Lee Chee Yang d5a1834e4f curl: fix CVE-2020-8231/8284/8285/8286 ...

backport CVE-2020-8284 fixes from upstream, but drop
binary file tests/data/test1465.

upstream fixes for CVE-2020-8231, CVE-2020-8285 and CVE-2020-8286
does not applies cleanly to 7.69.1, fedora have working patch
hence import patch from Fedora.
https://koji.fedoraproject.org/koji/rpminfo?rpmID=24270817

(From OE-Core rev: 16ec5dea53d24cc1449d173912c1056c873fa98d)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2021-01-21 23:08:16 +00:00

..

apr

apr-util: Only specify --with-dbm=gdbm if gdbm support is enabled

2021-01-09 09:17:16 +00:00

argp-standalone

argp-standalone: drop RDEPENDS dev/staticdev packages on main package

2017-10-07 23:20:40 +01:00

aspell

meta: add missing descriptions in some support recipes

2021-01-09 09:17:16 +00:00

atk

meta: add missing descriptions in some support recipes

2021-01-09 09:17:16 +00:00

attr

meta: add missing descriptions in some support recipes

2021-01-09 09:17:16 +00:00

bash-completion

meta: add missing descriptions in some support recipes

2021-01-09 09:17:16 +00:00

bmap-tools

glib-networking/btrfs-tools/dosfstools/parted/bmap-tools/libsoup-2.4: add nativesdk support

2020-12-18 14:20:19 +00:00

boost

boost: drop arm-intrinsics.patch

2021-01-21 23:08:16 +00:00

ca-certificates

ca-certificates: use python 3 for builds

2019-09-01 22:33:07 +01:00

consolekit

distro_features_check: expand with MACHINE_FEATURES and COMBINED_FEATURES, rename

2019-11-21 23:08:19 +00:00

curl

curl: fix CVE-2020-8231/8284/8285/8286

2021-01-21 23:08:16 +00:00

db

db: do not install db_verify if 'verify' is not enabled

2020-06-18 12:25:01 +01:00

debianutils

debianutils: update to 4.9.1

2019-12-28 23:25:42 +00:00

diffoscope

diffoscope: Exclude from musl builds

2020-02-14 13:07:23 +00:00

dos2unix

dos2unix: update to 7.4.1

2019-12-16 23:25:49 +00:00

enchant

enchant2: upgrade 2.2.7 -> 2.2.8

2020-03-02 21:00:53 +00:00

fribidi

fribidi: extend CVE_PRODUCT to include fribidi

2020-08-27 08:25:49 +01:00

gdbm

gdbm: add patch to fix link failure against gcc 10

2020-06-23 11:40:46 +01:00

gmp

gmp: Upgrade to 6.2.0

2020-02-22 23:57:27 +00:00

gnome-desktop-testing

gnome-desktop-testing: upgrade to 2018.1

2018-12-05 12:37:02 +00:00

gnupg

gnupg: upgrade 2.2.19 -> 2.2.20

2020-03-29 12:05:31 +01:00

gnutls

gnutls: CVE-2020-24659

2020-09-17 12:51:24 +01:00

gpgme

gpgme: fix multilib header conflict

2020-09-02 16:04:37 +01:00

icu

icu: make filtered data generation optional, serial and off by default

2020-07-16 22:28:40 +01:00

iso-codes

iso-codes: switch upstream branch master -> main

2020-07-07 23:15:10 +01:00

itstool

itstool: extend to nativesdk

2020-01-19 13:24:38 +00:00

libassuan

libassuan: multilib header for assuan.h

2020-02-15 22:42:13 +00:00

libatomic-ops

libatomic-ops:upgrade 7.6.8 -> 7.6.10

2019-04-12 14:05:37 +01:00

libbsd

libbsd: Remove BSD-4-Clause from main package

2020-11-22 13:27:37 +00:00

libcap

libcap: Upgrade 2.31 -> 2.32

2020-02-25 10:41:22 +00:00

libcap-ng

libcap-ng: add missing Upstream-Status tags

2019-12-09 12:00:43 +00:00

libcheck

libcheck: upgrade 0.13.0 -> 0.14.0

2020-02-14 13:07:23 +00:00

libcroco

libcroco: update to 0.6.13

2019-04-23 23:30:19 +01:00

libdaemon

libdaemon: Explicitly include unisttd.h instead of sys/unistd.h

2015-04-10 18:10:26 +01:00

libevdev

libevdev: fix upstream check

2020-02-28 23:11:28 +00:00

libevent

libevent: disable ptests that require a DNS and an intenet connection

2020-01-16 22:33:09 +00:00

libexif

libexif: fix CVE-2020-0198; CVE-2020-0452

2021-01-09 09:17:17 +00:00

libffi

libffi: add patch to revert clang VFP workaround

2020-12-18 14:20:19 +00:00

libfm

libfm: Add mime and mime-xdg classes

2020-01-19 13:24:39 +00:00

libgcrypt

libgcrypt: Fix determinism issue

2020-02-08 13:20:01 +00:00

libgpg-error

libgpg-error: upgrade 1.36 -> 1.37

2020-02-29 13:04:48 +00:00

libical

libical: fix host contamination in -dev pkg

2020-02-21 17:48:09 +00:00

libjitterentropy

libjitterentropy: Fix man page reproducibility

2019-12-06 14:41:28 +00:00

libksba

gnupg/libksba/npth/pinentry: Add nativesdk to BBCLASSEXTEND

2019-11-10 14:06:10 +00:00

libmpc

libmpc: Remove dead UPSTREAM_CHECK_URI

2019-09-19 10:54:33 +01:00

libnl

libnl: Extend for native/nativesdk

2020-07-16 22:28:40 +01:00

libpcre

libpcre: upgrade 8.43 -> 8.44

2020-02-28 23:11:28 +00:00

libproxy

libproxy: fix CVE-2020-26154

2020-11-24 13:17:58 +00:00

libpsl

libpsl: use python 3 during builds

2019-09-01 22:33:07 +01:00

libsoup

glib-networking/btrfs-tools/dosfstools/parted/bmap-tools/libsoup-2.4: add nativesdk support

2020-12-18 14:20:19 +00:00

libunistring

libunistring: upgrade to 0.9.10

2018-06-27 13:55:21 +01:00

libunwind

libunwind: apply configure over-ride to both big and little endian ARM

2019-09-18 12:09:02 +01:00

liburcu

liburcu: update to 0.11.1

2019-06-04 09:09:42 +01:00

libusb

libusb1: Add udev support

2019-02-02 11:05:59 +00:00

libxslt

libxslt: multilib_header xsltconfig.h

2020-02-15 22:42:13 +00:00

libyaml

recipes: change SRC_URI to use https

2019-12-06 14:41:28 +00:00

lz4

lz4: Use the new branch naming from upstream

2020-12-18 14:20:19 +00:00

lzo

lzo: don't do aclocal/acinclude dance

2017-12-10 22:45:18 +00:00

lzop

lzop: upgrade 1.03 -> 1.04

2019-02-19 16:14:57 +00:00

mpfr

recipes: change SRC_URI to use https

2019-12-06 14:41:28 +00:00

nettle

meta: add missing descriptions in some support recipes

2021-01-09 09:17:16 +00:00

npth

meta: fix some unresponsive homepages and bugtracker links

2020-11-12 13:07:52 +00:00

nss-myhostname

distro_features_check: expand with MACHINE_FEATURES and COMBINED_FEATURES, rename

2019-11-21 23:08:19 +00:00

p11-kit

p11-kit: Add nativesdk variant

2020-03-10 23:20:33 +00:00

pinentry

gnupg/libksba/npth/pinentry: Add nativesdk to BBCLASSEXTEND

2019-11-10 14:06:10 +00:00

popt

popt: fix SRC_URI

2019-06-14 22:48:22 +01:00

ptest-runner

ptest-runner: Backport patch to fix inappropriate ioctl error

2020-11-22 13:27:37 +00:00

re2c

re2c: correct upstream location

2020-05-22 16:23:23 +01:00

rng-tools

rng-tools: upgrade 6.8 -> 6.9

2020-01-03 22:35:48 +00:00

serf

serf: do not install the static library

2020-12-18 14:20:19 +00:00

shared-mime-info

shared-mime-info: fix (sort of) upstream version check

2020-02-03 13:03:31 +00:00

sqlite

sqlite3: add CVE-2015-3717 to whitelist

2020-12-09 23:49:01 +00:00

taglib

recipes: Fix license "names"/versions.

2019-06-06 00:40:08 +01:00

user-creation

xuser-account: remove GROUPADD_PARAM

2016-07-20 10:28:51 +01:00

vim

vim: restore the 'chmod -x' workaround in do_install

2020-06-26 18:26:48 +01:00

vte

vte: upgrade 0.58.2 -> 0.58.3

2019-12-28 23:25:41 +00:00