[OE-core] [PATCH 01/36] debianutils: upgrade 5.16 -> 5.17

[OE-core] [PATCH 01/36] debianutils: upgrade 5.16 -> 5.17

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
=============
* run-parts.c: Forward last exit code to preserve exit status.
* d/tests/control: Add run-parts.test to autopkgtests.
* d/tests/run-parts.test: Move run-parts testing here and add testing for
  the --exit-on-error option.
* d/tests/smoke: Remove duplicate run-parts testing.
* acinclude.m4: Bump DEBIANUTILS_VERSION from 5.14 to 5.17.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../debianutils/{debianutils_5.16.bb => debianutils_5.17.bb}    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-support/debianutils/{debianutils_5.16.bb => debianutils_5.17.bb} (97%)

diff --git a/meta/recipes-support/debianutils/debianutils_5.16.bb b/meta/recipes-support/debianutils/debianutils_5.17.bb
similarity index 97%
rename from meta/recipes-support/debianutils/debianutils_5.16.bb
rename to meta/recipes-support/debianutils/debianutils_5.17.bb
index ec629d8b73..c5f25bae40 100644
--- a/meta/recipes-support/debianutils/debianutils_5.16.bb
+++ b/meta/recipes-support/debianutils/debianutils_5.17.bb
@@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "file://debian/copyright;md5=4b667f30411d21bc8fd7db85d502a8e9
 SRC_URI = "git://salsa.debian.org/debian/debianutils.git;protocol=https;branch=master \
            "
 
-SRCREV = "9e0facf19b17b6d090a5dcc8cacb0c16e5ad9f72"
+SRCREV = "baf12e98a02883d1b76081e32f2185ee3497570b"
 
 inherit autotools update-alternatives
 
-- 
2.34.1

[OE-core] [PATCH 02/36] diffoscope: upgrade 259 -> 260

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
* Actually test 7z support in the test_7z set of tests, not the lz4
  functionality.
* In addition, correctly check for the 7z binary being available
  (and not lz4) when testing 7z.
* Prevent a traceback when comparing a contentful .pyc file with an
  empty one.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../diffoscope/{diffoscope_259.bb => diffoscope_260.bb}         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-support/diffoscope/{diffoscope_259.bb => diffoscope_260.bb} (93%)

diff --git a/meta/recipes-support/diffoscope/diffoscope_259.bb b/meta/recipes-support/diffoscope/diffoscope_260.bb
similarity index 93%
rename from meta/recipes-support/diffoscope/diffoscope_259.bb
rename to meta/recipes-support/diffoscope/diffoscope_260.bb
index eca2c208fc..297a53fb53 100644
--- a/meta/recipes-support/diffoscope/diffoscope_259.bb
+++ b/meta/recipes-support/diffoscope/diffoscope_260.bb
@@ -12,7 +12,7 @@ PYPI_PACKAGE = "diffoscope"
 
 inherit pypi setuptools3
 
-SRC_URI[sha256sum] = "c1f14452467f84c4be804a3725cbfdd5eadf977ece7ad463be8b647d1a87fb42"
+SRC_URI[sha256sum] = "405a55502c8b2c988e46c0800d6a93e8e4e7632c1542b0a540dda50aeea41dac"
 
 RDEPENDS:${PN} += "\
         binutils \
-- 
2.34.1

[OE-core] [PATCH 03/36] encodings: upgrade 1.0.7 -> 1.1.0

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
-Add a meson build system
-Add the ISO8859-14 encoding

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../xorg-font/{encodings_1.0.7.bb => encodings_1.1.0.bb}        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-font/{encodings_1.0.7.bb => encodings_1.1.0.bb} (86%)

diff --git a/meta/recipes-graphics/xorg-font/encodings_1.0.7.bb b/meta/recipes-graphics/xorg-font/encodings_1.1.0.bb
similarity index 86%
rename from meta/recipes-graphics/xorg-font/encodings_1.0.7.bb
rename to meta/recipes-graphics/xorg-font/encodings_1.1.0.bb
index 5906da416a..7432c08ec0 100644
--- a/meta/recipes-graphics/xorg-font/encodings_1.0.7.bb
+++ b/meta/recipes-graphics/xorg-font/encodings_1.1.0.bb
@@ -11,7 +11,7 @@ PE = "1"
 DEPENDS = "mkfontscale-native mkfontdir-native font-util-native"
 RDEPENDS:${PN} = ""
 
-SRC_URI[sha256sum] = "3a39a9f43b16521cdbd9f810090952af4f109b44fa7a865cd555f8febcea70a4"
+SRC_URI[sha256sum] = "9ff13c621756cfa12e95f32ba48a5b23839e8f577d0048beda66c67dab4de975"
 
 SRC_URI_EXT = "xz"
 
-- 
2.34.1

[OE-core] [PATCH 04/36] gcr: upgrade 4.2.0 -> 4.2.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
- gcr-ssh-agent: set 'SSH_AUTH_SOCK'
- gcr-ssh-agent: port avoid deadlock fix
- Updated translations

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta/recipes-gnome/gcr/{gcr_4.2.0.bb => gcr_4.2.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-gnome/gcr/{gcr_4.2.0.bb => gcr_4.2.1.bb} (95%)

diff --git a/meta/recipes-gnome/gcr/gcr_4.2.0.bb b/meta/recipes-gnome/gcr/gcr_4.2.1.bb
similarity index 95%
rename from meta/recipes-gnome/gcr/gcr_4.2.0.bb
rename to meta/recipes-gnome/gcr/gcr_4.2.1.bb
index c534e22f0a..26dc1d1bc6 100644
--- a/meta/recipes-gnome/gcr/gcr_4.2.0.bb
+++ b/meta/recipes-gnome/gcr/gcr_4.2.1.bb
@@ -20,7 +20,7 @@ inherit gnomebase gtk-icon-cache gi-docgen features_check vala gobject-introspec
 
 REQUIRED_DISTRO_FEATURES = "${@bb.utils.contains('DISTRO_FEATURES', 'x11', 'opengl', '', d)}"
 
-SRC_URI[archive.sha256sum] = "e15e31329e0171229d552d25563f176c5b6179795bf91fae2b141f69a9b7c480"
+SRC_URI[archive.sha256sum] = "ed783b5c80373cd058c02ea9e3e2a64e558599ca190a5abd598122e479967de5"
 
 PACKAGECONFIG ??= " \
 	${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)} \
-- 
2.34.1

[OE-core] [PATCH 05/36] ghostscript: upgrade 10.02.1 -> 10.03.0

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

avoid-host-contamination.patch
refreshed for 10.03.0

configure.ac-add-option-to-explicitly-disable-neon.patch
removed since it's included in 10.03.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../avoid-host-contamination.patch            | 11 +--
 ...dd-option-to-explicitly-disable-neon.patch | 99 -------------------
 ...ript_10.02.1.bb => ghostscript_10.03.0.bb} |  3 +-
 3 files changed, 5 insertions(+), 108 deletions(-)
 delete mode 100644 meta/recipes-extended/ghostscript/ghostscript/configure.ac-add-option-to-explicitly-disable-neon.patch
 rename meta/recipes-extended/ghostscript/{ghostscript_10.02.1.bb => ghostscript_10.03.0.bb} (94%)

diff --git a/meta/recipes-extended/ghostscript/ghostscript/avoid-host-contamination.patch b/meta/recipes-extended/ghostscript/ghostscript/avoid-host-contamination.patch
index 15c7eb5a77..67f14bd368 100644
--- a/meta/recipes-extended/ghostscript/ghostscript/avoid-host-contamination.patch
+++ b/meta/recipes-extended/ghostscript/ghostscript/avoid-host-contamination.patch
@@ -1,7 +1,7 @@
-From 0ccbaa134093bf6afc79f2d20d061bca5a8754ed Mon Sep 17 00:00:00 2001
+From b36713c8f1ba0e5755b78845a433354a63663b1a Mon Sep 17 00:00:00 2001
 From: Kai Kang <kai.kang@windriver.com>
 Date: Thu, 29 Mar 2018 16:02:05 +0800
-Subject: [PATCH 04/10] avoid host contamination
+Subject: [PATCH] avoid host contamination
 
 Remove hardcode path refer to host to avoid host contamination.
 
@@ -15,10 +15,10 @@ Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/devices/devs.mak b/devices/devs.mak
-index 846aa50..9570182 100644
+index 186f704..88ab8c9 100644
 --- a/devices/devs.mak
 +++ b/devices/devs.mak
-@@ -393,7 +393,7 @@ $(DEVOBJ)gdevxalt.$(OBJ) : $(DEVSRC)gdevxalt.c $(GDEVX) $(math__h) $(memory__h)\
+@@ -397,7 +397,7 @@ $(DEVOBJ)gdevxalt.$(OBJ) : $(DEVSRC)gdevxalt.c $(GDEVX) $(math__h) $(memory__h)\
  ### NON PORTABLE, ONLY UNIX WITH GCC SUPPORT
  
  $(DEVOBJ)X11.so : $(x11alt_) $(x11_) $(DEVS_MAK) $(MAKEDIRS)
@@ -27,6 +27,3 @@ index 846aa50..9570182 100644
  
  ###### --------------- Memory-buffered printer devices --------------- ######
  
--- 
-1.8.3.1
-
diff --git a/meta/recipes-extended/ghostscript/ghostscript/configure.ac-add-option-to-explicitly-disable-neon.patch b/meta/recipes-extended/ghostscript/ghostscript/configure.ac-add-option-to-explicitly-disable-neon.patch
deleted file mode 100644
index 7873396045..0000000000
--- a/meta/recipes-extended/ghostscript/ghostscript/configure.ac-add-option-to-explicitly-disable-neon.patch
+++ /dev/null
@@ -1,99 +0,0 @@
-From fd37229a17822c5ad21a369f670b8a6f6cc6b95b Mon Sep 17 00:00:00 2001
-From: Benjamin Bara <benjamin.bara@skidata.com>
-Date: Mon, 4 Sep 2023 12:16:39 +0200
-Subject: [PATCH] configure.ac: add option to explicitly disable neon
-
-Uncomment an already existing possibility to explicitly disable neon and
-use it on both implemented neon checks.
-
-Upstream-Status: Submitted [https://bugs.ghostscript.com/show_bug.cgi?id=707097]
-
-Signed-off-by: Benjamin Bara <benjamin.bara@skidata.com>
----
- configure.ac | 52 +++++++++++++++++++++++++++++-----------------------
- 1 file changed, 29 insertions(+), 23 deletions(-)
-
-diff --git a/configure.ac b/configure.ac
-index 09d881dd1..62718e15e 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -749,6 +749,33 @@ SUBCONFIG_OPTS="--build=$build --host=$host"
- #  SUBCONFIG_OPTS="$SUBCONFIG_OPTS --host=$host_alias"
- #fi
- 
-+dnl --------------------------------------------------
-+dnl Check for NEON support
-+dnl --------------------------------------------------
-+save_cflags=$CFLAGS
-+AC_MSG_CHECKING([neon support])
-+CFLAGS="$save_cflags $OPT_CFLAGS -mfpu=neon -mcpu=cortex-a53"
-+HAVE_NEON=""
-+AC_LINK_IFELSE(
-+  [AC_LANG_PROGRAM([#include "arm_neon.h"], [
-+  int32x4_t round = vdupq_n_s32(10);
-+  return(0);
-+  ])],
-+  [HAVE_NEON="-DHAVE_NEON"], [HAVE_NEON=""])
-+
-+AC_ARG_ENABLE([neon], AS_HELP_STRING([--disable-neon],
-+       [Do not use neon instrinsics]), [
-+             if test "x$enable_neon" = xno; then
-+                HAVE_NEON=""
-+             fi])
-+
-+if test "x$HAVE_NEON" != x; then
-+  AC_MSG_RESULT(yes)
-+else
-+  AC_MSG_RESULT(no)
-+fi
-+CFLAGS=$save_cflags
-+
- dnl --------------------------------------------------
- dnl Check for libraries
- dnl --------------------------------------------------
-@@ -971,11 +998,12 @@ if test x$with_tesseract != xno; then
-          [TESS_NEON="-mfpu=neon -mcpu=cortex-a53 -D__ARM_NEON__"],
-          [TESS_NEON=""])
- 
--        if test "x$TESS_NEON" != x; then
-+        if test "x$TESS_NEON" != x && test "x$enable_neon" != xno; then
-           AC_MSG_RESULT(yes)
-           TESS_CXXFLAGS="$TESS_CXXFLAGS -DHAVE_NEON"
-         else
-           AC_MSG_RESULT(no)
-+          TESS_NEON=""
-         fi
- 
-         CXXFLAGS="$save_cxxflags"
-@@ -2387,28 +2415,6 @@ if test x$WITH_CAL != x0; then
-     AC_MSG_RESULT(no)
-   fi
- 
--  AC_MSG_CHECKING([neon support])
--  CFLAGS="$save_cflags $OPT_CFLAGS -mfpu=neon -mcpu=cortex-a53"
--  HAVE_NEON=""
--  AC_LINK_IFELSE(
--    [AC_LANG_PROGRAM([#include "arm_neon.h"], [
--    int32x4_t round = vdupq_n_s32(10);
--    return(0);
--    ])],
--    [HAVE_NEON="-DHAVE_NEON"], [HAVE_NEON=""])
--
--  #AC_ARG_ENABLE([neon], AS_HELP_STRING([--disable-neon],
--  #       [Do not use neon instrinsics]), [
--  #             if test "x$enable_neon" = xno; then
--  #                HAVE_NEON=""
--  #             fi])
--
--  if test "x$HAVE_NEON" != x; then
--    AC_MSG_RESULT(yes)
--  else
--    AC_MSG_RESULT(no)
--  fi
--
-   #AC_SUBST(HAVE_SSE4_2)
-   #AC_SUBST(HAVE_NEON)
-   CFLAGS=$save_cflags
--- 
-2.34.1
-
diff --git a/meta/recipes-extended/ghostscript/ghostscript_10.02.1.bb b/meta/recipes-extended/ghostscript/ghostscript_10.03.0.bb
similarity index 94%
rename from meta/recipes-extended/ghostscript/ghostscript_10.02.1.bb
rename to meta/recipes-extended/ghostscript/ghostscript_10.03.0.bb
index 3dff16eec2..ff7d38676e 100644
--- a/meta/recipes-extended/ghostscript/ghostscript_10.02.1.bb
+++ b/meta/recipes-extended/ghostscript/ghostscript_10.03.0.bb
@@ -25,10 +25,9 @@ def gs_verdir(v):
 SRC_URI = "https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs${@gs_verdir("${PV}")}/${BPN}-${PV}.tar.gz \
            file://ghostscript-9.16-Werror-return-type.patch \
            file://avoid-host-contamination.patch \
-           file://configure.ac-add-option-to-explicitly-disable-neon.patch \
            "
 
