summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* python3-backports-zstd: Upgrade to 1.3.0master-nextKhem Raj2 hours1-2/+5
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fastapi-cli: upgrade 0.0.16 -> 0.0.20Liu Yiding2 hours1-1/+1
| | | | | | | | Changelog: https://github.com/fastapi/fastapi-cli/releases/tag/0.0.20 Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.12.3 -> 1.12.5Liu Yiding2 hours1-1/+3
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.52.0 -> 1.52.2Liu Yiding2 hours1-2/+2
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tmux: add packageconfig for sixel supportMarkus Volk13 hours1-0/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* botan: Remove ptests execution on rv32Khem Raj15 hours1-1/+2
| | | | | | It needs go compiler and runtime which is missing on rv32 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* initramfs-kexecboot-image: Allow supported architecturesKhem Raj15 hours1-1/+5
| | | | | | Not all arches e.g. rv32 support kexec atm, reflect that here Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gimp: patch CVE-2025-14425Gyorgy Sarvari16 hours2-0/+80
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-14425 Backport the patch referenced by the nvd report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gimp: patch CVE-2025-14424Gyorgy Sarvari16 hours2-0/+35
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-14424 Pick the patch referenced by the NVD report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gimp: patch CVE-2025-14423Gyorgy Sarvari16 hours2-0/+107
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-14423 Pick the patch references by the NVD report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gimp: patch CVE-2025-14422Gyorgy Sarvari16 hours2-5/+73
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-14422 Pick the patch referenced by the NVD report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tesseract: upgrade 5.5.1 -> 5.5.2Wang Mingyu16 hours1-2/+2
| | | | | | | | | | | | | | | | | | | | | Changelog: ============= - Simplify code for osdetect - Fix and improve configuration for cmake builds - Modernize some for loops and fix some signed/unsigned issues - Cmake optimization with warp2 - Update checkout action - chore: fix cyrillic typo - Move version info. to appropriate ALTO element - CI: Remove unneeded export statements from cmake workflow for macOS - Bump actions/checkout from 5 to 6 - Bump github/codeql-action from 2 to 4 - Bump actions/upload-artifact from 4 to 5 - Bump mikepenz/action-junit-report from 4 to 6 - Bump actions/upload-artifact from 5 to 6 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-typer: upgrade 0.20.1 -> 0.21.0Wang Mingyu16 hours1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pikepdf: upgrade 10.0.3 -> 10.1.0Wang Mingyu16 hours1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-marshmallow: upgrade 4.1.1 -> 4.1.2Wang Mingyu16 hours1-1/+1
| | | | | | | | Changelog: Merge error store messages without rebuilding collections. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-elementpath: upgrade 5.0.4 -> 5.1.0Wang Mingyu16 hours1-2/+2
| | | | | | | | | | | | | | License-Update: Copyright year updated to 2025. Changelog: =========== - Drop Python 3.9 compatibility and add Pyton 3.15 support - Improve XPath sequence internal processing with a list derived type xlist - Extensions and fixes for XSD datatypes - Add XSequence datatype for external representation of XPath sequences Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-coverage: upgrade 7.13.0 -> 7.13.1Wang Mingyu16 hours1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ - Added: the JSON report now includes a "start_line" key for function and class regions, indicating the first line of the region in the source. - Added: The debug data command now takes file names as arguments on the command line, so you can inspect specific data files without needing to set the COVERAGE_FILE environment variable. - Fix: the JSON report used to report module docstrings as executed lines, which no other report did, as described in issue 2105. - Fix: coverage.py uses a more disciplined approach to detecting where third-party code is installed, and avoids measuring it. - Performance: data files that will be combined now record their hash as part of the file name. This lets us skip duplicate data more quickly, speeding the combining step. - Docs: added a section explaining more about what is considered a missing branch and how it is reported: Examples of missing branches, as requested in issue 1597. - Tests: the test suite misunderstood what core was being tested if COVERAGE_CORE wasn't set on 3.14+. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-bleak: upgrade 2.0.0 -> 2.1.0Wang Mingyu16 hours1-1/+1
| | | | | | | | | | | | | | Changelog: ============= - Added bluez parameter to BleakClient.start_notify() to allow forcing using "StartNotify" instead of "AcquireNotify" on BlueZ backend. - Added bleak.args.SizedBuffer type for better type hinting of buffer protocol parameters. - Fixed calling logging.debug() in WinRT backend. - Fixed calling logging.warning() in BlueZ backend. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gpsd: upgrade 3.27.1 -> 3.27.2Wang Mingyu16 hours1-1/+1
| | | | | | | | Changelog: Fix a gpsd.rules warning. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fluentbit: upgrade 4.2.1 -> 4.2.2Wang Mingyu16 hours1-1/+1
| | | | | | | | | | | | | | | Changelog: ========== - packaging: script: Use rockylinux prefix on package testing script - security: Update supporting timeline - out_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests - aws: Implement simple_aggregation operation - out_kinesis_firehose: enable HTTP debugging for AWS client requests - http_client: add ipv6 bracket if missing from host address - lib: updates 20251223 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiftool: upgrade 13.44 -> 13.45Wang Mingyu16 hours1-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: =========== - Added a number of new values for some Sony tags - Added a few new button functions for the Nikon Z9 - Added some Nikon subject detection values - Added a new Canon SubjectSwitching value - Decode Ricoh APP7 maker notes - Patched to allow a specific PreviewImage to be written to a DNG file containing multiple previews - Fixed minor error when writing some DJI DNG files - Fixed bug reading large Protobuf integers on 32-bit systems - API Changes: - Added SystemTimeRes option Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bubblewrap: upgrade 0.10.0 -> 0.11.0HEADmasterGyorgy Sarvari41 hours2-639/+4
| | | | | | | | | | | | | One big change that comes with this update is the build system change: the project removed autotools and now uses meson. Dropped 0001-Use-stdbool.h-for-booleans.patch because it is included in this release. Changelog: https://github.com/containers/bubblewrap/releases/tag/v0.11.0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* logwatch: upgrade 7.11 -> 7.13Gyorgy Sarvari41 hours1-7/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update SRC_URI because the previous one became inaccessible. Slightly update do_install - now it is in line with the installation script from the project's own RPM file (previous some files were not installed) Shortlog: [logwatch] Preparation for Release 7.13 [rsyslogd] De-duplicate lines with time calculations [sendmail] Removed invalid commented-out code. [logstash] Remove script - needs update to Logwatph.pm [sendmail] Improved detection of "Command unrecognized" strings. [rsyslogd] Ignore "GnuTLS error: Error in the push function" - paired with other errors [omsa] Handle peak power and new Unexpected sense messages [systemd] Add ignore_messages option to ignore messages matching a regex [kernel] Fix EDAC regex [rsyslogd] Ignore additional rate-limiting message paired with other messages [rsyslogd] Ignore additional omfwd messages paired with other messages [nut] Ignore upsnotify message about tech that we already know about [pam_unix] Add nx to services; Allow for username in session opened by messages for cron [pam_unix] Add kde to dektop services; Hande "User info message" [systemd] Update for newer systemd [logstash] Initial version [systemd] Ignore "Unnecessary job was removed for .*" - appears informational [systemd] Ignore State timed out messages - followed by a failed message [named] No need for unconfineds variable, not used [clam-update] Added comments about syslog format. [logwatch.8] Clarified use of debug. Fix Dir glob issue Iridos2 bug report. [postfix] Added support for postfix version 3.10 [zypp] Added support for patch statements; reported by leithh. [dovecot] Added better detail granularity, and support logformat 2.3 [systemd] Relax LSM BPF program attached regex [dirsrv] Relax ACL target does not exist regex; Ignore schema-compat-plugin info messages that are at ERR level [dovecot] Script and configuration file updated with granular detail options and improved report grouping [clam-update] Fixed typo. [clam-update] Check for empty LogFile strings and adjust error messages [onlyservice,removeheaders] Allow RFC 3164 Log Format with named facility.severity [http] Setting default http_rc code for when not specified in LogFormat [logwatch.pl,syslog-ng] Removed HTML Entity encoding for xml, as all strings are now UTF-8 (tag: 7.12) [logwatch] Updating release version [http] Replace hyphen with "Unidentified agent," [named] Handle "zone not loaded due to errors; Handle "journal file is out of date; removed" separately; Ignore "New key observered for zone" [named] handle "TCP client quota reached" messages; Expand limit regex Remove trailing whitespace [nut] Handle battery needs to be replaced message [nut] Update for 2.8.2 [postfix] Support for aliased mailboxes [zz-zfs] Added 'Cap' column header [sudo] Add sudo_detail [omsa] Ignored Administrator stopped message [omsa] Update Patrol Read regex [sssd] Ignore "exec_child_ex command" messages [secure] relax regex around "gkr-pam: no password is available for user" [secure] Ignore sshd-session messages [sendmail] Added filter for new pre-greeting message. [postfix] Added DNSBL rank display [sshd] Added 'drop connection' counter. [rsyslogd] Handle stdout/stderr sent to journal which ends up with an extra prefix [named] Add option to ignore denied zone trasfter; Move limit reporting to detail >= 1 [systemd] Handle new Watchdog and Reexecuting requested messages [dnf-automatic] New script contributed by Clive Lin. [mdadm] Check if hash of 'good devices' is undefined or empty. [sshd,secure] Added support for OpenSSH 9.8 (sshd-session, port number), per tomop. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* links-x11: vendor icon image from layerGyorgy Sarvari41 hours2-2/+1
| | | | | | | | | | The url from where this icon was sourced origiannly has been inaccessible since a while (the domain seems to be parked). Instead of displaying the fetcher warning, just vendor this image from the layer directly - it's only a 4kB icon. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tomoyo-utils: upgrade 2.6.1-20210910 -> 2.6.1-20250707Gyorgy Sarvari41 hours1-2/+4
| | | | | | | | | | | | | Also update the SRC_URI, the previous one became inaccessible. Changelog: - Update project's website. - /usr/lib/tomoyo/init_policy Remove rewrite rules handled by commit bdc35f164b0f ("tomoyo: use better patterns for procfs in learning mode"). Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tigervnc: compare vendored xserver version to oe-core's xserverGyorgy Sarvari41 hours1-0/+10
| | | | | | | | | | | | | | | | | | TigerVNC compiles its own xserver from a separate tarball, it doesn't use oe-core's xserver for most of the compilation. The vendored xserver code should be still kept in sync with oe-core to minimize incompatibilities, feature and bug-discrepepancies (...) However it is easy to miss when xserver is updated in oe-core, TigerVNC's xserver gets out of sync frequently. This change adds a small check before do_configure that compares the vendored and oe-core's xserver version, and issues a warning if TigerVNC recipe needs to be synced to oe-core. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libowfat: update SRC_URIGyorgy Sarvari41 hours1-1/+1
| | | | | | | | The https link does not work anymore, it just refuses the connection. http still works though. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ncp: update SRC_URIGyorgy Sarvari41 hours1-1/+1
| | | | | | | | The https link does not work anymore, it just refuses the connection. http still works though. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* overlayfs-tools: upgrade 2024.07 -> 2025.01Gyorgy Sarvari41 hours3-99/+2
| | | | | | | | | | | | | | | Drop the patches that were merged in this release. Shortlog: show why files can't be open using errno Fix memory free Allow force to execute script, and keep upper dir while merge Fix broken long option for ignore Change program_name to have const attribute always use glibc basename() Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exfatprogs: add ptest supportGyorgy Sarvari41 hours3-2/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It takes about a second to execute the suite. Sample output (the "ERRORs" are coming from negative tests): root@qemux86-64:~# ptest-runner START: ptest-runner 2025-12-26T20:19 BEGIN: /usr/lib/exfatprogs/ptest Running ./bad_file_size ----------------------------------- exfatprogs version : 1.2.6 ERROR: /dir_01/bad_child_01: less clusters are allocated. truncates to 8192 bytes at 0x206060. Truncate (y/N)? y ERROR: /dir_02/bad_child_02: more clusters are allocated. truncate to 8192 bytes at 0x209060. Truncate (y/N)? y exfat.img: clean. directories 3, files 9 exfat.img: files corrupted 0, files fixed 1 exfatprogs version : 1.2.6 exfat.img: clean. directories 4, files 10 PASS: ./bad_file_size [...many lines...] PASS: ./bad_num_chain Running ./loop_chain ----------------------------------- exfatprogs version : 1.2.6 ERROR: /dir_01/bad_child_01: more clusters are allocated. truncate to 16384 bytes at 0x206060. Truncate (y/N)? y ERROR: /dir_02/bad_child_02: cluster is already allocated for the other file. truncated to 8192 bytes at 0x209060. Truncate (y/N)? y exfat.img: clean. directories 3, files 9 exfat.img: files corrupted 0, files fixed 1 exfatprogs version : 1.2.6 exfat.img: clean. directories 4, files 10 PASS: ./loop_chain PASS: 17 of 17 DURATION: 1 END: /usr/lib/exfatprogs/ptest 2025-12-26T20:21 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* physfs: upgrade 3.0.2 -> latest revisionGyorgy Sarvari41 hours3-59/+19
| | | | | | | | | | | | | | | License-Update: small formatting changes and copyright year update. License hasn't changed. The previous version of the recipe, 3.0.2 was released in 2019. The last release, 3.2.0 was done in 2022. However the project is still actively developed (it just moved to Github) - fetch the latest revision, at least until there is a new release. Shortlog: https://github.com/icculus/physfs/commits/main?since=2019-03-19&until=2025-12-26 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* softhsm: fix SRC_URI branchGyorgy Sarvari3 days1-1/+1
| | | | | | | | The "develop" branch doesn't exist anymore, the used revision can be found on the "main" branch. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unionfs-fuse: add ptest supportGyorgy Sarvari3 days5-2/+122
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It takes about a second to execute. Added two patches: - One adapts the testuite to ptest, to test the installed binary instead of testing the one from the build folder. - Another that fixes a bug in unionfsctl, which made the test fail. This patch is submitted upstream. Sample output: root@qemux86-64:~# ptest-runner START: ptest-runner 2025-12-26T19:03 BEGIN: /usr/lib/unionfs-fuse/ptest ptestuser:!:20448:0:99999:7::: PASS: test_all.IOCTL_TestCase.test_debug PASS: test_all.IOCTL_TestCase.test_wrong_args PASS: test_all.UnionFS_Help.test_help [...many lines...] PASS: test_all.UnionFS_RW_RW_PreserveBranch_TestCase.test_permissions_after_creating_directories PASS: test_all.UnionFS_Sync.test_sync PASS: test_all.UnionFS_Version.test_help ============================================================================ Testsuite summary DURATION: 0 END: /usr/lib/unionfs-fuse/ptest 2025-12-26T19:03 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unionfs-fuse: upgarde 3.4 -> 3.7Gyorgy Sarvari3 days2-36/+3
| | | | | | | | | | | | | | | | | | | | | | License-Update: copyright year bump Drop patch which became unneeded (CFLAGS are not overwritten anymore) Selected shortlog (without readme and CI changes): - Use fchmodat with AT_SYMLINK_NOFOLLOW if available - Use utimensat on macOS - tests: properly test for directory existence using os.path.isdir - Enable commented test for rmdir - Add more tests for renaming using cow - Allow directory renaming when cow is disabled but it only exists in one branch - Use existing function for checking if file exists - Fix directory rename hiding files from lower branches - remove deprecated "use_ino" option from examples and documentation - CMake: Support CFLAGS= and -DCMAKE_C_FLAGS= from the outside - set -D_FILE_OFFSET_BITS=64 unconditionally so that compilation does not fail on 32bit systems Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* simple-mtpfs: update to latest revisionGyorgy Sarvari3 days1-1/+2
| | | | | | | | | | | | | The application hasn't received updates lately, but there is a bugfix that is missing from the recipe. Changelog: On partial read/write, keep reading: This avoids rsync errors and avoids data loss with cp, due to failing to copy the last byte of 0.1953125% of files. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: ignore CVE-2025-46686Gyorgy Sarvari3 days2-0/+2
| | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-46686 Upstream disputes that it is a security violation, and says that implementing a mitigation for this would negatively affect the rest of the application, so they elected to ignore it. See Github advisory about the same vulnerability: https://github.com/redis/redis/security/advisories/GHSA-2r7g-8hpc-rpq9 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rtkit: update 0.13 -> 0.14Markus Volk3 days1-2/+3
| | | | | | | | | | | | | | | | | | | | - add HOMEPAGE - update SRC_URI Release notes Fix a bug that caused all RT privileges to sometimes be dropped on resume from suspend (#13 (closed)) Drop autotools build system Add an rtkit_make_realtime_simple() with no arguments Drop default log level to reduce log spam Rename priority parameter of MakeThreadHighPriority to nice_level (does not change API) Implement org.freedesktop.DBus.Properties.GetAll Add a sysusers config Correctly specify client license as MIT A number of documentation and build cleanups Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-software: update 49.1 -> 49.2Markus Volk4 days1-2/+2
| | | | | | | | | | | | | | | | | | | | | | | - inherit pkgconfig Version 49.2 ~~~~~~~~~~~~ Released: 2025-11-20 This is a stable release with the following changes: * Fixed version history sometimes not showing for flatpak apps This release also updates translations: * Bokmål, Norwegian (Brage Fuglseth) * Catalan (Victor Dargallo) * Friulian (Fabio Tomat) * Greek, Modern (1453-) (Efstathios Iosifidis) * Persian (Danial Behzadi) * Romanian (Antonio Marin) * Serbian (Милош Поповић) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-software: fix build with flatpak 1.17.1Markus Volk4 days2-0/+57
| | | | | | | | fixes: ../sources/gnome-software-49.1/meson.build:218:32: ERROR: Could not get pkg-config variable and no default provided for <PkgConfigDependency flatpak: True ['>= 1.14.1']> Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: fix broken PACKAGECONFIGsGyorgy Sarvari5 days1-0/+2
| | | | | | | | | | | | | | | | | | | Some PACKAGECONFIGs (cifsidmap, cifsacl, pam) were failing to build since a while, erroring out with: | ../sources/cifs-utils-7.4/resolve_host.c:23:10: fatal error: config.h: No such file or directory | 23 | #include "config.h" | | ^~~~~~~~~~ | compilation terminated. The config.h header is generated in the root of build folder, and it seems that the recipe can't be built 100% out of the source tree. To avoid this issue, add ${B} as an include folder to CFLAGS, so it finds the required header. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: upgrade 7.0 -> 7.4Gyorgy Sarvari5 days1-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains fix for CVE-2025-2312 The recipe installs two scripts in bindir - this is nothing new. But the shebang has changed from "/usr/bin/env python3" to "/usr/bin/python3" - these were always python scripts, but they weren't recognized as such during the QA checks, and python wasn't installed as a runtime dependency. Now QA check is complaining about missing python in RDEPENDS. To avoid mandatory python installation, package the scripts separately in cifs-utils-scripts package. Shortlog: cifs-utils: bump version to 7.4 mount.cifs: retry mount on -EINPROGRESS cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP cifscreds: use <libgen.h> for basename getcifsacl, setcifsacl: use <libgen.h> for basename cifs.upcall: fix memory leaks in check_service_ticket_exits() cifs-utils: bump version to 7.3 Fix regression in mount.cifs with guest mount option resolve_host.c: Initialize site_name cldap_ping: Fix socket fd leak cifs-utils: bump version to 7.2 getcifsacl: fix return code check for getting full ACL cifs-utils: add documentation for upcall_target cifs-utils: avoid using mktemp when updating mtab cldap_ping.c: add missing <sys/types.h> include configure.ac: libtalloc is now mandatory cifscreds: allow user to set the key's timeout cifscreds: use continue instead of break when matching commands Do not pass passwords with sec=none and sec=krb5 docs: add esize description docs: add max_cached_dirs description docs: update actimeo description Fix compiler warnings in mount.cifs CIFS.upcall to accomodate new namespace mount opt cifs-utils: Skip TGT check if valid service ticket is already available use enums to check password or password2 in set_password, get_password_from_file and minor documentation additions cifs-utils: support and document password2 mount option smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo cifs-utils: bump version to 7.1 cifs: update documentation for sloppy mount option docs: add closetimeo description docs: add compress description checkopts: update it to work with latest kernel version cifs-utils: add documentation for multichannel and max_channels cifs-utils: smbinfo: add gettconinfo command Implement CLDAP Ping to find the closest site mount.cifs.rst: update section about xattr/acl support mount.cifs.rst: add missing reference for sssd getcifsacl, setcifsacl: add missing <endian.h> include for le32toh getcifsacl, setcifsacl: add missing <linux/limits.h> include for XATTR_SIZE_MAX cifs-utils: Make automake treat /sbin as exec, not data pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog() cifs.upcall: fix UAF in get_cachename_from_process_env() cifs-utils: add documentation for acregmax and acdirmax setcifsacl: Fix uninitialized value. Use explicit "#!/usr/bin/python3" Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tigervnc: ignore CVE-2025-26594...26601Gyorgy Sarvari5 days1-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ignore the following CVEs: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601 Details: https://nvd.nist.gov/vuln/detail/CVE-2025-26594 https://nvd.nist.gov/vuln/detail/CVE-2025-26595 https://nvd.nist.gov/vuln/detail/CVE-2025-26596 https://nvd.nist.gov/vuln/detail/CVE-2025-26597 https://nvd.nist.gov/vuln/detail/CVE-2025-26598 https://nvd.nist.gov/vuln/detail/CVE-2025-26599 https://nvd.nist.gov/vuln/detail/CVE-2025-26600 https://nvd.nist.gov/vuln/detail/CVE-2025-26601 TigerVNC compiles its own xserver, this is why these CVEs are associated with it - despite the vulnerabilities being in xserver. All of these vulnerabilities were fixed by the same PR[1], which has been part of xserver since version 21.1.16 (the currently used xserver version in TigerVNC is 21.1.18). Due to this, ignore these vulnerabilities, and just mark them as patched. [1]: https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1830 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tigervnc: ignore CVE-2023-6478Gyorgy Sarvari5 days1-0/+1
| | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2023-6478 TigerVNC compiles its own xserver, this is why this CVE is associated with it - despite the vulnerability being in xserver. The vulnerability was fixed by [1] (from the nvd report), which has been backported[2] to the xserver version used by the recipe - so ignore the CVE, since it's patched already. [1]: https://gitlab.freedesktop.org/xorg/xserver/-/commit/14f480010a93ff962fef66a16412fafff81ad632 [2]: https://gitlab.freedesktop.org/xorg/xserver/-/commit/58e83c683950ac9e253ab05dd7a13a8368b70a3c Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tigervnc: ignore CVE-2023-6377Gyorgy Sarvari5 days1-0/+1
| | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2023-6377 TigerVNC compiles its own xserver, this is why this CVE is associated with it - despite the vulnerability being in xserver. The vulnerability was fixed by [1] (from the nvd report), which has been backported[2] to the xserver version used by the recipe - so ignore the CVE, since it's patched already. [1]: https://gitlab.freedesktop.org/xorg/xserver/-/commit/0c1a93d319558fe3ab2d94f51d174b4f93810afd [2]: https://gitlab.freedesktop.org/xorg/xserver/-/commit/a7bda3080d2b44eae668cdcec7a93095385b9652 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tigervnc: sync xserver code with oe-coreGyorgy Sarvari5 days1-2/+2
| | | | | | | | TigerVNC compiles its own xserver. Synchronize the xserver version with oe-core. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* smarty: extend CVE_PRODUCTGyorgy Sarvari5 days1-1/+1
| | | | | | | | | | | Some CVEs assign smarty-php as the vendor to the corresponding CPE. E.g CVE-2024-35226[1] is tracked with smarty-php:smarty by mitre (NVD tracks it without CPE). [1]: https://cveawg.mitre.org/api/cve/CVE-2024-35226 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dracut: upgrade 108 -> 109Gyorgy Sarvari5 days2-37/+2
| | | | | | | | | Drop patch that is included in this release. Changelog: https://github.com/dracut-ng/dracut-ng/releases/tag/109 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libopenmpt: upgrade 0.7.10 -> 0.8.4Gyorgy Sarvari5 days1-2/+2
| | | | | | | | | | | | | | | | | | | | | Changelog: https://lib.openmpt.org/doc/changelog.html License-Update: copyright year bump Ptest passed: root@qemux86-64:/usr/lib/libopenmpt/ptest# ptest-runner START: ptest-runner 2025-12-25T09:29 BEGIN: /usr/lib/libopenmpt/ptest PASS: libopenmpttest DURATION: 1 END: /usr/lib/libopenmpt/ptest 2025-12-25T09:29 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* e2tools: fix buildpath in ptestYi Zhao5 days1-0/+1
| | | | | | | | | | | Remove ${RECIPE_SYSROOT_NATIVE} from config.status to fix QA warning: ERROR: lib32-e2tools-0.1.2-r0 do_package_qa: QA Issue: File /usr/lib/e2tools/ptest/build/config.status in package lib32-e2tools-ptest contains reference to TMPDIR [buildpaths] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmpdclient: upgrade 2.22 -> 2.24Gyorgy Sarvari5 days2-21/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Though the original recipe claiumed to be v2.22, actually it was 2.20. The vala bindings have been dropped, so no need to delete them anymore. License-Update: The license itself hasn't changed between versions, but there are a couple of things to note: - Half of the source files are covered by 2-Clause-BSD, and other half by 3-Clause-BSD. This has been the case always, but until recently this was only specified in the source file headers, and there was a single license file with 3-Clause-BSD text. Now there is explicitly a 2-Clause- BSD file also. - The 3-Clase-BSD text was reformatted, and added placeholders for year and author. That is causing the hash change for this particular license. Changelog: 2.24: * fix missing "mpd_send_list_tag_types_available" in libmpdclient.ld * support MPD protocol 0.25 - stringnormalization 2.23: * support MPD protocol 0.24.0 - allow window for listplaylist and listplaylistinfo - command "playlistlength", "protocol", "stickertypes", "stickernamestypes", "searchplaylist" - tag "ShowMovement" - new sticker find api - new subcommands for "tagtypes": "available", "reset" * Support open end for mpd_search_add_window * format floating-point numbers with the POSIX localew 2.22: * drop the unmaintained Vala bindings * fix "version.h" conflicts when used as a Meson subproject * support MPD protocol 0.24.0 - command "save [create|replace|append]" 2.21: * meson.build: allow using as a Meson subproject * add mpd_recv_replay_gain_status() * support MPD protocol 0.24.0 - tag "Mood", "TitleSort" - "oneshot" consume state - allow range in "playlistmove" - commands "searchcount", "stickernames" - added attribute for songs - search: support constraint "added-since" Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-12-30 09:05:25 +0000