MIRRORS/poky
1
0
Fork 0
mirror of git://git.yoctoproject.org/poky.git synced 2025-08-21 16:31:39 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
yocto-5.0.11
poky/meta/recipes-devtools
History
Yogita Urade 23e57638ef python3-urllib3: fix CVE-2025-50181 
urllib3 is a user-friendly HTTP client library for Python. Prior to
2.5.0, it is possible to disable redirects for all requests by
instantiating a PoolManager and specifying retries in a way that
disable redirects. By default, requests and botocore users are not
affected. An application attempting to mitigate SSRF or open redirect
vulnerabilities by disabling redirects at the PoolManager level will
remain vulnerable. This issue has been patched in version 2.5.0.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-50181

Upstream patch:
f05b132912

(From OE-Core rev: cf10eafb333daf8acfd3b8bfcb42c1fe6c26a8a5)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
..
apt Revert "apt: runtime error: filename too long (tmpdir length)" 2024-07-23 06:05:47 -07:00
autoconf autoconf: 2.72d -> 2.72e 2024-01-21 12:27:12 +00:00
autoconf-archive
automake automake: mark new_rt_path_for_test-driver.patch as Inappropriate 2024-08-01 06:08:09 -07:00
binutils binutils: Fix CVE-2025-5244 2025-06-11 08:17:34 -07:00
bison autoconf: Upgrade to 2.72c 2023-07-30 07:54:44 +01:00
bootchart2 recipes: Drop remaining PR values from recipes 2023-09-22 07:45:17 +01:00
btrfs-tools btrfs-tools: upgrade 6.5.3 -> 6.7.1 2024-03-07 17:25:02 +00:00
ccache ccache: upgrade 4.9 -> 4.9.1 2024-03-01 09:28:51 +00:00
cdrtools cdrtools-native: fix build with gcc-14 2024-06-20 06:29:44 -07:00
chrpath
cmake cmake: Correctly handle cost data of tests with arbitrary chars in name 2025-06-25 08:35:10 -07:00
createrepo-c createrepo-c: upgrade 1.0.3 -> 1.0.4 2024-03-01 09:28:51 +00:00
debugedit debugedit: Use musl-legacy-error 2023-09-26 10:35:28 +01:00
dejagnu dejagnu: Fix LICENSE 2024-09-19 05:11:35 -07:00
desktop-file-utils pulseaudio, desktop-file-utils: correct freedesktop.org -> www.freedesktop.org SRC_URI 2024-10-02 06:15:15 -07:00
devel-config recipes: Drop remaining PR values from recipes 2023-09-22 07:45:17 +01:00
diffstat diffstat: upgrade 1.65 -> 1.66 2024-02-03 22:08:26 +00:00
distcc
dmidecode
dnf dnf: drop python3-iniparse from DEPENDS and RDEPENDS 2024-12-13 05:21:54 -08:00
docbook-xml
dosfstools
dpkg dpkg: mark patches adding custom non-debian architectures as inappropriate for upstream 2024-08-01 06:08:09 -07:00
dwarfsrcfiles
e2fsprogs e2fsprogs: removed 'sed -u' option 2024-11-09 05:53:57 -08:00
elfutils elfutils: Fix CVE-2025-1371 2025-05-08 13:37:29 -07:00
erofs-utils erofs-utils: upgrade 1.6 -> 1.7.1 2023-11-30 08:43:04 +00:00
expect expect-native: fix do_compile failure with gcc-14 2024-09-03 05:39:12 -07:00
fdisk gptfdisk: Make the version consistent 2024-01-10 17:01:28 +00:00
file file: enable additional internal compressor support 2024-02-08 10:59:06 +00:00
flex bash/flex: Ensure BUILD_FLAGS doesn't leak onto target 2024-03-19 15:25:12 +00:00
gcc gcc: Upgrade to GCC 13.4 2025-06-20 08:38:12 -07:00
gdb gdb: Upgrade 14.1 -> 14.2 2024-03-05 12:24:49 +00:00
git buildtools-tarball: Make buildtools respects host CA certificates 2025-05-02 08:20:12 -07:00
gnu-config gnu-config: Update to latest version 2024-02-06 10:32:19 +00:00
go go: fix CVE-2025-4673 2025-07-07 07:42:58 -07:00
help2man
i2c-tools
icecc-create-env recipes: Drop remaining PR values from recipes 2023-09-22 07:45:17 +01:00
icecc-toolchain
intltool
jquery jquery: upgrade 3.7.0 -> 3.7.1 2023-09-26 10:35:27 +01:00
json-c json-c: fix icecc compilation 2023-12-02 17:18:57 +00:00
libcomps libcomps: upgrade 0.1.19 -> 0.1.20 2023-10-19 13:38:57 +01:00
libdnf libdnf: upgrade 0.73.1 -> 0.73.2 2024-09-09 06:08:10 -07:00
libedit libedit: Make docs generation deterministic 2024-09-19 05:11:35 -07:00
libmodulemd
librepo librepo: update 1.16.0 -> 1.17.0 2024-03-07 17:25:02 +00:00
libtool nativesdk-libtool: sanitize the script, remove buildpaths 2025-03-26 08:48:51 -07:00
llvm llvm: reduce size of -dbg package 2024-11-26 06:11:30 -08:00
log4cplus log4cplus: upgrade 2.1.0 -> 2.1.1 2023-11-30 08:43:03 +00:00
lua
m4
make
makedevs makedevs: Fix matching uid/gid 2024-10-18 06:04:41 -07:00
meson meson: don't use deprecated pkgconfig variable 2024-07-17 05:36:14 -07:00
mmc mmc-utils: fix URL 2024-07-26 07:43:46 -07:00
mtd mtd-utils: upgrade 2.1.5 -> 2.1.6 2023-09-26 10:35:27 +01:00
mtools
nasm nasm: Upgrade 2.16.01 -> 2.16.03 2024-08-10 06:34:25 -07:00
ninja ninja: fix build with python 3.13 2024-12-06 05:50:25 -08:00
opkg opkg-arch-config: update recipe HOMEPAGE 2024-02-09 13:55:06 +00:00
opkg-utils opkg-utils: Backport fix to drop --numeric-owner parameter 2024-01-12 11:54:05 +00:00
orc orc: upgrade 0.4.39 -> 0.4.40 2024-11-09 05:53:57 -08:00
patch
patchelf patchelf: add 3 fixes to optimize and fix uninative 2023-08-01 09:51:20 +01:00
perl perl: upgrade 5.38.2 -> 5.38.4 2025-05-02 08:20:12 -07:00
perl-cross perlcross: 1.6 -> 1.6.2 2025-05-02 08:20:11 -07:00
pkgconf pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH 2025-02-12 06:25:37 -08:00
pkgconfig pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH 2025-02-12 06:25:37 -08:00
pseudo pseudo: Fix envp bug and add posix_spawn wrapper 2024-11-18 06:59:35 -08:00
python python3-urllib3: fix CVE-2025-50181 2025-07-11 08:11:53 -07:00
qemu qemu 8.2.7: ignore CVE-2023-1386 2025-04-01 09:08:42 -07:00
quilt
repo repo: upgrade 2.41 -> 2.42 2024-03-07 17:25:03 +00:00
rpm rpm: fix expansion of %_libdir in macros 2024-10-02 06:15:15 -07:00
rsync rsync: fix CVE-2024-12747 2025-01-25 06:20:37 -08:00
ruby ruby: fix CVE-2025-27221 2025-06-02 07:12:34 -07:00
run-postinsts run-postinsts.service: Removed --no-reload to fix reload warning when users execute systemctl in the first boot. 2024-06-14 05:19:22 -07:00
rust rust-cross-canadian: Set CVE_STATUS ignore for CVE-2024-43402 2025-04-07 06:34:44 -07:00
squashfs-tools
strace strace: download release tarballs from GitHub 2024-11-26 06:11:30 -08:00
subversion subversion: ignore CVE-2024-45720 2025-02-21 06:25:05 -08:00
swig swig: upgrade 4.2.0 -> 4.2.1 2024-03-01 09:28:52 +00:00
syslinux syslinux: Disable error on implicit-function-declaration 2024-02-05 14:06:10 +00:00
systemd-bootchart systemd-bootchart: upgrade from 234 to 235 2024-01-07 12:24:57 +00:00
tcf-agent tcf-agent: correct the SRC_URI 2025-07-07 07:42:58 -07:00
tcltk tcl: skip io-13.6 test case 2024-11-26 06:11:30 -08:00
unfs3
unifdef
vala vala: fix for gtk4 prior to 4.14 2024-03-18 12:21:45 +00:00
valgrind valgrind: Backport fixes from 3.22 branch 2024-03-30 22:22:19 +00:00
xmlto recipes/classes/scripts: Drop SRCPV usage in OE-Core 2023-08-24 16:50:24 +01:00