[oe][meta-oe][PATCH 1/8] imagemagick: upgrade 7.1.2-30 -> 7.1.2-32

[oe][meta-oe][PATCH 1/8] imagemagick: upgrade 7.1.2-30 -> 7.1.2-32

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog:
https://imagemagick.org/changelog/#gsc.tab=0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../{imagemagick_7.1.2-30.bb => imagemagick_7.1.2-32.bb}        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.2-30.bb => imagemagick_7.1.2-32.bb} (99%)

diff --git a/meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-30.bb b/meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-32.bb
similarity index 99%
rename from meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-30.bb
rename to meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-32.bb
index 87dd0cca0b..818a4e8520 100644
--- a/meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-30.bb
+++ b/meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-32.bb
@@ -17,7 +17,7 @@ SRC_URI = "git://github.com/ImageMagick/ImageMagick.git;branch=main;protocol=htt
            file://imagemagick-ptest.sh \
 "
 
-SRCREV = "344e9056f43764bfdf82456faf3bc2feee98a6fe"
+SRCREV = "ad98b244c995d2e3051757fa3b7855f45b550d24"
 
 inherit autotools pkgconfig update-alternatives ptest
 export ac_cv_sys_file_offset_bits = "64"

[oe][meta-oe][PATCH 2/8] libmxml: upgrade 4.0.5 -> 4.0.6

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog:
https://github.com/michaelrsweet/mxml/releases/tag/v4.0.6

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../libmxml/{libmxml_4.0.5.bb => libmxml_4.0.6.bb}              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/libmxml/{libmxml_4.0.5.bb => libmxml_4.0.6.bb} (95%)

diff --git a/meta-oe/recipes-support/libmxml/libmxml_4.0.5.bb b/meta-oe/recipes-support/libmxml/libmxml_4.0.6.bb
similarity index 95%
rename from meta-oe/recipes-support/libmxml/libmxml_4.0.5.bb
rename to meta-oe/recipes-support/libmxml/libmxml_4.0.6.bb
index 01142f6f0d..11a16618d5 100644
--- a/meta-oe/recipes-support/libmxml/libmxml_4.0.5.bb
+++ b/meta-oe/recipes-support/libmxml/libmxml_4.0.6.bb
@@ -5,7 +5,7 @@ HOMEPAGE = "https://www.msweet.org/mxml/"
 BUGTRACKER = "https://github.com/michaelrsweet/mxml/issues"
 
 SRC_URI = "git://github.com/michaelrsweet/mxml.git;branch=master;protocol=https;tag=v${PV}"
-SRCREV = "18d5c7dd9c71ebc1d3f21fe1e0614300babdda84"
+SRCREV = "874e249a0d3b506e883210b7ceece5316a8489d4"
 
 # Package does not support out of tree builds.
 inherit autotools-brokensep

[oe][meta-oe][PATCH 3/8] liboauth2: upgrade 2.3.0 -> 2.4.0

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog:
https://github.com/OpenIDC/liboauth2/releases/tag/v2.4.0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../liboauth2/{liboauth2_2.3.0.bb => liboauth2_2.4.0.bb}        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/liboauth2/{liboauth2_2.3.0.bb => liboauth2_2.4.0.bb} (93%)

diff --git a/meta-oe/recipes-support/liboauth2/liboauth2_2.3.0.bb b/meta-oe/recipes-support/liboauth2/liboauth2_2.4.0.bb
similarity index 93%
rename from meta-oe/recipes-support/liboauth2/liboauth2_2.3.0.bb
rename to meta-oe/recipes-support/liboauth2/liboauth2_2.4.0.bb
index 0f82165ab4..b189be45e4 100644
--- a/meta-oe/recipes-support/liboauth2/liboauth2_2.3.0.bb
+++ b/meta-oe/recipes-support/liboauth2/liboauth2_2.4.0.bb
@@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=2ee41112a44fe7014dce33e26468ba93"
 SRC_URI = " \
     git://github.com/OpenIDC/liboauth2;protocol=https;branch=master;tag=v${PV}"
 
-SRCREV = "5aeae56ab2c0ae1ff1c70bc13e0628b134ece70c"
+SRCREV = "85da4346435aec77f2ff11b529f2c1e8e5033c44"
 
 DEPENDS = "libpcre2 jansson curl openssl cjose"
 