-SRC_URI[sha256sum] = "e429e4f5b01615a4f0f93a4128e8a1a4d932dff983b1774174c79c0630717ad9"
+SRC_URI[sha256sum] = "6f2bc61023469fcf7c7c2d7f1bdd75b75f2b41836aa1d5e641396246d4abbb59"
 
 PACKAGECONFIG ??= ""
 PACKAGECONFIG[gtk] = "--enable-gtk,--disable-gtk,gtk+3"
-- 
2.34.1

[OE-core] [PATCH 06/36] gnupg: upgrade 2.4.4 -> 2.4.5

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
* gpg,gpgv: New option --assert-pubkey-algo.
* gpg: Emit status lines for errors in the compression layer.
* gpg: Fix invocation with --trusted-keys and --no-options.
* gpgsm: Allow for a longer salt in PKCS#12 files.
* gpgtar: Make --status-fd=2 work on Windows.
* scd: Support for the ACR-122U NFC reader.
* scd: Suport D-TRUST ECC cards.
* scd: Allow auto detaching of kernel drivers; can be disabled with
  the new compatibility-flag ccid-no-auto-detach.
* scd: Allow setting a PIN length of 6 also with a reset code for
  openpgp cards.
* agent: Allow GET_PASSPHRASE in restricted mode.
* dirmngr: Trust system's root CAs for checking CRL issuers.
* dirmngr: Fix regression in 2.4.4 in fetching keys via hkps.
* gpg-wks-client: Make option --mirror work properly w/o specifying
  domains.
* g13,gpg-wks-client: Allow command style options as in "g13 mount
  foo".
* Allow tilde expansion for the foo-program options.
* Make the getswdb.sh tool usable outside the GnuPG tree.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta/recipes-support/gnupg/{gnupg_2.4.4.bb => gnupg_2.4.5.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-support/gnupg/{gnupg_2.4.4.bb => gnupg_2.4.5.bb} (97%)

diff --git a/meta/recipes-support/gnupg/gnupg_2.4.4.bb b/meta/recipes-support/gnupg/gnupg_2.4.5.bb
similarity index 97%
rename from meta/recipes-support/gnupg/gnupg_2.4.4.bb
rename to meta/recipes-support/gnupg/gnupg_2.4.5.bb
index fff7d8c6da..99996968b1 100644
--- a/meta/recipes-support/gnupg/gnupg_2.4.4.bb
+++ b/meta/recipes-support/gnupg/gnupg_2.4.5.bb
@@ -23,7 +23,7 @@ SRC_URI:append:class-native = " file://0001-configure.ac-use-a-custom-value-for-
                                 file://relocate.patch"
 SRC_URI:append:class-nativesdk = " file://relocate.patch"
 
-SRC_URI[sha256sum] = "67ebe016ca90fa7688ce67a387ebd82c6261e95897db7b23df24ff335be85bc6"
+SRC_URI[sha256sum] = "f68f7d75d06cb1635c336d34d844af97436c3f64ea14bcb7c869782f96f44277"
 
 EXTRA_OECONF = "--disable-ldap \
 		--disable-ccid-driver \
-- 
2.34.1

[OE-core] [PATCH 07/36] libadwaita: upgrade 1.4.3 -> 1.4.4

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
- Fix layout with GtkSettings:gtk-xft-dpi == 0
- AdwNavigationView
  - Fix signal mentions in push() docs
- AdwStatusPage
  - Fix property notification in set_child()
- AdwToolbarView
  - Fix a typo in docs
- Translation updates
  - British English

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../libadwaita/{libadwaita_1.4.3.bb => libadwaita_1.4.4.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-gnome/libadwaita/{libadwaita_1.4.3.bb => libadwaita_1.4.4.bb} (88%)

diff --git a/meta/recipes-gnome/libadwaita/libadwaita_1.4.3.bb b/meta/recipes-gnome/libadwaita/libadwaita_1.4.4.bb
similarity index 88%
rename from meta/recipes-gnome/libadwaita/libadwaita_1.4.3.bb
rename to meta/recipes-gnome/libadwaita/libadwaita_1.4.4.bb
index e3f849ad6a..e81580feba 100644
--- a/meta/recipes-gnome/libadwaita/libadwaita_1.4.3.bb
+++ b/meta/recipes-gnome/libadwaita/libadwaita_1.4.4.bb
@@ -11,7 +11,7 @@ DEPENDS = " \
 
 inherit gnomebase gobject-introspection gi-docgen vala features_check
 
-SRC_URI[archive.sha256sum] = "ae9622222b0eb18e23675655ad2ba01741db4d8655a796f4cf077b093e2f5841"
+SRC_URI[archive.sha256sum] = "f802b7d8d5ae33be4650ef571a580f144a806202a26f527dacd57d1560938828"
 
 ANY_OF_DISTRO_FEATURES = "${GTK3DISTROFEATURES}"
 REQUIRED_DISTRO_FEATURES = "opengl"
-- 
2.34.1

[OE-core] [PATCH 08/36] libassuan: upgrade 2.5.6 -> 2.5.7

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
============
* New configure option --with-libtool-modification.
* Change the naming of the 64 bit Windows DLL from libassuan6-0.dll
  to libassuan-0.dll to sync this with what we did for libgpg-error.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../libassuan/{libassuan_2.5.6.bb => libassuan_2.5.7.bb}        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-support/libassuan/{libassuan_2.5.6.bb => libassuan_2.5.7.bb} (93%)

diff --git a/meta/recipes-support/libassuan/libassuan_2.5.6.bb b/meta/recipes-support/libassuan/libassuan_2.5.7.bb
similarity index 93%
rename from meta/recipes-support/libassuan/libassuan_2.5.6.bb
rename to meta/recipes-support/libassuan/libassuan_2.5.7.bb
index 7e899e7399..d1e622635f 100644
--- a/meta/recipes-support/libassuan/libassuan_2.5.6.bb
+++ b/meta/recipes-support/libassuan/libassuan_2.5.7.bb
@@ -20,7 +20,7 @@ SRC_URI = "${GNUPG_MIRROR}/libassuan/libassuan-${PV}.tar.bz2 \
            file://libassuan-add-pkgconfig-support.patch \
           "
 
-SRC_URI[sha256sum] = "e9fd27218d5394904e4e39788f9b1742711c3e6b41689a31aa3380bd5aa4f426"
+SRC_URI[sha256sum] = "0103081ffc27838a2e50479153ca105e873d3d65d8a9593282e9c94c7e6afb76"
 
 BINCONFIG = "${bindir}/libassuan-config"
 
-- 
2.34.1

[OE-core] [PATCH 09/36] libfontenc: upgrade 1.1.7 -> 1.1.8

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
-Set close-on-exec when opening files
-configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
-Remove "All rights reserved" from Oracle copyright notices
-configure: raise minimum autoconf requirement to 2.70

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../xorg-lib/{libfontenc_1.1.7.bb => libfontenc_1.1.8.bb}       | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-lib/{libfontenc_1.1.7.bb => libfontenc_1.1.8.bb} (80%)

diff --git a/meta/recipes-graphics/xorg-lib/libfontenc_1.1.7.bb b/meta/recipes-graphics/xorg-lib/libfontenc_1.1.8.bb
similarity index 80%
rename from meta/recipes-graphics/xorg-lib/libfontenc_1.1.7.bb
rename to meta/recipes-graphics/xorg-lib/libfontenc_1.1.8.bb
index 056a29af25..0fc117fc58 100644
--- a/meta/recipes-graphics/xorg-lib/libfontenc_1.1.7.bb
+++ b/meta/recipes-graphics/xorg-lib/libfontenc_1.1.8.bb
@@ -11,6 +11,6 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=96254c20ab81c63e65b26f0dbcd4a1c1"
 DEPENDS += "zlib xorgproto font-util"
 PE = "1"
 
-SRC_URI[sha256sum] = "c0d36991faee06551ddbaf5d99266e97becdc05edfae87a833c3ff7bf73cfec2"
+SRC_URI[sha256sum] = "7b02c3d405236e0d86806b1de9d6868fe60c313628b38350b032914aa4fd14c6"
 
 BBCLASSEXTEND = "native"
-- 
2.34.1

[OE-core] [PATCH 10/36] libpng: upgrade 1.6.42 -> 1.6.43

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
-Fixed the row width check in png_check_IHDR().
-Added eXIf chunk support to the push-mode reader in pngpread.c.
-Added contrib/pngexif for the benefit of the users who would like
 to inspect the content of eXIf chunks.
-Added contrib/conftest/basic.dfa, a basic build-time configuration.
-Fixed a preprocessor condition in pngread.c that broke build-time
 configurations like contrib/conftest/pngcp.dfa.
-Added CMake build support for LoongArch LSX.
-Fixed a CMake build error that occurred under a peculiar state of the
 dependency tree. This was a regression introduced in libpng-1.6.41.
-Marked the installed libpng headers as system headers in CMake.
-Updated the build support for RISCOS.
-Updated the makefiles to allow cross-platform builds to initialize
 conventional make variables like AR and ARFLAGS.
-Added various improvements to the CI scripts in areas like version
  consistency verification and text linting.
Added version consistency verification to pngtest.c also.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../libpng/{libpng_1.6.42.bb => libpng_1.6.43.bb}             | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta/recipes-multimedia/libpng/{libpng_1.6.42.bb => libpng_1.6.43.bb} (87%)

diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.42.bb b/meta/recipes-multimedia/libpng/libpng_1.6.43.bb
similarity index 87%
rename from meta/recipes-multimedia/libpng/libpng_1.6.42.bb
rename to meta/recipes-multimedia/libpng/libpng_1.6.43.bb
index cadbe957db..f1febd0a02 100644
--- a/meta/recipes-multimedia/libpng/libpng_1.6.42.bb
+++ b/meta/recipes-multimedia/libpng/libpng_1.6.43.bb
@@ -10,8 +10,8 @@ DEPENDS = "zlib"
 
 LIBV = "16"
 
-SRC_URI = "${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/${BP}.tar.xz"
-SRC_URI[sha256sum] = "c919dbc11f4c03b05aba3f8884d8eb7adfe3572ad228af972bb60057bdb48450"
+SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}${LIBV}/${BP}.tar.xz"
+SRC_URI[sha256sum] = "6a5ca0652392a2d7c9db2ae5b40210843c0bbc081cbd410825ab00cc59f14a6c"
 
 MIRRORS += "${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/ ${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/older-releases/"
 
-- 
2.34.1

[OE-core] [PATCH 11/36] libsdl2: upgrade 2.30.0 -> 2.30.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
-Fixed a regression causing SDL_WaitEvent() to return spurious failures
-Fixed X11 cursors on the latest release of GNOME
-Wayland windows automatically have OpenGL enabled again
-Fixed memory corruption when converting signed 16-bit audio to float
-Fixed audio artifacts when converting signed 8-bit audio to float
-Fixed the clip rectangle not being updated when the viewport changes in the SDL renderer
-Convert mouse wheel coordinates to the rendering view in the SDL renderer
-Fixed a crash handling controllers on macOS
-Fixed a crash setting a window fullscreen with Emscripten
-Fixed the keyboard automatically popping up when resuming an application on Android

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../libsdl2/{libsdl2_2.30.0.bb => libsdl2_2.30.1.bb}            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/libsdl2/{libsdl2_2.30.0.bb => libsdl2_2.30.1.bb} (97%)

diff --git a/meta/recipes-graphics/libsdl2/libsdl2_2.30.0.bb b/meta/recipes-graphics/libsdl2/libsdl2_2.30.1.bb
similarity index 97%
rename from meta/recipes-graphics/libsdl2/libsdl2_2.30.0.bb
rename to meta/recipes-graphics/libsdl2/libsdl2_2.30.1.bb
index 99dbf36477..891e91190a 100644
--- a/meta/recipes-graphics/libsdl2/libsdl2_2.30.0.bb
+++ b/meta/recipes-graphics/libsdl2/libsdl2_2.30.1.bb
@@ -25,7 +25,7 @@ SRC_URI = "http://www.libsdl.org/release/SDL2-${PV}.tar.gz"
 
 S = "${WORKDIR}/SDL2-${PV}"
 
-SRC_URI[sha256sum] = "36e2e41557e0fa4a1519315c0f5958a87ccb27e25c51776beb6f1239526447b0"
+SRC_URI[sha256sum] = "01215ffbc8cfc4ad165ba7573750f15ddda1f971d5a66e9dcaffd37c587f473a"
 
 inherit cmake lib_package binconfig-disabled pkgconfig upstream-version-is-even
 
-- 
2.34.1

[OE-core] [PATCH 12/36] libxcb: upgrade 1.16 -> 1.16.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
-Enable large file support
-Fix compilation on Windows
-gitlab CI: use latest xcbproto from git to build against
-configure.ac: drop `pthread-stubs` dependency on NetBSD
-gitlab CI: regenerate container used for builds

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../xorg-lib/{libxcb_1.16.bb => libxcb_1.16.1.bb}               | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-lib/{libxcb_1.16.bb => libxcb_1.16.1.bb} (93%)

diff --git a/meta/recipes-graphics/xorg-lib/libxcb_1.16.bb b/meta/recipes-graphics/xorg-lib/libxcb_1.16.1.bb
similarity index 93%
rename from meta/recipes-graphics/xorg-lib/libxcb_1.16.bb
rename to meta/recipes-graphics/xorg-lib/libxcb_1.16.1.bb
index 04b1eaa910..de3290aa9f 100644
--- a/meta/recipes-graphics/xorg-lib/libxcb_1.16.bb
+++ b/meta/recipes-graphics/xorg-lib/libxcb_1.16.1.bb
@@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=d763b081cb10c223435b01e00dc0aba7"
 SRC_URI = "http://xcb.freedesktop.org/dist/libxcb-${PV}.tar.xz \
            file://0001-use-_Alignof-to-avoid-UB-in-ALIGNOF.patch"
 
-SRC_URI[sha256sum] = "4348566aa0fbf196db5e0a576321c65966189210cb51328ea2bb2be39c711d71"
+SRC_URI[sha256sum] = "f24d187154c8e027b358fc7cb6588e35e33e6a92f11c668fe77396a7ae66e311"
 
 BBCLASSEXTEND = "native nativesdk"
 
-- 
2.34.1

[OE-core] [PATCH 13/36] libxcursor: upgrade 1.2.1 -> 1.2.2

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
-Remove superfluous and unguarded config.h include
-XcursorXcFileLoad: plug memory leak in error paths
-Add comment about keeping libxcb-cursor copy of code in sync
-If O_CLOEXEC is defined, add "e" to fopen modes
-configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
-gitlab CI: stop requiring Signed-off-by in commits

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../xorg-lib/{libxcursor_1.2.1.bb => libxcursor_1.2.2.bb}       | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-lib/{libxcursor_1.2.1.bb => libxcursor_1.2.2.bb} (87%)

diff --git a/meta/recipes-graphics/xorg-lib/libxcursor_1.2.1.bb b/meta/recipes-graphics/xorg-lib/libxcursor_1.2.2.bb
similarity index 87%
rename from meta/recipes-graphics/xorg-lib/libxcursor_1.2.1.bb
rename to meta/recipes-graphics/xorg-lib/libxcursor_1.2.2.bb
index 4fd7e949c4..159ac4f7fa 100644
--- a/meta/recipes-graphics/xorg-lib/libxcursor_1.2.1.bb
+++ b/meta/recipes-graphics/xorg-lib/libxcursor_1.2.2.bb
@@ -18,6 +18,6 @@ PE = "1"
 
 XORG_PN = "libXcursor"
 
-SRC_URI[sha256sum] = "46c143731610bafd2070159a844571b287ac26192537d047a39df06155492104"
+SRC_URI[sha256sum] = "53d071bd2cc56e517a30998d5e685c8a74556ddada43c6985d14da9a023a88ee"
 
 BBCLASSEXTEND = "native nativesdk"
-- 
2.34.1

[OE-core] [PATCH 14/36] libxdmcp: upgrade 1.1.4 -> 1.1.5

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
-gitlab CI: add xz-utils to container for "make distcheck"
-XdmcpWriteHeader: use calloc instead of malloc to alloc buffer
-XdmcpWriteHeader: drop unnecessary cast of free() argument
-Clear -Wunused-macros warnings when arc4random_buf() is available
-Xdmcp.h: add access attributes to function prototypes
-configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
-Remove "All rights reserved" from Oracle copyright notices

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../xorg-lib/{libxdmcp_1.1.4.bb => libxdmcp_1.1.5.bb}           | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-lib/{libxdmcp_1.1.4.bb => libxdmcp_1.1.5.bb} (89%)

diff --git a/meta/recipes-graphics/xorg-lib/libxdmcp_1.1.4.bb b/meta/recipes-graphics/xorg-lib/libxdmcp_1.1.5.bb
similarity index 89%
rename from meta/recipes-graphics/xorg-lib/libxdmcp_1.1.4.bb
rename to meta/recipes-graphics/xorg-lib/libxdmcp_1.1.5.bb
index bf5d2d6721..d1a1a2e7f9 100644
--- a/meta/recipes-graphics/xorg-lib/libxdmcp_1.1.4.bb
+++ b/meta/recipes-graphics/xorg-lib/libxdmcp_1.1.5.bb
@@ -22,7 +22,7 @@ XORG_PN = "libXdmcp"
 
 BBCLASSEXTEND = "native nativesdk"
 
-SRC_URI[sha256sum] = "2dce5cc317f8f0b484ec347d87d81d552cdbebb178bd13c5d8193b6b7cd6ad00"
+SRC_URI[sha256sum] = "d8a5222828c3adab70adf69a5583f1d32eb5ece04304f7f8392b6a353aa2228c"
 
 PACKAGECONFIG ??= ""
 PACKAGECONFIG[arc4] = "ac_cv_lib_bsd_arc4random_buf=yes,ac_cv_lib_bsd_arc4random_buf=no,libbsd"
-- 
2.34.1

[OE-core] [PATCH 15/36] lzip: upgrade 1.24 -> 1.24.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
 main.cc: Fix compilation failure on MinGW because of mkdir.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta/recipes-extended/lzip/{lzip_1.24.bb => lzip_1.24.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-extended/lzip/{lzip_1.24.bb => lzip_1.24.1.bb} (93%)

diff --git a/meta/recipes-extended/lzip/lzip_1.24.bb b/meta/recipes-extended/lzip/lzip_1.24.1.bb
similarity index 93%
rename from meta/recipes-extended/lzip/lzip_1.24.bb
rename to meta/recipes-extended/lzip/lzip_1.24.1.bb
index 73040a6f00..6eda012734 100644
--- a/meta/recipes-extended/lzip/lzip_1.24.bb
+++ b/meta/recipes-extended/lzip/lzip_1.24.1.bb
@@ -8,7 +8,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=76d6e300ffd8fb9d18bd9b136a9bba13 \
                     "
 
 SRC_URI = "${SAVANNAH_GNU_MIRROR}/lzip/lzip-${PV}.tar.gz"
-SRC_URI[sha256sum] = "d42659229b10e066eeb6e81eb673cdd893b672e512d26719c2d95975556ca56c"
+SRC_URI[sha256sum] = "30c9cb6a0605f479c496c376eb629a48b0a1696d167e3c1e090c5defa481b162"
 
 B = "${WORKDIR}/build"
 do_configure[cleandirs] = "${B}"
-- 
2.34.1

[OE-core] [PATCH 16/36] mkfontscale: upgrade 1.2.2 -> 1.2.3

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

License-Update: "All rights reserved." removed from copyright.

Changelog:
=============
-Fix -Wimplicit-float-conversion warnings from clang
-Resolve some -Wsign-conversion warnings from clang
-Variable scope reductions as recommended by cppcheck
-ident.c: clear -Wdeclaration-after-statement warning
-mkfontscale.c: handle -Wshadow warnings from gcc
-doDirectory: add missing check for malloc() returning NULL
-Convert to X.Org standard code style
-Remove "All rights reserved" from Oracle copyright notices
-gitlab CI: stop requiring Signed-off-by in commits
-configure: Use AC_SYS_LARGEFILE to enable large file support
-Address s UBSan warning about int left shift overflow
-configure: Move check for zlib into its own section
-configure: Use pkg-config to find zlib

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../xorg-app/{mkfontscale_1.2.2.bb => mkfontscale_1.2.3.bb}   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta/recipes-graphics/xorg-app/{mkfontscale_1.2.2.bb => mkfontscale_1.2.3.bb} (78%)

diff --git a/meta/recipes-graphics/xorg-app/mkfontscale_1.2.2.bb b/meta/recipes-graphics/xorg-app/mkfontscale_1.2.3.bb
similarity index 78%
rename from meta/recipes-graphics/xorg-app/mkfontscale_1.2.2.bb
rename to meta/recipes-graphics/xorg-app/mkfontscale_1.2.3.bb
index cd658ab219..aa79902a34 100644
--- a/meta/recipes-graphics/xorg-app/mkfontscale_1.2.2.bb
+++ b/meta/recipes-graphics/xorg-app/mkfontscale_1.2.3.bb
@@ -15,7 +15,7 @@ RPROVIDES:${PN} += "mkfontdir"
 
 BBCLASSEXTEND = "native"
 
-LIC_FILES_CHKSUM = "file://COPYING;md5=99b1e1269aba5179139b9e4380fc0934"
+LIC_FILES_CHKSUM = "file://COPYING;md5=5a60c596d1b5f3dee9f005b703b3180d"
 
 SRC_URI_EXT = "xz"
-SRC_URI[sha256sum] = "8ae3fb5b1fe7436e1f565060acaa3e2918fe745b0e4979b5593968914fe2d5c4"
+SRC_URI[sha256sum] = "2921cdc344f1acee04bcd6ea1e29565c1308263006e134a9ee38cf9c9d6fe75e"
-- 
2.34.1

[OE-core] [PATCH 17/36] pango: upgrade 1.52.0 -> 1.52.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
 Fix hexbox drawing

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../recipes-graphics/pango/{pango_1.52.0.bb => pango_1.52.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/pango/{pango_1.52.0.bb => pango_1.52.1.bb} (94%)

diff --git a/meta/recipes-graphics/pango/pango_1.52.0.bb b/meta/recipes-graphics/pango/pango_1.52.1.bb
similarity index 94%
rename from meta/recipes-graphics/pango/pango_1.52.0.bb
rename to meta/recipes-graphics/pango/pango_1.52.1.bb
index 7505ff9279..a67c3791a2 100644
--- a/meta/recipes-graphics/pango/pango_1.52.0.bb
+++ b/meta/recipes-graphics/pango/pango_1.52.1.bb
@@ -23,7 +23,7 @@ SRC_URI += "file://run-ptest \
            file://0001-Skip-running-test-layout-test.patch \
            "
 
-SRC_URI[archive.sha256sum] = "1ec8518879c3f43224499f08e8ecbbdf4a5d302ed6cd3853b4fa949f82b89a9b"
+SRC_URI[archive.sha256sum] = "58728a0a2d86f60761208df9493033d18ecb2497abac80ee1a274ad0c6e55f0f"
 
 DEPENDS = "glib-2.0 glib-2.0-native fontconfig freetype virtual/libiconv cairo harfbuzz fribidi"
 
-- 
2.34.1

[OE-core] [PATCH 18/36] psmisc: upgrade 23.6 -> 23.7

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

0001-Use-UINTPTR_MAX-instead-of-__WORDSIZE.patch
refreshed for 23.7

Changelog:
===========
* build-sys: Make disable-statx work
* fuser: Fallback to stat() if no statx() Debian 1030747
* fuser: silently ignore EACCES when scanning proc directories
* killall: small formatting fixes Debian
* pstree: Do not assume root PID
* pslog: include config.h
* misc: Update gettext to 0.21

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../psmisc/0001-Use-UINTPTR_MAX-instead-of-__WORDSIZE.patch | 6 +++---
 .../psmisc/{psmisc_23.6.bb => psmisc_23.7.bb}               | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)
 rename meta/recipes-extended/psmisc/{psmisc_23.6.bb => psmisc_23.7.bb} (85%)

diff --git a/meta/recipes-extended/psmisc/psmisc/0001-Use-UINTPTR_MAX-instead-of-__WORDSIZE.patch b/meta/recipes-extended/psmisc/psmisc/0001-Use-UINTPTR_MAX-instead-of-__WORDSIZE.patch
index ca13bdbd15..01335bdf40 100644
--- a/meta/recipes-extended/psmisc/psmisc/0001-Use-UINTPTR_MAX-instead-of-__WORDSIZE.patch
+++ b/meta/recipes-extended/psmisc/psmisc/0001-Use-UINTPTR_MAX-instead-of-__WORDSIZE.patch
@@ -1,4 +1,4 @@
-From 115fcf1daff18aa2f2e130d63704f04031878db0 Mon Sep 17 00:00:00 2001
+From 338d2d46d1c20ebadf317938af98d0532a62f8d4 Mon Sep 17 00:00:00 2001
 From: Khem Raj <raj.khem@gmail.com>
 Date: Thu, 24 Mar 2016 15:46:14 +0000
 Subject: [PATCH] Use UINTPTR_MAX instead of __WORDSIZE
@@ -13,7 +13,7 @@ Upstream-Status: Pending
  1 file changed, 8 insertions(+), 5 deletions(-)
 
 diff --git a/src/peekfd.c b/src/peekfd.c
-index 5aa990a..7e8e3fc 100644
+index 36dff04..2b4b1dc 100644
 --- a/src/peekfd.c
 +++ b/src/peekfd.c
 @@ -30,8 +30,11 @@
@@ -28,7 +28,7 @@ index 5aa990a..7e8e3fc 100644
  #include <getopt.h>
  #include <ctype.h>
  #include <dirent.h>
-@@ -266,11 +269,11 @@ int main(int argc, char **argv)
+@@ -341,11 +344,11 @@ int main(int argc, char **argv)
  		if (WIFSTOPPED(status)) {
  #ifdef PPC
  			struct pt_regs regs;
diff --git a/meta/recipes-extended/psmisc/psmisc_23.6.bb b/meta/recipes-extended/psmisc/psmisc_23.7.bb
similarity index 85%
rename from meta/recipes-extended/psmisc/psmisc_23.6.bb
rename to meta/recipes-extended/psmisc/psmisc_23.7.bb
index 2e55ad00bd..ea272cd92d 100644
--- a/meta/recipes-extended/psmisc/psmisc_23.6.bb
+++ b/meta/recipes-extended/psmisc/psmisc_23.7.bb
@@ -5,5 +5,5 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=0636e73ff0215e8d672dc4c32c317bb3"
 SRC_URI = "git://gitlab.com/psmisc/psmisc.git;protocol=https;branch=master \
            file://0001-Use-UINTPTR_MAX-instead-of-__WORDSIZE.patch \
            "
-SRCREV = "3098e641dc1ddb210186f53464255670b480377b"
+SRCREV = "9091d6dbcce3d8fb87adf9249a2eb346d25a562c"
 S = "${WORKDIR}/git"
-- 
2.34.1

[OE-core] [PATCH 19/36] python3-cython: upgrade 3.0.8 -> 3.0.9

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
Features added
--------------
* Assigning "const" values to non-const variables now issues a warning.
* Using "noexcept" on a function returning Python objects now issues a warning.
* Some C-API usage was updated for the upcoming CPython 3.13.
* The deprecated "Py_UNICODE" type is no longer used, unless required by user code.
* "std::string.replace()" declarations were added to libcpp.string.

Bugs fixed
----------
* Cython generates incorrect (but harmless) self-casts when directly calling
  final methods of subtypes.  Lacking a better solution, the errors that recent
  gcc versions produce have been silenced for the time being.
* Unused variable warnings about clineno were fixed when C lines in tracebacks are disabled.
* Subclass deallocation of extern classes could crash if the base class uses GC.
* Type checks for Python "memoryview" could use an invalid C function.
* Calling final fused functions could generate invalid C code.
* Declaring extern enums multiple times could generate invalid C code.
* "pyximport" used relative paths incorrectly.
* Running Cython with globbing characters ("[]*?") in the module search path could fail.
* Literal strings that include braces could change the C code indentation.

Other changes
-------------
* The "enum class not importable" warning is now only issued once per enum type.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta/recipes-devtools/python/python-cython.inc                  | 2 +-
 .../python/{python3-cython_3.0.8.bb => python3-cython_3.0.9.bb} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-cython_3.0.8.bb => python3-cython_3.0.9.bb} (100%)

diff --git a/meta/recipes-devtools/python/python-cython.inc b/meta/recipes-devtools/python/python-cython.inc
index e54926ae6d..2235aa9332 100644
--- a/meta/recipes-devtools/python/python-cython.inc
+++ b/meta/recipes-devtools/python/python-cython.inc
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=61c3ee8961575861fa86c7e62bc9f69c"
 PYPI_PACKAGE = "Cython"
 BBCLASSEXTEND = "native nativesdk"
 
-SRC_URI[sha256sum] = "8333423d8fd5765e7cceea3a9985dd1e0a5dfeb2734629e1a2ed2d6233d39de6"
+SRC_URI[sha256sum] = "a2d354f059d1f055d34cfaa62c5b68bc78ac2ceab6407148d47fb508cf3ba4f3"
 UPSTREAM_CHECK_REGEX = "Cython-(?P<pver>.*)\.tar"
 
 inherit pypi
diff --git a/meta/recipes-devtools/python/python3-cython_3.0.8.bb b/meta/recipes-devtools/python/python3-cython_3.0.9.bb
similarity index 100%
rename from meta/recipes-devtools/python/python3-cython_3.0.8.bb
rename to meta/recipes-devtools/python/python3-cython_3.0.9.bb
-- 
2.34.1

[OE-core] [PATCH 20/36] python3-hypothesis: upgrade 6.98.15 -> 6.99.4

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
-Fix regression caused by using PEP 696 default in TypeVar with Python 3.13.0a3.
-improves the type annotations in hypothesis.extra.numpy.
-Simplify the type annotation of column() and columns() by using PEP 696 to
 avoid overloading.
-implement type annotations for column().
-add the experimental and unstable backend setting.
-fixe issue #3900, a performance regression for arrays() due to the interaction
 of 6.98.12
-improve the type annotations in hypothesis.extra.numpy, which makes inferred
 types more precise for both mypy and pyright, and fixes some strict-mode errors
 on the latter.
-pave the way for future shrinker improvements. There is no user-visible change.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...thon3-hypothesis_6.98.15.bb => python3-hypothesis_6.99.4.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-hypothesis_6.98.15.bb => python3-hypothesis_6.99.4.bb} (91%)

diff --git a/meta/recipes-devtools/python/python3-hypothesis_6.98.15.bb b/meta/recipes-devtools/python/python3-hypothesis_6.99.4.bb
similarity index 91%
rename from meta/recipes-devtools/python/python3-hypothesis_6.98.15.bb
rename to meta/recipes-devtools/python/python3-hypothesis_6.99.4.bb
index a17abe58c0..64b8cf2c31 100644
--- a/meta/recipes-devtools/python/python3-hypothesis_6.98.15.bb
+++ b/meta/recipes-devtools/python/python3-hypothesis_6.99.4.bb
@@ -13,7 +13,7 @@ SRC_URI += " \
     file://test_rle.py \
     "
 
-SRC_URI[sha256sum] = "1e31210951511b24ce8b3b6e04d791c466385a30ac3af571bf2223954b025d77"
+SRC_URI[sha256sum] = "edc8f984dba5d1b69a6a4564246b7850fa7ec351d2b27c9e7a43c91deab8d45c"
 
 RDEPENDS:${PN} += " \
     python3-attrs \
-- 
2.34.1

[OE-core] [PATCH 21/36] python3-importlib-metadata: upgrade 7.0.1 -> 7.0.2

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...ib-metadata_7.0.1.bb => python3-importlib-metadata_7.0.2.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-importlib-metadata_7.0.1.bb => python3-importlib-metadata_7.0.2.bb} (88%)

diff --git a/meta/recipes-devtools/python/python3-importlib-metadata_7.0.1.bb b/meta/recipes-devtools/python/python3-importlib-metadata_7.0.2.bb
similarity index 88%
rename from meta/recipes-devtools/python/python3-importlib-metadata_7.0.1.bb
rename to meta/recipes-devtools/python/python3-importlib-metadata_7.0.2.bb
index 0d3f0a5001..719d5f84f9 100644
--- a/meta/recipes-devtools/python/python3-importlib-metadata_7.0.1.bb
+++ b/meta/recipes-devtools/python/python3-importlib-metadata_7.0.2.bb
@@ -8,7 +8,7 @@ inherit pypi python_setuptools_build_meta
 PYPI_PACKAGE = "importlib_metadata"
 UPSTREAM_CHECK_REGEX = "/importlib-metadata/(?P<pver>(\d+[\.\-_]*)+)/"
 
-SRC_URI[sha256sum] = "f238736bb06590ae52ac1fab06a3a9ef1d8dce2b7a35b5ab329371d6c8f5d2cc"
+SRC_URI[sha256sum] = "198f568f3230878cb1b44fbd7975f87906c22336dba2e4a7f05278c281fbd792"
 
 S = "${WORKDIR}/importlib_metadata-${PV}"
 
-- 
2.34.1

[OE-core] [PATCH 22/36] python3-libarchive-c: upgrade 5.0 -> 5.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
Fix the format_name property and move it from the ArchiveEntry class to the ArchiveRead class

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...{python3-libarchive-c_5.0.bb => python3-libarchive-c_5.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-libarchive-c_5.0.bb => python3-libarchive-c_5.1.bb} (85%)

diff --git a/meta/recipes-devtools/python/python3-libarchive-c_5.0.bb b/meta/recipes-devtools/python/python3-libarchive-c_5.1.bb
similarity index 85%
rename from meta/recipes-devtools/python/python3-libarchive-c_5.0.bb
rename to meta/recipes-devtools/python/python3-libarchive-c_5.1.bb
index 6ac86fc7a1..4e318e52f4 100644
--- a/meta/recipes-devtools/python/python3-libarchive-c_5.0.bb
+++ b/meta/recipes-devtools/python/python3-libarchive-c_5.1.bb
@@ -9,7 +9,7 @@ PYPI_PACKAGE = "libarchive-c"
 
 inherit pypi setuptools3
 
-SRC_URI[sha256sum] = "d673f56673d87ec740d1a328fa205cafad1d60f5daca4685594deb039d32b159"
+SRC_URI[sha256sum] = "7bcce24ea6c0fa3bc62468476c6d2f6264156db2f04878a372027c10615a2721"
 
 RDEPENDS:${PN} += "\
   libarchive \
-- 
2.34.1

[OE-core] [PATCH 23/36] python3-maturin: upgrade 1.4.0 -> 1.5.0

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
 Fix the format_name property and move it from the ArchiveEntry class to the ArchiveRead class

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../{python3-maturin_1.4.0.bb => python3-maturin_1.5.0.bb}      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-maturin_1.4.0.bb => python3-maturin_1.5.0.bb} (92%)

diff --git a/meta/recipes-devtools/python/python3-maturin_1.4.0.bb b/meta/recipes-devtools/python/python3-maturin_1.5.0.bb
similarity index 92%
rename from meta/recipes-devtools/python/python3-maturin_1.4.0.bb
rename to meta/recipes-devtools/python/python3-maturin_1.5.0.bb
index ed19ee647a..e80a45f0bc 100644
--- a/meta/recipes-devtools/python/python3-maturin_1.4.0.bb
+++ b/meta/recipes-devtools/python/python3-maturin_1.5.0.bb
@@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://license-apache;md5=1836efb2eb779966696f473ee8540542 \
                     file://license-mit;md5=85fd3b67069cff784d98ebfc7d5c0797"
 
 SRC_URI += "file://0001-Add-32-bit-RISC-V-support.patch"
-SRC_URI[sha256sum] = "ed12e1768094a7adeafc3a74ebdb8dc2201fa64c4e7e31f14cfc70378bf93790"
+SRC_URI[sha256sum] = "e046ea2aed687991d58c42f6276dfcc0c037092934654f538b5877fd57dd3a9c"
 
 S = "${WORKDIR}/maturin-${PV}"
 
-- 
2.34.1

[OE-core] [PATCH 24/36] python3-pygobject: update 3.46.0 -> 3.48.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
* Fix installation with pip failing in some environments with
  ModuleNotFoundError in g-ir-scanner :issue:'622' :mr:'302'
* test: fix some tests on macOS :mr:'296'
* docs: some dark mode fixes :mr:'291'
* Drop setuptools in favor of meson-python :mr:'248' :mr:'253' :mr:'254' :mr:'255' :mr:'276'
* Fundamental type support :mr:'250'
* Fundamental type support for GValues :mr:'264'
* pygi-convert.sh: migrate FILE_CHOOSER_CONFIRMATION_* :mr:'266'
* gimodule, cairo: Use multi-phase initialization as per PEP-489 :mr:'271'
* Deprecate classes in gi.option module :mr:'272'
* Deprecate pygtkcompat :mr:'278'
* Add support for (optional) nullable GErrors :mr:'259'
* Fix CssProvider not valid in GTK2 :mr:'284'
* Fix double free if array item cannot be marshalled to Python :mr:'280'
* Raise exception if a callback property is encountered :mr:'269'
* build: Fix pycairo detection "script" for Windows :mr:'267'
* Replace deprecated ''pkgutil.find_loader'' call :mr:'252'
* Avoid segfault on property access for incompletely initialized objects :mr:'260'
* pygenum: When getting a member instance, use correct key for the lookup :mr:'262'

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...{python3-pygobject_3.46.0.bb => python3-pygobject_3.48.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-pygobject_3.46.0.bb => python3-pygobject_3.48.1.bb} (93%)

diff --git a/meta/recipes-devtools/python/python3-pygobject_3.46.0.bb b/meta/recipes-devtools/python/python3-pygobject_3.48.1.bb
similarity index 93%
rename from meta/recipes-devtools/python/python3-pygobject_3.46.0.bb
rename to meta/recipes-devtools/python/python3-pygobject_3.48.1.bb
index 73a393051a..4754e41c04 100644
--- a/meta/recipes-devtools/python/python3-pygobject_3.46.0.bb
+++ b/meta/recipes-devtools/python/python3-pygobject_3.48.1.bb
@@ -19,7 +19,7 @@ DEPENDS += "python3 glib-2.0"
 SRCNAME="pygobject"
 
 SRC_URI = "http://ftp.gnome.org/pub/GNOME/sources/${SRCNAME}/${@gnome_verdir("${PV}")}/${SRCNAME}-${PV}.tar.xz"
-SRC_URI[sha256sum] = "426008b2dad548c9af1c7b03b59df0440fde5c33f38fb5406b103a43d653cafc"
+SRC_URI[sha256sum] = "3a0a2c0c0f25931b5840649c54834b9e58a63148d37fa9f6308887b7027e15c2"
 
 S = "${WORKDIR}/${SRCNAME}-${PV}"
 
-- 
2.34.1

[OE-core] [PATCH 25/36] python3-pyopenssl: upgrade 24.0.0 -> 24.1.0

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
-Removed the deprecated OpenSSL.crypto.PKCS12 and OpenSSL.crypto.NetscapeSPKI.
 OpenSSL.crypto.PKCS12 may be replaced by the PKCS#12 APIs in the cryptography package.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...{python3-pyopenssl_24.0.0.bb => python3-pyopenssl_24.1.0.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-pyopenssl_24.0.0.bb => python3-pyopenssl_24.1.0.bb} (86%)

diff --git a/meta/recipes-devtools/python/python3-pyopenssl_24.0.0.bb b/meta/recipes-devtools/python/python3-pyopenssl_24.1.0.bb
similarity index 86%
rename from meta/recipes-devtools/python/python3-pyopenssl_24.0.0.bb
rename to meta/recipes-devtools/python/python3-pyopenssl_24.1.0.bb
index 9ea3075482..e714ad838e 100644
--- a/meta/recipes-devtools/python/python3-pyopenssl_24.0.0.bb
+++ b/meta/recipes-devtools/python/python3-pyopenssl_24.1.0.bb
@@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
 DEPENDS += "openssl python3-cryptography"
 
-SRC_URI[sha256sum] = "6aa33039a93fffa4563e655b61d11364d01264be8ccb49906101e02a334530bf"
+SRC_URI[sha256sum] = "cabed4bfaa5df9f1a16c0ef64a0cb65318b5cd077a7eda7d6970131ca2f41a6f"
 
 PYPI_PACKAGE = "pyOpenSSL"
 inherit pypi setuptools3
-- 
2.34.1

[OE-core] [PATCH 26/36] python3-pyparsing: upgrade 3.1.1 -> 3.1.2

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
- Added 'ieee_float' expression to 'pyparsing.common', which parses float values,
  plus "NaN", "Inf", "Infinity".
- Updated pep8 synonym wrappers for better type checking compatibility.
- Fixed empty error message bug. This _should_ return pyparsing's exception
  messages to a former, more helpful form. If you have code that parses the
  exception messages returned by pyparsing, this may require some code changes.
- Added unit tests to test for exception message contents, with enhancement to
  'pyparsing.testing.assertRaisesParseException' to accept an expected exception message.
- Updated example 'select_parser.py' to use PEP8 names and added Groups for better retrieval
  of parsed values from multiple SELECT clauses.
- Added example 'email_address_parser.py'
- Added example 'directx_x_file_parser.py' to parse DirectX template definitions, and
  generate a Pyparsing parser from a template to parse .x files.
- Some code refactoring to reduce code nesting
- All internal string expressions using '%' string interpolation and 'str.format()'
  converted to f-strings.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../{python3-pyparsing_3.1.1.bb => python3-pyparsing_3.1.2.bb}  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-pyparsing_3.1.1.bb => python3-pyparsing_3.1.2.bb} (90%)

diff --git a/meta/recipes-devtools/python/python3-pyparsing_3.1.1.bb b/meta/recipes-devtools/python/python3-pyparsing_3.1.2.bb
similarity index 90%
rename from meta/recipes-devtools/python/python3-pyparsing_3.1.1.bb
rename to meta/recipes-devtools/python/python3-pyparsing_3.1.2.bb
index 6f34091c86..64210ade53 100644
--- a/meta/recipes-devtools/python/python3-pyparsing_3.1.1.bb
+++ b/meta/recipes-devtools/python/python3-pyparsing_3.1.2.bb
@@ -10,7 +10,7 @@ BUGTRACKER = "https://github.com/pyparsing/pyparsing/issues"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=657a566233888513e1f07ba13e2f47f1"
 
-SRC_URI[sha256sum] = "ede28a1a32462f5a9705e07aea48001a08f7cf81a021585011deba701581a0db"
+SRC_URI[sha256sum] = "a1bac0ce561155ecc3ed78ca94d3c9378656ad4c94c1270de543f621420f94ad"
 
 UPSTREAM_CHECK_REGEX = "pyparsing-(?P<pver>.*)\.tar"
 
-- 
2.34.1

[OE-core] [PATCH 27/36] python3-pytest-subtests: upgrade 0.11.0 -> 0.12.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
-Fixed compatibility with upcoming pytest 8.1.x.
-Python 3.12 is now officially supported
-Added typing support
-SubTests can be imported from pytest_subtests to type-annotate the subtests fixture.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...est-subtests_0.11.0.bb => python3-pytest-subtests_0.12.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-pytest-subtests_0.11.0.bb => python3-pytest-subtests_0.12.1.bb} (86%)

diff --git a/meta/recipes-devtools/python/python3-pytest-subtests_0.11.0.bb b/meta/recipes-devtools/python/python3-pytest-subtests_0.12.1.bb
similarity index 86%
rename from meta/recipes-devtools/python/python3-pytest-subtests_0.11.0.bb
rename to meta/recipes-devtools/python/python3-pytest-subtests_0.12.1.bb
index 44fa1e2b80..0590be705f 100644
--- a/meta/recipes-devtools/python/python3-pytest-subtests_0.11.0.bb
+++ b/meta/recipes-devtools/python/python3-pytest-subtests_0.12.1.bb
@@ -7,7 +7,7 @@ BUGTRACKER = "https://github.com/pytest-dev/pytest-subtests/issues"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=242b4e17fa287dcf7aef372f6bc3dcb1"
 
-SRC_URI[sha256sum] = "51865c88457545f51fb72011942f0a3c6901ee9e24cbfb6d1b9dc1348bafbe37"
+SRC_URI[sha256sum] = "d6605dcb88647e0b7c1889d027f8ef1c17d7a2c60927ebfdc09c7b0d8120476d"
 
 inherit pypi python_setuptools_build_meta
 
-- 
2.34.1

[OE-core] [PATCH 28/36] python3-pytest: upgrade 8.0.2 -> 8.1.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
 https://docs.pytest.org/en/stable/changelog.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../python/{python3-pytest_8.0.2.bb => python3-pytest_8.1.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-pytest_8.0.2.bb => python3-pytest_8.1.1.bb} (92%)

diff --git a/meta/recipes-devtools/python/python3-pytest_8.0.2.bb b/meta/recipes-devtools/python/python3-pytest_8.1.1.bb
similarity index 92%
rename from meta/recipes-devtools/python/python3-pytest_8.0.2.bb
rename to meta/recipes-devtools/python/python3-pytest_8.1.1.bb
index 57e979e909..b1cf23fbc4 100644
--- a/meta/recipes-devtools/python/python3-pytest_8.0.2.bb
+++ b/meta/recipes-devtools/python/python3-pytest_8.1.1.bb
@@ -5,7 +5,7 @@ DESCRIPTION = "The pytest framework makes it easy to write small tests, yet scal
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=bd27e41b6550fe0fc45356d1d81ee37c"
 
-SRC_URI[sha256sum] = "d4051d623a2e0b7e51960ba963193b09ce6daeb9759a451844a21e4ddedfc1bd"
+SRC_URI[sha256sum] = "ac978141a75948948817d360297b7aae0fcb9d6ff6bc9ec6d514b85d5a65c044"
 
 DEPENDS += "python3-setuptools-scm-native"
 
-- 
2.34.1

[OE-core] [PATCH 29/36] python3-trove-classifiers: upgrade 2024.2.23 -> 2024.3.3

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
=========
*add  "License :: OSI Approved :: NASA Open Source Agreement (NOSA)"
* added NOSA
* Update src/trove_classifiers/__init__.py

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...fiers_2024.2.23.bb => python3-trove-classifiers_2024.3.3.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-trove-classifiers_2024.2.23.bb => python3-trove-classifiers_2024.3.3.bb} (87%)

diff --git a/meta/recipes-devtools/python/python3-trove-classifiers_2024.2.23.bb b/meta/recipes-devtools/python/python3-trove-classifiers_2024.3.3.bb
similarity index 87%
rename from meta/recipes-devtools/python/python3-trove-classifiers_2024.2.23.bb
rename to meta/recipes-devtools/python/python3-trove-classifiers_2024.3.3.bb
index 8514a52616..b912efcf55 100644
--- a/meta/recipes-devtools/python/python3-trove-classifiers_2024.2.23.bb
+++ b/meta/recipes-devtools/python/python3-trove-classifiers_2024.3.3.bb
@@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/pypa/trove-classifiers"
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327"
 
-SRC_URI[sha256sum] = "8385160a12aac69c93fff058fb613472ed773a24a27eb3cd4b144cfbdd79f38c"
+SRC_URI[sha256sum] = "df7edff9c67ff86b733628998330b180e81d125b1e096536d83ac0fd79673fdc"
 
 inherit pypi python_setuptools_build_meta ptest
 
-- 
2.34.1

[OE-core] [PATCH 30/36] repo: upgrade 2.42 -> 2.44

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta/recipes-devtools/repo/{repo_2.42.bb => repo_2.44.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/repo/{repo_2.42.bb => repo_2.44.bb} (94%)

diff --git a/meta/recipes-devtools/repo/repo_2.42.bb b/meta/recipes-devtools/repo/repo_2.44.bb
similarity index 94%
rename from meta/recipes-devtools/repo/repo_2.42.bb
rename to meta/recipes-devtools/repo/repo_2.44.bb
index 9bb5000fab..875897851a 100644
--- a/meta/recipes-devtools/repo/repo_2.42.bb
+++ b/meta/recipes-devtools/repo/repo_2.44.bb
@@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
 SRC_URI = "git://gerrit.googlesource.com/git-repo.git;protocol=https;branch=main \
            "
-SRCREV = "5554572f02537b8646139d59ab520e59e1d5f7b3"
+SRCREV = "fff1d2d74c2078b62cc9c2561330e41a842dc197"
 
 MIRRORS += "git://gerrit.googlesource.com/git-repo.git git://github.com/GerritCodeReview/git-repo.git"
 
-- 
2.34.1

[OE-core] [PATCH 31/36] shaderc: update 2023.8 -> 2024.0

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

0001-cmake-disable-building-external-dependencies.patch
refreshed for 2024.0

Changelog:
==========
 - Update dependencies
 - Utilities:
    - Use Python3 explicitly in utility scripts

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...make-disable-building-external-dependencies.patch | 12 ++++++------
 .../shaderc/{shaderc_2023.8.bb => shaderc_2024.0.bb} |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)
 rename meta/recipes-graphics/shaderc/{shaderc_2023.8.bb => shaderc_2024.0.bb} (95%)

diff --git a/meta/recipes-graphics/shaderc/files/0001-cmake-disable-building-external-dependencies.patch b/meta/recipes-graphics/shaderc/files/0001-cmake-disable-building-external-dependencies.patch
index 4212512034..5c49aa7fd5 100644
--- a/meta/recipes-graphics/shaderc/files/0001-cmake-disable-building-external-dependencies.patch
+++ b/meta/recipes-graphics/shaderc/files/0001-cmake-disable-building-external-dependencies.patch
@@ -1,4 +1,4 @@
-From 792a46ef27ef879a21c9f01a198eae213ea535e6 Mon Sep 17 00:00:00 2001
+From 941f5f5831e7a52c26168f81f25d0470860ca6f1 Mon Sep 17 00:00:00 2001
 From: Jose Quaresma <quaresma.jose@gmail.com>
 Date: Sat, 13 Feb 2021 00:45:56 +0000
 Subject: [PATCH] cmake: disable building external dependencies
@@ -15,7 +15,7 @@ Signed-off-by: Jose Quaresma <quaresma.jose@gmail.com>
  2 files changed, 25 insertions(+), 10 deletions(-)
 
 diff --git a/CMakeLists.txt b/CMakeLists.txt
-index 7bc8f5d..13fc535 100644
+index ffcb54b..cce715e 100644
 --- a/CMakeLists.txt
 +++ b/CMakeLists.txt
 @@ -62,6 +62,7 @@ else()
@@ -26,7 +26,7 @@ index 7bc8f5d..13fc535 100644
  
  set (CMAKE_CXX_STANDARD 17)
  
-@@ -123,8 +124,14 @@ endif(MSVC)
+@@ -119,8 +120,14 @@ endif(MSVC)
  
  
  # Configure subdirectories.
@@ -43,9 +43,9 @@ index 7bc8f5d..13fc535 100644
  
  add_subdirectory(libshaderc_util)
  add_subdirectory(libshaderc)
-@@ -136,7 +143,7 @@ endif()
+@@ -132,7 +139,7 @@ endif()
  add_custom_target(build-version
-   ${PYTHON_EXECUTABLE}
+   ${Python_EXECUTABLE}
    ${CMAKE_CURRENT_SOURCE_DIR}/utils/update_build_version.py
 -  ${shaderc_SOURCE_DIR} ${spirv-tools_SOURCE_DIR} ${glslang_SOURCE_DIR} ${CMAKE_CURRENT_BINARY_DIR}/build-version.inc
 +  ${CMAKE_CURRENT_BINARY_DIR}/build-version.inc ${shaderc_SOURCE_DIR} ${spirv-tools_SOURCE_DIR} ${glslang_SOURCE_DIR}
@@ -53,7 +53,7 @@ index 7bc8f5d..13fc535 100644
  
  function(define_pkg_config_file NAME LIBS)
 diff --git a/utils/update_build_version.py b/utils/update_build_version.py
-index 11ee53e..d39e59d 100755
+index b7ce5b8..95b34c5 100755
 --- a/utils/update_build_version.py
 +++ b/utils/update_build_version.py
 @@ -30,6 +30,7 @@ import re
diff --git a/meta/recipes-graphics/shaderc/shaderc_2023.8.bb b/meta/recipes-graphics/shaderc/shaderc_2024.0.bb
similarity index 95%
rename from meta/recipes-graphics/shaderc/shaderc_2023.8.bb
rename to meta/recipes-graphics/shaderc/shaderc_2024.0.bb
index bc7afbdf5e..9975c608ac 100644
--- a/meta/recipes-graphics/shaderc/shaderc_2023.8.bb
+++ b/meta/recipes-graphics/shaderc/shaderc_2024.0.bb
@@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/google/shaderc"
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327"
 
-SRCREV = "f8a25c591bf5edbb462ca4aea99dcc666f096d13"
+SRCREV = "9f56ca620c07d6c4d119c65c1c1f3f1c584c9985"
 SRC_URI = "git://github.com/google/shaderc.git;protocol=https;branch=main \
            file://0001-cmake-disable-building-external-dependencies.patch \
            file://0002-libshaderc_util-fix-glslang-header-file-location.patch \
-- 
2.34.1

[OE-core] [PATCH 32/36] stress-ng: upgrade 0.17.05 -> 0.17.06

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
-New fd-fork stressor, force copying of tens of thousands of file descriptors on fork() system calls
-New bitonicsort stressor: sort 32 bit integers using bitonic sort, exercises integer compare, copying/cache/memory.
-Add more signals in the nested signal signest stressor
-New --progress option to show --seq stressor progress and expected end of run time
-Add Arrowlake and Pantherlake CPU support for target clones gcc optimizations
-Add IRQ tasklet entry/exit events, IPI Raise event, swiotlb event to --perf option
-Add --crypt-method option to allow crypt stressor to be selected
-Add --fork-unmap option to fork stressor to force unmapping of shared libs to speed up forks
-Add --fpunch-bytes option to fpunch stressor to specify fpunch file size
-Add --vforkmany-bytes option to specify mmap size
-Add NUMA hit/miss metrics to numa stressor
-Fix aiol stressor race condition on termination of pending I/Os
-Fix race on peterson stressor with modern out-of-order execution ARM CPUs

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../stress-ng/{stress-ng_0.17.05.bb => stress-ng_0.17.06.bb}    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-extended/stress-ng/{stress-ng_0.17.05.bb => stress-ng_0.17.06.bb} (94%)

diff --git a/meta/recipes-extended/stress-ng/stress-ng_0.17.05.bb b/meta/recipes-extended/stress-ng/stress-ng_0.17.06.bb
similarity index 94%
rename from meta/recipes-extended/stress-ng/stress-ng_0.17.05.bb
rename to meta/recipes-extended/stress-ng/stress-ng_0.17.06.bb
index d4a427f89d..a52b70d22f 100644
--- a/meta/recipes-extended/stress-ng/stress-ng_0.17.05.bb
+++ b/meta/recipes-extended/stress-ng/stress-ng_0.17.06.bb
@@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263"
 
 SRC_URI = "git://github.com/ColinIanKing/stress-ng.git;protocol=https;branch=master \
            "
-SRCREV = "4e68895f4fe68863b360ab4a6a57e2dfcff85d60"
+SRCREV = "e6bda983cb48a201b6af173204372c7b37d6411f"
 S = "${WORKDIR}/git"
 
 DEPENDS = "coreutils-native libbsd"
-- 
2.34.1

[OE-core] [PATCH 33/36] tcl: upgrade 8.6.13 -> 8.6.14

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

fix_issue_with_old_distro_glibc.patch
fix_non_native_build_issue.patch
refreshed for 8.6.14

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../tcl/fix_issue_with_old_distro_glibc.patch | 28 +++++++++++--------
 .../tcl/fix_non_native_build_issue.patch      | 25 ++++++++++-------
 .../tcltk/{tcl_8.6.13.bb => tcl_8.6.14.bb}    |  2 +-
 3 files changed, 33 insertions(+), 22 deletions(-)
 rename meta/recipes-devtools/tcltk/{tcl_8.6.13.bb => tcl_8.6.14.bb} (97%)

diff --git a/meta/recipes-devtools/tcltk/tcl/fix_issue_with_old_distro_glibc.patch b/meta/recipes-devtools/tcltk/tcl/fix_issue_with_old_distro_glibc.patch
index 2c31cec8e3..f8acaf406f 100644
--- a/meta/recipes-devtools/tcltk/tcl/fix_issue_with_old_distro_glibc.patch
+++ b/meta/recipes-devtools/tcltk/tcl/fix_issue_with_old_distro_glibc.patch
@@ -14,12 +14,15 @@ Fixes tcl target recipe build on old distros which have glibc older than 2.14
 
 Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com>
 2012/04/26
+---
+ unix/Makefile.in | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
 
-Index: unix/Makefile.in
-===================================================================
---- a/unix.orig/Makefile.in	2013-11-10 23:38:01.787425628 -0800
-+++ b/unix/Makefile.in	2013-11-10 23:37:59.807425578 -0800
-@@ -686,7 +686,7 @@
+diff --git a/unix/Makefile.in b/unix/Makefile.in
+index 7604959..c52cf2d 100644
+--- a/unix/Makefile.in
++++ b/unix/Makefile.in
+@@ -792,7 +792,7 @@ topDirName:
  # tcltest executable gets the build directory burned into its ld search path.
  # This keeps tcltest from picking up an already installed version of the Tcl
  # library.
@@ -28,12 +31,15 @@ Index: unix/Makefile.in
  		TCLLIBPATH="@abs_builddir@/pkgs" \
  		TCL_LIBRARY="${TCL_BUILDTIME_LIBRARY}"
  
-@@ -712,7 +712,7 @@
+@@ -818,7 +818,7 @@ test-tcl: ${TCLTEST_EXE}
  	$(SHELL_ENV) ${TCLTEST_EXE} $(TOP_DIR)/tests/all.tcl $(TESTFLAGS)
  
  gdb-test: ${TCLTEST_EXE}
--	@echo "set env @LD_LIBRARY_PATH_VAR@=`pwd`:$${@LD_LIBRARY_PATH_VAR@}" > gdb.run
-+	@echo "set env @LD_LIBRARY_PATH_VAR@=$${@LD_LIBRARY_PATH_VAR@}" > gdb.run
- 	@echo "set env TCL_LIBRARY=${TCL_BUILDTIME_LIBRARY}" >> gdb.run
- 	@echo "set args $(TOP_DIR)/tests/all.tcl $(TESTFLAGS) -singleproc 1" >> gdb.run
- 	$(GDB) ${TCLTEST_EXE} --command=gdb.run
+-	@printf '%s ' set env @LD_LIBRARY_PATH_VAR@=\"`pwd`$${@LD_LIBRARY_PATH_VAR@:+:$${@LD_LIBRARY_PATH_VAR}}\" > gdb.run
++	@printf '%s ' set env @LD_LIBRARY_PATH_VAR@=\"$${@LD_LIBRARY_PATH_VAR@:+:$${@LD_LIBRARY_PATH_VAR}}\" > gdb.run
+ 	@printf '\n' >>gdb.run
+ 	@printf '%s ' set env TCL_LIBRARY=\'$(call shquotesingle,${TCL_BUILDTIME_LIBRARY})\' >> gdb.run
+ 	@printf '\n' >>gdb.run
+-- 
+2.34.1
+
diff --git a/meta/recipes-devtools/tcltk/tcl/fix_non_native_build_issue.patch b/meta/recipes-devtools/tcltk/tcl/fix_non_native_build_issue.patch
index 6dbef7077f..931ea1e975 100644
--- a/meta/recipes-devtools/tcltk/tcl/fix_non_native_build_issue.patch
+++ b/meta/recipes-devtools/tcltk/tcl/fix_non_native_build_issue.patch
@@ -4,16 +4,15 @@ Date: Fri, 13 Aug 2010 12:24:00 -0700
 Subject: [PATCH] tcl: fix a build issue
 
 Upstream-Status: Inappropriate [upstream does not support installed tests]
-
 ---
- unix/Makefile.in | 20 ++++++++++----------
- 1 file changed, 10 insertions(+), 10 deletions(-)
+ unix/Makefile.in | 22 +++++++++++-----------
+ 1 file changed, 11 insertions(+), 11 deletions(-)
 
 diff --git a/unix/Makefile.in b/unix/Makefile.in
-index b110fe9..d7b35a8 100644
+index 9dd053d..7604959 100644
 --- a/unix/Makefile.in
 +++ b/unix/Makefile.in
-@@ -814,23 +814,23 @@ tcltest-real:
+@@ -815,7 +815,7 @@ tcltest-real:
  test: test-tcl test-packages
  
  test-tcl: ${TCLTEST_EXE}
@@ -21,9 +20,11 @@ index b110fe9..d7b35a8 100644
 +	$(SHELL_ENV) ${TCLTEST_EXE} $(TOP_DIR)/tests/all.tcl $(TESTFLAGS)
  
  gdb-test: ${TCLTEST_EXE}
- 	@echo "set env @LD_LIBRARY_PATH_VAR@=`pwd`:$${@LD_LIBRARY_PATH_VAR@}" > gdb.run
- 	@echo "set env TCL_LIBRARY=${TCL_BUILDTIME_LIBRARY}" >> gdb.run
- 	@echo "set args $(TOP_DIR)/tests/all.tcl $(TESTFLAGS) -singleproc 1" >> gdb.run
+ 	@printf '%s ' set env @LD_LIBRARY_PATH_VAR@=\"`pwd`$${@LD_LIBRARY_PATH_VAR@:+:$${@LD_LIBRARY_PATH_VAR}}\" > gdb.run
+@@ -824,17 +824,17 @@ gdb-test: ${TCLTEST_EXE}
+ 	@printf '\n' >>gdb.run
+ 	@printf '%s ' set args $(call shquotequote,$(TOP_DIR))/tests/all.tcl\
+ 		$(call shquotequote,$(TESTFLAGS)) -singleproc 1 >> gdb.run
 -	$(GDB) ./${TCLTEST_EXE} --command=gdb.run
 +	$(GDB) ${TCLTEST_EXE} --command=gdb.run
  	rm gdb.run
@@ -41,7 +42,7 @@ index b110fe9..d7b35a8 100644
  
  # The following target generates the shared libraries in dltest/ that are used
  # for testing; they are included as part of the "tcltest" target (via the
-@@ -848,28 +848,28 @@ dltest.marker: ${STUB_LIB_FILE}
+@@ -852,28 +852,28 @@ dltest.marker: ${STUB_LIB_FILE}
  # This target can be used to run tclsh from the build directory
  # via `make shell SCRIPT=/tmp/foo.tcl`
  shell: ${TCL_EXE}
@@ -54,7 +55,8 @@ index b110fe9..d7b35a8 100644
 +	$(SHELL_ENV) $(GDB) ${TCL_EXE}
  
  lldb: ${TCL_EXE}
- 	$(SHELL_ENV) $(LLDB) ./${TCL_EXE}
+-	$(SHELL_ENV) $(LLDB) ./${TCL_EXE}
++	$(SHELL_ENV) $(LLDB) ${TCL_EXE}
  
  valgrind: ${TCL_EXE} ${TCLTEST_EXE}
 -	$(SHELL_ENV) $(VALGRIND) $(VALGRINDARGS) ./${TCLTEST_EXE} \
@@ -76,3 +78,6 @@ index b110fe9..d7b35a8 100644
  
  #--------------------------------------------------------------------------
  # Installation rules
+-- 
+2.34.1
+
diff --git a/meta/recipes-devtools/tcltk/tcl_8.6.13.bb b/meta/recipes-devtools/tcltk/tcl_8.6.14.bb
similarity index 97%
rename from meta/recipes-devtools/tcltk/tcl_8.6.13.bb
rename to meta/recipes-devtools/tcltk/tcl_8.6.14.bb
index bb75353a5a..8fdccbaa90 100644
--- a/meta/recipes-devtools/tcltk/tcl_8.6.13.bb
+++ b/meta/recipes-devtools/tcltk/tcl_8.6.14.bb
@@ -25,7 +25,7 @@ SRC_URI = "${BASE_SRC_URI} \
            file://interp.patch \
            file://run-ptest \
 "
-SRC_URI[sha256sum] = "c61f0d6699e2bc7691f119b41963aaa8dc980f23532c4e937739832a5f4a6642"
+SRC_URI[sha256sum] = "ff604f43862a778827d7ecd1ad7686950ac2ef48d9cf69d3424cea9de08d9a72"
 
 SRC_URI:class-native = "${BASE_SRC_URI}"
 
-- 
2.34.1

[OE-core] [PATCH 34/36] xauth: upgrade 1.1.2 -> 1.1.3

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
-unifdef Lynx
-unifdef hpux
-configure: raise minimum autoconf requirement to 2.70
-configure: Use AC_SYS_LARGEFILE to enable large file support
-Unbold brackets for optional n at start of commands
-Handle -Wempty-body warning for WRITES() macro
-Remove unnecessary casts from malloc() calls
-Variable scope reductions, as suggested by cppcheck
-config: Add missing AC_CONFIG_SRCDIR

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../xorg-app/{xauth_1.1.2.bb => xauth_1.1.3.bb}                 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-app/{xauth_1.1.2.bb => xauth_1.1.3.bb} (83%)

diff --git a/meta/recipes-graphics/xorg-app/xauth_1.1.2.bb b/meta/recipes-graphics/xorg-app/xauth_1.1.3.bb
similarity index 83%
rename from meta/recipes-graphics/xorg-app/xauth_1.1.2.bb
rename to meta/recipes-graphics/xorg-app/xauth_1.1.3.bb
index 1ad18ef63b..b0ca33bf4b 100644
--- a/meta/recipes-graphics/xorg-app/xauth_1.1.2.bb
+++ b/meta/recipes-graphics/xorg-app/xauth_1.1.3.bb
@@ -9,7 +9,7 @@ DEPENDS += "libxau libxext libxmu"
 PE = "1"
 
 SRC_URI_EXT = "xz"
-SRC_URI[sha256sum] = "78ba6afd19536ced1dddb3276cba6e9555a211b468a06f95f6a97c62ff8ee200"
+SRC_URI[sha256sum] = "e7075498bae332f917f01d660f9b940c0752b2556a8da61ccb62a44d0ffe9d33"
 
 PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)}"
 PACKAGECONFIG[ipv6] = "--enable-ipv6,--disable-ipv6,"
-- 
2.34.1

[OE-core] [PATCH 35/36] xev: update 1.2.5 -> 1.2.6

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
-Mark graceful_exit as noreturn
-Mark global variables as "static" since there's only one source file
-gitlab CI: stop requiring Signed-off-by in commits
-Fix overflow on XmbLookupString buffer

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta/recipes-graphics/xorg-app/{xev_1.2.5.bb => xev_1.2.6.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-app/{xev_1.2.5.bb => xev_1.2.6.bb} (84%)

diff --git a/meta/recipes-graphics/xorg-app/xev_1.2.5.bb b/meta/recipes-graphics/xorg-app/xev_1.2.6.bb
similarity index 84%
rename from meta/recipes-graphics/xorg-app/xev_1.2.5.bb
rename to meta/recipes-graphics/xorg-app/xev_1.2.6.bb
index 1d2e66b7b4..182aeff1b7 100644
--- a/meta/recipes-graphics/xorg-app/xev_1.2.5.bb
+++ b/meta/recipes-graphics/xorg-app/xev_1.2.6.bb
@@ -12,6 +12,6 @@ PE = "1"
 
 DEPENDS += "libxrandr xorgproto"
 
-SRC_URI[sha256sum] = "c9461a4389714e0f33974f9e75934bdc38d836a0f059b8dc089c7cbf2ce36ec1"
+SRC_URI[sha256sum] = "61e1c5e008ac9973aca7cdddf36e9df7410e77083b030eb04f4dc737c51807d7"
 
 SRC_URI_EXT = "xz"
-- 
2.34.1

[OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1

[wangmy]

From: Wang Mingyu <wangmy@fujitsu.com>

License-Update:
================
*COPYING:
 Add the license for the XZ logo.
 Change most public domain parts to 0BSD.
 Update COPYING about the man pages of the scripts.
*getopt.c
 MSVC: Don't #include <unistd.h>.
 lib/getopt*.c: Include <config.h> only HAVE_CONFIG_H is defined.
 lib: Update getopt.c from Gnulib with modifications.
 lib: Silence -Wsign-conversion in getopt.c.
 Add SPDX license identifiers to GPL, LGPL, and FSFULLR files.

Changelog:
=============
* liblzma: Fixed two bugs relating to GNU indirect function (IFUNC)
  with GCC.
* xz: Changed the messages for thread reduction due to memory
  constraints to only appear under the highest verbosity level.
* Build:
    - Fixed a build issue when the header file <linux/landlock.h>
      was present on the system but the Landlock system calls were
      not defined in <sys/syscall.h>.
    - The CMake build now warns and disables NLS if both gettext
      tools and pre-created .gmo files are missing. Previously,
      this caused the CMake build to fail.
* Minor improvements to man pages.
* Minor improvements to tests.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../xz/{xz_5.4.6.bb => xz_5.6.1.bb}           | 21 ++++++++++---------
 1 file changed, 11 insertions(+), 10 deletions(-)
 rename meta/recipes-extended/xz/{xz_5.4.6.bb => xz_5.6.1.bb} (79%)

diff --git a/meta/recipes-extended/xz/xz_5.4.6.bb b/meta/recipes-extended/xz/xz_5.6.1.bb
similarity index 79%
rename from meta/recipes-extended/xz/xz_5.4.6.bb
rename to meta/recipes-extended/xz/xz_5.6.1.bb
index da3b75a10b..dd6388e7dd 100644
--- a/meta/recipes-extended/xz/xz_5.4.6.bb
+++ b/meta/recipes-extended/xz/xz_5.6.1.bb
@@ -8,26 +8,27 @@ SECTION = "base"
 # packages, and the LGPL bits are under lib/, which appears to be used for
 # libgnu, which appears to be used for DOS builds. So we're left with
 # GPL-2.0-or-later and PD.
-LICENSE = "GPL-2.0-or-later & GPL-3.0-with-autoconf-exception & LGPL-2.1-or-later & PD"
-LICENSE:${PN} = "GPL-2.0-or-later"
-LICENSE:${PN}-dev = "GPL-2.0-or-later"
-LICENSE:${PN}-staticdev = "GPL-2.0-or-later"
-LICENSE:${PN}-doc = "GPL-2.0-or-later"
-LICENSE:${PN}-dbg = "GPL-2.0-or-later"
-LICENSE:${PN}-locale = "GPL-2.0-or-later"
+LICENSE = "GPL-2.0-or-later & GPL-3.0-with-autoconf-exception & LGPL-2.1-or-later & PD & 0BSD"
+LICENSE:${PN} = "GPL-2.0-or-later & 0BSD"
+LICENSE:${PN}-dev = "GPL-2.0-or-later & 0BSD"
+LICENSE:${PN}-staticdev = "GPL-2.0-or-later & 0BSD"
+LICENSE:${PN}-doc = "GPL-2.0-or-later & 0BSD"
+LICENSE:${PN}-dbg = "GPL-2.0-or-later & 0BSD"
+LICENSE:${PN}-locale = "GPL-2.0-or-later & 0BSD"
 LICENSE:liblzma = "PD"
 
-LIC_FILES_CHKSUM = "file://COPYING;md5=d4378ea9d5d1fc9ab0ae10d7948827d9 \
+LIC_FILES_CHKSUM = "file://COPYING;md5=3ef4de063517b8d33e97bbb87a3339ee \
                     file://COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
                     file://COPYING.GPLv3;md5=1ebbd3e34237af26da5dc08a4e440464 \
                     file://COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c \
-                    file://lib/getopt.c;endline=23;md5=2069b0ee710572c03bb3114e4532cd84 \
+                    file://lib/getopt.c;endline=23;md5=3f33e207287bf72834f3ae8c247dfb6a \
+                    file://COPYING.0BSD;md5=0672c210ce80c83444339b9aa31fee2f \
                     "
 
 SRC_URI = "https://github.com/tukaani-project/xz/releases/download/v${PV}/xz-${PV}.tar.gz \
            file://run-ptest \
           "
-SRC_URI[sha256sum] = "aeba3e03bf8140ddedf62a0a367158340520f6b384f75ca6045ccc6c0d43fd5c"
+SRC_URI[sha256sum] = "2398f4a8e53345325f44bdd9f0cc7401bd9025d736c6d43b372f4dea77bf75b8"
 UPSTREAM_CHECK_REGEX = "releases/tag/v(?P<pver>\d+(\.\d+)+)"
 UPSTREAM_CHECK_URI = "https://github.com/tukaani-project/xz/releases/"
 
-- 
2.34.1

Re: [OE-core] [PATCH 06/36] gnupg: upgrade 2.4.4 -> 2.4.5

[Richard Purdie]

On Wed, 2024-03-13 at 15:08 +0800, wangmy via lists.openembedded.org
wrote:
> From: Wang Mingyu <wangmy@fujitsu.com>
> 
> Changelog:
> ==========
> * gpg,gpgv: New option --assert-pubkey-algo.
> * gpg: Emit status lines for errors in the compression layer.
> * gpg: Fix invocation with --trusted-keys and --no-options.
> * gpgsm: Allow for a longer salt in PKCS#12 files.
> * gpgtar: Make --status-fd=2 work on Windows.
> * scd: Support for the ACR-122U NFC reader.
> * scd: Suport D-TRUST ECC cards.
> * scd: Allow auto detaching of kernel drivers; can be disabled with
>   the new compatibility-flag ccid-no-auto-detach.
> * scd: Allow setting a PIN length of 6 also with a reset code for
>   openpgp cards.
> * agent: Allow GET_PASSPHRASE in restricted mode.
> * dirmngr: Trust system's root CAs for checking CRL issuers.
> * dirmngr: Fix regression in 2.4.4 in fetching keys via hkps.
> * gpg-wks-client: Make option --mirror work properly w/o specifying
>   domains.
> * g13,gpg-wks-client: Allow command style options as in "g13 mount
>   foo".
> * Allow tilde expansion for the foo-program options.
> * Make the getswdb.sh tool usable outside the GnuPG tree.
> 
> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
> ---
>  meta/recipes-support/gnupg/{gnupg_2.4.4.bb => gnupg_2.4.5.bb} | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-support/gnupg/{gnupg_2.4.4.bb => gnupg_2.4.5.bb}
> (97%)

https://autobuilder.yoctoproject.org/typhoon/#/builders/45/builds/8729

Cheers,

Richard

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1

[Richard Purdie]

On Wed, 2024-03-13 at 15:08 +0800, wangmy via lists.openembedded.org
wrote:
> From: Wang Mingyu <wangmy@fujitsu.com>
> 
> License-Update:
> ================
> *COPYING:
>  Add the license for the XZ logo.
>  Change most public domain parts to 0BSD.
>  Update COPYING about the man pages of the scripts.
> *getopt.c
>  MSVC: Don't #include <unistd.h>.
>  lib/getopt*.c: Include <config.h> only HAVE_CONFIG_H is defined.
>  lib: Update getopt.c from Gnulib with modifications.
>  lib: Silence -Wsign-conversion in getopt.c.
>  Add SPDX license identifiers to GPL, LGPL, and FSFULLR files.
> 
> Changelog:
> =============
> * liblzma: Fixed two bugs relating to GNU indirect function (IFUNC)
>   with GCC.
> * xz: Changed the messages for thread reduction due to memory
>   constraints to only appear under the highest verbosity level.
> * Build:
>     - Fixed a build issue when the header file <linux/landlock.h>
>       was present on the system but the Landlock system calls were
>       not defined in <sys/syscall.h>.
>     - The CMake build now warns and disables NLS if both gettext
>       tools and pre-created .gmo files are missing. Previously,
>       this caused the CMake build to fail.
> * Minor improvements to man pages.
> * Minor improvements to tests.


https://autobuilder.yoctoproject.org/typhoon/#/builders/48/builds/8737

Cheers,

Richard

Re: [OE-core] [PATCH 23/36] python3-maturin: upgrade 1.4.0 -> 1.5.0

[Alexandre Belloni]

On 13/03/2024 15:08:21+0800, wangmy via lists.openembedded.org wrote:
> From: Wang Mingyu <wangmy@fujitsu.com>
> 
> Changelog:
>  Fix the format_name property and move it from the ArchiveEntry class to the ArchiveRead class
> 
> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
> ---
>  .../{python3-maturin_1.4.0.bb => python3-maturin_1.5.0.bb}      | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-devtools/python/{python3-maturin_1.4.0.bb => python3-maturin_1.5.0.bb} (92%)
> 
> diff --git a/meta/recipes-devtools/python/python3-maturin_1.4.0.bb b/meta/recipes-devtools/python/python3-maturin_1.5.0.bb
> similarity index 92%
> rename from meta/recipes-devtools/python/python3-maturin_1.4.0.bb
> rename to meta/recipes-devtools/python/python3-maturin_1.5.0.bb
> index ed19ee647a..e80a45f0bc 100644
> --- a/meta/recipes-devtools/python/python3-maturin_1.4.0.bb
> +++ b/meta/recipes-devtools/python/python3-maturin_1.5.0.bb
> @@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://license-apache;md5=1836efb2eb779966696f473ee8540542 \
>                      file://license-mit;md5=85fd3b67069cff784d98ebfc7d5c0797"
>  
>  SRC_URI += "file://0001-Add-32-bit-RISC-V-support.patch"

ERROR: python3-maturin-native-1.5.0-r0 do_patch: Applying patch '0001-Add-32-bit-RISC-V-support.patch' on target directory '/home/pokybuild/yocto-worker/reproducible/build/build-st/reproducibleA/tmp/work/x86_64-linux/python3-maturin-native/1.5.0/maturin-1.5.0'
CmdError('quilt --quiltrc /home/pokybuild/yocto-worker/reproducible/build/build-st/reproducibleA/tmp/work/x86_64-linux/python3-maturin-native/1.5.0/recipe-sysroot-native/etc/quiltrc push', 0, 'stdout: Applying patch 0001-Add-32-bit-RISC-V-support.patch


> -SRC_URI[sha256sum] = "ed12e1768094a7adeafc3a74ebdb8dc2201fa64c4e7e31f14cfc70378bf93790"
> +SRC_URI[sha256sum] = "e046ea2aed687991d58c42f6276dfcc0c037092934654f538b5877fd57dd3a9c"
>  
>  S = "${WORKDIR}/maturin-${PV}"
>  
> -- 
> 2.34.1
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#197027): https://lists.openembedded.org/g/openembedded-core/message/197027
> Mute This Topic: https://lists.openembedded.org/mt/104900971/3617179
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [alexandre.belloni@bootlin.com]
> -=-=-=-=-=-=-=-=-=-=-=-
> 


-- 
Alexandre Belloni, co-owner and COO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Mark Hatle]

I know this request is a week or so old..

But do NOT upgrade to 'xz' 5.6.0 or 5.6.1.  It has been compromised:

https://www.openwall.com/lists/oss-security/2024/03/29/4

--Mark

On 3/14/24 8:40 AM, Richard Purdie wrote:
> On Wed, 2024-03-13 at 15:08 +0800, wangmy via lists.openembedded.org
> wrote:
>> From: Wang Mingyu <wangmy@fujitsu.com>
>>
>> License-Update:
>> ================
>> *COPYING:
>>   Add the license for the XZ logo.
>>   Change most public domain parts to 0BSD.
>>   Update COPYING about the man pages of the scripts.
>> *getopt.c
>>   MSVC: Don't #include <unistd.h>.
>>   lib/getopt*.c: Include <config.h> only HAVE_CONFIG_H is defined.
>>   lib: Update getopt.c from Gnulib with modifications.
>>   lib: Silence -Wsign-conversion in getopt.c.
>>   Add SPDX license identifiers to GPL, LGPL, and FSFULLR files.
>>
>> Changelog:
>> =============
>> * liblzma: Fixed two bugs relating to GNU indirect function (IFUNC)
>>    with GCC.
>> * xz: Changed the messages for thread reduction due to memory
>>    constraints to only appear under the highest verbosity level.
>> * Build:
>>      - Fixed a build issue when the header file <linux/landlock.h>
>>        was present on the system but the Landlock system calls were
>>        not defined in <sys/syscall.h>.
>>      - The CMake build now warns and disables NLS if both gettext
>>        tools and pre-created .gmo files are missing. Previously,
>>        this caused the CMake build to fail.
>> * Minor improvements to man pages.
>> * Minor improvements to tests.
> 
> 
> https://autobuilder.yoctoproject.org/typhoon/#/builders/48/builds/8737
> 
> Cheers,
> 
> Richard
> 
> 
> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#197107): https://lists.openembedded.org/g/openembedded-core/message/197107
> Mute This Topic: https://lists.openembedded.org/mt/104900983/3616948
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [mark.hatle@kernel.crashing.org]
> -=-=-=-=-=-=-=-=-=-=-=-
> 

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Marta Rybczynska]

[-- Attachment #1: Type: text/plain, Size: 2315 bytes --]

Absolutely confirm. DO NOT UPDATE

Marta

On Sat, 30 Mar 2024, 02:04 Mark Hatle, <mark.hatle@kernel.crashing.org>
wrote:

> I know this request is a week or so old..
>
> But do NOT upgrade to 'xz' 5.6.0 or 5.6.1.  It has been compromised:
>
> https://www.openwall.com/lists/oss-security/2024/03/29/4
>
> --Mark
>
> On 3/14/24 8:40 AM, Richard Purdie wrote:
> > On Wed, 2024-03-13 at 15:08 +0800, wangmy via lists.openembedded.org
> > wrote:
> >> From: Wang Mingyu <wangmy@fujitsu.com>
> >>
> >> License-Update:
> >> ================
> >> *COPYING:
> >>   Add the license for the XZ logo.
> >>   Change most public domain parts to 0BSD.
> >>   Update COPYING about the man pages of the scripts.
> >> *getopt.c
> >>   MSVC: Don't #include <unistd.h>.
> >>   lib/getopt*.c: Include <config.h> only HAVE_CONFIG_H is defined.
> >>   lib: Update getopt.c from Gnulib with modifications.
> >>   lib: Silence -Wsign-conversion in getopt.c.
> >>   Add SPDX license identifiers to GPL, LGPL, and FSFULLR files.
> >>
> >> Changelog:
> >> =============
> >> * liblzma: Fixed two bugs relating to GNU indirect function (IFUNC)
> >>    with GCC.
> >> * xz: Changed the messages for thread reduction due to memory
> >>    constraints to only appear under the highest verbosity level.
> >> * Build:
> >>      - Fixed a build issue when the header file <linux/landlock.h>
> >>        was present on the system but the Landlock system calls were
> >>        not defined in <sys/syscall.h>.
> >>      - The CMake build now warns and disables NLS if both gettext
> >>        tools and pre-created .gmo files are missing. Previously,
> >>        this caused the CMake build to fail.
> >> * Minor improvements to man pages.
> >> * Minor improvements to tests.
> >
> >
> > https://autobuilder.yoctoproject.org/typhoon/#/builders/48/builds/8737
> >
> > Cheers,
> >
> > Richard
> >
> >
> >
> >
> >
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#197643):
> https://lists.openembedded.org/g/openembedded-core/message/197643
> Mute This Topic: https://lists.openembedded.org/mt/105226831/5827677
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [
> rybczynska@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[-- Attachment #2: Type: text/html, Size: 4076 bytes --]

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Richard Purdie]

On Sat, 2024-03-30 at 13:08 +0100, Marta Rybczynska wrote:
> Absolutely confirm. DO NOT UPDATE
> 
> Marta
> 
> On Sat, 30 Mar 2024, 02:04 Mark Hatle,
> <mark.hatle@kernel.crashing.org> wrote:
> > I know this request is a week or so old..
> > 
> > But do NOT upgrade to 'xz' 5.6.0 or 5.6.1.  It has been
> > compromised:
> > 
> > https://www.openwall.com/lists/oss-security/2024/03/29/4
> > 
> > --Mark

We're not going to. The upgrade was already dropped after it failed
build testing. I do wonder why it failed.

https://autobuilder.yoctoproject.org/typhoon/#/builders/48/builds/8737

I've ensured the sources were removed from our mirrors too.

Cheers,

Richard

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Alexander Kanavin]

[-- Attachment #1: Type: text/plain, Size: 1460 bytes --]

I’m slightly worried. Does this compromise build systems (given that back
door was injected into autoconf scripts) or only systems where xz binaries
are installed?

Ale

On Sat 30. Mar 2024 at 13.26, Richard Purdie <
richard.purdie@linuxfoundation.org> wrote:

> On Sat, 2024-03-30 at 13:08 +0100, Marta Rybczynska wrote:
> > Absolutely confirm. DO NOT UPDATE
> >
> > Marta
> >
> > On Sat, 30 Mar 2024, 02:04 Mark Hatle,
> > <mark.hatle@kernel.crashing.org> wrote:
> > > I know this request is a week or so old..
> > >
> > > But do NOT upgrade to 'xz' 5.6.0 or 5.6.1.  It has been
> > > compromised:
> > >
> > > https://www.openwall.com/lists/oss-security/2024/03/29/4
> > >
> > > --Mark
>
> We're not going to. The upgrade was already dropped after it failed
> build testing. I do wonder why it failed.
>
> https://autobuilder.yoctoproject.org/typhoon/#/builders/48/builds/8737
>
> I've ensured the sources were removed from our mirrors too.
>
> Cheers,
>
> Richard
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#197649):
> https://lists.openembedded.org/g/openembedded-core/message/197649
> Mute This Topic: https://lists.openembedded.org/mt/105226831/1686489
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [
> alex.kanavin@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[-- Attachment #2: Type: text/html, Size: 2759 bytes --]

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Martin Jansa]

From what is publicly known it injected malicious code (through m4
macro using payload hidden in obfuscated compressed test file) into
built liblzma.so.5 which then hijacks RSA_public_decrypt call e.g. in
sshd (when sshd is built with patch adding systemd notifications which
brings liblzma dependency to sshd e.g. on debian and ubuntu based
systems).

The build systems which just built this xz version shouldn't be
affected (as it won't be using the liblzma.so from the OE build on the
host).

This publicly known part should be OK for OE, but it's right to be
worried about the other things which aren't known (not only from these
guys or from xz project).

Regards,

On Sat, Mar 30, 2024 at 1:52 PM Alexander Kanavin
<alex.kanavin@gmail.com> wrote:
>
> I’m slightly worried. Does this compromise build systems (given that back door was injected into autoconf scripts) or only systems where xz binaries are installed?
>
> Ale
>
> On Sat 30. Mar 2024 at 13.26, Richard Purdie <richard.purdie@linuxfoundation.org> wrote:
>>
>> On Sat, 2024-03-30 at 13:08 +0100, Marta Rybczynska wrote:
>> > Absolutely confirm. DO NOT UPDATE
>> >
>> > Marta
>> >
>> > On Sat, 30 Mar 2024, 02:04 Mark Hatle,
>> > <mark.hatle@kernel.crashing.org> wrote:
>> > > I know this request is a week or so old..
>> > >
>> > > But do NOT upgrade to 'xz' 5.6.0 or 5.6.1.  It has been
>> > > compromised:
>> > >
>> > > https://www.openwall.com/lists/oss-security/2024/03/29/4
>> > >
>> > > --Mark
>>
>> We're not going to. The upgrade was already dropped after it failed
>> build testing. I do wonder why it failed.
>>
>> https://autobuilder.yoctoproject.org/typhoon/#/builders/48/builds/8737
>>
>> I've ensured the sources were removed from our mirrors too.
>>
>> Cheers,
>>
>> Richard
>>
>>
>>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#197650): https://lists.openembedded.org/g/openembedded-core/message/197650
> Mute This Topic: https://lists.openembedded.org/mt/105226831/3617156
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [martin.jansa@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Richard Purdie]

On Sat, 2024-03-30 at 14:06 +0100, Martin Jansa wrote:
> From what is publicly known it injected malicious code (through m4
> macro using payload hidden in obfuscated compressed test file) into
> built liblzma.so.5 which then hijacks RSA_public_decrypt call e.g. in
> sshd (when sshd is built with patch adding systemd notifications
> which brings liblzma dependency to sshd e.g. on debian and ubuntu
> based systems).
> 
> The build systems which just built this xz version shouldn't be
> affected (as it won't be using the liblzma.so from the OE build on
> the host).
> 
> This publicly known part should be OK for OE, but it's right to be
> worried about the other things which aren't known (not only from
> these guys or from xz project).

I concur.

It is worrying but I've kind of been expecting something like this for
a while unfortunately.

We need to watch what is going on and act accordingly if/as anything
else becomes known. 

Cheers,

Richard 

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Fathi Boudra]

On Sat, 30 Mar 2024 at 17:18, Richard Purdie
<richard.purdie@linuxfoundation.org> wrote:
>
> On Sat, 2024-03-30 at 14:06 +0100, Martin Jansa wrote:
> > From what is publicly known it injected malicious code (through m4
> > macro using payload hidden in obfuscated compressed test file) into
> > built liblzma.so.5 which then hijacks RSA_public_decrypt call e.g. in
> > sshd (when sshd is built with patch adding systemd notifications
> > which brings liblzma dependency to sshd e.g. on debian and ubuntu
> > based systems).
> >
> > The build systems which just built this xz version shouldn't be
> > affected (as it won't be using the liblzma.so from the OE build on
> > the host).
> >
> > This publicly known part should be OK for OE, but it's right to be
> > worried about the other things which aren't known (not only from
> > these guys or from xz project).
>
> I concur.
>
> It is worrying but I've kind of been expecting something like this for
> a while unfortunately.
>
> We need to watch what is going on and act accordingly if/as anything
> else becomes known.

https://nvd.nist.gov/vuln/detail/CVE-2024-3094

Distros have downgraded to older releases, still trying to figure out
which version to use.

> Cheers,
>
> Richard

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Denys Dmytriyenko]

On Mon, Apr 01, 2024 at 11:42:51AM +0200, Fathi Boudra wrote:
> On Sat, 30 Mar 2024 at 17:18, Richard Purdie
> <richard.purdie@linuxfoundation.org> wrote:
> >
> > On Sat, 2024-03-30 at 14:06 +0100, Martin Jansa wrote:
> > > From what is publicly known it injected malicious code (through m4
> > > macro using payload hidden in obfuscated compressed test file) into
> > > built liblzma.so.5 which then hijacks RSA_public_decrypt call e.g. in
> > > sshd (when sshd is built with patch adding systemd notifications
> > > which brings liblzma dependency to sshd e.g. on debian and ubuntu
> > > based systems).
> > >
> > > The build systems which just built this xz version shouldn't be
> > > affected (as it won't be using the liblzma.so from the OE build on
> > > the host).
> > >
> > > This publicly known part should be OK for OE, but it's right to be
> > > worried about the other things which aren't known (not only from
> > > these guys or from xz project).
> >
> > I concur.
> >
> > It is worrying but I've kind of been expecting something like this for
> > a while unfortunately.
> >
> > We need to watch what is going on and act accordingly if/as anything
> > else becomes known.
> 
> https://nvd.nist.gov/vuln/detail/CVE-2024-3094
> 
> Distros have downgraded to older releases, still trying to figure out
> which version to use.

While 5.4.6 version we've upgraded to in February was not yet compromised, 
it was already being taken over by Jia Tan, moving releases to controlled 
subdomain of xz.tukaani.org hosted off of GitHub directly, preparing for the 
malicious release of 5.6.0 and 5.6.1. So, we've pointed to GitHub location 
accordingly:

https://git.openembedded.org/openembedded-core/commit/?id=9cc6c809c154019afe3bf6e6d617eab640faa4d0
https://git.openembedded.org/openembedded-core/commit/?id=5be69fc3ff6296411c736e5c7c9522d99c0be2c6

But GitHub has suspended the project and associated developer accounts. The 
original maintainer has posted some details on this matter here:

https://tukaani.org/xz-backdoor/

Again, 5.4.6 tarball wasn't compromised, but it is no longer accessible from 
GitHub - should we revert back to 5.4.5 that was hosted on the original site? 
Though it should be mirrored...

-- 
Denys

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Marta Rybczynska]

On Mon, Apr 1, 2024 at 9:02 PM Denys Dmytriyenko <denis@denix.org> wrote:
>
> On Mon, Apr 01, 2024 at 11:42:51AM +0200, Fathi Boudra wrote:
> > On Sat, 30 Mar 2024 at 17:18, Richard Purdie
> > <richard.purdie@linuxfoundation.org> wrote:
> > >
> > > On Sat, 2024-03-30 at 14:06 +0100, Martin Jansa wrote:
> > > > From what is publicly known it injected malicious code (through m4
> > > > macro using payload hidden in obfuscated compressed test file) into
> > > > built liblzma.so.5 which then hijacks RSA_public_decrypt call e.g. in
> > > > sshd (when sshd is built with patch adding systemd notifications
> > > > which brings liblzma dependency to sshd e.g. on debian and ubuntu
> > > > based systems).
> > > >
> > > > The build systems which just built this xz version shouldn't be
> > > > affected (as it won't be using the liblzma.so from the OE build on
> > > > the host).
> > > >
> > > > This publicly known part should be OK for OE, but it's right to be
> > > > worried about the other things which aren't known (not only from
> > > > these guys or from xz project).
> > >
> > > I concur.
> > >
> > > It is worrying but I've kind of been expecting something like this for
> > > a while unfortunately.
> > >
> > > We need to watch what is going on and act accordingly if/as anything
> > > else becomes known.
> >
> > https://nvd.nist.gov/vuln/detail/CVE-2024-3094
> >
> > Distros have downgraded to older releases, still trying to figure out
> > which version to use.
>
> While 5.4.6 version we've upgraded to in February was not yet compromised,
> it was already being taken over by Jia Tan, moving releases to controlled
> subdomain of xz.tukaani.org hosted off of GitHub directly, preparing for the
> malicious release of 5.6.0 and 5.6.1. So, we've pointed to GitHub location
> accordingly:
>
> https://git.openembedded.org/openembedded-core/commit/?id=9cc6c809c154019afe3bf6e6d617eab640faa4d0
> https://git.openembedded.org/openembedded-core/commit/?id=5be69fc3ff6296411c736e5c7c9522d99c0be2c6
>
> But GitHub has suspended the project and associated developer accounts. The
> original maintainer has posted some details on this matter here:
>
> https://tukaani.org/xz-backdoor/
>
> Again, 5.4.6 tarball wasn't compromised, but it is no longer accessible from
> GitHub - should we revert back to 5.4.5 that was hosted on the original site?
> Though it should be mirrored...
>

The repository is disabled by GitHub, and the recipe does not work
from this end.
We need to switch to the older mirror and to the last version that was present.
There are other parts of the attack coming out each day, so we should
know to which version
we need to revert quite soon.

Regards,
Marta

Re: [OE-core] [PATCH 36/36] xz: upgrade 5.4.6 -> 5.6.1 _WARNING_

[Marta Rybczynska]

On Sat, Mar 30, 2024 at 1:26 PM Richard Purdie
<richard.purdie@linuxfoundation.org> wrote:
>
> On Sat, 2024-03-30 at 13:08 +0100, Marta Rybczynska wrote:
> > Absolutely confirm. DO NOT UPDATE
> >
> > Marta
> >
> > On Sat, 30 Mar 2024, 02:04 Mark Hatle,
> > <mark.hatle@kernel.crashing.org> wrote:
> > > I know this request is a week or so old..
> > >
> > > But do NOT upgrade to 'xz' 5.6.0 or 5.6.1.  It has been
> > > compromised:
> > >
> > > https://www.openwall.com/lists/oss-security/2024/03/29/4
> > >
> > > --Mark
>
> We're not going to. The upgrade was already dropped after it failed
> build testing. I do wonder why it failed.
>
> https://autobuilder.yoctoproject.org/typhoon/#/builders/48/builds/8737
>
> I've ensured the sources were removed from our mirrors too.


It looks to me that the Autobuilder has actually seen a side-effect of
the backdoor...

Marta