staging-next-24.05 iteration 5 - 2024-09-11 #341173

Changes: https://lib.openmpt.org/libopenmpt/2024/07/21/security-updates-0.7.9-0.6.18-0.5.32-0.4.44/ (cherry picked from commit 3f547bd)

Under some circumstances this file might contain private information that should not be accessible to everybody. (cherry picked from commit c47a1e7)

(cherry picked from commit 19eba8f)

(cherry picked from commit 41c2a08)

[Backport staging-24.05] ffmpeg_6: 6.1.1 -> 6.1.2; ffmpeg_7: 7.0.1 -> 7.0.2

(cherry picked from commit aadbb9e)

(cherry picked from commit 7861a5d)

(cherry picked from commit 6ac037b)

Fixes CVE-2024-43374 (GHSA-2w8m-443v-cgvw), CVE-2024-41957 (GHSA-f9cr-gv85-hcr4) and CVE-2024-41965 (GHSA-46pw-v7qw-xc2f). vim/vim@v9.1.0595...v9.1.0679 (cherry picked from commit ee1d238)

[24.05] vim: 9.1.0377 -> 9.1.0679

https://github.com/urllib3/urllib3/blob/2.2.2/CHANGES.rst (cherry picked from commit 0ee11f4)

This fixes the regression introduced by c47a1e7 on Darwin. The creation of the file using `install` and process substitution does not work on Darwin, you get the following complain: ``` install: skipping file '/dev/fd/63', as it was replaced while being copied ``` Fixes #335016 (cherry picked from commit d00775c)

Add linux kernel support for Cirrus Logic CS8409 as module. This will for example unlock on-board Sound for some 2016-2019 Apple Intel Hardware Series (iMac, MacBookAir, MacBookPro) - tested on MacBookPro14,1 (cherry picked from commit 14d1761)

(cherry picked from commit 14d51d6)

[Backport staging-24.05] linux: enable CONFIG_SND_HDA_CODEC_CS8409

Fixes GHSA-v2x2-cjcg-f9jm https://www.openwall.com/lists/oss-security/2024/08/22/3 (cherry picked from commit cc39082)

See https://savannah.gnu.org/bugs/?57717 Reproducer: ```console $ patch -p1 <<'EOF' diff --git a/file2.txt b/file2.txt index e69de29..d20e9cd 100644 --- a/file2.txt +++ b/file2.txt @@ -1 +1 @@ -old content +new content EOF ``` ``` (repeated lines omitted) patch: **** Can't create file file2.txt.orig : Too many open files patch: **** Can't create file file2.txt.orig : Too many open files patch: **** Can't create file file2.txt.origSegmentation fault (core dumped) ``` (cherry picked from commit 23eacd4)

The patch from commit bdf63d7 is also available in the cups source repository (up to some variations in code comments).

If cups is started with no network listeners, i.e., only with `Listen /path/to/unix.socket` lines in cupsd.conf, it fails to start. This is caused by the patch of CVE-2024-35235, see also bdf63d7 dfe9603 Upstream documented the problem here OpenPrinting/cups#985 and fixed it here OpenPrinting/cups#988 . In NixOS, the problem manifests itself with this configuration: > services.printing.listenAddresses = []; The commit at hand adds three more patches from the upstream repository. This is the smalles possible change that fixes the regression caused by the initial patch.