Commit Graph

35656 Commits

Author SHA1 Message Date
Peter Marko 66b553130b squid: upgrade 6.12 -> 7.1
Refresh all patches.
ptest patches needed larger rework for new test testHeader.

License-Update: copyright years refreshed

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 16:15:49 -07:00
Peter Marko f088e1e1f9 squid: download from github
Devtool could not find latest versions before.

Download page [1] shows message
"Squid sources are released through GitHub. Please refer to the Releases
Page to find all released versions."

Note that also squid security advisories were moved to Github.

[1] https://www.squid-cache.org/Versions/

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 16:15:49 -07:00
Joao Lima ecf51fd294 openocd: add fallback repository mirror
Add a fallback mirror for the openocd repository fetch
process, so that if the primary source repo.or.cz is unavailable,
the build system will attempt to download the source code from the gitHub
mirror.

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Joao Lima e7eb50fe25 openocd: add dmem support to am64xx and j784s4 platforms
Platform support patches:
   - Add SWD native configuration files for AM64x and J784s4 boards
   - Configure DMEM access parameters in ti_k3.cfg for direct memory operations
   - Set up DAPBUS debugger and emulated AP descriptions

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Joao Lima 050608b50d openocd: bump the openocd, jimtcl versions
Version bumps:
   - openocd: 91bd431 -> 66ea461
   - jimtcl: fcbb449 -> f160866
   - libjaylink: 9aa7a59 -> 0d23921

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Khem Raj d1b67ac99e pm-qa: Do not hardcode PATCHTOOL
It seems to work fine with quilt as well.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi a57f6d42b2 python3-telnetlib3: Upgrade 2.0.4 -> 2.0.8
Upgrade to release 2.0.8:

- bugfix: object has no attribute '_extra'

License-Update: telnetlib.py and telnetlib3/tests/test_telnetlib.py
derived from Python 3.12 so a note about PYTHON SOFTWARE FOUNDATION
LICENSE VERSION 2 has been added to the LICENSE.txt. The license of
this package remains ISC.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi a8a2d944d5 python3-awesomeversion: Upgrade 25.5.0 -> 25.8.0
Upgrade to release 25.8.0:

- Refactor AwesomeVersion comparison methods and optimize regex
  patterns for performance
- Refactor AwesomeVersion comparison methods for improved
  validation and strategy handling
- Replace poetry with uv
- Update pr template
- Fix compound modifier comparison

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi 5d157933e9 python3-msgpack: Upgrade 1.1.1 -> 1.1.2
Upgrade to release 1.1.2:

- Update Cython to v3.1.4
- Update cibuildwheel to v3.2.0
- Drop Python 3.8
- Add Python 3.14
- Add windows-arm

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi 368ea9aa9a python3-filelock: Upgrade 3.18.0 -> 3.20.0
Upgrade to release 3.20.0:

- Added tox.toml to sdist
- Updated docs with example
- Added 3.14 support and drop 3.9

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Leon Anavi b68dd1e77a python3-whitenoise: Upgrade 6.9.0 -> 6.11.0
Upgrade to release 6.11.0:

- Support Django 6.0.
- Support Python 3.14.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 09:41:11 -07:00
Wang Mingyu 1543159149 spice-guest-vdagent: upgrade 0.22.1 -> 0.23.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:55 -07:00
Wang Mingyu ca3e6f67da python3-typer: upgrade 0.19.1 -> 0.19.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu ce98bd00f8 python3-txaio: upgrade 25.6.1 -> 25.9.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu 934560d4b6 python3-simplejson: upgrade 3.20.1 -> 3.20.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu 6cc53385c8 python3-pymodbus: upgrade 3.11.2 -> 3.11.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu 372c306e57 python3-pycurl: upgrade 7.45.6 -> 7.45.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu dc94be3527 python3-inline-snapshot: upgrade 0.29.0 -> 0.29.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:54 -07:00
Wang Mingyu 30b56b1e9c python3-grpcio: upgrade 1.75.0 -> 1.75.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu 6a01daf8eb python3-grpcio-tools: upgrade 1.75.0 -> 1.75.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu a86648c579 python3-grpcio-reflection: upgrade 1.75.0 -> 1.75.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu fd030dc40d python3-grpcio-channelz: upgrade 1.75.0 -> 1.75.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu dd1f44679c python3-flask-restx: upgrade 1.3.0 -> 1.3.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu a03be5c002 python3-cantools: upgrade 40.6.0 -> 40.7.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:53 -07:00
Wang Mingyu a42e47ffd6 python3-asgiref: upgrade 3.9.1 -> 3.9.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu b53b84a17d python3-apispec: upgrade 6.8.3 -> 6.8.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu eed642244e python3-anyio: upgrade 4.10.0 -> 4.11.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu f999a83972 parallel: upgrade 20250822 -> 20250922
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu 9b5ab1a96c openvpn: upgrade 2.6.14 -> 2.6.15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu ad0d8610ed makeself: upgrade 2.5.0 -> 2.6.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu 56b1b5178e graphviz: upgrade 13.1.2 -> 14.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:51 -07:00
Wang Mingyu 34a7bdb72f gnome-menus: upgrade 3.36.0 -> 3.38.1
Changelog:
============
* Add GioUnix-2.0 dependency to introspect libmenu
* Translation updates

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:51 -07:00
Wang Mingyu aa7dcb3c2e flatbuffers: upgrade 25.2.10 -> 25.9.23
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:51 -07:00
Gyorgy Sarvari 74d3d9c2be libiec61850: upgrade 1.5.3 -> 1.6.1
This update contains a fix for CVE-2024-26529, CVE-2024-45970 and CVE-2024-45971

Changelog: https://github.com/mz-automation/libiec61850/blob/v1.6/CHANGELOG

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:04 -07:00
Jason Schonberg daf2c473d3 xfce4-mpc-plugin: upgrade 0.5.5 -> 0.6.0
Changelog: https://gitlab.xfce.org/panel-plugins/xfce4-mpc-plugin/-/tags/xfce4-mpc-plugin-0.6.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:04 -07:00
Rajeshkumar Ramasamy 5929150a19 open-vm-tools: upgrade 12.5.0 -> 13.0.5
this release addressed below CVE:
CVE-2025-41244

Drop 0001-Fix-build-when-compiling-with-std-c23.patch which have been
merged upstream.

Changelog:
https://github.com/vmware/open-vm-tools/releases

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Leon Anavi cdf4a7a4d8 python3-xxhash: Upgrade 3.5.0 -> 3.6.0
Upgrade to release 3.6.0:

- Build wheels for Python 3.14
- Python free-threading support
- Typing: Use Buffer type stubs
- Deprecate xxhash.VERSION_TUPLE, it will be removed in the next
  major release

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Gyorgy Sarvari ec5a9b9684 pgpool2: upgrade 4.5.5 -> 4.6.3
Drop 0001-fix-compiling-on-32-bit-systems.patch, and change to another
patch that solves the same issue in OE, but is more likely to be
adapted by upstream (after discussion with upstream in
https://github.com/pgpool/pgpool2/pull/128)

Shortlog: https://github.com/pgpool/pgpool2/compare/V4_5_5...V4_6_3

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Leon Anavi 17ddc60d22 python3-beautifulsoup4: Upgrade 4.13.5 -> 4.14.2
Upgrade to release 4.14.2:

- Making ResultSet inherit from MutableSequence still resulted in
  too many breaking changes in users of the library, so it was
  reverted the ResultSet code back to where it was in 4.13.5 and
  added tests of all known breaking behavior. [bug=2125906]
- Version 4.14.0 adds function overloading to the find_* methods to
  make it easier to write type-safe Python.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Leon Anavi 628b06441f python3-dbus-fast: Upgrade 2.44.1 -> 2.44.5
Upgrade to release 2.44.5:

- fix: cibuildwheel sha
- Improve unmarshall performance for SignatureType
- Simplify code to unmarshall arrays

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Leon Anavi 0fc3ccf83a valkey: Upgrade 8.1.3 -> 8.1.4
Upgrade to release 8.1.4:

Security fixes:
- (CVE-2025-49844) A Lua script may lead to remote code execution
- (CVE-2025-46817) A Lua script may lead to integer overflow and
  potential RCE
- (CVE-2025-46818) A Lua script can be executed in the context of
  another user
- (CVE-2025-46819) LUA out-of-bound read

Bug fixes:
- Fix accounting for dual channel RDB bytes in replication stats
- Fix EVAL to report unknown error when empty error table is
  provided
- Fix use-after-free when active expiration triggers hashtable
  to shrink
- Fix MEMORY USAGE to account for embedded keys
- Fix memory leak when shrinking a hashtable without entries
- Prevent potential assertion in active defrag handling large
  allocations
- Prevent bad memory access when NOTOUCH client gets unblocked
- Converge divergent shard-id persisted in nodes.conf to primary's
  shard id
- Fix client tracking memory overhead calculation
- Fix RDB load per slot memory pre-allocation when loading from RDB
  snapshot
- Don't use AVX2 instructions if the CPU doesn't support it
- Fix bug where active defrag may be unable to defrag sparsely
  filled pages

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Khem Raj 93c7fc24f5 emacs: Use GNU_MIRROR in SRC_URI
Sometimes ftp.gnu.org might be slow.
Add UPSTREAM_CHECK_URI while here

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-08 18:46:02 -07:00
Gyorgy Sarvari dedb716445 nbdkit: upgrade 1.45.1 -> 1.45.9
While working on it, also ignore CVE-2025-47711 and CVE-2025-47712.
Both vulnerabilities are fixed already (they were fixed before the
upgrade also, but there is no version-range associated with the CVE report).

CVE-2025-47711: https://gitlab.com/nbdkit/nbdkit/-/commit/e6f96bd1b77c0cc927ce6aeff650b52238304f39
CVE-2025-47712: https://gitlab.com/nbdkit/nbdkit/-/commit/a486f88d1eea653ea88b0bf8804c4825dab25ec7

Shortlog:
Merge branch '2025-optional-qemu-img' into 'master'
build: Check for qemu-img and disable some tests if not present
tests/curl: Skip test if 'disk' was not created
server/public.c: Use common/include parse_bool function
common/include: Extra bool parsing into a mini-library
docs: Shorter title and tweaks to the description
indexed-gzip: Include <stddef.h> to get ptrdiff_t
indexed-gzip: Move variable decl outside for loop
vddk: Sort synopsis into alphabetical order
ext2: Update docs since filter supports concurrent connections
docs: Move --short/--long-options to right place in synopsis
(origin/rhel-10.2) docs: Document how to probe for server command line options
server: Document --long-options and --short-options
docs/nbdkit-probing.pod: Rearrange synopsis to match description
server: Add --name parameter
docs: Fix bolding of --log=/path option
tests/test-python-plugin.py: Remove unused variables
python: Add binding for nbdkit_parse_bool
tests/test-python-plugin.py: Add name of test for test_parse_size
(tag: v1.45.6) Version 1.45.6.
Merge branch '2025-rounding' into 'master'
server/public.c: Use lrint() instead of implicit conversion to int
indexed-gzip: Fixes for 32-bit support
indexed-gzip: More editorially neutral content
Merge branch 'add-indexed-gzip-filter' into 'master'
Introduce index-gzip filter
Move unmodified index build/extract to ig_zran.h/c
Add serialize/deserialize fn for zran structs
Restructure zran.h, zran.c for use as library
Import zran.c/zran.h v1.6 (2 Aug 2024) from zlib
Merge branch '2025-delay-trigger' into 'master'
delay: Add new delay-trigger option
delay: Rearrange the options in alphabetical order in the documentation
tests/test-map.sh: Fix "nbd_pread: count cannot be 0: Invalid argument"
docs/nbdkit-client.pod: Document attaching NBD devices to QEMU VMs
docs/nbdkit-client.pod: Combine and rename "LIMITATIONS" section
Merge branch '2025-fix-golang-test' into 'master'
tests/test-golang-fork-warning.sh: Fix hanging test
Merge branch '2025-misc-fixes' into 'master'
tests: Use 'define script' in a few more places
tests: Modify make-pki and make-psk scripts to be atomic
tests: Define common functions for requiring TLS certs and PSK
tests/test-tls.sh: Remove unused export of pkidir
tests: Generate make-psk.sh
tests/make-psk.sh: Fix typo "pkstool" -> "psktool"
tests: Fix typo "An good" -> "A good"
map: Implement map-size feature
tests/test-at-file.sh: Fix srcdir != builddir
tests: Work around realpath error on BSDs
Merge branch '2025-eq-file' into 'master'
Merge branch '2025-server-debug' into 'master'
server: Use debug() instead of nbdkit_debug() consistently in the server
map: Refer to @PATH syntax in documentation
server: Add @PATH syntax
server/main.c: Factor out the function that parses key=value
server/main.c: Fix comment
server/main.c: Move key=value parsing to a new function
server/options.h: Reject empty string ("") as a short name
server/options.h: Add comment to is_short_name
server/main.c: Reject empty string as a plugin name or filter name
common: utils: Add const to <vector>_duplicate variable decls
data: Use new vector_append_array in a couple of places
map: Use new vector_append_array function instead of loop
common: utils: vector: Fix vector_uniq prototype and add a test
common: utils: vector: Add range functions for insert, append and remove
common: utils: vector: Prefer vector_reset over free()
Merge branch '2025-map-filter' into 'master'
New filter: map for remapping arbitrary blocks
common: utils: vector: Add new vector_uniq function
tests/functions: Factor out 2^63-1 constant used by a few tests
tests/test-cache-block-size.sh: Remove unused socket
data: Minor revisions to the documentation for clarity
full: Remove reference to equivalence of nbdkit-readonly-filter
tests/test-floppy.sh: Simplify this test
count: Add an example to the documentation
common/include/test-once.c: Further fixes for pthread_barrier_t
common/include/test-once.c: Skip test on macOS which lacks pthread_barrier_t

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:02 -07:00
Khem Raj aee6a9e450 touchpademulator: Add recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:02 -07:00
Gyorgy Sarvari 3d363e527f libcupsfilters: upgrade 2.0.0 -> 2.1.1
This contains a fix for CVE-2024-47076

Changelog: https://github.com/OpenPrinting/libcupsfilters/blob/2.1.1/CHANGES.md

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:02 -07:00
Andrew Bradford ec7f6f5660 samba: Add PACKAGECONFIG[ad-dc] python3-markdown RDEPENDS
For Samba's Active Directory Domain Controller functionality, it needs
to have python3-markdown listed as an RDEPENDS as well as a DEPENDS.

When trying to provision a domain with samba-tool without this change
then it will error out like:

$ samba-tool domain provision --realm=EXAMPLE.COM --domain=EXAMPLE \
	--adminpass='YourPassword123!' --server-role=dc \
	--dns-backend=SAMBA_INTERNAL --use-rfc2307
<snip>
Temporarily overriding 'dsdb:schema update allowed' setting
ERROR(<class 'ModuleNotFoundError'>): uncaught exception - No module named 'markdown'
  File "/usr/lib/python3.13/site-packages/samba/netcmd/init.py", line 279, in _run
	return self.run(*args, **kwargs)
		   ~~~~~~~~^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.13/site-packages/samba/netcmd/domain/provision.py", line 343, in run
	result = provision(self.logger,
					   session, smbconf=smbconf, targetdir=targetdir,
	...<16 lines>...
					   backend_store=backend_store,
					   backend_store_size=backend_store_size)
  File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2404, in provision
	raise e
  File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2394, in provision
	forest = ForestUpdate(samdb, fix=True)
  File "/usr/lib/python3.13/site-packages/samba/forest_update.py", line 212, in init
	from samba.ms_forest_updates_markdown import read_ms_markdown
  File "/usr/lib/python3.13/site-packages/samba/ms_forest_updates_markdown.py", line 27, in <module>
	import markdown

Signed-off-by: Andrew Bradford <andrew.bradford@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:02 -07:00
Gyorgy Sarvari c8e8890991 libppd: upgrade 2.0.0 -> 2.1.1
This upgrade contains a fix for CVE-2024-47175.

Changelog:

2.1.1:
-pdftops: Use Poppler for a few old Epson laser printers This
 works around documents being printed off-centre, shifted towards
 the top right. Affected are printers using epsoneplijs:
 EPL-5700L, EPL-5800L, EPL-5900L, EPL-6100L, EPL-6200L.
-Fixed bugs discovered by static analyzer OpenScanHub Possible
 buffer overflows, uninitialized memory, format string issues
 and resource leaks, ...
-Fix crash bugs in ppdLoadAttributes() When parsing the
 "*cupsFilter(2): ..." lines in the PPD file use memmove() instead
 of strcpy() as the latter does not support handling overlapping
 memory portions and do not move running pointer beyond the end
 of the input string.

2.1.0:
-Prevent PPD generation based on invalid IPP response Overtaken
 from CUPS 2.x: Validate IPP attributes in PPD generator, refactor
 make-and-model code, PPDize preset and template names, quote PPD
 localized strings. Fixes CVE-2024-47175.

2.1b:
-Added support for libcups3 (libcups of CUPS 3.x) With these changes
 libcupsfilters can be built either with libcups2 (libcups of CUPS 2.x)
 or libcups3 (libcups of CUPS 3.x).
-Prefer PDF again in PPDs for driverless printers PDF works better with
 finishing, especially combinations of multiple copies, collation, and
 stapling/binding.
-Use 0.5mm as tolerance when comparing page sizes For the PWG two page
 sizes are considered the same when the dimensions differ no more than
 0.5 mm, libppd used too tight tolerances.
-PPD generator: Check for required attributes when choosing input format
 Check for PCLm and PWG the minimum of attributes which we require
 during PPD generation.
-ppdLoadAttributes(): Improve check whether parameters are integer
-ppdLoadAttributes(): Fix crash when page size could not get determined
-Fix crash if there is no page size for "Custom"
-Fix crash when incoming *ptr is NULL
-libcups2 compatibility: Use proper CUPS array callback function types
 Fixed CUPS array function call in libcups2 compatibility layer
-Build system: Fix failure to correctly link to zlib Look up zlib
 properly with pkg-config

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:02 -07:00
Gyorgy Sarvari 6cdb2e09d0 libraw: upgrade 0.21.2 -> 0.21.4
This upgrade contains fixes for the following vulnerabilities:
CVE-2025-43961, CVE-2025-43962, CVE-2025-43963 and CVE-2025-43964

Also drop two old CVE_STATUS entries which are not needed anymore,
because the database has been updated with correct info.

Changelog:
https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:01 -07:00
Gyorgy Sarvari 072623d578 luajit: ignore CVE-2024-2517{6,7,8}
All 3 CVEs are fixed in the currently used revision.

Fixes:
CVE-2024-25176: https://github.com/LuaJIT/LuaJIT/commit/343ce0edaf3906a62022936175b2f5410024cbfc
CVE-2024-25177: https://github.com/LuaJIT/LuaJIT/commit/85b4fed0b0353dd78c8c875c2f562d522a2b310f
CVE-2024-25178: https://github.com/LuaJIT/LuaJIT/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:01 -07:00
Gyorgy Sarvari a29b328612 libssh: ignore CVE-2025-5318 and CVE-2025-5987
Both CVEs have been fixed in version 0.11.2.

CVE-2025-5318: https://git.libssh.org/projects/libssh.git/commit/?id=5f4ffda88770f95482fd0e66aa44106614dbf466
CVE-2025-5987: https://git.libssh.org/projects/libssh.git/commit/?id=90b4845e0c98574bbf7bea9e97796695f064bf57

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:01 -07:00