linux/poky.git/meta/recipes-support, branch hardknott

vim: Update to 8.2.4524 for further CVE fixes

2022-03-22T22:18:51+00:00

Includes CVE-2022-0696, CVE-2022-0714, CVE-2022-0729. (From OE-Core rev: cbbe79e55169ebd83bd7c6d66acab6287367408c) Signed-off-by: Richard Purdie (cherry picked from commit 0d29988958e48534a0076307bb2393a3c1309e03) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libgcrypt: Upgrade 1.9.3 -> 1.9.4

2022-03-10T16:39:45+00:00

Includes a fix for CVE-2021-40528. (From OE-Core rev: 24664297abd3844902fa40c21e4e975d89f40383) (From OE-Core rev: 11b20e30251f11d5a35be548be51c937565260f8) Signed-off-by: Richard Purdie Signed-off-by: Lee Chee Yang Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: Upgrade 8.2.4314 -> 8.2.4424

2022-03-02T00:22:13+00:00

License file had some grammar fixes. Includes CVE-2022-0554. (From OE-Core rev: 6a262ad3afb672f1976633118ecc390bf4de1ae1) Signed-off-by: Richard Purdie (cherry picked from commit a8d0a4026359c2c8a445dba9456f8a05470293c1) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: Upgrade 4269 -> 4134

2022-03-02T00:22:13+00:00

License text underwent changes on how to submit Uganda donations, switch from http to https urls and an update date change but the license itself is unchanged. Also, add an entry for the top level license file. This is also the vim license so LICENSE is unchanged but we should monitor it too. (From OE-Core rev: 140247e499b85ef2d5c48f9723ed2e2ec9108fb1) Signed-off-by: Richard Purdie (cherry picked from commit d195005e415b0b2d7c8b0b65c0aef888d4d6fc8e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: upgrade to patch 4269

2022-02-20T15:32:27+00:00

Upgrade to the latest patch release to fix the following CVEs: - CVE-2022-0261 - CVE-2022-0318 - CVE-2022-0319 (From OE-Core rev: e6fe342dd578ca37beeb9dfc991b67dc72c60d06) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 96442e681c3acd82b09e3becd78e902709945f1f) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: update to include latest CVE fixes

2022-02-20T15:32:27+00:00

Update the version to 4.2.4118, which incorporates the following CVE fixes: - CVE-2021-4187 - CVE-2022-0128 - CVE-2022-0156 - CVE-2022-0158 Also remove the explicit whitelisting of CVE-2021-3968 as this is now handled with an accurate CPE specifying the fixed version. (From OE-Core rev: 1ef8e3ec21b32d6d3654319561b24b8b1ce63243) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 764519ad0da6b881918667ca272fcc273b56168a) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libusb1: correct SRC_URI

2022-02-10T13:25:48+00:00

(From OE-Core rev: da945043aef07a77be8d6663d419b5c690997688) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit d4c37ca1f1e97d53045521e9894dc9ed5b1c22a1) Signed-off-by: Anuj Mittal (cherry picked from commit 0fccab0724769a862e31e635ffa1db3ba2f37312) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

curl: Backport CVE fixes

2022-01-25T12:07:01+00:00

Backport fixes for CVE-2021-22922, CVE-2021-22923, CVE-2021-22945, CVE-2021-22946, and CVE-2021-22947. * https://curl.se/docs/CVE-2021-22922.html * https://curl.se/docs/CVE-2021-22923.html * https://curl.se/docs/CVE-2021-22945.html * https://curl.se/docs/CVE-2021-22946.html * https://curl.se/docs/CVE-2021-22947.html 22922 and 22923 were fixed by upstream by simply removing metalink support in newer versions. These are mitigated in older versions by disabling metalink support, which was already done by the recipe, so whitelist these CVEs. 22945, 22946, and 22947 are backported with only trivial patch fuzz modifications. (From OE-Core rev: 705718cfe243e05e0975bad3b822666363ef55df) Signed-off-by: Robert Joslyn Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

vim: upgrade to 8.2 patch 3752

2022-01-07T23:21:34+00:00

There's a fairly constant flow of CVEs being fixed in Vim, which are getting increasing non-trivial to backport. Instead of trying to backport (and potentially introduce more bugs), or just ignoring them entirely, upgrade vim to the latest patch. (From OE-Core rev: a264cf6b5a16343a66d9e88115ec9f30e832b0c4) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 78a4796de27d710f97c336d288d797557a58694e) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libpcre/libpcre2: correct SRC_URI

2021-12-15T07:40:30+00:00

http://ftp.pcre.org is down, take sources according to links on http://www.pcre.org (From OE-Core rev: f6791df317e66b2d3fa88d3a038d888d4512305a) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 81ba0ba3e8d9c08b8dc69c24fb1d91446739229b) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie