Commit Graph

7 Commits

Author SHA1 Message Date
Peter Marko
33d90091be libmicrohttpd: disable experimental code by default
Introduce new packageconfig to explicitly avoid compilation of
experimental code. Note that the code was not compiled by default also
before this patch, this now makes it explicit and makes it possible to
check for the flags in cve-check code.

This is less intrusive change than a patch removing the code which was
rejected in patch review.

This will solve CVE-2025-59777 and CVE-2025-62689 as the vulnerable code
is not compiled by default.
Set appropriate CVE status for these CVEs based on new packageconfig.

(From OE-Core rev: 1d8e646aebe75b8ede51d4de9e0003a822992a33)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-12-12 08:49:37 -08:00
Narpat Mali
caa3177c77 libmicrohttpd: upgrade 0.9.75 -> 0.9.76
Changelog:
============
Fix potential DoS vector in MHD_PostProcessor.(CVE-2023-27371)
Releasing GNU libmicrohttpd 0.9.76 hotfix.

https://github.com/Karlson2k/libmicrohttpd/blob/v0.9.76/ChangeLog

(From OE-Core rev: 017346be6c97d20b1b16d495ee9484f10973857c)

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2023-03-20 17:20:44 +00:00
Richard Purdie
b0130fcf91 meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
An automated conversion using scripts/contrib/convert-spdx-licenses.py to
convert to use the standard SPDX license identifiers. Two recipes in meta-selftest
were not converted as they're that way specifically for testing. A change in
linux-firmware was also skipped and may need a more manual tweak.

(From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-02-20 16:45:25 +00:00
zhengruoqin
a2f5dee7a5 libmicrohttpd: upgrade 0.9.73 -> 0.9.75
Changelog:
=========
 Fixed Makefile warning on MinGW.
 Fixed compiler warning on MinGW.
 Fixed "configure" portability (for NetBSD).
 MSVC project cosmetics.
 MSVC fixed project to fix linker warning.
 Fixed compiler warning on some platforms.
 Further improved test_client_put_stop to get stable results on all
 platforms.
 Added workaround for platforms (like OpenBSD) where system monotonic clocks
 may jump forward and back.
 Added more checks in test_large_put, increased timeout (was too small for
 this test). -EG

(From OE-Core rev: da29585e6ff055b9a6a494ea27fa5594617d8a8c)

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-01-05 17:18:15 +00:00
Richard Purdie
bb6ddc3691 Convert to new override syntax
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py <oe-core directory>

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-02 15:44:10 +01:00
zhengruoqin
eb31bf7ea3 libmicrohttpd: upgrade 0.9.72 -> 0.9.73
(From OE-Core rev: 079d56b24b4e1a577b58516c00000184542f2dfe)

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-05-02 23:21:42 +01:00
Alexander Kanavin
76a9b01ff3 libmicrohttpd: add a recipe from meta-oe
This is required to enable debuginfod in elfutils.

(From OE-Core rev: e6035099772a0ccbb4835c0c782317c19527876c)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-20 13:56:48 +01:00