Daniel Néri authored 2 weeks ago and Patrycja Rosa committed 1 week ago

CVE-2025-27516: Sandbox breakout through attr filter selecting format
method.

- https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7
- https://raw.githubusercontent.com/pallets/jinja/refs/tags/3.1.6/CHANGES.rst

achill (fossdd) authored 2 weeks ago and Kevin Daudt committed 1 week ago

https://download.gnome.org/sources/pygobject/3.52/pygobject-3.52.2.news

https://metacpan.org/release/LWP/Mozilla-CA-20250202/source/Changes

https://pagure.io/newt/blob/master/f/CHANGES

https://sourceforge.net/projects/libpng/files/libpng16/1.6.47/

move zlib-dev into makedepends_host to support cross-compilation

https://metacpan.org/release/MRSAM/Net-CIDR-0.23/source/ChangeLog

https://www.mpfr.org/mpfr-current/#fixed

--disable-maintainer-mode added to prevent dependency on autotools

achill (fossdd) authored 2 weeks ago and Kevin Daudt committed 2 weeks ago

https://download.gnome.org/sources/pygobject/3.52/pygobject-3.52.1.news

achill (fossdd) authored 2 weeks ago and Natanael Copa committed 2 weeks ago

annotate_reachable got dropped in
https://lore.kernel.org/all/20250305174506.868421566@linuxfoundation.org/,
but https://lore.kernel.org/all/20241128094312.133437051@infradead.org/
was not backported.

Sam Edwards authored 2 weeks ago and Natanael Copa committed 2 weeks ago

Though this driver is being built for armv7, the aarch64 config
omitted the requisite option. Reenable it so that this important
cooling driver is available for use by ARM64 boards as well.

So packages can depend on lld$_llvmver

https://github.com/leethomason/tinyxml2/compare/10.0.0...10.1.0

https://metacpan.org/release/MRSAM/Net-CIDR-0.22/source/ChangeLog

achill (fossdd) authored 1 month ago and Patrycja Rosa committed 2 weeks ago

https://blog.rust-lang.org/2025/02/20/Rust-1.85.0.html

* base.crt_static_default from linux_musl.rs in
  musl-fix-linux_musl_base.patch, was moved to the indivdual targets
  (which we already do in alpine-target.patch)
  https://github.com/rust-lang/rust/commit/9c37c14aa2456315bf7b3fa7b3e089bc13a43ee9
* Target JSON (de)serialization was moved from compiler/rustc_target/src/spec/mod.rs
  to compiler/rustc_target/src/spec/json.rs (need-rpath.patch)
  https://github.com/rust-lang/rust/commit/77080d8eb359be41c696033d45e52f544ab9bd57

Clayton Craft authored 2 weeks ago and Kevin Daudt committed 2 weeks ago

Only replace things that are symlinks

Clayton Craft authored 3 weeks ago and Natanael Copa committed 2 weeks ago

This aids in testing /usr merge before it's implemented, and in
transitioning Alpine installations to /usr merge.

For some additional context, see:
alpine/aports!75080
alpine/aports!80862 (comment 487236)



Co-authored-by: Sertonix <sertonix@posteo.net>

achill (fossdd) authored 3 weeks ago and Natanael Copa committed 2 weeks ago

* rm clang-pseudo and clang-rename
  (https://github.com/llvm/llvm-project/commit/ed8f78827895050442f544edef2933a60d4a7935,
   https://github.com/llvm/llvm-project/commit/40c45b6b43180221acb49f387e7d3158adf49e3e)

achill (fossdd) authored 2 weeks ago and J0WI committed 2 weeks ago

https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.0

achill (fossdd) authored 2 weeks ago and Natanael Copa committed 2 weeks ago

https://gitlab.gnome.org/GNOME/gtk/-/blob/3.24.49/NEWS

https://dev.yorhel.nl/ncdu/changes