* [PATCH 2/6] freetype: upgrade 2.14.1 -> 2.14.2
2026-03-03 13:36 [PATCH 1/6] ca-certificates: upgrade 20250419 -> 20260223 Andrej Kozemcak
@ 2026-03-03 13:36 ` Andrej Kozemcak
2026-03-03 13:36 ` [PATCH 3/6] iproute2: upgrade 6.18.0 -> 6.19.0 Andrej Kozemcak
` (3 subsequent siblings)
4 siblings, 0 replies; 7+ messages in thread
From: Andrej Kozemcak @ 2026-03-03 13:36 UTC (permalink / raw)
To: openembedded-core; +Cc: Andrej Kozemcak
Changelog: https://gitlab.freedesktop.org/freetype/freetype/-/blob/f4205da14867c5387cd6a329b90ee10a6df6eeff/docs/CHANGES
Changes:
- Several changes related to LCD filtering are implemented to
achieve better performance and encourage sound practices.
Bug fixes:
- A bunch of potential security problems have been found. All users
should update.
- The italic angle in `PS_FontInfo` is now stored as a fixed-point
value in degrees for all Type 1 fonts and their derivatives,
consistent with CFF fonts and common practices. The broken
underline position and thickness values are fixed for CFF fonts.
Miscellaneous:
- The `x` field in the `FT_Span` structure is now unsigned.
- Demo program `ftgrid` got an option `-m` to select a start
character to display.
- Similarly, demo program `ftmulti` got an option `-m` to select a
text string for rendering.
- Option `-d` in the demo program `ttdebug` is now called `-a`,
expecting a comma-separated list of axis values. The user
interface is also slightly improved.
- The `ftinspect` demo program can now be compiled with Qt6, too.
Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
---
.../freetype/{freetype_2.14.1.bb => freetype_2.14.2.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-graphics/freetype/{freetype_2.14.1.bb => freetype_2.14.2.bb} (94%)
diff --git a/meta/recipes-graphics/freetype/freetype_2.14.1.bb b/meta/recipes-graphics/freetype/freetype_2.14.2.bb
similarity index 94%
rename from meta/recipes-graphics/freetype/freetype_2.14.1.bb
rename to meta/recipes-graphics/freetype/freetype_2.14.2.bb
index dc59e5656b..08e3908235 100644
--- a/meta/recipes-graphics/freetype/freetype_2.14.1.bb
+++ b/meta/recipes-graphics/freetype/freetype_2.14.2.bb
@@ -14,7 +14,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.TXT;md5=eeb073d5fb86d23c52bb9b84aa256307 \
"
SRC_URI = "${SAVANNAH_NONGNU_MIRROR}/${BPN}/${BP}.tar.xz"
-SRC_URI[sha256sum] = "32427e8c471ac095853212a37aef816c60b42052d4d9e48230bab3bdf2936ccc"
+SRC_URI[sha256sum] = "4b62dcab4c920a1a860369933221814362e699e26f55792516d671e6ff55b5e1"
UPSTREAM_CHECK_REGEX = "freetype-(?P<pver>\d+(\.\d+)+)"
--
2.47.3
^ permalink raw reply related [flat|nested] 7+ messages in thread* [PATCH 3/6] iproute2: upgrade 6.18.0 -> 6.19.0
2026-03-03 13:36 [PATCH 1/6] ca-certificates: upgrade 20250419 -> 20260223 Andrej Kozemcak
2026-03-03 13:36 ` [PATCH 2/6] freetype: upgrade 2.14.1 -> 2.14.2 Andrej Kozemcak
@ 2026-03-03 13:36 ` Andrej Kozemcak
2026-03-04 17:39 ` [OE-core] " Mathieu Dubois-Briand
2026-03-03 13:36 ` [PATCH 4/6] iptables: upgrade 1.8.11 -> 1.8.12 Andrej Kozemcak
` (2 subsequent siblings)
4 siblings, 1 reply; 7+ messages in thread
From: Andrej Kozemcak @ 2026-03-03 13:36 UTC (permalink / raw)
To: openembedded-core; +Cc: Andrej Kozemcak
Drop fix-musl.patch as it was merged upstream.
Changes:
- new dpll command for managing Digital Phase-Locked Loop devices via netlink.
- expanded CAN XL support
- MPTCP improvements
- devlink:
- added support for 64‑bit parameters
- added new SWITCHDEV_INACTIVE eswitch mode
- added burst period configuration for health reporters
- genl:
- supports JSON output
- ifstat, nstat, lnstat:
- converted to use the high-level json_print API for unified JSON output
Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
---
.../iproute2/iproute2/fix-musl.patch | 43 -------------------
...{iproute2_6.18.0.bb => iproute2_6.19.0.bb} | 3 +-
2 files changed, 1 insertion(+), 45 deletions(-)
delete mode 100644 meta/recipes-connectivity/iproute2/iproute2/fix-musl.patch
rename meta/recipes-connectivity/iproute2/{iproute2_6.18.0.bb => iproute2_6.19.0.bb} (96%)
diff --git a/meta/recipes-connectivity/iproute2/iproute2/fix-musl.patch b/meta/recipes-connectivity/iproute2/iproute2/fix-musl.patch
deleted file mode 100644
index 20907dad50..0000000000
--- a/meta/recipes-connectivity/iproute2/iproute2/fix-musl.patch
+++ /dev/null
@@ -1,43 +0,0 @@
-From 6c1113633fde51b0e60f02243cfad1b3d09762cc Mon Sep 17 00:00:00 2001
-From: Akhilesh Nema <nemaakhilesh@gmail.com>
-Date: Tue, 2 Dec 2025 18:11:24 -0800
-Subject: fix 'UINT_MAX' undeclared with build with musl libc
-
-- utils_math.c:136:20: error: 'UINT_MAX' undeclared (first use in this function)
-- tc_core.c:51:22: error: 'UINT_MAX' undeclared (first use in this function)
-
-Signed-off-by: Akhilesh Nema <nemaakhilesh@gmail.com>
-Upstream-Status: Backport [https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=6c1113633fde51b0e60f02243cfad1b3d09762cc]
-Signed-off-by: Alexander Kanavin <alex@linutronix.de>
----
- lib/utils_math.c | 1 +
- tc/tc_core.c | 1 +
- 2 files changed, 2 insertions(+)
-
-diff --git a/lib/utils_math.c b/lib/utils_math.c
-index a7e747440..fd2ddc7c7 100644
---- a/lib/utils_math.c
-+++ b/lib/utils_math.c
-@@ -4,6 +4,7 @@
- #include <stdlib.h>
- #include <string.h>
- #include <math.h>
-+#include <limits.h>
- #include <asm/types.h>
-
- #include "utils.h"
-diff --git a/tc/tc_core.c b/tc/tc_core.c
-index a422e02c8..b13b7d78a 100644
---- a/tc/tc_core.c
-+++ b/tc/tc_core.c
-@@ -11,6 +11,7 @@
- #include <unistd.h>
- #include <fcntl.h>
- #include <math.h>
-+#include <limits.h>
- #include <sys/socket.h>
- #include <netinet/in.h>
- #include <arpa/inet.h>
---
-cgit 1.2.3-korg
-
diff --git a/meta/recipes-connectivity/iproute2/iproute2_6.18.0.bb b/meta/recipes-connectivity/iproute2/iproute2_6.19.0.bb
similarity index 96%
rename from meta/recipes-connectivity/iproute2/iproute2_6.18.0.bb
rename to meta/recipes-connectivity/iproute2/iproute2_6.19.0.bb
index c68b2adc0f..a9462aa083 100644
--- a/meta/recipes-connectivity/iproute2/iproute2_6.18.0.bb
+++ b/meta/recipes-connectivity/iproute2/iproute2_6.19.0.bb
@@ -13,10 +13,9 @@ DEPENDS = "flex-native bison-native libcap"
SRC_URI = "${KERNELORG_MIRROR}/linux/utils/net/${BPN}/${BP}.tar.xz \
file://0001-include-libnetlink.h-add-missing-include-for-htobe64.patch \
- file://fix-musl.patch \
"
-SRC_URI[sha256sum] = "6ba520e1975e4c50dc931eeae91ea37c198b8a173744885f8895b84325f9d456"
+SRC_URI[sha256sum] = "9332213d35480b647086a70c302de8568de83455a98774d35de216c4ce191006"
inherit update-alternatives bash-completion pkgconfig
--
2.47.3
^ permalink raw reply related [flat|nested] 7+ messages in thread* Re: [OE-core] [PATCH 3/6] iproute2: upgrade 6.18.0 -> 6.19.0
2026-03-03 13:36 ` [PATCH 3/6] iproute2: upgrade 6.18.0 -> 6.19.0 Andrej Kozemcak
@ 2026-03-04 17:39 ` Mathieu Dubois-Briand
0 siblings, 0 replies; 7+ messages in thread
From: Mathieu Dubois-Briand @ 2026-03-04 17:39 UTC (permalink / raw)
To: andrej.kozemcak, openembedded-core
On Tue Mar 3, 2026 at 2:36 PM CET, Andrej Kozemcak via lists.openembedded.org wrote:
> Drop fix-musl.patch as it was merged upstream.
>
> Changes:
> - new dpll command for managing Digital Phase-Locked Loop devices via netlink.
> - expanded CAN XL support
> - MPTCP improvements
> - devlink:
> - added support for 64‑bit parameters
> - added new SWITCHDEV_INACTIVE eswitch mode
> - added burst period configuration for health reporters
> - genl:
> - supports JSON output
> - ifstat, nstat, lnstat:
> - converted to use the high-level json_print API for unified JSON output
>
> Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
> ---
Hi Andrej,
Thanks for the upgrade.
It looks like we have some build issues with this new version:
ERROR: iproute2-6.19.0-r0 do_compile: oe_runmake failed
...
| NOTE: make -j 16 -l 75 CC=i686-poky-linux-musl-gcc -m32 -march=core2 -mtune=core2 -msse3 -mfpmath=sse -D_TIME_BITS=64 -D_FILE_OFFSET_BITS=64 -fstack-protector-strong -Os -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security --sysroot=/srv/pokybuild/yocto-worker/poky-tiny/build/build/tmp/work/core2-32-poky-linux-musl/iproute2/6.19.0/recipe-sysroot KERNEL_INCLUDE=/srv/pokybuild/yocto-worker/poky-tiny/build/build/tmp/work/core2-32-poky-linux-musl/iproute2/6.19.0/recipe-sysroot/usr/include DOCDIR=/usr/share/doc/iproute2 SUBDIRS=lib tc ip bridge misc genl devlink tipc SBINDIR=/sbin CONF_USR_DIR=/usr/lib/iproute2 LIBDIR=/usr/lib CCOPTS= -Os -fcanon-prefix-map -ffile-prefix-map=/srv/pokybuild/yocto-worker/poky-tiny/build/build/tmp/work/core2-32-poky-linux-musl/iproute2/6.19.0/sources/iproute2-6.19.0=/usr/src/debug/iproute2/6.19.0 -ffile-prefix-map=/srv/pokybuild/yocto-worker/poky-tiny/build/build/tmp/work/core2-32-poky-linux-musl/iproute2/6.19.0/sources/iproute2-6.19.0=/usr/src/debug/iproute2/6.19.0 -ffile-prefix-map=/srv/pokybuild/yocto-worker/poky-tiny/build/build/tmp/work/core2-32-poky-linux-musl/iproute2/6.19.0/recipe-sysroot= -ffile-prefix-map=/srv/pokybuild/yocto-worker/poky-tiny/build/build/tmp/work/core2-32-poky-linux-musl/iproute2/6.19.0/recipe-sysroot-native= -pipe -Wno-error=incompatible-pointer-types -ffunction-sections -fdata-sections
...
In file included from lnstat.c:35:
| ../include/json_print.h:80:30: warning: 'struct timeval' declared inside parameter list will not be visible outside of this definition or declaration
| 80 | _PRINT_FUNC(tv, const struct timeval *)
...
| ../include/color.h:27:34: error: unknown type name '__u8'
| 27 | enum color_attr ifa_family_color(__u8 ifa_family);
| | ^~~~
| ../include/color.h:28:34: error: unknown type name '__u8'
| 28 | enum color_attr oper_state_color(__u8 state);
| | ^~~~
| ../include/json_print.h:71:19: error: unknown type name '__u64'
| 71 | _PRINT_FUNC(size, __u64)
...
https://autobuilder.yoctoproject.org/valkyrie/#/builders/50/builds/3328
https://autobuilder.yoctoproject.org/valkyrie/#/builders/111/builds/2028
https://autobuilder.yoctoproject.org/valkyrie/#/builders/6/builds/3316
Can you have a look at these failures?
Thanks,
Mathieu
--
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
^ permalink raw reply [flat|nested] 7+ messages in thread
* [PATCH 4/6] iptables: upgrade 1.8.11 -> 1.8.12
2026-03-03 13:36 [PATCH 1/6] ca-certificates: upgrade 20250419 -> 20260223 Andrej Kozemcak
2026-03-03 13:36 ` [PATCH 2/6] freetype: upgrade 2.14.1 -> 2.14.2 Andrej Kozemcak
2026-03-03 13:36 ` [PATCH 3/6] iproute2: upgrade 6.18.0 -> 6.19.0 Andrej Kozemcak
@ 2026-03-03 13:36 ` Andrej Kozemcak
2026-03-03 13:36 ` [PATCH 5/6] libunistring: upgrade 1.4.1 -> 1.4.2 Andrej Kozemcak
2026-03-03 13:36 ` [PATCH 6/6] shadow: upgrade 4.18.0 -> 4.19.4 Andrej Kozemcak
4 siblings, 0 replies; 7+ messages in thread
From: Andrej Kozemcak @ 2026-03-03 13:36 UTC (permalink / raw)
To: openembedded-core; +Cc: Andrej Kozemcak
Changes:
- fix null dereference parsing bitwise operations.
- refuse to run under file capabilities, ie. getauxval(AT_SECURE).
- fix for all-zero mask on Big Endian in arptables-nft.
- support adding and replacing a rule in the same batch in iptables-nft.
- filter
-A FORWARD -m comment --comment "new rule being replaced"
-R FORWARD 1 -m comment --comment "new replacing rule"
COMMIT
- print -X in xtables-monitor command for base chains.
- remove incorrect libebt_redirect translations.
- translate bare '-m sctp' match to '-p sctp' just like TCP and UDP.
- support for info-request and info-reply icmp types.
- fix interface comparisons in `-C` commands in iptables-nft.
- several fixes for ip[6]tables-translate, the tool to ease migration
to nftables.
- document flush behaviour with --noflush for user-defined chains.
Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
---
.../iptables/{iptables_1.8.11.bb => iptables_1.8.12.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-extended/iptables/{iptables_1.8.11.bb => iptables_1.8.12.bb} (98%)
diff --git a/meta/recipes-extended/iptables/iptables_1.8.11.bb b/meta/recipes-extended/iptables/iptables_1.8.12.bb
similarity index 98%
rename from meta/recipes-extended/iptables/iptables_1.8.11.bb
rename to meta/recipes-extended/iptables/iptables_1.8.12.bb
index 686dc5afe5..928930d08c 100644
--- a/meta/recipes-extended/iptables/iptables_1.8.11.bb
+++ b/meta/recipes-extended/iptables/iptables_1.8.12.bb
@@ -14,7 +14,7 @@ SRC_URI = "http://netfilter.org/projects/iptables/files/iptables-${PV}.tar.xz \
file://ip6tables.service \
file://ip6tables.rules \
"
-SRC_URI[sha256sum] = "d87303d55ef8c92bcad4dd3f978b26d272013642b029425775f5bad1009fe7b2"
+SRC_URI[sha256sum] = "8e7ee962601492de6503d171d4a948092ab18f89f111de72e3037c1f40cfb846"
SYSTEMD_SERVICE:${PN} = "\
iptables.service \
--
2.47.3
^ permalink raw reply related [flat|nested] 7+ messages in thread* [PATCH 5/6] libunistring: upgrade 1.4.1 -> 1.4.2
2026-03-03 13:36 [PATCH 1/6] ca-certificates: upgrade 20250419 -> 20260223 Andrej Kozemcak
` (2 preceding siblings ...)
2026-03-03 13:36 ` [PATCH 4/6] iptables: upgrade 1.8.11 -> 1.8.12 Andrej Kozemcak
@ 2026-03-03 13:36 ` Andrej Kozemcak
2026-03-03 13:36 ` [PATCH 6/6] shadow: upgrade 4.18.0 -> 4.19.4 Andrej Kozemcak
4 siblings, 0 replies; 7+ messages in thread
From: Andrej Kozemcak @ 2026-03-03 13:36 UTC (permalink / raw)
To: openembedded-core; +Cc: Andrej Kozemcak
- prepare for 1.4.2 release.
- version.sh: Bump version number, date, gnulib version.
- README: Update version.
- NEWS: Update.
- sync with gnulib.
- lib/unistring/cdefs.h: Update from gnulib/m4/gnulib-common.m4.
(_GL_UNNAMED): New macro.
(_UC_UNNAMED): Apply
- new C macro _GL_UNNAMED
- Make the generated <unistring/stdint.h> more usable in C++ mode.
- lib/Makefile.am (unistring/stdint.h): In C++ 11 or newer mode, just use
<cstdint>.
Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
---
.../{libunistring_1.4.1.bb => libunistring_1.4.2.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-support/libunistring/{libunistring_1.4.1.bb => libunistring_1.4.2.bb} (93%)
diff --git a/meta/recipes-support/libunistring/libunistring_1.4.1.bb b/meta/recipes-support/libunistring/libunistring_1.4.2.bb
similarity index 93%
rename from meta/recipes-support/libunistring/libunistring_1.4.1.bb
rename to meta/recipes-support/libunistring/libunistring_1.4.2.bb
index 791f4983ed..8f6cc27193 100644
--- a/meta/recipes-support/libunistring/libunistring_1.4.1.bb
+++ b/meta/recipes-support/libunistring/libunistring_1.4.2.bb
@@ -21,7 +21,7 @@ LIC_FILES_CHKSUM = "file://COPYING.LIB;md5=6a6a8e020838b23406c81b19c1d46df6 \
DEPENDS = "gperf-native"
SRC_URI = "${GNU_MIRROR}/libunistring/libunistring-${PV}.tar.gz"
-SRC_URI[sha256sum] = "12542ad7619470efd95a623174dcd4b364f2483caf708c6bee837cb53a54cb9d"
+SRC_URI[sha256sum] = "e82664b170064e62331962126b259d452d53b227bb4a93ab20040d846fec01d8"
inherit autotools texinfo
BBCLASSEXTEND = "native nativesdk"
--
2.47.3
^ permalink raw reply related [flat|nested] 7+ messages in thread* [PATCH 6/6] shadow: upgrade 4.18.0 -> 4.19.4
2026-03-03 13:36 [PATCH 1/6] ca-certificates: upgrade 20250419 -> 20260223 Andrej Kozemcak
` (3 preceding siblings ...)
2026-03-03 13:36 ` [PATCH 5/6] libunistring: upgrade 1.4.1 -> 1.4.2 Andrej Kozemcak
@ 2026-03-03 13:36 ` Andrej Kozemcak
4 siblings, 0 replies; 7+ messages in thread
From: Andrej Kozemcak @ 2026-03-03 13:36 UTC (permalink / raw)
To: openembedded-core; +Cc: Andrej Kozemcak
Changelog: https://github.com/shadow-maint/shadow/blob/4.19.4/ChangeLog
- useradd.8: fix default group ID (Tim Biermann)
- revert drop of subid_init() (Serge Hallyn)
- Georgian translation (NorwayFun)
- useradd: Avoid taking unneeded space: do not reset non-existent data
in lastlog (David Kalnischkies)
- relax username restrictions (Alexander Kanavin)
- selinux: check MLS enabled before setting serange (genBTC)
- copy_tree: use fchmodat instead of chmod (Samanta Navarro)
- copy_tree: don't block on FIFOs (Samanta Navarro)
- add shell linter (Jan Macku)
- copy_tree: carefully treat permissions (Samanta Navarro)
- lib/commonio: make lock failures more detailed (Luca BRUNO)
- lib: use strzero and memzero where applicable (Christian Göttsche)
- Update Dutch translation (Frans Spiesschaert)
- Don't test for NULL before calling free (Alex Colomar)
- Use libc MAX() and MIN() (Alejandro Colomar)
- chage: Fix regression in print_date (Xiami)
- usermod: report error if homedir does not exist (Iker Pedrosa)
- libmisc: minimum id check for system accounts (Iker Pedrosa)
- fix usermod -rG x y wrongly adding a group (xyz)
- man: add missing space in useradd.8.xml (Iker Pedrosa)
- lastlog: check for localtime() return value (Iker Pedrosa)
- Raise limit for passwd and shadow entry length (Iker Pedrosa)
- Remove adduser-old.c (Alejandro Colomar)
- useradd: Fix buffer overflow when using a prefix (David Michael)
- Don't warn when failed to open /etc/nsswitch.conf (Serge Hallyn
Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
---
.../shadow/{shadow_4.18.0.bb => shadow_4.19.4.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-extended/shadow/{shadow_4.18.0.bb => shadow_4.19.4.bb} (99%)
diff --git a/meta/recipes-extended/shadow/shadow_4.18.0.bb b/meta/recipes-extended/shadow/shadow_4.19.4.bb
similarity index 99%
rename from meta/recipes-extended/shadow/shadow_4.18.0.bb
rename to meta/recipes-extended/shadow/shadow_4.19.4.bb
index d9a49d8ccf..7bc7f74555 100644
--- a/meta/recipes-extended/shadow/shadow_4.18.0.bb
+++ b/meta/recipes-extended/shadow/shadow_4.19.4.bb
@@ -25,7 +25,7 @@ SRC_URI:append:class-native = " \
file://commonio.c-fix-unexpected-open-failure-in-chroot-env.patch \
file://disable_syslog.patch \
"
-SRC_URI[sha256sum] = "ae486ce4c0bce55c42d76d8478e428c41586f1da2f89fbf5228243fb4d849db4"
+SRC_URI[sha256sum] = "ba7e9aed1c5420203ac549583d6e6f485a819ac7505af9c7cd8c13b2013210b8"
UPSTREAM_CHECK_REGEX = "releases/tag/v?(?P<pver>\d+(\.\d+)+)$"
# Additional Policy files for PAM
--
2.47.3
^ permalink raw reply related [flat|nested] 7+ messages in thread