Files
meta-openembedded/meta-python/recipes-devtools/python
Leon Anavi 9412289154 python3-glances: Upgrade 4.3.2 -> 4.5.6
Upgrade to release 4.5.6:

Bugs corrected:

- Alert level decided by dict ordering: a failing+slow URL is
  downgraded to WARNING, an unscanned URL reports CRITICAL
- GPU plugin duplicates card name and omits N/A for unavailable
  metrics in multi-GPU
- GPU plugin duplicates the utilisation value and paints it with
  the memory colour in multi-GPU
- IP plugin displays wrong interface: outer loop in get_ip_address()
  never breaks
- VideoCore (v3d) memory shows ~93% on Raspberry Pi 5 with
  gpu_mem=4M - misleading denominator from drm-total-memory
- CSV export: --stdout-csv data rows desync from header when
  network interfaces change count at runtime
- Glances Network plugin with mismatched schema not logging in
  TimescaleDB export

Security patches:

- as_dict_secure() Value-Level Bypass Leaks Credentials in URL
  Values via /api/4/config - CVE-2026-68520
- --disable-config-exec does not cover on-alert action commands
  - CVE-2026-68519
- Command injection bypass of action-template sanitizer via
  cross-field shell-operator reconstruction - CVE-2026-68518
- Incomplete fix of CVE-2026-32608: action-template sanitizer is
  bypassed by nested stat values - CVE-2026-62982
- REST API CORS Credentials Guard Uses Exact-Match Instead of
  Membership Test - CVE-2026-68517

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-04 17:10:39 -07:00
..
2026-02-06 10:06:18 -08:00
2026-08-04 10:47:40 -07:00
2026-07-09 09:11:53 -07:00
2026-07-10 15:08:46 -07:00