Commit Graph

23529 Commits

Author SHA1 Message Date
zhengruoqin
a8485048aa python3-attr: upgrade 0.3.1 -> 0.3.2
License-Update: License check file changed to LICENSE.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-24 06:28:56 -07:00
zhengruoqin
aa95944c9d python3-astroid: upgrade 2.11.6 -> 2.12.2
Changelog:
==========
    Fixed crash in modulo operations for divisions by zero.
    Fixed crash with recursion limits during inference.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-24 06:28:56 -07:00
zhengruoqin
e145b72b42 python3-alembic: upgrade 1.8.0 -> 1.8.1
Changelog:
==========
[bug] [sqlite]
--------------
Fixed bug where the SQLite implementation of Operations.rename_table() would
render an explicit schema name for both the old and new table name, which while
is the standard ALTER syntax, is not accepted by SQLite’s syntax which doesn’t
support a rename across schemas. In particular, the syntax issue would prevent
batch mode from working for SQLite databases that made use of attached databases
(which are treated as “schemas” in SQLAlchemy).

[bug] [batch]
-------------
Added an error raise for the condition where Operations.batch_alter_table() is
used in --sql mode, where the operation requires table reflection, as is the
case when running against SQLite without giving it a fixed Table object.
Previously the operation would fail with an internal error. To get a
“move and copy” batch operation as a SQL script without connecting to a
database, a Table object should be passed to the
Operations.batch_alter_table.copy_from parameter so that reflection may be
skipped.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-24 06:28:56 -07:00
Radovan Scasny
0c4f3404ef libwebsockets: update to version 4.3.2
Signed-off-by: Radovan Scasny <radovan.scasny@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-24 06:28:56 -07:00
Khem Raj
0e46331835 libmtp: Upgrade to 1.1.20
Use github for downloading the release artifacts.
This has support for new devices

https://github.com/libmtp/libmtp/releases/tag/v1.1.20

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-24 06:28:56 -07:00
Gianfranco
47f66939ff vboxguestdrivers: fix build failure on 32 bit architectures
A variable has been renamed upstream from BUILD_TARGET_ARCH to VBOX_KBUILD_TARGET_ARCH

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-24 06:28:56 -07:00
Gianfranco Costamagna
ffdde0f2ef vboxguestdrivers: upgrade 6.1.34 -> 6.1.36
refresh patch for new upstream release

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-24 06:28:42 -07:00
Chen Qi
c2fb0bd1eb catfish: fix buildpaths issue
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-20 07:22:44 -07:00
Wang Mingyu
c77bc20081 ndisc6: upgrade 1.0.5 -> 1.0.6
Changelog:
==========
# ndisc6: print NAT64 prefix if present.
# rdnssd: fix timeout calculation.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 18:39:24 -07:00
kazuki0824
6d05828e4a ttf-fonts: fix URIs, upgrade 1.004 -> 2.004 2022-07-19 18:38:44 -07:00
Wang Mingyu
8d7b56ff23 php: upgrade 8.1.7 -> 8.1.8
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 18:38:44 -07:00
wangmy
feade3eb69 PATCH] logcheck: upgrade 1.3.23 -> 1.3.24
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 18:38:44 -07:00
wangmy
7568000c31 pegtl: upgrade 3.2.6 -> 3.2.7
Removed superfluous deprecated include.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 18:38:44 -07:00
wangmy
2b3bcd14c2 modemmanager: upgrade 1.18.8 -> 1.18.10
Changelog:
=========
 * Build:
   ** Require libqmi 1.30.8.

 * FCC unlock:
   ** Updated SDX55 unlock script to handle the new method introduced in
      the latest firmware releases.

 * Modem interface:
   ** Set signal quality to 0% on shutdown.
   ** Set signal quality as recent on init.

 * MBIM:
   ** Fix task completion when peeking device fails.
   ** Fix several GError double-frees.

 * mmcli:
   ** Don't print signal quality until modem is enabled.

 * Plugins:
   ** foxconn: remove carrier mapping table for T99W175.

 * Several other minor improvements and fixes.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 18:38:44 -07:00
wangmy
6f342fe241 libp11: upgrade 0.4.11 -> 0.4.12
Changelog:
==========
    Fixed using an explicitly provided PIN regardless of the secure login flag
    Fixed RSA_PKCS1_PADDING handling
    Fixed a crash on LLP64, including 64-bit Windows
    Fixed searching objects when both ID and label are specified
    Fixed the OAEP "source" parameter
    Fixed object searching by label
    Fixed thread safety in slot enumeration
    Fixed storing certificates on tokens
    Fixed several memory leaks
    Fixed OpenSSL 3.0 compatibility
    Fixed LibreSSL compatibility
    Major concurrency improvements and refactoring
    Added re-numeration of slots as an engine control command
    Added the PKCS11_update_slots() API function
    Added support for the SHA3 hash function
    Added a self-test for engine RSA operations

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 18:38:44 -07:00
wangmy
dfe92924ce irssi: upgrade 1.4.1 -> 1.4.2
Changelog:
===========
Changes
---------
    Add irssimoduledir to irssi-1.pc in the Meson build (#1383, #1378)

Fixes
--------
    Use -isystem includes, limiting warnings to Irssi code. Fixes compilation with Perl 5.36 (#1381, gentoo#851522, #1384)
    Fix missing lines when changing dynamic textbuffer contents (#1382, #1387). Reported by externalserver15
    Fix Perl cross compilation with Meson 0.60.0 (#1377)
    Fix default channel prefix used for /JOIN to default to # (#1385, #1388)
    Fix crash in /LASTLOG by getting line texts before printing (#1367, #1398)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 18:38:44 -07:00
wangmy
b88b492c21 nbdkit: upgrade 1.31.10 -> 1.31.12
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 06:44:18 -07:00
wangmy
83afd6a2f1 libgsf: upgrade 1.14.49 -> 1.14.50
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 06:44:18 -07:00
wangmy
9e03cf40a6 libadwaita: upgrade 1.1.2 -> 1.1.3
Changelog:
===========
- AdwLeaflet
  - Fix a broken link in docs
- AdwPreferencesGroup
  - Fix accessibility labels
- AdwToast
  - Fix the example in docs
- Stylesheet
  - Add missing borders in high contrast version

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 06:44:18 -07:00
wangmy
b175959e94 gegl: upgrade 0.4.36 -> 0.4.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-19 06:44:18 -07:00
Khem Raj
0c2e416567 Revert "python3-antlr4-runtime: Inherit setuptools3 instead of python_setuptools_build_meta"
This reverts commit 19d05be57b.
2022-07-18 10:03:12 -07:00
Khem Raj
46a484bb45 Revert "python3-pycups: Inherit setuptools3 instead of python_setuptools_build_meta"
This reverts commit cb3d45c412.
2022-07-18 10:03:12 -07:00
Khem Raj
63700a0c57 Revert "catfish: Inherit setuptools3 instead of python_setuptools_build_meta"
This reverts commit 615624ab57.
2022-07-18 10:03:12 -07:00
Khem Raj
334a04aba8 poco: Link with libatomic on mips
mips compiler does not provide intrinsics for 64bit atomics, use
libatomics to get them.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-18 09:14:02 -07:00
Davide Gardenal
de4097f230 postgresql: ignore unrelated CVE
CVE-2017-8806 doesn't apply to out configuration of postgresql so we
can safely ignore it.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-18 09:11:22 -07:00
Davide Gardenal
1642bfcb07 php: ignore patched CVEs
CVE-2007-2728, CVE-2007-3205 and CVE-2007-4596 are patched in our
version of php but they don't have a vulnerable version range in the
NVD database, that's why they need to be ignored.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-18 09:11:22 -07:00
Davide Gardenal
ed904e6541 mongodb: ignore unrelated CVEs
CVE-2014-8180, CVE-2017-18381 and CVE-2017-2665 are not affecting our
configuration so they can be safely ignored.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-18 09:11:22 -07:00
Davide Gardenal
efa12676dd meta-oe: ignore patched CVEs
Some old CVEs don't have a vulnerable version range in the NVD database,
this causes come mismatch with cve-check. Ignore many CVEs that are
picked up by the class but are patched in our products.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-18 09:11:22 -07:00
Davide Gardenal
261465eb6e libplist: ignore patched CVEs
CVE-2017-5834, CVE-2017-5835 and CVE-2017-5836 are patched in our
version of libplist but they don't have a vulnerable version range in
the NVD database, that's why they need to be ignored.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-18 09:11:22 -07:00
Jan Vermaete
76c5388966 python3-jsonrpcserver: added the python3-oslash rdepends
This one is needed for version 5.0.7.
And should not be needed anymore for version 6.x.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-17 19:16:22 -07:00
Jan Vermaete
1b3be50ad2 python3-oslash: added the oslash Python package
This is needed as rdepends of the python3-jsonrpcserver package in version 5.0.7.
Is should not be needed anymore in the 6.x version.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-17 19:16:22 -07:00
Jan Vermaete
ecbcc3bfc0 python3-jsonrpcclient: Added the jsonrpcclient Python package
Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-17 19:16:22 -07:00
Jan Vermaete
4012175df3 python3-aspectlib: updated the summary and added a description.
Summary was ending in a kind of cut off sentence.
The text for summary and description is taken from the homepage.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-17 10:26:45 -07:00
Khem Raj
88541e824d xscreensaver: Upgrade to 6.04
Forward port patches as needed.
Add a patch to ignore stringent errors dues to configure warning

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-17 10:23:09 -07:00
Khem Raj
cb7d3afba8 python3-qface: Inherit setuptools3 instead of python_setuptools_build_meta
This also adds missing dependency on python3-picobuild-native

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-16 06:52:09 -07:00
Khem Raj
cb3d45c412 python3-pycups: Inherit setuptools3 instead of python_setuptools_build_meta
Adds missing dependency on python3-picobuild-native

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 20:15:08 -07:00
Khem Raj
615624ab57 catfish: Inherit setuptools3 instead of python_setuptools_build_meta
Adds missing dependency on python3-picobuild-native

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 20:15:08 -07:00
Khem Raj
19d05be57b python3-antlr4-runtime: Inherit setuptools3 instead of python_setuptools_build_meta
Adds missing dependency on python3-picobuild-native

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 20:15:08 -07:00
Khem Raj
c741523307 poco: Link with libatomic on riscv32
It does not have compiler intrinsics for 64bit atomics
Fixes
 MetricsSample.cpp:(.text._ZN16MetricsSampleApp4mainERKNSt3__16vectorINS0_12basic_stringIcNS0_11char_t
raitsIcEENS0_9allocatorIcEEEENS5_IS7_EEEE[_ZN16MetricsSampleApp4mainERKNSt3__16vectorINS0_12basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEENS5_IS7_EEEE]+0x104): undefined reference to `__atomic_compare_exchange_8'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 20:15:08 -07:00
Jan Vermaete
62fd844117 python3-pyzmq: version bump 22.3.0 -> 23.2.0
Still with the warning:
WARNING: python3-pyzmq-23.2.0-r0 do_package_qa: QA Issue: File /usr/lib/python3.10/site-packages/zmq/utils/compiler.json in package python3-pyzmq contains reference to TMPDIR
File /usr/lib/python3.10/site-packages/zmq/utils/config.json in package python3-pyzmq contains reference to TMPDIR [buildpaths]

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
zhengruoqin
aa691d59f4 python3-pylint: upgrade 2.14.3 -> 2.14.4
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
Xu Huan
21fad1049e python3-web3: upgrade 5.29.2 -> 5.30.0
Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
Xu Huan
e560ab2ebd python3-ujson: upgrade 5.3.0 -> 5.4.0
Changelog:
=========
Added
------
    Add support for arbitrary size integers (#548)

Fixed
---------
    CVE-2022-31116:
        Replace wchar_t string decoding implementation with a uint32_t-based one (#555)
        Fix handling of surrogates on decoding (#550)
    CVE-2022-31117: Potential double free of buffer during string decoding
    Fix memory leak on encoding errors when the buffer was resized (#549)
    Integer parsing: always detect overflows (#544)
    Fix handling of surrogates on encoding (#530)

Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
Xu Huan
dcbfed89d4 python3-socketio: upgrade 5.6.0 -> 5.7.0
Changelog:
=========
    Server refuses connections on unknown namespaces #822
    Do not send ACK packet for unknown events #824
    Fix Python 3.11 deprecation warning #941
    Correct handling of RedisError exception #919
    Update Django example
    Documentation fix for async client
    Update documentation of asyncio server
    Fix documentation typo #948

Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
zhengruoqin
823b699170 python3-pillow: upgrade 9.1.1 -> 9.2.0
Changelog:
=========

    Fixed null check for fribidi_version_info in FriBiDi shim
    Added GIF decompression bomb check
    Handle PCF fonts files with less than 256 characters
    Improved GIF optimize condition
    Reverted to array_interface with the release of NumPy 1.23
    Pad PCX palette to 768 bytes when saving
    Fixed bug with rounding pixels to palette colors
    Use gnome-screenshot on Linux if available
    Fixed loading L mode BMP RLE8 images
    Fixed incorrect operator in ImageCms error
    Limit FPX tile size to avoid extending outside image
    Added support for decoding plain PPM formats
    Added apply_transparency()
    Fixed behaviour change from endian fix
    Use python3
    Allow remapping P images with RGBA palettes
    Revert "Skip test_realloc_overflow unless libtiff 4.0.4 or higher"
    [pre-commit.ci] pre-commit autoupdate
    Only import ImageFont in ImageDraw when necessary
    Fixed drawing translucent 1px high polygons
    Pad COLORMAP to 768 items when saving TIFF
    Fix P -> PA conversion
    Once exif data is parsed, do not reload unless it changes
    Only try to connect discontiguous corners at the end of edges
    Improve transparency handling when saving GIF images
    Do not update GIF frame position until local image is found
    Netscape GIF extension belongs after the global color table
    Only write GIF comments at the beginning of the file
    Separate multiple GIF comment blocks with newlines
    Always use GIF89a for comments
    Ignore compression value from BMP info dictionary when saving as TIFF
    If font is file-like object, do not re-read from object to get variant
    Raise ValueError when trying to access internal fp after close
    Support more affine expression forms in im.point()
    Include 'twine check' in 'make sdist'
    Ensure that furthest v is set in quantize2

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
zhengruoqin
de392652dc python3-ldap: upgrade 3.4.0 -> 3.4.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
Xu Huan
4d0789ec9f python3-eth-hash: upgrade 0.3.3 -> 0.4.0
Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
Davide Gardenal
72a41f8e31 openflow: ignore unrelated CVEs
CVE-2015-1611 and CVE-2015-1612 are not referred to our implementation
of openflow as specified by the NVD database, ignore them.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
Davide Gardenal
5dfcb2603d freeradius: ignore patched CVEs
CVE-2002-0318 and CVE-2011-4966 are both patched in our version of
freeradius. The CPE in the NVD database doesn't reflect correctly
the vulnerable versions that's why they are incorrectly picked up.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00
Aryaman Gupta
0f048c4c46 rsyslog: update 8.2202->8.2206
Package changes mainly include performance improvements to
tcpsrv/imtcp, bug fixes and additional/updated tests:
	https://github.com/rsyslog/rsyslog/blob/master/ChangeLog

ptest results for qemux86-64 with kvm and increasing filesystem space to
4GB using IMAGE_ROOTFS_EXTRA_SPACE :

Version | Passed | Failed | Skipped
8.2202 | 456 | 0 | 5
8.2206 | 465 | 0 | 5

Signed-off-by: Aryaman Gupta <aryaman.gupta@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-07-15 12:48:34 -04:00