotationlib.py:487: in __repr__\n'
|    return ast.unparse(self.__ast_node__)\n'
|           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n'
|../../python3.14/ast.py:622: in unparse\n'
|    from _ast_unparse import Unparser as _Unparser\n'
|E   ModuleNotFoundError: No module named '_ast_unparse'\n"

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3: add _py_warnings, annotationlib to core
Trevor Gamblin [Tue, 13 Jan 2026 17:57:56 +0000 (12:57 -0500)] 
python3: add _py_warnings, annotationlib to core

Without adding these, there will be numerous packages that will have to
add python3-misc to their RDEPENDS just to dispel some warnings, like:

|root@qemux86-64:~# python3
|Python 3.14.2 (main, Dec  5 2025, 16:49:16) [GCC 15.2.0] on linux
|Type "help", "copyright", "credits" or "license" for more information.
|warning: can't use pyrepl: No module named 'annotationlib'

and errors like:

|>>> import logging
|Traceback (most recent call last):
|  File "<stdin-1>", line 1, in <module>
|  File "/usr/lib/python3.14/logging/__init__.py", line 26, in <module>
|    import sys, os, time, io, re, traceback, warnings, weakref, collections.abc
|  File "/usr/lib/python3.14/traceback.py", line 8, in <module>
|    import warnings
|  File "/usr/lib/python3.14/warnings.py", line 15, in <module>
|    from _py_warnings import (
|ModuleNotFoundError: No module named '_py_warnings'

Add them to python3-core rather than requiring another split.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3: upgrade 3.14.0 -> 3.14.2
Trevor Gamblin [Tue, 13 Jan 2026 17:57:55 +0000 (12:57 -0500)] 
python3: upgrade 3.14.0 -> 3.14.2

Changelog: https://docs.python.org/3/whatsnew/changelog.html#python-3-14-2-final

Builds OK:

|BUILDALL-QEMU LOG FOR python3
|START TIME: 2025-12-12_14:47:51
|HOSTNAME: megalith
|HOST OS: Fedora Linux 43 (Server Edition)
|HOST KERNEL: 6.17.10-300.fc43.x86_64
|===============
|BUILD RESULTS:
|[glibc]
|PASS: qemuarm
|PASS: qemuarm64
|PASS: qemuarmv5
|PASS: qemuloongarch64
|PASS: qemumips
|PASS: qemumips64
|PASS: qemuppc
|PASS: qemuppc64
|PASS: qemuriscv32
|PASS: qemuriscv64
|PASS: qemux86-64
|PASS: qemux86
|[musl]
|PASS: qemuarm
|PASS: qemuarm64
|PASS: qemuarmv5
|FAIL: qemuloongarch64
|PASS: qemumips
|PASS: qemumips64
|PASS: qemuppc
|PASS: qemuppc64
|PASS: qemuriscv32
|PASS: qemuriscv64
|PASS: qemux86-64
|PASS: qemux86
|===============
|PASSED: 23
|FAILED: 1

Reproducibility OK:

