Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead-next 2023-11-06T16:47:41+00:00 2023-11-06T16:47:41+00:00 Khem Raj raj.khem@gmail.com 2023-11-04T20:28:55+00:00 urn:sha1:d6427c99cc423c2d224973351652e7c8623b51c6 Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-08-27T20:50:00+00:00 Khem Raj raj.khem@gmail.com 2023-08-27T20:47:08+00:00 urn:sha1:d81f23fc234c346e47c20879bb916e585c5670d8 For x86/x32 it was overwriting SWIG_FEATURES, its better to append it like for other arches, in addition it brings essential options to remove buildpaths from .so files. Use OPENSSL_NO_FILENAMES define instead of overrding OPENSSL_FILE for achieving reproducibility. Takes care of line numbers too. Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-08-07T16:01:00+00:00 Khem Raj raj.khem@gmail.com 2023-07-28T18:07:19+00:00 urn:sha1:5adde6b9b8fd9cc41606f33501731fa0eac8dab3 They may not be appropriate for target due to cross compiling Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-07-25T19:46:19+00:00 Trevor Gamblin tgamblin@baylibre.com 2023-07-25T19:09:39+00:00 urn:sha1:fe48529f1c763ffaea6835837da41421c9a18ee1 Remove the CVE-2020-25657 patch, as it is fixed in 0.39.0: [tgamblin@megalith m2crypto]$ git log --oneline --grep="CVE-2020-25657" 84c5395 Mitigate the Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657) [tgamblin@megalith m2crypto]$ git tag --contains 84c53958def0f510e92119fca14d74f94215827a 0.39.0 Changelog (https://gitlab.com/m2crypto/m2crypto/-/blob/master/CHANGES?ref_type=heads): 0.39.0 - 2023-01-31 ------------------- - SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE COMPLETELY REMOVED IN THE NEXT RELEASE. - Remove dependency on parameterized and use unittest.subTest instead. - Upgrade embedded six.py module to 1.16.0 (really tiny inconsequential changes). - Make tests working on MacOS again (test_bio_membuf: Use fork) - Use OpenSSL_version_num() instead of unrealiable parsing of .h file. - Mitigate the Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657) - Add functionality to extract EC key from public key + Update tests - Worked around compatibility issues with OpenSSL 3.* - Support for Twisted has been deprecated (they have their own SSL support anyway). - Generate TAP while testing. - Stop using GitHub for testing. - Accept a small deviation from time in the testsuite (for systems with non-standard HZ kernel parameter). - Use the default BIO.__del__ rather tha overriding in BIO.File (avoid a memleak). - Resolve "X509_Name.as_der() method from X509.py -> class X509_Name caused segmentation fault" Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>