36553 Commits

Author SHA1 Message Date
Wang Mingyu
31b3c8bec5
valkey: upgrade 9.0.0 -> 9.0.1
0001-src-config.h-Enable-HAVE_ARM_NEON-on-AArch64.patch
removed since it's included in 9.0.1

Changelog:
===========
- Authenticate slot migration client on source node to internal user
- Bug fix: reset io_last_written on c->buf resize to prevent stale pointers
- Sentinel: fix regression requiring "+failover" ACL in failover path
- Cluster: Avoid usage of light weight messages to nodes with not ready bidirectional links
- Send duplicate multi meet packet only for node which supports it in mixed clusters
- Fix: LTRIM should not call signalModifiedKey when no elements are removed
- Fix build on some 32-bit ARM by only using NEON on AArch64
- Fix deadlock in IO-thread shutdown during panic
- Fix COMMANDLOG large-reply when using reply copy avoidance
- Fix CLUSTER SLOTS crash when called from module timer callback

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
7354926b8d
switchtec-user: upgrade 4.2 -> 4.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
70bf92a7b3
strongswan: upgrade 6.0.3 -> 6.0.4
Changelog:
==========
- Fixed a vulnerability in the NetworkManager plugin charon-nm that potentially
  allows using credentials of other local users.
- Concurrent requests to fetch the same CRL URI by multiple threads are now
  combined.
- Increased the max. supported length for section names in swanctl.conf to 256.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
2c0a4edb58
python3-tzdata: upgrade 2025.2 -> 2025.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
8ba97b6646
python3-tornado: upgrade 6.5.2 -> 6.5.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
f95039cd4b
python3-sqlalchemy: upgrade 2.0.44 -> 2.0.45
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:04 -08:00
Wang Mingyu
50f6252da9
python3-nanobind: upgrade 2.9.2 -> 2.10.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:03 -08:00
Wang Mingyu
335d2486ed
python3-matplotlib: upgrade 3.10.7 -> 3.10.8
Changelog:
===========
- Properly allow freethreaded mode in the MacOS backend
- Better error handling for MacOS backend

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:03 -08:00
Wang Mingyu
ac2879c276
python3-fastapi: upgrade 0.124.0 -> 0.124.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:03 -08:00
Wang Mingyu
ff6283e627
python3-coverage: upgrade 7.12.0 -> 7.13.0
Changelog:
============
- Feature: coverage.py now supports .coveragerc.toml
- Fix: we now include a permanent .pth file which is installed with the code
- Deprecated: when coverage.py is installed, it creates three command entry
  points: coverage, coverage3, and coverage-3.10 (if installed for Python
  3.10). The second and third of these are not needed and will eventually be
  removed. They still work for now, but print a message about their deprecation.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:03 -08:00
Wang Mingyu
99022c28b7
python3-cachetools: upgrade 6.2.2 -> 6.2.3
Changelog:
==========
- Improve documentation regarding @cachedmethod with condition parameter.
- Minor style and readability improvements.
- Modernize build environment.
- Update CI environment.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:03 -08:00
Wang Mingyu
5e3cbe73ed
python3-black: upgrade 25.11.0 -> 25.12.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:03 -08:00
Wang Mingyu
8f50eabb81
python3-aiodns: upgrade 3.6.0 -> 3.6.1
Changelog:
  Pin pycares to < 5

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
b21de11dee
osinfo-db: upgrade 20250606 -> 20251212
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
1d33fb39d9
microsoft-gsl: upgrade 4.2.0 -> 4.2.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
2fdab67ace
makeself: upgrade 2.6.0 -> 2.7.1
Changelog:
============
- Base64 encoding now runs after compression, consistent with other
  post-compression encryption/encoding options.
- Documentation updated to reflect that compression can be combined with
  encryption/encoding.
- Compression now precedes encryption so both can be enabled together.
- Signing passphrases are masked in stored metadata.
- Added coverage for combined encryption + compression flows.
- Access archive name from script
- pre-extraction script execution in combination with --notemp

-Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
6c3cd83b8d
libmime-types-perl: upgrade 2.29 -> 2.30
Changelog:
============
Fixes:
- no undef when simplifying illegal type

Improvements:
- add bugtracker to meta
- better OO use of attributes.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
817a31b680
freerdp3: upgrade 3.19.0 -> 3.19.1
Changelog:
===========
- [core,transport] improve SSL error logging
- [utils,helpers] fix freerdp_settings_get_legacy_config_path
- From stdin and sdl-creds improve
- [crypto,certificate] sanitize hostnames
- [channels,drdynvc] propagate error in dynamic channel
- [CMake] make Mbed-TLS and LibreSSL experimental
- Json fix
- rdpecam: send sample only if it's available
- [channels,rdpecam] allow MJPEG frame skip and direct passthrough
- [winpr,utils] explicit NULL checks in jansson WINPR_JSON_ParseWithLength
- [packaging,flatpak] remove xprop

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:02 -08:00
Wang Mingyu
abd33e184a
babl: upgrade 0.1.116 -> 0.1.118
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:01 -08:00
Martin Schwan
16493d4c1d
thingsboard-gateway: upgrade 3.7.4 -> 3.8.0
With thingsboard-gateway 3.8.0, the source URI must be set to the
project Git repository, as source releases are no longer provided via
PyPi for this project.

Signed-off-by: Martin Schwan <m.schwan@phytec.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:01 -08:00
Yi Zhao
73a3d53c6b
tk: upgrade 9.0.2 -> 9.0.3
ChangeLog:
https://wiki.tcl-lang.org/page/Changes+in+Tcl%2FTk+9.0.3

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:01 -08:00
Gyorgy Sarvari
6ba3a13cce
zsync-curl: update to latest revision
Drop the incorporated patches.

Shortlog:
00141c2806...e0a7bbbcc1

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:01 -08:00
Liu Yiding
d39a37da7d
python3-txaio: upgrade 25.12.1 -> 25.12.2
LICENSE CHKSUM has been changed as title was added in new LICENSE file.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-21 08:54:01 -08:00
Liu Yiding
3610506794
double-conversion: upgrade 3.3.1 -> 3.4.0
Drop 0001-allow-build-with-cmake-4.patch as it was merged upstream.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:03 -08:00
Liu Yiding
c9fb53c552
libopusenc: upgrade 0.2.1 -> 0.3
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:03 -08:00
Liu Yiding
31b24cfe39
libgsf: upgrade 1.14.53 -> 1.14.54
Update 0001-configure.ac-drop-a-copy-paste-of-introspection.m4-m.patch for 1.14.54.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:02 -08:00
Gyorgy Sarvari
1545689c4a
python3-pyro5: add recipe
Pyro enables you to build applications in which objects can talk to each
other over the network, with minimal programming effort.

Successor to the python3-pyro4 package - but this supports modern Python,
and still maintained (under the same umbrella that developed pyro4 also).

Ptest takes around a minute to execute. Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-16T17:48
BEGIN: /usr/lib/python3-pyro5/ptest
PASS: tests/test_api.py:test_api
PASS: tests/test_client.py:TestProxy.testBasics
PASS: tests/test_client.py:TestProxy.testProxyCopy
[...many lines...]
PASS: tests/test_threadpool.py:TestThreadPool.testClose
PASS: tests/test_threadpool.py:TestThreadPool.testScaling
PASS: tests/test_threadpool.py:TestThreadPoolServer.testServerPoolFull
============================================================================
Testsuite summary
# TOTAL: 415
# PASS: 410
# SKIP: 5
# XFAIL: 0
# FAIL: 0
# XPASS: 0
# ERROR: 0
DURATION: 60
END: /usr/lib/python3-pyro5/ptest
2025-12-16T17:49
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:02 -08:00
Gyorgy Sarvari
8820efb445
python3-pyro4: drop recipe
pyro4 is not maintained anymore, and it doesn't work with Python 3.11
fully either - and sure enough, when I tried to set up ptests with
Python 3.13, I got many failures.

Drop the recipe.

(There is an actively maintained successor, Pyro5 - new recipe should be
somewhere next to this patch.)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:02 -08:00
Gyorgy Sarvari
069f1827d0
python3-pyconnman: add ptest support
It takes about a second to execute. Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-16T16:32
BEGIN: /usr/lib/python3-pyconnman/ptest
PASS: test_agent.AgentTest.test_simple_wifi_agent
PASS: test_manager.ConnManagerTest.test_agent_registration
dbus.Dictionary({dbus.String('State'): dbus.String('online...
[SNIP... debug log... SNIP]
dbus.Dictionary({dbus.String('Connected'): dbus.Boolean(...
=========================================================
PASS: test_technology.ConnTechnologyTest.test_scan

============================================================================
Testsuite summary
DURATION: 0
END: /usr/lib/python3-pyconnman/ptest
2025-12-16T16:32
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:02 -08:00
Gyorgy Sarvari
8fc1b929d8
python3-priority: add ptest support
It takes under 5s to execute. Sample output:

qemux86-64 login: root
root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-16T16:00
BEGIN: /usr/lib/python3-priority/ptest
PASS: test/test_priority.py:TestStream.test_stream_repr
PASS: test/test_priority.py:TestStream.test_streams_are_well_ordered
PASS: test/test_priority.py:TestStream.test_stream_ordering
[...many lines...]
PASS: test/test_priority.py:TestPriorityTreeManual.test_maximum_streams_with_bad_int_is_error[-50]
PASS: test/test_priority.py:TestPriorityTreeOutput.test_period_of_repetition
PASS: test/test_priority.py:TestPriorityTreeOutput.test_priority_tree_distribution
PASS: ../../python3.13/site-packages/hypothesis/stateful.py:TestPriorityTreeStateful.runTest
============================================================================
Testsuite summary
DURATION: 4
END: /usr/lib/python3-priority/ptest
2025-12-16T16:00
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:02 -08:00
Gyorgy Sarvari
75c9a73add
python3-hyperframe: add ptest support
It takes about a second to execute. Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-16T15:55
BEGIN: /usr/lib/python3-hyperframe/ptest
SKIP: tests/test_external_collection.py:TestExternalCollection.test[NOTSET] # SKIP got empty parameter set for (tc_filepath)
PASS: tests/test_flags.py:TestFlags.test_add
PASS: tests/test_flags.py:TestFlags.test_remove
[...many lines...]
PASS: tests/test_frames.py:TestAltSvcFrame.test_altsvc_with_unicode_origin_fails
PASS: tests/test_frames.py:TestAltSvcFrame.test_altsvc_with_unicode_field_fails
PASS: tests/test_frames.py:TestExtensionFrame.test_repr
============================================================================
Testsuite summary
DURATION: 0
END: /usr/lib/python3-hyperframe/ptest
2025-12-16T15:55
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:02 -08:00
Gyorgy Sarvari
cdfcdb6da5
python3-hpack: add ptest support
The tests need about 3s to execute.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-16T15:48
BEGIN: /usr/lib/python3-hpack/ptest
PASS: tests/test_encode_decode.py:TestIntegerEncoding.test_encoding_10_with_5_bit_prefix
PASS: tests/test_encode_decode.py:TestIntegerEncoding.test_encoding_1337_with_5_bit_prefix
PASS: tests/test_encode_decode.py:TestIntegerEncoding.test_encoding_42_with_8_bit_prefix
[...many lines...]
PASS: tests/test_table.py:TestHeaderTable.test_size
PASS: tests/test_table.py:TestHeaderTable.test_shrink_maxsize_is_zero
PASS: tests/test_table.py:TestHeaderTable.test_shrink_maxsize
============================================================================
Testsuite summary
DURATION: 3
END: /usr/lib/python3-hpack/ptest
2025-12-16T15:48
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:01 -08:00
Gyorgy Sarvari
bd9f2fef17
python3-h2: add ptest support
It takes around 10s to execute the suite.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-16T15:36
BEGIN: /usr/lib/python3-h2/ptest
PASS: tests/test_basic_logic.py:TestBasicClient.test_begin_connection
PASS: tests/test_basic_logic.py:TestBasicClient.test_sending_headers
PASS: tests/test_basic_logic.py:TestBasicClient.test_sending_data
[...many lines...]
PASS: tests/test_utility_functions.py:test_size_limit_dict_limit
PASS: tests/test_utility_functions.py:test_size_limit_dict_limit_init
PASS: tests/test_utility_functions.py:test_size_limit_dict_no_limit
============================================================================
Testsuite summary
DURATION: 10
END: /usr/lib/python3-h2/ptest
2025-12-16T15:36
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:01 -08:00
Gyorgy Sarvari
fae6fe9b41
python3-django: upgrade 4.2.26 -> 4.2.27
Contains fix for CVE-2025-13372 and CVE-2025-64460

Changelog: https://github.com/django/django/blob/4.2.27/docs/releases/4.2.27.txt

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:01 -08:00
Gyorgy Sarvari
2538918df1
python3-django: upgrade 5.2.8 -> 5.2.9
Includes fix for CVE-2025-13372 and CVE-2025-64460

Changelog: https://github.com/django/django/blob/5.2.9/docs/releases/5.2.9.txt

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:01 -08:00
Gyorgy Sarvari
584fa06f3b
fetchmail: upgrade 6.5.2 -> 6.6.2
Contains fix for CVE-2025-61962.

License-Update: added a warning about linking against the newly relicensed WolfSSL.

Changelog: https://gitlab.com/fetchmail/fetchmail/-/blob/6.6.2/NEWS

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-20 11:41:01 -08:00
Gyorgy Sarvari
70a2b417c6
unbound: complete ptest support
The recipe had already an almost working ptest config which
wasn't enabled, it just needed some small fixes to make it work:
correct the output of the run-ptest script, and install some
extra testdata.

Execution is quick, single digit seconds:

root@qemux86-64:/usr/lib/unbound/ptest/tests# ptest-runner
START: ptest-runner
2025-12-16T11:53
BEGIN: /usr/lib/unbound/ptest
Start of unbound 1.24.2 unit test.
test authzone functions
test negative cache functions
test ub_random functions
[...many lines...]
PASS: ./testdata/val_unsecds_negcache.rpl
PASS: ./testdata/val_unsecds_qtypeds.rpl
PASS: ./testdata/val_wild_pos.rpl
PASS: ./testdata/version_bind.rpl
PASS: ./testdata/version_bind_hide.rpl
PASS: ./testdata/views.rpl
DURATION: 4
END: /usr/lib/unbound/ptest
2025-12-16T11:53
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:34 -08:00
Gyorgy Sarvari
0df484a922
unbound: upgrade 1.22.0 -> 1.24.2
Contains fixes for CVE-2025-11411 and CVE-2025-5994.

Drop patch that was incorporated in this release.

Changelogs:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.24.2
https://github.com/NLnetLabs/unbound/releases/tag/release-1.24.1
https://github.com/NLnetLabs/unbound/releases/tag/release-1.24.0
https://github.com/NLnetLabs/unbound/releases/tag/release-1.23.1
https://github.com/NLnetLabs/unbound/releases/tag/release-1.23.0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:34 -08:00
Gyorgy Sarvari
598176e1cb
libcoap: ignore CVE-2025-50518
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-50518

The vulnerability is disputed by upstream, because the vulnerability
requires a user error, incorrect library usage. See also an upstream
discussion in a related (rejected) PR: https://github.com/obgm/libcoap/pull/1726

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:34 -08:00
Tom Geelen
b91e86f73a
python3-chromecast: upgrade 14.0.7 -> 14.0.9
Changelog: https://github.com/home-assistant-libs/pychromecast/releases/tag/14.0.9

Drop obsolete patches.

Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:34 -08:00
Tom Geelen
063ae95c56
python3-aiohttp: add optional PACKAGECONFIG for the extras mentioned in the build requirements
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:34 -08:00
Tom Geelen
120f908fa0
python3-aiohttp: add BBCLASSEXTEND: native and nativesdk to the recipe
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:34 -08:00
Tom Geelen
f11695a304
python3-aiohttp: upgrade 3.12.15 -> 3.12.2
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:33 -08:00
Tom Geelen
1b8afacbda
python3-async-timeout: add BBCLASSEXTEND for native and nativesdk
Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:33 -08:00
Gyorgy Sarvari
30d2c25a8d
openvpn: upgrade 2.6.16 -> 2.6.17
Changelog:
- Windows/interactive service: fix erroneous exit on error that could
  be used by a local Windows users to achieve a local denial-of-service
  (CVE-2025-13751)
- Windows/interactive service: improve service pipe robustness against
  file access races (uuid) and access by unauthorized processes (ACL).
  upgrade bundled build instruction (vcpkg and patch) for pkcs11-helper
  to 1.31, fixing a parser bug

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:33 -08:00
Gyorgy Sarvari
df462075be
minio: ignore irrelevant CVEs
The minio umbrella covers multiple projects. The recipe itself builds
"minio client", which is a set of basic tools to query data from
"minio server" - like ls, mv, find...

The CVEs were files against minio server. Looking at the go mod list,
this recipe doesn't use minio server even as a build dependency - so ignore
the CVEs.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:33 -08:00
Gyorgy Sarvari
88ebc14186
botan: add ptest support
The test suite takes just around 30s to execute.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-15T19:02
BEGIN: /usr/lib/botan/ptest
PASS: AES-128/CCM(10,2)
PASS: AES-128/CCM(12,2)
PASS: AES-128/CCM(14,2)
PASS: AES-128/CCM(16,2)
PASS: AES-128/CCM(16,3)
PASS: AES-128/CCM(16,4)
[...lots of lines...]
PASS: XMSS/SHAKE_16_512 verify invalid signature
PASS: XMSS/SHAKE_20_256 verify invalid signature
PASS: XMSS/SHAKE_20_512 verify invalid signature
PASS: ZFEC encoding/decoding
Tests complete ran 3375688 tests in 28.38 sec all tests ok
DURATION: 29
END: /usr/lib/botan/ptest
2025-12-15T19:02
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Tested also by forcing some tests to fail, which was also displayed correctly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:33 -08:00
Gyorgy Sarvari
a45d5c0f2e
imagemagick: upgrade 7.1.2-8 -> 7.1.2-11
Contains fix for CVE-2025-65955

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:32 -08:00
Gyorgy Sarvari
8217b90e94
postgresql: upgrade 17.6 -> 17.7
It contains fixes for CVE-2025-12817 and CVE-2025-12818.

Changelog:
https://www.postgresql.org/docs/release/17.7/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:32 -08:00
Gyorgy Sarvari
a275078cbe
fio: ignore CVE-2025-10824
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-10824

The upstream maintainer wasn't able to reproduce the issue[1],
and the related bug is closed without further action.

[1]: https://github.com/axboe/fio/issues/1981

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-16 19:57:32 -08:00