|2025-12-12 14:18:33,082 - oe-selftest - INFO - Adding: "include selftest.inc" in /home/tgamblin/workspace/yocto/openembedded-core/build-st/conf/local.conf
|2025-12-12 14:18:33,082 - oe-selftest - INFO - Adding: "include bblayers.inc" in bblayers.conf
|2025-12-12 14:18:33,083 - oe-selftest - INFO - test_reproducible_builds (reproducible.ReproducibleTests.test_reproducible_builds)
|2025-12-12 14:19:11,420 - oe-selftest - INFO - Building reproducibleA (sstate allowed)...
|2025-12-12 14:23:50,788 - oe-selftest - INFO - Building reproducibleB-extended (sstate NOT allowed)...
|2025-12-12 14:45:12,673 - oe-selftest - INFO - Checking deb packages for differences...
|2025-12-12 14:45:13,888 - oe-selftest - INFO - Reproducibility summary for deb: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-12 14:45:13,888 - oe-selftest - INFO - Checking ipk packages for differences...
|2025-12-12 14:45:15,874 - oe-selftest - INFO - Reproducibility summary for ipk: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-12 14:45:15,875 - oe-selftest - INFO - Checking rpm packages for differences...
|2025-12-12 14:45:17,945 - oe-selftest - INFO - Reproducibility summary for rpm: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-12 14:45:17,946 - oe-selftest - INFO -  ... ok
|2025-12-12 14:46:22,556 - oe-selftest - INFO - ----------------------------------------------------------------------
|2025-12-12 14:46:22,556 - oe-selftest - INFO - Ran 1 test in 1670.130s
|2025-12-12 14:46:22,556 - oe-selftest - INFO - OK
|2025-12-12 14:46:25,595 - oe-selftest - INFO - RESULTS:
|2025-12-12 14:46:25,595 - oe-selftest - INFO - RESULTS - reproducible.ReproducibleTests.test_reproducible_builds: PASSED (1604.86s)
|2025-12-12 14:46:27,441 - oe-selftest - INFO - SUMMARY:
|2025-12-12 14:46:27,441 - oe-selftest - INFO - oe-selftest () - Ran 1 test in 1670.130s
|2025-12-12 14:46:27,441 - oe-selftest - INFO - oe-selftest - OK - All required tests passed (successes=1, skipped=0, failures=0, errors=0)

ptests look OK:

|== Tests result: SUCCESS ==
|
|28 tests skipped:
|    test.test_asyncio.test_windows_events
|    test.test_asyncio.test_windows_utils test.test_gdb.test_backtrace
|    test.test_gdb.test_cfunction test.test_gdb.test_cfunction_full
|    test.test_gdb.test_misc test.test_gdb.test_pretty_print
|    test_android test_apple test_asdl_parser test_clinic test_devpoll
|    test_free_threading test_generated_cases test_idle test_kqueue
|    test_launcher test_msvcrt test_startfile test_tcl test_tkinter
|    test_ttk test_ttk_textonly test_turtle test_winapi
|    test_winconsoleio test_winreg test_wmi
|
|8 tests skipped (resource denied):
|    test_curses test_peg_generator test_smtpnet test_socketserver
|    test_urllib2net test_urllibnet test_winsound test_zipfile64
|
|455 tests OK.
|
|Total duration: 3 min 45 sec
|Total tests: run=46,462 skipped=2,384
|Total test files: run=483/491 skipped=28 resource_denied=8
|Result: SUCCESS
|DURATION: 225
|END: /usr/lib/python3/ptest
|2025-12-12T19:14
|STOP: ptest-runner
|TOTAL: 1 FAIL: 0

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython_pep517: add --prefix to nativepython3 call
Trevor Gamblin [Tue, 13 Jan 2026 17:57:54 +0000 (12:57 -0500)] 
python_pep517: add --prefix to nativepython3 call

With Python 3.14, the default assumptions about install path in
python_pep517 no longer seem to apply, and as a result we see QA errors
during Python package builds like:

|ERROR: python3-unittest-automake-output-0.3-r0 do_package: QA Issue: python3-unittest-automake-output: Files/directories were installed but not shipped in any package:
|  /home
|  /home/tgamblin
|  /home/tgamblin/workspace
|  /home/tgamblin/workspace/yocto
|  /home/tgamblin/workspace/yocto/openembedded-core
|  /home/tgamblin/workspace/yocto/openembedded-core/build
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao-0.3.dist-info
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/__init__.py
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/pytest.py
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/unittest
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/__pycache__
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/unittest/__init__.py
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/unittest/__main__.py
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/unittest/__pycache__
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/unittest/__pycache__/__init__.cpython-314.pyc
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/unittest/__pycache__/__main__.cpython-314.pyc
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/__pycache__/__init__.cpython-314.pyc
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao/__pycache__/pytest.cpython-314.pyc
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao-0.3.dist-info/entry_points.txt
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao-0.3.dist-info/WHEEL
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao-0.3.dist-info/METADATA
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao-0.3.dist-info/licenses
|  /home/tgamblin/workspace/yocto/openembedded-core/build/tmp/work/x86-64-v3-poky-linux/python3-unittest-automake-output/0.3/recipe-sysroot-native/usr/lib/python3.14/site-packages/putao-0.3.dist-info/licenses/LICENSE
|Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
|python3-unittest-automake-output: 34 installed and not shipped files. [installed-vs-shipped]

We need to add the --prefix flag to the nativepython3 call so that it
avoids using the native Python's sysconfig prefix.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3targetconfig: export _PYTHON_PROJECT_BASE
Trevor Gamblin [Tue, 13 Jan 2026 17:57:53 +0000 (12:57 -0500)] 
python3targetconfig: export _PYTHON_PROJECT_BASE

See: https://github.com/python/cpython/commit/2950bc50af8f

As of 3.14.0, Python's sysconfig module looks for _PYTHON_PROJECT_BASE
to be set when cross-compiling, or otherwise it'll find and use the
native interpreter's paths when calling get_path() and filling out
_CONFIG_VARS. Set _PYTHON_PROJECT_BASE to "${B}" in
python3targetconfig's setup_target_config() to help avoid issues with
incorrect paths in rpm and other recipes that depend on this class.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3: upgrade 3.13.11 -> 3.14.0
Trevor Gamblin [Tue, 13 Jan 2026 17:57:52 +0000 (12:57 -0500)] 
python3: upgrade 3.13.11 -> 3.14.0

Changelog: https://docs.python.org/3.14/whatsnew/changelog.html#python-3-14-0-final

- Recipe changes:

  - Remove '0001-Generate-data-for-OpenSSL-3.4-and-add-it-to-multissl.patch'
    as this fix was submitted upstream and is included in 3.14.0.

  - Modify three existing patches to apply on 3.14.0:
    - 0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch
    - 0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch
    - 0001-test_active_children-skip-problematic-test.patch

  - Add three new ptest skip patches:
    - 0001-test_cmd-skip-bang-completion-test.patch - editline issues
      with tab completion off of bangs (!).
    - 0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch -
      change in curses dependency in PyREPL leads to issues with a test
      that expects the ICH1 terminal capability.
    - 0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch -
      OE builds customize prefixes and compiler flags in a way that the
      test doesn't expect.

  - Add zstd to the DEPENDS since Python3 now provides support for the
    Zstandard compression standard.

  - In py_package_preprocess(), handle reproducibility issues with the
    _sysconfig_vars*.json files that the build generates by stripping
    paths from them.

Modify python3-manifest.json to reflect the removal/replacement of
stringold with a new string module directory.

Also update python3-dir Python version to 3.14.

Reproducibility looks OK:

|2025-12-03 17:23:39,179 - oe-selftest - INFO - Reproducibility summary for deb: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-03 17:23:39,179 - oe-selftest - INFO - Checking ipk packages for differences...
|2025-12-03 17:23:41,631 - oe-selftest - INFO - Reproducibility summary for ipk: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-03 17:23:41,631 - oe-selftest - INFO - Checking rpm packages for differences...
|2025-12-03 17:23:43,952 - oe-selftest - INFO - Reproducibility summary for rpm: same=2261 different=0 different_excluded=0 missing=0 total=2261
|unused_exclusions=[]
|2025-12-03 17:23:43,952 - oe-selftest - INFO -  ... ok
|2025-12-03 17:24:32,829 - oe-selftest - INFO - ----------------------------------------------------------------------
|2025-12-03 17:24:32,830 - oe-selftest - INFO - Ran 1 test in 1616.811s
|2025-12-03 17:24:32,830 - oe-selftest - INFO - OK
|2025-12-03 17:24:36,170 - oe-selftest - INFO - RESULTS:
|2025-12-03 17:24:36,170 - oe-selftest - INFO - RESULTS - reproducible.ReproducibleTests.test_reproducible_builds: PASSED (1567.51s)
|2025-12-03 17:24:38,017 - oe-selftest - INFO - SUMMARY:
|2025-12-03 17:24:38,017 - oe-selftest - INFO - oe-selftest () - Ran 1 test in 1616.811s
|2025-12-03 17:24:38,018 - oe-selftest - INFO - oe-selftest - OK - All required tests passed (successes=1, skipped=0, failures=0, errors=0)

ptests look OK (with new skips):

|== Tests result: SUCCESS ==
|
|28 tests skipped:
|    test.test_asyncio.test_windows_events
|    test.test_asyncio.test_windows_utils test.test_gdb.test_backtrace
|    test.test_gdb.test_cfunction test.test_gdb.test_cfunction_full
|    test.test_gdb.test_misc test.test_gdb.test_pretty_print
|    test_android test_apple test_asdl_parser test_clinic test_devpoll
|    test_free_threading test_generated_cases test_idle test_kqueue
|    test_launcher test_msvcrt test_startfile test_tcl test_tkinter
|    test_ttk test_ttk_textonly test_turtle test_winapi
|    test_winconsoleio test_winreg test_wmi
|
|8 tests skipped (resource denied):
|    test_curses test_peg_generator test_smtpnet test_socketserver
|    test_urllib2net test_urllibnet test_winsound test_zipfile64
|
|455 tests OK.
|
|Total duration: 3 min 5 sec
|Total tests: run=46,110 skipped=2,364
|Total test files: run=483/491 skipped=28 resource_denied=8
|Result: SUCCESS
|DURATION: 186
|END: /usr/lib/python3/ptest
|2025-12-04T00:20
|STOP: ptest-runner
|TOTAL: 1 FAIL: 0

buildall-qemu result:

BUILDALL-QEMU LOG FOR python3
START TIME: 2025-12-03_10:08:36
HOSTNAME: megalith
HOST OS: Fedora Linux 43 (Server Edition)
HOST KERNEL: 6.17.8-300.fc43.x86_64
===============
BUILD RESULTS:
[glibc]
PASS: qemuarm
PASS: qemuarm64
PASS: qemuarmv5
PASS: qemuloongarch64
PASS: qemumips
PASS: qemumips64
PASS: qemuppc
PASS: qemuppc64
PASS: qemuriscv32
PASS: qemuriscv64
PASS: qemux86-64
PASS: qemux86
[musl]
PASS: qemuarm
PASS: qemuarm64
PASS: qemuarmv5
FAIL: qemuloongarch64
PASS: qemumips
PASS: qemumips64
PASS: qemuppc
PASS: qemuppc64
PASS: qemuriscv32
PASS: qemuriscv64
PASS: qemux86-64
PASS: qemux86
===============
PASSED: 23
FAILED: 1

License-Update: Update copyright example in body

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoorc: upgrade 0.4.41 -> 0.4.42
Yiding Liu (Fujitsu) [Wed, 14 Jan 2026 01:19:00 +0000 (09:19 +0800)] 
orc: upgrade 0.4.41 -> 0.4.42

1.Changelog
 - Initial 64-bit RISC-V support (Maksymilian Knust, Filip Wasil)
 - Add 64-bit LoongArch support (Jin Bo, Hecai Yuan)
 - Implement release and reuse of temporary registers for some targets (Jorge Zapata)
 - x86: Implement EVEX encoding and an opcode validation system (Jorge Zapata)
 - x86: Opcode refactor, improved constant handling and various other fixes (Jorge Zapata)
 - x86: add missing rounding operands for AVX and SSE (L. E. Segovia)
 - x86: Implement 64-bit single move constant load (L. E. Segovia)
 - includes: stop exporting the private compiler and OrcTarget definitions (Jorge Zapata)
 - Use hotdoc instead of gtk-doc to generate the documentation (Jorge Zapata)
 - ORC_DEBUG_FATAL environment variable allows abort on log messages of a certain level (Carlos Falgueras García)
 - Error message improvements and NEON backend clean-ups (Alexander Slobodeniuk)
 - Fix a few valgrind issues (Doug Nazar)
 - Build: enable tools such as orcc and orc-bugreport by default (Nirbheek Chauhan)
 - Various build fixes (L. E. Segovia, Sebastian Dröge)

2.Documentation are no longer built with gtk_doc, it was replaced by hotdoc.
 https://gitlab.freedesktop.org/gstreamer/orc/-/commit/0ad1f5884c654b614cf1ddd114a7ec9140311a3a

This means documentation will no longer be built in the recipe or packaged in
the output packages.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agowebkitgtk: upgrade 2.50.0 -> 2.50.4
Hongxu Jia [Tue, 13 Jan 2026 12:45:04 +0000 (20:45 +0800)] 
webkitgtk: upgrade 2.50.0 -> 2.50.4

Refresh patches
- 0001-CMake-Add-a-variable-to-control-macro-__PAS_ALWAYS_I.patch
- 0001-FindGObjectIntrospection.cmake-prefix-variables-obta.patch
- 0001-Fix-build-errors-on-RISCV-https-bugs.webkit.org-show.patch
- fix-ftbfs-riscv64.patch
- reproducibility.patch
- sys_futex.patch
- t6-not-declared.patch

Drop backport fix-musl-compilation.patch which already exists
in 2.50.4

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
- Fix compile failure on qemux86 [1] to
drop fix_op_instanceof_handler_for_32-bit_C-loop_build.patch,
which conflicts with upstream solution [2]

- Fix compile failure on qemuriscv64
...
Source/ThirdParty/skia/modules/skcms/src/Transform_inl.h:810:71: error: cannot tail-call: tail call production failed
  810 |         DECLARE_STAGE(name, arg, [[clang::musttail]] return (*list.fn)(list, ctx, src, dst, \
      |                                                             ~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~
  811 |                                                                        r, g, b, a, i))
      |                                                                        ~~~~~~~~~~~~~~
...

[1] https://autobuilder.yoctoproject.org/valkyrie/#/builders/6/builds/2907
[2] https://github.com/WebKit/WebKit/commit/fcaa289f6015595a638eb96b9f728eaaa7b13ab8

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agolibcap-ng: upgrade 0.8.5 -> 0.9
Liu Yiding [Tue, 13 Jan 2026 09:51:09 +0000 (17:51 +0800)] 
libcap-ng: upgrade 0.8.5 -> 0.9

1. Changelog
  https://github.com/stevegrubb/libcap-ng/releases/tag/v0.9

2. Drop file://0001-Fix-python-path-when-invoking-py-compile-54.patch as it was merged upstream.

3. Add pkgconfig to solve following configure error:
 ../sources/libcap-ng-0.9/configure: line 14862: syntax error near unexpected token `LIBBPF,libbpf,'
 ../sources/libcap-ng-0.9/configure: line 14862: `PKG_CHECK_MODULES(LIBBPF,libbpf,'

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoseatd: upgrade 0.9.1 -> 0.9.2
Wang Mingyu [Tue, 13 Jan 2026 10:25:07 +0000 (18:25 +0800)] 
seatd: upgrade 0.9.1 -> 0.9.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agorepo: upgrade 2.60.1 -> 2.61
Wang Mingyu [Tue, 13 Jan 2026 10:25:06 +0000 (18:25 +0800)] 
repo: upgrade 2.60.1 -> 2.61

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3-websockets: upgrade 15.0.1 -> 16.0
Wang Mingyu [Tue, 13 Jan 2026 10:25:05 +0000 (18:25 +0800)] 
python3-websockets: upgrade 15.0.1 -> 16.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3-urllib3: upgrade 2.6.2 -> 2.6.3
Wang Mingyu [Tue, 13 Jan 2026 10:25:04 +0000 (18:25 +0800)] 
python3-urllib3: upgrade 2.6.2 -> 2.6.3

Changelog:
==========
- Fixed a high-severity security issue where decompression-bomb safeguards of
  the streaming API were bypassed when HTTP redirects were followed.
- Started treating Retry-After times greater than 6 hours as 6 hours by
  default.
- Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3-pdm: upgrade 2.26.2 -> 2.26.4
Wang Mingyu [Tue, 13 Jan 2026 10:25:03 +0000 (18:25 +0800)] 
python3-pdm: upgrade 2.26.2 -> 2.26.4

Changelog:
===========
- Make sure cursor closing for fixing PyPy different gc mode also add PyPy in CI.
- Fix a bug that old HTTP cache directories cause PDM to crash when trying to clear them.
- Port to hishel 1.0.0.
- Update .gitignore file in the default template.
- Correct the sysconfig variables for Python standalone build installations.
- Ignore packages.vcs.requested-revision if it's None when formatting pylock.toml.
- Fix test failures with uv test cases using non-venv Python interpreters.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3-pathspec: upgrade 0.12.1 -> 1.0.3
Wang Mingyu [Tue, 13 Jan 2026 10:25:02 +0000 (18:25 +0800)] 
python3-pathspec: upgrade 0.12.1 -> 1.0.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3-jsonschema: upgrade 4.25.1 -> 4.26.0
Wang Mingyu [Tue, 13 Jan 2026 10:25:01 +0000 (18:25 +0800)] 
python3-jsonschema: upgrade 4.25.1 -> 4.26.0

Changelog:
 Decrease import time by delaying importing of urllib.request

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agopython3-build: upgrade 1.3.0 -> 1.4.0
Wang Mingyu [Tue, 13 Jan 2026 10:25:00 +0000 (18:25 +0800)] 
python3-build: upgrade 1.3.0 -> 1.4.0

Changelog:
===========
- Add --quiet flag
- Add option to dump PEP 517 metadata with --metadata
- Support UV environment variable
- Remove a workaround for 3.14b1
- In 3.14 final release, color defaults to True already
- Pass sp-repo-review
- In pytest configuration, log_level is better than log_cli_level
- Split up typing and mypy
- Use types-colorama
- In docs, first argument for _has_dependency is a name
- Fix test failure when flit-core is installed

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agolibtasn1: upgrade 4.20.0 -> 4.21.0
Wang Mingyu [Tue, 13 Jan 2026 10:24:59 +0000 (18:24 +0800)] 
libtasn1: upgrade 4.20.0 -> 4.21.0

Changelog:
=============
- Undocumented asn1Decoding --debug flag removed
- Code coverage for src/ went from 35% to 82%
- Fix of ASN.1 typo in manual
- NEWS renamed to NEWS.md and uses markdown syntax.
- Update gnulib files and various build/maintenance fixes.
- Fix for vulnerability CVE-2025-13151 Stack-based buffer overflow

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agolibnotify: upgrade 0.8.7 -> 0.8.8
Wang Mingyu [Tue, 13 Jan 2026 10:24:58 +0000 (18:24 +0800)] 
libnotify: upgrade 0.8.7 -> 0.8.8

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoifupdown: upgrade 0.8.44 -> 0.8.45
Wang Mingyu [Tue, 13 Jan 2026 10:24:56 +0000 (18:24 +0800)] 
ifupdown: upgrade 0.8.44 -> 0.8.45

License-Update: Fix 'old-fsf-address-in-copyright-file' lintian warning

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agohwdata: upgrade 0.402 -> 0.403
Wang Mingyu [Tue, 13 Jan 2026 10:24:55 +0000 (18:24 +0800)] 
hwdata: upgrade 0.402 -> 0.403

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoalsa-utils: upgrade 1.2.15.1 -> 1.2.15.2
Wang Mingyu [Tue, 13 Jan 2026 10:24:53 +0000 (18:24 +0800)] 
alsa-utils: upgrade 1.2.15.1 -> 1.2.15.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoalsa-ucm-conf: upgrade 1.2.15.1 -> 1.2.15.2
Wang Mingyu [Tue, 13 Jan 2026 10:24:52 +0000 (18:24 +0800)] 
alsa-ucm-conf: upgrade 1.2.15.1 -> 1.2.15.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 months agoalsa-lib: upgrade 1.2.15.1 -> 1.2.15.2
Wang Mingyu [Tue, 13 Jan 2026 10:24:51 +0000 (18:24 +0800)] 
alsa-lib: upgrade 1.2.15.1 -> 1.2.15.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>