Commit Graph

79583 Commits

Author SHA1 Message Date
Leon Anavi
e91bc261dc connman: Upgrade 1.44 -> 1.45
Upgrade to release 1.45:

- Add missing newlines on error messages
- timezone: Replace Localtime file copy with symbolic link
- Fix CVE-2025-32366 vulnerability
- Fix CVE-2025-32743 vulnerability
- vpn: Fix extracting of PrefixLength D-Bus value
- vpn: Fix mem leak of gid_list in task setup
- dchpv6: Set err to 0 when client creation succeeds

(From OE-Core rev: c5fd636aa6f310e868ea29a72913ea96edcf57c5)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:21 +01:00
Peter Marko
4f531677b8 vim: upgrade 9.1.1198 -> 9.1.1652
Handles CVE-2025-53905, CVE-2025-53906, CVE-2025-55157, CVE-2025-55158.

Changes between 9.1.1198 -> 9.1.1652
====================================
https://github.com/vim/vim/compare/v9.1.1198...v9.1.1652

Refresh patches.
Add tag to SRC_URI.

Disable newly introduced wayland support (in patch version 1485).
To this belongs also adding recursion in delete command for dir auto
which was newly failing as there is wayland directory inside now.
If someone is interested, this can be probably enabled, but without
additional work it results in compilation error due to function
redefinition conflicts.

(From OE-Core rev: e87d427d928234ef0441f9ce1fe8631fbe471094)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:21 +01:00
Khem Raj
851c7e56c3 findutils: Use C locale to run ptests
Ensure consistent locale setting, since we are not
using make environemnt to run the tests like
upstream does. The test scripts are run explicitly

This fixes a problem with musl ptest runs where the
locale-driven quoting ends up using C.UTF-8 quotes
in gnulib’s quotearg() end up with curly quotes
instead of ASCII quote character which is expected
and result is reported as failure even though numbers
are matching.

Fixes:

-find: invalid group name or GID argument to -group: '4294967296'
+find: invalid group name or GID argument to -group: ‘4294967296’

FAIL: tests/find/user-group-max.sh

(From OE-Core rev: 0e60d1169ee0ae0e6651951e9a917a0e24bee157)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:21 +01:00
Khem Raj
93ba61423c findutils: Drop setting gl_cv_func_wcwidth_works=yes
The issue seems to be have been fixed for long time since 4.5.3 onwards

(From OE-Core rev: 6637e59d6bc03f8eb7cf75bc506307e249809ada)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:21 +01:00
Ross Burton
672c55172d babeltrace2: don't install static modules
There's no point building or installing static plugins, so apply a patch
to only build shared plugins.

Poky passes --disable-static via no-static-libs.inc, but anyone building
babeltrace2 with nodistro or another distro that doesn't use
no-static-libs.inc will fail to build babeltrace2 because of packaging
errors around the static version of the python plugin.

(From OE-Core rev: cf5ef8a2b6f509c348b9cf800a8534a4e8702103)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:21 +01:00
Ross Burton
dae1dcaa8f nghttp2: rewrite recipe to be an idiomatic library recipe
This recipe for nghttp2 doesn't build any of the binaries, just the core
library, but is structured like a recipe that is primarily an application
that happens to ship libraries.

Remove the lib${BPN} package and put the library into PN (which will then
be debian-renamed).

Use the shorthand option to just build the library.

Add documentation enabling/disabling options so we don't install the
docs if not needed. Currently there are no extra dependencies as the
sphinx-generated manpages are pre-built in the tarballs, but this could
change.

(From OE-Core rev: 0fe1fb05cf6b36d70d43b3bd245a53ac36d389fa)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:21 +01:00
Falk Bauer
47b1a709ab psplash: Do not mount PSPLASH_FIFO_DIR if the env variable is empty
The script file psplash.sh tries to mount the PSPLASH_FIFO_DIR variable.
If the variable is empty, the mountpoint command returns a usage text
(busybox mountpoint here, util-linux mountpoint behaves the same):

BusyBox v1.37.0 () multi-call binary.
Usage: mountpoint [-q] { [-dn] DIR | -x DEVICE } :~# BusyBox v1.37.0
() multi-call binary

The return code with this console output is 0 and the mount command in the
if statement is executed.
Then this mount also fails with an empty mountpoint argument.
The source code of psplash respects an empty PSPLASH_FIFO_DIR variable
(see psplash.c) and makes a fallback to "/run". So the psplash.sh script should
also respect the empty var.

Try to mount the PSPLASH_FIFO_DIR only if the variable is not empty.

(From OE-Core rev: 85a5e562c5969c407a222966ccb3170cb41fed2f)

Signed-off-by: Falk Bauer <falkbauer.git@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
0a8268ebd0 python3-rpds-py: Upgrade to 0.27.0
Allow packaging of wheels for riscv64 architecture

(From OE-Core rev: 56a32c0b0294d55e75ea54046fb1508f9ff17e4b)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
efbba14b4d python3: Pass PLATFORM_TRIPLET explicitly when cross compiling
Do not rely on how python detects the platform triplet

We have been lucky to get it cross-compiling since our build hosts
are also using glibc, so the headers and gcc install locations match
and the values it detects are mostly what we will need for glibc
based targets, but when we use musl e.g. the problems show up where
python3 is not able to automitically discover python modules so any
python package having compiled .so modules fail to load.

Example is ptest failures with TCLIBC = "musl"
and running core-image-ptest-python3-rpds-py

This is revamp of patch [1], currently its working for glibc
based cross-compiling because we build on linux systems which are also
glibc based, but python on musl shows the problem.
When python was upgraded to 3.12 [2], this patch was wrongly dropped
and sadly regression went unnoticed, without this patch
Python's automatic module discovery does not work when it is cross-compiled
this is because it tries host tools and compiler installation during configure
to detect it. .so modules e.g. modulename.cpython-*.so are not seen as a result.

This is seen when running python3-rpds-py ptests where it should load
rpds.cpython-313-x86_64-linux-musl.so rpds.so but it does not and the module test
fail.

root@qemux86-64:/usr/lib/python3-rpds-py/ptest# python3 -c "
 import sysconfig
 import importlib.machinery
 print('Extension suffixes:', importlib.machinery.EXTENSION_SUFFIXES)
 print('Soabi:', sysconfig.get_config_var('SOABI'))
 print('Ext suffix:', sysconfig.get_config_var('EXT_SUFFIX'))
 print('Module suffix:', sysconfig.get_config_var('SO'))
 "
Extension suffixes: ['.cpython-313.so', '.abi3.so', '.so']
Soabi: cpython-313
Ext suffix: .cpython-313.so
Module suffix: None

And after fix it is.

root@qemux86-64:~# python3 -c "
 import sysconfig
 import importlib.machinery
 print('Extension suffixes:', importlib.machinery.EXTENSION_SUFFIXES)
 print('Soabi:', sysconfig.get_config_var('SOABI'))
 print('Ext suffix:', sysconfig.get_config_var('EXT_SUFFIX'))
 print('Module suffix:', sysconfig.get_config_var('SO'))
 "
Extension suffixes: ['.cpython-313-x86_64-linux-musl.so', '.abi3.so', '.so']
Soabi: cpython-313-x86_64-linux-musl
Ext suffix: .cpython-313-x86_64-linux-musl.so
Module suffix: None

[1] https://git.openembedded.org/openembedded-core/commit/?id=407744b00d702e3133304e1b43064a5634ca02cf
[2] https://git.openembedded.org/openembedded-core/commit/?id=716d82352545d3667a658b69d65d6127678dd150

(From OE-Core rev: 7bb157e48f5e5272db7506c7eb3118209dc3b35f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
86f54ee3cd libc-test: Ignore fma math tests
(From OE-Core rev: 135a572cdb7c7cf487aa46ef1a5500b81593a30a)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
28eb7f6633 libc-test: Fix strptime and api/main tests
(From OE-Core rev: 124921683e9a0a1d981eaeea717c5dd7d35abf90)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
fa6f6b182c libc-test: Upgrade to tip of trunk
Brings following changes

functional: add mntent test
fix malloc-brk-fail
math: add fma(x,y,z) test cases for z=0 and x*y rounds to -0

(From OE-Core rev: 393ecfe64065aafdcc6c37d8374c9a3ece748d7a)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
a0c40abc3c elfutils: Add run-backtrace-{native|data}.sh to known failures
musl's thread startup/teardown sequences and frame-pointer handling
differ from glibc. elfutils can fail to terminate unwinds properly
in multithreaded musl apps which leads to truncated or bogus traces
and then the test's "must contain main" assertion fails.

Skip this test on musl systems

(From OE-Core rev: 6f89b8386b70d35cb27bb90348857ddecda5ed3e)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
542af25cfa lttng-tools: Fix build with libcxx runtime
(From OE-Core rev: d66afee0a040e4417db774425297ca43497f5386)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
fd0ba87ae0 lltng-tools: Fix build with lld linker
liblttng-ctl is exposting undefined symbols which are provided by
libcommon-gpl.a and is not linked into liblttng-ctl.so

(From OE-Core rev: a555a7525beebd4a6103755a6e6df6aa2e4ee7de)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
72d1535163 m4: Fix ptest on musl
Fixes
../../sources/m4-1.4.20/tests/test-c32ispunct.c:261: assertion 'is == 0' failed
./test-c32ispunct.sh: line 36:   402 Aborted
(core dumped) LC_ALL="$testlocale" ${CHECKER} ./test-c32ispunct${EXEEXT} 3

FAIL: test-c32ispunct.sh

(From OE-Core rev: f39537e8b84d0640fb8a7406ebf2396b532cdb57)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Peter Marko
16287e7cb4 Revert "dpkg: set status for CVE-2025-6297"
This reverts commit 5dce840ba8.

CVE entry was corrected in NVD DB.
It looks like NVD is now getting faster and more reliable with
annotations...

(From OE-Core rev: 3a5bfe4c4db692f10aab090a73c412eb75ea1bb5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Cc: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Bruce Ashfield
5c6a3df824 linux-yocto/6.16: update CVE exclusions (6.16.2)
Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 2 changes (2 new | 0 updated): - 2 new CVEs: CVE-2025-9248, CVE-2025-9249 - 0 updated CVEs:
        Date: Wed, 20 Aug 2025 21:10:37 +0000

    ]

(From OE-Core rev: f7779d034bffcfacfb2c01daa6cdfbe2e412396c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Bruce Ashfield
9cd0057980 linux-yocto: introduce 6.16 reference kernels
Adding the 6.16 reference kernels as our latest reference for
the fall 2025 release.

This has been tested against:

  - x86, x86-64
  - ppc
  - mips, mips64
  - arm, arm64
  - riscv32, riscv64

The -standard, -rt and -tiny variantes have been validated.

For various iamges. All testing done under qemu, hardware
references will follow later.

(From OE-Core rev: 9b15846663bb4997403f3692c4b6b5a80dd90d52)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-25 17:47:20 +01:00
Khem Raj
e7423ae09e strace: Fix uio test and ignore pwritev|pwrite64 tests on musl
The pwritev and pwrite64 are wrappers over pwritev2 syscall in
musl but strace assumes glibc behavior, ignore them for now

(From OE-Core rev: 38f4f3bfbe2f9625737af15422423b00c32ee076)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
9bdc31dcc9 nghttp2: remove nghttp2-proxy
fix issue that:
 | nothing provides nghttp2-proxy >= 1.66.0 needed by nghttp2-1.66.0-r0.core2_64 from base

nghttp2-proxy is supposed to involve files ${bindir}/nghttpx and ${datadir}/${BPN}/fetch-ocsp-response

