[ptxdist] [PATCH 1/2] rauc: version bump 1.13 -> 1.14

[ptxdist] [PATCH 1/2] rauc: version bump 1.13 -> 1.14

[Bruno Thomsen]

Make new composefs option configurable in menu.

Changelog: https://github.com/rauc/rauc/releases/tag/v1.14

Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
---
 rules/rauc.in   | 7 +++++++
 rules/rauc.make | 5 +++--
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/rules/rauc.in b/rules/rauc.in
index ee9c3f955..66ac7bcfc 100644
--- a/rules/rauc.in
+++ b/rules/rauc.in
@@ -80,6 +80,13 @@ config RAUC_GPT
 	  For details, see
 	  https://rauc.readthedocs.io/en/latest/advanced.html#update-boot-partition-in-gpt
 
+config RAUC_COMPOSEFS
+	bool
+	prompt "Enable composefs support"
+	help
+	  Enables support for creating composefs artifact repository.
+	  For details, see
+	  https://rauc.readthedocs.io/en/latest/integration.html#repository-type
 
 config RAUC_CONFIGURATION
 	bool
diff --git a/rules/rauc.make b/rules/rauc.make
index 9a8671c32..b9876a71e 100644
--- a/rules/rauc.make
+++ b/rules/rauc.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_RAUC) += rauc
 #
 # Paths and names
 #
-RAUC_VERSION		:= 1.13
-RAUC_MD5		:= cb740d131e2e831810407f2d39d373dd
+RAUC_VERSION		:= 1.14
+RAUC_MD5		:= a99bac2e1a6bf26d75c6427b5e994e7f
 RAUC			:= rauc-$(RAUC_VERSION)
 RAUC_SUFFIX		:= tar.xz
 RAUC_URL		:= https://github.com/rauc/rauc/releases/download/v$(RAUC_VERSION)/$(RAUC).$(RAUC_SUFFIX)
@@ -43,6 +43,7 @@ RAUC_CONF_OPT	:= \
 	-Dsystemdcatalogdir=/usr/lib/systemd/catalog \
 	-Dfuzzing=false \
 	-Dgpt=$(call ptx/endis,PTXCONF_RAUC_GPT)d \
+	-Dcomposefs=$(call ptx/endis,PTXCONF_RAUC_COMPOSEFS)d \
 	-Dhtmldocs=false \
 	-Djson=$(call ptx/endis,PTXCONF_RAUC_JSON)d \
 	-Dnetwork=$(call ptx/truefalse,PTXCONF_RAUC_NETWORK) \

base-commit: 33b41e5cbb0af2094d1c7bfa25783241944551d4
-- 
2.50.0

[ptxdist] [PATCH 2/2] sudo: version bump 1.9.15p5 -> 1.9.17p1

[Bruno Thomsen]

Sudo insults are now included by default, but disabled unless
the --with-insults configure option is specified or the insults
sudoers option is enabled.

Fixes CVE-2025-32462 and CVE-2025-32463.

Changelog: https://www.sudo.ws/releases/stable/#1.9.17p1

Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
---
 rules/sudo.make | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/rules/sudo.make b/rules/sudo.make
index 83c3e7f8e..0b4bcc81c 100644
--- a/rules/sudo.make
+++ b/rules/sudo.make
@@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
 #
 # Paths and names
 #
-SUDO_VERSION	:= 1.9.15p5
-SUDO_MD5	:= 4166279cb188ecb6641c7a2ba5f68270
+SUDO_VERSION	:= 1.9.17p1
+SUDO_MD5	:= 231106344ffe541fa8e0bd4caf322497
 SUDO		:= sudo-$(SUDO_VERSION)
 SUDO_SUFFIX	:= tar.gz
 SUDO_URL	:= \
@@ -73,7 +73,6 @@ SUDO_CONF_OPT	:= \
 	--disable-tmpfiles.d \
 	--disable-devsearch \
 	--disable-sasl \
-	--disable-offensive-insults \
 	--disable-package-build \
 	--disable-gss-krb5-ccache-name \
 	--disable-pvs-studio \
-- 
2.50.0

Re: [ptxdist] [PATCH 1/2] rauc: version bump 1.13 -> 1.14

[Michael Olbrich]

On Wed, Jul 02, 2025 at 03:19:42PM +0200, Bruno Thomsen wrote:
> Make new composefs option configurable in menu.
> 
> Changelog: https://github.com/rauc/rauc/releases/tag/v1.14
> 
> Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
> ---
>  rules/rauc.in   | 7 +++++++
>  rules/rauc.make | 5 +++--
>  2 files changed, 10 insertions(+), 2 deletions(-)
> 
> diff --git a/rules/rauc.in b/rules/rauc.in
> index ee9c3f955..66ac7bcfc 100644
> --- a/rules/rauc.in
> +++ b/rules/rauc.in
> @@ -80,6 +80,13 @@ config RAUC_GPT
>  	  For details, see
>  	  https://rauc.readthedocs.io/en/latest/advanced.html#update-boot-partition-in-gpt
>  
> +config RAUC_COMPOSEFS
> +	bool
> +	prompt "Enable composefs support"
> +	help
> +	  Enables support for creating composefs artifact repository.
> +	  For details, see
> +	  https://rauc.readthedocs.io/en/latest/integration.html#repository-type
>  
>  config RAUC_CONFIGURATION
>  	bool
> diff --git a/rules/rauc.make b/rules/rauc.make
> index 9a8671c32..b9876a71e 100644
> --- a/rules/rauc.make
> +++ b/rules/rauc.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_RAUC) += rauc
>  #
>  # Paths and names
>  #
> -RAUC_VERSION		:= 1.13
> -RAUC_MD5		:= cb740d131e2e831810407f2d39d373dd
> +RAUC_VERSION		:= 1.14
> +RAUC_MD5		:= a99bac2e1a6bf26d75c6427b5e994e7f

The hash for README.rst in the license files changed. Please fix as needed
and add a comment in the commit message.

Michael

>  RAUC			:= rauc-$(RAUC_VERSION)
>  RAUC_SUFFIX		:= tar.xz
>  RAUC_URL		:= https://github.com/rauc/rauc/releases/download/v$(RAUC_VERSION)/$(RAUC).$(RAUC_SUFFIX)
> @@ -43,6 +43,7 @@ RAUC_CONF_OPT	:= \
>  	-Dsystemdcatalogdir=/usr/lib/systemd/catalog \
>  	-Dfuzzing=false \
>  	-Dgpt=$(call ptx/endis,PTXCONF_RAUC_GPT)d \
> +	-Dcomposefs=$(call ptx/endis,PTXCONF_RAUC_COMPOSEFS)d \
>  	-Dhtmldocs=false \
>  	-Djson=$(call ptx/endis,PTXCONF_RAUC_JSON)d \
>  	-Dnetwork=$(call ptx/truefalse,PTXCONF_RAUC_NETWORK) \
> 
> base-commit: 33b41e5cbb0af2094d1c7bfa25783241944551d4
> -- 
> 2.50.0
> 
> 
> 

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |