- IPFirer-3.x - Update from version 5.9.4-1 to 5.9.5-1 - Changelog 5.9.5 **Enhancements** - 2196_: in case of exception, display a cleaner error traceback by hiding the `KeyError` bit deriving from a missed cache hit. - 2217_: print the full traceback when a `DeprecationWarning` or `UserWarning` is raised. - 2230_, [OpenBSD]: `psutil.net_connections`_ implementation was rewritten from scratch: - We're now able to retrieve the path of AF_UNIX sockets (before it was an empty string) - The function is faster since it no longer iterates over all processes. - No longer produces duplicate connection entries. - 2238_: there are cases where `Process.cwd()`_ cannot be determined (e.g. directory no longer exists), in which case we returned either ``None`` or an empty string. This was consolidated and we now return ``""`` on all platforms. - 2239_, [UNIX]: if process is a zombie, and we can only determine part of the its truncated `Process.name()`_ (15 chars), don't fail with `ZombieProcess`_ when we try to guess the full name from the `Process.cmdline()`_. Just return the truncated name. - 2240_, [NetBSD], [OpenBSD]: add CI testing on every commit for NetBSD and OpenBSD platforms (python 3 only). **Bug fixes** - 1043_, [OpenBSD] `psutil.net_connections`_ returns duplicate entries. - 1915_, [Linux]: on certain kernels, ``"MemAvailable"`` field from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in which case we calculate an approximation for ``available`` memory which matches "free" CLI utility. - 2164_, [Linux]: compilation fails on kernels < 2.6.27 (e.g. CentOS 5). - 2186_, [FreeBSD]: compilation fails with Clang 15. (patch by Po-Chuan Hsieh) - 2191_, [Linux]: `disk_partitions()`_: do not unnecessarily read /proc/filesystems and raise `AccessDenied`_ unless user specified `all=False` argument. - 2216_, [Windows]: fix tests when running in a virtual environment (patch by Matthieu Darbois) - 2225_, [POSIX]: `users()`_ loses precision for ``started`` attribute (off by 1 minute). - 2229_, [OpenBSD]: unable to properly recognize zombie processes. `NoSuchProcess`_ may be raised instead of `ZombieProcess`_. - 2231_, [NetBSD]: *available* `virtual_memory()`_ is higher than *total*. - 2234_, [NetBSD]: `virtual_memory()`_ metrics are wrong: *available* and *used* are too high. We now match values shown by *htop* CLI utility. - 2236_, [NetBSD]: `Process.num_threads()`_ and `Process.threads()`_ return threads that are already terminated. - 2237_, [OpenBSD], [NetBSD]: `Process.cwd()`_ may raise ``FileNotFoundError`` if cwd no longer exists. Return an empty string instead.

Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- python3-psutil/python3-psutil.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/python3-psutil/python3-psutil.nm b/python3-psutil/python3-psutil.nm index 48c54c2c4..358b4395d 100644 --- a/python3-psutil/python3-psutil.nm +++ b/python3-psutil/python3-psutil.nm @@ -4,7 +4,7 @@ ###############################################################################

name = python3-psutil -version = 5.9.4 +version = 5.9.5 release = 1 thisapp = psutil-release-%{version}

- IPFire-3.x - Update from version 6.2.0-1 to 6.3.3-1 - Changelog 6.3.3 The Content-Length header and chunked Transfer-Encoding sizes are now parsed more strictly (according to the relevant RFCs) to avoid potential request-smuggling vulnerabilities when deployed behind certain proxies. 6.3.2 Fixed an open redirect vulnerability in StaticFileHandler under certain configurations. 6.3.1 RequestHandler.set_cookie once again accepts capitalized keyword arguments for backwards compatibility. This is deprecated and in Tornado 7.0 only lowercase arguments will be accepted. 6.3.0 Highlights¶ The new Application setting xsrf_cookie_name can now be used to take advantage of the __Host cookie prefix for improved security. To use it, add {"xsrf_cookie_name": "__Host-xsrf", "xsrf_cookie_kwargs": {"secure": True}} to your Application settings. Note that this feature currently only works when HTTPS is used. WSGIContainer now supports running the application in a ThreadPoolExecutor so the event loop is no longer blocked. AsyncTestCase and AsyncHTTPTestCase, which were deprecated in Tornado 6.2, are no longer deprecated. WebSockets are now much faster at receiving large messages split into many fragments. General changes¶ Python 3.7 is no longer supported; the minimum supported Python version is 3.8. Python 3.12 is now supported. To avoid spurious deprecation warnings, users of Python 3.10 should upgrade to at least version 3.10.9, and users of Python 3.11 should upgrade to at least version 3.11.1. Tornado submodules are now imported automatically on demand. This means it is now possible to use a single import tornado statement and refer to objects in submodules such as tornado.web.RequestHandler. Deprecation notices¶ In Tornado 7.0, tornado.testing.ExpectLog will match WARNING and above regardless of the current logging configuration, unless the level argument is used. RequestHandler.get_secure_cookie is now a deprecated alias for RequestHandler.get_signed_cookie. RequestHandler.set_secure_cookie is now a deprecated alias for RequestHandler.set_signed_cookie. RequestHandler.clear_all_cookies is deprecated. No direct replacement is provided; RequestHandler.clear_cookie should be used on individual cookies. Calling the IOLoop constructor without a make_current argument, which was deprecated in Tornado 6.2, is no longer deprecated. AsyncTestCase and AsyncHTTPTestCase, which were deprecated in Tornado 6.2, are no longer deprecated. AsyncTestCase.get_new_ioloop is deprecated. tornado.auth¶ New method GoogleOAuth2Mixin.get_google_oauth_settings can now be overridden to get credentials from a source other than the Application settings. tornado.gen¶ contextvars now work properly when a @gen.coroutine calls a native coroutine. tornado.options¶ parse_config_file now recognizes single comma-separated strings (in addition to lists of strings) for options with multiple=True. tornado.web¶ New Application setting xsrf_cookie_name can be used to change the name of the XSRF cookie. This is most useful to take advantage of the __Host- cookie prefix. RequestHandler.get_secure_cookie and RequestHandler.set_secure_cookie (and related methods and attributes) have been renamed to get_signed_cookie and set_signed_cookie. This makes it more explicit what kind of security is provided, and avoids confusion with the Secure cookie attribute and __Secure- cookie prefix. The old names remain supported as deprecated aliases. RequestHandler.clear_cookie now accepts all keyword arguments accepted by set_cookie. In some cases clearing a cookie requires certain arguments to be passed the same way in which it was set. RequestHandler.clear_all_cookies now accepts additional keyword arguments for the same reason as clear_cookie. However, since the requirements for additional arguments mean that it cannot reliably clear all cookies, this method is now deprecated. tornado.websocket¶ It is now much faster (no longer quadratic) to receive large messages that have been split into many fragments. websocket_connect now accepts a resolver parameter. tornado.wsgi¶ WSGIContainer now accepts an executor parameter which can be used to run the WSGI application on a thread pool.

Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- python3-tornado/python3-tornado.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/python3-tornado/python3-tornado.nm b/python3-tornado/python3-tornado.nm index f47647f3b..6a145966a 100644 --- a/python3-tornado/python3-tornado.nm +++ b/python3-tornado/python3-tornado.nm @@ -4,7 +4,7 @@ ###############################################################################

name = python3-tornado -version = 6.2.0 +version = 6.3.3 release = 1 thisapp = tornado-%{version}

- IPFire-3.x - Update from version 1.4.3-1 to 1.4.4-1 -Changelog 1.4.4 Use AC_SYS_LARGEFILE macro to control largefile support

Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- rpcsvc-proto/rpcsvc-proto.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rpcsvc-proto/rpcsvc-proto.nm b/rpcsvc-proto/rpcsvc-proto.nm index 359fe546d..4820a8efd 100644 --- a/rpcsvc-proto/rpcsvc-proto.nm +++ b/rpcsvc-proto/rpcsvc-proto.nm @@ -4,7 +4,7 @@ ###############################################################################

name = rpcsvc-proto -version = 1.4.3 +version = 1.4.4 release = 1

groups = System/Libraries