forked from products/PackageHub
Compare commits
1 Commits
maintenanc
...
add_librep
| Author | SHA256 | Date | |
|---|---|---|---|
| 5b1ab75583 |
12
.gitmodules
vendored
12
.gitmodules
vendored
@@ -8866,6 +8866,10 @@
|
||||
path = libreoffice-voikko
|
||||
url = ../../pool/libreoffice-voikko
|
||||
branch = leap-16.0
|
||||
[submodule "librepods"]
|
||||
path = librepods
|
||||
url = ../../pool/librepods
|
||||
branch = leap-16.0
|
||||
[submodule "librepository"]
|
||||
path = librepository
|
||||
url = ../../pool/librepository
|
||||
@@ -12966,10 +12970,6 @@
|
||||
path = perl-Data-Visitor
|
||||
url = ../../pool/perl-Data-Visitor
|
||||
branch = leap-16.0
|
||||
[submodule "perl-Date-Manip"]
|
||||
path = perl-Date-Manip
|
||||
url = ../../pool/perl-Date-Manip
|
||||
branch = leap-16.0
|
||||
[submodule "perl-DateTime-Calendar-Mayan"]
|
||||
path = perl-DateTime-Calendar-Mayan
|
||||
url = ../../pool/perl-DateTime-Calendar-Mayan
|
||||
@@ -14350,10 +14350,6 @@
|
||||
path = perl-TAP-Formatter-GitHubActions
|
||||
url = ../../pool/perl-TAP-Formatter-GitHubActions
|
||||
branch = leap-16.0
|
||||
[submodule "perl-TAP-Harness-JUnit"]
|
||||
path = perl-TAP-Harness-JUnit
|
||||
url = ../../pool/perl-TAP-Harness-JUnit
|
||||
branch = leap-16.0
|
||||
[submodule "perl-Task-Weaken"]
|
||||
path = perl-Task-Weaken
|
||||
url = ../../pool/perl-Task-Weaken
|
||||
|
||||
2
gimp
2
gimp
Submodule gimp updated: d7bae19de0...539373922d
1
librepods
Submodule
1
librepods
Submodule
Submodule librepods added at dca7563bb7
@@ -1,11 +0,0 @@
|
||||
<patchinfo incident="packagehub-108">
|
||||
<packager>eroca</packager>
|
||||
<rating>moderate</rating>
|
||||
<category>recommended</category>
|
||||
<summary>Recommended update for perl-Date-Manip</summary>
|
||||
<description>This update for perl-Date-Manip fixes the following issues:
|
||||
|
||||
Introduce perl-Date-Manip.
|
||||
</description>
|
||||
<package>perl-Date-Manip</package>
|
||||
</patchinfo>
|
||||
@@ -1,11 +0,0 @@
|
||||
<patchinfo incident="packagehub-107">
|
||||
<packager>eroca</packager>
|
||||
<rating>moderate</rating>
|
||||
<category>recommended</category>
|
||||
<summary>Recommended update for perl-TAP-Harness-JUnit</summary>
|
||||
<description>This update for perl-TAP-Harness-JUnit fixes the following issues:
|
||||
|
||||
Introduce perl-TAP-Harness-JUnit.
|
||||
</description>
|
||||
<package>perl-TAP-Harness-JUnit</package>
|
||||
</patchinfo>
|
||||
@@ -1,117 +0,0 @@
|
||||
<patchinfo incident="packagehub-106">
|
||||
<issue tracker="cve" id="2025-15059"/>
|
||||
<issue tracker="cve" id="2025-14422"/>
|
||||
<issue tracker="cve" id="2025-14424"/>
|
||||
<issue tracker="bnc" id="1255766">VUL-0: CVE-2025-15059: gimp: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</issue>
|
||||
<issue tracker="bnc" id="1255294">VUL-0: CVE-2025-14423: gimp: LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability</issue>
|
||||
<issue tracker="cve" id="2025-14425"/>
|
||||
<issue tracker="cve" id="2025-14423"/>
|
||||
<issue tracker="bnc" id="1255293">VUL-0: CVE-2025-14422: gimp: PNM File Parsing Integer Overflow Remote Code Execution Vulnerability</issue>
|
||||
<issue tracker="bnc" id="1255295">VUL-0: CVE-2025-14424: gimp: XCF File Parsing Use-After-Free Remote Code Execution Vulnerability</issue>
|
||||
<issue tracker="bnc" id="1255296">VUL-0: CVE-2025-14425: gimp: JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability</issue>
|
||||
<packager>mgorse</packager>
|
||||
<rating>moderate</rating>
|
||||
<category>recommended</category>
|
||||
<summary>Recommended update for gimp</summary>
|
||||
<description>This update for gimp fixes the following issues:
|
||||
|
||||
Changes in gimp:
|
||||
|
||||
- Update to 3.0.8
|
||||
- Font Loading Performance
|
||||
- Improvements in start-up time for users with a large number
|
||||
of fonts was backported from our 3.2 RC2 release. As a
|
||||
result, we now wait to load images until fonts are
|
||||
initialized - this prevents some occasional odd displays and
|
||||
other issues when an XCF file tried to access a partially
|
||||
loaded font.
|
||||
- Assorted updates and fixes
|
||||
- Daniel Plakhotich helped us identify an issue when exporting
|
||||
a lossless WEBP image could be affected by lossy settings
|
||||
(such as Quality being less than 100%). We’ve updated our
|
||||
WEBP plug-in to prevent this from happening.
|
||||
- Thanks to Jehan‘s efforts, the standard gimp-3.0 executable
|
||||
can now be run with a --no-interface flag instead of
|
||||
requiring users to call gimp-console-3.0 even on devices with
|
||||
no display. The --show-debug-menu flag is now visible as
|
||||
well.
|
||||
- programmer_ceds improved our flatpak by adding safe guards to
|
||||
show the correct configuration directory regardless of
|
||||
whether XDG_CONFIG_HOME is defined on the user’s system. This
|
||||
should make it much easier for flatpak users to install and
|
||||
use third party plug-ins.
|
||||
- We fixed a rare but possible crash when using the Equalize
|
||||
filter on images with NaN values. Images that contain these
|
||||
are usually created from scientific or mapping data, so
|
||||
you’re unlikely to come across them in standard editing.
|
||||
- Jeremy Bicha fixed an internal issue where the wrong version
|
||||
number could be used when installing minor releases (such as
|
||||
the 3.2 release candidates and upcoming 3.2 stable release).
|
||||
- As noted in our 3.2RC2 news post, we have updated our SVG
|
||||
import code to improve the rendered path.
|
||||
- Further improvements have been made to our non-destructive
|
||||
filter code to improve stability, especially when copying and
|
||||
pasting layers and images with filters attached to them. Some
|
||||
issues related to applying NDE filters on Quick Masks have
|
||||
also been corrected.
|
||||
- An unintended Search pop-up that appeared when typing while
|
||||
the Channels dockable was selected has been turned off.
|
||||
- When saving XCFs for GIMP 2.10 compatibility, we
|
||||
unintentionally saved Grid color using the new color format.
|
||||
This caused errors when reopening the XCF in 2.10. This
|
||||
problem has now been fixed! If you encounter any other XCF
|
||||
incompatibility, please let us know.
|
||||
- Themes and UX
|
||||
- The Navigation and Selection Editor dockables no longer show
|
||||
a large bright texture when no image is actively selected.
|
||||
This was especially noticeable on dark themes.
|
||||
- When a layer has no active filters, the Fx column had the
|
||||
same “checkbox” outline when hovered over as the lock column.
|
||||
This led to confusion about clicking it to add filters. We
|
||||
have removed the outline on hover as a small step to help
|
||||
address this.
|
||||
- Ondřej Míchal fixed alignment and cut-off issues with the
|
||||
buttons on our Transform tool overlays. All buttons should
|
||||
now be properly centered and visible.
|
||||
- The options for filling layers with colors when resizing the
|
||||
canvas will be turned off when not relevant (such as when you
|
||||
set layers to not be resized).
|
||||
- More GUI elements such as dialog header icons will now
|
||||
respond to your icon size preferences.
|
||||
- Ondřej Míchal has continued his work to update our UI with
|
||||
the more usable Spin Scale widget. He has also updated the
|
||||
widget itself to improve how it works for users and
|
||||
developers alike.
|
||||
- Security fixes
|
||||
- Jacob Boerema and Gabriele Barbero continued to patch
|
||||
potential security issues related to some of our file format
|
||||
plug-ins. In addition to existing fixes mentioned in the
|
||||
release candidate news posts, the following exploits are now
|
||||
prevented: ZDI-CAN-28232 ZDI-CAN-28265 ZDI-CAN-28530
|
||||
ZDI-CAN-28591 ZDI-CAN-28599
|
||||
- Another potential issue related to ICO files with incorrect
|
||||
metadata was reported by Dhiraj. It does not have a CVE
|
||||
number yet, but it has been fixed for GIMP 3.0.8. Jacob
|
||||
Boerema also fixed a potential issue with loading Creator
|
||||
blocks in Paintshop Pro PSP images.
|
||||
- API
|
||||
- For plug-in and script developers, a few new public APIs were
|
||||
backported to GIMP 3.0.8. gimp_cairo_surface_get_buffer ()
|
||||
allows you to retrieve a GEGL buffer from a Cairo surface
|
||||
(such as a text layer). Note that this deprecates
|
||||
gimp_cairo_surface_create_buffer ().
|
||||
- gimp_config_set_xcf_version () and
|
||||
gimp_config_get_xcf_version () can be used to specify a
|
||||
particular XCF version for a configuration. This will allow
|
||||
you to have that data serialized/deserialized for certain
|
||||
versions of GIMP if there were differences (such as the Grid
|
||||
colors mentioned above).
|
||||
- Fixes were made for retrieving image metadata via scripting.
|
||||
GimpMetadata is now a visible child of GExiv2Metadata, so you
|
||||
can use standard gexiv2 functions to retrieve information
|
||||
from it.
|
||||
- Original thumbnail metadata is also now removed on export to
|
||||
prevent potential issues when exporting into a new format.
|
||||
</description>
|
||||
<package>gimp</package>
|
||||
</patchinfo>
|
||||
11
patchinfo.20260204122956065362.93181000773252/_patchinfo
Normal file
11
patchinfo.20260204122956065362.93181000773252/_patchinfo
Normal file
@@ -0,0 +1,11 @@
|
||||
<patchinfo>
|
||||
<packager>eroca</packager>
|
||||
<rating>moderate</rating>
|
||||
<category>recommended</category>
|
||||
<summary>Recommended update for librepods</summary>
|
||||
<description>This update for librepods fixes the following issues:
|
||||
|
||||
Introduce librepods.
|
||||
</description>
|
||||
<package>librepods</package>
|
||||
</patchinfo>
|
||||
@@ -1,202 +0,0 @@
|
||||
<patchinfo>
|
||||
<issue tracker="bnc" id="1242186">yt-dlp is outdated</issue>
|
||||
<packager>rrahl0</packager>
|
||||
<rating>moderate</rating>
|
||||
<category>recommended</category>
|
||||
<summary>Recommended update for yt-dlp</summary>
|
||||
<description>This update for yt-dlp fixes the following issues:
|
||||
|
||||
Changes in yt-dlp:
|
||||
|
||||
- Update to release 2026.01.31
|
||||
* yt: Add `web_embedded` fallback for `android_vr` client
|
||||
* yt: Remove broken `ios_downgraded` and `tv_embedded` player
|
||||
clients
|
||||
|
||||
- added quickjs recommends as a lighter alternative to deno and nodejs
|
||||
|
||||
- Update to release 2026.01.29
|
||||
* Accept float values for command-line option `--sleep-subtitles`
|
||||
* Add `--format-sort-reset` option
|
||||
* yt: Support comment subthreads
|
||||
|
||||
- Update to release 2025.12.08
|
||||
* cookies: Fix --cookies-from-browser for new installs of
|
||||
Firefox 147+
|
||||
* floatplane: add subtitle support
|
||||
* yt: detect AI-upscaled formats
|
||||
|
||||
- Relax JS runtime requirement from required to recommended,
|
||||
some formats can be downloaded without either runtime.
|
||||
- Recommend nodejs as an alternative to deno
|
||||
(Leap 15.6 has just nodejs).
|
||||
|
||||
- Update to release 2025.11.12
|
||||
* An external JavaScript runtime is now used for full YouTube
|
||||
support (e.g. deno).
|
||||
|
||||
- Use the pythons macro to reduce the amount of suse_version usage
|
||||
|
||||
- Update to version 2025.10.22
|
||||
* A stopgap release with a TEMPORARY partial fix for YouTube
|
||||
support. Some formats may still be unavailable, especially if
|
||||
cookies are passed to yt-dlp. The NEXT release, expected very
|
||||
soon, will require an external JS runtime (e.g. Deno) in
|
||||
order for YouTube downloads to work properly.
|
||||
* The minimum required Python version has been raised to 3.10
|
||||
(Python 3.9 has reached its end-of-life as of October 2025).
|
||||
|
||||
- Update to release 2025.10.14
|
||||
* yt: Detect experiment binding GVS PO Token to video id
|
||||
* yt: Fix approximate timestamp extraction for feeds
|
||||
|
||||
- Use Python 3.13 in 15.7, due to lack of 3.12
|
||||
|
||||
- Update to release 2025.09.26
|
||||
* twitch: vod: Fix live_status detection
|
||||
* yt: Fix player JS overrides
|
||||
* yt: Improve PO token logging
|
||||
* yt: Player client maintenance
|
||||
* yt: Replace tv_simply with web_safari in default clients
|
||||
- Fix Leap 15.6 build
|
||||
|
||||
- Update to release 2025.09.23
|
||||
* youtube: Force player 0004de42
|
||||
|
||||
- Update to version 2025.09.05
|
||||
* Fix --id deprecation warning
|
||||
* charlierose: Fix extractor
|
||||
* googledrive: Fix subtitles extraction
|
||||
* itvbtcc: Fix extractor
|
||||
* kick: vod: Support ongoing livestream VODs
|
||||
* lrt: Fix extractors
|
||||
* tver: Extract more metadata
|
||||
* vevo: Restore extractors
|
||||
* build: Overhaul Linux builds and refactor release workflow
|
||||
|
||||
- Update to release 2025.08.27
|
||||
* Add tcc player JS variant
|
||||
* Deprioritize web_safari m3u8 formats
|
||||
* Use alternative tv user-agent when authenticated
|
||||
|
||||
- Update to release 2025.08.22
|
||||
* cookies: Fix --cookies-from-browser with Firefox 142+
|
||||
|
||||
- Update to release 2025.08.20
|
||||
* Warn against use of `-f mp4`
|
||||
* yt: Add es5 and es6 player JS variants
|
||||
* yt: Default to main player JS variant
|
||||
* yt: Extract title and description from initial data
|
||||
* yt: Handle required preroll waiting period
|
||||
|
||||
- Update to release 2025.08.11
|
||||
* yt: Add player params to mweb client
|
||||
* dash: Re-extract if using --load-info-json with
|
||||
--live-from-start
|
||||
|
||||
- Update to release 2025.07.21
|
||||
* Default behaviour changed from --mtime to --no-mtime
|
||||
* yt: Do not require PO Token for premium accounts
|
||||
* yt: Extract global nsig helper functions
|
||||
* yt: tab: Fix subscriptions feed extraction
|
||||
|
||||
- Update to release 2025.06.30
|
||||
* youtube: Fix premium formats extraction
|
||||
|
||||
- Update to release 2025.06.25
|
||||
* yt: Check any ios m3u8 formats prior to download
|
||||
* yt: Improve player context payloads
|
||||
|
||||
- Update to release 2025.06.09
|
||||
* adobepass: add Fubo MSO, fix Philo MSO authentication
|
||||
* yt: Add tv_simply player client
|
||||
* yt: Extract srt subtitles
|
||||
* yt: Rework nsig function name extraction
|
||||
|
||||
- Update to release 2025.05.22
|
||||
* yt: Add PO token support for subtitles
|
||||
* yt: Add web_embedded client for age-restricted videos
|
||||
* yt: Add a PO Token Provider Framework
|
||||
* yt: Extract media_type for all videos
|
||||
* yt: Fix --live-from-start support for premieres
|
||||
* yt: Fix geo-restriction error handling
|
||||
|
||||
- Update to release 2025.04.30 [boo#1242186]
|
||||
* New option --preset-alias/-t has been added
|
||||
|
||||
- Update to release 2025.03.31
|
||||
* yt: add player_js_variant extractor-arg
|
||||
* yt/tab: Fix playlist continuation extraction
|
||||
|
||||
- Update to release 2025.03.27
|
||||
* youtube: Make signature and nsig extraction more robust
|
||||
|
||||
- Update to release 2025.03.26
|
||||
* youtube: fix signature and nsig extraction for player 4fcd6e4a
|
||||
|
||||
- Update to release 2025.03.21
|
||||
* Fix external downloader availability when using
|
||||
``--ffmpeg-location``
|
||||
* youtube: fix nsig and signature extraction for player 643afba4.
|
||||
|
||||
- Require same version between yt-dlp -> python-yt-dlp
|
||||
|
||||
- Update to release 2025.02.19
|
||||
* NSIG workaround for tce player JS
|
||||
|
||||
- Update to release 2025.01.26
|
||||
* bilibili: Support space video list extraction without login
|
||||
* crunchyroll: Remove extractors
|
||||
* youtube: Download tv client Innertube config
|
||||
* youtube: Use different PO token for GVS and Player
|
||||
|
||||
- Update to release 2025.01.15
|
||||
* youtube: Do not use web_creator as a default client
|
||||
|
||||
- Update to release 2025.01.12
|
||||
* yt: fix DASH formats incorrectly skipped in some situations
|
||||
* yt: refactor cookie auth
|
||||
|
||||
- Fix 15.6 build
|
||||
|
||||
- Update to release 2024.12.23
|
||||
* yt: add age-gate workaround for some embeddable videos
|
||||
|
||||
- Update to release 2024.12.13
|
||||
* yt: fix signature function extraction for 2f1832d2
|
||||
* yt: prioritize original language over auto-dubbed audio
|
||||
|
||||
- Update to release 2024.12.06
|
||||
* yt: fix ``n`` sig extraction for player 3bb1f723
|
||||
* yt: fix signature function extraction
|
||||
* yt: player client maintenance
|
||||
|
||||
- Update to release 2024.12.03
|
||||
* bilibili: Always try to extract HD formats
|
||||
* youtube: Adjust player clients for site changes
|
||||
|
||||
- Update to release 2024.11.18
|
||||
* cloudflarestream: Avoid extraction via videodelivery.net
|
||||
* youtube: remove broken OAuth support
|
||||
|
||||
- Update to release 2024.11.04
|
||||
* Prioritize AV1
|
||||
* Remove Python <= 3.8 support
|
||||
* youtube: Adjust OAuth refresh token handling
|
||||
|
||||
- Update to release 2024.10.22
|
||||
* yt: Remove broken android_producer client
|
||||
* yt: Remove broken age-restriction workaround
|
||||
* yt: Support logging in with OAuth
|
||||
|
||||
- Update to release 2024.10.07
|
||||
* Fix cookie load error handling
|
||||
* youtube: Change default player clients to ios,mweb
|
||||
* patreon: Extract all m3u8 formats for locked posts
|
||||
|
||||
- Update to release 2024.09.27
|
||||
* Support excluding player_clients in extractor-arg
|
||||
* clip: Prioritize https formats
|
||||
</description>
|
||||
<package>yt-dlp</package>
|
||||
</patchinfo>
|
||||
Submodule perl-Date-Manip deleted from 81c803a2ba
Submodule perl-TAP-Harness-JUnit deleted from dd62d5842a
2
yt-dlp
2
yt-dlp
Submodule yt-dlp updated: 0bc66bc1e0...562472d7b1
Reference in New Issue
Block a user