dunfell: nss: Add missing CVE Product #641
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Mathieu Dubois-Briand <[email protected]>
These CVEs only affect libnssdbm, compiled when --enable-legacy-db is used. https://bugzilla.mozilla.org/show_bug.cgi?id=1360782#c6 https://bugzilla.mozilla.org/show_bug.cgi?id=1360778#c8 https://bugzilla.mozilla.org/show_bug.cgi?id=1360900#c6 https://bugzilla.mozilla.org/show_bug.cgi?id=1360779#c9 Signed-off-by: Mathieu Dubois-Briand <[email protected]>
Signed-off-by: Mathieu Dubois-Briand <[email protected]>
|
The missing CVE product had several CVE hidden:
|
quaresmajose
pushed a commit
to quaresmajose/meta-openembedded
that referenced
this pull request
Dec 19, 2022
Changelog:
=========
Update .github/workflows/ci.yml template, openembedded#637, openembedded#640
Change note in skeleton to emphasize it can be removed/renamed, openembedded#641
Signed-off-by: Xu Huan <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
|
pull in now for test then I will forward patches to list |
kraj
pushed a commit
to YoeDistro/meta-openembedded
that referenced
this pull request
Dec 19, 2023
Use PACKAGE_BEFORE_PN which is designed to introduce packages before the
final greedy ${PN}.
Changes 1.24.0:
Brad House (28):
Nameserver parsing: replace another hand-written parser (openembedded#643)
clang-format
SonarCloud: silence bogus reported error
ares_init_options() with invalid options values should unset the option
Enable system extensions
try to move AC_USE_SYSTEM_EXTENSIONS
ares__round_up_pow2() work around bogus warning
silence openwatcom warning due to qcache_max_ttl being unsigned
Support ipv6 link-local servers and %iface syntax (openembedded#646)
Windows UBSAN tests (openembedded#649)
increment failures on timeout (openembedded#651)
SonarCloud: make const
enhance timeout test case
enhance timeout test case to make sure it will re-use a previously downed server
Rewrite sortlist hand parser for memory safety and bugs (openembedded#653)
Clean up some Windows-only warnings (openembedded#654)
clang-format and fix one warning
remove redundant cast
use IF_NAMESIZE instead of IFNAMSIZ to avoid warning
Use external GoogleTest instead of bundling it (openembedded#655)
remove dead code: bitncmp
remove dead code: ares_iphlpapi.h
Coverity: fix allocation size as reported in new code
tag some functions as deprecated in docs
reference alternative to ares_getsock() in docs
1.24.0 release prep (openembedded#657)
rand: allow fallback from OS (openembedded#661)
ares_cancel() could trigger callback with wrong response code (openembedded#663)
Changes 1.23.0:
Brad House (21):
Query Cache support (openembedded#625)
ares_set_servers_*() should allow an empty server list
Fix Windows UWP (Store) building and add to CI/CD (openembedded#627)
clang-format
cleanup some Windows warnings in test
fix additional windows test warnings
CMake: CXXFLAGS environment wasn't being read because C++ compiler was enabled after settings warnings.
now that warnings are enabled on test cases, clear a bunch of warnings
fix test case regression due to missing parens
SonarCloud: fix minor codesmells
more precise timeout calculation (openembedded#633)
environment is meant as an override for sysconfig
Fix MacOS version test
Basic Thread Safety (openembedded#636)
fix ares_threadsafety() prototype
ares_init_options with ARES_OPT_UDP_PORT wrong byte order
fix doc typo
remove a simply
clang-format
add missing manpage to distribution list
1.23.0 release prep (openembedded#641)
Christian Clauss (2):
INSTALL.md: Fix typo (openembedded#630)
Fix typos discovered by codespell (openembedded#634)
Daniel Stenberg (1):
CI: codespell
Ignat (1):
Support attempts and timeout options from resolv.conf (openembedded#632)
petrvh (1):
ares_getaddrinfo(): do not use search domains if ARES_FLAG_NOSEARCH is set (openembedded#638)
Signed-off-by: Alex Kiernan <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
halstead
pushed a commit
that referenced
this pull request
Dec 20, 2023
Use PACKAGE_BEFORE_PN which is designed to introduce packages before the
final greedy ${PN}.
Changes 1.24.0:
Brad House (28):
Nameserver parsing: replace another hand-written parser (#643)
clang-format
SonarCloud: silence bogus reported error
ares_init_options() with invalid options values should unset the option
Enable system extensions
try to move AC_USE_SYSTEM_EXTENSIONS
ares__round_up_pow2() work around bogus warning
silence openwatcom warning due to qcache_max_ttl being unsigned
Support ipv6 link-local servers and %iface syntax (#646)
Windows UBSAN tests (#649)
increment failures on timeout (#651)
SonarCloud: make const
enhance timeout test case
enhance timeout test case to make sure it will re-use a previously downed server
Rewrite sortlist hand parser for memory safety and bugs (#653)
Clean up some Windows-only warnings (#654)
clang-format and fix one warning
remove redundant cast
use IF_NAMESIZE instead of IFNAMSIZ to avoid warning
Use external GoogleTest instead of bundling it (#655)
remove dead code: bitncmp
remove dead code: ares_iphlpapi.h
Coverity: fix allocation size as reported in new code
tag some functions as deprecated in docs
reference alternative to ares_getsock() in docs
1.24.0 release prep (#657)
rand: allow fallback from OS (#661)
ares_cancel() could trigger callback with wrong response code (#663)
Changes 1.23.0:
Brad House (21):
Query Cache support (#625)
ares_set_servers_*() should allow an empty server list
Fix Windows UWP (Store) building and add to CI/CD (#627)
clang-format
cleanup some Windows warnings in test
fix additional windows test warnings
CMake: CXXFLAGS environment wasn't being read because C++ compiler was enabled after settings warnings.
now that warnings are enabled on test cases, clear a bunch of warnings
fix test case regression due to missing parens
SonarCloud: fix minor codesmells
more precise timeout calculation (#633)
environment is meant as an override for sysconfig
Fix MacOS version test
Basic Thread Safety (#636)
fix ares_threadsafety() prototype
ares_init_options with ARES_OPT_UDP_PORT wrong byte order
fix doc typo
remove a simply
clang-format
add missing manpage to distribution list
1.23.0 release prep (#641)
Christian Clauss (2):
INSTALL.md: Fix typo (#630)
Fix typos discovered by codespell (#634)
Daniel Stenberg (1):
CI: codespell
Ignat (1):
Support attempts and timeout options from resolv.conf (#632)
petrvh (1):
ares_getaddrinfo(): do not use search domains if ARES_FLAG_NOSEARCH is set (#638)
Signed-off-by: Alex Kiernan <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.