linux/poky.git/meta/recipes-extended/wget, branch scarthgap

wget: fix CVE-2024-10524

2025-01-24T15:59:38+00:00

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-10524 Upstream-patch: https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778 (From OE-Core rev: 425c3f55bd316a563597ff6ff95f8104848e2f10) Signed-off-by: Divya Chellam Signed-off-by: Steve Sakoman

wget: Fix for CVE-2024-38428

2024-07-03T13:28:34+00:00

Upstream-Status: Backport [https://git.savannah.gnu.org/cgit/wget.git/commit/?id=ed0c7c7e0e8f7298352646b2fd6e06a11e242ace] (From OE-Core rev: 3c6e147f57e44d473fbd5fe5a11746150e561937) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

wget: upgrade 1.21.3 -> 1.21.4

2023-06-16T14:40:11+00:00

License-Update: copyright years (From OE-Core rev: 67ec2d5bab891cb92af9ca32304a4927daf51ed0) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

meta: depend on autoconf-archive-native, not autoconf-archive

2023-05-22T09:53:48+00:00

autoconf-archive is a collection of m4 autoconf macros needed at build-time, and autoconf-archive-native is a suitable provider as there is nothing in the recipe that needs to be cross-compiled. Also if we use DEPENDS=autoconf-archive then the recipe's -dev package ends up RDEPENDing on autoconf-archive, which isn't correct. Universally change any DEPENDS on autoconf-archive to the -native form, and add any missing dependencies that were implicit before. (From OE-Core rev: 571132415ea7fe2d91c62948f2b6aa553eafa83d) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

wget: upgrade 1.21.2 -> 1.21.3

2022-03-02T18:43:24+00:00

Changelog: ========= ** Fix computation of total bytes downloaded during FTP trasnfers (#61277) ** Add option to select TLS 1.3 on the command line ** Fix HSTS build issues on some 64-bit big-endian systems ** Hide password during status report in --no-verbose ** Remove a sprurious print statement that showed up even during --quiet ** Some more cleanups and bug-fixes (From OE-Core rev: 6223406cdeee436feba5d247d7933b6ae22c985d) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

wget: update 1.21.1 -> 1.21.2

2021-10-14T10:48:46+00:00

(From OE-Core rev: 3c57a4b0d3d2886c2e4f96d4f24a7b86bf04cfd7) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

wget: upgrade 1.20.3 -> 1.21.1

2021-01-20T22:46:17+00:00

(From OE-Core rev: 589bf1c8de9273e8c4bbc6a4468fb699d4deb176) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

wget: improve reproducible build

2020-05-09T17:57:21+00:00

Modify DEBUG_PREFIX_MAP as used by sed to handle whitespace correctly. This modifies an existing patch. (From OE-Core rev: bf746c2dea3ade181e91ef12d41dfe4286949e1d) Signed-off-by: Joe Slater Signed-off-by: Richard Purdie