mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-05-17 11:27:55 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
0372024fe7ab2cea5eddf686f9bee0f8f07a2000
poky/meta/recipes-devtools
History
Yogita Urade 0372024fe7 python3-urllib3: fix CVE-2025-50182 
urllib3 is a user-friendly HTTP client library for Python. Prior
to 2.5.0, urllib3 does not control redirects in browsers and
Node.js. urllib3 supports being used in a Pyodide runtime utilizing
the JavaScript Fetch API or falling back on XMLHttpRequest. This
means Python libraries can be used to make HTTP requests from a
browser or Node.js. Additionally, urllib3 provides a mechanism to
control redirects, but the retries and redirect parameters are
ignored with Pyodide; the runtime itself determines redirect
behavior. This issue has been patched in version 2.5.0.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-50182

Upstream patch:
7eb4a2aafe

(From OE-Core rev: 082b865d9814e7e7aca4466551a035199aa8b563)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-04 07:50:16 -07:00
..
apt
apt: Fix build with GCC 15
2025-03-27 11:19:04 +00:00
autoconf
autoconf: 2.72d -> 2.72e
2024-01-21 12:27:12 +00:00
autoconf-archive
autoconf-archive: upgrade 2023.02.20 -> 2024.10.16
2024-10-29 11:19:57 +00:00
automake
automake: remove upstreamed patches
2025-03-03 18:01:29 +00:00
binutils
binutils: Fix for CVE-2025-3198
2025-06-20 09:21:26 -07:00
bison
recipes/*: remove obsolete use of acpaths
2025-02-27 10:55:16 +00:00
bootchart2
bootchart2: Several fixes
2024-11-25 22:23:25 +00:00
btrfs-tools
btrfs-tools: upgrade 6.12 -> 6.13
2025-03-13 11:00:35 +00:00
ccache
ccache: upgrade 4.10.2 -> 4.11
2025-03-17 22:38:32 +00:00
cdrtools
cdrtools-native: fix booting EFI ISO live failed
2025-05-14 08:33:40 -07:00
chrpath
chrpath: upgrade 0.16 -> 0.18
2024-11-27 14:58:48 +00:00
cmake
cmake: Correctly handle cost data of tests with arbitrary chars in name
2025-06-26 06:46:29 -07:00
createrepo-c
createrepo-c: upgrade 1.1.4 -> 1.2.0
2024-11-27 14:58:48 +00:00
debugedit
debugedit: fix build failure when enabling DEBUG_BUILD
2025-02-25 12:17:22 +00:00
dejagnu
dejagnu: Fix LICENSE
2024-09-03 10:21:38 +01:00
desktop-file-utils
desktop-file-utils: upgrade 0.27 -> 0.28
2024-11-18 22:09:02 +00:00
devel-config
recipes: Switch away from S = WORKDIR
2024-05-21 12:08:04 +01:00
diffstat
diffstat: upgrade 1.66 -> 1.67
2024-11-27 14:58:48 +00:00
distcc
recipes: Update WORKDIR references to UNPACKDIR
2024-05-02 15:15:51 +01:00
dmidecode
dmidecode: upgrade 3.5 -> 3.6
2024-05-28 09:38:23 +01:00
dnf
dnf: Set SEQUOIA_CRYPTO_POLICY in wrapped tools
2025-02-18 11:56:04 +00:00
docbook-xml
docbook-xml-dtd4: clean up LICENSE situation
2025-03-19 11:49:45 +00:00
dosfstools
dosfstools: add backported patch for honouring SOURCE_DATE_EPOCH
2024-11-19 11:26:24 +00:00
dpkg
dpkg: upgrade 1.22.10 -> 1.22.11
2024-08-23 09:12:37 +01:00
dwarfsrcfiles
dwarfsrcfiles: Switch to S = UNPACKDIR
2024-05-21 12:08:04 +01:00
e2fsprogs
e2fsprogs: Fix build failure with gcc 15
2025-03-19 12:09:06 +00:00
elfutils
elfutils: backport a fix for libeu objects missing in libelf.a
2024-12-09 15:23:28 +00:00
erofs-utils
erofs-utils: upgrade 1.8.4 -> 1.8.5
2025-02-18 22:53:44 +00:00
expect
expect: Fix build with GCC 15
2025-03-19 12:09:06 +00:00
fastfloat
fastfloat: upgrade 8.0.0 -> 8.0.2
2025-03-17 22:38:32 +00:00
fdisk
gptfdisk: update 1.0.9 -> 1.0.10
2024-04-16 08:07:01 +01:00
file
file: upgrade 5.45 -> 5.46
2025-01-04 12:34:04 +00:00
flex
flex: build occasional build failures in test suite compile
2025-03-27 11:19:04 +00:00
fmt
fmt: Backport patch to fix spdlog ABI issue
2025-03-28 11:19:40 +00:00
gcc
gcc: Upgrade to GCC 14.3
2025-06-20 09:21:27 -07:00
gdb
gdb: Include xz support by default and clean up PACKAGECONFIG
2025-02-18 22:53:45 +00:00
git
buildtools-tarball: Make buildtools respects host CA certificates
2025-05-14 08:33:40 -07:00
gnu-config
gnu-config: update to latest revision
2024-08-28 09:14:26 +01:00
go
go: set status of CVE-2024-3566
2025-06-26 06:46:29 -07:00
help2man
help2man: upgrade 1.49.2 -> 1.49.3
2022-12-22 23:05:50 +00:00
i2c-tools
i2c-tools: upgrade 4.3 -> 4.4
2024-10-29 11:19:57 +00:00
icecc-create-env
recipes: Switch away from S = WORKDIR
2024-05-21 12:08:04 +01:00
icecc-toolchain
meta/meta-selftest: Fix variable assignment whitespace
2025-02-01 13:42:34 +00:00
intltool
meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
2022-02-20 16:45:25 +00:00
jquery
jquery: upgrade 3.7.0 -> 3.7.1
2023-09-26 10:35:27 +01:00
json-c
json-c: upgrade 0.17 -> 0.18
2024-09-30 17:00:50 +01:00
libcomps
libcomps: upgrade 0.1.20 -> 0.1.21
2024-04-16 08:07:02 +01:00
libdnf
libdnf: backport patch to fix segfault
2025-01-03 11:05:03 +00:00
libedit
libedit: upgrade 20240808-3.1 -> 20250104-3.1
2025-01-09 15:26:50 +00:00
libmodulemd
libmodulemd: upgrade 2.14.0 -> 2.15.0
2023-06-16 15:40:10 +01:00
librepo
librepo: upgrade 1.18.1 -> 1.19.0
2024-11-18 22:09:02 +00:00
libtool
meta/meta-selftest: Fix variable assignment whitespace
2025-02-01 13:42:34 +00:00
llvm
llvm: upgrade 19.1.7 -> 20.1.0
2025-03-17 17:09:22 +00:00
log4cplus
log4cplus: upgrade 2.1.1 -> 2.1.2
2024-11-18 22:09:02 +00:00
lua
lua: upgrade 5.4.6 -> 5.4.7
2024-08-23 09:12:37 +01:00
m4
m4: Stick to C17 standard
2025-03-17 17:09:22 +00:00
make
make: Fix signatures for getenv() and getopt()
2025-03-27 11:19:03 +00:00
makedevs
makedevs: Fix matching uid/gid
2024-08-28 09:14:26 +01:00
meson
meson: refresh upstreamed patch
2025-03-25 21:20:41 +00:00
mmc
mmc-utils: upgrade to latest revision
2025-03-17 22:38:32 +00:00
mtd
mtd-utils: Fix GCC version detection
2025-03-27 11:19:03 +00:00
mtools
mtools: upgrade 4.0.47 -> 4.0.48
2025-03-06 11:16:47 +00:00
nasm
nasm: Upgrade 2.16.01 -> 2.16.03
2024-06-04 12:04:52 +01:00
ninja
ninja: upgrade 1.12.0 -> 1.12.1
2024-05-28 09:38:24 +01:00
opkg
insane: Drop oe.qa.add_message usage
2024-08-29 21:58:19 +01:00
opkg-utils
opkg-utils: upgrade 0.6.3 -> 0.7.0
2024-07-16 11:25:29 +01:00
orc
orc: upgrade 0.4.40 -> 0.4.41
2025-03-06 11:16:47 +00:00
patch
recipes/*: remove obsolete use of acpaths
2025-02-27 10:55:16 +00:00
patchelf
patchelf: add 3 fixes to optimize and fix uninative
2023-08-01 09:51:20 +01:00
perl
perl: upgrade 5.40.0 -> 5.40.2
2025-05-19 08:57:20 -07:00
perl-cross
perlcross: 1.6 -> 1.6.2
2025-05-19 08:57:20 -07:00
pkgconf
pkg-config-native,librsvg-native: fix EXTRA_NATIVE_PKGCONFIG_PATH
2025-03-20 11:29:04 +00:00
pkgconfig
pkg-config-native,librsvg-native: fix EXTRA_NATIVE_PKGCONFIG_PATH
2025-03-20 11:29:04 +00:00
pseudo
pseudo: Fix envp bug and add posix_spawn wrapper
2024-10-08 13:27:24 +01:00
python
python3-urllib3: fix CVE-2025-50182
2025-07-04 07:50:16 -07:00
qemu
qemu 8.2.7: ignore CVE-2023-1386
2025-05-14 08:33:40 -07:00
quilt
quilt: fix dependency on ptest-runner
2024-11-14 11:56:53 +00:00
repo
repo: upgrade 2.51 -> 2.52
2025-03-06 11:16:47 +00:00
rpm
rpm: Set SEQUOIA_CRYPTO_POLICY in wrapped tools
2025-02-18 11:56:04 +00:00
rpm-sequoia
rpm-sequoia-crypto-policy: Don't validate gnutls crypto policy
2025-03-06 11:16:47 +00:00
rsync
rsync: upgrade 3.3.0 -> 3.4.1
2025-01-20 13:38:59 +00:00
ruby
ruby: upgrade 3.4.2 -> 3.4.3
2025-05-23 08:42:33 -07:00
run-postinsts
run-postinsts.service: Removed --no-reload to fix reload warning when users execute systemctl in the first boot.
2024-06-03 07:47:04 +01:00
rust
rust-source: Fix remove_gcc_directory
2025-03-29 15:24:34 +00:00
squashfs-tools
squashfs-tools: upgrade 4.5.1 -> 4.6.1
2023-06-16 15:40:11 +01:00
strace
strace: update from 6.11 to 6.12
2024-11-22 16:53:37 +00:00
subversion
subversion: refactor do_configure
2024-12-20 12:47:19 +00:00
swig
swig: upgrade 4.2.1 -> 4.3.0
2024-12-05 17:07:10 +00:00
syslinux
syslinux: improve isohybrid to process extra sector count for ISO 9660 image
2025-05-14 08:33:40 -07:00
systemd-bootchart
systemd-bootchart: Add riscv 32bit support
2024-09-20 14:01:02 +01:00
tcf-agent
tcf-agent: Use SPDX identifier
2025-02-05 12:49:55 +00:00
tcltk
tcl: disable 'zipfs' feature
2025-01-23 11:56:47 +00:00
tcltk8
tcl8: add a patch to address Y2038 issues (tcl 9.x doesn't need it)
2025-01-23 11:56:47 +00:00
unfs3
unfs3: Use SPDX identifier
2025-02-05 12:49:55 +00:00
unifdef
unifdef: Drop md5sum for SRC_URI
2025-03-27 11:19:04 +00:00
vala
vala: update 0.56.17 -> 0.56.18
2025-03-17 17:09:22 +00:00
valgrind
valgrind: disable ptests
2025-02-05 12:49:56 +00:00
xmlto
xmlto: check upstream version tags, not new commits
2024-08-28 09:14:26 +01:00