Openembedded Core Discussions
 help / color / mirror / Atom feed
* [PATCH 1/4] vim: upgrade 9.2.0843 -> 9.2.0993
@ 2026-08-24 16:45 yash.shinde.oss.dev
  2026-08-24 16:45 ` [PATCH 2/4] repo: upgrade 2.66 -> 2.66.1 yash.shinde.oss.dev
                   ` (2 more replies)
  0 siblings, 3 replies; 4+ messages in thread
From: yash.shinde.oss.dev @ 2026-08-24 16:45 UTC (permalink / raw)
  To: openembedded-core; +Cc: Yash Shinde

From: Yash Shinde <Yash.Shinde.oss.dev@gmail.com>

Includes security fixes:
581a2f3ac patch 9.2.0847: [security]: vimball: code execution via .VimballRecord file
05c41c922 patch 9.2.0846: [security]: heap buffer overflow in set_sofo()
2f628d810 patch 9.2.0845: [security]: arbitrary Ex command execution during C omni-completion
f8126294a patch 9.2.0844: [security]: use-after-free on json decode error

For full comparison of changes, see:
https://github.com/vim/vim/compare/v9.2.0843...v9.2.0993

Signed-off-by: Yash Shinde <Yash.Shinde.oss.dev@gmail.com>
---
 .../0001-src-Makefile-improve-reproducibility.patch    |  6 +++---
 .../vim/files/disable_acl_header_check.patch           | 10 +++++-----
 meta/recipes-support/vim/files/no-path-adjust.patch    |  9 +++------
 meta/recipes-support/vim/vim.inc                       |  4 ++--
 4 files changed, 13 insertions(+), 16 deletions(-)

diff --git a/meta/recipes-support/vim/files/0001-src-Makefile-improve-reproducibility.patch b/meta/recipes-support/vim/files/0001-src-Makefile-improve-reproducibility.patch
index ae78059296..8fbce41d1d 100644
--- a/meta/recipes-support/vim/files/0001-src-Makefile-improve-reproducibility.patch
+++ b/meta/recipes-support/vim/files/0001-src-Makefile-improve-reproducibility.patch
@@ -1,4 +1,4 @@
-From 133ab27cdb17ca20ef6b0304cf30621d2bcbe757 Mon Sep 17 00:00:00 2001
+From f8d147b328ae37a99b6804d5d127d91c905b7ca4 Mon Sep 17 00:00:00 2001
 From: Mingli Yu <mingli.yu@windriver.com>
 Date: Thu, 31 Jan 2019 21:32:26 -0800
 Subject: [PATCH] src/Makefile: improve reproducibility
@@ -17,10 +17,10 @@ Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
  1 file changed, 4 insertions(+), 10 deletions(-)
 
 diff --git a/src/Makefile b/src/Makefile
-index 32c0d97d1..97c754673 100644
+index 98baecf6f..ee64d987b 100644
 --- a/src/Makefile
 +++ b/src/Makefile
-@@ -3143,16 +3143,10 @@ auto/pathdef.c: Makefile auto/config.mk
+@@ -3201,16 +3201,10 @@ auto/pathdef.c: Makefile auto/config.mk
  	-@echo '#include "vim.h"' >> $@
  	-@echo 'char_u *default_vim_dir = (char_u *)"$(VIMRCLOC)";' | $(QUOTESED) >> $@
  	-@echo 'char_u *default_vimruntime_dir = (char_u *)"$(VIMRUNTIMEDIR)";' | $(QUOTESED) >> $@
diff --git a/meta/recipes-support/vim/files/disable_acl_header_check.patch b/meta/recipes-support/vim/files/disable_acl_header_check.patch
index b34f91c9b6..85b916a10c 100644
--- a/meta/recipes-support/vim/files/disable_acl_header_check.patch
+++ b/meta/recipes-support/vim/files/disable_acl_header_check.patch
@@ -1,5 +1,5 @@
-From 5ed25c076a1fb1889a3c50dddf29f21850b59a13 Mon Sep 17 00:00:00 2001
-From: Wenzong Fan <wenzong.fan@windriver.com> 
+From a07692b142c757bb4547695d8f1fd77b87b43cd8 Mon Sep 17 00:00:00 2001
+From: Wenzong Fan <wenzong.fan@windriver.com>
 Date: Tue, 26 Jun 2018 17:29:09 +0800
 Subject: [PATCH] disable acl header check
 
@@ -14,10 +14,10 @@ Signed-off-by: Changqing Li <changqing.li@windriver.com>
  1 file changed, 2 insertions(+), 1 deletion(-)
 
 diff --git a/src/configure.ac b/src/configure.ac
-index cdb818519..dafb7d6ce 100644
+index a3d06d0e8..910c8ac48 100644
 --- a/src/configure.ac
 +++ b/src/configure.ac
-@@ -3440,7 +3440,7 @@ AC_CHECK_HEADERS(stdint.h stdlib.h string.h \
+@@ -3555,7 +3555,7 @@ AC_CHECK_HEADERS(stdint.h stdlib.h string.h \
  	sys/systeminfo.h locale.h sys/stream.h termios.h \
  	libc.h sys/statfs.h poll.h sys/poll.h pwd.h \
  	utime.h sys/param.h sys/ptms.h libintl.h libgen.h \
@@ -26,7 +26,7 @@ index cdb818519..dafb7d6ce 100644
  	sys/access.h sys/sysinfo.h wchar.h wctype.h)
  
  dnl sys/ptem.h depends on sys/stream.h on Solaris
-@@ -4182,6 +4182,7 @@ AC_ARG_ENABLE(acl,
+@@ -4297,6 +4297,7 @@ AC_ARG_ENABLE(acl,
  	, [enable_acl="yes"])
  if test "$enable_acl" = "yes"; then
    AC_MSG_RESULT(no)
diff --git a/meta/recipes-support/vim/files/no-path-adjust.patch b/meta/recipes-support/vim/files/no-path-adjust.patch
index 541f022863..b2e98a2955 100644
--- a/meta/recipes-support/vim/files/no-path-adjust.patch
+++ b/meta/recipes-support/vim/files/no-path-adjust.patch
@@ -1,4 +1,4 @@
-From 4125a1ccb82fd53d003acdc34e462f238f0c4f0d Mon Sep 17 00:00:00 2001
+From 58cbbb08f33f3718b599b967e6a028669b3cf67f Mon Sep 17 00:00:00 2001
 From: Joe Slater <joe.slater@windriver.com>
 Date: Fri, 8 Jul 2022 11:03:22 +0800
 Subject: [PATCH] vim: do not adjust script pathnames
@@ -15,10 +15,10 @@ Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
  1 file changed, 1 insertion(+), 5 deletions(-)
 
 diff --git a/src/Makefile b/src/Makefile
-index c9513a632..7a7cbdc43 100644
+index ee64d987b..653e21926 100644
 --- a/src/Makefile
 +++ b/src/Makefile
-@@ -2531,11 +2531,7 @@ installtools: $(TOOLS) $(DESTDIR)$(exec_prefix) $(DEST_BIN) \
+@@ -2589,11 +2589,7 @@ installtools: $(TOOLS) $(DESTDIR)$(exec_prefix) $(DEST_BIN) \
  		 rm -rf $$cvs; \
  	      fi
  	-chmod $(FILEMOD) $(DEST_TOOLS)/*
@@ -31,6 +31,3 @@ index c9513a632..7a7cbdc43 100644
  	-chmod $(SCRIPTMOD) `grep -l "^#!" $(DEST_TOOLS)/*`
  
  # install the language specific files for tools, if they were unpacked
--- 
-2.25.1
-
diff --git a/meta/recipes-support/vim/vim.inc b/meta/recipes-support/vim/vim.inc
index 6f3ef9d6c8..29efe6fb0a 100644
--- a/meta/recipes-support/vim/vim.inc
+++ b/meta/recipes-support/vim/vim.inc
@@ -18,8 +18,8 @@ SRC_URI = "git://github.com/vim/vim.git;branch=master;protocol=https;tag=v${PV}
            file://no-path-adjust.patch \
            "
 
-PV .= ".0843"
-SRCREV = "975e191dc817d8d00abca7197c4529a417c2f805"
+PV .= ".0993"
+SRCREV = "ffce1ce58dd3d08110c35c8af61ad2555b344569"
 
 # Do not consider .z in x.y.z, as that is updated with every commit
 UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+\.\d+)\.0"
-- 
2.43.0



^ permalink raw reply related	[flat|nested] 4+ messages in thread
* [PATCH 2/4] repo: upgrade 2.66 -> 2.66.1
  2026-08-24 16:45 [PATCH 1/4] vim: upgrade 9.2.0843 -> 9.2.0993 yash.shinde.oss.dev
@ 2026-08-24 16:45 ` yash.shinde.oss.dev
  2026-08-24 16:45 ` [PATCH 3/4] python3-git: upgrade 3.1.58 -> 3.1.59 yash.shinde.oss.dev
  2026-08-24 16:45 ` [PATCH 4/4] go: upgrade 1.26.7 -> 1.27.0 yash.shinde.oss.dev
  2 siblings, 0 replies; 4+ messages in thread
From: yash.shinde.oss.dev @ 2026-08-24 16:45 UTC (permalink / raw)
  To: openembedded-core; +Cc: Yash Shinde

From: Yash Shinde <Yash.Shinde.oss.dev@gmail.com>

https://github.com/GerritCodeReview/git-repo/compare/v2.66...v2.66.1

Signed-off-by: Yash Shinde <Yash.Shinde.oss.dev@gmail.com>
---
 meta/recipes-devtools/repo/{repo_2.66.bb => repo_2.66.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/repo/{repo_2.66.bb => repo_2.66.1.bb} (94%)

diff --git a/meta/recipes-devtools/repo/repo_2.66.bb b/meta/recipes-devtools/repo/repo_2.66.1.bb
similarity index 94%
rename from meta/recipes-devtools/repo/repo_2.66.bb
rename to meta/recipes-devtools/repo/repo_2.66.1.bb
index e03cf7f019..32c7a38a94 100644
--- a/meta/recipes-devtools/repo/repo_2.66.bb
+++ b/meta/recipes-devtools/repo/repo_2.66.1.bb
@@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
 SRC_URI = "git://gerrit.googlesource.com/git-repo.git;protocol=https;branch=main;tag=v${PV} \
            "
-SRCREV = "d9da609d8c120bb882a43196a4a6b7f183418304"
+SRCREV = "b85886fa9f5b4e2189cc5b2f40bd0a80459d4c77"
 
 MIRRORS += "git://gerrit.googlesource.com/git-repo.git git://github.com/GerritCodeReview/git-repo.git"
 
-- 
2.43.0



^ permalink raw reply related	[flat|nested] 4+ messages in thread
* [PATCH 3/4] python3-git: upgrade 3.1.58 -> 3.1.59
  2026-08-24 16:45 [PATCH 1/4] vim: upgrade 9.2.0843 -> 9.2.0993 yash.shinde.oss.dev
  2026-08-24 16:45 ` [PATCH 2/4] repo: upgrade 2.66 -> 2.66.1 yash.shinde.oss.dev
@ 2026-08-24 16:45 ` yash.shinde.oss.dev
  2026-08-24 16:45 ` [PATCH 4/4] go: upgrade 1.26.7 -> 1.27.0 yash.shinde.oss.dev
  2 siblings, 0 replies; 4+ messages in thread
From: yash.shinde.oss.dev @ 2026-08-24 16:45 UTC (permalink / raw)
  To: openembedded-core; +Cc: Yash Shinde

From: Yash Shinde <Yash.Shinde.oss.dev@gmail.com>

- https://gitpython.readthedocs.io/en/3.1.59/changes.html
- https://github.com/gitpython-developers/GitPython/releases/tag/3.1.59
- https://github.com/gitpython-developers/GitPython/compare/3.1.58...3.1.59

Signed-off-by: Yash Shinde <Yash.Shinde.oss.dev@gmail.com>
---
 .../python/{python3-git_3.1.58.bb => python3-git_3.1.59.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-git_3.1.58.bb => python3-git_3.1.59.bb} (92%)

diff --git a/meta/recipes-devtools/python/python3-git_3.1.58.bb b/meta/recipes-devtools/python/python3-git_3.1.59.bb
similarity index 92%
rename from meta/recipes-devtools/python/python3-git_3.1.58.bb
rename to meta/recipes-devtools/python/python3-git_3.1.59.bb
index 82c8076a97..92e5977789 100644
--- a/meta/recipes-devtools/python/python3-git_3.1.58.bb
+++ b/meta/recipes-devtools/python/python3-git_3.1.59.bb
@@ -14,7 +14,7 @@ CVE_PRODUCT = "gitpython_project:gitpython"
 
 inherit pypi python_setuptools_build_meta
 
-SRC_URI[sha256sum] = "621416df10ef3fd0e19fabf9172ddeed0fa704d353d04f194eec56a625a95b22"
+SRC_URI[sha256sum] = "0a1475cfdc38a5bfba1a3e9a4a9da52a39749ecec322b772915c019f94e5b7e4"
 
 DEPENDS += " python3-gitdb"
 
-- 
2.43.0



^ permalink raw reply related	[flat|nested] 4+ messages in thread
* [PATCH 4/4] go: upgrade 1.26.7 -> 1.27.0
  2026-08-24 16:45 [PATCH 1/4] vim: upgrade 9.2.0843 -> 9.2.0993 yash.shinde.oss.dev
  2026-08-24 16:45 ` [PATCH 2/4] repo: upgrade 2.66 -> 2.66.1 yash.shinde.oss.dev
  2026-08-24 16:45 ` [PATCH 3/4] python3-git: upgrade 3.1.58 -> 3.1.59 yash.shinde.oss.dev
@ 2026-08-24 16:45 ` yash.shinde.oss.dev
  2 siblings, 0 replies; 4+ messages in thread
From: yash.shinde.oss.dev @ 2026-08-24 16:45 UTC (permalink / raw)
  To: openembedded-core; +Cc: Yash Shinde

From: Yash Shinde <Yash.Shinde.oss.dev@gmail.com>

Release information:

https://groups.google.com/g/golang-announce/c/8gcPInd8SQE
https://go.dev/doc/go1.27

Signed-off-by: Yash Shinde <Yash.Shinde.oss.dev@gmail.com>
---
 meta/recipes-devtools/go/{go-1.26.7.inc => go-1.27.0.inc}   | 2 +-
 ...o-binary-native_1.26.7.bb => go-binary-native_1.27.0.bb} | 6 +++---
 ...cross-canadian_1.26.7.bb => go-cross-canadian_1.27.0.bb} | 0
 .../go/{go-cross_1.26.7.bb => go-cross_1.27.0.bb}           | 0
 .../go/{go-crosssdk_1.26.7.bb => go-crosssdk_1.27.0.bb}     | 0
 .../go/{go-runtime_1.26.7.bb => go-runtime_1.27.0.bb}       | 0
 meta/recipes-devtools/go/{go_1.26.7.bb => go_1.27.0.bb}     | 0
 7 files changed, 4 insertions(+), 4 deletions(-)
 rename meta/recipes-devtools/go/{go-1.26.7.inc => go-1.27.0.inc} (90%)
 rename meta/recipes-devtools/go/{go-binary-native_1.26.7.bb => go-binary-native_1.27.0.bb} (80%)
 rename meta/recipes-devtools/go/{go-cross-canadian_1.26.7.bb => go-cross-canadian_1.27.0.bb} (100%)
 rename meta/recipes-devtools/go/{go-cross_1.26.7.bb => go-cross_1.27.0.bb} (100%)
 rename meta/recipes-devtools/go/{go-crosssdk_1.26.7.bb => go-crosssdk_1.27.0.bb} (100%)
 rename meta/recipes-devtools/go/{go-runtime_1.26.7.bb => go-runtime_1.27.0.bb} (100%)
 rename meta/recipes-devtools/go/{go_1.26.7.bb => go_1.27.0.bb} (100%)

diff --git a/meta/recipes-devtools/go/go-1.26.7.inc b/meta/recipes-devtools/go/go-1.27.0.inc
similarity index 90%
rename from meta/recipes-devtools/go/go-1.26.7.inc
rename to meta/recipes-devtools/go/go-1.27.0.inc
index fed87015b2..4162a2b225 100644
--- a/meta/recipes-devtools/go/go-1.26.7.inc
+++ b/meta/recipes-devtools/go/go-1.27.0.inc
@@ -16,4 +16,4 @@ SRC_URI += "\
     file://0009-go-Filter-build-paths-on-staticly-linked-arches.patch \
     file://0010-cmd-go-clear-GOROOT-for-func-ldShared-when-trimpath-.patch \
 "
-SRC_URI[main.sha256sum] = "0ed24eac755105085b89fe9cabc2742b91a0ad7b94b59d3ad364918ebc8956ad"
+SRC_URI[main.sha256sum] = "7002403d7cc44529ef6d26f69a44818263395ead7c16c05a5808ae047ebeb0e5"
diff --git a/meta/recipes-devtools/go/go-binary-native_1.26.7.bb b/meta/recipes-devtools/go/go-binary-native_1.27.0.bb
similarity index 80%
rename from meta/recipes-devtools/go/go-binary-native_1.26.7.bb
rename to meta/recipes-devtools/go/go-binary-native_1.27.0.bb
index 753f1b13bb..a3750653c8 100644
--- a/meta/recipes-devtools/go/go-binary-native_1.26.7.bb
+++ b/meta/recipes-devtools/go/go-binary-native_1.27.0.bb
@@ -9,9 +9,9 @@ PROVIDES = "go-native"
 
 # Checksums available at https://go.dev/dl/
 SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}"
-SRC_URI[go_linux_amd64.sha256sum] = "ffb5f8de10c62550dfddab66b36b57030721e0a44a3218e9e1181d7b59f121ca"
-SRC_URI[go_linux_arm64.sha256sum] = "5a4ec883379d51ee9ce1040d5e87f8d35e20387574dd8c947feb01eabc3c1b37"
-SRC_URI[go_linux_ppc64le.sha256sum] = "22d3b362d557175fd16b79651cab0cad64f8aaaedca745f66d16f44d56bc5de1"
+SRC_URI[go_linux_amd64.sha256sum] = "675c26c449cbb18fc24b74650de1eabbae6e16f64326fd85a283fb3b58280685"
+SRC_URI[go_linux_arm64.sha256sum] = "51798d2c42d0e1c6ed7fd9f48728b4193abac9e8aad6dbac2fe96a81f5909bda"
+SRC_URI[go_linux_ppc64le.sha256sum] = "068085e257a6014c036c723ca62943edbf48fd168b8d00a6d39527d10b656255"
 
 UPSTREAM_CHECK_URI = "https://golang.org/dl/"
 UPSTREAM_CHECK_REGEX = "go(?P<pver>\d+(\.\d+)+)\.linux"
diff --git a/meta/recipes-devtools/go/go-cross-canadian_1.26.7.bb b/meta/recipes-devtools/go/go-cross-canadian_1.27.0.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-cross-canadian_1.26.7.bb
rename to meta/recipes-devtools/go/go-cross-canadian_1.27.0.bb
diff --git a/meta/recipes-devtools/go/go-cross_1.26.7.bb b/meta/recipes-devtools/go/go-cross_1.27.0.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-cross_1.26.7.bb
rename to meta/recipes-devtools/go/go-cross_1.27.0.bb
diff --git a/meta/recipes-devtools/go/go-crosssdk_1.26.7.bb b/meta/recipes-devtools/go/go-crosssdk_1.27.0.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-crosssdk_1.26.7.bb
rename to meta/recipes-devtools/go/go-crosssdk_1.27.0.bb
diff --git a/meta/recipes-devtools/go/go-runtime_1.26.7.bb b/meta/recipes-devtools/go/go-runtime_1.27.0.bb
similarity index 100%
rename from meta/recipes-devtools/go/go-runtime_1.26.7.bb
rename to meta/recipes-devtools/go/go-runtime_1.27.0.bb
diff --git a/meta/recipes-devtools/go/go_1.26.7.bb b/meta/recipes-devtools/go/go_1.27.0.bb
similarity index 100%
rename from meta/recipes-devtools/go/go_1.26.7.bb
rename to meta/recipes-devtools/go/go_1.27.0.bb


^ permalink raw reply related	[flat|nested] 4+ messages in thread
end of thread, other threads:[~2026-08-24 16:46 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-24 16:45 [PATCH 1/4] vim: upgrade 9.2.0843 -> 9.2.0993 yash.shinde.oss.dev
2026-08-24 16:45 ` [PATCH 2/4] repo: upgrade 2.66 -> 2.66.1 yash.shinde.oss.dev
2026-08-24 16:45 ` [PATCH 3/4] python3-git: upgrade 3.1.58 -> 3.1.59 yash.shinde.oss.dev
2026-08-24 16:45 ` [PATCH 4/4] go: upgrade 1.26.7 -> 1.27.0 yash.shinde.oss.dev

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox