summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* pegtl: upgrade 3.2.6 -> 3.2.7wangmy2022-07-191-1/+1
| | | | | | | Removed superfluous deprecated include. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* modemmanager: upgrade 1.18.8 -> 1.18.10wangmy2022-07-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= * Build: ** Require libqmi 1.30.8. * FCC unlock: ** Updated SDX55 unlock script to handle the new method introduced in the latest firmware releases. * Modem interface: ** Set signal quality to 0% on shutdown. ** Set signal quality as recent on init. * MBIM: ** Fix task completion when peeking device fails. ** Fix several GError double-frees. * mmcli: ** Don't print signal quality until modem is enabled. * Plugins: ** foxconn: remove carrier mapping table for T99W175. * Several other minor improvements and fixes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libp11: upgrade 0.4.11 -> 0.4.12wangmy2022-07-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== Fixed using an explicitly provided PIN regardless of the secure login flag Fixed RSA_PKCS1_PADDING handling Fixed a crash on LLP64, including 64-bit Windows Fixed searching objects when both ID and label are specified Fixed the OAEP "source" parameter Fixed object searching by label Fixed thread safety in slot enumeration Fixed storing certificates on tokens Fixed several memory leaks Fixed OpenSSL 3.0 compatibility Fixed LibreSSL compatibility Major concurrency improvements and refactoring Added re-numeration of slots as an engine control command Added the PKCS11_update_slots() API function Added support for the SHA3 hash function Added a self-test for engine RSA operations Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* irssi: upgrade 1.4.1 -> 1.4.2wangmy2022-07-191-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: =========== Changes --------- Add irssimoduledir to irssi-1.pc in the Meson build (#1383, #1378) Fixes -------- Use -isystem includes, limiting warnings to Irssi code. Fixes compilation with Perl 5.36 (#1381, gentoo#851522, #1384) Fix missing lines when changing dynamic textbuffer contents (#1382, #1387). Reported by externalserver15 Fix Perl cross compilation with Meson 0.60.0 (#1377) Fix default channel prefix used for /JOIN to default to # (#1385, #1388) Fix crash in /LASTLOG by getting line texts before printing (#1367, #1398) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.31.10 -> 1.31.12wangmy2022-07-191-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgsf: upgrade 1.14.49 -> 1.14.50wangmy2022-07-191-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libadwaita: upgrade 1.1.2 -> 1.1.3wangmy2022-07-191-1/+1
| | | | | | | | | | | | | | | | Changelog: =========== - AdwLeaflet - Fix a broken link in docs - AdwPreferencesGroup - Fix accessibility labels - AdwToast - Fix the example in docs - Stylesheet - Add missing borders in high contrast version Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gegl: upgrade 0.4.36 -> 0.4.38wangmy2022-07-191-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Revert "python3-antlr4-runtime: Inherit setuptools3 instead of ↵Khem Raj2022-07-181-1/+1
| | | | | | python_setuptools_build_meta" This reverts commit 19d05be57bda09915b09de695e6fb7acc354a588.
* Revert "python3-pycups: Inherit setuptools3 instead of ↵Khem Raj2022-07-181-1/+1
| | | | | | python_setuptools_build_meta" This reverts commit cb3d45c4124dba489ce98fb81d3b33bcc91a0329.
* Revert "catfish: Inherit setuptools3 instead of python_setuptools_build_meta"Khem Raj2022-07-181-1/+1
| | | | This reverts commit 615624ab5769025cca1ec19b88dc0521c51d914e.
* poco: Link with libatomic on mipsKhem Raj2022-07-181-0/+1
| | | | | | | mips compiler does not provide intrinsics for 64bit atomics, use libatomics to get them. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postgresql: ignore unrelated CVEDavide Gardenal2022-07-181-0/+4
| | | | | | | | CVE-2017-8806 doesn't apply to out configuration of postgresql so we can safely ignore it. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: ignore patched CVEsDavide Gardenal2022-07-181-0/+6
| | | | | | | | | CVE-2007-2728, CVE-2007-3205 and CVE-2007-4596 are patched in our version of php but they don't have a vulnerable version range in the NVD database, that's why they need to be ignored. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mongodb: ignore unrelated CVEsDavide Gardenal2022-07-181-0/+6
| | | | | | | | CVE-2014-8180, CVE-2017-18381 and CVE-2017-2665 are not affecting our configuration so they can be safely ignored. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-oe: ignore patched CVEsDavide Gardenal2022-07-189-0/+37
| | | | | | | | | Some old CVEs don't have a vulnerable version range in the NVD database, this causes come mismatch with cve-check. Ignore many CVEs that are picked up by the class but are patched in our products. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libplist: ignore patched CVEsDavide Gardenal2022-07-181-0/+6
| | | | | | | | | CVE-2017-5834, CVE-2017-5835 and CVE-2017-5836 are patched in our version of libplist but they don't have a vulnerable version range in the NVD database, that's why they need to be ignored. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-jsonrpcserver: added the python3-oslash rdependsJan Vermaete2022-07-171-1/+2
| | | | | | | | This one is needed for version 5.0.7. And should not be needed anymore for version 6.x. Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-oslash: added the oslash Python packageJan Vermaete2022-07-171-0/+21
| | | | | | | | This is needed as rdepends of the python3-jsonrpcserver package in version 5.0.7. Is should not be needed anymore in the 6.x version. Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-jsonrpcclient: Added the jsonrpcclient Python packageJan Vermaete2022-07-171-0/+14
| | | | | Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aspectlib: updated the summary and added a description.Jan Vermaete2022-07-171-1/+3
| | | | | | | | Summary was ending in a kind of cut off sentence. The text for summary and description is taken from the homepage. Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xscreensaver: Upgrade to 6.04Khem Raj2022-07-174-19/+99
| | | | | | | Forward port patches as needed. Add a patch to ignore stringent errors dues to configure warning Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-qface: Inherit setuptools3 instead of python_setuptools_build_metaKhem Raj2022-07-161-1/+1
| | | | | | This also adds missing dependency on python3-picobuild-native Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pycups: Inherit setuptools3 instead of python_setuptools_build_metaKhem Raj2022-07-151-1/+1
| | | | | | Adds missing dependency on python3-picobuild-native Signed-off-by: Khem Raj <raj.khem@gmail.com>
* catfish: Inherit setuptools3 instead of python_setuptools_build_metaKhem Raj2022-07-151-1/+1
| | | | | | Adds missing dependency on python3-picobuild-native Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-antlr4-runtime: Inherit setuptools3 instead of ↵Khem Raj2022-07-151-1/+1
| | | | | | | | python_setuptools_build_meta Adds missing dependency on python3-picobuild-native Signed-off-by: Khem Raj <raj.khem@gmail.com>
* poco: Link with libatomic on riscv32Khem Raj2022-07-151-0/+2
| | | | | | | | | It does not have compiler intrinsics for 64bit atomics Fixes MetricsSample.cpp:(.text._ZN16MetricsSampleApp4mainERKNSt3__16vectorINS0_12basic_stringIcNS0_11char_t raitsIcEENS0_9allocatorIcEEEENS5_IS7_EEEE[_ZN16MetricsSampleApp4mainERKNSt3__16vectorINS0_12basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEENS5_IS7_EEEE]+0x104): undefined reference to `__atomic_compare_exchange_8' Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyzmq: version bump 22.3.0 -> 23.2.0Jan Vermaete2022-07-151-2/+2
| | | | | | | | | Still with the warning: WARNING: python3-pyzmq-23.2.0-r0 do_package_qa: QA Issue: File /usr/lib/python3.10/site-packages/zmq/utils/compiler.json in package python3-pyzmq contains reference to TMPDIR File /usr/lib/python3.10/site-packages/zmq/utils/config.json in package python3-pyzmq contains reference to TMPDIR [buildpaths] Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pylint: upgrade 2.14.3 -> 2.14.4zhengruoqin2022-07-151-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-web3: upgrade 5.29.2 -> 5.30.0Xu Huan2022-07-151-1/+1
| | | | | Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ujson: upgrade 5.3.0 -> 5.4.0Xu Huan2022-07-151-1/+1
| | | | | | | | | | | | | | | | | | | | | Changelog: ========= Added ------ Add support for arbitrary size integers (#548) Fixed --------- CVE-2022-31116: Replace wchar_t string decoding implementation with a uint32_t-based one (#555) Fix handling of surrogates on decoding (#550) CVE-2022-31117: Potential double free of buffer during string decoding Fix memory leak on encoding errors when the buffer was resized (#549) Integer parsing: always detect overflows (#544) Fix handling of surrogates on encoding (#530) Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-socketio: upgrade 5.6.0 -> 5.7.0Xu Huan2022-07-151-1/+1
| | | | | | | | | | | | | | | | Changelog: ========= Server refuses connections on unknown namespaces #822 Do not send ACK packet for unknown events #824 Fix Python 3.11 deprecation warning #941 Correct handling of RedisError exception #919 Update Django example Documentation fix for async client Update documentation of asyncio server Fix documentation typo #948 Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pillow: upgrade 9.1.1 -> 9.2.0zhengruoqin2022-07-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Fixed null check for fribidi_version_info in FriBiDi shim Added GIF decompression bomb check Handle PCF fonts files with less than 256 characters Improved GIF optimize condition Reverted to array_interface with the release of NumPy 1.23 Pad PCX palette to 768 bytes when saving Fixed bug with rounding pixels to palette colors Use gnome-screenshot on Linux if available Fixed loading L mode BMP RLE8 images Fixed incorrect operator in ImageCms error Limit FPX tile size to avoid extending outside image Added support for decoding plain PPM formats Added apply_transparency() Fixed behaviour change from endian fix Use python3 Allow remapping P images with RGBA palettes Revert "Skip test_realloc_overflow unless libtiff 4.0.4 or higher" [pre-commit.ci] pre-commit autoupdate Only import ImageFont in ImageDraw when necessary Fixed drawing translucent 1px high polygons Pad COLORMAP to 768 items when saving TIFF Fix P -> PA conversion Once exif data is parsed, do not reload unless it changes Only try to connect discontiguous corners at the end of edges Improve transparency handling when saving GIF images Do not update GIF frame position until local image is found Netscape GIF extension belongs after the global color table Only write GIF comments at the beginning of the file Separate multiple GIF comment blocks with newlines Always use GIF89a for comments Ignore compression value from BMP info dictionary when saving as TIFF If font is file-like object, do not re-read from object to get variant Raise ValueError when trying to access internal fp after close Support more affine expression forms in im.point() Include 'twine check' in 'make sdist' Ensure that furthest v is set in quantize2 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ldap: upgrade 3.4.0 -> 3.4.2zhengruoqin2022-07-151-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-eth-hash: upgrade 0.3.3 -> 0.4.0Xu Huan2022-07-151-1/+1
| | | | | Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openflow: ignore unrelated CVEsDavide Gardenal2022-07-151-0/+5
| | | | | | | | CVE-2015-1611 and CVE-2015-1612 are not referred to our implementation of openflow as specified by the NVD database, ignore them. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: ignore patched CVEsDavide Gardenal2022-07-151-0/+5
| | | | | | | | | CVE-2002-0318 and CVE-2011-4966 are both patched in our version of freeradius. The CPE in the NVD database doesn't reflect correctly the vulnerable versions that's why they are incorrectly picked up. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rsyslog: update 8.2202->8.2206Aryaman Gupta2022-07-151-1/+1
| | | | | | | | | | | | | | | | Package changes mainly include performance improvements to tcpsrv/imtcp, bug fixes and additional/updated tests: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog ptest results for qemux86-64 with kvm and increasing filesystem space to 4GB using IMAGE_ROOTFS_EXTRA_SPACE : Version | Passed | Failed | Skipped 8.2202 | 456 | 0 | 5 8.2206 | 465 | 0 | 5 Signed-off-by: Aryaman Gupta <aryaman.gupta@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pytest-forked: loosen dependency checkingRoss Burton2022-07-151-0/+2
| | | | | | | | | | | | | | | | | | | This package has strict build dependencies defined in pyproject.toml: requires = ['setuptools ~= 41.4', 'setuptools_scm ~= 3.3', 'wheel ~= 0.33.6'] The ~= operator is "compatible release", so "setuptools ~= 41.4" can be read as "setuptools >= 41.4, setuptools == 41.*". We have setuptools 62.6.0 and do builds using our own packages instead of building inside virtual environments, so these dependencies cannot be satisfied. Resolve this by passing --loose-depends to picobuild, which effectively turns ~= into >=. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-path: add missing build dependenciesRoss Burton2022-07-151-0/+2
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyzmq: add missing build dependencyRoss Burton2022-07-151-0/+2
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pytest-helpers-namespace: add missing build dependenciesRoss Burton2022-07-151-0/+2
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ansi2html: fix DEPENDSRoss Burton2022-07-151-1/+1
| | | | | | | | There's no need to depend on python3-toml-native, but this does need python3-setuptools-scm-git-archive-native. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pytest-html: fix DEPENDS, don't depend on pipRoss Burton2022-07-152-0/+28
| | | | | | | | | | | | Add a DEPENDS on ptyhon3-setuptools-scm-git-archive-native as the setup.py uses it. In the future we'll have a Python building tool which validates build requirements, so remove pip from those dependencies as it shouldn't depend on a specific build tool being present. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyrad: fix build system specificationRoss Burton2022-07-152-0/+28
| | | | | | | | | The upstream pyproject.toml says it needs to be built with the Poetry frontend, but that's deprecated behaviour and it should use the Poetry Core API instead. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-simpleeval: remove 'build' build dependencyRoss Burton2022-07-152-0/+25
| | | | | | | | | In the future we'll have a Python building tool which validates build requirements. No package should require a specific tool to be present (not even used, just present), so remove the dependency on 'build'. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cbor2: add missing build dependencyRoss Burton2022-07-151-0/+2
| | | | | | | The build doesn't generate the right filenames without this package. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-redis: upgrade 4.3.3 -> 4.3.4zhengruoqin2022-07-151-1/+2
| | | | | | | Add dependence asyncio Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* poco: upgrade 1.11.3 -> 1.12.0Andrej Valek2022-07-133-3/+68
| | | | | | | | | - switch from PCRE -> PCRE2 - add Prometheus library - add option to enable/disable ActiveRecord (disabled by default) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Upgrade 1.0.2 -> 1.0.4Alex Kiernan2022-07-123-49/+54
| | | | | | | | | | | | | | | | | Drop backported patch, switch PACKAGECONFIG assignment to ?= (matches current practice), add in editline, linenoise CLI options and xtables option. Switch to --disable-python when building without python to avoid a configure time warning. We can drop UPSTREAM_CHECK_REGEX as the version no longer gets confused by the 0.099 version which exists. Fix buildpaths warning by switching to setuptools and add dependency on ${PN}-python to ${PN}-ptest so that the embedded paths in the compiled python files are correct. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>