CVS commit: pkgsrc/sysutils/py-Glances

"Thomas Klausner" <[email protected]> Mon, 3 Aug 2026 17:24:36 +0000
Newsgroups gmane.os.netbsd.devel.pkgsrc.cvs
Message-ID <[email protected]>
This is a multi-part message in MIME format.

--_----------=_178577787666790
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"

Module Name:	pkgsrc
Committed By:	wiz
Date:		Mon Aug  3 17:24:36 UTC 2026

Modified Files:
	pkgsrc/sysutils/py-Glances: Makefile distinfo

Log Message:
py-Glances: update to 4.5.6.

=============
Version 4.5.6
=============

Bugs corrected:

* Alert level decided by dict ordering: a failing+slow URL is downgraded to WARNING, an unscanned URL reports CRITICAL #3632
* GPU plugin duplicates card name and omits N/A for unavailable metrics in multi-GPU #3631
* GPU plugin duplicates the utilisation value and paints it with the memory colour in multi-GPU #3630
* IP plugin displays wrong interface: outer loop in get_ip_address() never breaks #3617
* VideoCore (v3d) memory shows ~93% on Raspberry Pi 5 with gpu_mem=4M — misleading denominator from drm-total-memory #3611
* CSV export: --stdout-csv data rows desync from header when network interfaces change count at runtime #3606
* Glances Network plugin with mismatched schema not logging in TimescaleDB export #3592

Security patches:

* as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config - CVE-2026-68520
* --disable-config-exec does not cover on-alert action commands - CVE-2026-68519
* Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction - CVE-2026-68518
* Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values - CVE-2026-62982
* REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test - CVE-2026-68517


To generate a diff of this commit:
cvs rdiff -u -r1.54 -r1.55 pkgsrc/sysutils/py-Glances/Makefile
cvs rdiff -u -r1.43 -r1.44 pkgsrc/sysutils/py-Glances/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_178577787666790
Content-Disposition: inline
Content-Length: 1601
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/sysutils/py-Glances/Makefile
diff -u pkgsrc/sysutils/py-Glances/Makefile:1.54 pkgsrc/sysutils/py-Glances/Makefile:1.55
--- pkgsrc/sysutils/py-Glances/Makefile:1.54	Tue Jun 23 10:40:42 2026
+++ pkgsrc/sysutils/py-Glances/Makefile	Mon Aug  3 17:24:36 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.54 2026/06/23 10:40:42 wiz Exp $
+# $NetBSD: Makefile,v 1.55 2026/08/03 17:24:36 wiz Exp $
 
-DISTNAME=	glances-4.5.5
+DISTNAME=	glances-4.5.6
 PKGNAME=	${PYPKGPREFIX}-${DISTNAME:S/g/G/}
 CATEGORIES=	sysutils python
 MASTER_SITES=	${MASTER_SITE_PYPI:=g/glances/}

Index: pkgsrc/sysutils/py-Glances/distinfo
diff -u pkgsrc/sysutils/py-Glances/distinfo:1.43 pkgsrc/sysutils/py-Glances/distinfo:1.44
--- pkgsrc/sysutils/py-Glances/distinfo:1.43	Tue Jun 23 10:40:42 2026
+++ pkgsrc/sysutils/py-Glances/distinfo	Mon Aug  3 17:24:36 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.43 2026/06/23 10:40:42 wiz Exp $
+$NetBSD: distinfo,v 1.44 2026/08/03 17:24:36 wiz Exp $
 
-BLAKE2s (glances-4.5.5.tar.gz) = 9e65c4d2c8e62f06b4db03cd6ce13597ec9ea1e8f23a39f0aded9b65dba07ae2
-SHA512 (glances-4.5.5.tar.gz) = 757f6365747e3e3fb577e9c382bd2c1ec659e944d9f832fc72a91d1de00199d25d7704f42be586dec910a20429e87497c73e3da1e64096ce715df8e5b4d01c4b
-Size (glances-4.5.5.tar.gz) = 7754901 bytes
+BLAKE2s (glances-4.5.6.tar.gz) = 8fe2f128f39e598c4e74237de0bb17fe8011516bb1438c9f3949582bdff714e6
+SHA512 (glances-4.5.6.tar.gz) = f751e07a7e4a6df96c71952345024aa24db5eb464dadf019981fdd4adcfeeee2afe80285a8360b97931e56fc16e63b6352934a9979854fe024042c9f693b520e
+Size (glances-4.5.6.tar.gz) = 7648737 bytes


--_----------=_178577787666790--