From patchwork Tue Mar 3 13:36:40 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Andrej Kozemcak X-Patchwork-Id: 82385 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CFCDDEC1454 for ; Tue, 3 Mar 2026 13:56:48 +0000 (UTC) Received: from mta-64-226.siemens.flowmailer.net (mta-64-226.siemens.flowmailer.net [185.136.64.226]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.18783.1772546200575760473 for ; Tue, 03 Mar 2026 05:56:41 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=andrej.kozemcak@siemens.com header.s=fm2 header.b=Hyegzv+O; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.226, mailfrom: fm-1334352-2026030313563700a74b712000020766-qtnjfm@rts-flowmailer.siemens.com) Received: by mta-64-226.siemens.flowmailer.net with ESMTPSA id 2026030313563700a74b712000020766 for ; Tue, 03 Mar 2026 14:56:38 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=andrej.kozemcak@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc; bh=9445PHzlsuwRwvI4Wl03UalXiDl50Aure34JbUTWAoI=; b=Hyegzv+OlHsrl4yHfP/oN+CUMOXg1gqq29BnNm4X7XFFiDrTFETgXtkA0xymFccfNIim8X cOpUIU0+Hbg4kKcGImG3HfF88amOKDybDZfTD8kqWTnGYRyK+gelIg6Cumi9VYr+0bywt0Ds uBEF3b7+VNejOLYvrmohEnYLfOPSzB7P/fQRYoiGRMpWWLdHq5Gj2uqwdpMYoh/T5GzDDgIE hTU+GxdkdC4Rn87tPxI7iIrj3QN2vCan4/0grG+bqze4GbX9U5OTyw18ofN3tyrxtC/drQq/ Oq4pt5e/GvlO2M/zgkok8fwOWcIsvTZfSLpwCRElTvIzT9JtJWF+X0jA==; From: Andrej Kozemcak To: openembedded-core@lists.openembedded.org Cc: Andrej Kozemcak Subject: [PATCH 1/6] ca-certificates: upgrade 20250419 -> 20260223 Date: Tue, 3 Mar 2026 14:36:40 +0100 Message-ID: <20260303133645.1449-1-andrej.kozemcak@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1334352:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 03 Mar 2026 13:56:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/232316 Changelog: * Update Mozilla certificate authority bundle to version 2.82 The following certificate authorities were added (+): + TrustAsia TLS ECC Root CA + TrustAsia TLS RSA Root CA + SwissSign RSA TLS Root CA 2022 - 1 + OISTE Server Root ECC G1 + OISTE Server Root RSA G1 The following certificate authorities were removed (-): - GlobalSign Root CA - Entrust.net Premium 2048 Secure Server CA - Baltimore CyberTrust Root (closes: #1121936) - Comodo AAA Services root - XRamp Global CA Root - Go Daddy Class 2 CA - Starfield Class 2 CA - CommScope Public Trust ECC Root-01 - CommScope Public Trust ECC Root-02 - CommScope Public Trust RSA Root-01 - CommScope Public Trust RSA Root-02 * Use dh_usrlocal to create /usr/local/share/ca-certificates Signed-off-by: Andrej Kozemcak --- ...{ca-certificates_20250419.bb => ca-certificates_20260223.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-support/ca-certificates/{ca-certificates_20250419.bb => ca-certificates_20260223.bb} (97%) diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb b/meta/recipes-support/ca-certificates/ca-certificates_20260223.bb similarity index 97% rename from meta/recipes-support/ca-certificates/ca-certificates_20250419.bb rename to meta/recipes-support/ca-certificates/ca-certificates_20260223.bb index a11433c9da..41690d1d08 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb +++ b/meta/recipes-support/ca-certificates/ca-certificates_20260223.bb @@ -14,7 +14,7 @@ DEPENDS:class-nativesdk = "openssl-native" # Need rehash from openssl and run-parts from debianutils PACKAGE_WRITE_DEPS += "openssl-native debianutils-native" -SRC_URI[sha256sum] = "33b44ef78653ecd3f0f2f13e5bba6be466be2e7da72182f737912b81798ba5d2" +SRC_URI[sha256sum] = "2fa2b00d4360f0d14ec51640ae8aea9e563956b95ea786e3c3c01c4eead42b56" SRC_URI = "${DEBIAN_MIRROR}/main/c/ca-certificates/${BPN}_${PV}.tar.xz \ file://0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch \ file://0003-update-ca-certificates-use-relative-symlinks-from-ET.patch \ From patchwork Tue Mar 3 13:36:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Andrej Kozemcak X-Patchwork-Id: 82377 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9C489EC1449 for ; Tue, 3 Mar 2026 13:37:18 +0000 (UTC) Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net [185.136.65.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.18351.1772545032262495460 for ; Tue, 03 Mar 2026 05:37:13 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=andrej.kozemcak@siemens.com header.s=fm2 header.b=CPPbol6x; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.227, mailfrom: fm-1334352-20260303133709a817fab64e000207ed-u2_p_p@rts-flowmailer.siemens.com) Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 20260303133709a817fab64e000207ed for ; Tue, 03 Mar 2026 14:37:09 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=andrej.kozemcak@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=ZnnNsiQD2sh/7W19Ra5VQC8g4R1b7s+kTOvoZOO3dYA=; b=CPPbol6xYEsEH8fsOTu4z52Xj9hsW4xbeKdaCHhtEQwpmbfDiDfl9OfdYWbXH6o43qFMbB Mj2b0E9uQj400fu4YUAjOINyLj9YRmLWkyXfzWJhiqsEW7NZnTfLs/KJKj6TrGsPR3IEdLP7 O9QGinbDjl5cKztqUn5VwQGcmb28pWCeL0d9alJLRUYXatG1QEReNkjVMAFaZbhxe9+AuPMh JF0PMbCw+VsMNt/LRvMXQ6TLi2hAvLJBymSY6n3Q1n9fZAAMtnOrMIDo3llR9Rrjt9Lz25hN uWTeLwKy5XPC0PJuyAzO0wv7xk/QYFGw/mZcjmseReS3g6o5TGj49fag==; From: Andrej Kozemcak To: openembedded-core@lists.openembedded.org Cc: Andrej Kozemcak Subject: [PATCH 2/6] freetype: upgrade 2.14.1 -> 2.14.2 Date: Tue, 3 Mar 2026 14:36:41 +0100 Message-ID: <20260303133645.1449-2-andrej.kozemcak@siemens.com> In-Reply-To: <20260303133645.1449-1-andrej.kozemcak@siemens.com> References: <20260303133645.1449-1-andrej.kozemcak@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1334352:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 03 Mar 2026 13:37:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/232313 Changelog: https://gitlab.freedesktop.org/freetype/freetype/-/blob/f4205da14867c5387cd6a329b90ee10a6df6eeff/docs/CHANGES Changes: - Several changes related to LCD filtering are implemented to achieve better performance and encourage sound practices. Bug fixes: - A bunch of potential security problems have been found. All users should update. - The italic angle in `PS_FontInfo` is now stored as a fixed-point value in degrees for all Type 1 fonts and their derivatives, consistent with CFF fonts and common practices. The broken underline position and thickness values are fixed for CFF fonts. Miscellaneous: - The `x` field in the `FT_Span` structure is now unsigned. - Demo program `ftgrid` got an option `-m` to select a start character to display. - Similarly, demo program `ftmulti` got an option `-m` to select a text string for rendering. - Option `-d` in the demo program `ttdebug` is now called `-a`, expecting a comma-separated list of axis values. The user interface is also slightly improved. - The `ftinspect` demo program can now be compiled with Qt6, too. Signed-off-by: Andrej Kozemcak --- .../freetype/{freetype_2.14.1.bb => freetype_2.14.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/freetype/{freetype_2.14.1.bb => freetype_2.14.2.bb} (94%) diff --git a/meta/recipes-graphics/freetype/freetype_2.14.1.bb b/meta/recipes-graphics/freetype/freetype_2.14.2.bb similarity index 94% rename from meta/recipes-graphics/freetype/freetype_2.14.1.bb rename to meta/recipes-graphics/freetype/freetype_2.14.2.bb index dc59e5656b..08e3908235 100644 --- a/meta/recipes-graphics/freetype/freetype_2.14.1.bb +++ b/meta/recipes-graphics/freetype/freetype_2.14.2.bb @@ -14,7 +14,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.TXT;md5=eeb073d5fb86d23c52bb9b84aa256307 \ " SRC_URI = "${SAVANNAH_NONGNU_MIRROR}/${BPN}/${BP}.tar.xz" -SRC_URI[sha256sum] = "32427e8c471ac095853212a37aef816c60b42052d4d9e48230bab3bdf2936ccc" +SRC_URI[sha256sum] = "4b62dcab4c920a1a860369933221814362e699e26f55792516d671e6ff55b5e1" UPSTREAM_CHECK_REGEX = "freetype-(?P\d+(\.\d+)+)" From patchwork Tue Mar 3 13:36:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Andrej Kozemcak X-Patchwork-Id: 82378 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A1C71EC144A for ; Tue, 3 Mar 2026 13:37:18 +0000 (UTC) Received: from mta-65-226.siemens.flowmailer.net (mta-65-226.siemens.flowmailer.net [185.136.65.226]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.18345.1772545032259990277 for ; Tue, 03 Mar 2026 05:37:13 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=andrej.kozemcak@siemens.com header.s=fm2 header.b=RrE/EpXe; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.226, mailfrom: fm-1334352-2026030313370912f5047d2d0002075b-txtdin@rts-flowmailer.siemens.com) Received: by mta-65-226.siemens.flowmailer.net with ESMTPSA id 2026030313370912f5047d2d0002075b for ; Tue, 03 Mar 2026 14:37:09 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=andrej.kozemcak@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=5xHP1E9Fl2cZ0e7ppdVsXv1SHWsM26DkZymT7aTE78Q=; b=RrE/EpXeFJAKVzIP1hNTEh6WNb6XclLJJUocjHNXGPXu5GFJEhNux7O9tEuLYswPAlBucG 13lkt9QAcjhLMx99LigtCFXOFPcM1cTJbP2DLGfdGFSI2tePOdJ1BOgxhEp/avsBYDQFyNd/ xSDa/YsVisV6A5QSmhzmlcknlZI6rpZx9ugbcnIj6cGKIZhiziWqSIlUSeOf9sD0uiewJVyE e0iuEtAhaMCZirFVM4NjDnV3om4J3WjAlyyf6OQX3GjHfF+Ls46RGt2u/QVIT5GTcxZkCMgK AVikILbBe0rnnsmpGOcxE/StfKzdxG8yJCmk5hURUdKOXNrsqIGeKo2g==; From: Andrej Kozemcak To: openembedded-core@lists.openembedded.org Cc: Andrej Kozemcak Subject: [PATCH 3/6] iproute2: upgrade 6.18.0 -> 6.19.0 Date: Tue, 3 Mar 2026 14:36:42 +0100 Message-ID: <20260303133645.1449-3-andrej.kozemcak@siemens.com> In-Reply-To: <20260303133645.1449-1-andrej.kozemcak@siemens.com> References: <20260303133645.1449-1-andrej.kozemcak@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1334352:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 03 Mar 2026 13:37:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/232310 Drop fix-musl.patch as it was merged upstream. Changes: - new dpll command for managing Digital Phase-Locked Loop devices via netlink. - expanded CAN XL support - MPTCP improvements - devlink: - added support for 64‑bit parameters - added new SWITCHDEV_INACTIVE eswitch mode - added burst period configuration for health reporters - genl: - supports JSON output - ifstat, nstat, lnstat: - converted to use the high-level json_print API for unified JSON output Signed-off-by: Andrej Kozemcak --- .../iproute2/iproute2/fix-musl.patch | 43 ------------------- ...{iproute2_6.18.0.bb => iproute2_6.19.0.bb} | 3 +- 2 files changed, 1 insertion(+), 45 deletions(-) delete mode 100644 meta/recipes-connectivity/iproute2/iproute2/fix-musl.patch rename meta/recipes-connectivity/iproute2/{iproute2_6.18.0.bb => iproute2_6.19.0.bb} (96%) diff --git a/meta/recipes-connectivity/iproute2/iproute2/fix-musl.patch b/meta/recipes-connectivity/iproute2/iproute2/fix-musl.patch deleted file mode 100644 index 20907dad50..0000000000 --- a/meta/recipes-connectivity/iproute2/iproute2/fix-musl.patch +++ /dev/null @@ -1,43 +0,0 @@ -From 6c1113633fde51b0e60f02243cfad1b3d09762cc Mon Sep 17 00:00:00 2001 -From: Akhilesh Nema -Date: Tue, 2 Dec 2025 18:11:24 -0800 -Subject: fix 'UINT_MAX' undeclared with build with musl libc - -- utils_math.c:136:20: error: 'UINT_MAX' undeclared (first use in this function) -- tc_core.c:51:22: error: 'UINT_MAX' undeclared (first use in this function) - -Signed-off-by: Akhilesh Nema -Upstream-Status: Backport [https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=6c1113633fde51b0e60f02243cfad1b3d09762cc] -Signed-off-by: Alexander Kanavin ---- - lib/utils_math.c | 1 + - tc/tc_core.c | 1 + - 2 files changed, 2 insertions(+) - -diff --git a/lib/utils_math.c b/lib/utils_math.c -index a7e747440..fd2ddc7c7 100644 ---- a/lib/utils_math.c -+++ b/lib/utils_math.c -@@ -4,6 +4,7 @@ - #include - #include - #include -+#include - #include - - #include "utils.h" -diff --git a/tc/tc_core.c b/tc/tc_core.c -index a422e02c8..b13b7d78a 100644 ---- a/tc/tc_core.c -+++ b/tc/tc_core.c -@@ -11,6 +11,7 @@ - #include - #include - #include -+#include - #include - #include - #include --- -cgit 1.2.3-korg - diff --git a/meta/recipes-connectivity/iproute2/iproute2_6.18.0.bb b/meta/recipes-connectivity/iproute2/iproute2_6.19.0.bb similarity index 96% rename from meta/recipes-connectivity/iproute2/iproute2_6.18.0.bb rename to meta/recipes-connectivity/iproute2/iproute2_6.19.0.bb index c68b2adc0f..a9462aa083 100644 --- a/meta/recipes-connectivity/iproute2/iproute2_6.18.0.bb +++ b/meta/recipes-connectivity/iproute2/iproute2_6.19.0.bb @@ -13,10 +13,9 @@ DEPENDS = "flex-native bison-native libcap" SRC_URI = "${KERNELORG_MIRROR}/linux/utils/net/${BPN}/${BP}.tar.xz \ file://0001-include-libnetlink.h-add-missing-include-for-htobe64.patch \ - file://fix-musl.patch \ " -SRC_URI[sha256sum] = "6ba520e1975e4c50dc931eeae91ea37c198b8a173744885f8895b84325f9d456" +SRC_URI[sha256sum] = "9332213d35480b647086a70c302de8568de83455a98774d35de216c4ce191006" inherit update-alternatives bash-completion pkgconfig From patchwork Tue Mar 3 13:36:43 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Andrej Kozemcak X-Patchwork-Id: 82380 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id BA833EC1450 for ; Tue, 3 Mar 2026 13:37:18 +0000 (UTC) Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net [185.136.65.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.18350.1772545032262345388 for ; Tue, 03 Mar 2026 05:37:13 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=andrej.kozemcak@siemens.com header.s=fm2 header.b=UPWWzTZB; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.227, mailfrom: fm-1334352-20260303133709fa5e6f6eb6000207fd-ytejaf@rts-flowmailer.siemens.com) Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 20260303133709fa5e6f6eb6000207fd for ; Tue, 03 Mar 2026 14:37:09 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=andrej.kozemcak@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=wO/dB1+6fxqxYHOQriyo+9jRgUYtaVaRmKYFtkP9KZs=; b=UPWWzTZBG9h2DgHoQaiQqXOD+oRhoz2CSrKBY9jram9v/dpG0yDZFhRfbhFoHqxoBitN5o hM0+98AVg88cvpjLHPCOctBls0wFHm8Q7x7A/GlvBa3CqlxK1DntFRc+LmGR2siJLiKhemFt jI12Le2Duph6Dds9BPu9i6HXVIMCqurRNCB2e84ArM+zs9w2o0SyjGYa2NFdBtEAGVq9H1Ms UGPIFoksA/J3d+Bm/h/xLHyM6W8Lb5u0tCr4ajcq0o5zEPGJP7XHroh6XS/bZlQAqP2K9kZ7 McIopb7kvuFVX7KcrGu7JcdNtazGKfLviNC/2fYNMbhfgrGkc8kQOO8g==; From: Andrej Kozemcak To: openembedded-core@lists.openembedded.org Cc: Andrej Kozemcak Subject: [PATCH 4/6] iptables: upgrade 1.8.11 -> 1.8.12 Date: Tue, 3 Mar 2026 14:36:43 +0100 Message-ID: <20260303133645.1449-4-andrej.kozemcak@siemens.com> In-Reply-To: <20260303133645.1449-1-andrej.kozemcak@siemens.com> References: <20260303133645.1449-1-andrej.kozemcak@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1334352:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 03 Mar 2026 13:37:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/232311 Changes: - fix null dereference parsing bitwise operations. - refuse to run under file capabilities, ie. getauxval(AT_SECURE). - fix for all-zero mask on Big Endian in arptables-nft. - support adding and replacing a rule in the same batch in iptables-nft. - filter -A FORWARD -m comment --comment "new rule being replaced" -R FORWARD 1 -m comment --comment "new replacing rule" COMMIT - print -X in xtables-monitor command for base chains. - remove incorrect libebt_redirect translations. - translate bare '-m sctp' match to '-p sctp' just like TCP and UDP. - support for info-request and info-reply icmp types. - fix interface comparisons in `-C` commands in iptables-nft. - several fixes for ip[6]tables-translate, the tool to ease migration to nftables. - document flush behaviour with --noflush for user-defined chains. Signed-off-by: Andrej Kozemcak --- .../iptables/{iptables_1.8.11.bb => iptables_1.8.12.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-extended/iptables/{iptables_1.8.11.bb => iptables_1.8.12.bb} (98%) diff --git a/meta/recipes-extended/iptables/iptables_1.8.11.bb b/meta/recipes-extended/iptables/iptables_1.8.12.bb similarity index 98% rename from meta/recipes-extended/iptables/iptables_1.8.11.bb rename to meta/recipes-extended/iptables/iptables_1.8.12.bb index 686dc5afe5..928930d08c 100644 --- a/meta/recipes-extended/iptables/iptables_1.8.11.bb +++ b/meta/recipes-extended/iptables/iptables_1.8.12.bb @@ -14,7 +14,7 @@ SRC_URI = "http://netfilter.org/projects/iptables/files/iptables-${PV}.tar.xz \ file://ip6tables.service \ file://ip6tables.rules \ " -SRC_URI[sha256sum] = "d87303d55ef8c92bcad4dd3f978b26d272013642b029425775f5bad1009fe7b2" +SRC_URI[sha256sum] = "8e7ee962601492de6503d171d4a948092ab18f89f111de72e3037c1f40cfb846" SYSTEMD_SERVICE:${PN} = "\ iptables.service \ From patchwork Tue Mar 3 13:36:44 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Andrej Kozemcak X-Patchwork-Id: 82381 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id ACA51EC144C for ; Tue, 3 Mar 2026 13:37:18 +0000 (UTC) Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net [185.136.64.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.18353.1772545032411233055 for ; Tue, 03 Mar 2026 05:37:13 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=andrej.kozemcak@siemens.com header.s=fm2 header.b=TG2VfG81; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.227, mailfrom: fm-1334352-202603031337097304baba48000207ad-qpzwgh@rts-flowmailer.siemens.com) Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 202603031337097304baba48000207ad for ; Tue, 03 Mar 2026 14:37:09 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=andrej.kozemcak@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=S+QytYevJkCqyMMCPG62eL5eiyQ744PFxgY6X1Ux28A=; b=TG2VfG815SyEyvxQxxvlFfrpXyhh49rru+jx4zjcBPHOj09rD06Ie09a/ABVR1A+e7+qEM 7Pp7BUlPZvTtJCd0AbSEzwwxNiFIXUMoT8bIdDXu+K+tNdqw2XRQpex4gjUdPFrLFwpg7EnU XZvI8jPl3hlCT+TzY8x9YHEJeK8BrwnCLMXxtqspzdGYBFWnDiGfxqwwcRALZ/Ay8oznDp3u aArwIO7KJcZwfkLTPBAB+/X5wQk0DTirgQN0dFRHI6Bn+SZ1+IJrJDCnNVd7fptuptMt2W4M nw4G7jxMKLqXANRvOdfqN6VCQKihKXoKNk5YoBHtYcEtYlo8G/dvuNaw==; From: Andrej Kozemcak To: openembedded-core@lists.openembedded.org Cc: Andrej Kozemcak Subject: [PATCH 5/6] libunistring: upgrade 1.4.1 -> 1.4.2 Date: Tue, 3 Mar 2026 14:36:44 +0100 Message-ID: <20260303133645.1449-5-andrej.kozemcak@siemens.com> In-Reply-To: <20260303133645.1449-1-andrej.kozemcak@siemens.com> References: <20260303133645.1449-1-andrej.kozemcak@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1334352:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 03 Mar 2026 13:37:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/232314 - prepare for 1.4.2 release. - version.sh: Bump version number, date, gnulib version. - README: Update version. - NEWS: Update. - sync with gnulib. - lib/unistring/cdefs.h: Update from gnulib/m4/gnulib-common.m4. (_GL_UNNAMED): New macro. (_UC_UNNAMED): Apply - new C macro _GL_UNNAMED - Make the generated more usable in C++ mode. - lib/Makefile.am (unistring/stdint.h): In C++ 11 or newer mode, just use . Signed-off-by: Andrej Kozemcak --- .../{libunistring_1.4.1.bb => libunistring_1.4.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-support/libunistring/{libunistring_1.4.1.bb => libunistring_1.4.2.bb} (93%) diff --git a/meta/recipes-support/libunistring/libunistring_1.4.1.bb b/meta/recipes-support/libunistring/libunistring_1.4.2.bb similarity index 93% rename from meta/recipes-support/libunistring/libunistring_1.4.1.bb rename to meta/recipes-support/libunistring/libunistring_1.4.2.bb index 791f4983ed..8f6cc27193 100644 --- a/meta/recipes-support/libunistring/libunistring_1.4.1.bb +++ b/meta/recipes-support/libunistring/libunistring_1.4.2.bb @@ -21,7 +21,7 @@ LIC_FILES_CHKSUM = "file://COPYING.LIB;md5=6a6a8e020838b23406c81b19c1d46df6 \ DEPENDS = "gperf-native" SRC_URI = "${GNU_MIRROR}/libunistring/libunistring-${PV}.tar.gz" -SRC_URI[sha256sum] = "12542ad7619470efd95a623174dcd4b364f2483caf708c6bee837cb53a54cb9d" +SRC_URI[sha256sum] = "e82664b170064e62331962126b259d452d53b227bb4a93ab20040d846fec01d8" inherit autotools texinfo BBCLASSEXTEND = "native nativesdk" From patchwork Tue Mar 3 13:36:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Andrej Kozemcak X-Patchwork-Id: 82379 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D2039EC1452 for ; Tue, 3 Mar 2026 13:37:18 +0000 (UTC) Received: from mta-64-225.siemens.flowmailer.net (mta-64-225.siemens.flowmailer.net [185.136.64.225]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.18352.1772545032293485296 for ; Tue, 03 Mar 2026 05:37:13 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=andrej.kozemcak@siemens.com header.s=fm2 header.b=NXorMgev; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.225, mailfrom: fm-1334352-20260303133710ffeb59929d00020786-svakoz@rts-flowmailer.siemens.com) Received: by mta-64-225.siemens.flowmailer.net with ESMTPSA id 20260303133710ffeb59929d00020786 for ; Tue, 03 Mar 2026 14:37:10 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=andrej.kozemcak@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=y3RkwirlW3H9PwYTP5LK0dtic8/Bxhg6MfjLkyPB/ps=; b=NXorMgevA1OcUXTvci8E/97w5Spemc6x8J/X4lWWkZgBZrVlFOa8J55jobHq7X9G/Qb/y7 bpzMaTgiL/m+neTBgrE8dSSmpNDiQOq64f+vDE9bs+jyV2e2DAF3PSJLpoU2+UmhqH2hxBwI pSiht3APk7gju15wBIECHrf3nZm5wW+EchrvCADuwqsOtagUiaJlDZl9uKCTRAOM4EWJ0RDg G+rhT1Sa6AFLSEzgrnh2uEXferHzVuCND02qdwLgiVwfYOPQyxpw5T9A3fLuK6p1dxbY1qfB Aq1G85Le51d5Dbl9lLxTJXKEwYtzA6jIO8YBBUgiMVvUyyGnf2LAMhLw==; From: Andrej Kozemcak To: openembedded-core@lists.openembedded.org Cc: Andrej Kozemcak Subject: [PATCH 6/6] shadow: upgrade 4.18.0 -> 4.19.4 Date: Tue, 3 Mar 2026 14:36:45 +0100 Message-ID: <20260303133645.1449-6-andrej.kozemcak@siemens.com> In-Reply-To: <20260303133645.1449-1-andrej.kozemcak@siemens.com> References: <20260303133645.1449-1-andrej.kozemcak@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1334352:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 03 Mar 2026 13:37:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/232312 Changelog: https://github.com/shadow-maint/shadow/blob/4.19.4/ChangeLog - useradd.8: fix default group ID (Tim Biermann) - revert drop of subid_init() (Serge Hallyn) - Georgian translation (NorwayFun) - useradd: Avoid taking unneeded space: do not reset non-existent data in lastlog (David Kalnischkies) - relax username restrictions (Alexander Kanavin) - selinux: check MLS enabled before setting serange (genBTC) - copy_tree: use fchmodat instead of chmod (Samanta Navarro) - copy_tree: don't block on FIFOs (Samanta Navarro) - add shell linter (Jan Macku) - copy_tree: carefully treat permissions (Samanta Navarro) - lib/commonio: make lock failures more detailed (Luca BRUNO) - lib: use strzero and memzero where applicable (Christian Göttsche) - Update Dutch translation (Frans Spiesschaert) - Don't test for NULL before calling free (Alex Colomar) - Use libc MAX() and MIN() (Alejandro Colomar) - chage: Fix regression in print_date (Xiami) - usermod: report error if homedir does not exist (Iker Pedrosa) - libmisc: minimum id check for system accounts (Iker Pedrosa) - fix usermod -rG x y wrongly adding a group (xyz) - man: add missing space in useradd.8.xml (Iker Pedrosa) - lastlog: check for localtime() return value (Iker Pedrosa) - Raise limit for passwd and shadow entry length (Iker Pedrosa) - Remove adduser-old.c (Alejandro Colomar) - useradd: Fix buffer overflow when using a prefix (David Michael) - Don't warn when failed to open /etc/nsswitch.conf (Serge Hallyn Signed-off-by: Andrej Kozemcak --- .../shadow/{shadow_4.18.0.bb => shadow_4.19.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-extended/shadow/{shadow_4.18.0.bb => shadow_4.19.4.bb} (99%) diff --git a/meta/recipes-extended/shadow/shadow_4.18.0.bb b/meta/recipes-extended/shadow/shadow_4.19.4.bb similarity index 99% rename from meta/recipes-extended/shadow/shadow_4.18.0.bb rename to meta/recipes-extended/shadow/shadow_4.19.4.bb index d9a49d8ccf..7bc7f74555 100644 --- a/meta/recipes-extended/shadow/shadow_4.18.0.bb +++ b/meta/recipes-extended/shadow/shadow_4.19.4.bb @@ -25,7 +25,7 @@ SRC_URI:append:class-native = " \ file://commonio.c-fix-unexpected-open-failure-in-chroot-env.patch \ file://disable_syslog.patch \ " -SRC_URI[sha256sum] = "ae486ce4c0bce55c42d76d8478e428c41586f1da2f89fbf5228243fb4d849db4" +SRC_URI[sha256sum] = "ba7e9aed1c5420203ac549583d6e6f485a819ac7505af9c7cd8c13b2013210b8" UPSTREAM_CHECK_REGEX = "releases/tag/v?(?P\d+(\.\d+)+)$" # Additional Policy files for PAM