summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* python3-portalocker: upgrade 2.8.2 -> 2.10.0Wang Mingyu2024-06-271-1/+1
| | | | | | | | | Changelog: - Properly propagating exceptions for NFS read-only lock issues and added support for being able to choose between lockf and flock Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pint: upgrade 0.23 -> 0.24Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Fix detection of invalid conversion between offset and delta units. - Added dBW, decibel Watts, which is used in RF high power applications - NumPy 2.0 support - Implement numpy roll (Related to issue #981) - Implement numpy correlate - Add 'dim_sort' function to _formatter_helpers. - Add 'dim_order' and 'default_sort_func' properties to FullFormatter. - Documented packages using pint. - Fixed bug causing operations between arrays of quantity scalars and quantity holding array resulting in incorrect units. - Fix LaTeX siuntix formatting when using non_int_type=decimal.Decimal. - Added refractive index units. - Fix converting to offset units of higher dimension e.g. gauge pressure - Fix unhandled TypeError when auto_reduce_dimensions=True and non_int_type=Decimal - Improved error message in 'get_dimensionality()' when non existent units are passed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pdm-backend: upgrade 2.3.0 -> 2.3.1Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | Changelog: ========= - Handle unexpected hg repo when parse scm version - Treat PDM_BUILD_SCM_VERSION empty string as unset - Honor the current working directory when importing pdm_build.py - Errors when using the editables backend with the includes field. - Vendor editables Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-parse: upgrade 1.20.1 -> 1.20.2Wang Mingyu2024-06-271-1/+1
| | | | | | | | Changelog: allow hyphen in field name. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-openpyxl: upgrade 3.1.3 -> 3.1.4Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | Changelo: ============== - #2189 Assigning named styles doesn't work - #2190 Problems caused when saving workbooks created by LibreOffice - Python 3.6 and 3.7 are no longer supported. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-meh: upgrade 0.51 -> 0.52Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | Changelog: ========== - Merge pull request #42 from M4rtinK/master-optional_libreport - Make libreport optional - Merge pull request #40 from M4rtinK/master-make_buildrequires - Add BuildRequires: make Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-marshmallow: upgrade 3.21.2 -> 3.21.3Wang Mingyu2024-06-271-1/+1
| | | | | | | | | Changelog: ============ Fix memory leak that prevented schema instances from getting GC'd Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-langtable: upgrade 0.0.66 -> 0.0.67Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | Changelog: ========== * Add tool to check which languages, scripts, and territories available in CLDR are missing in langtable * Add all missing scripts and languages: yrl, xnr, wbp, vmw, vec, trw, trv, skr, sdh, quc, pis, pcm, myv, mus, moh, mic, mhn, ltg, lmo, lld, kxv, kpe, kgp, ken, kcg, kaj, jbo, gaa, frr, csw, cic, cho, ceb, cch, cad, bss, blt, Tavt blo, bgn, bgc, rhg, Rohg hnj, Hmnp Shaw, Dsrt bew, bal, arn, apc, ann, scn * Drop Python < 3 support (using pyupgrade --py3-plus langtable.py) * Fix some ruff and pylint warnings Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-huey: upgrade 2.5.0 -> 2.5.1Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | Changelog: ============ - More makework thanks to the ass-clowns running Python. Fix issue with deprecation of datetime.utcnow() in 3.12. - Add API for customizing the TaskWrapper implementation, suitably named get_task_wrapper_class(). - Make the revoke_all(), restore_all() and is_revoked() more robust for various input types. - Fix bug that could occur in the event of a SIGHUP followed by a SIGINT when using thread workers. - Added new experimental contrib module for SQS queue and S3 result storage. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-googleapis-common-protos: upgrade 1.63.0 -> 1.63.1Wang Mingyu2024-06-271-1/+1
| | | | | | | | Changelog: Increase upper limit for protobuf 5.X versions Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-google-auth: upgrade 2.29.0 -> 2.30.0Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | | Features -------- - Add WebAuthn plugin component to handle WebAuthn get assertion request - ECP Provider drop cryptography requirement - Enable webauthn plugin for security keys Bug Fixes ---------- - Fix id_token iam endpoint for non-gdu service credentials - Makes default token_url universe aware Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-google-api-python-client: upgrade 2.131.0 -> 2.134.0Wang Mingyu2024-06-271-1/+1
| | | | | | | | Changelog: https://github.com/googleapis/google-api-python-client/releases/tag/v2.134.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flexparser: upgrade 0.3 -> 0.3.1Wang Mingyu2024-06-271-1/+1
| | | | | | | | Changelog: Fix flexparser FIPS mode. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-filelock: upgrade 3.15.3 -> 3.15.4Wang Mingyu2024-06-271-1/+1
| | | | | | | | | Changelog: ========== Pass file_lock as positional argument Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-email-validator: upgrade 2.1.1 -> 2.2.0Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: =========== - Email addresses with internationalized local parts could, with rare Unicode characters, be returned as valid but actually be invalid in their normalized form (returned in the normalized field). - The length check for email addresses with internationalized local parts is now also applied to the original address string prior to Unicode NFC normalization, which may be longer and could exceed the maximum email address length, to protect callers who do not use the returned normalized address. - Improved error message for IDNA domains that are too long or have invalid characters after Unicode normalization. - A new option to parse My Name <address@domain> strings - Improvements to Python typing. - Some additional tests added. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-djangorestframework: upgrade 3.15.1 -> 3.15.2Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | Changelog: ============ - Fix potential XSS vulnerability in browsable API. - Revert "Ensure CursorPagination respects nulls in the ordering field". - Use warnings rather than logging a warning for DecimalField. - Remove unused code. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-coverage: upgrade 7.5.3 -> 7.5.4Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | Changelog: ============ - If you attempt to combine statement coverage data with branch coverage data, coverage.py used to fail with the message "Can't combine arc data with line data" or its reverse, "Can't combine line data with arc data." These messages used internal terminology, making it hard for people to understand the problem. They are now changed to mention "branch coverage data" and "statement coverage data." - Fixed a minor branch coverage problem with wildcard match/case cases using names or guard clauses. - Started testing on 3.13 free-threading (nogil) builds of Python. I'm not claiming full support yet. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-bandit: upgrade 1.7.8 -> 1.7.9Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | | Changelog: ========== - [pre-commit.ci] pre-commit autoupdate - New logo for Bandit based on raccoon - Start testing on Python 3.13 - Updates banner logo so it renders well in dark mode - Add a sponsor section to README - Ensure sarif extra is included as part of doc build - Guard against empty call argument list - Support configfile in .bandit file Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-argcomplete: upgrade 3.3.0 -> 3.4.0Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | Changelog: =========== - No stdin for python calls from bash completion functions - Localize shell variable REPLY to avoid overwriting users' value Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ansi2html: upgrade 1.9.1 -> 1.9.2Wang Mingyu2024-06-271-1/+1
| | | | | | | | Changelog: [>=1.9.1] Fix output for --help Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.10 -> 2.6.11Wang Mingyu2024-06-272-7/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch refreshed for 2.6.11 Changelog: ============= - Implement server_poll_timeout for socks - Use snprintf instead of sprintf for get_ssl_library_version - Add bracket in fingerprint message and do not warn about missing verification - Replace macos11 with macos14 in github runners - Only run coverity scan in OpenVPN/OpenVPN repository - Workaround issue in LibreSSL crashing when enumerating digests/ciphers - Properly handle null bytes and invalid characters in control messages - Allow to set ifmode for existing DCO interfaces in FreeBSD - samples: Update sample configurations - documentation: make section levels consistent - phase2_tcp_server: fix Coverity issue 'Dereference after null check' - script-options.rst: Update ifconfig_* variables - LZO: do not use lzoutils.h macros - Remove "experimental" denotation for --fast-io - Implement Windows CA template match for Crypto-API selector - misc.c: remove unused code - interactive.c: Improve access control for gui<->service pipe - Only schedule_exit() once Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opentelemetry-cpp: upgrade 1.15.0 -> 1.16.0Wang Mingyu2024-06-271-1/+1
| | | | | | | Changelog: https://github.com/open-telemetry/opentelemetry-cpp/releases/tag/v1.16.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.11.0 -> 1.12.0Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | Changelog: ========== * Adapt to the new way of handling the 2FA secret by the daemon, needed by it to fix a bug with certain clients. Requires NetworkManager >= 1.46.2. * Update Slovenian and Hungarian translations. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* msgraph: upgrade 0.2.2 -> 0.2.3Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | Changelog: ============ * Fix memory leaks * Fix logger level warning Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mcelog: upgrade 199 -> 200Wang Mingyu2024-06-271-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libimobiledevice-glue: upgrade 1.2.0 -> 1.3.0Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | Changelog: ========== * Add SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 functions to interface * socket: Create an IPv4 compatible IPv6 socket when NULL is passed to socket_create * socket: Haiku compilation fixes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libfido2: upgrade 1.14.0 -> 1.15.0Wang Mingyu2024-06-271-2/+2
| | | | | | | | | | | | | | | | | | | | License-Update: Copyright year updated to 2024. Changelog: ============ * 1.15.0 will be the last release to support OpenSSL 1.1. * bio, credman: improved CTAP 2.1 support. * hid_osx: fix issue where fido_hid_read() may block unnecessarily * fido2-token -I: print maxcredbloblen. * hid_linux: improved support for uhid devices. * New API calls: - fido_cred_set_attobj; - fido_cred_x5c_list_count; - fido_cred_x5c_list_len; - fido_cred_x5c_list_ptr. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libextutils-helpers-perl: upgrade 0.026 -> 0.027Wang Mingyu2024-06-271-3/+2
| | | | | | | | | | | | Changelog: - Revert "Make split_like_shell always unixy" License-Update: modify format update Artistic License 1.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.14 -> 3.0.15Wang Mingyu2024-06-271-1/+1
| | | | | | | | Changelog: api: Add DIOCTL_GET_CPU_PROFILE_DATA ioctl to get cpu profile data Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcrypt-openssl-random-perl: upgrade 0.16 -> 0.17Wang Mingyu2024-06-271-2/+2
| | | | | | | | | | | | | | Changelog: ========== - fix older aix with missing -lz dependencies - minor ci fixes License-Update: "(Some other Free Software Foundation software is covered by the GNU Library General Public License instead.)" removed from license file. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcgi-perl: upgrade 4.64 -> 4.66Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | Changelog: ============ - Restore trailing slashes in the ->url call (GH #267) - "fix" t/url.t for older Perls (GH #266) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libbpf: upgrade 1.4.2 -> 1.4.3Wang Mingyu2024-06-271-2/+2
| | | | | | | | Changelog: Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally) duping FDs. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iniparser: upgrade 4.2.2 -> 4.2.4Wang Mingyu2024-06-271-1/+1
| | | | | | | | Changelog: Fix paths in generated pkgconfig file Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gtkwave: upgrade 3.3.119 -> 3.3.120Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | Changelog: ============ - Add launchable tag in io.github.gtkwave.GTKWave.metainfo.xml. - Fix memory leak on name in build_hierarchy_array(). - Fix memory leak in ptranslate/ttranslate. - Fix case of missing newline at EOF for VCD loaders. - Add escape handling state machine for vars in FST loader. - Remove escape check on coalesce in FST loader. - CreateFileMapping() warning fix for win32 compiles. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gensio: upgrade 2.8.4 -> 2.8.5Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | Chanelog: ========== - Fix relinking issue - README.rst: fix typos - Add initial EditorConfig support - .gitignore: ignore ctags generated tags file - tests:conacc: Add a test for a connection failure - conacc: Null the connection data if the connection fails - Fix a compile error when GCC atomics are off - tools:gtlsshd: Add handling of accepter parmlog events - tools:agwpe: Fix missing nil termination and uninitialized variable - Fix some formatting in the README Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 10.0 -> 10.0.1Wang Mingyu2024-06-271-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiftool: upgrade 12.85 -> 12.87Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Added ability to write Google Container XMP tags (using the namespace prefix 'GContainer' to avoid conflict with the Google Device Container prefix) - Decode a few new tags for the Canon EOS R5 - Decode battery information for the Pentax K-3 III - Decode RAFCompression from FujiFilm RAF images - Avoid reporting FileSize of 0 for pipes - Updated Geolocation databases from current geonames.org files - Skip over Matroska Cluster if necessary to read Tags if referenced in SeekHead - Changed conversion for Matroska SeekID (now in hex with tag name in brackets) and SeekPosition (now returns an absolute offset) - Fixed problem writing XMP-Device:EarthPos coordinates - Fixed typo in a value of Canon:DigitalLensOptimizer - Fixed decoding of Matroska VideoScanType - Fixed misleading error message when -o option was used to write to an unsupported file type - Added a new value for a couple of Olympus tags - Improved handling of ID3 user-defined tags - Decode all JPEG segments from RICO box in Ricoh MOV videos - Decode a few new values for some tags written by Canon EOS R cameras - Patched some Olympus WB_RBLevels tags to allow 4 values to be written as per some newer models - Fixed issue when writing IPTC date tags with a date/time value containing subseconds with 4 or more digits Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* editorconfig-core-c: upgrade 0.12.7 -> 0.12.9Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | Changelog: ============ - lib/ec_glob: Fix potentially uninitialized variable warning. - Bump CMake requirement to 3.16.3 - lib/ec_glob: plug leak of nums utarray - Clarify the steps of building from source. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dialog: upgrade 1.3-20240307 -> 1.3-20240619Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | | | Changelog: ============ + modify configure script to ease deprecation of libtool-bin package + update dialog.map, dialog.sym for 2023/10/02 changes. + improve dialog-config.in, + suppressing several special cases of linker options, and + adding support for --cflags-only-I, --cflags-only-other + fix a few cppcheck warnings + improvements to NLS configuration. + add configure check for PIC vs PIE, needed for linking to libraries which lack pkg-config scripts to specify LDFLAGS. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.1.20240602.0 -> 6.1.20240623.0Wang Mingyu2024-06-271-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cryptsetup: upgrade 2.7.2 -> 2.7.3Wang Mingyu2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ * Do not allow formatting LUKS2 with Opal SED (hardware encryption) * Fixes to wiping LUKS2 headers after Opal locking area erase. * Mention the need for possible PSID revert before Opal format for some drives (man page). * Fix Bitlocker-compatible code to ignore newly seen metadata entries. * Fix interactive query retry if LUKS2 unbound keyslot is present. * Detect unsupported zoned devices for LUKS header devices. * Allow "capi" cipher format for benchmark command and fix parsing of plain IV in "capi" format. * Add support for HCTR2 encryption mode. * Source code now uses SPDX license identifiers instead of full license preambles. * Fix missing includes for cryptographic backend that could cause compilation errors for some systems. * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2. * Fix various (mostly false positive) issues detected by Coverity. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: fix CVE-2024-2397Hitendra Prajapati2024-06-272-0/+130
| | | | | | | Upstream-Status: Backport from https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tbb: pass TBB_STRICT=OFF to disable -WerrorAnuj Mittal2024-06-271-0/+1
| | | | | | | | Don't treat compiler warnings as errors to avoid failures when compiling with newer versions. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiv2: update 0.28.0 -> 0.28.2Markus Volk2024-06-272-19/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Remove outdated comment - Switch to git fetcher. Otherwise the official download location leads to: WARNING: exiv2-0.28.2-r0 do_recipe_qa: QA Issue: exiv2: SRC_URI uses unstable GitHub/GitLab archives, convert recipe to use git protocol [src-uri-bad] - Remove reproducibility hack. Theres no buildpath leakage in exiv2Config.cmake anymore. Changes from version 0.28.1 to 0.28.2 ------------------------------------- Release Notes: * https://github.com/Exiv2/exiv2/issues/2914 * https://github.com/Exiv2/exiv2/milestone/13?closed=1 This release also fixes two low-severity security issues in quicktimevideo.cpp: * [CVE-2024-24826](https://github.com/Exiv2/exiv2/security/advisories/GHSA-g9xm-7538-mq8w): out-of-bounds read in QuickTimeVideo::NikonTagsDecoder. * [CVE-2024-25112](https://github.com/Exiv2/exiv2/security/advisories/GHSA-crmj-qh74-2r36): denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder. These vulnerabilities are in a new feature (quicktime video) that was added in version 0.28.0, so earlier versions of Exiv2 are not affected. Changes from version 0.28.0 to 0.28.1 ------------------------------------- Release Notes: https://github.com/Exiv2/exiv2/issues/2813 This release also fixes [CVE-2023-44398](https://github.com/Exiv2/exiv2/security/advisories/GHSA-hrw9-ggg3-3r4r), an out-of-bounds write in `BmffImage::brotliUncompress`. The vulnerability is in new code that was added in version 0.28.0, so earlier versions of Exiv2 are not affected. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* v4l-utils: Install media ctrl header and library filesNeel Gandhi2024-06-272-0/+79
| | | | | | | | | | | Commit 9389d63fdddcab400cb0b243b74d47bf665aba18 removed a previous patch that caused the recipe to install the header and library files. Restore this behavior to the new meson based build system. Signed-off-by: Neel Gandhi <neel.gandhi@amd.com> Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Do not use overloadable attribute with muslKhem Raj2024-06-271-4/+2
| | | | | | | clang fortify with glibc is where the issue happens so limit it to just glibc Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tipcutils: Replace WORKDIR with UNPACKDIRKhem Raj2024-06-271-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade to 8.2.20Soumya Sambu2024-06-271-1/+1
| | | | | | | | | | Includes fix for CVE-2024-5458 and other bugs Changelog: https://www.php.net/ChangeLog-8.php#PHP_8_2 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uutils-coreutils: upgrade 0.0.26 -> 0.0.27Etienne Cordonnier2024-06-272-89/+123
| | | | | | | See https://github.com/uutils/coreutils/releases/tag/0.0.27 Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tree: fix broken linksBenjamin Szőke2024-06-231-2/+2
| | | | | | | | | | | New tarball location is: http://oldmanprogrammer.net/tar/tree/ Homepage is: http://oldmanprogrammer.net/source.php?dir=projects/tree Signed-off-by: Benjamin Szőke <egyszeregy@freemail.hu> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-08 13:42:34 +0000