Commit Graph

33531 Commits

Author SHA1 Message Date
Wang Mingyu
782325bcd2
ddrescue: upgrade 1.29 -> 1.29.1
Changelog:
============
- New option '--bad-sector-data'.
- main_common.cc (format_num3): New function.
- mapbook.cc (input_pos_error): Print pos and size aligned.
- ddrescue.texi: Document use of -p and -x with --domain-mapfile.
- block.h: Rename to mapfile.h.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:50 -07:00
Wang Mingyu
4607060c42
adw-gtk3: upgrade 5.6 -> 5.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:50 -07:00
Wang Mingyu
ada16eff73
abseil-cpp: upgrade 20250127.0 -> 20250127.1
0001-Actually-use-the-hint-space-instruction-to-strip-PAC.patch
removed since it's inclued in 20250127.1

abseil-cpp/0004-abseil-ppc-fixes.patch
refreshed for 20250127.1

Changelog:
=============
- Added support for Bazel 8.0
- Added support for Bazel Platforms for better portability
- Added ABSL_ATTRIBUTE_VIEW and ABSL_ATTRIBUTE_OWNER for diagnosing certain lifetime issues
- Many performance improvements
- A security issue in hash container create/resize has been fixed. Note that the latest patch releases for previous LTS versions also address this issue.
- Bazel BUILD files now reference repositories by their canonical names from the Bazel Central Registry.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:50 -07:00
Markus Volk
868c11831b
libcec: update 6.0.2 -> 7.0.0
Changelog

    modernise CMakeLists.txt
    Use cmake TIMESTAMP function to be more portable and to allow for reproducible builds
    fixed: potential null deref. closes #556
    python 3.13 compatibility
    added: vs2022 support
    fixed: creating (unsigned) windows installer
    fixed: nsis installer not creating start menu icons and uninstaller
    bump to .net framework 4.5 and .net 8.0
    fixed: null terminate .net device language field. added CecLogicalAddresses::Unset()
    fixed: don't call the config updated callback if nothing has changed. auto set wake devices or activate source so these values match what happens on the tv
    fixed: tv would power on even if the options to power on were disabled in cec-tray
    changed/fixed: windows installer, eventghost plugin, .net libraries, python imports, debug builds
    fixed: use input() for python3 and raw_input() for python2
    changed: debian python install to match arch specific too
    fixed: libusb0.dll wasn't included in the installer
    fixed: remove call to PyEcal_InitThreads(). swig already includes SWIG_PYTHON_INITIALIZE_THREADS in SWIG_init()
    CheckPlatformSupport.cmake: various improvements
    Ease copy-paste by invoking apt noninteractively
    Rename COPYING to LICENSE.md so follow standard naming conversion
    cecloader.h: fix null return
    Mark all devices as inactive when new active source is unknown
    Fix use after free in callbacks with results.
    Add a commandHandler callback to allow external libs to handle CEC commands themselves.
    Remove debug printfs.
    Attempt to fix race condition when freeing the callback wrapper.
    Allow command handler callback to intercept broadcast messages and fix inconsistent callback wrapper deletion again.
    Remove useless mutex.
    Remove useless 'keepResult' parameter and make sure the CCallbackWrap is only deleted once even in case of timeout.
    Fix Python module import
    fix assert issue with systemd udev
    tegra-cec support. closes #636
    Add support for Windows ARM64.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 01:24:19 -07:00
Markus Volk
b0a4bccd41 gnome-control-center: add PACKAGECONFIG knob for power-profiles
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 21:14:57 -07:00
Markus Volk
3ed96f035d upower-profiles-daemon: add recipe
0.30
----

Add support for configuring actions to be enabled or disabled over dbus:
  - Actions can be listed via `powerprofilesctl list-actions`
  - These can be controlled via `powerprofilesctl configure-action`
Add support for configuring whether PPD reacts to battery/AC charger events:
  - It can be queried and controlled via:
    `powerprofilesctl query-battery-aware` and
    `powerprofilesctl configure-battery-aware`
Add better better compatibility with kernel 6.14.

0.23
----

Bugfix release for a performance regression with users who manually
adjusted AMD dGPU settings using other software.

0.22
----

Since this release power-profiles-daemon is also battery-level aware and
some drivers use this value to be smarter at tuning their optimizations.
In particular both the AMD panel power action now uses a progressive approach,
changing the the ABM based on the battery percentage.

AMD p-state received various features and improvements:
 - it supports core performance boost when not in power-saver mode.
 - uses minimum frequency to lowest non-linear frequency
 - it is more impervious to faulty firmware and kernel bugs

Added support for changing DPM clocks on amdgpu, to explicitly set the DPM
clocks down to "low" when in power-saver mode.

The daemon command line interface now allows to disable logind and upower
integration.

Fixes handling of turbo_pct (now assumed as not present by default).

The systemd service lockdown settings have been restricted even more.

The systemd service starts later in the boot to avoid conflicts with
module loading.

0.21
----

Since this release power-profiles-daemon is battery-state aware and some drivers
use a more power efficient state when using the balanced profile on battery.
In particular both the AMD and Intel P-State drivers will use the
balance_power EPP profile, while for Intel one we also set the energy
performance bias to 8 (instead of 6).

This release also contains various fixes for the powerprofilesctl command line
tool when using the launch or version commands.
The tool is now better documented as we generate a manual page for it (if
python3-argparse is installed) and bash completions. We're even generating the
ZSH completions, but the install path must be provided.

The daemon command line interface has been improved for debugging, so use
--help-debug for further information.

The systemd service lockdown settings have been restricted even more.

Various code optimizations.

0.20
----

The project has moved under the freedesktop 'Upower' group. The service is
now advertised as 'org.freedesktop.UPower.PowerProfiles' in addition to the
previous 'net.hadess.PowerProfiles' for compatibility reasons.

This release adds support for:

* Multiple power-profiles-daemon drivers to load simultaneously.  This notably
  allows both CPU based control with amd-pstate or intel-pstate as well as
  ACPI platform profile based control.

* amdgpu panel power savings which uses dedicated hardware in systems with
  integrated Radeon graphics to decrease panel power consumption when the
  system is on battery.

This release also enables the test suite by default, so distribution vendors
should update packaging accordingly.

0.13
----

This release adds support for the AMD P-State driver that's been added to the
6.3 Linux kernel. This release also fixes mismatched profiles on some HP
laptops and some miscellaneous bug fixes.

0.12
----

This release adds support for the Intel "Energy Performance Bias" feature, which
can be used on hardware that doesn't have a platform_profile or doesn't support
HWP. It will also be used to eke out a bit more performance, or power, on systems
which already supported HWP.

More information is available in the README.

0.11.1
------

This release stops power-profiles-daemon from modifying the cpufreq driver when
driver when the user/administrator has chosen to disable the Intel P-State scaling
governor (eg. forcing a passive operation mode).

More information is available in the README.

0.11
----

This release fixes problems on Intel machines when the CPUs didn't support turbo at
all, or the performance scaling governor was built as default in the kernel.

It also adds better end-user documentation, fixes in the command-line tool to not
cause bug report tools to popup on not-uncommon errors, and a bug fix for running
on some systems with controllable charge speeds.

0.10.1
------

This release fixes a bug in the authorization codepath added in 0.10.0, where holding
a profile could still succeed despite having sent a denial to the calling process.

This release also makes the pylint test optional. It should not be used unless the goal
is to contribute patches to assuage it.

0.10.0
------

This release adds authorization checks for the profile holds and profile switching
features of the backend daemon, through polkit. It is recommended that all
distributions upgrade to this version as soon as possible.

This release also adds support for the "quiet" kernel platform profile used
in some systems.

0.9.0
-----

This release adds support for "holding" a power profile while running a task
or application, making it possible to switch to a performance profile during
a compilation, or to a power-saver profile when low on battery, reverting to
the original profile when done.

This release also removes the "inhibited" property for the performance profile,
which made it impossible to switch to that profile, and replaces it with the
"degraded" property which lists why performance is degraded.

Finally, the last used profile is now remembered across reboots.

0.8.1
-----

This release works-around a cosmetic issue in gnome-shell animations when
on battery and using the intel-pstate driver.

0.8

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 21:14:57 -07:00
Khem Raj
e71de0ad6b pipewire: Deduce branch name from PV
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc:Markus Volk <f_l_k@t-online.de>
2025-03-24 20:59:08 -07:00
Markus Volk
8f09c1aca9 pipewire: update 1.4.0 -> 1.4.1
This is a quick bugfix release that is API and ABI compatible with
previous 1.x releases.

  - Handle SplitPCM wrong channels specifications. This fixes some
    problems with disappearing devices.
  - Add backwards compatibility support for when the kernel does not
    support UMP. Also fix UMP output. This restores MIDI support for
    older kernels/ALSA.
  - Fix a crash in audioconvert because the resampler was not using the
    right number of channels.
  - Some compilation fixes and small improvements.

  - Don't emit events when disconnecting a stream. (#3314)
  - Fix some compilation problems. (#4603)

  - Bump the ROC requirement to version 0.4.0

  - Handle SplitPCM too few or too many channels. Add an error string
    to the device names when the UCM config has an error.
  - Add backwards compatibility support for when the kernel does not
    support UMP.
  - Configure the channels in the resampler correctly in all
    cases. (#4595)
  - Fix UMP output.
  - Use the right samplerate of the filter-graph in audioconvert in
    all cases.

  - Fix a crash with an incomming call.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 20:59:08 -07:00
Yoann Congal
39250b71d9 poke: Fix the reproducibility of installed scripts
Upstream does not support our default parallel "make -j install"[0]. So,
disable it with PARALLEL_MAKEINST = "-j1" to avoid non-reproducibility
where some scripts can be installed or not.

Explanation for the non-reproducibility:
There is a race condition between 2 actions at install around the
installed script in $pkgdatadir:
* Removal of existing scripts /usr/share/poke/*.pk
* Installation of default scripts in the same directory

Sadly, those 2 actions are not ordered. Depending on the build system
load, removal can (rarely) happen *after* the installation. In this
case, no script in present in /usr/share/poke/ when the install process
end.

[0]: https://sourceware.org/bugzilla/show_bug.cgi?id=32815#c1

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 20:59:08 -07:00
Khem Raj
7308156a13
protobuf: Add -latomic to CXXFLAGS
Adding to LDFLAGS works with LLD linker but not with BFD ld since it
gets added before the abseil-cpp libraries on linker cmdline which does
not link it and still finds the atomic function like `__atomic_store_8'
as missing

Use mipsarcho32 for override which covers both mips and mipsel

Thanks for suggestions - RAED [1]

[1] https://github.com/openembedded/meta-openembedded/pull/952

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 07:29:13 -07:00
Yi Zhao
e5271adea7
dnsmasq: upgrade 2.90 -> 2.91
ChangeLog:
https://thekelleys.org.uk/dnsmasq/CHANGELOG

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 07:29:13 -07:00
Hains van den Bosch
4e47dbbc6e
gitpkgv.bbclass: Fix broken git revison
The revision dictionary was built with keys from names list in Bitbake(setup_revisions()).
See:
https://git.openembedded.org/bitbake/commit/?id=2515fbd10824005fa7f34e87706000c079920366

And used to build names list in gitpkgv.bbclass in the old situation, see:
https://git.openembedded.org/meta-openembedded/commit/?id=2920d4909236106e1a36d56b3b20762a308ba3d4

Use name variable to build names list instead of revision variable.
Use append() now name variable is a string.

Old ipk file name:
enigma2_3.13+git3_1_3_0_9_c_7_0_a_4_f_a_6_9_d_6_7_0_1_7_b_b_9_f_7_f_4_d_d_9_d_6_1_0_a_8_c_3_d_20+31309c70a4-r0_dm920.ipk

New ipk file name:
enigma2_3.13+git21834+31309c70+31309c70a4-r0_dm920.ipk

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-22 09:58:08 -07:00
Markus Volk
7c03751b59
pipewire: dont create alsa links for native
This fixes:
ERROR: pipewire-native-1.4.0-r0 do_populate_sysroot: sstate found an absolute path symlink /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/sysroot-destdir/home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/recipe-sysroot-native/etc/alsa/conf.d/50-pipewire.conf pointing at /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/recipe-sysroot-native/usr/share/alsa/alsa.conf.d/50-pipewire.conf. Please replace this with a relative link.
ERROR: pipewire-native-1.4.0-r0 do_populate_sysroot: sstate found an absolute path symlink /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/sysroot-destdir/home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/recipe-sysroot-native/etc/alsa/conf.d/99-pipewire-default.conf pointing at /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/recipe-sysroot-native/usr/share/alsa/alsa.conf.d/99-pipewire-default.conf. Please replace this with a relative link.
ERROR: pipewire-native-1.4.0-r0 do_populate_sysroot: Failing task due to absolute path symlinks
ERROR: Logfile of failure stored in: /home/flk/poky/build/tmp/work/x86_64-linux/pipewire-native/1.4.0/temp/log.do_populate_sysroot.913232
ERROR: Task (virtual:native:/home/flk/poky/meta-openembedded/meta-multimedia/recipes-multimedia/pipewire/pipewire_1.4.0.bb:do_populate_sysroot) failed with exit code '1'

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-22 09:43:01 -07:00
Khem Raj
b4ab539e0f
lvgl: Upgrade to 9.2.2 release
Drop backported patches
Enable dependent options needed for thorvg packageconfig
Add packageconfig knob for lottie and its relationship with thorvg

Reviewed-by: Marek Vasut <marex@denx.de>
Cc: Marek Vasut <marex@denx.de>
Cc: Jaeyoon Jung <jaeyoon.jung@lge.com>
Cc: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-22 09:31:29 -07:00
Khem Raj
09b6a82dbf
python3-pybind11-json: Specify -DPYBIND11_USE_CROSSCOMPILING=ON to support pybind11 13.x
Add support for pkgconfig
Use python-native during build to avoid host variability

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-22 09:31:26 -07:00
Khem Raj
c71f8ef024
python3-pybind11: Build with -DPYBIND11_USE_CROSSCOMPILING=ON
Since we are cross-compiling this option is required with 3.13+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-22 09:31:25 -07:00
Leon Anavi
6482398bc3
python3-pybind11: Upgrade 2.12.0 -> 2.13.6
Upgrade to release 2.13.6:

- A new self._pybind11_conduit_v1_() method is automatically added
  to all py::class_-wrapped types, to enable type-safe
  interoperability between different independent Python/C++
  bindings systems, including pybind11 versions with different
  PYBIND11_INTERNALS_VERSION's. Supported on pybind11 2.11.2,
  2.12.1, and 2.13.6+.
- Using __cpp_nontype_template_args instead of
  __cpp_nontype_template_parameter_class.
- Properly translate C++ exception to Python exception when
  creating Python buffer from wrapped object.
- Adds an answer (FAQ) for "What is a highly conclusive and simple
  way to find memory leaks?".

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-22 09:31:25 -07:00
Khem Raj
5aa1d149d9
protobuf: Link with libatomic on riscv32
rv32 does not have compiler builtins for 64bit atomics

Fixes
| riscv32-yoe-linux-ld.lld: error: undefined reference: __atomic_load_8
| >>> referenced by /mnt/b/yoe/master/build/tmp/work/riscv32-yoe-linux/protobuf/5.29.4/recipe-sysroot/usr/lib/libabsl_cordz_info.so.2501.0.0 (disallowed by --no-allow-shlib-undefined)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-22 09:31:25 -07:00
João Henrique Ferreira de Freitas
7b836e6ed2
iwd: add systemv-init script
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-22 09:31:25 -07:00
Khem Raj
3f08abfc9c
webkitgtk3: Fix build on RISCV32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:35 -07:00
Khem Raj
59d15aa112
webkitgtk3: Fix build with clang and riscv
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:35 -07:00
Ross Burton
0906847f35
fbgrab: append to do_configure
This allows the default do_configure to run, which will run "make clean"
if needed.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:35 -07:00
Martin Jansa
98f9507a73
googletest: fix build with gcc-15
* some recipes which use googletest fail with:
  gtest/src/gtest_main.cc:32: recipe-sysroot/usr/include/c++/15.0.1/ciso646:46:4: error: #warning "<ciso646> is deprecated in C++17, use <version> to detect implementation-specific macros" [-Werror=cpp]
   46 | #  warning "<ciso646> is deprecated in C++17, use <version> to detect implementation-specific macros"
      |    ^~~~~~~

  backport a fix for this.

* see https://github.com/google/googletest/issues/4701

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
053d73ffd6
freeradius: 3.2.5 -> 3.2.7
ChangeLog:
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_6
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_7

* Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
0b1e0f24f2
drbd-utils: upgrade 9.28.0 -> 9.30.0
ChangeLog:
https://github.com/LINBIT/drbd-utils/blob/v9.30.0/ChangeLog

* Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
fd730c9269
strongswan: upgrade 6.0.0 -> 6.0.1
ChangeLog:
https://github.com/strongswan/strongswan/releases/tag/6.0.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Martin Jansa
351254e9e8
lvgl: fix build with gcc-15 when thorvg is enabled
* fixes:
  http://errors.yoctoproject.org/Errors/Details/848488/
  which is triggered only when thorvg PACKAGECONFIG is enabled

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Martin Jansa
baea74476a
lvgl: add PACKAGECONFIG for thorvg
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Martin Jansa
e6e2763c1b
webrtc-audio-processing-1: fix build with gcc-15
* fixes:
  http://errors.yoctoproject.org/Errors/Details/848476/
  ../webrtc-audio-processing-1.3/webrtc/api/task_queue/task_queue_base.h:53:32: error: 'uint32_t' has not been declared
   53 |                                uint32_t milliseconds) = 0;
      |                                ^~~~~~~~

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Martin Jansa
5bca3a7b5d
android-tools: fix build with gcc-15
* fixes build with gcc-15:
  http://errors.yoctoproject.org/Errors/Details/848455/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Martin Jansa
bf70a66775
iperf3: fix build with gcc-15
* fixes:
  http://errors.yoctoproject.org/Errors/Details/848456/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Martin Jansa
f19750acc1
iftop: fix build with gcc-15
fixes:
http://errors.yoctoproject.org/Errors/Details/848458/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Martin Jansa
d760c1acce
libconfig: fix build with gcc-15
* backport fix from:
  690342b9cb
  to fix:
  http://errors.yoctoproject.org/Errors/Details/848457/
  grammar.y:58:33: error: too many arguments to function 'libconfig_yyget_lineno'; expected 0, have 1

* need to add bison-native dependency while grammar.y is modified
  with the above patch to fix:
  http://errors.yoctoproject.org/Errors/Details/848472/
  ../aux-build/ylwrap: line 174: yacc: command not found

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Hongxu Jia
d6810ba581
python3-protobuf: 4.25.3 -> 5.29.4
License-Update: no chnage

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Hongxu Jia
d9daf66b11
protobuf: 4.25.5 -> 5.29.4
Refresh local patches
- 0001-Fix-build-on-mips-clang.patch
- 0001-examples-Makefile-respect-CXX-LDFLAGS-variables-fix-.patch

Fix protobuf-native build failure with gcc 10

Fix dev-elf QA issue:
|ERROR: protobuf-5.29.4-r0 do_package_qa: QA Issue: -dev package protobuf-dev contains
non-symlink .so '/usr/lib/libutf8_range.so' [dev-elf]
|ERROR: protobuf-5.29.4-r0 do_package_qa: QA Issue: -dev package protobuf-dev contains
non-symlink .so '/usr/lib/libutf8_validity.so' [dev-elf]

Changelog:
https://github.com/protocolbuffers/protobuf/releases/tag/v29.4

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Wang Mingyu
eee1e11a4d
gnome-chess: upgrade 47.0 -> 48.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:32 -07:00
Wang Mingyu
73b610381a
gnome-backgrounds: upgrade 47.0 -> 48.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:32 -07:00
Wang Mingyu
46dadaa274
gjs: upgrade 1.82.1 -> 1.84.1
0001-Support-cross-builds-a-bit-better.patch
0002-meson.build-Do-not-add-dir-installed-tests-when-inst.patch
refreshed for 1.84.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:32 -07:00
Khem Raj
04243f6ee4
grubby: Do not inherit autotools class
The package uses simple Makefile for building

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:32 -07:00
Peter Marko
60eb0214e7
libmad: patch CVE-2017-8372 and CVE-2017-8373
Pick patch [1] from Debian based on [2].

[1] https://salsa.debian.org/multimedia-team/libmad/-/raw/debian/0.15.1b-11/debian/patches/length-check.patch?ref_type=tags
[2] https://security-tracker.debian.org/tracker/CVE-2017-8374

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 19:36:50 -07:00
Peter Marko
437635f608
libmad: patch CVE-2017-8372 and CVE-2017-8373
Pick patch [1] from Debian based on [2] and [3].

[1] https://salsa.debian.org/multimedia-team/libmad/-/blob/debian/0.15.1b-11/debian/patches/md_size.diff?ref_type=tags
[2] https://security-tracker.debian.org/tracker/CVE-2017-8372
[3] https://security-tracker.debian.org/tracker/CVE-2017-8373

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 19:36:50 -07:00
Peter Marko
fee86a312f
libmad: ignore CVE-2017-11552 and CVE-2018-7263
These CVEs are for mpg321, not libmad.
See Debian assessment:
* https://security-tracker.debian.org/tracker/CVE-2017-11552
* https://security-tracker.debian.org/tracker/CVE-2018-7263

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 19:36:50 -07:00
Peter Marko
0dcbb0b5d4
libmad: extend CVE_PRODUCT
Catch more CVEs by adding additional product per

sqlite> select vendor, product, count(*) from products where product like '%libmad%' group by vendor, product;
underbit|libmad|1
underbit|mad_libmad|4

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 19:36:50 -07:00
Khem Raj
ad2687be02
sedutil: Upgrade to latest on tip of master branch
- Drop upstreamed patch

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 17:57:31 -07:00
Jason Schonberg
b14543cd26
hiawatha: upgrade 11.1 -> 11.2
Changelog: https://hiawatha.leisink.net/changelog

    mbed TLS updated to 3.2.1.
    Small improvements.

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 15:17:23 -07:00
Peter Marko
4058959d6c
freerdp3: set CVE_PRODUCT
CPE does not contain mnajor version number, so set VE product to just
freerdp.
Without this there are no (fixed) CVEs in reports.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 14:21:07 -07:00
Peter Marko
a7f2051068
freerdp: mark CVE-2024-32662 as fixed
2.x is not affected, bug was introduced in 3.0.0.
See e.g. https://security-tracker.debian.org/tracker/CVE-2024-32662

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 14:21:07 -07:00
Peter Marko
c91d6a2c65
freerdp: patch CVE-2024-32661
Pick commit [1] as mentioned in [2] or [3].

[1] 71e463e31b
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-32661
[3] https://security-tracker.debian.org/tracker/CVE-2024-32661

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 14:21:07 -07:00
Leon Anavi
115faefc47
python3-pylint: Upgrade 3.3.4 -> 3.3.6
Upgrade to release 3.3.6:

- Fix a false positive for used-before-assignment when an inner
  function's return type annotation is a class defined at module
  scope.
- Fix false positives for use-implicit-booleaness-not-comparison,
  use-implicit-booleaness-not-comparison-to-string and
  use-implicit-booleaness-not-comparison-to-zero when chained
  comparisons are checked.
- Fix a false positive for invalid-getnewargs-ex-returned when the
  tuple or dict has been assigned to a name.
- Remove getopt and optparse from the list of deprecated modules.
- Fixed conditional import x.y causing false positive
  possibly-used-before-assignment.
- Fix a crash when something besides a class is found in an except
  handler.
- Fixed raising invalid-name when using camelCase for private
  methods with two leading underscores.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 14:21:07 -07:00
Wang Mingyu
2f629f4baa
geos: upgrade 3.12.1 -> 3.13.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 09:04:50 -07:00