36529 Commits

Author SHA1 Message Date
Gyorgy Sarvari
1aee6a403c
smarty: extend CVE_PRODUCT
Some CVEs assign smarty-php as the vendor to the corresponding CPE.
E.g CVE-2024-35226[1] is tracked with smarty-php:smarty by mitre
(NVD tracks it without CPE).

[1]: https://cveawg.mitre.org/api/cve/CVE-2024-35226

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 07:53:24 -08:00
Gyorgy Sarvari
991a6a866c
dracut: upgrade 108 -> 109
Drop patch that is included in this release.

Changelog: https://github.com/dracut-ng/dracut-ng/releases/tag/109

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 07:53:23 -08:00
Gyorgy Sarvari
37e6936495
libopenmpt: upgrade 0.7.10 -> 0.8.4
Changelog: https://lib.openmpt.org/doc/changelog.html

License-Update: copyright year bump

Ptest passed:
root@qemux86-64:/usr/lib/libopenmpt/ptest# ptest-runner
START: ptest-runner
2025-12-25T09:29
BEGIN: /usr/lib/libopenmpt/ptest
PASS: libopenmpttest
DURATION: 1
END: /usr/lib/libopenmpt/ptest
2025-12-25T09:29
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 07:53:23 -08:00
Yi Zhao
b868008c75
e2tools: fix buildpath in ptest
Remove ${RECIPE_SYSROOT_NATIVE} from config.status to fix QA warning:

ERROR: lib32-e2tools-0.1.2-r0 do_package_qa: QA Issue: File
/usr/lib/e2tools/ptest/build/config.status in package
lib32-e2tools-ptest contains reference to TMPDIR [buildpaths]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-25 00:13:52 -08:00
Gyorgy Sarvari
a8f10b2aa0
libmpdclient: upgrade 2.22 -> 2.24
Though the original recipe claiumed to be v2.22, actually it was
2.20.

The vala bindings have been dropped, so no need to delete them anymore.

License-Update: The license itself hasn't changed between versions, but
there are a couple of things to note:
- Half of the source files are covered by 2-Clause-BSD, and other half by
  3-Clause-BSD. This has been the case always, but until recently this
  was only specified in the source file headers, and there was a single
  license file with 3-Clause-BSD text. Now there is explicitly a 2-Clause-
  BSD file also.
- The 3-Clase-BSD text was reformatted, and added placeholders for year
  and author. That is causing the hash change for this particular license.

Changelog:
2.24:
* fix missing "mpd_send_list_tag_types_available" in libmpdclient.ld
* support MPD protocol 0.25
  - stringnormalization

2.23:
* support MPD protocol 0.24.0
  - allow window for listplaylist and listplaylistinfo
  - command "playlistlength", "protocol", "stickertypes", "stickernamestypes", "searchplaylist"
  - tag "ShowMovement"
  - new sticker find api
  - new subcommands for "tagtypes": "available", "reset"
* Support open end for mpd_search_add_window
* format floating-point numbers with the POSIX localew

2.22:
* drop the unmaintained Vala bindings
* fix "version.h" conflicts when used as a Meson subproject
* support MPD protocol 0.24.0
  - command "save [create|replace|append]"

2.21:
* meson.build: allow using as a Meson subproject
* add mpd_recv_replay_gain_status()
* support MPD protocol 0.24.0
  - tag "Mood", "TitleSort"
  - "oneshot" consume state
  - allow range in "playlistmove"
  - commands "searchcount", "stickernames"
  - added attribute for songs
  - search: support constraint "added-since"

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 15:18:16 -08:00
Khem Raj
0ecf2814b2
vboxguestdrivers: Upgrade to 7.2.4
This is a maintenance release. The following items were fixed or added:

GUI: Fixed VirtualBox VM Manager crash when host was resuming from sleep (​github:gh-121, ​github:gh-170)
GUI: Updated native language support for Traditional Chinese, Greek, Swedish, Hungarian and Indonesian translations
NAT: Fixed issue when multiple port forwarding rules affected NAT functionality (​github:gh-232)
Linux host and guest: Introduced initial support for kernel 6.18
Linux Guest Additions: Introduced additional fixes for RHEL 9.6 and 9.7 kernels (​github:GH-12)
Windows Guest Additions: Introduced additional fixes for issue when installation was failing in Windows XP SP2 guest (​github:GH-142)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-12-24 13:31:55 -08:00
Gyorgy Sarvari
f3862b7441
wireplumber: add ptest support
Execution takes <10s.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-24T19:17
BEGIN: /usr/lib/wireplumber/ptest
PASS: ./wp/test-spa-json
PASS: ./wp/test-spa-pod
PASS: ./wp/test-spa-type
PASS: ./wp/test-properties
PASS: ./wp/test-core
PASS: ./wp/test-session-item
PASS: ./wp/test-json-utils
PASS: ./wp/test-events
PASS: ./wp/test-conf
PASS: ./wp/test-transition
PASS: ./wp/test-object-interest
PASS: ./wp/test-metadata
PASS: ./wp/test-object-manager
PASS: ./wp/test-factory
PASS: ./wp/test-settings
PASS: ./wp/test-proxy
PASS: ./wp/test-state
PASS: ./wp/test-component-loader
PASS: 00-test-linking-non-default-device-node.lua
PASS: 01-test-linking-non-default-device-node-capture.lua
PASS: 02-test-linking-default-device-node.lua
PASS: 03-test-linking-default-device-node-capture.lua
PASS: 04-test-linking-defined-device-node-target-object-string.lua
PASS: 05-test-linking-defined-device-node-target-object-int.lua
PASS: 06-test-linking-defined-device-node-target-object-name.lua
PASS: 07-test-linking-defined-device-node-target-object-string-capture.lua
PASS: 08-test-linking-defined-device-node-target-object-int-capture.lua
PASS: 09-test-linking-defined-device-node-target-object-name-capture.lua
PASS: 10-test-linking-defined-device-node-node-target.lua
PASS: 11-test-linking-defined-device-node-node-target-capture.lua
PASS: 12-test-linking-defined-device-node-target-node-metadata.lua
PASS: 13-test-linking-defined-device-node-target-node-metadata-capture.lua
PASS: 14-test-linking-defined-device-node-target-object-metadata.lua
PASS: 15-test-linking-defined-device-node-target-object-metadata-capture.lua
PASS: 16-test-linking-defined-device-node-target-object-int-metadata.lua
PASS: 17-test-linking-defined-device-node-target-object-int-metadata-capture.lua
PASS: 00-test-default-nodes-initial-metadata-update.lua
/usr/lib/wireplumber/ptest
PASS: pod.lua
PASS: json.lua
PASS: json-utils.lua
PASS: monitor-rules.lua
PASS: require.lua
PASS: async-activation.lua
PASS: settings.lua
PASS: event-hooks.lua
PASS: properties.lua
/usr/lib/wireplumber/ptest
PASS: ./wplua/test-wplua
PASS: ./modules/test-file-monitor
PASS: ./modules/test-si-node
PASS: ./modules/test-si-standard-link
PASS: ./modules/test-dbus-connection
PASS: ./modules/test-si-audio-adapter
PASS: ./modules/test-reserve-device
DURATION: 1
END: /usr/lib/wireplumber/ptest
2025-12-24T19:17
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Gyorgy Sarvari
ca7fe11935
wireplumber: upgrade 0.5.11 -> 0.5.13
Changelog:
0.5.13:
Additions & Enhancements:
- Added internal filter graph support for audio nodes, allowing users to
  create audio preprocessing and postprocessing chains without exposing
  filters to applications, useful for software DSP
- Added new Lua Properties API that significantly improves performance by
  avoiding constant serialization between WpProperties and Lua tables,
  resulting in approximately 40% faster node linking
- Added WpIterator Lua API for more efficient parameter enumeration
- Added bash completions for wpctl command
- Added script to find suitable volume control when using role-based policy,
  allowing volume sliders to automatically adjust the volume of the currently
  active role (e.g., ringing, call, media)
- Added experimental HDMI channel detection setting to use HDMI ELD
  information for channel configuration
- Enhanced role-based policy to allow setting preferred target sinks for
  media role loopbacks via policy.role-based.preferred-target
- Enhanced Bluetooth profile autoswitch logic to be more robust and handle
  saved profiles correctly, including support for loopback sink nodes
- Enhanced ALSA monitor to include alsa.* device properties on nodes for
  rule matching
- Optimized stream node linking for common cases to reduce latency when new
  audio/video streams are added
- Improved event dispatcher performance by using hash table registration for
  event hooks, eliminating performance degradation as more hooks are
  registered
- Increased audio headroom for VMware and VirtualBox virtual machines
- Added setting to prevent restoring "Off" profiles via
  session.dont-restore-off-profile property
- Added support for 128 audio channels when compiled with a recent version of
  PipeWire

Fixes:
- Fixed memory leaks and issues in the modem manager module
- Fixed MPRIS module incorrectly treating GHashTable as GObject
- Fixed warning messages when process files in /proc/<pid>/* don't exist,
  particularly when processes are removed quickly
- Fixed MONO audio configuration to only apply to device sink nodes, allowing
  multi-channel mixing in the graph
- Fixed event dispatcher hook registration and removal to avoid spurious
  errors
- Improved logging for standard-link activation failures
- Simplified event-hook interest matching for better performance

0.5.12:
Additions & Enhancements:
- Added mono audio configuration support via node.features.audio.mono
  setting that can be changed at runtime with wpctl
- Added automatic muting of ALSA devices when a running node is removed,
  helping prevent loud audio on speakers when headsets are unplugged
- Added notifications API module for sending system notifications
- Added comprehensive wpctl man page and documentation
- Enhanced object interest handling for PipeWire properties on session items

Fixes:
- Fixed race condition during shutdown in the permissions portal module that
  could cause crashes in GDBus signal handling
- Added device validity check in state-routes handling to prevent issues
  when devices are removed during async operations
- Fixed Log.critical undefined function error in device-info-cache
- Improved device hook documentation and configuration

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Gyorgy Sarvari
199a6a2266
freerdp3: add ptest support
The execution takes under 10s.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-23T11:36
BEGIN: /usr/lib/freerdp3/ptest
PASS: TestSynchInit
PASS: TestSynchEvent
PASS: TestSynchMutex
[...many lines...]
PASS: TestClientRdpFile
PASS: TestClientChannels
PASS: TestClientCmdLine
DURATION: 7
END: /usr/lib/freerdp3/ptest
2025-12-23T11:37
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Gyorgy Sarvari
325928e2ab
freerdp3: upgrade 3.19.0 -> 3.20.0
Contains fix for CVE-2025-68118

Changelog:
3.20.0:
Mingw fixes
[crypto,certificate_data] add some hostname sanitation
[client,common]: Fix loading of rdpsnd channel
[client,sdl] set touch and pen hints

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:19:13 -08:00
Khem Raj
e4b25c0fcb
rwmem: Fix tests to build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:31 -08:00
Gyorgy Sarvari
fe1b915f23
crossguid: add ptest support
Execution takes less than a second.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-24T16:06
BEGIN: /usr/lib/crossguid/ptest
0d154108-445a-4d20-9d74-623eb15c0ebe
c79e3cdf-fe16-4a9c-bad2-0fadf5761d05
ac7f9a04-f63f-49ee-a95b-6020378bff6f
All tests passed!
PASS: crossguid-test
DURATION: 0
END: /usr/lib/crossguid/ptest
2025-12-24T16:06
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Gyorgy Sarvari
fa3a2a7193
libmediaart-2.0: add ptest support
Test execution takes about a second.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-24T15:50
BEGIN: /usr/lib/libmediaart-2.0/ptest
TAP version 14
1..31
ok 1 /mediaart/stripping_failures
ok 2 /mediaart/location_null
ok 3 /mediaart/location_path
ok 4 /mediaart/stripping/nothing-to-strip
ok 5 /mediaart/stripping/case-strip
ok 6 /mediaart/stripping/single-char
ok 7 /mediaart/stripping/single-char-case
ok 8 /mediaart/stripping/remove-parenthesis-round
ok 9 /mediaart/stripping/remove-parenthesis-square
ok 10 /mediaart/stripping/remove-parenthesis-squirly
ok 11 /mediaart/stripping/remove-parenthesis-gt-lt
ok 12 /mediaart/stripping/whitespace
ok 13 /mediaart/stripping/whitespace-with-content
ok 14 /mediaart/stripping/messy-title
ok 15 /mediaart/stripping/unbalanced-brackets-square-start
ok 16 /mediaart/stripping/unbalanced-brackets-round-start
ok 17 /mediaart/stripping/unbalanced-brackets-gt-lt-start
ok 18 /mediaart/stripping/unbalanced-brackets-round-end
[...many lines...]
ok 31 /mediaart/process/failures
PASS: mediaart-test
DURATION: 0
END: /usr/lib/libmediaart-2.0/ptest
2025-12-24T15:50
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Gyorgy Sarvari
3f6b25f18a
libmediaart-2.0: upgrade 1.9.6 -> 1.9.7
This is a bugfix release, fixing some memory leaks and compiler warning
(and it also has a couple of commits related to the project's own CI system,
which doesn't affect the application)

Changelog: https://gitlab.gnome.org/GNOME/libmediaart/-/blob/master/NEWS

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Gyorgy Sarvari
238dbfb0b1
libsrtp: upgrade 2.5.0 -> 2.7.0
Changelog:
2.7.0:
- Fix function signature mismatch for srtp_remove_stream
- Fix srtp_unprotect_rtcp_mki when RTP auth != RTCP

2.6.0:
- remove use of pointers to 32bit values
- Cleaning up cmake and enabled more warnings.
- start using const on internal arguments
- Some srtp_driver fixes
- remove travis reference from README.md
- meson.build: implement mbedtls support
- iv length is constant so set only once
- Add x86 SIMD optimizations to crypto datatypes
- Add a missing typedef for stream list ctx
- cmake: Rename TEST_APPS as LIBSRTP_TEST_APPS option
- cmake: Support configuring as subproject

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Jan Vermaete
0b0cbd4c3c
freeglut: version 3.4.0 -> 3.8.0
patch to add support for legacy OpenGL (Thanks Rob Woolley)

| -- Found OpenGL: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot/usr/lib/libGL.so  found components: OpenGL
| -- Found PkgConfig: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot-native/usr/bin/pkg-config (found version "0.29.2")
| CMake Error at /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/x86-64-v3-poky-linux/freeglut/3.8.0/recipe-sysroot-native/usr/share/cmake-4.2/Modules/FindPackageHandleStandardArgs.cmake:290 (message):
|   Could NOT find OpenGL (missing: OPENGL_opengl_LIBRARY)

Changlog:

2025-11-16  John Tsiombikas <nuclear@mutantstargoat.com>

	freeglut 3.8 changes:

	* New experimental Cocoa (native MacOS X) backend.
	* Add glutSwapInterval, to control vsync (currently X11 and win32 only).
	* glutExtensionSupported now also reports platform extensions (GLX/WGL).
	* Fix build issues with new cmake versions while maintaining
	  compatibility with old cmake.
	* Fix handling of UTF8 window/icon titles.
	* Fix issue with some X11 window managers not properly restoring
	  iconified windows (send _NET_ACTIVE_WINDOW EWMH client message).
	* Fix build issues with C23 compilers (empty argument list semantics).
	* Fix compatibility with older versions of windows which don't have
	  RAWHID support (before XP), by loading the entry points dynamically.
	* Fix glutInitDisplayString parsing of "aux", and add =N parsing support
	  to specify samples and auxbufs.
	* Various fixes and improvements in the GameCube/Wii backend.
	* Altbuild support for Solaris 2.6/SUN Workshop C.
	* Started conversion of documentation from the website to markdown in
	  the source tree: doc/api.md
	* Added the original GLUT manpages, with permission from Mark Kilgard.
	* New demos: accum, vsync, and windows.
	* Cleanup of some old and no longer relevant, or redundant comments in
	  the source code.
	* Removed some out of date README files, and updated others.

2024-06-08  John Tsiombikas <nuclear@member.fsf.org>

	freeglut 3.6 changes:

	* New platforms: Nintendo Gamecube and Nintendo Wii.
	* Minimum cmake version raised to 3.1.
	* Make XInput an optional dependency.
	* Fix incorrect modifier bit mapped to GLUT_ACTIVE_SUPER on X11.
	* Add support for ARM64 MSVC targets.
	* Fix for unicode builds on windows.
	* Fix build on some versions of MinGW carrying an incorrect winuser.h.
	* Fix menu-related memory leak when an error occurs.
	* Various build improvements & fixes.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Wang Mingyu
5e84800e96
sip: upgrade 6.15.0 -> 6.15.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:30 -08:00
Wang Mingyu
9c5e7e5c29
python3-typer: upgrade 0.20.0 -> 0.20.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
ebca0ae79d
python3-tornado: upgrade 6.5.3 -> 6.5.4
Bug fixes
~~~~~~~~~
- The "in" operator for "HTTPHeaders" was incorrectly case-sensitive, causing
  lookups to fail for headers with different casing than the original header name.
  This was a regression in version 6.5.3 and has been fixed to restore the intended
  case-insensitive behavior from version 6.5.2 and earlier.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
f1bdb4e99b
python3-soupsieve: upgrade 2.8 -> 2.8.1
FIX: Changes in tests to accommodate latest Python HTML parser changes.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
aba3856c1e
python3-smbus2: upgrade 0.5.0 -> 0.6.0
Changelog:
==========
- Python 3.14 added.
- Fix SystemError: buffer overflow on Python 3.14+ on 64-bit systems by using
   c_ulong instead of c_uint32 for I2C_FUNCS ioctl.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
8db029f9a5
python3-sdbus: upgrade 0.14.1 -> 0.14.2
Changelog:
===========
- Fix segmentation fault if export handle outlives the exported object.
- Fix some tests failing on slow systems.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
dc39281af5
python3-python-multipart: upgrade 0.0.20 -> 0.0.21
Changelog:
  Add support for Python 3.14 and drop EOL 3.8 and 3.9

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:29 -08:00
Wang Mingyu
4389519b6b
python3-pikepdf: upgrade 10.0.2 -> 10.0.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
602a336ae3
python3-nodeenv: upgrade 1.9.1 -> 1.10.0
Changelog:
==========
- Use lowercase lookup for archmap
- Add support for Python 3.13
- Add UV Virtual Environment support
- Use sh instead of bash
- Replace additional use of which(1) with shutil.which()
- Support leading v in .node-version
- Check host platform when finding node version

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
b92546dea2
python3-joblib: upgrade 1.5.2 -> 1.5.3
Changelog:
===========
- The Memory object won't overwrite an already existing .gitignore file in its
  cache directory anymore.
- Harden the safety checks in eval_expr(pre_dispatch) to prevent excessive
  memory allocation and potential crashes by limiting the allowed length of the
  expression and the maximum numeric value of sub-expressions and not evaluating
  expressions with non-numeric literals.
- Vendor cloudpickle 3.1.2 to fix a pickling problem with interactively defined
  abstract base classes and type annotations in Python 3.14+.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
049f50eef4
python3-imgtool: upgrade 2.2.0 -> 2.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
310009aad6
python3-humanize: upgrade 4.14.0 -> 4.15.0
Added
------
- Add locale support for decimal separator in intword
- Add support for Python 3.15

Changed
--------
- Replace pre-commit with prek

Fixed
------
- naturaldelta: round the value to nearest unit that makes sense
- Fix plural form for intword and improve performance
- Replace Exception with more specific FileNotFoundError

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
3f09bcaf54
python3-google-auth: upgrade 2.43.0 -> 2.45.0
Changelog:
=============
Features
---------
- Adding Agent Identity bound token support and handling certificate mismatches
  with retries
- support Python 3.14
- add ecdsa p-384 support
- MDS connections use mTLS
- Implement token revocation in STS client and add revoke() method to
  ExternalAccountAuthorizedUser credentials
- Add shlex to correctly parse executable commands with spaces

Bug Fixes
---------
- Use public refresh method for source credentials in ImpersonatedCredentials
- Add temporary patch to workload cert logic to accomodate Cloud Run
  mis-configuration
- Delegate workload cert and key default lookup to helper function

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
c2710a2df9
python3-filelock: upgrade 3.20.0 -> 3.20.1
Changelog:
 CVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:28 -08:00
Wang Mingyu
44c27a5915
python3-cmake: upgrade 4.2.0 -> 4.2.1
Changelog:
==========
- fix: add missing f-string prefix for --parallel bootstrap arg
- fix: workaround issue in lastversion with OpenSSL
- chore(deps): update clang to 21.1.8.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
0cc847b8f7
python3-cachetools: upgrade 6.2.3 -> 6.2.4
Changelog:
  Fix license information displayed on PyPI be using an updated version of twine for uploading.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
71bc6204de
python3-apt: upgrade 3.0.0 -> 3.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
e3e3ffb13f
nbdkit: upgrade 1.45.15 -> 1.46.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
412a7debf1
memcached: upgrade 1.6.39 -> 1.6.40
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
1f221d31da
mcelog: upgrade 207 -> 208
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:27 -08:00
Wang Mingyu
975dbdae13
lvm2: upgrade 2.03.37 -> 2.03.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
9c4cea9772
libopus: upgrade 1.5.2 -> 1.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
22a030a6a9
liblogging: upgrade 1.0.6 -> 1.0.8
Changelog:
==========
- build fix with newer compilers
- builds again on Solaris
- some code cleanup, which prevented build with newer compilers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
46a3126084
libdecor: upgrade 0.2.4 -> 0.2.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
bbb7aa23a5
gpsd: upgrade 3.27 -> 3.27.1
Fixes for two CVE.  Parsing failures on malicious packets.
    CVE-2025-67268 - Heap-based Out-of-bounds Write, NMEA2000
    CVE-2025-67269 - Integer Underflow, NovAtel

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
f1407f17be
fuse3: upgrade 3.17.4 -> 3.18.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:26 -08:00
Wang Mingyu
03784baa9c
exiftool: upgrade 13.43 -> 13.44
Changelog:
============
- Added read support for Kandao KVAR files
- Added a few new Panasonic tags
- Added a new XMP-crs tag
- Added a few new Matroska tags
- Added a few values related to the new RAW file types for the Sony ILCE-7M5
- Decode a few new PhaseOne tags
- Decode timed GPS and other metadata from Kandao MP4 videos
- Improvements to family 1 and 5 groups for tags in Matroska videos, and
  prioritize top-level tags when duplicates exist
- Assume a default TimecodeScale of 1ms for MKV videos
- Patched to avoid runtime warning when parsing corrupted QuickTime data
- Fixed decoding of ShutterCount for Sony ILCE-7M

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Wang Mingyu
6f41c5872d
cryptsetup: upgrade 2.8.1 -> 2.8.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Khem Raj
dbc5ef5e12
python3-pyzstd: Delete recipe
It has been moved to core layer

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Koen Kooi <koen.kooi@oss.qualcomm.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
1fa7c7080e
wolfssl: ignore CVE-2025-11931 and CVE-2025-12889
NVD claims that WolfSSL 5.8.4 is affected by both of these vulnerabilities,
however actually both have been fixed in that version.

CVE-2025-11931: NVD[1] references [2] PR as a patch, which was merged in [3].
CVE-2025-12889: NVD[4] referenced [5] PR as a patch, which was merged in [6].

[1]: https://nvd.nist.gov/vuln/detail/CVE-2025-11931
[2]: https://github.com/wolfSSL/wolfssl/pull/9223
[3]: e497d28ae1
[4]: https://nvd.nist.gov/vuln/detail/CVE-2025-12889
[5]: https://github.com/wolfSSL/wolfssl/pull/9395
[6]: 2db1c7a522

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
03328f6c73
tinyproxy: add ptest support
It takes <10s to execute.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2025-12-23T17:45
BEGIN: /usr/lib/tinyproxy/ptest
starting web server... done (listening on 127.0.0.3:32123)
starting tinyproxy... done (listening on 127.0.0.2:12321)
waiting for 1 seconds.. done
checking direct connection to web server... ok
testing connection through tinyproxy... ok
requesting statspage via stathost url... ok
signaling tinyproxy to reload config...ok
checking direct connection to web server... ok
testing connection through tinyproxy... ok
requesting statspage via stathost url... ok
checking bogus request... ok, got expected error code 400
testing connection to filtered domain... ok, got expected error code 403
requesting connect method to denied port... ok, got expected error code 403
testing unavailable backend... ok, got expected error code 502
0 errors
killing tinyproxy... ok
killing webserver... ok
done
PASS: run_tests.sh
DURATION: 1
END: /usr/lib/tinyproxy/ptest
2025-12-23T17:45
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
7981f52062
tinyproxy: patch CVE-2025-63938
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-63938

Pick the patch referenced by the nvd report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
1a4dcfca3e
gensio: upgrade 2.8.15 -> 3.0.1
Release notes:
3.0.1:
Fix: Problems with IPv6 compatibility and running without a fully working network.
Fix: The permissions of the PTY were not set correctly with gtlsshd.
Fix: Some issues building under MSYS2 were fixed.
Enhancement: A "chardelay" gensio is added. This is basically the same as the Nagle
  algorithm in TCP, but it works on other things, like UDP and relpkt, to make
  transfer more efficient on those.
Enhancement: You can use "gsh" instead of "gtlssh" for a shorter name.
  Lots of little documentation updates.

3.0.0:
The only major thing is all the deprecated sergensio code has been removed.
There are also some minor bug fixes, some documentation improvements, some minor
  improvements, and a bug fix around ax25 where it was reporting the close of the
  last channel too soon.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:25 -08:00
Gyorgy Sarvari
d22c8fa290
ace: upgrade 8.0.2 -> 8.0.5
Changelog:
8.0.5:
Fixed building ACE for Android with uses_wchar=1
Add support for parallel make using Embarcadero bcc64x compiler
Fixed compile errors when C++23 is enabled
Updated thread name support to work with older Windows versions

8.0.4:
Fixed compile errors in the ACE core when compiled without thread
support (only core of ACE compiled and not tested)

8.0.3:
Deprecated ACE_Copy_Disabled in favor of deleted copy/assignment
Replaced usage of ACE_MIN and ACE_MAX with std::min/std::max
Add support for abstract paths to ACE_UNIX_ADDR
Improve support for 64bit file sizes
Minor fixes to ACE logging classes
Use C++11 default for more classes
GCC versions less than 9 and Clang versions less than 12 are no longer tested in GitHub Actions CI
Dropped support for Embarcadero C++ Builder bcc32c and bcc64 compilers
Updated support for Green Hills INTEGRITY and INTEGRITY-178 tuMP RTOS. Tested on INTEGRITY 11.4.6 and INTEGRITY-178 5.0.0.
Thread names given to ACE_OS::thr_create are now passed down to the OS on Windows and on INTEGRITY.

https://github.com/DOCGroup/ACE_TAO/releases

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-24 13:18:24 -08:00