<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-oe/recipes-devtools/mercurial, branch hardknott</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=hardknott</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=hardknott'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2020-08-25T18:24:58+00:00</updated>
<entry>
<title>mercurial: Upgrade 5.4 -&gt; 5.5</title>
<updated>2020-08-25T18:24:58+00:00</updated>
<author>
<name>Leon Anavi</name>
<email>leon.anavi@konsulko.com</email>
</author>
<published>2020-08-25T09:54:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=81ae73615831a12c2a047d0ef2f7411b963a0509'/>
<id>urn:sha1:81ae73615831a12c2a047d0ef2f7411b963a0509</id>
<content type='text'>
Upgrade to release 5.5:

- clonebundles can be annotated with the expected memory
  requirements using the REQUIREDRAM option. This allows clients
  to skip bundles created with large zstd windows and fallback
  to larger, but less demanding bundles.
- The phabricator extension now provides more functionality of the
  arcanist CLI like changing the status of a differential.
- Phases processing is much faster, especially for repositories
  with old non-public changesets.
- For the case when connected to a TTY, stdout was fixed to be
  line-buffered on Python 3
- Subversion sources of the convert extension were fixed to work
  on Python 3
- Subversion sources of the convert extension now interpret the
  encoding of URLs like Subversion.
- The empty changeset check of in-memory rebases was fixed to
  match that of normal rebases (and that of the commit command).
- The push command now checks the correct set of outgoing
  changesets for obsolete and unstable changesets. Previously, it
  could happen that the check prevented pushing changesets which
  were already on the server.

More details are available at:
https://www.mercurial-scm.org/wiki/Release5.5

Signed-off-by: Leon Anavi &lt;leon.anavi@konsulko.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial: upgrade 5.2 -&gt; 5.4</title>
<updated>2020-06-11T03:55:07+00:00</updated>
<author>
<name>Zang Ruochen</name>
<email>zangrc.fnst@cn.fujitsu.com</email>
</author>
<published>2020-06-09T01:07:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=7ff5e3093662b80d061bfab6d378307498ef43f5'/>
<id>urn:sha1:7ff5e3093662b80d061bfab6d378307498ef43f5</id>
<content type='text'>
Signed-off-by: Zang Ruochen &lt;zangrc.fnst@cn.fujitsu.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial: Add python scripts into separate python package</title>
<updated>2019-12-21T00:07:50+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2019-12-20T02:51:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=4874aeeda8c2ea240bb4a2025388e285f120d408'/>
<id>urn:sha1:4874aeeda8c2ea240bb4a2025388e285f120d408</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial: Upgrade to 5.2 and switch to py3</title>
<updated>2019-11-28T04:07:10+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2019-11-26T20:53:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=8b21e77502055c8078132cdac57a4736108b3a5a'/>
<id>urn:sha1:8b21e77502055c8078132cdac57a4736108b3a5a</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial: upgrade to 4.6.1</title>
<updated>2018-06-14T16:01:12+00:00</updated>
<author>
<name>Oleksandr Kravchuk</name>
<email>open.source@oleksandr-kravchuk.com</email>
</author>
<published>2018-06-12T18:14:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=a752aefa9e3a033fc0e6374bfd701bc2f05e4de0'/>
<id>urn:sha1:a752aefa9e3a033fc0e6374bfd701bc2f05e4de0</id>
<content type='text'>
Signed-off-by: Oleksandr Kravchuk &lt;dev@sashko.rv.ua&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial: Support building for target</title>
<updated>2017-11-16T00:34:05+00:00</updated>
<author>
<name>Paul Barker</name>
<email>pbarker@toganlabs.com</email>
</author>
<published>2017-11-05T22:07:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=d91f92cf042029f879feb1b9b1e4e84b4905c908'/>
<id>urn:sha1:d91f92cf042029f879feb1b9b1e4e84b4905c908</id>
<content type='text'>
Rather than trying to work out the exact python modules needed, we just add
'python-modules' to the dependencies list. If you can afford to install
mercurial on target then python-modules shouldn't be too much of a burden.

Signed-off-by: Paul Barker &lt;pbarker@toganlabs.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial: Update to v4.4</title>
<updated>2017-11-16T00:34:05+00:00</updated>
<author>
<name>Paul Barker</name>
<email>pbarker@toganlabs.com</email>
</author>
<published>2017-11-05T22:07:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=57492d40b569f0bfbfcf351b363d76f714e41729'/>
<id>urn:sha1:57492d40b569f0bfbfcf351b363d76f714e41729</id>
<content type='text'>
This update addresses the following CVEs:
- CVE-2017-1000116
- CVE-2017-1000115

We can also drop the patch for CVE-2017-9462 as it's incorporated into this
release.

Signed-off-by: Paul Barker &lt;pbarker@toganlabs.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial: CVE-2017-9462</title>
<updated>2017-06-19T17:29:37+00:00</updated>
<author>
<name>Zhixiong Chi</name>
<email>zhixiong.chi@windriver.com</email>
</author>
<published>2017-06-15T06:05:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=a3bd8e6b3d664d050fe7590869d108002973ad7a'/>
<id>urn:sha1:a3bd8e6b3d664d050fe7590869d108002973ad7a</id>
<content type='text'>
Backport the CVE patch from
https://www.mercurial-scm.org/repo/hg/rev/77eaf9539499

"hg serve --stdio" allows remote authenticated users to launch the
Python debugger, and consequently execute arbitrary code, by using
 --debugger as a repository name.

CVE: CVE-2017-9462

Signed-off-by: Zhixiong Chi &lt;zhixiong.chi@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial: upgrade to 4.0.1</title>
<updated>2017-01-10T12:12:56+00:00</updated>
<author>
<name>Oleksandr Kravchuk</name>
<email>oleksandr.kravchuk@pelagicore.com</email>
</author>
<published>2017-01-03T07:13:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=cabf72ebbfbed41db228e978400e63ae8f0cc7b1'/>
<id>urn:sha1:cabf72ebbfbed41db228e978400e63ae8f0cc7b1</id>
<content type='text'>
Signed-off-by: Oleksandr Kravchuk &lt;oleksandr.kravchuk@pelagicore.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>mercurial-native: upgrade to 3.8.4</title>
<updated>2016-08-05T10:16:38+00:00</updated>
<author>
<name>Jackie Huang</name>
<email>jackie.huang@windriver.com</email>
</author>
<published>2016-07-28T05:24:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=6cb4eb3e8631e7309ffa8f14339dcdf579d17dfc'/>
<id>urn:sha1:6cb4eb3e8631e7309ffa8f14339dcdf579d17dfc</id>
<content type='text'>
* Upgrade to the latest release to fix some CVEs:
  - CVE-2016-3068: arbitrary code execution with Git subrepos
  - CVE-2016-3069: arbitrary code execution when converting Git repos
  - CVE-2016-3630: remote code execution in binary delta decoding
  - CVE-2016-3105: arbitrary code execution when converting Git repos

* For other changes please see:
  https://www.mercurial-scm.org/wiki/WhatsNew

* Update SRC_URI with the new download link

Signed-off-by: Jackie Huang &lt;jackie.huang@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
</feed>
