Commit Graph

36320 Commits

Author SHA1 Message Date
Wang Mingyu
22dc38bdcc python3-aiodns: upgrade 3.5.0 -> 3.6.0
Changelog:
=============
- Fix resolver garbage collection during pending queries (#211)
  - Prevents resolver from being garbage collected while queries are in progress
- Socket callback optimizations (#172)
  - Improved performance for socket state handling
- Fixed RTD links (#176)
- Added Python 3.14 to the CI (#212)
- Updated dependencies- Fix resolver garbage collection during pending queries (#211)
  - Prevents resolver from being garbage collected while queries are in progress
- Socket callback optimizations (#172)
  - Improved performance for socket state handling
- Fixed RTD links (#176)
- Added Python 3.14 to the CI (#212)
- Updated dependencies

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:00 -08:00
Wang Mingyu
5322aba126 openfortivpn: upgrade 1.23.1 -> 1.24.0
Changelog:
===========
- add OpenSSL 3.0+ PKCS#11 support using OSSL_STORE API
- add OpenSSL Engine support (with OpenSSL < 3.0)
- update package links for distros in README
- remove deprecated option --plugin
- increase the maximum size of the proxy response
- route: always remove wrong pppd route to self
- fix several Coverity warnings
- fix a memory leak in new ipv4_drop_wrong_route method
- HTTP: fixes missing '\0' in debug
- IO: fixes a RC use after free
- SSL: Avoid leaking SSL context

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:00 -08:00
Wang Mingyu
1645c5e518 nss: upgrade 3.118.1 -> 3.119
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:00 -08:00
Wang Mingyu
573a77680e nbdkit: upgrade 1.45.14 -> 1.45.15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 15:11:00 -08:00
Wang Mingyu
3ce0905285
libtorrent: upgrade 0.16.2 -> 0.16.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:16 -08:00
Wang Mingyu
26e3ef119b
libsdl3: upgrade 3.2.26 -> 3.2.28
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:16 -08:00
Wang Mingyu
e4c2d01d2d
libnftnl: upgrade 1.3.0 -> 1.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:16 -08:00
Wang Mingyu
3f9b9f8055
libbytesize: upgrade 2.11 -> 2.12
Changelog:
==========
- packit: Bump release only for daily Copr builds
- tests: Split locale tests into multiple test cases
- misc: Separate Ansible tasks into a different file
- misc: Add build and test dependecies for CentOS
- misc: Use --break-system-packages for pip on Debian
- misc: Do not use "with_items" when installing packages
- HACKING: Update directions for updating documentation
- Fix compilation with C23

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:15 -08:00
Wang Mingyu
7055b4903e
ldns: upgrade 1.8.4 -> 1.9.0
Changelog:
===========
* PR #246: Make ldns_calc_keytag() available for CDNSKEY RR
* PR #247: Make ldns_key_rr2ds() available for CDNSKEY RR
* PR #248: Make ldns_rr_compare_{ds,ds_dnskey}() available for
  CDS and CDNSKEY RRs.
* PR #245: Make drill trace use IPv6 when used with -6
* Fix #254: Unquoted "value" rdata for CAA records fail to validate.
  Follows the long string unquoted syntax from RFC8659, section 4.1.1.
* Fix #266: ldns-read-zone -u fails if a type is the only type in a
  window and the type modulo 256 is equal to zero.
* Fix #271: Intermittent build failure with multi-job
  builds (make -j).
* Add ldns-verify-zone -s option. It checks all signature results,
  instead of passing by when one RRSIG validates. That prints output
  for spurious RRSIGs, the failures for them.
* Fix RR types NSAP-PTR, GPOS and RESINFO to print unquoted strings.
* Fix memory leak when trying to read zones that have equal RRs.
  the ldns_dnssec_*_add_rr() functions now return LDNS_STATUS_EQUAL_RR
  when an already existing RR is tried to be added. This is a API
  change, hence this also bumps the version to 1.9.0
* PR #282: ensure returning pkt with LDNS_STATUS_OK.
* PR #286: Fix RR Type AMTRELAY type nogateway, to print relay '.',
  and memory leaks in parsing it.
* DSYNC is no longer a draft RR type and compiled by default
* RFC 9824 support: Compact Denial of Existence in DNSSEC
* The HHIT and BRID draft RR types
* PR #249: If RNG is already seeded, return early.
* PR #221: Improve error messages.
* PR #256: Use SWIG_AppendOutput to support swig 4.3
* PR #188: Homogenize paths for source files during compilation
* Fix #283: ldns-walk fails after update from 1.8.3 to 1.8.4
* PR #200: Allow compiled tests to link to ldns statically via
  environment variable.
* PR #220: Optionally exclude ZONEMD RRs in ldns-compare-zone
* Fix #285: A WALLET RR breaks TXT signing.
* Fix #287: ldns-verify-zone hangs with missing NSEC3 RRs.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:15 -08:00
Wang Mingyu
f197f76f07
jsoncons: upgrade 1.4.3 -> 1.5.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:15 -08:00
Wang Mingyu
96ba71fbb3
freerdp3: upgrade 3.18.0 -> 3.19.0
Changelog:
=============
* [ci] add git-archive ignore list
* [client,common] fix retry counter
* [cmake] fix aarch64 neon detection
* Fix response body existence check when using RDP Gateway
* fix line clipping issue
* Clip coord fix
* [core,input] Add debug log to keyboard state sync
* Update command line usage for gateway option
* [codec,ffmpeg] 8.0 dropped AV_PROFILE_AAC_MAIN
* [channels,audin] fix pulse memory leak
* [channels,drive] Small performance improvements in drive channel
* [winpr,utils] fix command line error logging
* [common,test] Adjust AVC and H264 expectations.
* drdynvc: implement compressed packet
* [channels,rdpecam] improve log messages
* Fix remote credential guard channel loading
* Fix inverted ifdef
* [core,nego] disable all enabled modes except the one requested
* rdpear: handle basic NTLM commands and fix server-side
* [smartcardlogon] Fix off-by-one error in 'smartcard_hw_enumerateCerts'
* rdpecam: fix camera sample grabbing

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:15 -08:00
Wang Mingyu
1aaf6cc19b
exiftool: upgrade 13.42 -> 13.43
Changelog:
============
- Added support for a couple of new Android QuickTime Keys tags
- Added date/time formatting for RIFF DateCreated
- Added ability to read/write (but not create/delete) the HEIF Mirroring tag
- Added a new SonyModelID
- Added a new Canon LensType
- Decode ShutterCount for the Canon EOS R6 Mark III
- Decode another Samsung trailer tag
- Convert invalid Panasonic AFPointPosition to 'n/a'
- Fixed issue extracting timed GPS from some Wolfbox G900 MP4 videos

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:15 -08:00
Wang Mingyu
8fd12b82d3
ctags: upgrade 6.2.20251116.0 -> 6.2.20251130.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:15 -08:00
Wang Mingyu
e1ffeefbff
boost-sml: upgrade 1.1.12 -> 1.1.13
Changelog:
============
- Anonymous transitions in composition
- Prevent compiler options propagating to projects using SML
- Handle anonymous events with process_internal_events
- Update initial submachines of composite states upon re-entry
- zephyr: Add files to support using with zephyr RTOS
- fix typo in README
- Fallback to any_state when state-specific guard fails

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-09 09:08:14 -08:00
Liu Yiding
658639ca5b
multipath-tools: upgrade 0.11.3 -> 0.12.1
Update 0004-RH-use-rpm-optflags-if-present.patch for 0.12.1.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 23:22:19 -08:00
Liu Yiding
c627784366
liblognorm: upgrade 2.0.7 -> 2.0.8
Change log
==========
Version 2.0.8, 2025-12-04
- fix potential segfault on some platforms
  Thanks to Julian Thomas for a fix
- fix memory leak when a custom type in rules does not match
  Thanks to Meric Sentunali for the fix and Julian Thomas for alerting
  me of the missing merge.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 23:22:19 -08:00
Liu Yiding
f0622d3e5c
ufw: upgrade 0.36.1 -> 0.36.2
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 23:22:19 -08:00
Liu Yiding
668902b774
python3-protobuf: upgrade 6.33.1 -> 6.33.2
Change log:
https://github.com/protocolbuffers/protobuf/releases/tag/v33.2

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 23:22:19 -08:00
Liu Yiding
7898726229
poppler: upgrade 25.11.0 -> 25.12.0
Change log:
  core:
   * Be less strict about the Page Annots object being correct. Issue #1641
   * Fix rendering of some annotations. Issue #1642
   * TextOuputDev: change default line ending to \n
   * Splash: Performance improvements
   * Ignore color operators when painting a Type3 font with d1
   * Internal code improvements
   * Fix crashes in malformed documents

  utils:
   * pdfsig: specify search order for NSS certificate database on the man page

  build system:
   * Switch to C++23

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 23:22:18 -08:00
Liu Yiding
f1be2e8f44
nspr: upgrade 4.38 -> 4.38.2
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 23:22:18 -08:00
Liu Yiding
9452f1205b
gflags: upgrade 2.2.2 -> 2.3.0
1.Change log:
  https://github.com/gflags/gflags/releases/tag/v2.3.0

2. Drop 0001-allow-build-with-cmake-4.patch as it was mergerd upstream.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 23:22:18 -08:00
Khem Raj
aa758279f5
php: Provide cached value for sendmail program
Left to its own volition, configure goes on a hunt in
usual paths in /usr which means it pokes at build system
for sendmail existence. This could also be under different
paths e.g. /usr/lib or /usr/sbin depending upong build distro

The paths where sendmail will be installed on target is
usual paths e.g. /bin or /usr/bin on OE, which are added
to program search paths anyway.

This fixes reproducibility issues, since this string gets
its way into the PHP binaries.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 15:23:02 -08:00
Liu Yiding
b98efe111c
gnome-control-center: upgrade 48.3 -> 49.2.2
Changelog:
- Revert libgxdp updates

  The libgxdp updates depend on changes in gsettings-desktop-schemas
  that are part of the GNOME 50 cycle. Revert the pinned ref
  to the one we had before, until we branch libgxdp for GNOME 49.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 12:00:20 -08:00
Leon Anavi
505f22ece2
htop: Upgrade 3.3.0 -> 3.4.1
Upgrade to release 3.4.1:

- Support for PMAPI v3 for PCP
- PCP code cleanups
- Proper checks for strchrnul
- Code cleanup in the NetworkIOMeter
- Improved documentation for the --user option
- Display stuck processes on Darwin
- Handle issues when the monotonic clock runs backwards
- Fix builds using native curses on NetBSD

htop now prioritizes pkg-config over ncurses*-config to
cross-compile. It depends on libnl and a patch is required to fix:

| configure: error: can not find required header files
netlink/attr.h, netlink/handlers.h, netlink/msg.h

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 12:00:20 -08:00
Walter Werner SCHNEIDER
779faaa65d
libcamera: upgrade 0.5.2 -> 0.6.0
Signed-off-by: Walter Werner SCHNEIDER <contact@schnwalter.eu>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 12:00:20 -08:00
Liu Yiding
55019e2bfa
blueprint-compiler: 0.18.0
Add a new recipe blueprint-compiler as depend for gnome-control-center 49.2.2.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-08 12:00:20 -08:00
Mingli Yu
31a08525be
bpftool-native: Empty DEBUG_PREFIX_MAP_EXTRA
Most host gcc doesn't support -fcanon-prefix-map right now, so
empty DEBUG_PREFIX_MAP_EXTRA to fix the below build error.
 | gcc: error: unrecognized command-line option ‘-fcanon-prefix-map’; did you mean ‘-fmacro-prefix-map=’?

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 17:01:11 -08:00
Mingli Yu
c41fb791fa
openipmi: Pass BUILD_CFLAGS to BUILD_CC
* The option -fcanon-prefix-map is added to CFLAGS after the commit [1]
introduced and result in the below build error.
  Making all in sdrcomp
  make[3]: Entering directory '/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37/lanserv/sdrcomp'
aarch64-wrs-linux-gcc  -mcpu=cortex-a57+crc -mbranch-protection=standard -fstack-protector-strong  -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security --sysroot=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot -DHAVE_CONFIG_H -I. -I../..  -DSTATEDIR='"/var"'  -Wall -Wsign-compare -I../../include -I../../lanserv -I../../utils -O2 -g -fcanon-prefix-map  -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37  -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37  -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot=  -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot-native=  -pipe -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -c -o sdrcomp.o sdrcomp.c
gcc  -o sdrcomp_build ../../lanserv/sdrcomp/sdrcomp.c -O2 -g -fcanon-prefix-map  -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37  -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37  -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot=  -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot-native=  -pipe -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Wall -Wsign-compare -I../../include -I../../lanserv -I../../utils -lm
  gcc: error: unrecognized command-line option ‘-fcanon-prefix-map’; did you mean ‘-fmacro-prefix-map=’?

* Pass BUILD_CFLAGS for BUILD_CC to fix the above build issue.

[1] https://git.openembedded.org/openembedded-core/commit/?id=3dbc4a79f01ebfc54da024c1460c06772659088d

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 17:01:11 -08:00
Gyorgy Sarvari
60cef8116c
libupnp: upgrade 1.14.18 -> 1.14.25
Changelogs:
https://github.com/pupnp/pupnp/releases/tag/release-1.14.25
https://github.com/pupnp/pupnp/releases/tag/release-1.14.24
https://github.com/pupnp/pupnp/releases/tag/release-1.14.23
https://github.com/pupnp/pupnp/releases/tag/release-1.14.22
https://github.com/pupnp/pupnp/releases/tag/release-1.14.21
https://github.com/pupnp/pupnp/releases/tag/release-1.14.20
https://github.com/pupnp/pupnp/releases/tag/release-1.14.19

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 17:01:11 -08:00
Gyorgy Sarvari
25540bf356
gupnp-tools: upgrade 0.12.1 -> 0.12.2
Changelog:
- Common:
    - Remove deprecated libxml calls
- AV CP:
    - Remove some stray debug output
- EventDumper:
    - Code cleanup
- Uploader:
    - Fix parsing the Browse result

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 17:01:10 -08:00
Gyorgy Sarvari
8353697d83
gupnp-igd: add ptest support
Execution takes around 10 seconds.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 17:01:10 -08:00
Vijay Anusuri
316770a9f5
net-snmp: Update Upstream-status in the net-snmp-5.9.4-kernel-6.7.patch
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:46:53 -08:00
Leon Anavi
7954f37b3c
python3-huey: Upgrade 2.5.4 -> 2.5.5
Upgrade to release 2.5.5:

- Fix for pypi

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:14:17 -08:00
Leon Anavi
588b327f0f
python3-multidict: Upgrade 6.6.3 -> 6.7.0
Upgrade to release 6.7.0:

- Updated tests and added CI for CPython 3.14

From 6.6.4:

- Fixed MutliDict & CIMultiDict memory leak when deleting values
  or clearing them
- The type preciseness coverage report generated by MyPy is now
  uploaded to Coveralls and will not be included in the Codecov
  views going forward
- Added memory leak test for popping or deleting attributes from
  a multidict to prevent future issues or bogus claims

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:14:17 -08:00
Leon Anavi
135b3a82fb
python3-autobahn: Upgrade 24.4.2 -> 25.11.1
Upgrade to release 25.11.1:

- WAMP Flatbuffers serialization test coverage; WAMP message
  classes refactoring
- Add WAMP serdes functional and benchmark testing;
  WAMP-Flatbuffers; WAMP Serializer Composition (transport/payload)
- Add vendored Flatbuffers

Fixes:
WARNING: python3-autobahn-25.11.1-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with
setuptools.build_meta, use the correct class [pep517-backend]

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:14:16 -08:00
Valeria Petrov
220835dac9
apache2: upgrade 2.4.65 -> 2.4.66
Security fixes:
- CVE-2025-66200
- CVE-2025-65082
- CVE-2025-59775
- CVE-2025-58098
- CVE-2025-55753

See: http://www.apache.org/dist/httpd/CHANGES_2.4.66

Signed-off-by: Valeria Petrov <valeria.petrov@spinetix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:13:24 -08:00
Liu Yiding
09b00d96d0
php: upgrade 8.4.15 -> 8.5.0
1. Changelog:
  https://github.com/php/php-src/releases/tag/php-8.5.0

2. Remove opcache-related options as it was not in 8.5.0.

3. Fix FILES:${PN}-fpm to resolve following error:
  ERROR: php-8.5.0-r0 do_package: QA Issue: php: Files/directories were installed but not shipped in any package:
  /usr/share/php
  /usr/share/php/fpm
  /usr/share/php/fpm/status.html
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:13:23 -08:00
Liu Yiding
533a9ab48d
xdebug: upgrade 3.4.7 -> 3.5.0
Change log:
https://xdebug.org/updates#x_3_5_0

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:13:23 -08:00
Gyorgy Sarvari
457de1091b
yasm: drop from packagegroup also
It should have been done when the recipe was dropped, but it was missed.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:13:23 -08:00
Deepak Rathore
7675392aa7
redis: Refine CVE-2022-0543 status description
Refine the CVE_STATUS description for CVE-2022-0543 to provide
a more precise explanation of this Debian-specific vulnerability.

The vulnerability originates from Debian's packaging methodology,
which loads system-wide Lua libraries (lua-cjson, lua-cmsgpack),
enabling Lua sandbox escape. Upstream Redis builds, including
those built by Yocto/OpenEmbedded, utilize embedded Lua from the
deps/ directory and are therefore not affected by this issue.

It is also fixed in Debian with this commit:
c7fd665150

References:
- https://www.ubercomp.com/posts/2022-01-20_redis_on_debian_rce
- https://nvd.nist.gov/vuln/detail/CVE-2022-0543

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:13:23 -08:00
Peter Marko
331126a6d0
nftables: remove python dependency from main package
The recipe splits python code to nftables-python package, however
setuptools classes add the dependency to main package.
Since nftables-python package already has python3-core explicit
dependency, remove it from the main package.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:13:23 -08:00
Leon Anavi
b428f67575
python3-cloudpickle: Upgrade 3.1.1 -> 3.1.2
Upgrade to release 3.1.2:

- Fix pickling of abstract base classes containing type annotations
  for Python 3.14.

License-Update: Use file LICENSE

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-05 10:13:23 -08:00
Leon Anavi
71055538b5
python3-polyline: Upgrade 2.0.3 -> 2.0.4
Upgrade to release 2.0.4:

- Add py.typed marker

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-04 06:06:46 -08:00
Peter Marko
6a9cc44a92
libcoap: upgrade 4.3.5 -> 4.3.5a
Changelog [1]:
  * Fixes the following CVEs
    CVE-2025-59391
    CVE-2025-65494
    CVE-2025-65495
    CVE-2025-65496
    CVE-2025-65497
    CVE-2025-65498
    CVE-2025-65499
    CVE-2025-65500
    CVE-2025-65501
  * CVE-2025-50518 not fixed as user application error.
  * Support for Mbed TLS 3.6.3.
  * Support for RIOT update changes.
  * Fixes for later CI environment builds.
  * Critical reported bugs fixed.

Add tag to SRC_URI for hash verification.

License-Update: copyright years refreshed [2]

[1] https://github.com/obgm/libcoap/blob/v4.3.5a/ChangeLog
[2] 993c12ac92

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-04 06:06:46 -08:00
Changqing Li
c91f9c0a4b
libmng: correct version of libmng
Current version is 2.0.3, the lastrelease of libmng is in 2015,
add a patch to fix it

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-03 20:33:44 -08:00
Markus Volk
fec0050479
gtkmm4: update
4.20.0 (stable) 2025-09-19

Gdk:
* PixbufAnimation, PixbufAnimationIter: Deprecate these classes.
  GdkPixbufAnimation and GdkPixbufAnimationIter are deprecated
  since gdk-pixbuf 2.44.
* PixbufLoader: Deprecate get_animation().
  (Kjell Ahlstedt)

4.19.1 (unstable) 2025-08-26

Gdk:
* Event: Add get_relative_direction() and enum ScrollRelativeDirection.
  (Kjell Ahlstedt)

Gsk:
* Transform: Add matrix_2d().
  (Kjell Ahlstedt)

Gtk:
* Application: Deprecate property_register_session().
* CssProvider: Add property_prefers_color_scheme() and
  property_prefers_contrast().
* Entry: Add set/get_menu_entry_icon_text(),
  property_menu_entry_icon_primary_text() and
  property_menu_entry_icon_secondary_text().
* Add enum InterfaceColorScheme and InterfaceContrast.
* FilterListModel: Add get/set/property_watch_items().
* Settings: Add property_gtk_interface_color_scheme()
  and property_gtk_interface_contrast().
  (Kjell Ahlstedt)

Documentation:
* Add images used in documentation copied by gmmproc.
* Gtk::DrawingArea, Gtk::GLArea: Update the class descriptions.
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.19.4
  (Kjell Ahlstedt)

4.19.0 (unstable) 2025-06-29

Gdk:
* Deprecate Gdk::Cairo::set_source_pixbuf().
* Texture: Deprecate create_for_pixbuf().
* Pixbuf: Deprecate create_from_xpm_data().
* ColorState: Add equivalent().
* MemoryTextureBuilder: Add get/set_stride_for_plane() and get/set_offset().
* TextureDownloader: Add download_bytes_with_planes().
* Toplevel: Add enum TitlebarGesture, enum Toplevel::Capabilities,
  titlebar_gesture(), get/property_capabilities(), get/set/property_gravity().
  (Kjell Ahlstedt)

Gsk: (new subdirectory and namespace)
* Add RoundedRect, Transform and enums BlendMode, Corner, FillRule,
  MaskMode, ScalingFilter, Transform::Category.
  (Kjell Ahlstedt) Merge request !92

Gtk:
* Add Fixed::set/get_child_transform()
  (Kjell Ahlstedt)
* Add FixedLayout and FixedLayoutChild
  (Kjell Ahlstedt) Issue #164 (Thayne McCombs)
* Calendar: Deprecate select_day(), property_year/month/day(),
  add set/property_date().
* FileFilter: Deprecate add_pixbuf_formats().
* IconPaintable: Deprecate get/property_icon_name(), is_symbolic(),
  property_is_symbolic().
* UriLauncher.hg: Add can_launch().
* Window: Add enum WindowGravity, get/set/property_gravity().
  (Kjell Ahlstedt)

Demos:
* Avoid deprecated Pixbuf methods where possible.
  (Kjell Ahlstedt)

Build:
* NMake Makefiles: Generate gskmm build config files
* NMake builds: Add build rules to build gskmm
  (Chun-wei Fan) Merge request !92
* Require gtk4 >= 4.19.2
  (Kjell Ahlstedt)

4.18.0 (stable) 2025-03-23

Gdk:
* CairoContext: Deprecate cairo_create().
* Device: Add get/property_active_layout_index(), get/property_layout_names().
* Surface: Add translate_coordinates(), deprecate create_cairo_context().
  (Kjell Ahlstedt)

Gtk:
* Accessible: Add update_platform_state().
* HeaderBar, WindowControls: Add get/set/property_use_native_controls().
* Widget: Add get/set/property_limit_events().
  (Kjell Ahlstedt)

Documentation:
* Gtk::SignalListItemFactory: Remove errroneous links.
  (Daniel Boles)
* Gtk::AboutDialog: Update the image.
* Gtk::ConstraintLayout: Add a link to the description of GtkConstraintLayout.
* Gdk::Pixbuf, PixbufFormat, PixbufLoader: Add class descriptions.
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.17.5
* Meson build: Use the Python installation that Meson uses.
  See merge request glibmm!67.
  (Kjell Ahlstedt)

4.17.0 (unstable) 2025-01-26

Gdk:
* ColorState: Add get_oklab() and get_oklch().
* ContentFormats: Add is_empty().
  (Kjell Ahlstedt)

Gtk:
* SearchEntry2: Add signal_activate().
  (Kjell Ahlstedt) Issue #161 (PBS)
* ColorDialogButton, DropDown, Expander, FontDialogButton, MenuButton,
  PasswordEntry, Text: Add signal_activate().
  (Kjell Ahlstedt)
* Snapshot: Add and deprecate render_background().
  (Kjell Ahlstedt) Merge request !91 (Ezike Ebuka)
* ApplicationWindow: Deprecate unset/set/get_help_overlay().
* ShortcutLabel, ShortcutsGroup, ShortcutsSection, ShortcutsShortcut,
  ShortcutsWindow: Deprecate these classes.
* FileDialog: Add open_text_file(), open_text_file_finish(),
  open_multiple_text_files(), open_multiple_text_files_finish(),
  save_text_file(), save_text_file_finish().
* ListBox: Add set/get/property_tab_behavior().
* StringList: Add find().
* TextView: Add get_visible_offset().
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.17.3.
  Require glibmm >= 2.75.0. Actually required since gtkmm 4.15.0.
* Meson build: If GTKMM_NO_DIST_TESTS is defined, 'meson dist'
  does not run test programs.
  (Kjell Ahlstedt)

4.16.0 (stable) 2024-09-10

Almost identical to 4.15.1.

Gtk:
* gtkmm.h: Add eventcontrollerlegacy.h.

4.15.1 (unstable) 2024-08-30:

Gdk:
* DrawContext: Deprecate begin_frame(), end_frame(), is_in_frame(),
  get_frame_region().
* Surface: Deprecate set_opaque_region().
  (Kjell Ahlstedt)
* Cursor: Rename create(const SlotGetTexture& slot, .....).
  Call it create_from_slot(). It was added in 4.15.0 (unstable),
  but some create() calls in old code became ambiguous.
  (Kjell Ahlstedt) Issue #159 (Alessandro Astone)

Gtk:
* Window: Add set_interactive_debugging().
* TextBuffer: Add enum TextBuffer::NotifyFlags,
  add_commit_notify(), remove_commit_notify().
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.15.5.
  (Kjell Ahlstedt)

4.15.0 (unstable) 2024-08-01:

Gdk:
* Cursor: Add create(slot, fallback).
* Add class CicpParams, ColorState and MemoryTextureBuilder.
* DmabufTextureBuilder: Add get/set/property_color_state().
* GLTextureBuilder.[ccg|hg]: Add get/set/property_color_state().
* Texture: Add get/property_color_state().
* TextureDownloader: Add get/set_color_state().
  (Kjell Ahlstedt)

Gtk:
* Widget: Deprecate set/unset/get_font_options().
  (Kjell Ahlstedt)
* Paned: Add unset_start_child() and unset_end_child().
  (Kjell Ahlstedt) Issue #156 (PBS)
* Add enum FontRendering.
* GraphicsOffload: Add set/get/property_black_background().
* Settings: Add property_gtk_font_rendering().
* FileDialog: Add a nullptr test.
  (Kjell Ahlstedt)
* Undefine preprocessor macro BSD, which can be defined in MacOS,
  and can interfere with enum License::BSD.
  (Kjell Ahlstedt) Issue #157 (Mohamed Akram)
* Shortcut: Add set_action(). Deprecate the misnamed
  set_trigger(const Glib::RefPtr<const ShortcutAction>& action).
* Snapshot: Deprecate gl_shader_pop_texture().
  (Kjell Ahlstedt)

Demos:
* Dialog demo: Fix a memory leak. Add some comments.
  (Kjell Ahlstedt)

Documentation:
* Gdk::Cursor: Update the class description.
* Gtk::Settings: Improve the class documentation.
  (Kjell Ahlstedt)
* Don't link to removed parts of library.gnome.org.
  (Andre Klapper, Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.15.4.
* Meson build: Require meson >= 0.62.0.
  Use Meson's pkgconfig module instead of using
  the *.pc.in templates.
  (Kjell Ahlstedt)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-03 17:39:27 -08:00
Changqing Li
219328f37c
version-check.conf: mute version mismatch warning for bpftrace
bpftrace set the version by "git describe --dirty", since we have local
patch for bpftrace, '-dirty' will be added into the version, set
CHECK_VERSION_PV to mute the version mismatch warning

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-03 06:08:00 -08:00
Changqing Li
d819512cb3
version-check.conf: mute version mismatch warning for flite
* flite --version return 1 block version output for
  check-version-mismatch.bbclass
* even with version output flite-2.2-current, regular version match
  regexp cannot match the version

so mute version mismatch warning for flite

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-03 06:08:00 -08:00
Jason Schonberg
350e4a7c62
webmin: upgrade 2.402 -> 2.501
Changelog: https://github.com/webmin/webmin/releases/tag/2.501
Changelog: https://github.com/webmin/webmin/releases/tag/2.500

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-02 15:54:06 -08:00
Gyorgy Sarvari
65c2f6de55
gupnp-av: add ptest support
It takes around a second to execute the suite.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-02 15:54:06 -08:00