summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* python3-pytest-xdist: upgrade 3.4.0 -> 3.5.0Wang Mingyu2023-11-281-1/+1
| | | | | | | | | Changelog: ============ #632: --dist=loadscope now sorts scopes by number of tests to assign largest scopes early Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pymisp: upgrade 2.4.178 -> 2.4.179Wang Mingyu2023-11-281-1/+1
| | | | | | | | | | | | | Changelog: =========== - Bump deps. - [misp-objects] Bumped latest version. - Eml and msg are in sync again. - Update calls to getStringStream to the public method. - Avoid confusing error when an auth key is limited to an IP. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pydantic: upgrade 2.5.1 -> 2.5.2Wang Mingyu2023-11-281-1/+1
| | | | | | | | | | | | | | Changelog: ========== -uprev pydantic-core to 2.14.5 -Add ConfigDict.ser_json_inf_nan -Fix validation of Literal from JSON keys when used as dict key -Fix bug re custom_init on members of Union -Fix JsonValue bool serialization -Fix handling of unhashable inputs with Literal in Unions Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pychromecast: upgrade 13.0.7 -> 13.0.8Wang Mingyu2023-11-281-1/+1
| | | | | | | | Changelog: Change BBC Sounds app_id Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pexpect: upgrade 4.8.0 -> 4.9.0Wang Mingyu2023-11-281-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== -Add support for Python 3.12 -Clean up temporary files after UnicodeTests -Add Python 3.5, 3.6 and 3.12.0-rc.1 to test matrix -Set prompt correctly for zsh -Add zsh convenience function to replwrap module -Rework async unittests to rely on unittest.IsolatedAsyncioTestCase -Make test_expect.py work on POSIX systems that are not Linux based -Add support for socket, which allows sockets to be used crossplatform -Update async to work on newer versions of python -Remove deprecated RSAAuthentication option (SSHv1) -Multiple CI fixes -Use Github Actions for CI -Remove pytest-capturelog from testing requirements -Fix usage for Solaris -Fix threading for new versions of python -Fix documentation builds for use with Sphinx 3 -Use sys.executable for tests and wrapper, allowing the calling python executable to be used instead -Update documentation about Wexpect -Added project urls to setup.py -Provide examples for how to use Pexpect and Pyte -Coerce compiled regex patterns type according to spawn encoding -Several doc updates Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pdm: upgrade 2.10.3 -> 2.10.4Wang Mingyu2023-11-281-1/+1
| | | | | | | | | | | | Changelog: ============ -Do not detect as requirements.txt if the file is a python script. -Provide information of the original line when parsing requirement fails. -Resolve -r requirements paths relative to the requirement file they are specified -Updating package now overwrites the old files instead of removing before installing. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-mypy: upgrade 1.7.0 -> 1.7.1Wang Mingyu2023-11-281-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ipython: upgrade 8.17.2 -> 8.18.0Wang Mingyu2023-11-281-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-humanize: upgrade 4.8.0 -> 4.9.0Wang Mingyu2023-11-281-1/+1
| | | | | | | | | | | | | | | Changelog: =========== -Add support for Python 3.13 -Add Norwegian localization -Add Hebrew localization -Add Klingon translation -Replace Flake8 with Ruff -Fix DeprecationWarning: Plural value must be an integer, got float -Remove useless shebangs Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-dbus-fast: upgrade 2.14.0 -> 2.15.0Wang Mingyu2023-11-281-1/+1
| | | | | | | | Changelog: Make ErrorType enums compare as strings Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-bitstring: upgrade 4.1.2 -> 4.1.3Wang Mingyu2023-11-281-1/+1
| | | | | | | | | | | Changelog: =========== -Removed a couple of files that accidentally got included in the previous release. -The 8-bit float formats have been renamed 'e4m3float' and 'e5m2float'. -Some refactoring and performance optimizations. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aiohttp: upgrade 3.9.0 -> 3.9.1Wang Mingyu2023-11-281-1/+1
| | | | | | | | | | | | | Changelog: =========== -Fixed importing aiohttp under PyPy on Windows. -Fixed async concurrency safety in websocket compressor. -Fixed ClientResponse.close() releasing the connection instead of closing. -Fixed a regression where connection may get closed during upgrade. -Fixed messages being reported as upgraded without an Upgrade header in Python parser. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tomoyo-tools: upgrade 2.5.0 -> 2.6.1Wang Mingyu2023-11-281-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* paho-mqtt-cpp: upgrade 1.2.0 -> 1.3.1Wang Mingyu2023-11-282-13/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | 0001-cmake-Use-CMAKE_INSTALL_LIBDIR-and-CMAKE_INSTALL_BIN.patch refreshed for 1.3.1 License-Update: Updated license to EPL-v2.0 Changelog: ============ -#462 Fix version string for version v1.3.x -Fixed building and using library as DLL on Windows with MSVC -Updated License to Eclipse Public License v2.0 -Updated create and connect options to better deal with MQTT protocol version -Defaulting connect version to v5 if specified in create options. -Added a topic_filter class to match a single filter to specific topics. -Added a topic_matcher class to create a collection of items in a trie structure that can contain items tied to topic filters. (Useful for queues or callbacks per-subscription topic). -Minor tweaks to prepare for C++20 -Support for Catch2 v3.x for unit tests (v2.x also still supported). -Changed the sample apps to use the newer "mqtt://" schemas. -Connect option initializers for v5 and WebSockets. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libbpf: upgrade 1.2.2 -> 1.3.0Wang Mingyu2023-11-281-2/+2
| | | | | | | | | Changelog: ============ https://github.com/libbpf/libbpf/releases/tag/v1.3.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* capnproto: upgrade 1.0.1 -> 1.0.1.1Wang Mingyu2023-11-281-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 9.0.1 -> 9.1Wang Mingyu2023-11-286-514/+2
| | | | | | | | | | | | 0001-tools-make-quiet-actually-suppress-output.patch CVE-2023-46752.patch CVE-2023-46753.patch CVE-2023-47234.patch CVE-2023-47235.patch removed since they're included in 9.1 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gensio: upgrade 2.7.7 -> 2.8.0Wang Mingyu2023-11-281-1/+1
| | | | | | | | Changelog: Release and windows installer. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnfdragora: upgrade 2.1.4 -> 2.1.5Wang Mingyu2023-11-281-1/+1
| | | | | | | | | | Changelog: ============ -Fixed Segfault error when there is no package description. -Added Info window after transaction. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: make sub packages to runtime depends on freeradiusHongxu Jia2023-11-281-0/+7
| | | | | | | | | | | | | | | | | Otherwise install packages reported warning at do_rootfs ...log.do_rootfs... Installing : freeradius-ldap-3.0.26-r0.corei7_64 1235/1236 warning: user radiusd does not exist - using root warning: group radiusd does not exist - using root Installing : freeradius-krb5-3.0.26-r0.corei7_64 1236/1236 warning: user radiusd does not exist - using root ...log.do_rootfs... The user/group radiusd is added by package freeradius, explicitly made the sub packages to runtime depends on freeradius Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.0.20231119.0 -> 6.0.20231126.0Wang Mingyu2023-11-281-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squashfs-tools-ng: upgrade 1.1.4 -> 1.2.0alperak2023-11-271-4/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Remove builtin copy of zlib On GNU/Linux, *BSD or MacOS we can simply use the system default library. The copy was primarily only there for the Windows build. The build script for Windows has now been adapted to download and compile a shared library from a tarball. This removes a huge chunk of code from the git tree as well as the release tarballs. Additionally it gets rid of iffy things like removing the Zlib copyright/version strings, so the libsquashfs DLL doesn't export it. Changelog: Added * Make it possible for gensquashfs to add xattrs from a description file * Make it possible for gensquashfs to specify file sorting order * Support . and .. directory browsing support in sqfs_dir_reader_t * Add sqfs_tree_node_get_path to libsquashfs Fixed * Only use actually available CPUs in gensquashfs and tar2sqfs * Overzealous bounds check in the libsquashfs block processor (#110) * In sqfs_compressor_create, clear the output pointer on error (#110) * Typo in gensquashfs and tar2sqfs block count statistics (#108) * Hard link resolution: report error if path cannonicalization fails * Documentation: signedness of the directory header inode number * Seek position in libsquashfs meta data reader erroneously out-of-bounds * Memory leak in libfstree error path * Double-free in libfstree error path Changed * Allow NULL pointer for sqfs_destroy, sqfs_dir_tree_destroy * Use 32 bit hard link counter in libfstree instead of just 16 bit * Internal cleanup and restructuring * Upgrade autotools version * Check in autogen.sh if the required tools are available * Trigger a build failure if no compressor library is available Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* apache2: v2.4.57 to v2.4.58 to fix CVE-2023-43622Dylan Turner2023-11-272-33/+1
| | | | | | | | | | Note that patch 0011-modules... is no longer needed as it's included in the upgrade as well. CVE: CVE-2023-43622 Signed-off-by: Dylan Turner <dylan.turner@ni.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nlohmann-json: Fix SRCREV_FORMAT and do not package git metadata into ptestsKhem Raj2023-11-261-1/+2
| | | | | | | | | | | | | | SRCREV_FORMAT should append to default for considering both git repositories. the git hook scripts require shell to be installed on target and it may want it from /usr/bin/sh and distro may not provide /usr/bin/sh since its not having usrmerge distro feature. Fixes ERROR: nlohmann-json-3.11.2-r0 do_package_qa: QA Issue: /usr/lib/nlohmann-json/ptest/json_test_data/.git/hooks/update.sample contained in package nlohmann-json-ptest requires /usr/bin/sh, but no providers found in RDEPENDS:nlohmann-json-ptest? [file-rdeps] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pipewire: upgrade 0.3.85 > 1.0.0Markus Volk2023-11-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The PipeWire project is immensely proud to announce the 1.0 release of PipeWire. It is API and ABI compatible with previous 0.3.x releases. "PipeWire represents the next evolution of audio handling for Linux, taking the best of both pro-audio (JACK) and desktop audio servers (PulseAudio) and linking them into a single, seamless, powerful new system." - Paul Davis, JACK and Ardour author "What exciting times! PipeWire 1.0 is the culmination of 15 years of Linux audio expertise, blending lessons from PulseAudio into a high-performance, flexible, and user-friendly foundation for audio and multimedia on Linux. I'm looking forward to the next decade of progress in the free software consumer and professional audio space!." - Arun Raghavan, PulseAudio developer/maintainer. "I'm thrilled to witness the first stable release of PipeWire after five years of collaboration with its remarkable community, pushing the boundaries of multimedia integration in the Linux ecosystem one step further.” - George Kiagiadakis, WirePlumber author "From the beginning of the libcamera project, we have always seen PipeWire as the solution to handle desktop and mobile integration and give a seemless multimedia integration to users while providing security features and resource sharing between applications." - Kieran Bingham, libcamera author Happy Holidays! Highlights - Fix a memfd/dmabuf leak when uploading buffers while shutting down. - Handle concurrent jack_port_get_buffer() calls because ardour seems to be doing this. - Improve time reporting (less jitter) in ALSA when using IRQ. - Many doc improvements. PipeWire - Respect PIPEWIRE_DLCLOSE everywhere, remove pw_in_valgrind(). - Remove a warning when a client tries to change ignored properties. Modules - Fix a memfd/dmabuf leak when uploading buffers while shutting down. - Fix a potential segfault when copying mix structures. (#3658) - Avoid races in setrlimit in module-rt. - Fix a memory leak in filter-chain. - Set rtp.ptime on senders, not receivers. - The ROC modules were ported to ROC 0.3 SPA - Improve time reporting (less jitter) in ALSA when using IRQ. (#3657) - Add latency param query in libcamera. - Fix some compiler warnings. - The EVL plugin was updated. Bluetooth - LC3 codec and compatibility improvements. Pulse server - Fix emission of events when a sink/source state changes. (#3660) JACK - Improve transport and time handling. Use unique ids to make consistent snapshots of the current time and transport. - Avoid enumerating port params that we are not going to use. - Optimize buffer reuse. - Handle concurrent jack_port_get_buffer() calls because ardour seems to be doing this. (#3632) Docs - Many doc improvements. - Add man pages for pw-dump, pw-loopback, modules, pipewire-pulse. - Manpages are now made with Doxygen. - Add docs for pulse-modules Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: Inherit pkgconfigPeter Kjellerstedt2023-11-261-1/+1
| | | | | | | The Makefile uses pkg-config if USE_SYSTEMD is "yes". Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* system-config-printer: Add packageconfig for polkitMarkus Volk2023-11-251-1/+2
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cups-filters: fix Makefile race conditionMarkus Volk2023-11-242-1/+37
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcacard: fix version string in libcacard.pcMarkus Volk2023-11-232-1/+38
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libexosip2: package binaries in a separate packageCharles Perry2023-11-221-0/+3
| | | | | | | | Put sip_monitor, sip_reg and sip_storm in a separate libexosip2-tools package as they won't be needed most of the time. Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libexosip2: add c-ares and openssl PACKAGECONFIGCharles Perry2023-11-221-0/+4
| | | | | | | They are enabled by default as libexosip2 works better with those. Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: fix CVEs CVE-2023-4675{2,3} and CVE-2023-4723{4,5}Jonas Gorski2023-11-225-0/+455
| | | | | | | | | | | | | | | | | Add patches fixing CVE CVE-2023-46752, CVE-2023-46753, CVE-2023-47234, and CVE-2023-47235 to FRR 9.0. Patch order is commit order, not CVE numerical order, to avoid fuzz / need for rebasing of the patches. References: https://nvd.nist.gov/vuln/detail/CVE-2023-46752 https://nvd.nist.gov/vuln/detail/CVE-2023-46753 https://nvd.nist.gov/vuln/detail/CVE-2023-47234 https://nvd.nist.gov/vuln/detail/CVE-2023-47235 Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.11 -> 5.9.12Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Fixed a vulnerability in charon-tkm related to processing DH public values that can lead to a buffer overflow and potentially remote code execution. - The new `pki --ocsp` command produces OCSP responses based on certificate status information provided by plugins. - The cert-enroll script handles the initial enrollment of an X.509 host certificate with a PKI server via the EST or SCEP protocols. - The --priv argument for charon-cmd allows using any type of private key. - Support for nameConstraints of type iPAddress has been added (the openssl plugin previously didn't support nameConstraints at all). - SANs of type uniformResourceIdentifier can now be encoded in certificates. - Password-less PKCS#12 and PKCS#8 files are supported. - A new global option allows preventing peers from authenticating with trusted end-entity certificates (i.e. local certificates). - ECDSA public keys that encode curve parameters explicitly are now rejected by all plugins that support ECDSA. - charon-nm now actually uses the XFRM interfaces added with 5.9.10, it can also use the name in connection.interface-name. - The resolve plugin tries to maintain the order of installed DNS servers. - The kernel-libipsec plugin always installs routes even if no address is found in the local traffic selectors. - Increased the default receive buffer size for Netlink sockets to 8 MiB and simplified its configuration. - Copy the issuer's subjectKeyIdentifier as authorityKeyIdentifier instead of always generating a hash of the subjectPublicKey. - Fixed issues while reestablishing multiple CHILD_SAs (e.g. after a DPD timeout) that could cause a reqid to get assigned to multiple CHILD_SAs with unrelated traffic selectors. - Fixed a possible infinite loop issue in watcher_t and removed WATCHER_EXCEPT, instead callbacks are always invoked even if only errors are signaled. - Fixed a regression in the IKE_SA_INIT tracking code added with 5.9.6 when handling invalid messages. - Fixed adding the XFRMA_REPLAY_ESN_VAL attribute twice when updating SAs. - Correctly encode SPI from REKEY_SA notify in CHILD_SA_NOT_FOUND notify if CHILD_SA is not found during rekeying. - The testing environment is now based on Debian 12 (bookworm), by default. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-rich: upgrade 13.6.0 -> 13.7.0Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | Changelog: ============ -Adds missing parameters to Panel.fit -Some text goes missing during wrapping when it contains double width characters -Ensure font is correctly inherited in exported HTML -Fixed typing for FloatPrompt. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pydantic: upgrade 2.5.0 -> 2.5.1Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | Changelog: =========== -uprev pydantic-core to 2.14.3 -Fix package description limit -Fix ValidateCallWrapper error when creating a model which has a @validate_call wrapped field annotation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pdm: upgrade 2.10.1 -> 2.10.3Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | | | | | | Changelog: ============= -Create virtualenv for conda base Python. #2409 -Log the response text when pdm publish fails with HTTP error. -Improve the error message when a specific package can't be found in the lockfile. -prevent wrong project name (including space and illegal characters) -Fix a bug that PDM cannot detect namespace packages correctly when creating symlinks. -Fix template files created by pdm init being read-only when copied from a read-only PDM installation. -Don't reset the build backend when asking for import. -Never wrap the output of the export command. -Forbid global project in conda base environment, since it may remove conda-managed packages. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pastedeploy: upgrade 3.0.1 -> 3.1.0Wang Mingyu2023-11-211-1/+1
| | | | | | | | Changelog: Fix python_requires package metadata to support Python 3.7+. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ldap: upgrade 3.4.3 -> 3.4.4Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | | | | Changelog: ============= -Reconnect race condition in ReconnectLDAPObject is now fixed -Socket ownership is now claimed once we've passed it to libldap -LDAP_set_option string formats are now compatible with Python 3.12 -Security Policy was created -Broken article links are fixed now -Bring Conscious Language improvements -Add testing and document support for Python 3.10, 3.11, and 3.12 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-imageio: upgrade 2.32.0 -> 2.33.0Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | Changelog: =========== -Update pyav plugin to reflect AV changes -Unpin Pillow and allow versions >=10.1.0 -Support for AVIF image format Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-django: upgrade 4.2.5 -> 4.2.7Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | | | | | | | | | | Changelog: =========== -Fixed a regression in Django 4.2 that caused a crash of QuerySet.aggregate() with aggregates referencing expressions containing subqueries (#34798). -Restored, following a regression in Django 4.2, creating varchar/text_pattern_ops indexes on CharField and TextField with deterministic collations on PostgreSQL (#34932). -CVE-2023-46695: Potential denial of service vulnerability in UsernameField on Windows -Fixed a regression in Django 4.2.5 where overriding the deprecated DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings in tests caused the main STORAGES to mutate (#34821). -Fixed a regression in Django 4.2 that caused unnecessary casting of string based fields (CharField, EmailField, TextField, CICharField, CIEmailField, and CITextField) used with the __isnull lookup on PostgreSQL. -CVE-2023-43665: Denial-of-service possibility in django.utils.text.Truncator Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-dateparser: upgrade 1.1.8 -> 1.2.0Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | | | | Changelog: ========= -New PREFER_MONTH_OF_YEAR setting (#1146) -Absolute years in Russian are no longer being treated as a number of years in the past (#1129) -Removed the use of datetime.utcnow, deprecated on Python 3.12 (#1179) -Applied Black formatting to the code base (#1158) -Initial integration with OSSFuzz (#1198) -Extended test cases (#1191) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aiohttp: upgrade 3.8.6 -> 3.9.0Wang Mingyu2023-11-211-1/+1
| | | | | | | | Changelog: https://docs.aiohttp.org/en/stable/changes.html Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libwebsockets: upgrade 4.3.2 -> 4.3.3Wang Mingyu2023-11-212-35/+2
| | | | | | | | 0001-Fix-Werror-enum-int-mismatch-in-lws_tls_server_abort.patch removed since it's included in 4.3.3 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libextutils-cppguess-perl: upgrade 0.26 -> 0.27Wang Mingyu2023-11-211-1/+1
| | | | | | | | Changelog: support C++20 and C++23 standards, and vendored version output Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-bluetooth: upgrade 42.6 -> 42.7Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | | Changelog: ============ -fixes bugs that stopped the Obex Push server from automatically accepting files from paired devices and caused the device's Connection switch to appear out of sync with the connection state. -build fixes -updated translations Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* exiftool: upgrade 12.69 -> 12.70Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - This marks the 20th anniversary of the initial ExifTool release! - Added ability to read/delete C2PA CAI JUMBF metadata from TIFF-based images (eg. DNG), QuickTime-based files (eg. MP4) and WebP images, and read JUMBF from other RIFF-based files (eg. WAV, AVI), GIF images and ID3v2 metadata - Added read/write support for JPH images - Added ability to read Leica Q3 maker notes - Added ability to recognize and write FujiFilm M-RAW RAF images (multiple raw images in a single file) and the ability to read preview-less RAF images - Added support for reading a number of obscure Microsoft EXIF tags - Added a few new Sony lenses and support for the ILCE-9M3 - Added a couple of new Panasonic Leica lenses - Added a couple of new Canon RF lenses - Added a number of new CPUType values for ELF executables - Added some new Olympus CameraType values - Decode a few more ID3v2.2 tags (github #142) - Decode a few new Canon G5X Mark II tags - Decode WB_RGGBLevels for a few more Nikon cameras - Extract information from FujiFilm M-RAW header - Improved decoding of a few Nikon Z tags - Marked misspelt XMP-drone-dji:GPSLongtitude tag to Avoid when writing - Changed RIFF MaxDataRate conversion to use SI prefixes by default - Fixed decoding of unknown ColorBalance information for some Nikon models - Fixed an incorrect Nikon Z LensID - API Changes: - Added ByteUnit option Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.0.20231112.0 -> 6.0.20231119.0Wang Mingyu2023-11-211-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* c-ares: upgrade 1.22.0 -> 1.22.1Wang Mingyu2023-11-211-1/+1
| | | | | | | | | | | Changelog: ============ -Fix /etc/hosts processing performance with all entries using same IPaddress. -Fix typos in manpages -Fix OpenWatcom building Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zeromq: Update to 4.3.5Peter Kjellerstedt2023-11-212-69/+3
| | | | | | | | A backported patch has been removed as it is no longer needed. License-Update: Relicensed as MPL-2.0 Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sdbus-c++: Update ptest pathPoonam Jadhav2023-11-211-1/+6
| | | | | | | Update ptest path to run sdbus-c++ ptest Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>