linux/poky.git/meta/recipes-support/gnutls, branch pyro

libtasn1: CVE-2017-10790

2017-09-11T21:15:58+00:00

The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack. References: https://nvd.nist.gov/vuln/detail/CVE-2017-10790 http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commit; h=d8d805e1f2e6799bb2dff4871a8598dc83088a39 (From OE-Core rev: 6176151625c971de031e14c97601ffd75a29772f) (From OE-Core rev: 649f78102222ec156d490968c13d3222379a1956) Signed-off-by: Yue Tao Signed-off-by: Wenzong Fan Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

gnutls: update to 3.5.9

2017-03-01T23:27:08+00:00

Drop 0001-Do-not-add-cli-args.h-to-cli-args.stamp-Makefile-tar.patch, it's merged upstream. Rebase 0001-configure.ac-fix-sed-command.patch. (From OE-Core rev: bed7c85e9ed77ae961c4588d4f7eca6b20d2f1e8) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libtasn1: Upgrade 4.9 -> 4.10

2017-02-05T09:22:16+00:00

Removed the following Backported patches: 1. 0001-configure-don-t-add-Werror-to-build-flags.patch 2. 0002-ASN.y-corrected-compiler-warning.patch 3. 0003-parser_aux-corrected-potential-null-pointer-derefere.patch 4. 0004-tools-eliminated-compiler-warnings.patch fixed the following build error with musl ... | from ../../libtasn1-4.10/gl/getopt.c:28: | ./stdint.h:89:5: error: #if with no expression | #if | ^ (From OE-Core rev: 70138279e4f4da74cd63402d7201c74ab2528fa8) Signed-off-by: Maxin B. John Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libtasn1: depends on yacc

2017-01-31T15:34:57+00:00

This fixes a potential pollution by the build host and build error when yacc isn't installed on the build host: | ../../libtasn1-4.9/build-aux/ylwrap: line 175: yacc: command not found | Makefile:1116: recipe for target 'ASN1.c' failed | make[3]: *** [ASN1.c] Error 127 (From OE-Core rev: 1135024502bb120c331e065f4c441d6a3efb6d4f) Signed-off-by: Patrick Ohly Signed-off-by: Richard Purdie

gnutls: avoid accidentally using libseccomp

2017-01-31T14:43:01+00:00

Specify whether to use libseccomp or not. Do not just let configure check for it. (From OE-Core rev: 62cc91e8831c72e9beceff13ad68dd69298135b5) Signed-off-by: Joe Slater Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

gnutls: account for ARM_EABI

2017-01-31T14:43:01+00:00

Do not reference unavailable system calls when building for ARM_EABI. (From OE-Core rev: 67f0094af624866f02e7fb0173c335a7e8942921) Signed-off-by: Joe Slater Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

gnutls: Do not use libunistring prefix

2016-12-22T08:50:16+00:00

when using clang, configure it poking at build host if we do not use it then it falls back to sysroot which is what we need here. (From OE-Core rev: ee0b0da237c1661f43e27e26e0ab24b7d8ed174f) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

gnutls: update to 3.5.7

2016-12-17T09:57:04+00:00

Add a 0001-Do-not-add-cli-args.h-to-cli-args.stamp-Makefile-tar.patch to fix a compile issue (incorrect creation of an empty header). Add a libunistring dependency as gnutls has gained it. (From OE-Core rev: b2ec343ad770c26f39f3a6d335e4bb3ccbf41aec) (From OE-Core rev: 84c6a3bcf44950049bba255075177a0004058a44) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

meta: remove True option to getVar calls

2016-12-16T10:23:23+00:00

getVar() now defaults to expanding by default, thus remove the True option from getVar() calls with a regex search and replace. Search made with the following regex: getVar ?\(( ?[^,()]*), True\) (From OE-Core rev: 7c552996597faaee2fbee185b250c0ee30ea3b5f) Signed-off-by: Joshua Lock Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

gnutls: update to 3.5.6

2016-11-30T15:48:09+00:00

(From OE-Core rev: 27f306a752d15ec62d2821d0146be4ffa10b7013) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie