From 63cec12dc957328b27722813045a7de92080b890 Mon Sep 17 00:00:00 2001 From: Sloane Date: Fri, 18 Jul 2025 19:58:47 +0800 Subject: [PATCH] yocto: update software version *libtheora,libvpx,libxcvt,libxml2,make,mosquitto,mpfr,net-tools *newlib. Signed-off-by: shuailong.guo@td-tech.com --- .oebuild/manifest.yaml | 18 +++++++++--------- .../mosquitto/mosquitto_%.bbappend | 9 ++++++--- .../recipes-core/libxml/libxml2_%.bbappend | 8 ++++++-- meta-openeuler/recipes-core/newlib/newlib_%.bb | 1 + .../net-tools/net-tools_%.bbappend | 1 + .../libtheora/libtheora_%.bbappend | 1 + .../recipes-multimedia/webm/libvpx_%.bbappend | 1 + 7 files changed, 25 insertions(+), 14 deletions(-) diff --git a/.oebuild/manifest.yaml b/.oebuild/manifest.yaml index ed2d21a527e..6cabc8fc535 100644 --- a/.oebuild/manifest.yaml +++ b/.oebuild/manifest.yaml @@ -983,7 +983,7 @@ manifest_list: version: 9ebb6c4aadbf43d791ac3c1f3c5f69fc30c45dcc libtheora: remote_url: https://gitee.com/src-openeuler/libtheora.git - version: 09519f6d0a7017a132dd212c311bee3201b386e3 + version: cb58c2feb83280810e93199cd744d955265f2b0a libtirpc: remote_url: https://gitee.com/src-openeuler/libtirpc.git version: 9e9abd356a350e6646cfba4c82984f434a23e4ed @@ -1016,7 +1016,7 @@ manifest_list: version: 2647a4ecc2acd233f3a0233c0f7919ce1fa66c71 libvpx: remote_url: https://gitee.com/src-openeuler/libvpx.git - version: fb1c548fbdf9e8731aa4d3907ad73f9aec8da97f + version: b84829b0ec595086bbb55ce4184f52f40b874b68 libwebp: remote_url: https://gitee.com/src-openeuler/libwebp.git version: 87d14559fe55fddd99020456ec44e675bc87d59d @@ -1031,7 +1031,7 @@ manifest_list: version: efc36896ba8756287e436e3cc51b95e940c1e16a libxcvt: remote_url: https://gitee.com/src-openeuler/libxcvt.git - version: 0c4a236f854f9de32b244fee90e6a4abefa32370 + version: 3ddd8fab7e6ed563f356197eb4bce23176fbf82a libxkbcommon: remote_url: https://gitee.com/src-openeuler/libxkbcommon.git version: d0974db12942fa832713b4cefb0107b12cfe07c2 @@ -1040,7 +1040,7 @@ manifest_list: version: 4758c3d45be0f877dbedabcea21a078249579f80 libxml2: remote_url: https://gitee.com/src-openeuler/libxml2.git - version: 15e5370826c98fbf3e0c4b7d95bbdcf9349f66e5 + version: 3bdd8403e8f3077e7c6ffbe8e3dd72fc3c3d8cb9 libxshmfence: remote_url: https://gitee.com/src-openeuler/libxshmfence.git version: dd76c83b28cc18cb237fbbb9d5e82e38dd2a7cbc @@ -1106,7 +1106,7 @@ manifest_list: version: 0910a1c3f045dc69c1e84afd99e94493a9a7e166 make: remote_url: https://gitee.com/src-openeuler/make.git - version: 868a6e76175e3ec891b73df1598ebfd611ee39b9 + version: b5f7413d57522a78f8a6bad9c7f46810b2fd9f23 mali-bifrost-g52-g2p0: remote_url: https://gitee.com/emancipator/mali-bifrost-g52-g2p0.git version: 6c4033821d21ddb32b22b7eb2599ecc0bd536862 @@ -1142,10 +1142,10 @@ manifest_list: version: abdd168a786f299ed4655baa7227c8b4b90dddaa mosquitto: remote_url: https://gitee.com/src-openeuler/mosquitto.git - version: dbc7c87118e8a20306ee28fe7b13f7315bc2a124 + version: cb4e4211cb8dc6ecad7c743f052834114cd0b2fa mpfr: remote_url: https://gitee.com/src-openeuler/mpfr.git - version: 69aed19ee2f65a401a5fc2a151f0a57721bf9326 + version: f2b40ef2eabfa3bbe1c4c28650560be95686ea73 mtd-utils: remote_url: https://gitee.com/src-openeuler/mtd-utils.git version: 78e00fa56de7f2db2b9aa4c9b7336b94ee5086ef @@ -1187,13 +1187,13 @@ manifest_list: version: e8afff4af096b55a960025055c8324154290c2e1 net-tools: remote_url: https://gitee.com/src-openeuler/net-tools.git - version: 02b4115eb1ab45d7a7460ab04129983fa26abfca + version: 1f772b101668fc44ae5b530d934730a112277b44 nettle: remote_url: https://gitee.com/src-openeuler/nettle.git version: 9be49d59f19db21b5cc53fe12ca04d69623c041c newlib: remote_url: https://gitee.com/src-openeuler/newlib.git - version: 007e2d7bfd04d0bfa788cf65c8797774864dd548 + version: 96a12b2cfe1abac9fde597a6aa22c2cfe0d63068 nfs-utils: remote_url: https://gitee.com/src-openeuler/nfs-utils.git version: 1bcc14e3f92331b71291c9bc0b3942d985e00536 diff --git a/meta-openeuler/recipes-connectivity/mosquitto/mosquitto_%.bbappend b/meta-openeuler/recipes-connectivity/mosquitto/mosquitto_%.bbappend index 9200c3e6603..532d80ab9f3 100644 --- a/meta-openeuler/recipes-connectivity/mosquitto/mosquitto_%.bbappend +++ b/meta-openeuler/recipes-connectivity/mosquitto/mosquitto_%.bbappend @@ -1,12 +1,15 @@ # main bbfile ref: # https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-connectivity/mosquitto/mosquitto_2.0.18.bb?h=master -PV = "2.0.16" +PV = "2.0.20" SRC_URI:append = " \ file://${BP}.tar.gz \ - file://add-usage-output.patch \ - file://fix-usage-exit-code.patch \ +" + +SRC_URI:remove = " \ + file://2894.patch \ + file://1571.patch \ " BBCLASSEXTEND += "native nativesdk" diff --git a/meta-openeuler/recipes-core/libxml/libxml2_%.bbappend b/meta-openeuler/recipes-core/libxml/libxml2_%.bbappend index 96df6f81e7b..dced606f57a 100644 --- a/meta-openeuler/recipes-core/libxml/libxml2_%.bbappend +++ b/meta-openeuler/recipes-core/libxml/libxml2_%.bbappend @@ -1,5 +1,5 @@ # version in openEuler -PV = "2.11.5" +PV = "2.11.9" # remove all poky patches for 2.11.4 and apply openEuler source package SRC_URI = "file://${BP}.tar.xz \ @@ -7,7 +7,11 @@ SRC_URI = "file://${BP}.tar.xz \ file://backport-CVE-2023-45322.patch \ file://backport-xpath-Remove-remaining-references-to-valueFrame.patch \ file://backport-examples-Don-t-call-xmlCleanupParser-and-xmlMemoryDu.patch \ - file://backport-CVE-2024-25062.patch \ + file://backport-CVE-2024-56171.patch \ + file://backport-CVE-2025-24928.patch \ + file://backport-CVE-2025-27113.patch \ + file://backport-CVE-2025-32414.patch \ + file://backport-CVE-2025-32415.patch \ " # remove test configuration, because test package not in openEuler diff --git a/meta-openeuler/recipes-core/newlib/newlib_%.bb b/meta-openeuler/recipes-core/newlib/newlib_%.bb index 58042538bfd..e452b85c9ef 100644 --- a/meta-openeuler/recipes-core/newlib/newlib_%.bb +++ b/meta-openeuler/recipes-core/newlib/newlib_%.bb @@ -27,6 +27,7 @@ LIC_FILES_CHKSUM = " \ SRC_URI = " \ file://${BP}.tar.gz \ file://Modify-neon-instruction.patch \ + file://fix-CVE-2024-30949.patch \ " SRC_URI[sha256sum] = "58dd9e3eaedf519360d92d84205c3deef0b3fc286685d1c562e245914ef72c66" diff --git a/meta-openeuler/recipes-extended/net-tools/net-tools_%.bbappend b/meta-openeuler/recipes-extended/net-tools/net-tools_%.bbappend index 5954d652f28..a5601fda1be 100644 --- a/meta-openeuler/recipes-extended/net-tools/net-tools_%.bbappend +++ b/meta-openeuler/recipes-extended/net-tools/net-tools_%.bbappend @@ -10,4 +10,5 @@ S = "${WORKDIR}/${BP}" SRC_URI:prepend = "file://${BP}.tar.xz \ file://backport-net-tools-cycle.patch \ file://backport-net-tools-man.patch \ + file://backport-Revert-sscanf-pattern-is-Lu-not-llu-for-long-long-unsigned.patch \ " diff --git a/meta-openeuler/recipes-multimedia/libtheora/libtheora_%.bbappend b/meta-openeuler/recipes-multimedia/libtheora/libtheora_%.bbappend index 0ced1f4fd15..9d200f61e52 100644 --- a/meta-openeuler/recipes-multimedia/libtheora/libtheora_%.bbappend +++ b/meta-openeuler/recipes-multimedia/libtheora/libtheora_%.bbappend @@ -5,6 +5,7 @@ SRC_URI:prepend = "file://${BP}.tar.xz \ file://Fix-pp_sharp_mod-calculation.patch \ file://examples-fix-underlinking.patch \ file://examples-png_sizeof-no-longer-available-since-libpng.patch \ + file://backport-fix-CVE-2024-56431.patch \ " SRC_URI[sha256sum] = "f36da409947aa2b3dcc6af0a8c2e3144bc19db2ed547d64e9171c59c66561c61" diff --git a/meta-openeuler/recipes-multimedia/webm/libvpx_%.bbappend b/meta-openeuler/recipes-multimedia/webm/libvpx_%.bbappend index aa82b07a422..e70b988a78d 100644 --- a/meta-openeuler/recipes-multimedia/webm/libvpx_%.bbappend +++ b/meta-openeuler/recipes-multimedia/webm/libvpx_%.bbappend @@ -9,6 +9,7 @@ SRC_URI:prepend = " \ file://CVE-2024-5197-1.patch \ file://CVE-2024-5197-2.patch \ file://CVE-2024-5197-3.patch \ + file://add-sw_64-support.patch \ " S = "${WORKDIR}/${BP}" -- Gitee