[oe][meta-oe][PATCH 4/8] libp11: upgrade 0.4.20 -> 0.4.21

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog:
https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.21

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../libp11/{libp11_0.4.20.bb => libp11_0.4.21.bb}               | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/libp11/{libp11_0.4.20.bb => libp11_0.4.21.bb} (95%)

diff --git a/meta-oe/recipes-support/libp11/libp11_0.4.20.bb b/meta-oe/recipes-support/libp11/libp11_0.4.21.bb
similarity index 95%
rename from meta-oe/recipes-support/libp11/libp11_0.4.20.bb
rename to meta-oe/recipes-support/libp11/libp11_0.4.21.bb
index 259ecb04b8..73e1637572 100644
--- a/meta-oe/recipes-support/libp11/libp11_0.4.20.bb
+++ b/meta-oe/recipes-support/libp11/libp11_0.4.21.bb
@@ -11,7 +11,7 @@ DEPENDS = "libtool openssl"
 
 SRC_URI = "git://github.com/OpenSC/libp11.git;branch=master;protocol=https;tag=${BPN}-${PV}"
 
-SRCREV = "61dc3acf95b859c88844e000001a99948c0abb48"
+SRCREV = "ad19678991c5882d252b06ed02c4d4fb990913d0"
 
 UPSTREAM_CHECK_GITTAGREGEX = "libp11-(?P<pver>\d+(\.\d+)+)"
 

[oe][meta-oe][PATCH 5/8] librdkafka: upgrade 2.15.0 -> 2.15.1

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Upgrade considerations:

- If you're parsing the nodename as received by connect_cb,
stats_cb, ssl_cert_verify_cb or throttle_cb, make sure you're
correctly parsing it following RFC 3986. Metadata API calls
are unaffected: they return the host and port as separate
fields.
- Make sure the brokers' certificates carry the IP in an
iPAddress entry, not a dNSName entry. Previously the
certificate was validated against dNSName (falling back to the
subject CN) whenever the address could not be parsed as an IP
literal: with OpenSSL < 3.0 or BoringSSL for any IP address,
and on all OpenSSL versions for an IPv6 address configured in
brackets in bootstrap.servers ([::1]:9092), which never
verified. A scoped address (fe80::1%eth0) was likewise
dNSName-matched on every version and now has the zone
stripped before matching. IPv6 addresses ending in :: could
not be connected to at all, as the nodename became host:::port
and failed name resolution. In the remaining cases, a bare
IPv4 or IPv6 literal on OpenSSL >= 3.0, the iPAddress entry
was already used, and behaviour is unchanged.

Changelog:
https://github.com/confluentinc/librdkafka/releases/tag/v2.15.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../librdkafka/{librdkafka_2.15.0.bb => librdkafka_2.15.1.bb}   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/librdkafka/{librdkafka_2.15.0.bb => librdkafka_2.15.1.bb} (92%)

diff --git a/meta-oe/recipes-support/librdkafka/librdkafka_2.15.0.bb b/meta-oe/recipes-support/librdkafka/librdkafka_2.15.1.bb
similarity index 92%
rename from meta-oe/recipes-support/librdkafka/librdkafka_2.15.0.bb
rename to meta-oe/recipes-support/librdkafka/librdkafka_2.15.1.bb
index 9a8a84da98..887541efbc 100644
--- a/meta-oe/recipes-support/librdkafka/librdkafka_2.15.0.bb
+++ b/meta-oe/recipes-support/librdkafka/librdkafka_2.15.1.bb
@@ -8,7 +8,7 @@ LICENSE = "BSD-2-Clause"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=40b04809b5d6f648f20f45143cbcb1ad"
 
 SRC_URI = "git://github.com/edenhill/librdkafka;protocol=https;branch=master;tag=v${PV}"
-SRCREV = "9a94e11452cdeb0a844db44ee5dd01ccbe17d3ab"
+SRCREV = "c58bbed850ebe1cc493259d11e4de6ca930d5120"
 
 UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)"
 

[oe][meta-oe][PATCH 6/8] poco: upgrade 1.15.3 -> 1.15.4

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Refreshed patches for the new version.

Behaviour changes:
- client contexts created from the SSLManager configuration verify the host
  name by default
- FTPSClientSession no longer falls back to plaintext when the server
  refuses TLS, unless allowPlaintextFallback() is called
- HTTP requests with duplicate or conflicting framing headers are rejected
- URIStreamOpener and HTTPSStreamFactory follow redirects only to http and
  https.

Changelog:
https://github.com/pocoproject/poco/releases/tag/poco-1.15.4-release

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 ...pignore.lnx-Ignore-PKCS12-and-testLaunch-test.patch | 10 +++-------
 .../0002-DataTest-disable-testSQLChannel-test.patch    | 10 +++++-----
 .../0003-quill-rdtsc-fallback-for-32-bit-powerpc.patch |  6 ++----
 .../poco/{poco_1.15.3.bb => poco_1.15.4.bb}            |  4 ++--
 4 files changed, 12 insertions(+), 18 deletions(-)
 rename meta-oe/recipes-support/poco/{poco_1.15.3.bb => poco_1.15.4.bb} (97%)

diff --git a/meta-oe/recipes-support/poco/poco/0001-cppignore.lnx-Ignore-PKCS12-and-testLaunch-test.patch b/meta-oe/recipes-support/poco/poco/0001-cppignore.lnx-Ignore-PKCS12-and-testLaunch-test.patch
index f8eadb3ee6..9ac1f6419d 100644
--- a/meta-oe/recipes-support/poco/poco/0001-cppignore.lnx-Ignore-PKCS12-and-testLaunch-test.patch
+++ b/meta-oe/recipes-support/poco/poco/0001-cppignore.lnx-Ignore-PKCS12-and-testLaunch-test.patch
@@ -1,10 +1,7 @@
-From 6b1123b313e439d8bfae3570a3e541b3aa26f3ad Mon Sep 17 00:00:00 2001
+From ca21bd382833ff40d19487bf395b4d33b7e1280a Mon Sep 17 00:00:00 2001
 From: Khem Raj <raj.khem@gmail.com>
 Date: Sat, 16 Sep 2023 19:52:56 -0700
 Subject: [PATCH] cppignore.lnx: Ignore PKCS12 and testLaunch test
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
 
 These tests fail on Linux
 
@@ -15,16 +12,15 @@ Signed-off-by: Peter Marko <peter.marko@siemens.com>
 
 Updated comment and content after fixing some tests.
 Left only MongoDBTest.testArray on ignore list, untested.
-
 ---
  cppignore.lnx | 1 +
  1 file changed, 1 insertion(+)
 
 diff --git a/cppignore.lnx b/cppignore.lnx
-index b3288d474..9aad48ca5 100644
+index cf779418c..1d7e2670a 100644
 --- a/cppignore.lnx
 +++ b/cppignore.lnx
-@@ -35,3 +35,4 @@ CppUnit::TestCaller<HTTPSClientSessionTest>.testProxy
+@@ -34,3 +34,4 @@ CppUnit::TestCaller<HTTPSClientSessionTest>.testProxy
  CppUnit::TestCaller<HTTPSStreamFactoryTest>.testProxy
  CppUnit::TestCaller<DNSTest>.testHostByAddress
  CppUnit::TestCaller<DNSTest>.testHostByName
diff --git a/meta-oe/recipes-support/poco/poco/0002-DataTest-disable-testSQLChannel-test.patch b/meta-oe/recipes-support/poco/poco/0002-DataTest-disable-testSQLChannel-test.patch
index 38028c1cf8..303940a95e 100644
--- a/meta-oe/recipes-support/poco/poco/0002-DataTest-disable-testSQLChannel-test.patch
+++ b/meta-oe/recipes-support/poco/poco/0002-DataTest-disable-testSQLChannel-test.patch
@@ -1,4 +1,4 @@
-From 0a8c7e5e074c124c2d5e5713fc3038295324cf96 Mon Sep 17 00:00:00 2001
+From 4ec73803526588522f60320ad87177235c64a19b Mon Sep 17 00:00:00 2001
 From: Peter Marko <peter.marko@siemens.com>
 Date: Thu, 4 Sep 2025 22:27:26 +0200
 Subject: [PATCH] DataTest: disable testSQLChannel test
@@ -12,15 +12,15 @@ Signed-off-by: Peter Marko <peter.marko@siemens.com>
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/Data/testsuite/src/DataTest.cpp b/Data/testsuite/src/DataTest.cpp
-index e18b87edc..60fd266c3 100644
+index e730cbe24..e4d56b2f6 100644
 --- a/Data/testsuite/src/DataTest.cpp
 +++ b/Data/testsuite/src/DataTest.cpp
-@@ -1659,7 +1659,7 @@ CppUnit::Test* DataTest::suite()
+@@ -1778,7 +1778,7 @@ CppUnit::Test* DataTest::suite()
  	CppUnit_addTest(pSuite, DataTest, testExternalBindingAndExtraction);
  	CppUnit_addTest(pSuite, DataTest, testTranscode);
  	CppUnit_addTest(pSuite, DataTest, testSQLParse);
 -	CppUnit_addTest(pSuite, DataTest, testSQLChannel);
 +	//CppUnit_addTest(pSuite, DataTest, testSQLChannel);
  	CppUnit_addTest(pSuite, DataTest, testNullableExtract);
- 
- 	return pSuite;
+ 	CppUnit_addTest(pSuite, DataTest, testTransactionAutoCommit);
+ 	CppUnit_addTest(pSuite, DataTest, testExecuteDirectNotImplemented);
diff --git a/meta-oe/recipes-support/poco/poco/0003-quill-rdtsc-fallback-for-32-bit-powerpc.patch b/meta-oe/recipes-support/poco/poco/0003-quill-rdtsc-fallback-for-32-bit-powerpc.patch
index 293321bfa8..ac9e103bef 100644
--- a/meta-oe/recipes-support/poco/poco/0003-quill-rdtsc-fallback-for-32-bit-powerpc.patch
+++ b/meta-oe/recipes-support/poco/poco/0003-quill-rdtsc-fallback-for-32-bit-powerpc.patch
@@ -1,4 +1,4 @@
-From dce2cc2886a9097971856e69737cc5c05c9239ea Mon Sep 17 00:00:00 2001
+From 5e149e9e9948ecf6dffdb7f48d56b01d262990fd Mon Sep 17 00:00:00 2001
 From: Peter Marko <peter.marko@siemens.com>
 Date: Wed, 8 Apr 2026 10:54:25 +0200
 Subject: [PATCH] quill: use soft rdtsc fallback on 32-bit PowerPC
@@ -19,7 +19,7 @@ Signed-off-by: Peter Marko <peter.marko@siemens.com>
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/dependencies/quill/include/quill/core/Rdtsc.h b/dependencies/quill/include/quill/core/Rdtsc.h
-index 3d0ae9f26..67f26cb89 100644
+index 10394c585..bbf1797ae 100644
 --- a/dependencies/quill/include/quill/core/Rdtsc.h
 +++ b/dependencies/quill/include/quill/core/Rdtsc.h
 @@ -95,7 +95,7 @@ QUILL_NODISCARD QUILL_ATTRIBUTE_HOT inline uint64_t rdtsc() noexcept
@@ -31,5 +31,3 @@ index 3d0ae9f26..67f26cb89 100644
  QUILL_NODISCARD QUILL_ATTRIBUTE_HOT inline uint64_t rdtsc() noexcept
  {
    // soft failover
--- 
-2.47.2
diff --git a/meta-oe/recipes-support/poco/poco_1.15.3.bb b/meta-oe/recipes-support/poco/poco_1.15.4.bb
similarity index 97%
rename from meta-oe/recipes-support/poco/poco_1.15.3.bb
rename to meta-oe/recipes-support/poco/poco_1.15.4.bb
index ed236f7a5c..f4c572d4ae 100644
--- a/meta-oe/recipes-support/poco/poco_1.15.3.bb
+++ b/meta-oe/recipes-support/poco/poco_1.15.4.bb
@@ -8,13 +8,13 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=4267f48fc738f50380cbeeb76f95cebc"
 # These dependencies are required by Foundation
 DEPENDS = "libpcre2 utf8proc zlib"
 
-SRC_URI = "git://github.com/pocoproject/poco.git;branch=poco-1.15.3;protocol=https;tag=poco-${PV}-release \
+SRC_URI = "git://github.com/pocoproject/poco.git;branch=poco-${PV};protocol=https;tag=poco-${PV}-release \
            file://0001-cppignore.lnx-Ignore-PKCS12-and-testLaunch-test.patch \
            file://0002-DataTest-disable-testSQLChannel-test.patch \
            file://0003-quill-rdtsc-fallback-for-32-bit-powerpc.patch \
            file://run-ptest \
            "
-SRCREV = "e8c711ce5a58006272b3950c293eb92c849caea3"
+SRCREV = "6a5667f432e1c5fe5591025ab03a2f8df37116b4"
 
 UPSTREAM_CHECK_GITTAGREGEX = "poco-(?P<pver>\d+(\.\d+)+)"
 

[oe][meta-oe][PATCH 7/8] upower: upgrade 1.91.3 -> 1.91.4

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog:
https://gitlab.freedesktop.org/upower/upower/-/blob/v1.91.4/NEWS?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../upower/{upower_1.91.3.bb => upower_1.91.4.bb}               | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/upower/{upower_1.91.3.bb => upower_1.91.4.bb} (95%)

diff --git a/meta-oe/recipes-support/upower/upower_1.91.3.bb b/meta-oe/recipes-support/upower/upower_1.91.4.bb
similarity index 95%
rename from meta-oe/recipes-support/upower/upower_1.91.3.bb
rename to meta-oe/recipes-support/upower/upower_1.91.4.bb
index 8213c5e15f..acd60715dd 100644
--- a/meta-oe/recipes-support/upower/upower_1.91.3.bb
+++ b/meta-oe/recipes-support/upower/upower_1.91.4.bb
@@ -13,7 +13,7 @@ DEPENDS = " \
 "
 
 SRC_URI = "https://gitlab.freedesktop.org/${BPN}/${BPN}/-/archive/v${PV}/${BPN}-v${PV}.tar.bz2"
-SRC_URI[sha256sum] = "12227b3dcd34c5097bbda25984b192ea0bd5e11dce479358d9ef70415a38e4b6"
+SRC_URI[sha256sum] = "de2cd848c927e267f37d1aa6b52631857055b0a1fc76c0e10e173723d83abeae"
 S = "${UNPACKDIR}/${BPN}-v${PV}"
 
 UPSTREAM_CHECK_URI = "https://gitlab.freedesktop.org/${BPN}/${BPN}/-/tags"

[oe][meta-oe][PATCH 8/8] freerdp3: upgrade 3.30.0 -> 3.32.1

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.31.0
https://github.com/FreeRDP/FreeRDP/releases/tag/3.31.1
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.0
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 ...1-winpr-tools-link-only-winpr-public.patch | 76 +++++++++++++++++++
 ...{freerdp3_3.30.0.bb => freerdp3_3.32.1.bb} |  3 +-
 2 files changed, 78 insertions(+), 1 deletion(-)
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch
 rename meta-oe/recipes-support/freerdp/{freerdp3_3.30.0.bb => freerdp3_3.32.1.bb} (98%)

diff --git a/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch b/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch
new file mode 100644
index 0000000000..2dea69c3c4
--- /dev/null
+++ b/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch
@@ -0,0 +1,76 @@
+From 6682e9ca667271b8ba148a301b4a2f9ac78be2b9 Mon Sep 17 00:00:00 2001
+From: Armin Novak <armin.novak@thincast.com>
+Date: Mon, 28 Sep 2026 11:57:22 +0200
+Subject: [PATCH] [winpr,tools] link only winpr public
+
+Upstream-Status: Backport [https://github.com/FreeRDP/FreeRDP/commit/6682e9ca667271b8ba148a301b4a2f9ac78be2b9]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ winpr/tools/CMakeLists.txt          | 18 +++++++++++++-----
+ winpr/tools/makecert/CMakeLists.txt |  6 +++---
+ 2 files changed, 16 insertions(+), 8 deletions(-)
+
+diff --git a/winpr/tools/CMakeLists.txt b/winpr/tools/CMakeLists.txt
+index 5719c1c65..225b70744 100644
+--- a/winpr/tools/CMakeLists.txt
++++ b/winpr/tools/CMakeLists.txt
+@@ -28,7 +28,8 @@ set(WINPR_TOOLS_API_VERSION "${WINPR_TOOLS_VERSION_MAJOR}")
+ 
+ set(WINPR_TOOLS_DIR ${CMAKE_CURRENT_SOURCE_DIR})
+ set(WINPR_TOOLS_SRCS "")
+-set(WINPR_TOOLS_LIBS "")
++set(WINPR_TOOLS_PUBLIC_LIBS "")
++set(WINPR_TOOLS_PRIVATE_LIBS "")
+ set(WINPR_TOOLS_INCLUDES "")
+ set(WINPR_TOOLS_DEFINITIONS "")
+ 
+@@ -64,11 +65,18 @@ macro(winpr_tools_include_directory_add)
+   endif()
+ endmacro()
+ 
+-macro(winpr_tools_library_add)
++macro(winpr_tools_library_public_add)
+   foreach(_lib ${ARGN})
+-    list(APPEND WINPR_TOOLS_LIBS "${_lib}")
++    list(APPEND WINPR_TOOLS_PUBLIC_LIBS "${_lib}")
+   endforeach()
+-  set(WINPR_TOOLS_LIBS ${WINPR_TOOLS_LIBS} PARENT_SCOPE)
++  set(WINPR_TOOLS_PUBLIC_LIBS ${WINPR_TOOLS_PUBLIC_LIBS} PARENT_SCOPE)
++endmacro()
++
++macro(winpr_tools_library_private_add)
++  foreach(_lib ${ARGN})
++    list(APPEND WINPR_TOOLS_PRIVATE_LIBS "${_lib}")
++  endforeach()
++  set(WINPR_TOOLS_PRIVATE_LIBS ${WINPR_TOOLS_PRIVATE_LIBS} PARENT_SCOPE)
+ endmacro()
+ 
+ macro(winpr_tools_definition_add)
+@@ -89,7 +97,7 @@ addtargetwithresourcefile(${MODULE_NAME} FALSE "${WINPR_VERSION}" WINPR_TOOLS_SR
+ 
+ add_compile_definitions(${WINPR_DEFINITIONS})
+ target_include_directories(${MODULE_NAME} INTERFACE $<INSTALL_INTERFACE:include/winpr${WINPR_VERSION_MAJOR}>)
+-target_link_libraries(${MODULE_NAME} PUBLIC ${WINPR_TOOLS_LIBS})
++target_link_libraries(${MODULE_NAME} PRIVATE ${WINPR_TOOLS_PRIVATE_LIBS} PUBLIC ${WINPR_TOOLS_PUBLIC_LIBS})
+ 
+ installwithrpath(
+   TARGETS
+diff --git a/winpr/tools/makecert/CMakeLists.txt b/winpr/tools/makecert/CMakeLists.txt
+index 37b831125..0af1fcc08 100644
+--- a/winpr/tools/makecert/CMakeLists.txt
++++ b/winpr/tools/makecert/CMakeLists.txt
+@@ -31,11 +31,11 @@ endif()
+ winpr_tools_module_add(${${MODULE_PREFIX}_SRCS})
+ 
+ if(OPENSSL_FOUND)
+-  list(APPEND ${MODULE_PREFIX}_LIBS ${OPENSSL_LIBRARIES})
++  winpr_tools_library_private_add(${OPENSSL_LIBRARIES})
+ endif()
+ 
+ if(MBEDTLS_FOUND)
+-  list(APPEND ${MODULE_PREFIX}_LIBS ${MBEDTLS_LIBRARIES})
++  winpr_tools_library_private_add(${MBEDTLS_LIBRARIES})
+ endif()
+ 
+-winpr_tools_library_add(${${MODULE_PREFIX}_LIBS} winpr)
++winpr_tools_library_public_add(winpr)
diff --git a/meta-oe/recipes-support/freerdp/freerdp3_3.30.0.bb b/meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb
similarity index 98%
rename from meta-oe/recipes-support/freerdp/freerdp3_3.30.0.bb
rename to meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb
index c839f7b7a1..f43c8cc7d2 100644
--- a/meta-oe/recipes-support/freerdp/freerdp3_3.30.0.bb
+++ b/meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb
@@ -8,8 +8,9 @@ RDEPENDS:${PN}-ptest += "cmake coreutils"
 
 inherit pkgconfig cmake ptest
 
-SRCREV = "6b107f0aadbabc47941c5a5b893b88c01792af6d"
+SRCREV = "bf217a504e54cc719880c228e82353382cd7d4fa"
 SRC_URI = "git://github.com/FreeRDP/FreeRDP.git;nobranch=1;protocol=https;tag=${PV} \
+           file://0001-winpr-tools-link-only-winpr-public.patch \
            file://run-ptest"