linux/poky.git/meta/recipes-support/libsoup, branch master

The poky repository master branch is no longer being updated.

2025-11-07T13:31:53+00:00

You can either: a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs b) use the new bitbake-setup You can find information about either approach in our documentation: https://docs.yoctoproject.org/ Note that "poky" the distro setting is still available in meta-yocto as before and we continue to use and maintain that. Long live Poky! Some further information on the background of this change can be found in: https://lists.openembedded.org/g/openembedded-architecture/message/2179 Signed-off-by: Richard Purdie

libsoup: Convert to gnomebase

2025-11-06T15:09:32+00:00

* Dropping CVE_PRODUCT, because it was equal to the default. (From OE-Core rev: 2b7e57466940a2b3a303fca1de67fb3524cf2c78) Signed-off-by: Jörg Sommer Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

meta: set S to be in UNPACKDIR in recipes that explicitly set S

2025-06-20T11:07:26+00:00

(From OE-Core rev: 7321cc17ae5483f17fe9cdffea7b62acd9d9c3a2) Signed-off-by: Alexander Kanavin Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

libsoup-2.4: Drop recipe as obsolete

2025-05-15T09:55:26+00:00

The last user in OE-Core was gst-examples. This has been upgraded and the dependency dropped, all other users can use libsoup3 instead. Therefore remove the obsolete and deprecated version. (From OE-Core rev: 94ebc5b798aed6eea642c5e2a4df24b386520636) Signed-off-by: Richard Purdie

libsoup-2.4: fix CVE-2024-52532

2025-05-12T21:01:55+00:00

CVE-2024-52532: GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. Refer: https://nvd.nist.gov/vuln/detail/CVE-2024-52532 (From OE-Core rev: 4efb2f03cf47382bf79aec333109c78e309c337b) Signed-off-by: Changqing Li Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

libsoup-2.4: fix build failure

2025-05-12T21:01:55+00:00

Backport 2 patches to fix build failures (From OE-Core rev: 31ddbed4155f36ff8cda5fcf7e6c301ae63cd62f) Signed-off-by: Changqing Li Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

libsoup-2.4: fix CVE-2025-32911

2025-05-01T13:22:54+00:00

CVE-2025-32911: A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server. Backport patches to fix it [1] https://nvd.nist.gov/vuln/detail/CVE-2025-32911 [2] https://gitlab.gnome.org/GNOME/libsoup/-/issues/433 (From OE-Core rev: 839d93bbb1ca7a51b659b8cb9def9b354a99518f) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie

libsoup: upgrade 3.6.4 -> 3.6.5

2025-04-03T10:06:19+00:00

(From OE-Core rev: ac518e9c1400ad8d214b816bdab63284a55e3f23) Signed-off-by: Richard Purdie

libsoup: upgrade 3.6.1 -> 3.6.4

2025-02-05T12:49:55+00:00

(From OE-Core rev: c9f4a0ab15b4a8879c9447907e19df6f48efaba7) Signed-off-by: Richard Purdie

libsoup: upgrade 3.6.0 -> 3.6.1

2024-11-27T16:44:48+00:00

Changelog: ============ * Fix `soup_uri_copy()` reading port as a long instead of an int * Fix possible NULL deref in `soup_uri_decode_data_uri()` * Fix possible overflow in `SoupContentSniffer` * Fix assertion in `soup_uri_decode_data_uri()` on URLs with a path starting with `//` * headers: Be more robust against invalid input when parsing params * websocket: Fix possibility of being stuck in a read loop (From OE-Core rev: 565c3cc5dfb832ffd12e8010c6dbbc006a09e85e) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie