From patchwork Mon Jun 29 10:55:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 91255 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8831BC43458 for ; Mon, 29 Jun 2026 10:55:13 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.35019.1782730510244996828 for ; Mon, 29 Jun 2026 03:55:10 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@arm.com header.s=foss header.b=uB7k5CVw; spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: ross.burton@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 3CC8E176C for ; Mon, 29 Jun 2026 03:55:05 -0700 (PDT) Received: from cesw-amp-gbt-1s-m12830-04.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id 5308E3F836 for ; Mon, 29 Jun 2026 03:55:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1782730509; bh=H6qTw8/YNU5RKletI/Nu3FgBA7+WA9zzlte7OZkRH+4=; h=From:To:Subject:Date:From; b=uB7k5CVwDtpARFMUuszYDdoDotNX/gBUcc/4B1fGPoBlRIV4h2iJlBnQv2neLTrl+ PRwWVvQNyV21fClTlSeCIizTp5WsDKI/gFvIN8/mERclzCGfdi747WUP/H9xyQxEKf g1ZCxzUtnxC/bD9PNmIGL1ZSYHROPIxjXh5Npoko= From: Ross Burton To: openembedded-core@lists.openembedded.org Subject: [PATCH 1/3] pango: upgrade 1.57.1 -> 1.58.0 Date: Mon, 29 Jun 2026 11:55:04 +0100 Message-ID: <20260629105506.2156617-1-ross.burton@arm.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jun 2026 10:55:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239753 Upstream changes: * PangoFontDescription has a new width attribute, which is like stretch, but allows intermediate values * PangoRenderer has gained the ability to render only certain components of a layout (such overlines, underlines, text,...) Signed-off-by: Ross Burton --- .../recipes-graphics/pango/{pango_1.57.1.bb => pango_1.58.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/pango/{pango_1.57.1.bb => pango_1.58.0.bb} (94%) diff --git a/meta/recipes-graphics/pango/pango_1.57.1.bb b/meta/recipes-graphics/pango/pango_1.58.0.bb similarity index 94% rename from meta/recipes-graphics/pango/pango_1.57.1.bb rename to meta/recipes-graphics/pango/pango_1.58.0.bb index a9129dad4ca..6e1aebad1df 100644 --- a/meta/recipes-graphics/pango/pango_1.57.1.bb +++ b/meta/recipes-graphics/pango/pango_1.58.0.bb @@ -18,7 +18,7 @@ UPSTREAM_CHECK_REGEX = "pango-(?P\d+\.(?!9\d+)\d+\.\d+)" GIR_MESON_ENABLE_FLAG = "enabled" GIR_MESON_DISABLE_FLAG = "disabled" -SRC_URI[archive.sha256sum] = "e65d6d117080dc3aeeb7d8b4b3b518f7383aa2e6cfce23117c623cd624764c2f" +SRC_URI[archive.sha256sum] = "bc5bad6213ad4886a47d1e80292fd850b64159b50db67917a43d9ea80ee2298a" DEPENDS = "glib-2.0 glib-2.0-native fontconfig freetype virtual/libiconv cairo harfbuzz fribidi" DEPENDS += "${@' python3-docutils-native' if d.getVar('GIDOCGEN_ENABLED') == 'True' else ''}" From patchwork Mon Jun 29 10:55:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 91253 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6909DC43602 for ; Mon, 29 Jun 2026 10:55:13 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.35020.1782730510992395345 for ; Mon, 29 Jun 2026 03:55:11 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@arm.com header.s=foss header.b=PUbGivAe; spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: ross.burton@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id E2C04176C for ; Mon, 29 Jun 2026 03:55:05 -0700 (PDT) Received: from cesw-amp-gbt-1s-m12830-04.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id 037793F836 for ; Mon, 29 Jun 2026 03:55:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1782730510; bh=MJlHsPghmN3ZlcbwiJ0ho0zhcsSDicsR101/rj34Pd4=; h=From:To:Subject:Date:In-Reply-To:References:From; b=PUbGivAekTGqD9UzufM26UkkuA6Q9Nsqb9ybW+/liy8W5ElaMbsm7MNUCTtDXRpCN 4SOk8w6+jf7fwdtV3jRG3hkeeSc2n14U9zwh8qjQxu47Re0th13HsKKSGEK5OF/mbm HdITv8Y0USKykG2JIachTdfrTnSheaiBecfTyHXg= From: Ross Burton To: openembedded-core@lists.openembedded.org Subject: [PATCH 2/3] gdk-pixbuf: upgrade 2.44.6 -> 2.44.7 Date: Mon, 29 Jun 2026 11:55:05 +0100 Message-ID: <20260629105506.2156617-2-ross.burton@arm.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260629105506.2156617-1-ross.burton@arm.com> References: <20260629105506.2156617-1-ross.burton@arm.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jun 2026 10:55:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239754 Upstream changes: - xpm: Fix loading the xpm module if built-in - glycin: Fix the build on 32bit - glycin: Use fwrite to avoid problems with saving - glycin: Add signature for webp - glycin: Make filename tricks work in pid namespaces - Translation updates Signed-off-by: Ross Burton --- .../gdk-pixbuf/{gdk-pixbuf_2.44.6.bb => gdk-pixbuf_2.44.7.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-gnome/gdk-pixbuf/{gdk-pixbuf_2.44.6.bb => gdk-pixbuf_2.44.7.bb} (97%) diff --git a/meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf_2.44.6.bb b/meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf_2.44.7.bb similarity index 97% rename from meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf_2.44.6.bb rename to meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf_2.44.7.bb index b2e348ea439..8efc14b59a2 100644 --- a/meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf_2.44.6.bb +++ b/meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf_2.44.7.bb @@ -14,7 +14,7 @@ SECTION = "libs" DEPENDS = "glib-2.0 shared-mime-info" -SRC_URI[archive.sha256sum] = "140c2d0b899fcf853ee92b26373c9dc228dbcde0820a4246693f4328a27466fa" +SRC_URI[archive.sha256sum] = "172f80e3626ec31520a970400f1a3694e04718f6c2cd2885f75250fb5a6995a4" inherit gettext gnomebase pixbufcache ptest-gnome upstream-version-is-even gobject-introspection gi-docgen lib_package manpages From patchwork Mon Jun 29 10:55:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 91254 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4C466C43327 for ; Mon, 29 Jun 2026 10:55:13 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.89584.1782730511543200012 for ; Mon, 29 Jun 2026 03:55:11 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@arm.com header.s=foss header.b=VW9Z3/Dz; spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: ross.burton@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 8FBDF1A00 for ; Mon, 29 Jun 2026 03:55:06 -0700 (PDT) Received: from cesw-amp-gbt-1s-m12830-04.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id A8EA53F836 for ; Mon, 29 Jun 2026 03:55:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1782730511; bh=lkzl5TfZ0uyTLjMPeto5pZi9ZVNwjTYc20LVhWgmizY=; h=From:To:Subject:Date:In-Reply-To:References:From; b=VW9Z3/Dz/Hg9oVf4icyW2qX1H3yzzVA3aot07hhciEzauLJ+w3iRIh01IzW8rygbf pLwkLGzkZinojGcuJ0AtG2KdER/EPcuwhaMY1mA9d6rghGER7LOqeTTyek1ypdIDLQ f8bg9r9I9QahQlaX5K1wK6hr6XkTxvas10y9c4QU= From: Ross Burton To: openembedded-core@lists.openembedded.org Subject: [PATCH 3/3] avahi: upgrade 0.9-rc4 -> 0.9-rc5 Date: Mon, 29 Jun 2026 11:55:06 +0100 Message-ID: <20260629105506.2156617-3-ross.burton@arm.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260629105506.2156617-1-ross.burton@arm.com> References: <20260629105506.2156617-1-ross.burton@arm.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jun 2026 10:55:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239755 Notably, this has security fixes: - common: make sure valid domain names can be normalized It fixes a bug where it was possible for unprivileged local users to crash avahi-daemon via D-Bus by calling the RecordBrowserNew method with bogus domain names. - core: always create new lookups and let queriers coalesce them It fixes a bug where it was possible to trigger a use-after-free by sending CNAME RRs. Curated upstream changelog: - core: always create new lookups and let queriers coalesce them - tree-wide: cast chars to unsigned chars before passing them to ctype functions - common: make sure valid domain names can be normalized - core: add missing check to avahi_record_copy - core: add missing checks to avahi_dns_packet_append_name - core: add missing checks to parse_rdata - core: handle prefix lengths longer than 120 correctly - core: use ip6_masklen for IPv6 prefix lengths on BSD - core: no longer read past netmask in ip6_masklen - core: set scope ids for link-local IPv6 addresses - tests: cover oversize rdata rejection in avahi_rdata_parse - dns: reject rdata larger than the 16 bit rdlength field - common: free copy instead of NULL on failures in string_list_copy - common: add missing checks to avahi_alternative_* - core: free copy's HINFO 'os' field on rdata copy failure - core: fill out msg_controllen for IPV6_PKTINFO control messages correctly - tests: call functions with side effects outside of assertions - tests: call avahi_string_list_parse outside of assert - fix: replace __FUNCTION__ with __func__ in AVAHI_WARN_UNSUPPORTED Signed-off-by: Ross Burton --- meta/recipes-connectivity/avahi/avahi_0.9.bb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/meta/recipes-connectivity/avahi/avahi_0.9.bb b/meta/recipes-connectivity/avahi/avahi_0.9.bb index b5b63cf1ee4..308ddc1822c 100644 --- a/meta/recipes-connectivity/avahi/avahi_0.9.bb +++ b/meta/recipes-connectivity/avahi/avahi_0.9.bb @@ -18,7 +18,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=2d5025d4aa3495befef8f17206a5b0a1 \ file://avahi-daemon/main.c;endline=21;md5=9ee77368c5407af77caaef1b07285969 \ file://avahi-client/client.h;endline=23;md5=f4ac741a25c4f434039ba3e18c8674cf" -SRC_URI = "git://github.com/avahi/avahi;protocol=https;branch=master;tag=v0.9-rc4 \ +SRC_URI = "git://github.com/avahi/avahi;protocol=https;branch=master;tag=v0.9-rc5 \ file://00avahi-autoipd \ file://99avahi-autoipd \ file://avahi-daemon.in \ @@ -26,8 +26,8 @@ SRC_URI = "git://github.com/avahi/avahi;protocol=https;branch=master;tag=v0.9-rc file://0001-Fix-opening-etc-resolv.conf-error.patch \ " -PV = "0.9~rc4" -SRCREV = "625ca0fac19229f6dfa3a6c6b698ae657187e50c" +PV = "0.9~rc5" +SRCREV = "71b640e686964efb27cb708f4457ffaed183c319" GITHUB_BASE_URI = "https://github.com/avahi/avahi/releases/"