36537 Commits

Author SHA1 Message Date
Markus Volk
0d52ba2fed
gnome-software: update 49.1 -> 49.2
- inherit pkgconfig

Version 49.2
~~~~~~~~~~~~
Released: 2025-11-20

This is a stable release with the following changes:
 * Fixed version history sometimes not showing for flatpak apps

This release also updates translations:
 * Bokmål, Norwegian (Brage Fuglseth)
 * Catalan (Victor Dargallo)
 * Friulian (Fabio Tomat)
 * Greek, Modern (1453-) (Efstathios Iosifidis)
 * Persian (Danial Behzadi)
 * Romanian (Antonio Marin)
 * Serbian (Милош Поповић)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 16:25:02 -08:00
Markus Volk
0127e0b1e8
gnome-software: fix build with flatpak 1.17.1
fixes:
../sources/gnome-software-49.1/meson.build:218:32: ERROR: Could not get pkg-config variable and no default provided for <PkgConfigDependency flatpak: True ['>= 1.14.1']>

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 16:25:02 -08:00
Gyorgy Sarvari
c3c2495e9f
cifs-utils: fix broken PACKAGECONFIGs
Some PACKAGECONFIGs (cifsidmap, cifsacl, pam) were failing to build since
a while, erroring out with:

| ../sources/cifs-utils-7.4/resolve_host.c:23:10: fatal error: config.h: No such file or directory
|    23 | #include "config.h"
|       |          ^~~~~~~~~~
| compilation terminated.

The config.h header is generated in the root of build folder, and it seems
that the recipe can't be built 100% out of the source tree.

To avoid this issue, add ${B} as an include folder to CFLAGS, so it finds
the required header.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:59 -08:00
Gyorgy Sarvari
f2200178ed
cifs-utils: upgrade 7.0 -> 7.4
Contains fix for CVE-2025-2312

The recipe installs two scripts in bindir - this is nothing new.
But the shebang has changed from "/usr/bin/env python3" to
"/usr/bin/python3" - these were always python scripts, but
they weren't recognized as such during the QA checks, and
python wasn't installed as a runtime dependency.

Now QA check is complaining about missing python in RDEPENDS.
To avoid mandatory python installation, package the scripts
separately in cifs-utils-scripts package.

Shortlog:
cifs-utils: bump version to 7.4
mount.cifs: retry mount on -EINPROGRESS
cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP
cifscreds: use <libgen.h> for basename
getcifsacl, setcifsacl: use <libgen.h> for basename
cifs.upcall: fix memory leaks in check_service_ticket_exits()
cifs-utils: bump version to 7.3
Fix regression in mount.cifs with guest mount option
resolve_host.c: Initialize site_name
cldap_ping: Fix socket fd leak
cifs-utils: bump version to 7.2
getcifsacl: fix return code check for getting full ACL
cifs-utils: add documentation for upcall_target
cifs-utils: avoid using mktemp when updating mtab
cldap_ping.c: add missing <sys/types.h> include
configure.ac: libtalloc is now mandatory
cifscreds: allow user to set the key's timeout
cifscreds: use continue instead of break when matching commands
Do not pass passwords with sec=none and sec=krb5
docs: add esize description
docs: add max_cached_dirs description
docs: update actimeo description
Fix compiler warnings in mount.cifs
CIFS.upcall to accomodate new namespace mount opt
cifs-utils: Skip TGT check if valid service ticket is already available
use enums to check password or password2 in set_password, get_password_from_file and minor documentation additions
cifs-utils: support and document password2 mount option
smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo
cifs-utils: bump version to 7.1
cifs: update documentation for sloppy mount option
docs: add closetimeo description
docs: add compress description
checkopts: update it to work with latest kernel version
cifs-utils: add documentation for multichannel and max_channels
cifs-utils: smbinfo: add gettconinfo command
Implement CLDAP Ping to find the closest site
mount.cifs.rst: update section about xattr/acl support
mount.cifs.rst: add missing reference for sssd
getcifsacl, setcifsacl: add missing <endian.h> include for le32toh
getcifsacl, setcifsacl: add missing <linux/limits.h> include for XATTR_SIZE_MAX
cifs-utils: Make automake treat /sbin as exec, not data
pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog()
cifs.upcall: fix UAF in get_cachename_from_process_env()
cifs-utils: add documentation for acregmax and acdirmax
setcifsacl: Fix uninitialized value.
Use explicit "#!/usr/bin/python3"

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:59 -08:00
Gyorgy Sarvari
4924e89bb7
tigervnc: ignore CVE-2025-26594...26601
Ignore the following CVEs: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601

Details:
https://nvd.nist.gov/vuln/detail/CVE-2025-26594
https://nvd.nist.gov/vuln/detail/CVE-2025-26595
https://nvd.nist.gov/vuln/detail/CVE-2025-26596
https://nvd.nist.gov/vuln/detail/CVE-2025-26597
https://nvd.nist.gov/vuln/detail/CVE-2025-26598
https://nvd.nist.gov/vuln/detail/CVE-2025-26599
https://nvd.nist.gov/vuln/detail/CVE-2025-26600
https://nvd.nist.gov/vuln/detail/CVE-2025-26601

TigerVNC compiles its own xserver, this is why these CVEs are associated
with it - despite the vulnerabilities being in xserver.

All of these vulnerabilities were fixed by the same PR[1], which has
been part of xserver since version 21.1.16 (the currently used xserver
version in TigerVNC is 21.1.18).

Due to this, ignore these vulnerabilities, and just mark them as patched.

[1]: https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1830

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
62a78f8ba7
tigervnc: ignore CVE-2023-6478
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-6478

TigerVNC compiles its own xserver, this is why this CVE is associated
with it - despite the vulnerability being in xserver.

The vulnerability was fixed by [1] (from the nvd report), which has been
backported[2] to the xserver version used by the recipe - so ignore the
CVE, since it's patched already.

[1]: 14f480010a
[2]: 58e83c6839

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
f691f2178b
tigervnc: ignore CVE-2023-6377
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-6377

TigerVNC compiles its own xserver, this is why this CVE is associated
with it - despite the vulnerability being in xserver.

The vulnerability was fixed by [1] (from the nvd report), which has been
backported[2] to the xserver version used by the recipe - so ignore the
CVE, since it's patched already.

[1]: 0c1a93d319
[2]: a7bda3080d

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
fadb9c0570
tigervnc: sync xserver code with oe-core
TigerVNC compiles its own xserver. Synchronize the xserver version
with oe-core.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 11:25:58 -08:00
Gyorgy Sarvari
1aee6a403c
smarty: extend CVE_PRODUCT
Some CVEs assign smarty-php as the vendor to the corresponding CPE.
E.g CVE-2024-35226[1] is tracked with smarty-php:smarty by mitre
(NVD tracks it without CPE).

[1]: https://cveawg.mitre.org/api/cve/CVE-2024-35226

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 07:53:24 -08:00
Gyorgy Sarvari
991a6a866c
dracut: upgrade 108 -> 109
Drop patch that is included in this release.

Changelog: https://github.com/dracut-ng/dracut-ng/releases/tag/109

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 07:53:23 -08:00
Gyorgy Sarvari
37e6936495
libopenmpt: upgrade 0.7.10 -> 0.8.4
Changelog: https://lib.openmpt.org/doc/changelog.html

License-Update: copyright year bump

Ptest passed:
root@qemux86-64:/usr/lib/libopenmpt/ptest# ptest-runner
START: ptest-runner
2025-12-25T09:29
BEGIN: /usr/lib/libopenmpt/ptest
PASS: libopenmpttest
DURATION: 1
END: /usr/lib/libopenmpt/ptest
2025-12-25T09:29
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 07:53:23 -08:00
Yi Zhao
b868008c75
e2tools: fix buildpath in ptest
Remove ${RECIPE_SYSROOT_NATIVE} from config.status to fix QA warning:

ERROR: lib32-e2tools-0.1.2-r0 do_package_qa: QA Issue: File
/usr/lib/e2tools/ptest/build/config.status in package
lib32-e2tools-ptest contains reference to TMPDIR [buildpaths]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 00:13:52 -08:00
Gyorgy Sarvari
a8f10b2aa0
libmpdclient: upgrade 2.22 -> 2.24
Though the original recipe claiumed to be v2.22, actually it was
2.20.

The vala bindings have been dropped, so no need to delete them anymore.

License-Update: The license itself hasn't changed between versions, but
there are a couple of things to note:
- Half of the source files are covered by 2-Clause-BSD, and other half by
  3-Clause-BSD. This has been the case always, but until recently this
  was only specified in the source file headers, and there was a single
  license file with 3-Clause-BSD text. Now there is explicitly a 2-Clause-
  BSD file also.
- The 3-Clase-BSD text was reformatted, and added placeholders for year
  and author. That is causing the hash change for this particular license.

Changelog:
2.24:
* fix missing "mpd_send_list_tag_types_available" in libmpdclient.ld
* support MPD protocol 0.25
  - stringnormalization

2.23:
* support MPD protocol 0.24.0
  - allow window for listplaylist and listplaylistinfo
  - command "playlistlength", "protocol", "stickertypes", "stickernamestypes", "searchplaylist"
  - tag "ShowMovement"
  - new sticker find api
  - new subcommands for "tagtypes": "available", "reset"
* Support open end for mpd_search_add_window
* format floating-point numbers with the POSIX localew

2.22:
* drop the unmaintained Vala bindings
* fix "version.h" conflicts when used as a Meson subproject
* support MPD protocol 0.24.0
  - command "save [create|replace|append]"

2.21:
* meson.build: allow using as a Meson subproject
* add mpd_recv_replay_gain_status()
* support MPD protocol 0.24.0
  - tag "Mood", "TitleSort"
  - "oneshot" consume state
  - allow range in "playlistmove"
  - commands "searchcount", "stickernames"
  - added attribute for songs
  - search: support constraint "added-since"

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 15:18:16 -08:00
Khem Raj
0ecf2814b2
vboxguestdrivers: Upgrade to 7.2.4
This is a maintenance release. The following items were fixed or added:

GUI: Fixed VirtualBox VM Manager crash when host was resuming from sleep (​github:gh-121, ​github:gh-170)
GUI: Updated native language support for Traditional Chinese, Greek, Swedish, Hungarian and Indonesian translations
NAT: Fixed issue when multiple port forwarding rules affected NAT functionality (​github:gh-232)
Linux host and guest: Introduced initial support for kernel 6.18
Linux Guest Additions: Introduced additional fixes for RHEL 9.6 and 9.7 kernels (​github:GH-12)
Windows Guest Additions: Introduced additional fixes for issue when installation was failing in Windows XP SP2 guest (​github:GH-142)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-24 13:31:55 -08:00
Gyorgy Sarvari
f3862b7441
wireplumber: add ptest support
Execution takes <10s.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-24T19:17
BEGIN: /usr/lib/wireplumber/ptest
PASS: ./wp/test-spa-json
PASS: ./wp/test-spa-pod
PASS: ./wp/test-spa-type
PASS: ./wp/test-properties
PASS: ./wp/test-core
PASS: ./wp/test-session-item
PASS: ./wp/test-json-utils
PASS: ./wp/test-events
PASS: ./wp/test-conf
PASS: ./wp/test-transition
PASS: ./wp/test-object-interest
PASS: ./wp/test-metadata
PASS: ./wp/test-object-manager
PASS: ./wp/test-factory
PASS: ./wp/test-settings
PASS: ./wp/test-proxy
PASS: ./wp/test-state
PASS: ./wp/test-component-loader
PASS: 00-test-linking-non-default-device-node.lua
PASS: 01-test-linking-non-default-device-node-capture.lua
PASS: 02-test-linking-default-device-node.lua
PASS: 03-test-linking-default-device-node-capture.lua
PASS: 04-test-linking-defined-device-node-target-object-string.lua
PASS: 05-test-linking-defined-device-node-target-object-int.lua
PASS: 06-test-linking-defined-device-node-target-object-name.lua
PASS: 07-test-linking-defined-device-node-target-object-string-capture.lua
PASS: 08-test-linking-defined-device-node-target-object-int-capture.lua
PASS: 09-test-linking-defined-device-node-target-object-name-capture.lua
PASS: 10-test-linking-defined-device-node-node-target.lua
PASS: 11-test-linking-defined-device-node-node-target-capture.lua
PASS: 12-test-linking-defined-device-node-target-node-metadata.lua
PASS: 13-test-linking-defined-device-node-target-node-metadata-capture.lua
PASS: 14-test-linking-defined-device-node-target-object-metadata.lua
PASS: 15-test-linking-defined-device-node-target-object-metadata-capture.lua
PASS: 16-test-linking-defined-device-node-target-object-int-metadata.lua
PASS: 17-test-linking-defined-device-node-target-object-int-metadata-capture.lua
PASS: 00-test-default-nodes-initial-metadata-update.lua
/usr/lib/wireplumber/ptest
PASS: pod.lua
PASS: json.lua
PASS: json-utils.lua
PASS: monitor-rules.lua
PASS: require.lua
PASS: async-activation.lua
PASS: settings.lua
PASS: event-hooks.lua
PASS: properties.lua
/usr/lib/wireplumber/ptest
PASS: ./wplua/test-wplua
PASS: ./modules/test-file-monitor
PASS: ./modules/test-si-node
PASS: ./modules/test-si-standard-link
PASS: ./modules/test-dbus-connection
PASS: ./modules/test-si-audio-adapter
PASS: ./modules/test-reserve-device
DURATION: 1
END: /usr/lib/wireplumber/ptest
2025-12-24T19:17
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Gyorgy Sarvari
ca7fe11935
wireplumber: upgrade 0.5.11 -> 0.5.13
Changelog:
0.5.13:
Additions & Enhancements:
- Added internal filter graph support for audio nodes, allowing users to
  create audio preprocessing and postprocessing chains without exposing
  filters to applications, useful for software DSP
- Added new Lua Properties API that significantly improves performance by
  avoiding constant serialization between WpProperties and Lua tables,
  resulting in approximately 40% faster node linking
- Added WpIterator Lua API for more efficient parameter enumeration
- Added bash completions for wpctl command
- Added script to find suitable volume control when using role-based policy,
  allowing volume sliders to automatically adjust the volume of the currently
  active role (e.g., ringing, call, media)
- Added experimental HDMI channel detection setting to use HDMI ELD
  information for channel configuration
- Enhanced role-based policy to allow setting preferred target sinks for
  media role loopbacks via policy.role-based.preferred-target
- Enhanced Bluetooth profile autoswitch logic to be more robust and handle
  saved profiles correctly, including support for loopback sink nodes
- Enhanced ALSA monitor to include alsa.* device properties on nodes for
  rule matching
- Optimized stream node linking for common cases to reduce latency when new
  audio/video streams are added
- Improved event dispatcher performance by using hash table registration for
  event hooks, eliminating performance degradation as more hooks are
  registered
- Increased audio headroom for VMware and VirtualBox virtual machines
- Added setting to prevent restoring "Off" profiles via
  session.dont-restore-off-profile property
- Added support for 128 audio channels when compiled with a recent version of
  PipeWire

Fixes:
- Fixed memory leaks and issues in the modem manager module
- Fixed MPRIS module incorrectly treating GHashTable as GObject
- Fixed warning messages when process files in /proc/<pid>/* don't exist,
  particularly when processes are removed quickly
- Fixed MONO audio configuration to only apply to device sink nodes, allowing
  multi-channel mixing in the graph
- Fixed event dispatcher hook registration and removal to avoid spurious
  errors
- Improved logging for standard-link activation failures
- Simplified event-hook interest matching for better performance

0.5.12:
Additions & Enhancements:
- Added mono audio configuration support via node.features.audio.mono
  setting that can be changed at runtime with wpctl
- Added automatic muting of ALSA devices when a running node is removed,
  helping prevent loud audio on speakers when headsets are unplugged
- Added notifications API module for sending system notifications
- Added comprehensive wpctl man page and documentation
- Enhanced object interest handling for PipeWire properties on session items

Fixes:
- Fixed race condition during shutdown in the permissions portal module that
  could cause crashes in GDBus signal handling
- Added device validity check in state-routes handling to prevent issues
  when devices are removed during async operations
- Fixed Log.critical undefined function error in device-info-cache
- Improved device hook documentation and configuration

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Gyorgy Sarvari
199a6a2266
freerdp3: add ptest support
The execution takes under 10s.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-23T11:36
BEGIN: /usr/lib/freerdp3/ptest
PASS: TestSynchInit
PASS: TestSynchEvent
PASS: TestSynchMutex
[...many lines...]
PASS: TestClientRdpFile
PASS: TestClientChannels
PASS: TestClientCmdLine
DURATION: 7
END: /usr/lib/freerdp3/ptest
2025-12-23T11:37
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Gyorgy Sarvari
325928e2ab
freerdp3: upgrade 3.19.0 -> 3.20.0
Contains fix for CVE-2025-68118

Changelog:
3.20.0:
Mingw fixes
[crypto,certificate_data] add some hostname sanitation
[client,common]: Fix loading of rdpsnd channel
[client,sdl] set touch and pen hints

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Khem Raj
e4b25c0fcb
rwmem: Fix tests to build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:31 -08:00
Gyorgy Sarvari
fe1b915f23
crossguid: add ptest support
Execution takes less than a second.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-24T16:06
BEGIN: /usr/lib/crossguid/ptest
0d154108-445a-4d20-9d74-623eb15c0ebe
c79e3cdf-fe16-4a9c-bad2-0fadf5761d05
ac7f9a04-f63f-49ee-a95b-6020378bff6f
All tests passed!
PASS: crossguid-test
DURATION: 0
END: /usr/lib/crossguid/ptest
2025-12-24T16:06
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Gyorgy Sarvari
fa3a2a7193
libmediaart-2.0: add ptest support
Test execution takes about a second.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-24T15:50
BEGIN: /usr/lib/libmediaart-2.0/ptest
TAP version 14
1..31
ok 1 /mediaart/stripping_failures
ok 2 /mediaart/location_null
ok 3 /mediaart/location_path
ok 4 /mediaart/stripping/nothing-to-strip
ok 5 /mediaart/stripping/case-strip
ok 6 /mediaart/stripping/single-char
ok 7 /mediaart/stripping/single-char-case
ok 8 /mediaart/stripping/remove-parenthesis-round
ok 9 /mediaart/stripping/remove-parenthesis-square
ok 10 /mediaart/stripping/remove-parenthesis-squirly
ok 11 /mediaart/stripping/remove-parenthesis-gt-lt
ok 12 /mediaart/stripping/whitespace
ok 13 /mediaart/stripping/whitespace-with-content
ok 14 /mediaart/stripping/messy-title
ok 15 /mediaart/stripping/unbalanced-brackets-square-start
ok 16 /mediaart/stripping/unbalanced-brackets-round-start
ok 17 /mediaart/stripping/unbalanced-brackets-gt-lt-start
ok 18 /mediaart/stripping/unbalanced-brackets-round-end
[...many lines...]
ok 31 /mediaart/process/failures
PASS: mediaart-test
DURATION: 0
END: /usr/lib/libmediaart-2.0/ptest
2025-12-24T15:50
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Gyorgy Sarvari
3f6b25f18a
libmediaart-2.0: upgrade 1.9.6 -> 1.9.7
This is a bugfix release, fixing some memory leaks and compiler warning
(and it also has a couple of commits related to the project's own CI system,
which doesn't affect the application)

Changelog: https://gitlab.gnome.org/GNOME/libmediaart/-/blob/master/NEWS

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Gyorgy Sarvari
238dbfb0b1
libsrtp: upgrade 2.5.0 -> 2.7.0
Changelog:
2.7.0:
- Fix function signature mismatch for srtp_remove_stream
- Fix srtp_unprotect_rtcp_mki when RTP auth != RTCP

2.6.0:
- remove use of pointers to 32bit values
- Cleaning up cmake and enabled more warnings.
- start using const on internal arguments
- Some srtp_driver fixes
- remove travis reference from README.md
- meson.build: implement mbedtls support
- iv length is constant so set only once
- Add x86 SIMD optimizations to crypto datatypes
- Add a missing typedef for stream list ctx
- cmake: Rename TEST_APPS as LIBSRTP_TEST_APPS option
- cmake: Support configuring as subproject

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Jan Vermaete
0b0cbd4c3c
freeglut: version 3.4.0 -> 3.8.0
patch to add support for legacy OpenGL (Thanks Rob Woolley)

| -- Found OpenGL: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot/usr/lib/libGL.so  found components: OpenGL
| -- Found PkgConfig: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot-native/usr/bin/pkg-config (found version "0.29.2")
| CMake Error at /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot-native/usr/share/cmake-4.2/Modules/FindPackageHandleStandardArgs.cmake:290 (message):
|   Could NOT find OpenGL (missing: OPENGL_opengl_LIBRARY)

Changlog:

2025-11-16  John Tsiombikas <nuclear@mutantstargoat.com>

	freeglut 3.8 changes:

	* New experimental Cocoa (native MacOS X) backend.
	* Add glutSwapInterval, to control vsync (currently X11 and win32 only).
	* glutExtensionSupported now also reports platform extensions (GLX/WGL).
	* Fix build issues with new cmake versions while maintaining
	  compatibility with old cmake.
	* Fix handling of UTF8 window/icon titles.
	* Fix issue with some X11 window managers not properly restoring
	  iconified windows (send _NET_ACTIVE_WINDOW EWMH client message).
	* Fix build issues with C23 compilers (empty argument list semantics).
	* Fix compatibility with older versions of windows which don't have
	  RAWHID support (before XP), by loading the entry points dynamically.
	* Fix glutInitDisplayString parsing of "aux", and add =N parsing support
	  to specify samples and auxbufs.
	* Various fixes and improvements in the GameCube/Wii backend.
	* Altbuild support for Solaris 2.6/SUN Workshop C.
	* Started conversion of documentation from the website to markdown in
	  the source tree: doc/api.md
	* Added the original GLUT manpages, with permission from Mark Kilgard.
	* New demos: accum, vsync, and windows.
	* Cleanup of some old and no longer relevant, or redundant comments in
	  the source code.
	* Removed some out of date README files, and updated others.

2024-06-08  John Tsiombikas <nuclear@member.fsf.org>

	freeglut 3.6 changes:

	* New platforms: Nintendo Gamecube and Nintendo Wii.
	* Minimum cmake version raised to 3.1.
	* Make XInput an optional dependency.
	* Fix incorrect modifier bit mapped to GLUT_ACTIVE_SUPER on X11.
	* Add support for ARM64 MSVC targets.
	* Fix for unicode builds on windows.
	* Fix build on some versions of MinGW carrying an incorrect winuser.h.
	* Fix menu-related memory leak when an error occurs.
	* Various build improvements & fixes.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Wang Mingyu
5e84800e96
sip: upgrade 6.15.0 -> 6.15.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Wang Mingyu
9c5e7e5c29
python3-typer: upgrade 0.20.0 -> 0.20.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
ebca0ae79d
python3-tornado: upgrade 6.5.3 -> 6.5.4
Bug fixes
~~~~~~~~~
- The "in" operator for "HTTPHeaders" was incorrectly case-sensitive, causing
  lookups to fail for headers with different casing than the original header name.
  This was a regression in version 6.5.3 and has been fixed to restore the intended
  case-insensitive behavior from version 6.5.2 and earlier.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
f1bdb4e99b
python3-soupsieve: upgrade 2.8 -> 2.8.1
FIX: Changes in tests to accommodate latest Python HTML parser changes.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
aba3856c1e
python3-smbus2: upgrade 0.5.0 -> 0.6.0
Changelog:
==========
- Python 3.14 added.
- Fix SystemError: buffer overflow on Python 3.14+ on 64-bit systems by using
   c_ulong instead of c_uint32 for I2C_FUNCS ioctl.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
8db029f9a5
python3-sdbus: upgrade 0.14.1 -> 0.14.2
Changelog:
===========
- Fix segmentation fault if export handle outlives the exported object.
- Fix some tests failing on slow systems.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
dc39281af5
python3-python-multipart: upgrade 0.0.20 -> 0.0.21
Changelog:
  Add support for Python 3.14 and drop EOL 3.8 and 3.9

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
4389519b6b
python3-pikepdf: upgrade 10.0.2 -> 10.0.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
602a336ae3
python3-nodeenv: upgrade 1.9.1 -> 1.10.0
Changelog:
==========
- Use lowercase lookup for archmap
- Add support for Python 3.13
- Add UV Virtual Environment support
- Use sh instead of bash
- Replace additional use of which(1) with shutil.which()
- Support leading v in .node-version
- Check host platform when finding node version

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
b92546dea2
python3-joblib: upgrade 1.5.2 -> 1.5.3
Changelog:
===========
- The Memory object won't overwrite an already existing .gitignore file in its
  cache directory anymore.
- Harden the safety checks in eval_expr(pre_dispatch) to prevent excessive
  memory allocation and potential crashes by limiting the allowed length of the
  expression and the maximum numeric value of sub-expressions and not evaluating
  expressions with non-numeric literals.
- Vendor cloudpickle 3.1.2 to fix a pickling problem with interactively defined
  abstract base classes and type annotations in Python 3.14+.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
049f50eef4
python3-imgtool: upgrade 2.2.0 -> 2.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
310009aad6
python3-humanize: upgrade 4.14.0 -> 4.15.0
Added
------
- Add locale support for decimal separator in intword
- Add support for Python 3.15

Changed
--------
- Replace pre-commit with prek

Fixed
------
- naturaldelta: round the value to nearest unit that makes sense
- Fix plural form for intword and improve performance
- Replace Exception with more specific FileNotFoundError

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
3f09bcaf54
python3-google-auth: upgrade 2.43.0 -> 2.45.0
Changelog:
=============
Features
---------
- Adding Agent Identity bound token support and handling certificate mismatches
  with retries
- support Python 3.14
- add ecdsa p-384 support
- MDS connections use mTLS
- Implement token revocation in STS client and add revoke() method to
  ExternalAccountAuthorizedUser credentials
- Add shlex to correctly parse executable commands with spaces

Bug Fixes
---------
- Use public refresh method for source credentials in ImpersonatedCredentials
- Add temporary patch to workload cert logic to accomodate Cloud Run
  mis-configuration
- Delegate workload cert and key default lookup to helper function

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
c2710a2df9
python3-filelock: upgrade 3.20.0 -> 3.20.1
Changelog:
 CVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
44c27a5915
python3-cmake: upgrade 4.2.0 -> 4.2.1
Changelog:
==========
- fix: add missing f-string prefix for --parallel bootstrap arg
- fix: workaround issue in lastversion with OpenSSL
- chore(deps): update clang to 21.1.8.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
0cc847b8f7
python3-cachetools: upgrade 6.2.3 -> 6.2.4
Changelog:
  Fix license information displayed on PyPI be using an updated version of twine for uploading.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
71bc6204de
python3-apt: upgrade 3.0.0 -> 3.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
e3e3ffb13f
nbdkit: upgrade 1.45.15 -> 1.46.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
412a7debf1
memcached: upgrade 1.6.39 -> 1.6.40
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
1f221d31da
mcelog: upgrade 207 -> 208
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
975dbdae13
lvm2: upgrade 2.03.37 -> 2.03.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
9c4cea9772
libopus: upgrade 1.5.2 -> 1.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
22a030a6a9
liblogging: upgrade 1.0.6 -> 1.0.8
Changelog:
==========
- build fix with newer compilers
- builds again on Solaris
- some code cleanup, which prevented build with newer compilers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
46a3126084
libdecor: upgrade 0.2.4 -> 0.2.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
bbb7aa23a5
gpsd: upgrade 3.27 -> 3.27.1
Fixes for two CVE.  Parsing failures on malicious packets.
    CVE-2025-67268 - Heap-based Out-of-bounds Write, NMEA2000
    CVE-2025-67269 - Integer Underflow, NovAtel

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
f1407f17be
fuse3: upgrade 3.17.4 -> 3.18.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00