Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=dunfell-next 2024-03-03T21:38:27+00:00 2024-03-03T21:38:27+00:00 virendra thakur thakur.virendra1810@gmail.com 2024-02-09T06:07:19+00:00 urn:sha1:de497fb40998a1b89f6b23083264bfa4c2a70504 Set CVE_PRODUCT to 'node.js' for nodjs recipe Signed-off-by: virendra thakur <virendrak@kpit.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-07-25T11:29:04+00:00 Khem Raj raj.khem@gmail.com 2023-07-23T16:05:53+00:00 urn:sha1:0aa6a3ddc607cca1bdf29c6ebb38cddcb5114e3e * MJ: remove AUTHORS modification from the original patch from nodejs-16, so that the same patch does apply for both 14 and 12 versions used in dunfell * MJ: gcc-13 isn't used for target builds in dunfell, but can be used on host, so this is useful backport for nodejs-native * MJ: this fixes default nodejs-native-12, nodejs-native-14 with negative D_P might need additional fix on top Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-06-23T10:58:18+00:00 Martin Jansa Martin.Jansa@gmail.com 2023-05-17T06:20:19+00:00 urn:sha1:d25f2f1cacecf60397e3d5fa913b4b771e1ba8a0 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-03-18T20:16:42+00:00 Poonam Jadhav Poonam.Jadhav@kpit.com 2023-03-03T12:32:15+00:00 urn:sha1:068acc4ec714165cab50e46018136e4bcef81815 Add patch file CVE-llhttp.patch to fix CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-35256 of nodejs. Link: https://sources.debian.org/src/nodejs/12.22.12~dfsg-1~deb11u3/debian/patches/cve-llhttp.patch Signed-off-by: Poonam Jadhav <Poonam.Jadhav@kpit.com> Signed-off-by: Omkar Patil <omkarpatil10.93@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-03-18T20:16:42+00:00 Poonam Jadhav Poonam.Jadhav@kpit.com 2023-03-03T12:32:14+00:00 urn:sha1:9291a8873887ce36d4e394dcde7b28a0889b35b3 Add patch to fix CVE-2022-43548 Link: https://sources.debian.org/src/nodejs/12.22.12~dfsg-1~deb11u3/debian/patches/cve-2022-43548.patch Signed-off-by: Poonam Jadhav <Poonam.Jadhav@kpit.com> Signed-off-by: Omkar Patil <omkarpatil10.93@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-03-18T20:16:42+00:00 Poonam Jadhav Poonam.Jadhav@kpit.com 2023-03-03T12:32:13+00:00 urn:sha1:b691797f7768378a8caf36812312848add77377a Add patch to fix CVE-2022-35255 Link: https://sources.debian.org/src/nodejs/12.22.12~dfsg-1~deb11u3/debian/patches/cve-2022-35255.patch Signed-off-by: Poonam Jadhav <Poonam.Jadhav@kpit.com> Signed-off-by: Omkar Patil <omkarpatil10.93@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-03-18T20:16:42+00:00 Poonam Jadhav Poonam.Jadhav@kpit.com 2023-03-03T12:32:12+00:00 urn:sha1:df7fba37446e8af5f043b7d4ba0e2611578a016f Add patch to fix CVE-2022-32212 Link: https://sources.debian.org/src/nodejs/12.22.12~dfsg-1~deb11u3/debian/patches/cve-2022-32212.patch Signed-off-by: Poonam Jadhav <Poonam.Jadhav@kpit.com> Signed-off-by: Omkar Patil <omkarpatil10.93@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-09-11T17:49:52+00:00 Ranjitsinh Rathod ranjitsinh.rathod@kpit.com 2022-08-12T07:42:53+00:00 urn:sha1:a1a40c95ebf3b9c593a5b6ab97f08db9901caf42 As per the below release note, it should be a last release for 12.x stable LTS series. Link: https://github.com/nodejs/node/releases/tag/v12.22.12 Remove CVE-2021-44532 fix as it already available in this release v12.22.12 License-Update: src/gtest additional file in the LICENSE Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com> Signed-off-by: Akash Hadke <akash.hadke@kpit.com>