28396 Commits

Author SHA1 Message Date
alperak
fe0d5e65cd
msgpack-c: upgrade 4.0.0 -> 6.0.0
- GTest should be OFF by default. -> https://github.com/msgpack/msgpack-c/issues/1066

Changelog:

- Remove C++ requirement if test is disabled (#1055)
- Change CMake package name of C library to msgpack-c (#1053)
- Unified all C package, library, cmake, tarball name become msgpack-c.
- Add additional address sanitizer for CI. (#1023)
- Change CMake package name of C library to msgpackc (#1044, #1049)

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:43 -08:00
Luca Fancellu
e12d38e91e
linuxptp: Update downstream patches
Downstream patches for linuxptp are upstreamed on the project
development branch, update them with their latest status and
update the Upstream-Status.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:43 -08:00
alperak
69d80c3a19
tmate: Fix finding msgpack 6+
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:43 -08:00
Wang Mingyu
5a77dd140c
thingsboard-gateway: upgrade 3.4.2 -> 3.4.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:43 -08:00
Wang Mingyu
21cdf20995
ser2net: upgrade 4.5.1 -> 4.6.0
Changelog:
 New release and Windows installer. Requires the Gensio library to be installed.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:43 -08:00
Wang Mingyu
426af6cf6a
redis: upgrade 7.2.2 -> 7.2.3
Changelog:
=============
-Fix file descriptor leak preventing deleted files from freeing disk space on
 replicas
-Fix a possible crash after cluster node removal

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:43 -08:00
Wang Mingyu
49eabb2afd
python3-virtualenv: upgrade 20.24.6 -> 20.24.7
Changelog:
============
-Allow platformdirs v4
-Bump wheels package

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:42 -08:00
Wang Mingyu
a982f406c0
python3-types-setuptools: upgrade 68.2.0.1 -> 68.2.0.2
Changelog:
 Third-party stubs: remove unused type: ignores

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:42 -08:00
Wang Mingyu
aff494f4c0
python3-sentry-sdk: upgrade 1.35.0 -> 1.37.1
Changelog:
===========
-Fix NameError on parse_version with eventlet
-build(deps): bump checkouts/data-schemas from 68def1e to e9f7d58
-Move installed modules code to utils
-Note: We moved the internal function _get_installed_modules from
 sentry_sdk.integrations.modules to sentry_sdk.utils. So if you use this
 function you have to update your imports
-Add code locations for metrics
-Add query source to DB spans
-Send events to Spotlight sidecar
-Run integration tests with newest pytest
-Bring tests up to date
-Fix: Prevent global var from being discarded at shutdown
-Fix: Scope transaction source not being updated in scope.span setter
-Django: Support Django 5.0
-Django: Handling ASGI body in the right way.
-Flask: Test with Flask 3.0
-Celery: Do not create a span when task is triggered by Celery Beat
-Redis: Ensure RedisIntegration is disabled, unless redis is installed
-Quart: Fix Quart integration for Quart 0.19.4
-gRPC: Make async gRPC less noisy

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:42 -08:00
Wang Mingyu
992f254d56
python3-pytest-xdist: upgrade 3.4.0 -> 3.5.0
Changelog:
============
 #632: --dist=loadscope now sorts scopes by number of tests to assign largest scopes early

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:42 -08:00
Wang Mingyu
178cae3818
python3-pymisp: upgrade 2.4.178 -> 2.4.179
Changelog:
===========
- Bump deps.
- [misp-objects] Bumped latest version.
- Eml and msg are in sync again.
- Update calls to getStringStream to the public method.
- Avoid confusing error when an auth key is limited to an IP.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:42 -08:00
Wang Mingyu
0260e1498e
python3-pydantic: upgrade 2.5.1 -> 2.5.2
Changelog:
==========
-uprev pydantic-core to 2.14.5
-Add ConfigDict.ser_json_inf_nan
-Fix validation of Literal from JSON keys when used as dict key
-Fix bug re custom_init on members of Union
-Fix JsonValue bool serialization
-Fix handling of unhashable inputs with Literal in Unions

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:42 -08:00
Wang Mingyu
d9a5eaf0f1
python3-pychromecast: upgrade 13.0.7 -> 13.0.8
Changelog:
 Change BBC Sounds app_id

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:41 -08:00
Wang Mingyu
42907a1786
python3-pexpect: upgrade 4.8.0 -> 4.9.0
Changelog:
==========
-Add support for Python 3.12
-Clean up temporary files after UnicodeTests
-Add Python 3.5, 3.6 and 3.12.0-rc.1 to test matrix
-Set prompt correctly for zsh
-Add zsh convenience function to replwrap module
-Rework async unittests to rely on unittest.IsolatedAsyncioTestCase
-Make test_expect.py work on POSIX systems that are not Linux based
-Add support for socket, which allows sockets to be used crossplatform
-Update async to work on newer versions of python
-Remove deprecated RSAAuthentication option (SSHv1)
-Multiple CI fixes
-Use Github Actions for CI
-Remove pytest-capturelog from testing requirements
-Fix usage for Solaris
-Fix threading for new versions of python
-Fix documentation builds for use with Sphinx 3
-Use sys.executable for tests and wrapper, allowing the calling python executable to be used instead
-Update documentation about Wexpect
-Added project urls to setup.py
-Provide examples for how to use Pexpect and Pyte
-Coerce compiled regex patterns type according to spawn encoding
-Several doc updates

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:41 -08:00
Wang Mingyu
d0fdcca9b2
python3-pdm: upgrade 2.10.3 -> 2.10.4
Changelog:
============
-Do not detect as requirements.txt if the file is a python script.
-Provide information of the original line when parsing requirement fails.
-Resolve -r requirements paths relative to the requirement file they are specified
-Updating package now overwrites the old files instead of removing before installing.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:41 -08:00
Wang Mingyu
d72f6cf2f2
python3-mypy: upgrade 1.7.0 -> 1.7.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:41 -08:00
Wang Mingyu
ef82d420dd
python3-ipython: upgrade 8.17.2 -> 8.18.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:41 -08:00
Wang Mingyu
4ce28b4bc2
python3-humanize: upgrade 4.8.0 -> 4.9.0
Changelog:
===========
-Add support for Python 3.13
-Add Norwegian localization
-Add Hebrew localization
-Add Klingon translation
-Replace Flake8 with Ruff
-Fix DeprecationWarning: Plural value must be an integer, got float
-Remove useless shebangs

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:41 -08:00
Wang Mingyu
69ddfb9c36
python3-dbus-fast: upgrade 2.14.0 -> 2.15.0
Changelog:
 Make ErrorType enums compare as strings

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:40 -08:00
Wang Mingyu
94302d54c7
python3-bitstring: upgrade 4.1.2 -> 4.1.3
Changelog:
===========
-Removed a couple of files that accidentally got included in the previous release.
-The 8-bit float formats have been renamed 'e4m3float' and 'e5m2float'.
-Some refactoring and performance optimizations.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:40 -08:00
Wang Mingyu
a75bbe3862
python3-aiohttp: upgrade 3.9.0 -> 3.9.1
Changelog:
===========
-Fixed importing aiohttp under PyPy on Windows.
-Fixed async concurrency safety in websocket compressor.
-Fixed ClientResponse.close() releasing the connection instead of closing.
-Fixed a regression where connection may get closed during upgrade.
-Fixed messages being reported as upgraded without an Upgrade header in Python parser.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:40 -08:00
Wang Mingyu
8fd762ae34
tomoyo-tools: upgrade 2.5.0 -> 2.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:40 -08:00
Wang Mingyu
e4fa64c596
paho-mqtt-cpp: upgrade 1.2.0 -> 1.3.1
0001-cmake-Use-CMAKE_INSTALL_LIBDIR-and-CMAKE_INSTALL_BIN.patch
refreshed for 1.3.1

License-Update: Updated license to EPL-v2.0

Changelog:
============
-#462 Fix version string for version v1.3.x
-Fixed building and using library as DLL on Windows with MSVC
-Updated License to Eclipse Public License v2.0
-Updated create and connect options to better deal with MQTT protocol version
-Defaulting connect version to v5 if specified in create options.
-Added a topic_filter class to match a single filter to specific topics.
-Added a topic_matcher class to create a collection of items in a trie structure
 that can contain items tied to topic filters. (Useful for queues or callbacks
 per-subscription topic).
-Minor tweaks to prepare for C++20
-Support for Catch2 v3.x for unit tests (v2.x also still supported).
-Changed the sample apps to use the newer "mqtt://" schemas.
-Connect option initializers for v5 and WebSockets.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:40 -08:00
Wang Mingyu
9d050771df
libbpf: upgrade 1.2.2 -> 1.3.0
Changelog:
============
https://github.com/libbpf/libbpf/releases/tag/v1.3.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:40 -08:00
Wang Mingyu
5c9927db54
capnproto: upgrade 1.0.1 -> 1.0.1.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:40 -08:00
Wang Mingyu
94f462ce82
frr: upgrade 9.0.1 -> 9.1
0001-tools-make-quiet-actually-suppress-output.patch
CVE-2023-46752.patch
CVE-2023-46753.patch
CVE-2023-47234.patch
CVE-2023-47235.patch
removed since they're included in 9.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:39 -08:00
Wang Mingyu
b57a328c36
gensio: upgrade 2.7.7 -> 2.8.0
Changelog:
 Release and windows installer.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:39 -08:00
Wang Mingyu
0a1199bebb
dnfdragora: upgrade 2.1.4 -> 2.1.5
Changelog:
============
-Fixed Segfault error when there is no package description.
-Added Info window after transaction.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:39 -08:00
Hongxu Jia
c6dc017438
freeradius: make sub packages to runtime depends on freeradius
Otherwise install packages reported warning at do_rootfs
...log.do_rootfs...
  Installing       : freeradius-ldap-3.0.26-r0.corei7_64              1235/1236
warning: user radiusd does not exist - using root
warning: group radiusd does not exist - using root
  Installing       : freeradius-krb5-3.0.26-r0.corei7_64              1236/1236
warning: user radiusd does not exist - using root
...log.do_rootfs...

The user/group radiusd is added by package freeradius,
explicitly made the sub packages to runtime depends on freeradius

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:39 -08:00
Wang Mingyu
dc67e26b2f
ctags: upgrade 6.0.20231119.0 -> 6.0.20231126.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:39 -08:00
alperak
ec7ab6b435
squashfs-tools-ng: upgrade 1.1.4 -> 1.2.0
License-Update:

    Remove builtin copy of zlib

    On GNU/Linux, *BSD or MacOS we can simply use the system default
    library. The copy was primarily only there for the Windows build.

    The build script for Windows has now been adapted to download and
    compile a shared library from a tarball.

    This removes a huge chunk of code from the git tree as well as
    the release tarballs. Additionally it gets rid of iffy things like
    removing the Zlib copyright/version strings, so the libsquashfs DLL
    doesn't export it.

Changelog:

Added

    * Make it possible for gensquashfs to add xattrs from a description file
    * Make it possible for gensquashfs to specify file sorting order
    * Support . and .. directory browsing support in sqfs_dir_reader_t
    * Add sqfs_tree_node_get_path to libsquashfs

Fixed

    * Only use actually available CPUs in gensquashfs and tar2sqfs
    * Overzealous bounds check in the libsquashfs block processor (#110)
    * In sqfs_compressor_create, clear the output pointer on error (#110)
    * Typo in gensquashfs and tar2sqfs block count statistics (#108)
    * Hard link resolution: report error if path cannonicalization fails
    * Documentation: signedness of the directory header inode number
    * Seek position in libsquashfs meta data reader erroneously out-of-bounds
    * Memory leak in libfstree error path
    * Double-free in libfstree error path

Changed

    * Allow NULL pointer for sqfs_destroy, sqfs_dir_tree_destroy
    * Use 32 bit hard link counter in libfstree instead of just 16 bit
    * Internal cleanup and restructuring
    * Upgrade autotools version
    * Check in autogen.sh if the required tools are available
    * Trigger a build failure if no compressor library is available

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-27 13:39:54 -08:00
Dylan Turner
9f0b505341
apache2: v2.4.57 to v2.4.58 to fix CVE-2023-43622
Note that patch 0011-modules... is no longer needed as it's included in
the upgrade as well.

CVE: CVE-2023-43622

Signed-off-by: Dylan Turner <dylan.turner@ni.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-27 13:39:53 -08:00
Khem Raj
eff650e3f6
nlohmann-json: Fix SRCREV_FORMAT and do not package git metadata into ptests
SRCREV_FORMAT should append to default for considering both git
repositories.

the git hook scripts require shell to be installed on target and
it may want it from /usr/bin/sh and distro may not provide /usr/bin/sh
since its not having usrmerge distro feature.

Fixes
ERROR: nlohmann-json-3.11.2-r0 do_package_qa: QA Issue: /usr/lib/nlohmann-json/ptest/json_test_data/.git/hooks/update.sample contained in package nlohmann-json-ptest requires /usr/bin/sh, but no providers found in RDEPENDS:nlohmann-json-ptest? [file-rdeps]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-26 14:18:58 -08:00
Markus Volk
20c083b15b
pipewire: upgrade 0.3.85 > 1.0.0
The PipeWire project is immensely proud to announce the 1.0 release
of PipeWire.

It is API and ABI compatible with previous 0.3.x releases.

 "PipeWire represents the next evolution of audio handling for Linux, taking
 the best of both pro-audio (JACK) and desktop audio servers (PulseAudio) and
 linking them into a single, seamless, powerful new system."
    - Paul Davis, JACK and Ardour author

 "What exciting times! PipeWire 1.0 is the culmination of 15 years of
 Linux audio expertise, blending lessons from PulseAudio into a high-performance,
 flexible, and user-friendly foundation for audio and multimedia on Linux.
 I'm looking forward to the next decade of progress in the free software
 consumer and professional audio space!."
    - Arun Raghavan, PulseAudio developer/maintainer.

 "I'm thrilled to witness the first stable release of PipeWire after five years
 of collaboration with its remarkable community, pushing the boundaries of
 multimedia integration in the Linux ecosystem one step further.”
    - George Kiagiadakis, WirePlumber author

 "From the beginning of the libcamera project, we have always seen
 PipeWire as the solution to handle desktop and mobile integration and
 give a seemless multimedia integration to users while providing security
 features and resource sharing between applications."
    - Kieran Bingham, libcamera author

Happy Holidays!

Highlights
  - Fix a memfd/dmabuf leak when uploading buffers while shutting down.
  - Handle concurrent jack_port_get_buffer() calls because ardour seems to
    be doing this.
  - Improve time reporting (less jitter) in ALSA when using IRQ.
  - Many doc improvements.

PipeWire
  - Respect PIPEWIRE_DLCLOSE everywhere, remove pw_in_valgrind().
  - Remove a warning when a client tries to change ignored properties.

Modules
  - Fix a memfd/dmabuf leak when uploading buffers while shutting down.
  - Fix a potential segfault when copying mix structures. (#3658)
  - Avoid races in setrlimit in module-rt.
  - Fix a memory leak in filter-chain.
  - Set rtp.ptime on senders, not receivers.
  - The ROC modules were ported to ROC 0.3

SPA
  - Improve time reporting (less jitter) in ALSA when using IRQ. (#3657)
  - Add latency param query in libcamera.
  - Fix some compiler warnings.
  - The EVL plugin was updated.

Bluetooth
  - LC3 codec and compatibility improvements.

Pulse server
  - Fix emission of events when a sink/source state changes. (#3660)

JACK
  - Improve transport and time handling. Use unique ids to make consistent
    snapshots of the current time and transport.
  - Avoid enumerating port params that we are not going to use.
  - Optimize buffer reuse.
  - Handle concurrent jack_port_get_buffer() calls because ardour seems to
    be doing this. (#3632)

Docs
  - Many doc improvements.
  - Add man pages for pw-dump, pw-loopback, modules, pipewire-pulse.
  - Manpages are now made with Doxygen.
  - Add docs for pulse-modules

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-26 14:18:58 -08:00
Peter Kjellerstedt
0d6871a86b
redis: Inherit pkgconfig
The Makefile uses pkg-config if USE_SYSTEMD is "yes".

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-26 10:39:58 -08:00
Markus Volk
092502feed
system-config-printer: Add packageconfig for polkit
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-25 10:25:33 -08:00
Markus Volk
304fd6a06e
cups-filters: fix Makefile race condition
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-24 13:46:34 -08:00
Markus Volk
45ce727295
libcacard: fix version string in libcacard.pc
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-23 09:12:11 -08:00
Charles Perry
991e6852a5
libexosip2: package binaries in a separate package
Put sip_monitor, sip_reg and sip_storm in a separate libexosip2-tools
package as they won't be needed most of the time.

Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-22 16:39:50 -08:00
Charles Perry
fce26a78a1
libexosip2: add c-ares and openssl PACKAGECONFIG
They are enabled by default as libexosip2 works better with those.

Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-22 16:39:50 -08:00
Jonas Gorski
00e928bcb7
frr: fix CVEs CVE-2023-4675{2,3} and CVE-2023-4723{4,5}
Add patches fixing CVE CVE-2023-46752, CVE-2023-46753, CVE-2023-47234,
and CVE-2023-47235 to FRR 9.0.

Patch order is commit order, not CVE numerical order, to avoid fuzz /
need for rebasing of the patches.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-46752
https://nvd.nist.gov/vuln/detail/CVE-2023-46753
https://nvd.nist.gov/vuln/detail/CVE-2023-47234
https://nvd.nist.gov/vuln/detail/CVE-2023-47235

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-22 06:56:15 -08:00
Wang Mingyu
077489fda8
strongswan: upgrade 5.9.11 -> 5.9.12
Changelog:
==========
- Fixed a vulnerability in charon-tkm related to processing DH public values
  that can lead to a buffer overflow and potentially remote code execution.
- The new `pki --ocsp` command produces OCSP responses based on certificate
  status information provided by plugins.
- The cert-enroll script handles the initial enrollment of an X.509 host
  certificate with a PKI server via the EST or SCEP protocols.
- The --priv argument for charon-cmd allows using any type of private key.
- Support for nameConstraints of type iPAddress has been added (the openssl
  plugin previously didn't support nameConstraints at all).
- SANs of type uniformResourceIdentifier can now be encoded in certificates.
- Password-less PKCS#12 and PKCS#8 files are supported.
- A new global option allows preventing peers from authenticating with trusted
  end-entity certificates (i.e. local certificates).
- ECDSA public keys that encode curve parameters explicitly are now rejected by
  all plugins that support ECDSA.
- charon-nm now actually uses the XFRM interfaces added with 5.9.10, it can
  also use the name in connection.interface-name.
- The resolve plugin tries to maintain the order of installed DNS servers.
- The kernel-libipsec plugin always installs routes even if no address is found
  in the local traffic selectors.
- Increased the default receive buffer size for Netlink sockets to 8 MiB and
  simplified its configuration.
- Copy the issuer's subjectKeyIdentifier as authorityKeyIdentifier instead of
  always generating a hash of the subjectPublicKey.
- Fixed issues while reestablishing multiple CHILD_SAs (e.g. after a DPD
  timeout) that could cause a reqid to get assigned to multiple CHILD_SAs with
  unrelated traffic selectors.
- Fixed a possible infinite loop issue in watcher_t and removed WATCHER_EXCEPT,
  instead callbacks are always invoked even if only errors are signaled.
- Fixed a regression in the IKE_SA_INIT tracking code added with 5.9.6 when
  handling invalid messages.
- Fixed adding the XFRMA_REPLAY_ESN_VAL attribute twice when updating SAs.
- Correctly encode SPI from REKEY_SA notify in CHILD_SA_NOT_FOUND notify if
  CHILD_SA is not found during rekeying.
- The testing environment is now based on Debian 12 (bookworm), by default.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:44:40 -08:00
Wang Mingyu
2aa6327a22
python3-rich: upgrade 13.6.0 -> 13.7.0
Changelog:
============
-Adds missing parameters to Panel.fit
-Some text goes missing during wrapping when it contains double width characters
-Ensure font is correctly inherited in exported HTML
-Fixed typing for FloatPrompt.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:44:40 -08:00
Wang Mingyu
8c362c3138
python3-pydantic: upgrade 2.5.0 -> 2.5.1
Changelog:
===========
-uprev pydantic-core to 2.14.3
-Fix package description limit
-Fix ValidateCallWrapper error when creating a model which has a
 @validate_call wrapped field annotation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:44:40 -08:00
Wang Mingyu
8bb82a69ee
python3-pdm: upgrade 2.10.1 -> 2.10.3
Changelog:
=============
-Create virtualenv for conda base Python. #2409
-Log the response text when pdm publish fails with HTTP error.
-Improve the error message when a specific package can't be found in the lockfile.
-prevent wrong project name (including space and illegal characters)
-Fix a bug that PDM cannot detect namespace packages correctly when creating symlinks.
-Fix template files created by pdm init being read-only when copied from a read-only PDM installation.
-Don't reset the build backend when asking for import.
-Never wrap the output of the export command.
-Forbid global project in conda base environment, since it may remove conda-managed packages.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:35:51 -08:00
Wang Mingyu
34d731c206
python3-pastedeploy: upgrade 3.0.1 -> 3.1.0
Changelog:
 Fix python_requires package metadata to support Python 3.7+.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:35:51 -08:00
Wang Mingyu
0bfb7b3164
python3-ldap: upgrade 3.4.3 -> 3.4.4
Changelog:
=============
-Reconnect race condition in ReconnectLDAPObject is now fixed
-Socket ownership is now claimed once we've passed it to libldap
-LDAP_set_option string formats are now compatible with Python 3.12
-Security Policy was created
-Broken article links are fixed now
-Bring Conscious Language improvements
-Add testing and document support for Python 3.10, 3.11, and 3.12

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:35:51 -08:00
Wang Mingyu
3f54dcad53
python3-imageio: upgrade 2.32.0 -> 2.33.0
Changelog:
===========
-Update pyav plugin to reflect AV changes
-Unpin Pillow and allow versions >=10.1.0
-Support for AVIF image format

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:35:51 -08:00
Wang Mingyu
8f8c96e1ca
python3-django: upgrade 4.2.5 -> 4.2.7
Changelog:
===========
-Fixed a regression in Django 4.2 that caused a crash of QuerySet.aggregate()
 with aggregates referencing expressions containing subqueries (#34798).
-Restored, following a regression in Django 4.2, creating
 varchar/text_pattern_ops indexes on CharField and TextField with
 deterministic collations on PostgreSQL (#34932).
-CVE-2023-46695: Potential denial of service vulnerability in UsernameField on Windows
-Fixed a regression in Django 4.2.5 where overriding the deprecated
 DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings in tests caused the main
 STORAGES to mutate (#34821).
-Fixed a regression in Django 4.2 that caused unnecessary casting of string
 based fields (CharField, EmailField, TextField, CICharField, CIEmailField, and
 CITextField) used with the __isnull lookup on PostgreSQL.
-CVE-2023-43665: Denial-of-service possibility in django.utils.text.Truncator

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:35:51 -08:00
Wang Mingyu
b4509a0cc8
python3-dateparser: upgrade 1.1.8 -> 1.2.0
Changelog:
=========
-New PREFER_MONTH_OF_YEAR setting (#1146)
-Absolute years in Russian are no longer being treated as a number of years in
 the past (#1129)
-Removed the use of datetime.utcnow, deprecated on Python 3.12 (#1179)
-Applied Black formatting to the code base (#1158)
-Initial integration with OSSFuzz (#1198)
-Extended test cases (#1191)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-21 22:35:51 -08:00