diff mbox series

[meta-python,2/2] python3-glances: Upgrade 4.3.2 -> 4.5.6

Message ID 20260904094854.3706560-2-leon.anavi@konsulko.com
State Under Review
Headers show
Series [meta-python,1/2] python3-cmd2: Upgrade 4.2.2 -> 4.2.3 | expand

Commit Message

Leon Anavi Sept. 4, 2026, 9:48 a.m. UTC 
Upgrade to release 4.5.6:

Bugs corrected:

- Alert level decided by dict ordering: a failing+slow URL is
  downgraded to WARNING, an unscanned URL reports CRITICAL
- GPU plugin duplicates card name and omits N/A for unavailable
  metrics in multi-GPU
- GPU plugin duplicates the utilisation value and paints it with
  the memory colour in multi-GPU
- IP plugin displays wrong interface: outer loop in get_ip_address()
  never breaks
- VideoCore (v3d) memory shows ~93% on Raspberry Pi 5 with
  gpu_mem=4M - misleading denominator from drm-total-memory
- CSV export: --stdout-csv data rows desync from header when
  network interfaces change count at runtime
- Glances Network plugin with mismatched schema not logging in
  TimescaleDB export

Security patches:

- as_dict_secure() Value-Level Bypass Leaks Credentials in URL
  Values via /api/4/config - CVE-2026-68520
- --disable-config-exec does not cover on-alert action commands
  - CVE-2026-68519
- Command injection bypass of action-template sanitizer via
  cross-field shell-operator reconstruction - CVE-2026-68518
- Incomplete fix of CVE-2026-32608: action-template sanitizer is
  bypassed by nested stat values - CVE-2026-62982
- REST API CORS Credentials Guard Uses Exact-Match Instead of
  Membership Test - CVE-2026-68517

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 .../{python3-glances_4.3.2.bb => python3-glances_4.5.6.bb}    | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-glances_4.3.2.bb => python3-glances_4.5.6.bb} (80%)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-glances_4.3.2.bb b/meta-python/recipes-devtools/python/python3-glances_4.5.6.bb
similarity index 80%
rename from meta-python/recipes-devtools/python/python3-glances_4.3.2.bb
rename to meta-python/recipes-devtools/python/python3-glances_4.5.6.bb
index e4cd7d59e7..8738d5c7b1 100644
--- a/meta-python/recipes-devtools/python/python3-glances_4.3.2.bb
+++ b/meta-python/recipes-devtools/python/python3-glances_4.5.6.bb
@@ -1,9 +1,11 @@ 
 SUMMARY = "Glances is an open-source system cross-platform monitoring tool."
+DESCRIPTION = "Glances an Eye on your system. A top/htop alternative for \
+GNU/Linux, BSD, macOS and Windows operating systems."
 HOMEPAGE = "https://nicolargo.github.io/glances/"
 LICENSE = "LGPL-3.0-only"
 LIC_FILES_CHKSUM = "file://COPYING;md5=852ecadc0ac7e6f4d7144d5544a3815b"
 
-SRC_URI[sha256sum] = "736faa7faea3bcd58afffd6443974b4ed4b498627a71ce5d6c9640b7b5ddbd94"
+SRC_URI[sha256sum] = "8a26329f0a25e878d53c2558f1eb0615b09acc1dce2ba523cab32dbe175fe8bf"
 
 PYPI_PACKAGE = "glances"