public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/glances] epel10: Update to 4.0.5
@ 2026-08-30 14:23 Ali Erdinc Koroglu
  0 siblings, 0 replies; only message in thread
From: Ali Erdinc Koroglu @ 2026-08-30 14:23 UTC (permalink / raw)
  To: git-commits

A new commit has been pushed.

Repo   : rpms/glances
Branch : epel10
Commit : 327293e19f009449c554bfe39f12e5ced996c3b9
Author : Ali Erdinc Koroglu <aekoroglu@linux.intel.com>
Date   : 2024-05-24T17:42:24+03:00
Stats  : +39/-16 in 4 file(s)
URL    : https://src.fedoraproject.org/rpms/glances/c/327293e19f009449c554bfe39f12e5ced996c3b9?branch=epel10

Log:
Update to 4.0.5

---
diff --git a/CVE-2024-21501.patch b/CVE-2024-21501.patch
new file mode 100644
index 0000000..3a45694
--- /dev/null
+++ b/CVE-2024-21501.patch
@@ -0,0 +1,22 @@
+--- a/glances/outputs/static/package-lock.json	2024-05-24 16:03:12.068713649 +0300
++++ b/glances/outputs/static/package-lock.json	2024-05-24 16:03:42.431641898 +0300
+@@ -10,7 +10,7 @@
+                 "favico.js": "^0.3.10",
+                 "hotkeys-js": "^3.10.2",
+                 "lodash": "^4.17.21",
+-                "sanitize-html": "^2.10.0",
++                "sanitize-html": "^2.12.1",
+                 "vue": "^3.3.2"
+             },
+             "devDependencies": {
+--- a/glances/outputs/static/package.json	2024-05-24 16:02:37.697794878 +0300
++++ b/glances/outputs/static/package.json	2024-05-24 16:03:00.459741083 +0300
+@@ -5,7 +5,7 @@
+         "favico.js": "^0.3.10",
+         "hotkeys-js": "^3.10.2",
+         "lodash": "^4.17.21",
+-        "sanitize-html": "^2.10.0",
++        "sanitize-html": "^2.12.1",
+         "vue": "^3.3.2"
+     },
+     "devDependencies": {

diff --git a/disable-update-check.patch b/disable-update-check.patch
index ed6031b..42359fd 100644
--- a/disable-update-check.patch
+++ b/disable-update-check.patch
@@ -1,8 +1,8 @@
---- a/glances/standalone.py	2023-05-17 18:24:21.872808739 +0300
-+++ b/glances/standalone.py	2023-05-17 18:24:49.661716352 +0300
-@@ -105,9 +105,6 @@
-             # Init screen
-             self.screen = GlancesCursesStandalone(config=config, args=args)
+--- a/glances/standalone.py	2024-05-24 15:28:47.738777512 +0300
++++ b/glances/standalone.py	2024-05-24 15:29:53.860611529 +0300
+@@ -112,9 +112,6 @@
+             # It is done in the screen.init function
+             self._quiet = args.quiet
  
 -        # Check the latest Glances version
 -        self.outdated = Outdated(config=config, args=args)
@@ -10,18 +10,16 @@
      @property
      def quiet(self):
          return self._quiet
-@@ -186,17 +183,3 @@
+@@ -192,15 +189,3 @@
  
          # Exit from export modules
          self.stats.end()
 -
 -        # Check Glances version versus PyPI one
 -        if self.outdated.is_outdated():
--            print(
--                "You are using Glances version {}, however version {} is available.".format(
--                    self.outdated.installed_version(), self.outdated.latest_version()
--                )
--            )
+-            latest_version = self.outdated.latest_version()
+-            installed_version = self.outdated.installed_version()
+-            print(f"You are using Glances version {installed_version}, however version {latest_version} is available.")
 -            print("You should consider upgrading using: pip install --upgrade glances")
 -            print("Disable this warning temporarily using: glances --disable-check-update")
 -            print(

diff --git a/glances.spec b/glances.spec
index d2d10e7..ae1e06a 100644
--- a/glances.spec
+++ b/glances.spec
@@ -12,7 +12,7 @@ system. It is based on an open architecture where developers can add new
 plugins or exports modules.}
 
 Name:		glances	
-Version:	3.4.0
+Version:	4.0.5
 Release:	%autorelease
 Summary:	A cross-platform system monitoring tool
 
@@ -21,14 +21,17 @@ URL:		https://nicolargo.github.io/glances/
 Source0:	https://github.com/nicolargo/glances/archive/v%{version}/%{name}-%{version}.tar.gz
 Source1:	%{name}.service
 
-Patch1:		disable-update-check.patch
+Patch0:		disable-update-check.patch
+# https://github.com/nicolargo/glances/pull/2683/commits/0f40f9cc118fe4513bf8c22fae3b8bad56000c7e
+Patch1:		CVE-2024-21501.patch
 
 BuildArch:	noarch
 
 BuildRequires:	python3-devel
-BuildRequires:	python3-dateutil
 BuildRequires:	systemd-units
-Requires:	python3-bottle
+Requires:	python3-fastapi
+Requires:	python3-orjson
+Requires:	python3-uvicorn
 
 %description
 %{desc}

diff --git a/sources b/sources
index 4878789..dd44653 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glances-3.4.0.tar.gz) = dca16ac5116e79979e850dac340d9160afeb066b68ca30021797bdd6ada0a69c609f11e1aa10b7b03c671098a5229b404aed4879f012de881e8e4670dae0d7b2
+SHA512 (glances-4.0.5.tar.gz) = ce7c89c60d2db261818860791a8ebdad3ab4cd950eb097ee9ecdeb44df7bbb8c3b1b8cb81989d50e1fd89a4c752065e0a687d0b171a7867dc92775eb2671997f

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-30 14:23 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-30 14:23 [rpms/glances] epel10: Update to 4.0.5 Ali Erdinc Koroglu

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox