Skip to content

libwebsockets: upgrade 3.2.0 -> 3.2.2#180

Closed
texierp wants to merge 1 commit intoopenembedded:masterfrom
texierp:bump/libwebsockets
Closed

libwebsockets: upgrade 3.2.0 -> 3.2.2#180
texierp wants to merge 1 commit intoopenembedded:masterfrom
texierp:bump/libwebsockets

Conversation

@texierp
Copy link
Copy Markdown
Contributor

@texierp texierp commented Feb 3, 2020

Signed-off-by: Pierre-Jean Texier [email protected]

Signed-off-by: Pierre-Jean Texier <[email protected]>
@texierp
Copy link
Copy Markdown
Contributor Author

texierp commented Feb 6, 2020

merged in 80514e1

@texierp texierp closed this Feb 6, 2020
@texierp texierp deleted the bump/libwebsockets branch March 11, 2020 20:10
kraj pushed a commit to YoeDistro/meta-openembedded that referenced this pull request Jan 4, 2022
Changelog:
=========
  Features
-------------
 - * Adds the tests to the sdist. Fixed by openembedded#150

 openembedded#141 <hamcrest/PyHamcrest#141>
 - * Update the CI to test Python 3.10

 openembedded#160 <hamcrest/PyHamcrest#160>
 - * Add pretty string representation for matchers objects

 openembedded#170 <hamcrest/PyHamcrest#170>

 Bugfixes
------------
 - * Test coverage is now submitted to codecov.io.

 Fixed by openembedded#150

 openembedded#135 <hamcrest/PyHamcrest#135>
 - Change to the ``has_entry()`` matcher - if exactly one key matches,
   but the value does not, report only the mismatching value.

 Fixed by openembedded#157

 openembedded#156 <hamcrest/PyHamcrest#156>
 - * Fix is_() type annotations

 openembedded#180 <hamcrest/PyHamcrest#180>

 Misc
-------------
 - openembedded#150 <hamcrest/PyHamcrest#150>
   openembedded#159 <hamcrest/PyHamcrest#159>
   openembedded#162 <hamcrest/PyHamcrest#162>
   openembedded#163 <hamcrest/PyHamcrest#163>
   openembedded#166 <hamcrest/PyHamcrest#166>
   openembedded#175 <hamcrest/PyHamcrest#175>

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
kraj pushed a commit to YoeDistro/meta-openembedded that referenced this pull request Jan 4, 2022
Changelog:
=========
  Features
-------------
 - * Adds the tests to the sdist. Fixed by openembedded#150

 openembedded#141 <hamcrest/PyHamcrest#141>
 - * Update the CI to test Python 3.10

 openembedded#160 <hamcrest/PyHamcrest#160>
 - * Add pretty string representation for matchers objects

 openembedded#170 <hamcrest/PyHamcrest#170>

 Bugfixes
------------
 - * Test coverage is now submitted to codecov.io.

 Fixed by openembedded#150

 openembedded#135 <hamcrest/PyHamcrest#135>
 - Change to the ``has_entry()`` matcher - if exactly one key matches,
   but the value does not, report only the mismatching value.

 Fixed by openembedded#157

 openembedded#156 <hamcrest/PyHamcrest#156>
 - * Fix is_() type annotations

 openembedded#180 <hamcrest/PyHamcrest#180>

 Misc
-------------
 - openembedded#150 <hamcrest/PyHamcrest#150>
   openembedded#159 <hamcrest/PyHamcrest#159>
   openembedded#162 <hamcrest/PyHamcrest#162>
   openembedded#163 <hamcrest/PyHamcrest#163>
   openembedded#166 <hamcrest/PyHamcrest#166>
   openembedded#175 <hamcrest/PyHamcrest#175>

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
kraj pushed a commit to YoeDistro/meta-openembedded that referenced this pull request Jan 4, 2022
Changelog:
=========
  Features
-------------
 - * Adds the tests to the sdist. Fixed by openembedded#150

 openembedded#141 <hamcrest/PyHamcrest#141>
 - * Update the CI to test Python 3.10

 openembedded#160 <hamcrest/PyHamcrest#160>
 - * Add pretty string representation for matchers objects

 openembedded#170 <hamcrest/PyHamcrest#170>

 Bugfixes
------------
 - * Test coverage is now submitted to codecov.io.

 Fixed by openembedded#150

 openembedded#135 <hamcrest/PyHamcrest#135>
 - Change to the ``has_entry()`` matcher - if exactly one key matches,
   but the value does not, report only the mismatching value.

 Fixed by openembedded#157

 openembedded#156 <hamcrest/PyHamcrest#156>
 - * Fix is_() type annotations

 openembedded#180 <hamcrest/PyHamcrest#180>

 Misc
-------------
 - openembedded#150 <hamcrest/PyHamcrest#150>
   openembedded#159 <hamcrest/PyHamcrest#159>
   openembedded#162 <hamcrest/PyHamcrest#162>
   openembedded#163 <hamcrest/PyHamcrest#163>
   openembedded#166 <hamcrest/PyHamcrest#166>
   openembedded#175 <hamcrest/PyHamcrest#175>

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
halstead pushed a commit that referenced this pull request Jan 5, 2022
Changelog:
=========
  Features
-------------
 - * Adds the tests to the sdist. Fixed by #150

 #141 <hamcrest/PyHamcrest#141>
 - * Update the CI to test Python 3.10

 #160 <hamcrest/PyHamcrest#160>
 - * Add pretty string representation for matchers objects

 #170 <hamcrest/PyHamcrest#170>

 Bugfixes
------------
 - * Test coverage is now submitted to codecov.io.

 Fixed by #150

 #135 <hamcrest/PyHamcrest#135>
 - Change to the ``has_entry()`` matcher - if exactly one key matches,
   but the value does not, report only the mismatching value.

 Fixed by #157

 #156 <hamcrest/PyHamcrest#156>
 - * Fix is_() type annotations

 #180 <hamcrest/PyHamcrest#180>

 Misc
-------------
 - #150 <hamcrest/PyHamcrest#150>
   #159 <hamcrest/PyHamcrest#159>
   #162 <hamcrest/PyHamcrest#162>
   #163 <hamcrest/PyHamcrest#163>
   #166 <hamcrest/PyHamcrest#166>
   #175 <hamcrest/PyHamcrest#175>

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
Signed-off-by: Trevor Gamblin <[email protected]>
kraj pushed a commit to YoeDistro/meta-openembedded that referenced this pull request Dec 3, 2022
Changelog:
==========
- Add smcroutectl batch support, issue openembedded#189. Based on the IPC support added in issue openembedded#185
- Fix openembedded#178: invalid systemd daemon type Simple/Notify vs simple/notify
- Fix openembedded#179: typo in wildcard routes section of README
- Fix openembedded#180: minor typo in file and directory names in documentation
- Fix openembedded#183: casting in IPC code hides error handling of recv()
- Fix openembedded#186: NULL pointer dereference in utimensat() replacement function.
  Found accidentally by Alexey Smirnov. Only triggered on systems that don't
  have a native utimensat() in their C-library, or if you try to build
  SMCRoute without using its own build system ...
- Fix openembedded#187: strange behavior joining/leaving the same group
- Fix openembedded#192: typo in README

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
kraj pushed a commit to YoeDistro/meta-openembedded that referenced this pull request Dec 3, 2022
Changelog:
==========
- Add smcroutectl batch support, issue openembedded#189. Based on the IPC support added in issue openembedded#185
- Fix openembedded#178: invalid systemd daemon type Simple/Notify vs simple/notify
- Fix openembedded#179: typo in wildcard routes section of README
- Fix openembedded#180: minor typo in file and directory names in documentation
- Fix openembedded#183: casting in IPC code hides error handling of recv()
- Fix openembedded#186: NULL pointer dereference in utimensat() replacement function.
  Found accidentally by Alexey Smirnov. Only triggered on systems that don't
  have a native utimensat() in their C-library, or if you try to build
  SMCRoute without using its own build system ...
- Fix openembedded#187: strange behavior joining/leaving the same group
- Fix openembedded#192: typo in README

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
kraj pushed a commit to YoeDistro/meta-openembedded that referenced this pull request Dec 5, 2022
Changelog:
==========
- Add smcroutectl batch support, issue openembedded#189. Based on the IPC support added in issue openembedded#185
- Fix openembedded#178: invalid systemd daemon type Simple/Notify vs simple/notify
- Fix openembedded#179: typo in wildcard routes section of README
- Fix openembedded#180: minor typo in file and directory names in documentation
- Fix openembedded#183: casting in IPC code hides error handling of recv()
- Fix openembedded#186: NULL pointer dereference in utimensat() replacement function.
  Found accidentally by Alexey Smirnov. Only triggered on systems that don't
  have a native utimensat() in their C-library, or if you try to build
  SMCRoute without using its own build system ...
- Fix openembedded#187: strange behavior joining/leaving the same group
- Fix openembedded#192: typo in README