But now nghttp2-proxy will not be created because:
1. ENABLE_APP=OFF in EXTRA_OECMAKE makes ${bindir}/nghttpx not be produced
2. 1.66.0 version has removed fetch-ocsp-response-file according to the Changelog

| cat /tmp/work/aarch64-ubinux-linux/nghttp2/1.66.0/sources/nghttp2-1.66.0/ChangeLog
| ....
| nghttpx: Remove OCSP stapling
|
| This commit removes OCSP stapling features and the following options
| are deprecated and have no effect:
|
| - fetch-ocsp-response-file
| - no-ocsp
| - no-verify-ocsp
| - ocsp-update-interval

(From OE-Core rev: 7008e2d00165991bf218ca2f96fb34244e518456)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Khang D Nguyen
2ba3de2078 systemd.bbclass: deduplicate template and instance lines in preset file
If SYSTEMD_SERVICE contains both template and instance names, the
preset file will contain two lines: one describing the template name
and one describing the instance names.

This is problematic because systemd.preset only use the first matching
one [1], leading to the instances not getting enabled.

For example, openbmc's obmc-console recipe has the following
final SYSTEMD_SERVICE variable:

```
SYSTEMD_SERVICE:obmc-console = " \
obmc-console@.service \
obmc-console-ssh@.service \
obmc-console-ssh@2200.service \
"
```

The resulting preset file will contain lines with the same name:

```
enable obmc-console@.service
enable obmc-console-ssh@.service
enable obmc-console-ssh@.service 2200
```

Fix this by interpreting the template name as a special case of empty
instances.

Tested: preset files are generated correctly:

```
enable obmc-console@.service
enable obmc-console-ssh@.service 2200
```

[1]: https://www.freedesktop.org/software/systemd/man/257/systemd.preset.html#Preset%20File%20Format

Fixes: f33d9b1f434e ("systemd.bbclass: generate preset for templates")
(From OE-Core rev: 7cdf10840c200a327b6336775698342af7212ee4)

Signed-off-by: Khang D Nguyen <khangng@os.amperecomputing.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Alexander Kanavin
11817b180e fragments/autobuilder: add go to SDK_TOOLCHAIN_LANGS
For reasons unknown, only rust was listed, which means
nativesdk-go was not built or tested, which lead to
breakage like one fixed in
https://git.yoctoproject.org/poky/commit/?id=a669cd2e0c760da9d7e872daea9590fc9e86d766

Note that with this change only building and installing go
into SDKsis tested, but no tests are performed with the
toolchain itself in testsdk/testimage.

For that, a bug has been filed:
https://bugzilla.yoctoproject.org/show_bug.cgi?id=15953

Remove go from x32 and mingw targets as it will not build for them.
(next to similar removals for rust)

(From OE-Core rev: 7f9e3c2c60a2d73b3728d07519471f0614c03130)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Alexander Kanavin
5f1aeaf606 goarch.bbclass: do not leak TUNE_FEATURES into crosssdk task signatures
The default assignments look like this:
TARGET_GO386 = "${@go_map_386(d.getVar('TARGET_ARCH'), d.getVar('TUNE_FEATURES'), d)}"

TUNE_FEATURES is a target-specific variable, and so should be used
only for target builds. The change is similar to what is already done
for native packages.

(From OE-Core rev: cfff8e968257c44880caa3605e158764ed5c6a2a)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Osama Abdelkader
62e64c4a64 init-system-helpers: upgrade 1.68 -> 1.69
Changes:
Add postinst to hotfix an upgrade bug on certain newly live-installed
systems built using Trixie's live-build (Closes: #1111039)

Full changelog:
https://salsa.debian.org/debian/init-system-helpers/-/blob/debian/1.69/debian/changelog

(From OE-Core rev: 99a1a0a8116eabd31bc25252fdea9aee287d158b)

Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Joshua Watt
02c8355a81 spdx30_tasks: Change package license to declared
Per discussion with SPDX licensing group, the package license statements
classify as declared licenses, not concluded licenses.

Note that this is the same as a change made to the recipe licenses, just
for packages.

(From OE-Core rev: 61ba0ef1400a2fa3729473e496e8459cbbba73ad)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Peter Marko
a1a8e1ee3e glib-2.0: patch CVE-2025-6052
Backport commits from [1] which references this CVE.

[1] https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4681

(From OE-Core rev: 4b1166dd58cfd672ae326d0a1b1f6167be4877c5)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Peter Marko
48b9d34450 glib-2.0: update 2.84.2 -> 2.84.4
Overview of changes in GLib 2.84.4, 2025-08-08
==============================================
* Bugs fixed:
  - #3716 (CVE-2025-7039) (#YWH-PGM9867-104) Buffer Under-read on GLib through
    glib/gfileutils.c via get_tmp_file() (Michael Catanzaro)
  - #3721 GFile leak in g_local_file_set_display_name during error handling
    (Philip Withnall, Michael Catanzaro)
  - !4668 Backport !4667 “Incorrect output parameter handling in closure helper
    of g_settings_bind_with_mapping_closures” to glib-2-84
  - !4675 Backport !4674 “gfileutils: fix computation of temporary file name” to
    glib-2-84
  - !4679 Backport !4677 and !4678 “Fix GFile leak in
    g_local_file_set_display_name()” to glib-2-84
  - !4697 Backport !4696 “gthreadpool: Catch pool_spawner creation failure” to
    glib-2-84
  - !4705 Backport !4702 “gio/filenamecompleter: Fix leaks” to glib-2-84
  - !4711 Backport !4708 “gfilenamecompleter: Fix g_object_unref() of undefined
    value” to glib-2-84

Overview of changes in GLib 2.84.3, 2025-06-13
==============================================
* Bugs fixed:
  - !4656 Backport !4655 “gstring: Fix overflow check when expanding the string”
    to glib-2-84

!4656 solves first half of CVE-2025-6052

(From OE-Core rev: 1b78742a8685b43df82b74baf4518b3437472d93)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Osama Abdelkader
2610ae9e28 squashfs-tools: upgrade 4.7 -> 4.7.2
Changes:
Fix build with non-static include
print_pager: make inline quoted_bs_char() static

Release notes:
https://github.com/plougher/squashfs-tools/releases/tag/4.7.2

(From OE-Core rev: ccba60186ba9b71bce8f5158b423d09d9d1bb851)

Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Ricardo Salveti
34df6b71b9 initramfs-framework: mount /run and move to rootfs before switch_root
Mount /run as tmpfs during early init and include it in the set of
mounts moved to $ROOTFS_DIR prior to exec switch_root.

Having /run available early lets initramfs modules stamp state that can
later influence systemd service jobs, since systemd will reuse the mount
point instead of creating a new one during boot.

This is particularly useful with ostree, as it uses /run/ostree-booted
as way to describe that the rootfs comes from an ostree deployment.

(From OE-Core rev: 3a4bd7ddefbf5b412a2b4031d491f5a50f1908cd)

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
81d31fbd6a gst-examples: upgrade 1.26.3 -> 1.26.5
Refer to release note, no changes this time
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: 72c3e493ab1899f39b89de9c41f5af2b0178f61b)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
7050b09926 gstreamer1.0-plugins-ugly: upgrade 1.26.3 -> 1.26.5
Refer to release note, no changes this time
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: b67f93b12533a449e6cc43e4a19ee35b64299967)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
4e6176c047 gstreamer1.0-plugins-bad: upgrade 1.26.3 -> 1.26.5
Changelog:
===========
- av1parse: Don't error out on "currently" undefined seq-level indices
- av1parse: fails to parse AV1 bitstreams generated by FFmpeg using the av1_nvenc hardware encoder
- d3d12screencapturedevice: Avoid false device removal on monitor reconfiguration
- d3d12screencapturesrc: Fix OS handle leaks/random crash in WGC mode
- meson: d3d12: Add support for MinGW DirectXMath package
- va: Re-negotiate after FLUSH
- vaXXXenc: calculate latency with corrected framerate
- vaXXXenc: fix potential race condition
- vkphysicaldevice: enable sampler ycbcr conversion, synchronization2 and timeline semaphore features
- vulkan: ycbcr conversion extension got promoted in 1.1.0
- wasapi2: Port to IMMDevice based device selection

Release note:
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: 90d9bc31804486a3ddfb9e22b09735347a2f982a)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
255a288815 gstreamer1.0-plugins-good: upgrade 1.26.3 -> 1.26.5
Changelog:
==========
- v4l2: fix memory leak for dynamic resolution change
- videorate, imagefreeze: add support for JPEG XS

Release note:
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: 14411ae154e42fb5b1cbb9b88c4f1ea1e1df2d42)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
f05e480625 gstreamer1.0-plugins-base: upgrade 1.26.3 -> 1.26.5
Changelog:
=================
- audioconvert: Fix regression when using a mix matrix
- audioconvert: mix-matrix causes caps negotiation failure
- decodebin3: Don't error on an incoming ONVIF metadata stream
- gloverlay: Recompute geometry when caps change, and load texture after stopping and starting again
- uridecodebin3: Add missing locking and NULL checks when adding URIs to messages
- uridecodebin3: segfault in update_message_with_uri() if no decoder available
- videorate, imagefreeze: add support for JPEG XS
- gst-device-monitor-1.0: Add shell quoting for launch lines
- gst-device-monitor-1.0: Fix criticals, and also accept utf8 in launch lines
- gst-device-monitor-1.0: Use gst_print instead of g_print

Refer to release note, no changes this time
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: e6822a050a3aeaa6a29a6a0210e3fdcd8180dc74)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
43a487b04d gstreamer1.0-rtsp-server: upgrade 1.26.3 -> 1.26.5
Refer to release note, no changes this time
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: 02db2caf16e9655e409361dd97a369a0d38df2ac)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
ea6d2ad808 gstreamer1.0-vaapi: upgrade 1.26.3 -> 1.26.5
Refer to release note, no changes this time
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: bedfd3da7a75fad707c87f27343e6034d384dd99)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
d172579b68 gstreamer1.0: upgrade 1.26.3 -> 1.26.5
Changelog:
==================
- aggregator: add sub_latency_min to pad queue size
- build: Disable C5287 warning on MSVC

Release note:
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: 2a2ba99ff12b7c91cb6643551320b14fb9f8d2c9)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
73db6f3f31 gstreamer1.0-python: upgrade 1.26.3 -> 1.26.5
Refer to release note, no changes this time
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: 567d5bc1da4ee53d0d354472ee9146f845fe5ea6)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
d1b7468982 gstreamer1.0-libav: upgrade 1.26.3 -> 1.26.5
Refer to release note, no changes this time
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: d83ef61767d235979282fe98b3074704583a29da)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Liu Yiding
00002627a9 gst-devtools: upgrade 1.26.3 -> 1.26.5
Refer to release note, no changes this time
https://gstreamer.freedesktop.org/releases/1.26/#1.26.5

(From OE-Core rev: 2be75a9d629495290f95322bb9400fada7cc99c8)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Moritz Haase
20ed34abb6 libcomps: upgrade 0.1.21 -> 0.1.22
The project did not publish release notes, but the list of changes is available
at [0]. The new release brings a fix for [1] and ships the patch to build with
CMake 4+.

[0]: https://github.com/rpm-software-management/libcomps/compare/0.1.21...0.1.22
[1]: https://bugzilla.redhat.com/show_bug.cgi?id=2331665

(From OE-Core rev: c780e8a17d80de4d2845092874153a4bb29f7493)

Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Richard Purdie
4a2831e872 distro_alias: Remove file
This had specific uses a long time ago but hasn't been maintained and is now out
of date to the point of being questionable value. Drop it.

(From OE-Core rev: f911cf3beb9b7a761b75c676238df69eb92a6c2b)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Richard Purdie
fe518d0d10 babeltrace: Remove in favour of babeltrace2
This version is deprecated and replaced by babeltrace2. Drop the older version
so we can focus efforts around the newer one.

(From OE-Core rev: d16a5e05b3f383d21a1970c6613494416a7503c2)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:29:56 +01:00
Jon Mason
08d87537b8 genericarm64: change QB_DEFAULT_FSTYPE to wic.zst
meta-yocto rev 506379cb241e6a865139307e06216a07f737b602
changed the IMAGE_FSTYPES to wic.zst but did not change
QB_DEFAULT_FSTYPE to match.  This is causing the error:
runqemu - ERROR - Failed to find rootfs

Change the QB_DEFAULT_FSTYPE and it works as before (only now runqemu
requires the 'snapshot' parameter).

(From meta-yocto rev: 24857a05b0c2cc70733f245cf9614ef5fb126647)

Signed-off-by: Jon Mason <jon.mason@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-21 10:09:47 +01:00
Richard Purdie
5424fc6186 lttng-tools: Disable slow tests to fix ptest runs
Add a patch disabling some ptests in lttng-tools since they are slow, give
no output on the console and cause the ptest run to error due to our 450s
inactivity timeout.

(From OE-Core rev: 328d5c9a1dcfa4c636fd6d6e05f2474c15dc9f7a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-19 11:48:50 +01:00
Mingli Yu
c251eba521 lttng-tools: Remove the scope resolution operator
Remove the scope resolution operator :: to fix the below build failure.
 | ../../../sources/lttng-tools-2.14.0/src/common/eventfd.cpp:18:31: error: expected id-expression before numeric constant
 |    18 |                 int flags = ::EFD_CLOEXEC;
 |       |                               ^~~~~~~~~~~
 | ../../../sources/lttng-tools-2.14.0/src/common/eventfd.cpp:21:36: error: expected id-expression before numeric constant
 |    21 |                         flags |= ::EFD_SEMAPHORE;
 |       |

(From OE-Core rev: 607b27a42a53377e9d4cc6fa1abe335dde5c770b)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-19 11:48:50 +01:00
Mingli Yu
4fd63f7ec3 lttng-tools: Upgrade 2.13.15 -> 2.14.0
* Remove 3 backported patch.
0001-Fix-rotation-destroy-flush-fix-session-daemon-abort-.patch
0001-compat-Define-off64_t-as-off_t-on-linux.patch
0001-tests-add-check_skip_kernel_test-to-check-root-user-.patch

* Remove 0001-fix-lttng-tools-fails-to-compile-with-libxml2-2.14.0.patch
as the issue has been fixed in another way as [1].

* Rebase 0001-tests-do-not-strip-a-helper-library.patch and disable-tests.patch
to fuzz issue.

* Add babeltrace2 to DEPENDS to fix below configure error.
 | configure: error: libbabeltrace2 is required to build tests

* src/common/config/session.xsd is restructured to src/common/session.xsd [2].

* Add 0001-gen-ust-events-constructor-change-rpath-to-libdir-li.patch to fix
the below buildpath QA issue.
ERROR: lttng-tools-2.14.0-r0 do_package_qa: QA Issue: File /usr/lib/lttng-tools/ptest/tests/utils/testapp/gen-ust-events-constructor/gen-ust-events-c-constructor-so in package lttng-tools-ptest contains reference to TMPDIR [buildpaths]
ERROR: lttng-tools-2.14.0-r0 do_package_qa: QA Issue: lttng-tools-ptest: /usr/lib/lttng-tools/ptest/tests/utils/testapp/gen-ust-events-constructor/gen-ust-events-c-constructor-so contains bad RPATH /buildarea3/myu2/yocto/builds/ptest-2025-07-09/tmp/work/core2-64-poky-linux/lttng-tools/2.14.0/build/tests/utils/testapp/gen-ust-events-constructor [rpaths]
ERROR: lttng-tools-2.14.0-r0 do_package_qa: QA Issue: File /usr/lib/lttng-tools/ptest/tests/utils/testapp/gen-ust-events-constructor/gen-ust-events-constructor-so in package lttng-tools-ptest contains reference to TMPDIR [buildpaths]
ERROR: lttng-tools-2.14.0-r0 do_package_qa: QA Issue: lttng-tools-ptest: /usr/lib/lttng-tools/ptest/tests/utils/testapp/gen-ust-events-constructor/gen-ust-events-constructor-so contains bad RPATH /buildarea3/myu2/yocto/builds/ptest-2025-07-09/tmp/work/core2-64-poky-linux/lttng-tools/2.14.0/build/tests/utils/testapp/gen-ust-events-constructor [rpaths]

* Add the redpends for lttng-tools-ptest to fix the test failure.
 ERROR: tools/live/test_early_inactive_app.py
============================================

Traceback (most recent call last):
  File "/usr/lib/lttng-tools/ptest/tests/regression/./tools/live/test_early_inactive_app.py", line 21, in <module>
    import lttngtest
  File "/usr/lib/lttng-tools/ptest/tests/utils/lttngtest/__init__.py", line 9, in <module>
    from .environment import *
  File "/usr/lib/lttng-tools/ptest/tests/utils/lttngtest/environment.py", line 13, in <module>
    import random
ModuleNotFoundError: No module named 'random'
ERROR: tools/live/test_early_inactive_app.py - missing test plan

ModuleNotFoundError: No module named 'random'
ModuleNotFoundError: No module named 'xml'
ModuleNotFoundError: No module named 'tempfile'
ModuleNotFoundError: No module named 'json'
ModuleNotFoundError: No module named 'bt2'

[1] 2d2e77ddc9
[2] 4ae042345b

RP: Added install of missing expect scripts
    Add new dependency on lttng-ust-dev due to test requirement (and remove QA check warning)
    Add missing dependency on python3-asyncio for concurency module

(From OE-Core rev: a09c0fa79cba48c76ed9b582e42becff91f32435)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-19 11:48:50 +01:00
Michael Jeanson
975fd7de31 babeltrace2: Fix python bindings ptests
The python bindings ptests weren't functional. This patch:

  * Adds a patch to allow the tests to be executed on target standalone
  * Sets a variable to allow the right install path to be passed to setup.py
  * Sets the right paths in the ptest runner script for the python modules
  * Installs the missing data needed to run the tests

Base patch was written by Michael Jeanson, RP then tweaked wording
and formatting and added config to complete the work on all arches.

(From OE-Core rev: 459ca12493a69402c1a0eaa367d8122c3e8c6acc)

Signed-off-by: Michael Jeanson <mjeanson@efficios.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-19 11:48:50 +01:00
Mingli Yu
e8f302c927 babeltrace2: Enable python plugins
* The lttng-tools test fails as below as it needs bt2 module.
ERROR: ust/high-throughput/test_high_throughput_snapshot.py
===========================================================

Traceback (most recent call last):
  File "/usr/lib/lttng-tools/ptest/tests/regression/./ust/high-throughput/test_high_throughput_snapshot.py", line 26, in <module>
    import bt2
ModuleNotFoundError: No module named 'bt2'

Enable python plugins for babeltrace2 to provide the above support.

* Add swig-native to DEPENDS to fix the below configure error.
 | configure: error: SWIG 2.0.0 or newer is required to build the python bindings

* There are some ptest failed cases after enable python plugins and
track the failed ptest as https://bugs.lttng.org/issues/1430.

(From OE-Core rev: 194470edf300ae5fd800374c15ef74005d8ca307)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-08-19 11:48:50 +01:00