Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap-next 2025-03-08T00:40:44+00:00 2025-03-08T00:40:44+00:00 Virendra Thakur virendrak@kpit.com 2025-03-04T09:12:08+00:00 urn:sha1:454cc113175e42d803fe09d5a6c495c369b5a68a Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventually denial of service in well orchestrated attacks. Reference: https://nvd.nist.gov/vuln/detail/cve-2024-8508 Signed-off-by: Virendra Thakur <virendrak@kpit.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-04-07T15:36:35+00:00 Beniamin Sandu beniaminsandu@gmail.com 2024-04-05T15:06:46+00:00 urn:sha1:880f80650080a12c1eef94e6205c5157057904e1 Includes security fixes for: CVE-2024-1931 - Loop with Unreachable Exit Condition ('Infinite Loop') Full release notes: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.3 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-02-20T16:46:27+00:00 Wang Mingyu wangmy@fujitsu.com 2024-02-20T08:54:16+00:00 urn:sha1:2adbf07ec1ffa08cb04e47907fa4b385edefed98 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-11-15T20:58:37+00:00 Beniamin Sandu beniaminsandu@gmail.com 2023-11-15T20:45:33+00:00 urn:sha1:24e6bcb3759f6dc331a6716a12124e6cfaa72c0a Full changelog: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.0 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-09-07T15:22:44+00:00 Beniamin Sandu beniaminsandu@gmail.com 2023-09-01T09:04:33+00:00 urn:sha1:f5d31863c9d7d2b96b2576a153bf7f356f8886af Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-06-24T16:01:53+00:00 Beniamin Sandu beniaminsandu@gmail.com 2023-06-23T17:41:12+00:00 urn:sha1:2638d458a57f293c5926ddd5b6b291d14c218c4e Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-06-21T16:15:20+00:00 Martin Jansa Martin.Jansa@gmail.com 2023-06-21T16:09:11+00:00 urn:sha1:be8c765c7c4ed48404da8fd8e813c9f3ab5ad415 There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-05-23T15:48:18+00:00 Khem Raj raj.khem@gmail.com 2023-05-23T04:24:42+00:00 urn:sha1:9a06629463ebe8217a30011f9e94127a324d895c Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-04-05T22:56:47+00:00 Peter Kjellerstedt pkj@axis.com 2023-04-04T23:50:47+00:00 urn:sha1:2e0a581bee7fc15a78f6e19ba1e596930edee414 With the exception of paho-mqtt-cpp, the double protocol= attributes were added to the SRC_URIs when protocol=https was added to all SRC_URIs fetching from github.com in commit b402a3076f (recipes: Update SRC_URI branch and protocols). Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-01-17T09:05:52+00:00 Wang Mingyu wangmy@fujitsu.com 2023-01-17T07:26:15+00:00 urn:sha1:1fc578faa2d7f30c0812e2eb9a6dc924dd1fc41f Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>