15965 Commits

Author SHA1 Message Date
Gyorgy Sarvari
d302ffa547
bubblewrap: upgrade 0.10.0 -> 0.11.0
One big change that comes with this update is the build system change:
the project removed autotools and now uses meson.

Dropped 0001-Use-stdbool.h-for-booleans.patch because it is included
in this release.

Changelog: https://github.com/containers/bubblewrap/releases/tag/v0.11.0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:40 -08:00
Gyorgy Sarvari
d5b5f267df
logwatch: upgrade 7.11 -> 7.13
Update SRC_URI because the previous one became inaccessible.

Slightly update do_install - now it is in line with the installation
script from the project's own RPM file (previous some files were not
installed)

Shortlog:
[logwatch] Preparation for Release 7.13
[rsyslogd] De-duplicate lines with time calculations
[sendmail] Removed invalid commented-out code.
[logstash] Remove script - needs update to Logwatph.pm
[sendmail] Improved detection of "Command unrecognized" strings.
[rsyslogd] Ignore "GnuTLS error: Error in the push function" - paired with other errors
[omsa] Handle peak power and new Unexpected sense messages
[systemd] Add ignore_messages option to ignore messages matching a regex
[kernel] Fix EDAC regex
[rsyslogd] Ignore additional rate-limiting message paired with other messages
[rsyslogd] Ignore additional omfwd messages paired with other messages
[nut] Ignore upsnotify message about tech that we already know about
[pam_unix] Add nx to services; Allow for username in session opened by messages for cron
[pam_unix] Add kde to dektop services; Hande "User info message"
[systemd] Update for newer systemd
[logstash] Initial version
[systemd] Ignore "Unnecessary job was removed for .*" - appears informational
[systemd] Ignore State timed out messages - followed by a failed message
[named] No need for unconfineds variable, not used
[clam-update] Added comments about syslog format.
[logwatch.8] Clarified use of debug.
Fix Dir glob issue Iridos2 bug report.
[postfix] Added support for postfix version 3.10
[zypp] Added support for patch statements; reported by leithh.
[dovecot] Added better detail granularity, and support logformat 2.3
[systemd] Relax LSM BPF program attached regex
[dirsrv] Relax ACL target does not exist regex; Ignore schema-compat-plugin info messages that are at ERR level
[dovecot] Script and configuration file updated with granular detail options and improved report grouping
[clam-update] Fixed typo.
[clam-update] Check for empty LogFile strings and adjust error messages
[onlyservice,removeheaders] Allow RFC 3164 Log Format with named facility.severity
[http] Setting default http_rc code for when not specified in LogFormat
[logwatch.pl,syslog-ng] Removed HTML Entity encoding for xml, as all strings are now UTF-8
(tag: 7.12) [logwatch] Updating release version
[http] Replace hyphen with "Unidentified agent,"
[named] Handle "zone not loaded due to errors; Handle "journal file is out of date; removed" separately;  Ignore "New key observered for zone"
[named] handle "TCP client quota reached" messages; Expand limit regex
Remove trailing whitespace
[nut] Handle battery needs to be replaced message
[nut] Update for 2.8.2
[postfix] Support for aliased mailboxes
[zz-zfs] Added 'Cap' column header
[sudo] Add sudo_detail
[omsa] Ignored Administrator stopped message
[omsa] Update Patrol Read regex
[sssd] Ignore "exec_child_ex command" messages
[secure] relax regex around "gkr-pam: no password is available for user"
[secure] Ignore sshd-session messages
[sendmail] Added filter for new pre-greeting message.
[postfix] Added DNSBL rank display
[sshd] Added 'drop connection' counter.
[rsyslogd] Handle stdout/stderr sent to journal which ends up with an extra prefix
[named] Add option to ignore denied zone trasfter; Move limit reporting to detail >= 1
[systemd] Handle new Watchdog and Reexecuting requested messages
[dnf-automatic] New script contributed by Clive Lin.
[mdadm] Check if hash of 'good devices' is undefined or empty.
[sshd,secure] Added support for OpenSSH 9.8 (sshd-session, port number), per tomop.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:40 -08:00
Gyorgy Sarvari
60f8a3cd10
links-x11: vendor icon image from layer
The url from where this icon was sourced origiannly has been inaccessible
since a while (the domain seems to be parked). Instead of displaying the
fetcher warning, just vendor this image from the layer directly - it's
only a 4kB icon.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:39 -08:00
Gyorgy Sarvari
d9ba908fae
tomoyo-utils: upgrade 2.6.1-20210910 -> 2.6.1-20250707
Also update the SRC_URI, the previous one became inaccessible.

Changelog:
- Update project's website.
- /usr/lib/tomoyo/init_policy
  Remove rewrite rules handled by commit bdc35f164b0f ("tomoyo: use better
  patterns for procfs in learning mode").

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:39 -08:00
Gyorgy Sarvari
fe9219f635
tigervnc: compare vendored xserver version to oe-core's xserver
TigerVNC compiles its own xserver from a separate tarball, it doesn't
use oe-core's xserver for most of the compilation.

The vendored xserver code should be still kept in sync with oe-core
to minimize incompatibilities, feature and bug-discrepepancies (...)

However it is easy to miss when xserver is updated in oe-core, TigerVNC's
xserver gets out of sync frequently.

This change adds a small check before do_configure that compares the
vendored and oe-core's xserver version, and issues a warning if
TigerVNC recipe needs to be synced to oe-core.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-28 08:14:39 -08:00
Gyorgy Sarvari
21df5861c7
softhsm: fix SRC_URI branch
The "develop" branch doesn't exist anymore, the used revision can be
found on the "main" branch.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-26 17:36:59 -08:00
Gyorgy Sarvari
868b4b2959
redis: ignore CVE-2025-46686
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-46686

Upstream disputes that it is a security violation, and says that
implementing a mitigation for this would negatively affect the rest
of the application, so they elected to ignore it.

See Github advisory about the same vulnerability:
https://github.com/redis/redis/security/advisories/GHSA-2r7g-8hpc-rpq9

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-26 17:36:58 -08:00
Markus Volk
922ca44f5e
rtkit: update 0.13 -> 0.14
- add HOMEPAGE
- update SRC_URI

Release notes

    Fix a bug that caused all RT privileges to sometimes be dropped on resume from suspend (#13 (closed))
    Drop autotools build system
    Add an rtkit_make_realtime_simple() with no arguments
    Drop default log level to reduce log spam
    Rename priority parameter of MakeThreadHighPriority to nice_level (does not change API)
    Implement org.freedesktop.DBus.Properties.GetAll
    Add a sysusers config
    Correctly specify client license as MIT
    A number of documentation and build cleanups

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-26 17:36:58 -08:00
Gyorgy Sarvari
4924e89bb7
tigervnc: ignore CVE-2025-26594...26601
Ignore the following CVEs: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601

Details:
https://nvd.nist.gov/vuln/detail/CVE-2025-26594
https://nvd.nist.gov/vuln/detail/CVE-2025-26595
https://nvd.nist.gov/vuln/detail/CVE-2025-26596
https://nvd.nist.gov/vuln/detail/CVE-2025-26597
https://nvd.nist.gov/vuln/detail/CVE-2025-26598
https://nvd.nist.gov/vuln/detail/CVE-2025-26599
https://nvd.nist.gov/vuln/detail/CVE-2025-26600
https://nvd.nist.gov/vuln/detail/CVE-2025-26601

TigerVNC compiles its own xserver, this is why these CVEs are associated
with it - despite the vulnerabilities being in xserver.

All of these vulnerabilities were fixed by the same PR[1], which has
been part of xserver since version 21.1.16 (the currently used xserver
version in TigerVNC is 21.1.18).

Due to this, ignore these vulnerabilities, and just mark them as patched.

[1]: https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1830

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
62a78f8ba7
tigervnc: ignore CVE-2023-6478
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-6478

TigerVNC compiles its own xserver, this is why this CVE is associated
with it - despite the vulnerability being in xserver.

The vulnerability was fixed by [1] (from the nvd report), which has been
backported[2] to the xserver version used by the recipe - so ignore the
CVE, since it's patched already.

[1]: 14f480010a
[2]: 58e83c6839

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
f691f2178b
tigervnc: ignore CVE-2023-6377
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-6377

TigerVNC compiles its own xserver, this is why this CVE is associated
with it - despite the vulnerability being in xserver.

The vulnerability was fixed by [1] (from the nvd report), which has been
backported[2] to the xserver version used by the recipe - so ignore the
CVE, since it's patched already.

[1]: 0c1a93d319
[2]: a7bda3080d

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
fadb9c0570
tigervnc: sync xserver code with oe-core
TigerVNC compiles its own xserver. Synchronize the xserver version
with oe-core.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
1aee6a403c
smarty: extend CVE_PRODUCT
Some CVEs assign smarty-php as the vendor to the corresponding CPE.
E.g CVE-2024-35226[1] is tracked with smarty-php:smarty by mitre
(NVD tracks it without CPE).

[1]: https://cveawg.mitre.org/api/cve/CVE-2024-35226

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 07:53:24 -08:00
Khem Raj
0ecf2814b2
vboxguestdrivers: Upgrade to 7.2.4
This is a maintenance release. The following items were fixed or added:

GUI: Fixed VirtualBox VM Manager crash when host was resuming from sleep (​github:gh-121, ​github:gh-170)
GUI: Updated native language support for Traditional Chinese, Greek, Swedish, Hungarian and Indonesian translations
NAT: Fixed issue when multiple port forwarding rules affected NAT functionality (​github:gh-232)
Linux host and guest: Introduced initial support for kernel 6.18
Linux Guest Additions: Introduced additional fixes for RHEL 9.6 and 9.7 kernels (​github:GH-12)
Windows Guest Additions: Introduced additional fixes for issue when installation was failing in Windows XP SP2 guest (​github:GH-142)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-24 13:31:55 -08:00
Gyorgy Sarvari
199a6a2266
freerdp3: add ptest support
The execution takes under 10s.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-23T11:36
BEGIN: /usr/lib/freerdp3/ptest
PASS: TestSynchInit
PASS: TestSynchEvent
PASS: TestSynchMutex
[...many lines...]
PASS: TestClientRdpFile
PASS: TestClientChannels
PASS: TestClientCmdLine
DURATION: 7
END: /usr/lib/freerdp3/ptest
2025-12-23T11:37
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Gyorgy Sarvari
325928e2ab
freerdp3: upgrade 3.19.0 -> 3.20.0
Contains fix for CVE-2025-68118

Changelog:
3.20.0:
Mingw fixes
[crypto,certificate_data] add some hostname sanitation
[client,common]: Fix loading of rdpsnd channel
[client,sdl] set touch and pen hints

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Khem Raj
e4b25c0fcb
rwmem: Fix tests to build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:31 -08:00
Jan Vermaete
0b0cbd4c3c
freeglut: version 3.4.0 -> 3.8.0
patch to add support for legacy OpenGL (Thanks Rob Woolley)

| -- Found OpenGL: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot/usr/lib/libGL.so  found components: OpenGL
| -- Found PkgConfig: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot-native/usr/bin/pkg-config (found version "0.29.2")
| CMake Error at /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot-native/usr/share/cmake-4.2/Modules/FindPackageHandleStandardArgs.cmake:290 (message):
|   Could NOT find OpenGL (missing: OPENGL_opengl_LIBRARY)

Changlog:

2025-11-16  John Tsiombikas <nuclear@mutantstargoat.com>

	freeglut 3.8 changes:

	* New experimental Cocoa (native MacOS X) backend.
	* Add glutSwapInterval, to control vsync (currently X11 and win32 only).
	* glutExtensionSupported now also reports platform extensions (GLX/WGL).
	* Fix build issues with new cmake versions while maintaining
	  compatibility with old cmake.
	* Fix handling of UTF8 window/icon titles.
	* Fix issue with some X11 window managers not properly restoring
	  iconified windows (send _NET_ACTIVE_WINDOW EWMH client message).
	* Fix build issues with C23 compilers (empty argument list semantics).
	* Fix compatibility with older versions of windows which don't have
	  RAWHID support (before XP), by loading the entry points dynamically.
	* Fix glutInitDisplayString parsing of "aux", and add =N parsing support
	  to specify samples and auxbufs.
	* Various fixes and improvements in the GameCube/Wii backend.
	* Altbuild support for Solaris 2.6/SUN Workshop C.
	* Started conversion of documentation from the website to markdown in
	  the source tree: doc/api.md
	* Added the original GLUT manpages, with permission from Mark Kilgard.
	* New demos: accum, vsync, and windows.
	* Cleanup of some old and no longer relevant, or redundant comments in
	  the source code.
	* Removed some out of date README files, and updated others.

2024-06-08  John Tsiombikas <nuclear@member.fsf.org>

	freeglut 3.6 changes:

	* New platforms: Nintendo Gamecube and Nintendo Wii.
	* Minimum cmake version raised to 3.1.
	* Make XInput an optional dependency.
	* Fix incorrect modifier bit mapped to GLUT_ACTIVE_SUPER on X11.
	* Add support for ARM64 MSVC targets.
	* Fix for unicode builds on windows.
	* Fix build on some versions of MinGW carrying an incorrect winuser.h.
	* Fix menu-related memory leak when an error occurs.
	* Various build improvements & fixes.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Wang Mingyu
5e84800e96
sip: upgrade 6.15.0 -> 6.15.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Wang Mingyu
71bc6204de
python3-apt: upgrade 3.0.0 -> 3.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
1f221d31da
mcelog: upgrade 207 -> 208
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
975dbdae13
lvm2: upgrade 2.03.37 -> 2.03.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
9c4cea9772
libopus: upgrade 1.5.2 -> 1.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
22a030a6a9
liblogging: upgrade 1.0.6 -> 1.0.8
Changelog:
==========
- build fix with newer compilers
- builds again on Solaris
- some code cleanup, which prevented build with newer compilers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
46a3126084
libdecor: upgrade 0.2.4 -> 0.2.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
bbb7aa23a5
gpsd: upgrade 3.27 -> 3.27.1
Fixes for two CVE.  Parsing failures on malicious packets.
    CVE-2025-67268 - Heap-based Out-of-bounds Write, NMEA2000
    CVE-2025-67269 - Integer Underflow, NovAtel

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
f1407f17be
fuse3: upgrade 3.17.4 -> 3.18.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
03784baa9c
exiftool: upgrade 13.43 -> 13.44
Changelog:
============
- Added read support for Kandao KVAR files
- Added a few new Panasonic tags
- Added a new XMP-crs tag
- Added a few new Matroska tags
- Added a few values related to the new RAW file types for the Sony ILCE-7M5
- Decode a few new PhaseOne tags
- Decode timed GPS and other metadata from Kandao MP4 videos
- Improvements to family 1 and 5 groups for tags in Matroska videos, and
  prioritize top-level tags when duplicates exist
- Assume a default TimecodeScale of 1ms for MKV videos
- Patched to avoid runtime warning when parsing corrupted QuickTime data
- Fixed decoding of ShutterCount for Sony ILCE-7M

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Wang Mingyu
6f41c5872d
cryptsetup: upgrade 2.8.1 -> 2.8.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
1a4dcfca3e
gensio: upgrade 2.8.15 -> 3.0.1
Release notes:
3.0.1:
Fix: Problems with IPv6 compatibility and running without a fully working network.
Fix: The permissions of the PTY were not set correctly with gtlsshd.
Fix: Some issues building under MSYS2 were fixed.
Enhancement: A "chardelay" gensio is added. This is basically the same as the Nagle
  algorithm in TCP, but it works on other things, like UDP and relpkt, to make
  transfer more efficient on those.
Enhancement: You can use "gsh" instead of "gtlssh" for a shorter name.
  Lots of little documentation updates.

3.0.0:
The only major thing is all the deprecated sergensio code has been removed.
There are also some minor bug fixes, some documentation improvements, some minor
  improvements, and a bug fix around ax25 where it was reporting the close of the
  last channel too soon.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
d22c8fa290
ace: upgrade 8.0.2 -> 8.0.5
Changelog:
8.0.5:
Fixed building ACE for Android with uses_wchar=1
Add support for parallel make using Embarcadero bcc64x compiler
Fixed compile errors when C++23 is enabled
Updated thread name support to work with older Windows versions

8.0.4:
Fixed compile errors in the ACE core when compiled without thread
support (only core of ACE compiled and not tested)

8.0.3:
Deprecated ACE_Copy_Disabled in favor of deleted copy/assignment
Replaced usage of ACE_MIN and ACE_MAX with std::min/std::max
Add support for abstract paths to ACE_UNIX_ADDR
Improve support for 64bit file sizes
Minor fixes to ACE logging classes
Use C++11 default for more classes
GCC versions less than 9 and Clang versions less than 12 are no longer tested in GitHub Actions CI
Dropped support for Embarcadero C++ Builder bcc32c and bcc64 compilers
Updated support for Green Hills INTEGRITY and INTEGRITY-178 tuMP RTOS. Tested on INTEGRITY 11.4.6 and INTEGRITY-178 5.0.0.
Thread names given to ACE_OS::thr_create are now passed down to the OS on Windows and on INTEGRITY.

https://github.com/DOCGroup/ACE_TAO/releases

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:24 -08:00
Liu Yiding
3b77edcab3
flatpak: upgrade 1.17.0 -> 1.17.2
1. Changelog:
    https://github.com/flatpak/flatpak/releases/tag/1.17.2

2. Update 0001-flatpak-pc-add-pc_sysrootdir.patch for 1.17.2

3. Remove http_backend related options as it was removed in 1.17.2

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:42 -08:00
Liu Yiding
8e285b64d0
rwmem: upgrade 1.2 -> 2.0
2. Pyrwmem and static-libc build option has been removed in 2.0.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:42 -08:00
Liu Yiding
6d7dfb808d
polkit: upgrade 126 -> 127
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Liu Yiding
f33ce214b6
mpv: upgrade 0.40.0 -> 0.41.0
1.Changelog:
  https://github.com/mpv-player/mpv/releases/tag/v0.41.0

2.Drop 0001-mpv-fix-build-with-ffmpeg-8.0.patch as it was merged in 0.41.0.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Liu Yiding
aff45d811c
flatbuffers: upgrade 25.9.23 -> 25.12.19
Changelog:
  https://github.com/google/flatbuffers/releases/tag/v25.12.19

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-23 12:22:41 -08:00
Gyorgy Sarvari
2ef5be2471
ptest-packagelist.inc: sort packages alphabetically
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:59 -08:00
Gyorgy Sarvari
ae5a3b889d
uriparser: add ptest support
It takes about a second to execute.

The test suite is covered by a different license (lgpl 2.1+) than the
main recipe (3-clause bsd).

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-22T19:34
BEGIN: /usr/lib/uriparser/ptest
[==========] Running 407 tests from 35 test suites.
[----------] Global test environment set-up.
[----------] 14 tests from CopyUriSuite
PASS:  CopyUriSuite.ErrorSourceUriNull
PASS:  CopyUriSuite.ErrorDestUriNull
[...many lines...]
PASS:  SetUserInfo.UriWithoutHostNonNullRejected
[----------] 2 tests from VersionSuite
PASS:  VersionSuite.EnsureVersionDefinesInSync
PASS:  VersionSuite.EnsureRuntimeVersionAsExpected
[----------] Global test environment tear-down
[==========] 407 tests from 35 test suites ran.
[  PASSED  ] 407 tests.
DURATION: 1
END: /usr/lib/uriparser/ptest
2025-12-22T19:34
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Gyorgy Sarvari
eb7b920572
uriparser: upgrade 0.9.8 -> 1.0.0
Contains fix for CVE-2025-67899

License-Update: license was moved to subfolder. There is no hash change.

Changelog:
https://github.com/uriparser/uriparser/blob/uriparser-1.0.0/ChangeLog

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Gyorgy Sarvari
6ff9252484
nodejs: remove extra CVE_PRODUCT
CVE_PRODUCT is specified twice - the second instance only duplicates one
value from the first instance.

Remove this extra CVE_PRODUCT.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 18:20:58 -08:00
Mingli Yu
70126d7110
switchtec-user: Correct SRCREV
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-22 06:58:46 -08:00
Wang Mingyu
7a34d7963e
fluentbit: upgrade 4.2.0 -> 4.2.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 23:29:18 -08:00
Dmitry Baryshkov
06b40fa396
vulkan-cts: upgrade 1.4.4.2 -> 1.4.5.0
Upgrade Vulkan CTS, adding support for new extensions and fixing some
older bugs, e.g. compatibility with ARMv7 (thus dropping the patches,
applied upstream) or with Vulkan 1.0.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 23:29:18 -08:00
Jason Schonberg
629d796af4
php: upgrade 8.5.0 -> 8.5.1
This is a security release.

Changelog: https://www.php.net/ChangeLog-8.php#8.5.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:05 -08:00
Frede Hoey Braendstrup
84be0a8f34
dbus-cxx: upgrade 2.5.2 -> 2.6.0
Signed-off-by: Frede Hoey Braendstrup <frederikbraendstrup@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:05 -08:00
Wang Mingyu
31b3c8bec5
valkey: upgrade 9.0.0 -> 9.0.1
0001-src-config.h-Enable-HAVE_ARM_NEON-on-AArch64.patch
removed since it's included in 9.0.1

Changelog:
===========
- Authenticate slot migration client on source node to internal user
- Bug fix: reset io_last_written on c->buf resize to prevent stale pointers
- Sentinel: fix regression requiring "+failover" ACL in failover path
- Cluster: Avoid usage of light weight messages to nodes with not ready bidirectional links
- Send duplicate multi meet packet only for node which supports it in mixed clusters
- Fix: LTRIM should not call signalModifiedKey when no elements are removed
- Fix build on some 32-bit ARM by only using NEON on AArch64
- Fix deadlock in IO-thread shutdown during panic
- Fix COMMANDLOG large-reply when using reply copy avoidance
- Fix CLUSTER SLOTS crash when called from module timer callback

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
7354926b8d
switchtec-user: upgrade 4.2 -> 4.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
b21de11dee
osinfo-db: upgrade 20250606 -> 20251212
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
1d33fb39d9
microsoft-gsl: upgrade 4.2.0 -> 4.2.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
2fdab67ace
makeself: upgrade 2.6.0 -> 2.7.1
Changelog:
============
- Base64 encoding now runs after compression, consistent with other
  post-compression encryption/encoding options.
- Documentation updated to reflect that compression can be combined with
  encryption/encoding.
- Compression now precedes encryption so both can be enabled together.
- Signing passphrases are masked in stored metadata.
- Added coverage for combined encryption + compression flows.
- Access archive name from script
- pre-extraction script execution in combination with --notemp

-Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00