linux/poky.git - Mirror of git.yoctoproject.org/poky

	Commit message (Collapse)	Author	Age	Files	Lines
*	glib-2.0: fix CVE-2020-6750	haiqing	2020-04-17	1	-0/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. (From OE-Core rev: 29ed9fc7341cc3db716115aef1a6910fdb893145) Signed-off-by: Haiqing Bai <Haiqing.Bai@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
*	glib: Whitelist CVE-2019-12450	Adrian Bunk	2019-12-16	1	-0/+3
\| \| \| \| \| \| \| \| \| \|	Fixed in 2.60.4, but CPE data is outdated. (From OE-Core rev: 060e46a73fb08b21c2acc5dddce30168574cd4f1) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
*	glib-2.0: Upgrade 2.60.6 -> 2.60.7	Adrian Bunk	2019-09-19	1	-0/+25
	(From OE-Core rev: 1975c05b60fec0e012d4a23e3785acec9e976951) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>