Commit Graph

32799 Commits

Author SHA1 Message Date
Wang Mingyu
a34c849cca python3-cmd2: upgrade 2.5.8 -> 2.5.9
Changelog:
 Fixed 'index out of range' error when passing no arguments to an argparse-based command function.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:02 -08:00
Wang Mingyu
d4d2d3fb57 python3-cloudpickle: upgrade 3.1.0 -> 3.1.1
Changelog:
 Various fixes to support for Python 3.14

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:01 -08:00
Wang Mingyu
6f9c74d827 python3-cantools: upgrade 40.0.0 -> 40.1.1
Changelog:
===========
- Add option for displaying unit from dbc in the plot legend
- Fix CI
- monitor: signals filtering
- Make generated src files more Doxygen-compatible

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:01 -08:00
Wang Mingyu
e8d120d94f pocketpy: upgrade 2.0.4 -> 2.0.5
Changelog:
============
- use cpython % and // impl
- add colorcvt module
- add py_importlib_reload and importlib module
- add py_interrupt and set single handler for REPL
- add PK_LOW_MEMORY_MODE
- reduce type's memory cost
- allow customize malloc, realloc and free
- make C99 compilers work
- fix win32 clang build
- avoid undefined behavior signed int overflow
- fix pybind11 implementation for error_already_set

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:01 -08:00
Wang Mingyu
75a6e4a617 openvpn: upgrade 2.6.12 -> 2.6.13
Changelog:
===========
- Refuse clients if username or password is longer than USER_PASS_LEN
- Improve peer fingerprint documentation
- console_systemd: remove the timeout when using 'systemd-ask-password'
- Fix missing spaces in various messages
- GHA: Update macOS runners
- GHA: Simplify macOS builds
- Various typo fixes
- forward: Fix potential unaligned access in drop_if_recursive_routing
- send uname() release as IV_PLAT_VER= on non-windows versions
- preparing release 2.6.13
- Route: remove incorrect routes on exit
- Use a more robust way to get dco-win version
- Fix check_addr_clash argument order
- Add calls to nvlist_destroy to avoid leaks
- proxy.c: Clear sensitive data after use
- Protect cached username, password and token on client
- Fix more of uninitialized struct user_pass local vars
- Fix IPv6 in port-share journal
- Fix port-share journal doc

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:01 -08:00
Wang Mingyu
54df7d1fb9 opensc: upgrade 0.26.0 -> 0.26.1
Changelog:
==========
## General improvements
* Align allocations of sc_mem_secure_alloc
* Fix -O3 gcc optimization failure on amd64 and ppc64el

## pkcs11-spy
* Avoid crash while spying C_GetInterface()

## TCOS
* Fix reading certificate

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:01 -08:00
Wang Mingyu
7ae71674a8 mutter: upgrade 47.3 -> 47.4
Changelog:
==========
* Use BT709 coefficients and limited range for YUV conversion by defaults
* Also request high priority secondary EGL context
* Fix Xwayland DND coordinates when using fractional scaling
* Fix applying initial _NET_WM_WINDOW_OPACITY on Xwaylan
* Implement wp_viewport support for cursor surfaces
* Improve input ->output latency of cursor movements
* Improve frame rate on monitors attached to secondary GPUs in copy mode
* Send preferred scales to all surface roles
* Misc. bug fixes and cleanups

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:01 -08:00
Wang Mingyu
8f5978b89f lvm2: update 2.03.29 -> 2.03.30
0001-implement-libc-specific-reopen_stream.patch
0004-tweak-MODPROBE_CMD-for-cross-compile.patch
0005-do-not-build-manual.patch
refreshed for 2.03.30

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu
c82bfbbc2e libtoml11: upgrade 4.2.0 -> 4.3.0
0001-fix-add-missing-zero-initialization-to-region.patch
removed since it's included in 4.3.0

Changlog:
=========
Added
------
Support std::optional as a template argument of toml::find
Support multiple arguments toml::visit(visitor, args...)

Fixed
------
toml::detail::region::last_ may be used uninitialized
Fix use with CMake 3.21 and older
fix: prevent size_t-max length string allocation
update README.md
Make parsing faster for very long line
Avoid known problem in MSVC
Check if source_location::file_name() is null before formatting

Changed
-------
Update hugo-book theme
Add MSVC 2017 to appveyor build

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu
fd4cfe239c libgee: upgrade 0.20.6 -> 0.20.8
Changelog:
==========
 * Fixes for new release process
 * Fixes for newer valac

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu
52c479025c iotop: upgrade 1.26 -> 1.27
License-Update: Copyright year updated to 1.27

Changelog:
 src/iotop: correct pg_cb signature

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu
966cdcf793 freeipmi: update 1.6.14 -> 1.6.15
0001-Fix-undeclared-function-errors.patch
removed since it's included in 1.6.15

Changelog:
==========
- In ipmi-config, fix incorrect output of IPv6_Dynamic_Address_Source_Type.
- In ipmi-oem, increase precision of Dell cumulative energy output.
- Do not advertise options that are only available when special debugging
  is compiled into FreeIPMI.
- Fix build errors with implicit-function-declaration.
- libfreeipmi: remove unnecessary / duplicate parameter checks.
- Fix gcc 14.x build failures.
- Minor documentation updates.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu
e27b749c0a dialog: upgrade 1.3-20240619 -> 1.3-20250116
Changelog:
===========
- modify dialog-config.in to allow for include-subdirectory.
- update configure script macros for changes made with Cdk.
- use $ LIB_ROOTNAME, e.g., set by --with-libname, in generating
  *-config and ".pc" files
- further improvements to matching output from *-config and ".pc"
  improve gen-pkgconfig.in to mark the screen library, e.g., ncurses,
  as "Required" and filter the cflags/libs from required packages out
  of the ".pc" file, because pkg-config will add those automatically.
- fix some gcc15 strict compiler warnings
- configure script fixes for compiler warnings
- update config.guess, config.sub

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu
3b3e8f01de cxxopts: upgrade 3.2.0 -> 3.2.1
Changelog:
 * Fix compilation with optional on C++20.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu
05ad38f42d ctags: upgrade 6.1.20250112.0 -> 6.1.20250119.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:19:59 -08:00
Yogita Urade
901a6b2b61 poppler: upgrade 24.12.0 -> 25.01.0
Includes fix for CVE-2024-56378

Changelog:
===========
core:
* TextOutputDev: Better detect fakebold words
* TextOutputDev: Faster sorting algorithm
* Internal code improvements
* Fix crashes in malformed documents

cpp:
* Remove rect parameter from image::copy, it was never implemented

qt6:
* Fix crash in Submit Forms if document links to non existing field

qt5:
* Fix crash in Submit Forms if document links to non existing field

glib:
* mark transfer of poppler_page_get_selected_region

utils:
* pdfdetach: Make -savefile work with Unicode strings. Issue #1540

build system:
* Don't update pdfsig.pot when POT-Creation-date is the only change

Droped 0001-Don-t-update-pdfsig.pot-when-POT-Creation-date-is-th.patch
as this is available in 25.01.0

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:26 -08:00
Peter Marko
bba186bdcb yasm: update to latest git revision
Last tag is from 2014, but bugfixing continued and last commit is from
year 2024. Additional 87 commits are present, mostly bugfixes.

PV already has "+git" although it was exactly on tag, no edit needed.

Drop 3 patches which are included in current git version.
Add CVE_STATUS for 2 CVEs from those patches.

Also mark one additional CVE as fixed: CVE-2021-33454.
Stack trace from https://github.com/yasm/yasm/issues/166
References the same line of code as corrected in
https://github.com/yasm/yasm/pull/244

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:26 -08:00
Jason Schonberg
f05ac0cbf8 c-ares: upgrade 1.32.2 -> 1.32.3
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.32.3

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:25 -08:00
Jason Schonberg
574ab41958 c-ares: upgrade 1.32.1 -> 1.32.2
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.32.2

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:25 -08:00
Jason Schonberg
e46be288f2 c-ares: upgrade 1.32.0 -> 1.32.1
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.32.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:25 -08:00
Markus Volk
27ab1bbc95 mozjs-115: remove recipe
polkit was the only consumer and switched to ducktape

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-18 09:17:02 -08:00
Derek Straka
7278443967 python3-pillow: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:43 -08:00
Derek Straka
4ede2afe4e python3-pint: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka
cebf92f51a python3-platformdirs: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka
af7d47dd2c python3-polyline: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka
9e3ab586bd python3-portion: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka
6bf9389c43 python3-precise-runner: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka
966a1f6f67 python3-prettytable: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka
bf5ce7551d python3-propcache: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka
569cffbd06 python3-ptyprocess: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka
57d6a4ea1f python3-py-cpuinfo: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka
f684aa3085 python3-pyasn1-modules: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka
424dbf8fb9 python3-pydantic-core: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka
645907c41a python3-pydantic: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka
c9b9004399 python3-pyroute2: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Jason Schonberg
63e4df52f2 xrdp: upgrade 0.9.19 -> 0.9.20
Patches updated with devtool

Changelog: https://github.com/neutrinolabs/xrdp/releases/tag/v0.9.20

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Peter Marko
68f55c158e audiofile: mark CVE-2020-18781 as patched
Per [1] this CVE is already patched by commit [2].

This can be also verified with yocto build.

Running without this patch:
root@qemux86-64:~# sfconvert poc.wav output format wave
malloc(): corrupted top size
Aborted

Running with it:
root@qemux86-64:~# sfconvert poc.wav output format wave
Audio File Library: Bad number of coefficients [error 62]
Could not open file 'poc.wav' for reading.

[1] https://github.com/mpruett/audiofile/issues/56
[2] c48e4c6503

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:40 -08:00
Derek Straka
4108165248 python3-pyserial: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:14 -08:00
Derek Straka
3eee9c0f50 python3-pytest-localserver: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:14 -08:00
Derek Straka
90ab0bc4fe python3-python-multipart: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:13 -08:00
Derek Straka
dc556825e9 python3-pytoml: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:13 -08:00
Derek Straka
aa223d4dba python3-pyyaml-include: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:13 -08:00
Derek Straka
6b0ad8899c python3-rapidjson: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:13 -08:00
Derek Straka
2c9f19d797 python3-requests-file: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:12 -08:00
Derek Straka
a3edd4f6d7 python3-requests-toolbelt: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:12 -08:00
Derek Straka
8e56338b50 python3-scrypt: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:12 -08:00
Derek Straka
1f3fae9374 python3-semver: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:12 -08:00
Peter Marko
67d94fecb0 vorbis-tools: patch CVE-2023-43361
This is inactive project, so no official CVE fix will be available
anymore. That however does not mean that there is no fix available.
Following tries to prove that patch provided here is valid.

NVD CVE report [1] links issue [2] where this is reported.
Based on the report, fix was proposed in [3].
There was some review however the patch autor was not active.
[4] was later created trying to adddress the comments, but the project
was not active anymore. In this PR the patch was shrunk to a one-liner
in discussion.

I have tested the poc and it is real.
The patch fixes it, while not breaking the execution if good file path
is provided as argument.

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-43361
[2] https://github.com/xiph/vorbis-tools/issues/41
[3] https://gitlab.xiph.org/xiph/vorbis-tools/-/merge_requests/7
[4] https://gitlab.xiph.org/xiph/vorbis-tools/-/merge_requests/8

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:01:39 -08:00
Markus Volk
103c3392a8 polkit: dont add mozjs PACKAGECONFIG
fixes:
ERROR: polkit-126-r0 do_configure: QA Issue: polkit: invalid PACKAGECONFIG: mozjs [invalid-packageconfig]
ERROR: polkit-126-r0 do_configure: Fatal QA errors were found, failing task.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:01:39 -08:00
Luca Boccassi
a2f649ecc4 polkit: update 125 -> 126
Patch merged upstream. mozjs support dropped, remove PACKAGECONFIG.

Signed-off-by: Luca Boccassi <luca.boccassi@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-16 14:56:27 -08:00