Changes with nginx 1.30.3
*) Security: a heap memory buffer overflow might occur in a worker
process when using a configuration with "ignore_invalid_headers off;"
and "large_client_header_buffers" with large configured values when
proxying a specially crafted request to HTTP/2 or gRPC backend,
allowing an attacker to cause worker process memory corruption or
segmentation fault in a worker process (CVE-2026-42055).
*) Security: a heap memory buffer overread might occur in a worker
process while handling a specially sent response with decoding from
UTF-8 via the "charset_map" directive, allowing an attacker to cause
a limited disclosure of worker proccess memory or segmentation fault
in a worker process (CVE-2026-48142).
Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Add compat for Nettle >= 4.0
Nettle 4.0 has changed it's digest functions, and removed the length
argument.
This commit adds compatibility with both older and newer versions of
Nettle.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The GDB 10.2 sources still rely on std::allocator::construct, which was
removed in C++20.
This causes the build to fail with errors such as:
default-init-alloc.h:52:12: error:
'construct' has not been declared in 'class std::allocator<...>'
Explicitly build the C++ sources with GNU C++17 to retain compatibility
with the bundled GDB sources.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Use metacpan instead of cpan
Reference the LICENSE file since there is one.
Licnese remains unchanged - still Artistic or GPL
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Inherit ptest and include tests for jdatetime. The PyPI package
omits some files for testing like tests/__init__.py so use the
GitHub source instead.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 5.3.0:
- Migrate CI to Ruff for Code Formatting and Linting
- Fix: Setuptools License Deprecation Warning
- Add Windows test CI support
- feat: add type hints to functions and methods in jdatetime module
Fixes:
WARNING: python3-jdatetime-5.3.0-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with setuptools.build_meta,
use the correct class [pep517-backend]
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This new version works with pcre2. The other dependencies only got sorted.
Now, Octave provides xz compressed tarballs, which are much smaller.
Unfortunately, Octave generates source code files during the build with
multiple variables from the build environment which are end up in the
binaries.
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Update to a newer version of the last release, because this does not compile
which got fixed with
https://github.com/irontec/sngrep/commit/b84f0663e47de6f238d9f81eed67612a9ab616ef.
sngrep supports pcre2, so use this instead of pcre, which is outdated.
Changelog:
* capture: add support for telephony-event rtp streams (RFC 4733)
* capture: replace fake HEP frames for network captured packets
* call flow: limit call-id displayed on title to 125 characters
* rtp: fix duration value in telephony-event is incorrectly converted
* core: fix out of bound arrays crashes
* eep: fix multiple memory crashes in HEP parsing
* ipv6: fixed incorrect payload length for fragmented IPv6 packets
* build: use libgcrypt-config if pkg-config is not available for libcrypt
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This recipe was removed in oe-core as obsolete (replaced by libpcre2).
Since some recipes in meta-oe still depend on it, moe it here.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 3.5.2:
- The minimum supported version of Python 3.15 is now 3.15b2.
- Fix some garbage-collection related crashes on free-threaded
Python 3.15.
- Improve garbage collection of greenlets. This mostly applies
to Python 3.15.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 26.6.1:
- Bump vendored FlatBuffers from v25.9.23 to v25.12.19, restoring
the version-sync with zlmdb 26.6.1
- Commit the binary schemas (reflection.bfbs, wamp.bfbs) to the source
tree and ship them as-is; the package build no longer runs flatc,
which fixes cross-compilation from the PyPI sdist
(e.g. Buildroot/Yocto/aarch64)
- Add just generate-reflection to regenerate the committed binary
schemas with a version-matched flatc built from deps/flatbuffers
- Add just check-flatbuffers-sync and a unit test exercising
check_zlmdb_flatbuffers_version_in_sync()
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 5.4.3:
- Moved the tests back, removed the ones that check for symlinks.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The Debian package page is not the appropriate homepage. And we can add the
bug tracker URL and a description. Configure has some more options we can
expose as PACKAGECONFIG. In INSTALL file in the source repository states
that libpcre2 (instead of libpcre) should be used. And std=gnu89 is no
longer needed.
Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Add an initial recipe for vkmark to enable Vulkan performance testing.
This tool allows for benchmarking various Vulkan rendering scenes and
can be used to validate graphics drivers on target hardware.
Signed-off-by: Ashwin Prabhakar <ashwin.prabhakar@qti.qualcomm.com>
vkmark: fix build parse errors by making XCB support conditional
The current default PACKAGECONFIG explicitly enforces 'xcb'.
This causes build failures on distributions (like Yoe) that
lack 'x11' in their DISTRO_FEATURES, as 'libxcb' and
'xcb-util-wm' are skipped during parsing.
Fix this by dynamically adding 'xcb' to PACKAGECONFIG only
when 'x11' is present in DISTRO_FEATURES.
Signed-off-by: Ashwin Prabhakar <ashwin.prabhakar@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Add a new recipe for the Open Asset Import Library (Assimp) using
the latest upstream git source. This library provides a unified
interface to import various 3D model formats.
Signed-off-by: Ashwin Prabhakar <ashwin.prabhakar@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
gnome-disk-utility depends on libdvdread which is available in meta-multimedia
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The do_create_v8_qemu_wrapper function depends on target information,
which ends up in the task signature, but the qemu wrapper isn't needed
for native builds. This causes unnecessary rebuilds of nodejs-native.
Delete the task for nodejs-native and don't install the wrapper script
for it.
This issue was previously addressed by b2a950a ("nodejs: inherit qemu
class conditionally"), which was later reverted. This patch addresses
it by removing the unused task from native builds instead of inheriting
qemu conditionally.
Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 1.4.1:
- Remove fastText language detection support: the fasttext extra is
dropped and detect_languages() now raises ImportError. Migrate to
the langdetect extra, which also unblocks numpy 2.x compatibility
- Make digit quantifiers possessive in the relative-date regexes to
prevent quadratic backtracking (ReDoS) on long digit runs
- Add the USE_GIVEN_LANGUAGE_ORDER setting to try languages and
locales in the order given rather than by frequency
- Preserve explicit signs on individual components when parsing relative
dates that combine decades with years, such as "-1 decade +2 years"
- Fall back to other provided languages in search_dates when the
detected language yields no dates
- Parse relative date expressions with spaces between the sign and
number, such as "now - 2 hours" and "now + 1 day"
- Use the parser-relative now for the current month when filling in
incomplete dates so the month and day stay consistent
- Fix Norwegian Bokmål (nb) parsing of relative date expressions such
as "3 måneder siden" and "om 2 månede
- Parse abbreviated English month expressions such as "1mon ago" and
"3mons ago"
- Preserve surrounding whitespace when removing skip tokens during
translation to avoid spurious double spaces
- Move project metadata and build configuration to pyproject.toml
- Add alternative Korean date expressions for today, yesterday,
tomorrow, and "N months ago/later"
- Expand Czech date translations with additional inflections, word
numbers, decade and century expressions, and clock phrases
- Replace internal OrderedDict usage with the built-in dict
Fixes:
WARNING: python3-dateparser-1.4.1-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with setuptools.build_meta,
use the correct class [pep517-backend]
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 0.0.230:
- add basic support for SCO packets over USB
- fix(usb): support LE ISO data over Bulk endpoints
- usb transport packet splitter
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- Update CI Workflows.
- Fix dropping the next frame after a skipped one
- Correct Log repeat.
- Fix address bounds check in get_reg_block
- Fix reg_count calc
- guard short frames and validate mbap in TLS framer
- Use latest uv in CI.
- Change MIN_SIZE in ascii frame.
- Harden ASCII framer.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- Add a Django 6.0 task backend - pretty much works the same way the normal
Django integration works (manage.py run_huey), but using Django's canonical
APIs and decorator. Docs here.
- Redis blocking dequeue no longer swallows ConnectionError -- the error
propagates to the worker, which logs it and applies exponential backoff.
Previously a downed redis server caused workers to busy-loop silently.
- Chord callbacks now fire when a member task is revoked, expired or cancelled
by a pre-execute hook -- the skipped member contributes a None placeholder
result. Previously the callback was silently lost.
- Scheduler skips missed periodic checks after a stall (e.g. suspend/resume)
instead of running them back-to-back, which enqueued duplicate periodic tasks
for the current minute.
- Fix inverted timeout clamp in wait_result() when using notify_result with
redis < 6 (or an unknown server version): timeouts over one second were cut
to 1s, and sub-second timeouts blocked indefinitely.
- put_if_empty() is now atomic for the memory and file storage backends,
restoring lock_task() mutual exclusion on those backends.
- FileLock no longer unlinks an existing lock file at construction time, which
broke mutual exclusion for any process already holding the lock.
- Process-worker task timeouts use signal.setitimer(), so float / sub-second
timeouts work. Previously a timeout less than 1 second was silently ignored
(alarm(0) cancels the timer) and fractional seconds were truncated.
- Consumer signal handlers only set flags -- logging and greenlet cleanup now
happen in the main loop, avoiding re-entrant I/O from signal context.
- A user-supplied task kwarg named task is no longer dropped during
serialization. Context tasks (context=True) inject the task instance into a
copy of the kwargs rather than mutating the task's data.
- MemoryStorage.dequeue() and add_to_schedule() acquire the storage lock, like
the other mutating methods.
- normalize_time() treats delay=0 as "now" rather than ignoring it, so e.g.
expires=0 means "expires immediately" instead of "never expires".
- Redis enqueued_items(limit) returned limit + 1 items from the producer end of
the queue; it now returns the next-limit items to be dequeued, matching the
other storage backends.
- Redis-dependent tests are skipped when no local redis server is reachable,
instead of failing at import time.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Features
=========
- implement regional access boundary support for standalone JWT and async
service accounts
Bug Fixes
=========
- configure mTLS for impersonated credentials
- fail-fast on missing ECP config file to avoid 30s hang
- Rename the 'seed' argument for setting an initial regional access
boundary for clarity
- update incorrect urls in setup.py to point at monorepo vs splitrepo
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
Strip leading zeros from port numbers in canonical URIs
License-Update:
Change address to website
Change signature from Ty Coon to Moe Ghoul
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* Fix to set VERSION_INFO to create .so.3 instead of .so.11 which will
be reserved for a future 1.10.0 release
* Bugfix: Insufficient verification that responses belong to a
query (CVE-2026-10846). Thanks Pablo Ruiz from 'codecome.ai'
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Improvements ============
- Add glz::reflect_array to serialize structs as arrays without enumerating
members
- Centralize Asio backend selection into a glaze::asio target, and export it to
find_package consumers so the standalone/Boost Asio macro pair is configured
consistently
- Support custom_read/custom_write types as tagged variant alternatives
- Support custom_read/custom_write types as tagged variant alternatives in YAML
- Add a CI workflow for MSVC /O2 builds
Fixes ======
- Fix streaming buffer refill when skipping unknown keys
- RFC 6455: reject oversized WebSocket control frames
- RFC 9112: fix Host authority in HTTP and WebSocket clients
- Cast to unsigned char before cctype calls in parsers (avoids UB on negative
char values)
- RFC 6455: fix WebSocket close frame validation
- Fix WebSocket client handling of data received together with the handshake
response
- Guard std::numeric_limits<T>::min/max against Windows min/max macros
- Fix TOML/YAML block layout for transparent write wrappers
- Resolve custom variant specialization ambiguity for
YAML/BEVE/CBOR/MessagePack/TOML
- Guard std::min & std::max calls from minwindef.h defines
- Fixed CMake version to match v7.8.1 tag (v7.8.0 was missing CMake and
version.hpp bump)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- add support for free-threaded (no-GIL) CPython
- generate wheels for CPython 3.14t (free-threaded)
- drop support for Python 3.9
- migrate the C extension and test modules to multi-phase module
initialization
- release the GIL in chip_get_info()
- fix heap-buffer overflow bugs when setting/getting line values
- check for errors after PyIter_Next() when setting output values
- check for errors after PyIter_Next() when reading request values
- fix reference count imbalances (missing Py_None and line-name
increments, erroneous decref on PyList_SetItem() failure)
- allow closing a Chip multiple times without raising an error
- allow releasing a LineRequest multiple times without raising an error
- remove a duplicated edge-detection setting
- add a CHANGELOG.md to track changes between releases
- copy the license file into source and binary distributions
- require setuptools v77 or newer
- remove wheel from the build dependencies
- add multi-threaded tests
- add a dedicated lint dependency group and update linter configuration
- apply linter recommendations and add type annotations across examples,
setup and helper scripts
- modernize the C extension using upgrade_pythoncapi.py suggestions
- minor internal cleanups and performance improvements
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Yi Zhao
Andrej Kozemcak
Wang Mingyu
Jason Schonberg
Leon Anavi
Etienne Cordonnier
Khem Raj
Alexander Kanavin
Gianfranco Costamagna
Jörg Sommer
Peter Marko
Ashwin Prabhakar
Markus Volk
Jeroen Hofstee
Bartosz Golaszewski