live555 is an old project, it has multiple CPEs associated with.
Set the ones in CVE_PRODUCT that are still active.
See CVE db query:
sqlite> select vendor, product, count(*) from products where vendor like '%live555%' or product like '%live555%' group by 1, 2;
live555|liblivemedia|1
live555|live555|7
live555|live555_media_server|2
live555|media_server|1
live555|streaming_media|160
All of them are relevant to this recipe, although media_server hasn't been used since 2007,
that one wasn't set.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
1.Changelog:
fix syntax error in run_task, preventing jobs to start
start scrub jobs sequentially if RAID5 or RAID6 data profile is found
fix btrfsmaintenance-refresh.service description
2.Update 0001-change-sysconfig-path-to-etc-default.patch for 0.5.2
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
When building bluealsa with building static libraries NOT disabled, you
get the following error:
ERROR: bluealsa-4.3.0-r0 do_package_qa: QA Issue: non -staticdev package
contains static .a library: bluealsa path
'/usr/lib/alsa-lib/libasound_module_pcm_bluealsa.a' [staticdev]
ERROR: bluealsa-4.3.0-r0 do_package_qa: QA Issue: non -staticdev package
contains static .a library: bluealsa path
'/usr/lib/alsa-lib/libasound_module_ctl_bluealsa.a' [staticdev]
ERROR: bluealsa-4.3.0-r0 do_package_qa: Fatal QA errors were found,
failing task.
Fix this by explicitly putting these files in the -staticdev package.
Signed-off-by: Matthias Proske <matthias.p@variscite.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to release 1.9.4:
- chore: fixed some typos in comments
- Fix B613 crash when reading from stdin
- Include filename in nosec 'no failed test' warning
- Fix B615 false positive when revision is set via variable
- Lower version guard in check_ast_node to Python 3.12
- Fix B106 reporting wrong line number on multiline function calls
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade to release 0.133.1:
- Add FastAPI Agent Skill.
- Fix all tests are skipped on Windows.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Increase minimum required CMake version to 3.5, update Googletest to 1.13
- Bazel module builds
- node/convert: Enable the template specialization for std::string_view properly when the library is compiled by MSVC on Windows
- CMake: Allow to disable uninstall
- Update cmakelists to use system googletest if available
- Fix indentation of empty flow sequences
- Add option YAML_ENABLE_PIC
- fix: use C locale by default
- Use FetchContent_MakeAvailable
- fix: parse files with '\r' symbols as line ending correctly
- fix(src): avoid possible infinite loop in LoadAll()
- missing keys should throw InvalidNode, not BadConversion
- fix: prettier floating point numbers
- Optimization of merge memories
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Security fixes
-----------------
(CVE-2025-67733) RESP Protocol Injection via Lua error_reply
(CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
(CVE-2026-27623) Reset request type after handling empty requests
Bug fixes
------------
Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand
Fix server assert on ACL LOAD when current user loses permission to channels
Fix bug causing no response flush sometimes when IO threads are busy
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* Security bugfixes
- OpenSSL DLLs updated to version 3.5.5.
* Bugfixes
- Avoid attempting to fetch OCSP stapling for PSK-only
configuration sections.
* Features
- Merged applicable patches from Fedora and Debian:
- Use SOURCE_DATE_EPOCH for reproducible builds.
- Skip the OpenSSL version check when AUTOPKGTEST_TMP is set.
- Enable PrivateTmp in the stunnel.service template.
- Clarify the manual page for the "curves" option.
- Log client IP addresses on TLS errors.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- Fixed iterable unpacking incorrectly calculating the cut-off offset of the
item list when assigning remaining values to the star variable
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Apply formatting to num seconds in before_sleep_log
- Support Python 3.14
- Typing: Accept non-standard logger in helpers logging something
- feat(wait): add wait_exception strategy
- docs: fix syntax error in wait_chain docstring example
- chore: drop Python 3.9 support (EOL)
- Support async sleep for sync fn-to-retry
- Fix retry() annotations with async sleep= function
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
* Fix DoS protection to raise SQLParseError instead of silently returning None
when grouping limits are exceeded
* Fix splitting of BEGIN TRANSACTION statements
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* When using 'assert_all_requests_are_fired=True', assertions about
unfired requests are now raised even when an exception occurs in the context manager or
decorated function. Previously, these assertions were suppressed when exceptions occurred.
This new behavior provides valuable debugging context about which mocked requests were
or weren't called.
* Consider the 'Retry-After' header when handling retries
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Added \z as alias of \Z, like in re module.
- Added prefixmatch as alias of match, like in re module.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Avoid emitting dedents after an escaped new line
- Add --json support to the CLI
- Fix quiet mode in the CLI
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Fix type invariance causing too strict typing
- Add E2E testing infrastructure using mkosi for running tests in a real systemd environment
- Improve type annotations throughout pystemd, modernizing to Python 3.10+ syntax
- Add AmbientCapabilities to systemd1 KNOWN_UNIT_SIGNATURES
- Improve README.md clarity, spelling, and grammar
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- SimDevice / SimRuntime fixes.
- No inter_frame_time check for baudrate > 38000.
- Fix smaller bugs in test, part 2.
- simulator startup armoring and update 3.x docs
- Fix smaller bugs in test, part 1.
- Update README.rst.
- Coverage limit is 99.95% (to allow a little margin).
- Removed simulator README, due to unused.
- fix: add warning log when using internal default simulator config
- Document simulator entrypoint in README
- Upgrade library versions installed by pip.
- SimData/Device integrate in server.
- Add bind to ModbusUdpClient.
- Solve Zuban problem.
- Fix wrong parameter name in function docstring. Fix set_values does not accept tuple.
- Add context.async_get/setValues with device_id.
- SimData/SimDevice ready for server integration.
- Reactivate pytest coverage.
- No blank issue template.
- Update issue templates
- Fix ReadFifoQueueResponse count
- Limited support for multiple devices on RS485.
- Simulator DataBlock docstring corrections
- fix README.rst and troubleshooting
- Solve DoS vulnerability.
- server handle_local_echo only in comm_params.
- di is for discrete input
- Allow any dev_id, when requesting dev_id 0.
- Allow response transaction_id 0.
- Use relative import.
- ModbusServerContext.device_ids() docstring
- Include ModbusSequentialDataBlock into the documentation
- Fix Modbus TCP protocol ID validation in FramerSocket
- Remove idle_time() from sync client, which anyhow was void.
- Correct check_ci.sh.
- Replace mypy with zuban
- Fix monitoring of functions
- Improve types
- dicts have preserved insertion order since 3.7
- asyncio.iscoroutinefunction() is deprecated
- Remove pypi-alias.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Retain Error.pgconn when raising a single exception for multiple connection attempt errors
- Return a proper error when server sends ErrorResponse for a Sync after a Parse
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Fix microsecond precision loss in timestamp parsing
- allow triggering CI manually
- Actually raise exception
- readme: Clarify 'd' type
- Bump actions/checkout from 5 to 6 in the actions-infrastructure group
- Allow grouping char (,_) in decimal format string
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
Fix a crash on Python 3.10 if there are active greenlets during interpreter shutdown.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Features
----------
- honor NO_GCE_CHECK environment variable
- add configurable GCE Metadata Server retries
- add cryptography as required dependency
- Support the mTLS IAM domain for Certificate based Access
Bug Fixes
----------
- resolve circular imports
- Use user_verification=preferred for ReAuth WebAuthn challenge
- removes content-header from AWS IMDS get request
- detect correct auth when ADC env var is set but empty
- replace deprecated utcfromtimestamp
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Drop support for Python 3.9.Add support for Python 3.14.
- To avoid merge errors, add the line number to the name of the unknown function.
- If intermediate files are kept, rename the gcov files before processing them to log the final filename.
- Use the first line after a function definition and not the first line which is hit.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
New features:
--------------
- search_dates() can now detect time spans from expressions like "past
- month", "last week", etc. For details, see the "Time Span Detection" section
- and the RETURN_TIME_SPAN, DEFAULT_START_OF_WEEK and
- DEFAULT_DAYS_IN_MONTH settings in the documentation.
Fixes:
--------
- Assume the current year if not specified
- Support expressions like "yesterday +1h"
- English: Support most 2-letter day-of-the-week names
- English: Support "in N weeks' time"
- Finnish: Support dates with "klo"
- Russian: Support compound ordinals
Cleanups and internal improvements:
-------------------------------------
- Fixed year expectation issues in tests.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Drop support of Python 3.9, support 3.14
- Support :host
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
