Commit Graph

35233 Commits

Author SHA1 Message Date
Wang Mingyu b2c6299c3b audit: upgrade 4.0.4 -> 4.0.5
0001-Fixed-swig-host-contamination-issue.patch
refreshed for 4.0.5

Changelog:
============
- Rework audisp queue to be lockless
- Fix missing delete command in auditctl
- Allow plus addresses (rfc5233) to auditd email.
- Reduce memory churn in auditd event dispatching
- Add configurable recurring state report in auditd
- Switch audisp-statsd to stop sending signals
- Add glibc memory stats to audisp-statsd

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:07 -07:00
Liu Yiding 1b421ef711 procmail: fix compile failure with gcc-15
These failures doesn't broken compiling, but not generate files under /usr/bin
| userland@pumpkin3:/mnt/test/build_auh/tmp/work/core2-64-poky-linux/procmail/3.22/image/usr/bin$ ls
| formail  lockfile  mailstat  procmail

part of error messages:
| In file included from recommend.c:6:
| includes.h:334:12: error: conflicting types for 'uname'; have 'int(void)'
|   334 | extern int uname();                                      /* so we fix it :-) /
|       |            ^~~~~
| In file included from sublib.c:13:
| includes.h:334:12: error: conflicting types for 'uname'; have 'int(void)'
|   334 | extern int uname();                                      / so we fix it :-) /
|       |            ^~~~~
| In file included from procmail.h:3,
|                  from procmail.c:20:
| includes.h:334:12: error: conflicting types for 'uname'; have 'int(void)'
|   334 | extern int uname();                                      / so we fix it :-) */
|       |            ^~~~~
| In file included from includes.h:67:
| /datadrive/ubinux/workdir/build-dir/202506/build-ubinux-armv8/tmp/work/aarch64-ubinux-linux/procmail/3.22/recipe-sysroot/usr/include/sys/utsname.h:81:12: note: previous declaration of 'uname' with type 'int(struct utsname *)'
|    81 | extern int uname (struct utsname *__name) _THROW;
|       |            ^~~~~
| In file included from includes.h:67:
| /datadrive/ubinux/workdir/build-dir/202506/build-ubinux-armv8/tmp/work/aarch64-ubinux-linux/procmail/3.22/recipe-sysroot/usr/include/sys/utsname.h:81:12: note: previous declaration of 'uname' with type 'int(struct utsname )'
|    81 | extern int uname (struct utsname _name) THROW;
|       |            ^~~~~
| In file included from includes.h:67:
| /datadrive/ubinux/workdir/build-dir/202506/build-ubinux-armv8/tmp/work/aarch64-ubinux-linux/procmail/3.22/recipe-sysroot/usr/include/sys/utsname.h:81:12: note: previous declaration of 'uname' with type 'int(struct utsname )'
|    81 | extern int uname (struct utsname __name) __THROW;
|       |            ^~~~~
| In file included from includes.h:67:
| /datadrive/ubinux/workdir/build-dir/202506/build-ubinux-armv8/tmp/work/aarch64-ubinux-linux/procmail/3.22/recipe-sysroot/usr/include/sys/utsname.h:81:12: note: previous declaration of 'uname' with type 'int(struct utsname )'
|    81 | extern int uname (struct utsname __name) __THROW;
|       |            ^~~~~
| recommend.c: In function 'main':
| recommend.c:15:5: warning: old-style function definition [-Wold-style-definition]
|    15 | int main(argc,argv)const int argc;const charconst argv[];
|       |     ^~~~
| procmail.c: In function 'savepass':
| procmail.c:71:22: warning: old-style function definition [-Wold-style-definition]
|    71 | static auth_identitysavepass(spass,uid)auth_identityconst spass;
|       |                      ^~~~~~~~
| procmail.c:76:12: error: too many arguments to function 'auth_finduid'; expected 0, have 2
|    76 |   if(tpass=auth_finduid(uid,0))                           / save by copying */
|       |            ^~~~~~~~~~~~ ~~~
| In file included from procmail.c:36:
| authenticate.h:15:3: note: declared here
|    15 |  auth_finduid Q((const uid_t uid,const int sock));
|       |   ^~~~~~~~~~~~
| procmail.c: In function 'main':
| procmail.c:97:5: warning: old-style function definition [-Wold-style-definition]
|    97 | int main(argc,argv)int argc;const charconst argv[];
|       |     ^~~~
| procmail.c:212:9: error: too many arguments to function 'checkprivFrom'; expected 0, have 3
|   212 |         checkprivFrom(euid,passinvk?auth_username(passinvk):0,override);
|       |         ^~~~~~~~~~~~~~ ~~~~
| In file included from procmail.c:41:
| from.h:9:2: note: declared here
|     9 |  checkprivFrom Q((uid_t euid,const charlogname,int override));
|       |  ^~~~~~~~~~~~~~
| procmail.c:213:9: error: too many arguments to function 'doumask'; expected 0, have 1
|   213 |         doumask(INIT_UMASK);               / allowed to set the From line? */
|       |         ^~~~~~~

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:07 -07:00
Leon Anavi 75dbba11ad python3-uritemplate: Upgrade 4.1.1 -> 4.2.0
Upgrade to release 4.2.0:

- Drop support for Python 3.8
- Fix bug where already url-encoded values were further escaped
  and encoded
- Refactor uritemplate/variable.py to enable fixing the
  aforementioned bug

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:19:04 -07:00
Leon Anavi 0b802c8cb8 python3-starlette: Upgrade 0.46.2 -> 0.47.0
Upgrade to release 0.47.0:

- Add support for ASGI pathsend extension
- Add partitioned attribute to Response.set_cookie
- Change methods parameter type from list[str] to Collection[str]
- Replace import typing by from typing import ... in the whole
  codebase
- Mark ExceptionMiddleware.http_exception as async to prevent
  thread creation

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:19:04 -07:00
Leon Anavi 7bea5f8bdd python3-cmd2: Upgrade 2.6.0 -> 2.6.1
Upgrade to release 2.6.1:

- Fixed bug that prevented cmd2 from working with from
  __future__ import annotations

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:19:04 -07:00
Jason Schonberg cfe71a8f47 xfmpc: upgrade 0.3.1 -> 0.3.2
Changelog: https://gitlab.xfce.org/apps/xfmpc/-/blob/master/NEWS#L19

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:19:04 -07:00
Jason Schonberg e5ca8640b3 parole: upgrade 4.18.0 -> 4.18.2
Changelog: https://gitlab.xfce.org/apps/parole/-/tags/parole-4.18.2

Changelog: https://gitlab.xfce.org/apps/parole/-/tags/parole-4.18.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:19:03 -07:00
Jason Schonberg 3815b1cccb xfce4-mpc-plugin: upgrade 0.5.3 -> 0.5.5
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mpc-plugin/-/tags/xfce4-mpc-plugin-0.5.5

Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mpc-plugin/-/tags/xfce4-mpc-plugin-0.5.4

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:19:03 -07:00
Vijay Anusuri dc779c8715 wireshark: upgrade 4.2.11 -> 4.2.12
releasenote:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html

Includes security fix CVE-2025-5601

License-Update: Update GPL copies for FSF no longer having an address
Link: https://github.com/wireshark/wireshark/commit/18e4db97c424c11cb26fa7fef97b95dd3d001bb1

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 13:01:21 -07:00
Liu Yiding a68217554f imsettings: upgrade 1.8.3 -> 1.8.10
- old SRC_URI is invalid now, change to official gitlab source code
- Copied ABOUT-NLS from native sysroot's gettext manually to fix issue
  | configure.ac:84: error: required file './ABOUT-NLS' not found
- remove man page since it needs db2x_docbook2man command which we do not have recipe for

Changelog:
- Rename DBus service file
- Drop deprecated m4 macro
- Add GDMSESSION to the list of overriding envvar
- Add SwitchIMwithEnv dbus method
- Set default desktop name for client
- Disable none.conf on all the wayland sessions
- Support wildcard in IMSETTINGS_IGNORE_SESSION
- none.conf: Fix unexpected setup for GNOME and Plasma Wayland
- Check a flag of IMSETTINGS_IGNORE_SESSION at SwitchIM
- Bump API version
- Add IsActionNeeded method
- Add IMSETTINGS_IGNORE_SESSION
- Add is_env_support_needed function
- Drop GNOME support
- Fix too early threshold for detecting the loop of process restarting

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-08 21:50:37 -07:00
Markus Volk 3f77bb395c libplacebo: update 7.349.0 -> 7.351.0
This release mainly introduces a variety of miscellaneous bug fixes, alongside two minor / maintenance changes.

Additions:

    add pl_{opengl,vulkan,d3d11}_params.no_compute to suppress the use of
    compute shaders
    add pl_cache_{set,get}_file()

Changes:

    libav vulkan interop now requires lavu 58.11.100+ and vulkan 1.2.175+
    "sinc" filter preset radius dropped from 3 to 2

Fixes and performance enhancements:

    fix compilation of fuzzer test
    fix shader variable renaming loop
    fix error when the same gpu descriptor is used twice in one shader
    don't expose unsupported d3d11 formats
    fix rendering with flipped planes and user shaders
    fix rendering of textures with unusual channel order
    don't apply sigmoidization to alpha channel
    attach correctly normalized extension list to vulkan device creation
    fix orthogonal scaling fast path leaking garbage pixels
    some GLES 2.0 fixes
    fix DCDM XYZ decoding into DCI-P3
    fix build with glslang 15
    fix compilation without nuklear
    fix backwards compatibility with pl_render_params.skip_target_clearing
    correctly output requested alpha mode
    preserve alpha channel when blending subsampled formats
    multiply plane scale even when not scaling
    propagate correct plane format after plane merging
    fix build with instrumentation enabled
    fix bug where layout transitions happened too early in some cases
    fix handling of promoted extension and function names
    don't scale alpha when blending low bit depth YUV planes
    fix build error with recent libavformat
    fix plane channel order when merging planes
    invalidate shader cache when GL version strings change
    fix compute shader promotion for flipped outputs
    fix upload of YUVA formats with reduced bit depths

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-07 17:59:12 -07:00
Markus Volk 58827344ab libheif: update 1.19.5 -> 1.19.8
COPYING was changed
[https://github.com/strukturag/libheif/commit/377a957bd84018f4d27588c989fa5c66935c16ed]

1.19.8

Set essential flag for transformative properties as required by MIAF. This fixes the display of AVIF images with transformations encoded by libheif in Chrome, which checks whether this flag is set.
If the environment variable LIBHEIF_SECURITY_LIMITS is set to OFF, libheif will not check any security limits. This can be used if a user wants to work with large images that were blocked by the security limits, but the application software does not allow to adjust the libheif security limits.
Resolved processing 16-bit JPEG-2000

1.19.7
Fixes a build error with SVT-AV1 encoder plugin when using reduced symbol visibility (#1480).

1.19.6
Bugfix release.

Additionally, there are the following changes:

C++ and Go wrapper licenses have been changed to MIT
supports SVT-AV1 v3.0.0 encoder
support emscripten builds for ES6 modules

Fixes

CVE-2025-43966
CVE-2025-43967

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-07 17:59:12 -07:00
Markus Volk b181acb4a3 pipewire: update 1.4.4 -> 1.4.5
PipeWire 1.4.5 (2025-06-04)

This is a quick bugfix release that is API and ABI compatible with
previous 1.x releases.

Highlights
  - Fix negotiation errors when using multichannel output. Fixes
    audio in some games and mpv in some cases.
  - 1 Small fix and 1 improvement.

SPA
  - Fix another bug caused by reversing the filter default value
    preference. (#4722)

pulse-server
  - Implement STREAM_DONT_INHIBIT_AUTO_SUSPEND flags. This can
    reduce power in pavucontrol when monitoring inactive streams.
    (#4255 #4726)

ALSA
  - Fix a potential deadlock when calling _drop and _drain at the
    same time. (#4728)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-07 07:55:59 -07:00
Guðni Már Gilbert a073ff35a3 python3-twisted: upgrade 24.11.0 -> 25.5.0
LIC_FILES_CHKSUM is updated. The year in the copyright header was changed for 2025.

Added a PACKAGECONFIG for a new optional runtime dependency python3-wsproto which
is required for the new twisted.web.websockets module.

Changes:
https://github.com/twisted/twisted/compare/twisted-24.11.0...twisted-25.5.0

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-07 07:05:26 -07:00
Jason Schonberg 301ee15720 xfce4-time-out-plugin: upgrade 1.1.3 -> 1.1.4
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-time-out-plugin/-/tags/xfce4-time-out-plugin-1.1.4

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-06 08:07:05 -07:00
Jason Schonberg 46be46b352 xfce4-smartbookmark-plugin: upgrade 0.5.2 -> 0.5.3
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-smartbookmark-plugin/-/tags/xfce4-smartbookmark-plugin-0.5.3

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-06 08:07:05 -07:00
Jason Schonberg 6c8da69487 xfce4-pulseaudio-plugin: upgrade 0.4.8 -> 0.4.9
Drop 0001-Use-new-xfw_window_activate-signature-in-libwindowin.patch
  It is already integrated in this version.
    https://gitlab.xfce.org/panel-plugins/xfce4-pulseaudio-plugin/-/commit/35d5172d514e1fb1bdb6718041d0e8c0f70eae3b

Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-pulseaudio-plugin/-/tags/xfce4-pulseaudio-plugin-0.4.9

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-06 08:07:05 -07:00
Jason Schonberg eab79494e3 xfce4-places-plugin: upgrade 1.8.3 -> 1.8.4
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-places-plugin/-/tags/xfce4-places-plugin-1.8.4

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-06 08:07:05 -07:00
Jason Schonberg b35727ce74 xfce4-netload-plugin: upgrade 1.4.1 -> 1.4.2
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-netload-plugin/-/tags/xfce4-netload-plugin-1.4.2

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-06 08:07:05 -07:00
Jason Schonberg 73ac996576 xfce4-mailwatch-plugin: upgrade 1.3.1 -> 1.3.2
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mailwatch-plugin/-/tags/xfce4-mailwatch-plugin-1.3.2

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-06 08:07:05 -07:00
Jason Schonberg 1a973d1ee4 xfce4-genmon-plugin: upgrade 4.2.0 -> 4.2.1
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-genmon-plugin/-/tags/xfce4-genmon-plugin-4.2.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 22:28:44 -07:00
Jason Schonberg 031cf81c55 xfce4-fsguard-plugin: upgrade 1.1.3 -> 1.1.4
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-fsguard-plugin/-/tags/xfce4-fsguard-plugin-1.1.4

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 22:28:44 -07:00
Jason Schonberg 9c181c0540 xfce4-eyes-plugin: upgrade 4.6.0 -> 4.6.1
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-eyes-plugin/-/tags/xfce4-eyes-plugin-4.6.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 22:28:44 -07:00
Jason Schonberg 4818fc31b7 xfce4-clipman-plugin: upgrade 1.6.2 -> 1.6.3
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-clipman-plugin/-/tags/xfce4-clipman-plugin-1.6.3

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 22:28:44 -07:00
Jason Schonberg 329f1afd5c xfce4-calculator-plugin: upgrade 0.7.2 -> 0.7.3
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-calculator-plugin/-/tags/xfce4-calculator-plugin-0.7.3

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 22:28:44 -07:00
Jason Schonberg a21355c354 xfce4-battery-plugin: upgrade 1.1.5 -> 1.1.6
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-battery-plugin/-/tags/xfce4-battery-plugin-1.1.6

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 22:28:44 -07:00
Jason Schonberg cffffd29e5 thunar-plugin.bbclass change and plugins
Newer thunar plugins are being distributed as tar.xz archives
instead of tar.bz2.  Update the bbclass to reflect that.

Also update the three users of this bbclass to newer plugin versions
that are distributed as tar.xz arcives.

All three of these plugins still build with autotools.  Although some
thought should be given to how we want to build with meson in the future.

thunar-shares-plugin: upgrade 0.4.0 -> 0.5.0

Changelog: https://gitlab.xfce.org/thunar-plugins/thunar-shares-plugin/-/tags/thunar-shares-plugin-0.5.0

thunar-media-tags-plugin: upgrade 0.5.0 -> 0.6.0

Changelog: https://gitlab.xfce.org/thunar-plugins/thunar-media-tags-plugin/-/tags/thunar-media-tags-plugin-0.6.0

thunar-archive-plugin: upgrade 0.5.3 -> 0.6.0

Changelog: https://gitlab.xfce.org/thunar-plugins/thunar-archive-plugin/-/tags/thunar-archive-plugin-0.6.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 13:41:52 -07:00
Vitor Soares 50baa98621 hostapd: enable SAE support
Enable Simultaneous Authentication of Equals (SAE) in defconfig
to support WPA3-Personal authentication method. Required for
modern wireless security standards.

This is build-time only change with no runtime impact - SAE requires
explicit configuration to activate. Existing WPA2 setups remain
unaffected.

Signed-off-by: Vitor Soares <vitor.soares@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 08:11:28 -07:00
Andrej Valek e3e109465e freerdp: move alsa to packageconfig
This will allow to disable alsa which pulls the audio stuff even if
it could be disabled.

Signed-off-by: Andrej Valek <andrej.v@skyrain.eu>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 08:11:28 -07:00
Denis OSTERLAND-HEIM 0ae908de1a libusbgx: fix example gadget start
From variables docu:
> Setting it to "0" does not disable inhibition.
> Only the empty string will disable inhibition.

That means in case of examples enabled we need ""
and if not "1" to disable update-rc.d.

Signed-off-by: Denis OSTERLAND-HEIM <denis.osterland@diehl.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-05 08:11:28 -07:00
Khem Raj 2292fed3b4 lapack: Force gcc toolchain
It need gfortran to build and if we have clang as system compiler it
does not work properly to compile it.

Fixes
aarch64-yoe-linux-gfortran: fatal error: cannot read spec file 'libgfortran.spec': No such file or directory
compilation terminated.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-04 20:48:38 -07:00
Sana Kazi 27469599fa imagemagick: guard sed operations in do_install for optional files
When PACKAGECONFIG options like 'cxx' 'webp' and 'xml' are disabled,
certain files such as Magick++-config.im7, configure.xml, or
delegates.xml are not installed. Unconditionally running sed
on these files results in errors during do_install
Error:
sed: can't read .../image/usr/bin/Magick++-config.im7: No such file or directory

Signed-off-by: Nikhil R <nikhilr5@kpit.com>
Signed-off-by: Sana Kazi <sanakazi720@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-04 10:15:55 -07:00
Yoann Congal aa6c4113ac pcp: update Upstream-Status
https://github.com/performancecopilot/pcp/pull/2217
was merged into
https://github.com/performancecopilot/pcp/commit/0ca303467ce382127cd9676e288bf7690a93f084

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-04 10:15:55 -07:00
Khem Raj 54a6579eb0 python3-typer: Add missing ptest dep on pytest-sugar
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 23:39:12 -07:00
Khem Raj 5602907c19 python3-pytest-sugar: Add recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 23:39:12 -07:00
Vijay Anusuri 547f2a0939 jq: upgrade 1.7.1 -> 1.8.0
Changelog:
==========
https://github.com/jqlang/jq/releases/tag/jq-1.8.0

Security fixes

* CVE-2024-23337: Fix signed integer overflow in jvp_array_write and jvp_object_rehash. @itchyny de21386
     The fix for this issue now limits the maximum size of arrays and objects to 536870912 (2^29) elements.
* CVE-2024-53427: Reject NaN with payload while parsing JSON. @itchyny a09a4df
     The fix for this issue now drops support for NaN with payload in JSON (like NaN123).
     Other JSON extensions like NaN and Infinity are still supported.
* CVE-2025-48060: Fix heap buffer overflow in jv_string_vfmt. @itchyny c6e0416
* Fix use of uninitialized value in check_literal. @itchyny #3324
* Fix segmentation fault on strftime/1, strflocaltime/1. @itchyny #3271
* Fix unhandled overflow in @base64d. @emanuele6 #3080

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 22:01:47 -07:00
Hongxu Jia 09be9f040c python3-blivet: support fat resize
According to release_notes.rst of 3.12.0 [1], it requires the `vfat-resize`
tool for FAT filesystem resize support. In Yocto, package libblockdev-bin
provides vfat-resize

[1] https://github.com/storaged-project/blivet/commit/ce03a4869d9ad55349819ff0d6a7557862ec4258#diff-b99febf52a7481dd33d7896edaaad85373851e76d8f01303491713e723b905ddR21-R25

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 22:01:47 -07:00
Jason Schonberg 9c1a286b42 thunar-media-tags-plugin: upgrade 0.4.0 -> 0.5.0
Changelog: https://gitlab.xfce.org/thunar-plugins/thunar-media-tags-plugin/-/tags/thunar-media-tags-plugin-0.5.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 22:01:47 -07:00
Jason Schonberg 145efea6e7 thunar-archive-plugin: upgrade 0.5.2 -> 0.5.3
Changelog: https://gitlab.xfce.org/thunar-plugins/thunar-archive-plugin/-/tags/thunar-archive-plugin-0.5.3

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 22:01:47 -07:00
Jason Schonberg e2a7cd5aa4 thunar-shares-plugin: upgrade 0.3.2 -> 0.4.0
Changelog: https://gitlab.xfce.org/thunar-plugins/thunar-shares-plugin/-/tags/thunar-shares-plugin-0.4.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 22:01:47 -07:00
Yoann Congal 8aaf41d024 pcp: fix build race condition
In upstream (handcrafted) Makefile, .c and .h files are soft-linked
before being compiled. Under heavy load or a build with a high CPU
count, the compilation can start before header files are softlinked,
resulting in a build error:
| pcp-htop.c:13:10: fatal error: CommandLine.h: No such file or directory
|    13 | #include "CommandLine.h"
|       |          ^~~~~~~~~~~~~~~

Fix this by adding the make dependency between object files and the
headers.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 07:40:25 -07:00
Vijay Anusuri e970ff8bff redis: upgrade 6.2.16 -> 6.2.18
Changelog:
https://github.com/redis/redis/releases/tag/6.2.17
https://github.com/redis/redis/releases/tag/6.2.18

Security fixes
==============
* (CVE-2024-46981) Lua script commands may lead to remote code execution
* (CVE-2025-21605) An unauthenticated client can cause an unlimited growth of output buffers

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-03 07:40:25 -07:00
Kéléfa Sané aa21c0b347 imx-cst:fix race condition build error
Add missing makefile rule depedency on compilation of cst_lexer.c, which
require header cst_parser.h generated at compilation with cst_parser.c

This issue has been detected during the Yocto autobuilder test CI,
probably during a high CPU load
(https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/46/steps/33/logs/stdio).

Signed-off-by: Kelefa Sane <kelefa.sane@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-02 14:13:09 -07:00
Leon Anavi 593c862309 python3-coverage: Upgrade to release 7.8.2
Upgrade to release 7.8.2:

- Wheels are provided for Windows ARM64 on Python 3.11, 3.12, and
  3.13
- A number of EncodingWarnings were fixed that could appear if
  you've enabled PYTHONWARNDEFAULTENCODING
- Fixed a race condition when using sys.monitoring with
  free-threading Python

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-02 14:13:09 -07:00
Leon Anavi b31f83a1b1 python3-cmd2: Upgrade 2.5.11 -> 2.6.0
Upgrade to release 2.6.0:

- cmd2 2.6 supports Python 3.9+ (removed support for Python 3.8)
- Added support for Python 3.14
- Added new Cmd.ppretty() method for pretty printing arbitrary
  Python data structures
- Clarified help text for -t/--transcript argument to the history
  command

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-02 14:13:09 -07:00
Leon Anavi a2a822108d python3-freezegun: Upgrade 1.5.1 -> 1.5.2
Upgrade to release 1.5.2:

- Remove support for Python 3.7
- Explicitly marks support for Python 3.13
- Improved project documentation

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-02 14:13:09 -07:00
Leon Anavi 5206d24b41 python3-awesomeversion: Upgrade 24.6.0 -> 25.5.0
Upgrade to release 25.5.0:

- Add testing for Python 3.13
- Remove support for EOL Python 3.8
- Break after first hit with find_first_match
- Use cached_property for the prefix property
- Use cached_property for the major property
- Use cached_property for the minor property
- Use cached_property for the simple property
- Use cached_property for the strategy property
- Set full tag names in actions

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-02 14:13:09 -07:00
Yi Zhao bf555c2a62 audit: upgrade 4.0.3 -> 4.0.4
ChangeLog:
- auditctl: update io_uring operations table
- update syscall table for 6.15
- auditd.cron.5: Describe time-based log rotation setup
- auditd: Broadcast a warning on startup if a system halt is possible
- Fix audisp-remote segfault on connection error
- Improve locating last event if ausearch is using checkpointing
- af_unix plugin: fix string mode support
- Remove const from audit_rule_fieldpair_data &
  audit_rule_interfield_comp_data
- Add various updates to the experimental ids plugin
- Add glibc memory statistics to auditd state report

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-02 14:13:09 -07:00
Peter Kjellerstedt 908df74183 abseil-cpp: Backport a patch to build code that uses C++17 with GCC 15
GCC 15 seems to be confused about when the <version> header was
introduced (C++20) and expects it to be used with C++17.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-01 23:41:01 -07:00
Markus Volk 834dda2fad pipewire: updatre 1.4.3 -> 1.4.4
PipeWire 1.4.4 (2025-05-29)

This is a quick bugfix release that is API and ABI compatible with
previous 1.x releases.

Highlights
  - Provide better compatibility with 1.2 for MIDI.
  - Fix mpv buffer negotiation regression.
  - Improve GStreamer compatibility with libcamera.

SPA
  - Provide conversions to old style midi in the ALSA sequencer.
  - Negotiate only to UMP when using a newer library.
  - Fix negotiation direction for buffers, prefer the converter
    suggestion instead of the application until we can be sure
    applications make good suggestions.

GStreamer
  - Allow a minimum of 1 buffers again instead of 8. libcamera will
    allocate only 4 buffers so we need to support this.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-01 08:31:25 -07:00