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
halstead pushed a commit that referenced this pull request Jan 28, 2023
Changelog:
==========
- Add smcroutectl batch support, issue #189. Based on the IPC support added in issue #185
- Fix #178: invalid systemd daemon type Simple/Notify vs simple/notify
- Fix #179: typo in wildcard routes section of README
- Fix #180: minor typo in file and directory names in documentation
- Fix #183: casting in IPC code hides error handling of recv()
- Fix #186: NULL pointer dereference in utimensat() replacement function.
  Found accidentally by Alexey Smirnov. Only triggered on systems that don't
  have a native utimensat() in their C-library, or if you try to build
  SMCRoute without using its own build system ...
- Fix #187: strange behavior joining/leaving the same group
- Fix #192: typo in README

Signed-off-by: Wang Mingyu <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
(cherry picked from commit abc5011)
Signed-off-by: Armin Kuster <[email protected]>
kraj pushed a commit to YoeDistro/meta-openembedded that referenced this pull request Apr 1, 2026
Drop patch that was merged upstream.

License update: a copyright line was removed. The license is still MIT.

Changes:
Version 6.1.2
=============

Code Fixes
----------
* Fix for low-severity CVE-2026-23868 affecting gifponge, giftool, and gifbuild,
  but not the core library - library clients need not be alarned.

Version 6.1.1
=============

This release bumps the major version, but only one entry point -
EGifSpew() - has changed signature and behavior (in order to be able
to pass out a detailed error code). The internal error
codes in the E_GIF_ERR series have changed value so none of them
collides with GIF_ERROR.

This code has been systematically audited and hardened wuth
ChatGPT-5.2. The only library fixes reported by users or found by
robot were for some memory leaks that could only triggered by severely
malformed GIFs. Other bugs are edge-case failures in the CLI tools.

The gif2rbg CLI tool has been moved to the "obsolete" bin, because its
only deployment case in 2026 is as a piñata at fuzzer parties.

Warning: the CLI tools in the obsolete category will soon be removed
from the distribution entirely. The maintainer is tired of fielding
junk bugs filed against them by would-be coup-counters who found yet
another edge case, and the rest of the world doesn't need noisy CVEs
that aren't actually DoS or security issues for giflib clients.

Code Fixes
----------

* Fix for CVE-2021-40633.
* Fix SF bug openembedded#165 EGifSpew leaks GifFileOut->SColorMap
* Fix SF bug openembedded#171 ImageMagick required to build giflib on non-Darwin Platforms
* Fix SF bug openembedded#172 Incorrect object files in shared libutil on darwin
* Fix SF bug openembedded#173 installation of manual pages and html documentation
* Fix SF bug openembedded#175 Memory leaks in gifecho.c's main() and in gifalloc.c's GifMakeMapObject
* Fix SF bug openembedded#177 wrong pointer used in giftool getbool
* Fix SF bug openembedded#179 Path Traversal vulnerability
* Fix SF bug openembedded#180: -Wformat-truncation likely pointing out an actual bug
* Fix SF bug openembedded#182 out‐of‐bounds writes in Icon2Gif
* Fix SF bug openembedded#184 uninitialized buffer in DumpScreen2RGB
* Fix SF bug openembedded#185 integer overflow in gifbg.c
* Fix SF bug openembedded#186 integer overflow in Icon2Gif
* Fix SF bug openembedded#187: CVE-2025-31344
* Fix SF bug openembedded#170 Tests failing on Ubuntu Noble, giftext buffer overflow
* Fix SF bug openembedded#165 EGifSpew leaks GifFileOut->SColorMap
* Fix SF bug openembedded#162 detected memory leaks in GifMakeSavedImage giflib/gifalloc.c
* Fix SF bug openembedded#161 detected memory leaks in EGifOpenFileHandle giflib/egif_lib.c
* Fix SF bug openembedded#142 ABI break public symbol GifQuantizeBuffer

Other bugs that duplicate these have breen addressesed by these fixes

* SF bug openembedded#156 EGifSpew leaks SavedImages (and more); won't fix, caller
  might want to write a GIF, modify the in-memory data, then write
  again.

Tests
-----

Test suite now emits TAP (Test Anything Protocol).

Signed-off-by: Gyorgy Sarvari <[email protected]>
Signed-off-by: Khem Raj <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant