Commit Graph

19197 Commits

Author SHA1 Message Date
Andreas Müller 29059f9c8f vlc: upgrade 3.0.11.1 -> 3.0.12
This at least a security upgrade. Although not mentioning CVEs in [1] it sounds
importand to upgrade.

[1] https://www.videolan.org/security/sb-vlc3012.html

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Andreas Müller cedc6044c4 appstream-glib: upgrade 0.7.17 -> 0.7.18
Version 0.7.18
~~~~~~~~~~~~~~
Released: 2020-09-07

New Features:
 - Add content rating system APIs from gnome-software (Philip Withnall)
 - Add "validate-version" command (Florian Müllner)

Bugfixes:
 - Allow timestamp in the future in validate-relax (Bartłomiej Piotrowski)
 - Don't ignore localized strings that are the same as original (Isaque Galdino)
 - Fix crash with invalid children of <ul/> (Fabian Vogt)
 - Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
 - Properly initialize mutexes (Laurent Bigonville)
 - Test launchable tags in validation (Ian McInerney)

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Andreas Müller d57d6ca4bc networkmanager: upgrade 1.22.14 -> 1.28.0
* Build tested on aarch64 glibc/musl
* 0003-Fix-build-with-musl-for-n-dhcp4.patch has to go. Grepped nm code for
  seed48_r / mrand48_r => no findings
* Since this is a huge version bump no detaile release notes are provided here
* Have tried to move to meson build few months ago but it turned into huge
  efforts and ended without success. Maybe situation changed but let's postpone
  for now

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Andreas Müller 2e5414c838 jack: upgrade 1.19.16 -> 1.19.17
removed patch was merged

1.9.17

    Fix jack_control stopping after first command iteration
    Fix library compat/current version under macOS
    Fix return codes of jackd on success
    Ignore DB_VERSION_MISMATCH error on windows, it is expected
    Remove old workaround for asio4all, as it breaks with jack-router

External changes, related to macOS/Windows installer:

    Add jack-router to Windows installer, opt-in
    Fix registry keys for Windows, add 32bit compat ones on 64bit
    Support for arm64 macOS builds
    Show welcome and license pages on windows installer
    Update QjackCtl used in macOS/Windows installers to v0.9.0, with some commits cherry-picked from develop branch

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Gianfranco 09eb0ad187 vboxguestdrivers: Add patch proposed upstream to fix a build failure on i386
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Gianfranco f8f2331158 vboxguestdrivers: upgrade 6.1.16 -> 6.1.18
Drop kernel 5.10 build fixes patches, now part of upstream codebase

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Daniel Gomez f24914a843 zbar: Add support for mchehab/zbar
ZBar project development stopped in 2012 but it was forked and
maintained by Mauro Carvalho Chehab to keep it up to date with V4L2 api.

Main repository:
https://github.com/mchehab/zbar

Add support for zbar library mantained by mchehab. Use latest
version available 0.23.1.

Compile by default with options: video & python3.

As ZBar (original project) and mchehab/zbar (new & updated) are
different, keep both recipes as:

-  zbar_0.10.bb: ZBar version 0.10
-  zbar_git.bb: mchehab/zbar Version 0.23.1

Signed-off-by: Daniel Gomez <daniel@qtec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 13:41:58 -08:00
Yi Zhao 1c2b1b919c nss: upgrade 3.60 -> 3.60.1
Bugs fixed in NSS 3.60.1:
Bug 1682863 - Fix remaining hang issues with slow third-party PKCS #11
              tokens.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Mikko Rapeli 3685e6a827 giflib: apply patch for CVE-2019-15133 and set CVE_PRODUCT
Backport upstream patch for CVE-2019-15133.
Set CVE_PRODUCT to "giflib_project:giflib" which is used
in NVD. https://nvd.nist.gov/vuln/detail/CVE-2019-15133

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Khem Raj da4b738b7a packagegroup-meta-oe: Add re2
re2 is newly added package

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Clément Péron <peron.clem@gmail.com>
2021-01-21 00:26:41 -08:00
Clément Péron 24774d34aa re2: Add recipe for Google RE2 library
Add Google RE2 regular expression library.

This is used in new version of gRPC.

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Luca Boccassi 3c9ced9c02 dbus-broker: update to v26
Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Diego Santa Cruz e58e07b010 net-snmp: control smux via PACKAGECONFIG
Support for smux is always enabled by the recipe, but it can be a
security risk since it makes the snmpd daemon listen on TCP port 199.

This makes it contrallable via PACKAGECONFIG, so that it can be easily
disabled from the distro or local config. The mechanism makes it easy
to add control for other MIB modules via PACKAGECONFIG later if need
be.

For compatibility smux is added to the default PACKAGECONFIG, so there
is no change in the default build configuration.

Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Luca Boccassi 8a29a7f9aa fsverity: fix MinGW build
Upstream supports building a binary with MinGW but not a shared library,
so remove the configure option for MinGW targets.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:44:15 -08:00
Luca Boccassi d960d152b9 fsverity: update to 1.3
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:44:15 -08:00
Leon Anavi 3d90d74013 python3-yappi: Upgrade 1.3.0 -> 1.3.2
Upgrade to release 1.3.2:

- Add support for Python 3.10

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:47 -08:00
Leon Anavi ccd9792bdb python3-dbus-next: Upgrade 0.1.4 -> 0.2.2
Upgrade to release 0.2.2:

- Add connected instance variable to the MessageBus
- Better handling of message bus errors on disconnect
- Ensure futures are not done when settings results and exceptions

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:43 -08:00
Leon Anavi c29e71f271 python3-pymysql: Upgrade 0.10.1 -> 1.0.2
Upgrade to release 1.0.2:

- Fix user, password, host, database are still positional
  arguments. All arguments of connect() are now keyword-only.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:38 -08:00
Leon Anavi 03aa496511 python3-openpyxl: Upgrade 3.0.5 -> 3.0.6
Upgrade to release 3.0.6:

- Borders in differential styles are incorrect
- Error when opening some pivot tables
- Resave breaks the border format in conditional formatting rules
- Read-only workbook not closed properly if generator interrupted
- Pandas.Multiindex.labels deprecated
- Pandas.Multiinex not expanded correctly
- Cannot read rows with exponents
- numpy.float is deprecated
- Cells without coordinate attributes not always correctly handled
- Improved handling of borders for differential styles
- Support subclasses of datetime objects
- Improved handling of cells without coordinates

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:32 -08:00
Leon Anavi 826495b4cb python3-lxml: Upgrade 4.6.1 -> 4.6.2
Upgrade to release 4.6.2:

- A vulnerability (CVE-2020-27783) was discovered in the HTML
  Cleaner by Yaniv Nizry, which allowed JavaScript to pass
  through. The cleaner now removes more sneaky "style" content.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:28 -08:00
Leon Anavi dc0fbea48b python3-pyscaffold: Upgrade 3.3 -> 3.3.1
Upgrade to release 3.3.1:

- Code base changed to Black’s standards
- New docs about version numbers and git integration
- Updated pre-commit hooks
- Updated docs/Makefile to use Sphinx "make mode"
- deprecated setuptools extensions/commands python setup.py
  test/docs/doctests
- New tox test environments for generating docs and running
  doctests
- New built-in extension for Cirrus CI
- experimental get_template is now part of the public API and
  can be used by extensions, issue #252
- Updated setuptools_scm to version 4.1.2 in contrib
- Updated configupdater to version 1.1.2 in contrib
- precommit automatically fixes line endings by default
- deprecated log.configure_logger, use log.logger.reconfigure
  instead

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:23 -08:00
Leon Anavi cec91a5fe4 python3-cheetah: Upgrade 3.2.5 -> 3.2.6
Upgrade to release 3.2.6:

- Fixed use of uninitialized variable in _namemapper

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:18 -08:00
Leon Anavi dc4f8b3804 python3-pyperf: Upgrade 2.0.0 -> 2.1.0
Upgrade to release 2.1.0:

- The compare_to command now computes the geometric mean.
- The compare_to command no longer displays percentages: display
  less numbers to make the output easier to read. Also, percentage
  were almost the same values than the xxx faster or xxx slower
  values, but rounded differenly which introduced confusion.
- Project moved to https://github.com/psf/pyperf/
- system command now only emits a warning rather than failing with
  a hard error if it fails to get or set the frequency of a CPU.
- The pyperf project is now covered by the PSF Code of Conduct.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:14 -08:00
Leon Anavi 9ce09b667e python3-pyephem: Upgrade 3.7.7.0 -> 3.7.7.1
Upgrade to release 3.7.7.1:

- Fixed a memory leak in readdb()
- Fixed the Body.copy() method to correctly copy object-specific
  fields across to the new object, like Saturn ring tilt and Earth
  satellite catalog number

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:09 -08:00
Leon Anavi 4636a5ad3b python3-colorlog: Upgrade 4.6.2 -> 4.7.2
Upgrade to release 4.7.2:

- Fix linter errors
- Fix typo

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:05 -08:00
Zang Ruochen 47c4ccf478 python3-zopeinterface: upgrade 5.1.0 -> 5.2.0
5.2.0 (2020-11-05)

==================

- Add documentation section ``Persistency and Equality``
  (`#218 <https://github.com/zopefoundation/zope.interface/issues/218>`_).

- Create arm64 wheels.

- Add support for Python 3.9.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:00 -08:00
Zang Ruochen 7c6be93f60 python3-snappy: upgrade 0.5.4 -> 0.6.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:29:56 -08:00
Zang Ruochen d8ad8f4510 python3-smbus: upgrade 4.1 -> 4.2
4.2 (2020-09-22)
  manpages: Add BUGS section to let people know how to contact us
  Makefile: Allow to preset all CFLAGS and LDFLAGS variables
  tools: Consistently use snprintf instead of sprintf
         Restrict addresses 0x03-0x07, too (defined by I2C standard)
  decode-dimms: Print SPD revision for DDR3 too
                Print primary bus width for DDR3 and DDR4
                List ee1004 as a candidate driver
                Display MAC for DDR3
                Add MAC abbreviation for DDR4
                Round DDR4 speed properly
                Detect and report truncated input files
                Print kernel driver used
                Print DDR memory speed in MT/s
                Add DDR5 memory types
                Decode manufacturing data for LPDDR3
                Fix the version string
                Point the user to the right drivers
                Update the list of vendors to Jedec JEP106BB
  decode-vaio: Add support for the at24 driver
               Scan more i2c buses
  i2cset: Fix short writes with mask
  i2ctransfer: Mention '-a' everywhere in the manpage
               Support messages using I2C_M_RECV_LEN
               Add check for returned length from driver
  i2c-stub-from-dump: Read dumps from hexdump -C
  library: Add a manual page to document the API

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:29:51 -08:00
Leon Anavi 2d65f27371 python3-parse: Upgrade 1.18.0 -> 1.19.0
Upgrade to release 1.19.0:

- Fix using digit field numbering and types

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:29:46 -08:00
Leon Anavi 7599690d9c python3-greenlet: Upgrade 0.4.17 -> 1.0.0
Upgrade to release 1.0.0:

- Add the ability to set a greenlet's PEP 567 contextvars context
  directly, by assigning to the greenlet's gr_context attribute.
  This restores support for some patterns of using greenlets atop
  an async environment that became more challenging in 0.4.17.
- The repr of greenlet objects now includes extra information
  about its state. This is purely informative and the details are
  subject to change.
- The greenlet module is now a package. There are no API changes,
  so all existing imports, including from C code, should continue
  to work.
- (C API) The undocumented GREENLET_VERSION macro that defined a
  string giving the greenlet version is now deprecated and will
  not be updated.
- Fix %s and %r formatting of a greenlet on Python 2. Previously
  it would result in a Unicode string instead of a native string.
- Move continuous integration from Travis CI to Github Actions.

License-Update: move to the src/ layout and this affects the note
in LICENSE about Stackless Python

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:27:59 -08:00
Kai Kang e31d5970cb blueman: refresh patch
Module 'time' had been imported in Functions.py by upstream, so not
import in 0002-fix-fail-to-enable-bluetooth.patch and update accordingly.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 20:29:45 -08:00
Andreas Müller 712411fb11 thunar: upgrade 4.16.0 -> 4.16.2
Changes (and yes 4.16.2 'Regression:'... was on my list)

4.16.2

- Regression: "Open with other application" missing (Issue #470)
- Always create new files and folders in current directory (Issue #462)
- Translation Updates:
  Albanian, Arabic, Armenian, Armenian (Armenia), Asturian, Basque,
  Belarusian, Bengali, Bulgarian, Catalan, Chinese (China), Chinese
  (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch,
  Eastern Armenian, English (Australia), English (United Kingdom),
  Esperanto, Estonian, Finnish, French, Galician, German, Greek,
  Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian,
  Japanese, Kazakh, Korean, Latvian, Lithuanian, Malay, Norwegian
  Bokmål, Norwegian Nynorsk, Occitan (post 1500), Panjabi (Punjabi),
  Persian (Iran), Polish, Portuguese, Portuguese (Brazil), Romanian,
  Russian, Serbian, Slovak, Spanish, Swedish, Telugu, Thai, Turkish,
  Ukrainian, Urdu, Urdu (Pakistan), Vietnamese

4.16.1

- Prevent crash on Ctrl+H when there is no sidepane (Issue #453)
- Roleback to previous spinner handling (Issue #448)

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 11:06:28 -08:00
Andreas Müller 9f386fb981 xfce4-whiskermenu-plugin: upgrade 2.5.1 -> 2.5.2
Release notes for 2.5.2
=======================
- Do not reparent launched programs. (Issue #32)
- Translation updates: Basque, Danish, Greek.

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 11:06:28 -08:00
Andreas Müller 50d993b48c garcon: upgrade 0.8.0 -> 4.16.1
Release notes for 4.16.1
========================
- Launch applications as children again (Fixes #18)
- Translation Updates:
  Kabyle, Portuguese

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 11:06:28 -08:00
changqing.li@windriver.com 5450c958bf celt051: update SRC_URI
original SRC_URI is not valid now, offical CELT repository
moved to gitlab

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 09:12:04 -08:00
Wang Mingyu 33086407b1 dovecot: upgrade 2.2.36.4 -> 2.3.13
0001-doveadm-Fix-parallel-build.patch
removed since it is included in 2.3.13

refresh 0001-configure.ac-convert-AC_TRY_RUN-to-AC_TRY_LINK-state.patch

add 0001-not-check-pandoc.patch to not check pandoc of configure

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 22:38:29 -08:00
Khem Raj e50c285e41 packagegroup-meta-networking: Add ipset
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Søren Andersen 3c8ad9192c zram: fix sourcing of zram parameters
Signed-off-by: Søren Andersen <san@skov.dk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Kai Kang a28e613673 xfce4-panel-profiles: update remove-bashisms.patch for centos 7
Command install is from package coreutils. And there is coreutils 8.22
on centos 7 which doesn't support options -D and -t to be used together.
So create/remove the directories and files one by one.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Armin Kuster 6312f419dd ipset: add recipe
This is needed for login-shield pkg in meta-security

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Shlomi Vaknin 2ed25eb4ef python3-sh: remove python3-tests from RDEPENDS
python3-tests installs the unit tests of python
as well as stuff that no one should care about
in its rootfs. Thus, it is not a runtime dependency
of python3-sh.

Signed-off-by: Shlomi Vaknin <shlomi.39sd@gmail.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:30:00 -08:00
Zang Ruochen 193dac4cd6 librole-tiny-perl: upgrade 2.001004 -> 2.002003
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Zang Ruochen a52487fd74 spitools: upgrade 0.8.6 -> 0.8.7
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Zang Ruochen cca31f9267 hwdata: upgrade 0.342 -> 0.343
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Zang Ruochen 14365a5fd5 htop: upgrade 3.0.4 -> 3.0.5
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Zang Ruochen 3f9b0a8b97 c-periphery: upgrade 2.3.0 -> 2.3.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Mikko Rapeli e3c4c4ffb5 flatbuffers: whitelist CVE-2020-35864
CVE-2020-35864 is for the rust crate for flatbuffers, not
flatbuffers itself.

https://security-tracker.debian.org/tracker/CVE-2020-35864

"NOT-FOR-US: flatbuffers rust crate"

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Mikko Rapeli 3bf13d697b fuse: set CVE_PRODUCT to "fuse_project:fuse"
Other products like "RedHat:fuse" introduce false CVE findings like:

https://nvd.nist.gov/vuln/detail/CVE-2018-10906
https://nvd.nist.gov/vuln/detail/CVE-2019-14860
https://nvd.nist.gov/vuln/detail/CVE-2020-25689

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Leon Anavi e02edae797 python3-pyzmq: Upgrade 19.0.2 -> 20.0.0
Upgrade to release 20.0.0:

- Update bundled libzmq to 4.3.3
- Socket.bind() and Socket.connect() can now be used as context
  managers
- Better error when libzmq is bundled and fails to be loaded
- Hold GIL while calling zmq_curve_ functions, which may fix
  apparent threadsafety issues

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:59 -08:00
Leon Anavi f02869c5c4 python3-wheel: Upgrade 0.35.1 -> 0.36.2
Upgrade to release 0.36.2:

- Updated vendored packaging library to v20.8
- Fixed wheel sdist missing LICENSE.txt
- Don't use default macos/arm64 deployment target in calculating
  the platform tag for fat binaries

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:55 -08:00