Commit Graph

33140 Commits

Author SHA1 Message Date
Wang Mingyu fd4cfe239c libgee: upgrade 0.20.6 -> 0.20.8
Changelog:
==========
 * Fixes for new release process
 * Fixes for newer valac

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu 52c479025c iotop: upgrade 1.26 -> 1.27
License-Update: Copyright year updated to 1.27

Changelog:
 src/iotop: correct pg_cb signature

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu 966cdcf793 freeipmi: update 1.6.14 -> 1.6.15
0001-Fix-undeclared-function-errors.patch
removed since it's included in 1.6.15

Changelog:
==========
- In ipmi-config, fix incorrect output of IPv6_Dynamic_Address_Source_Type.
- In ipmi-oem, increase precision of Dell cumulative energy output.
- Do not advertise options that are only available when special debugging
  is compiled into FreeIPMI.
- Fix build errors with implicit-function-declaration.
- libfreeipmi: remove unnecessary / duplicate parameter checks.
- Fix gcc 14.x build failures.
- Minor documentation updates.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu e27b749c0a dialog: upgrade 1.3-20240619 -> 1.3-20250116
Changelog:
===========
- modify dialog-config.in to allow for include-subdirectory.
- update configure script macros for changes made with Cdk.
- use $ LIB_ROOTNAME, e.g., set by --with-libname, in generating
  *-config and ".pc" files
- further improvements to matching output from *-config and ".pc"
  improve gen-pkgconfig.in to mark the screen library, e.g., ncurses,
  as "Required" and filter the cflags/libs from required packages out
  of the ".pc" file, because pkg-config will add those automatically.
- fix some gcc15 strict compiler warnings
- configure script fixes for compiler warnings
- update config.guess, config.sub

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu 3b3e8f01de cxxopts: upgrade 3.2.0 -> 3.2.1
Changelog:
 * Fix compilation with optional on C++20.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:00 -08:00
Wang Mingyu 05ad38f42d ctags: upgrade 6.1.20250112.0 -> 6.1.20250119.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:19:59 -08:00
Yogita Urade 901a6b2b61 poppler: upgrade 24.12.0 -> 25.01.0
Includes fix for CVE-2024-56378

Changelog:
===========
core:
* TextOutputDev: Better detect fakebold words
* TextOutputDev: Faster sorting algorithm
* Internal code improvements
* Fix crashes in malformed documents

cpp:
* Remove rect parameter from image::copy, it was never implemented

qt6:
* Fix crash in Submit Forms if document links to non existing field

qt5:
* Fix crash in Submit Forms if document links to non existing field

glib:
* mark transfer of poppler_page_get_selected_region

utils:
* pdfdetach: Make -savefile work with Unicode strings. Issue #1540

build system:
* Don't update pdfsig.pot when POT-Creation-date is the only change

Droped 0001-Don-t-update-pdfsig.pot-when-POT-Creation-date-is-th.patch
as this is available in 25.01.0

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:26 -08:00
Peter Marko bba186bdcb yasm: update to latest git revision
Last tag is from 2014, but bugfixing continued and last commit is from
year 2024. Additional 87 commits are present, mostly bugfixes.

PV already has "+git" although it was exactly on tag, no edit needed.

Drop 3 patches which are included in current git version.
Add CVE_STATUS for 2 CVEs from those patches.

Also mark one additional CVE as fixed: CVE-2021-33454.
Stack trace from https://github.com/yasm/yasm/issues/166
References the same line of code as corrected in
https://github.com/yasm/yasm/pull/244

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:26 -08:00
Jason Schonberg f05ac0cbf8 c-ares: upgrade 1.32.2 -> 1.32.3
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.32.3

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:25 -08:00
Jason Schonberg 574ab41958 c-ares: upgrade 1.32.1 -> 1.32.2
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.32.2

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:25 -08:00
Jason Schonberg e46be288f2 c-ares: upgrade 1.32.0 -> 1.32.1
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.32.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-20 20:20:25 -08:00
Markus Volk 27ab1bbc95 mozjs-115: remove recipe
polkit was the only consumer and switched to ducktape

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-18 09:17:02 -08:00
Derek Straka 7278443967 python3-pillow: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:43 -08:00
Derek Straka 4ede2afe4e python3-pint: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka cebf92f51a python3-platformdirs: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka af7d47dd2c python3-polyline: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka 9e3ab586bd python3-portion: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka 6bf9389c43 python3-precise-runner: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka 966a1f6f67 python3-prettytable: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka bf5ce7551d python3-propcache: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:42 -08:00
Derek Straka 569cffbd06 python3-ptyprocess: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka 57d6a4ea1f python3-py-cpuinfo: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka f684aa3085 python3-pyasn1-modules: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka 424dbf8fb9 python3-pydantic-core: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka 645907c41a python3-pydantic: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Derek Straka c9b9004399 python3-pyroute2: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Jason Schonberg 63e4df52f2 xrdp: upgrade 0.9.19 -> 0.9.20
Patches updated with devtool

Changelog: https://github.com/neutrinolabs/xrdp/releases/tag/v0.9.20

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:41 -08:00
Peter Marko 68f55c158e audiofile: mark CVE-2020-18781 as patched
Per [1] this CVE is already patched by commit [2].

This can be also verified with yocto build.

Running without this patch:
root@qemux86-64:~# sfconvert poc.wav output format wave
malloc(): corrupted top size
Aborted

Running with it:
root@qemux86-64:~# sfconvert poc.wav output format wave
Audio File Library: Bad number of coefficients [error 62]
Could not open file 'poc.wav' for reading.

[1] https://github.com/mpruett/audiofile/issues/56
[2] https://github.com/antlarr/audiofile/commit/c48e4c6503f7dabd41f11d4c9c7b7f8960e7f2c0

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 16:39:40 -08:00
Derek Straka 4108165248 python3-pyserial: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:14 -08:00
Derek Straka 3eee9c0f50 python3-pytest-localserver: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:14 -08:00
Derek Straka 90ab0bc4fe python3-python-multipart: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:13 -08:00
Derek Straka dc556825e9 python3-pytoml: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:13 -08:00
Derek Straka aa223d4dba python3-pyyaml-include: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:13 -08:00
Derek Straka 6b0ad8899c python3-rapidjson: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:13 -08:00
Derek Straka 2c9f19d797 python3-requests-file: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:12 -08:00
Derek Straka a3edd4f6d7 python3-requests-toolbelt: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:12 -08:00
Derek Straka 8e56338b50 python3-scrypt: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:12 -08:00
Derek Straka 1f3fae9374 python3-semver: update recipe to use the ptest-python-pytest class
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:29:12 -08:00
Peter Marko 67d94fecb0 vorbis-tools: patch CVE-2023-43361
This is inactive project, so no official CVE fix will be available
anymore. That however does not mean that there is no fix available.
Following tries to prove that patch provided here is valid.

NVD CVE report [1] links issue [2] where this is reported.
Based on the report, fix was proposed in [3].
There was some review however the patch autor was not active.
[4] was later created trying to adddress the comments, but the project
was not active anymore. In this PR the patch was shrunk to a one-liner
in discussion.

I have tested the poc and it is real.
The patch fixes it, while not breaking the execution if good file path
is provided as argument.

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-43361
[2] https://github.com/xiph/vorbis-tools/issues/41
[3] https://gitlab.xiph.org/xiph/vorbis-tools/-/merge_requests/7
[4] https://gitlab.xiph.org/xiph/vorbis-tools/-/merge_requests/8

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:01:39 -08:00
Markus Volk 103c3392a8 polkit: dont add mozjs PACKAGECONFIG
fixes:
ERROR: polkit-126-r0 do_configure: QA Issue: polkit: invalid PACKAGECONFIG: mozjs [invalid-packageconfig]
ERROR: polkit-126-r0 do_configure: Fatal QA errors were found, failing task.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-17 11:01:39 -08:00
Luca Boccassi a2f649ecc4 polkit: update 125 -> 126
Patch merged upstream. mozjs support dropped, remove PACKAGECONFIG.

Signed-off-by: Luca Boccassi <luca.boccassi@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-16 14:56:27 -08:00
Jaeyoon Jung a519f89ea7 jansson: fix a symbol clash when building with cmake
It exports all symbols globally which results in a symbol clash, for
example "hashtable_del" of ulogd2. It has been revealed because the
recipe inherits cmake over autotools since Langdale.
This fixes it by specifying visibility scope of symbols in its version
script which matches what is given with the libtool flag
'-export-symbols-regex' in Makefile.am.

Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-16 14:56:27 -08:00
Markus Volk 402e49afd1 libde265: switch to cmake buildsystem
This fixes build issues with clang/qemuarm

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-16 14:56:27 -08:00
Hieu Van Nguyen 63351d7887 gphoto2: Fix /usr/bin/gphoto2 runtime error
After fixing the TMPDIR [buildpaths] warning, a segmentation fault while
running gphoto2 command.

It seems 'sed' is primarily designed for text processing. When running
'sed' on a binary, it may overwrite or corrupt critical parts of the
binary.
> root@qemux86-64:~# gphoto2 -v
> Segmentation fault

Signed-off-by: Hieu Van Nguyen <hieu2.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-16 14:56:23 -08:00
Bartosz Szostak 4abff7bcb7 cxxopts: add new recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-16 09:27:34 -08:00
Bartosz Szostak ab4201ba8a yyjson: force build shared library
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-16 09:27:34 -08:00
Ayoub Zaki 72f580f4a2 pistache : add initial recipe
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 17:18:42 -08:00
Jason Schonberg 665762cab4 c-ares: upgrade 1.31.0 -> 1.32.0
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.32.0

Features:

    Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
    by specifying ARES_FLAG_DNS0x20. Disabled by default. PR #800
    Rework query timeout logic to automatically adjust timeouts based on network
    conditions. The timeout specified now is only used as a hint until there
    is enough history to calculate a more valid timeout. PR #794

Changes:

    DNS RR TXT strings should not be automatically concatenated as there are use
    cases outside of RFC 7208. In order to maintain ABI compliance, the ability
    to retrieve TXT strings concatenated is retained as well as a new API to
    retrieve the individual strings. This restores behavior from c-ares 1.20.0.
    PR #801
    Clean up header inclusion logic to make hacking on code easier. PR #797
    GCC/Clang: Enable even more strict warnings to catch more coding flaws. 253bdee
    MSVC: Enable /W4 warning level. PR #792

Bugfixes:

    Tests: Fix thread race condition in test cases for EventThread. PR #803
    Windows: Fix building with UNICODE. PR #802
    Thread Saftey: ares_timeout() was missing lock. 74a64e4
    Fix building with DJGPP (32bit protected mode DOS). PR #789

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00
Peter Marko 20e3583f56 proftpd: define suffix for CVE version comparison
Similarly to old openssl versions, proftpd has patch releases with
characters instead of numbers.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00
Peter Marko 7fce6b033b proftpd: upgrade 1.3.8b -> 1.3.8c
See https://github.com/proftpd/proftpd/blob/1.3.8/RELEASE_NOTES

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00