summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Raspbian automatic forward porter [Fri, 29 May 2020 21:08:27 +0000 (22:08 +0100)]
Merge version 0.6.3-7+rpi1 and 0.6.3-8 to produce 0.6.3-8+rpi1
Raspbian automatic forward porter [Tue, 19 May 2020 08:30:53 +0000 (09:30 +0100)]
Merge version 0.6.2-4+rpi1 and 0.6.3-7 to produce 0.6.3-7+rpi1
Gianfranco Costamagna [Thu, 14 May 2020 08:29:07 +0000 (09:29 +0100)]
Merge yaml-cpp (0.6.3-8) import into refs/heads/workingbranch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "fix up static, so works as DLL (#559)"
This reverts commit
774f25800e6f19f4b927023c85d1389af322da5e.
Gbp-Pq: Name 0005-Revert-fix-up-static-so-works-as-DLL-559.patch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "Apply formatting/style tweaks to comply with compile time diagnostics for g++ and clang++ (#686)"
This reverts commit
0d5c57150cebb430fcc216d8066dbb28aeaafe8e.
Gbp-Pq: Name 0004-Revert-Apply-formatting-style-tweaks-to-comply-with-.patch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "Disallow moving for the Parser."
This reverts commit
bd7f8c60c82614bb0bd1c526db2cbc39dac02fec.
Gbp-Pq: Name 0003-Revert-Disallow-moving-for-the-Parser.patch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "Improve error messages on operator[] or as<> (#656)"
This reverts commit
012269756149ae99745b6dafefd415843d7420bb.
Gbp-Pq: Name 0002-Revert-Improve-error-messages-on-operator-or-as-656.patch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "Static analysis fix: replace 0 and NULL with nullptr (#738)"
This reverts commit
db0bda7087a6fac811e78957787fc5037465ac4e.
Gbp-Pq: Name 0001-Revert-Static-analysis-fix-replace-0-and-NULL-with-n.patch
Simon Quigley [Thu, 14 May 2020 08:29:07 +0000 (09:29 +0100)]
Fix unbounded recursion CVEs
Origin: https://github.com/jbeder/yaml-cpp/pull/807
Forwarded: yes
Bug: https://github.com/jbeder/yaml-cpp/issues/459
Bug: https://github.com/jbeder/yaml-cpp/issues/655
Bug: https://github.com/jbeder/yaml-cpp/issues/654
Bug: https://github.com/jbeder/yaml-cpp/issues/660
This cherry-picks the (so-far-unmerged) upstream pull request.
The final 5 commits of that PR are not included; they only add tests
to a file not present in the 0.6.2 (or 0.6.3) release.
From
d540476e31b080aa1f903ad20ec0426dd3838be7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Antoine=20Beaupr=C3=A9?= <anarcat@debian.org>
Date: Tue, 25 Apr 2017 20:10:20 -0400
Subject: [PATCH 1/9] fix stack overflow in HandleNode() (CVE-2017-5950)
simply set a hardcoded recursion limit to 2000 (inspired by Python's)
to avoid infinitely recursing into arbitrary data structures
assert() the depth. unsure if this is the right approach, but given
that HandleNode() is "void", I am not sure how else to return an
error. the problem with this approach of course is that it will still
crash the caller, unless they have proper exception handling in place.
Closes: #459
Gbp-Pq: Name fix-unbounded-recursion-depth.patch
Simon Quigley [Thu, 14 May 2020 08:29:07 +0000 (09:29 +0100)]
fix-CVE-2017-11692
commit
c9460110e072df84b7dee3eb651f2ec5df75fb18
Author: Jesse Beder <jbeder@gmail.com>
Date: Mon Jan 20 18:05:15 2020 -0600
Fix reading empty token stack with a node with properties but no scalar.
E.g. `!2`.
Gbp-Pq: Name fix-CVE-2017-11692.patch
Simon Quigley [Thu, 14 May 2020 08:29:07 +0000 (09:29 +0100)]
symbol-visibility
commit
df9206778fe9ff1bdd56d975c29c43dfe1e66de7
Author: Christopher James Halse Rogers <christopher.halse.rogers@canonical.com>
Date: Fri Nov 23 15:26:53 2018 +1100
Export only YAML_CPP_API-tagged symbols on Linux.
This marks classes tagged with YAML_CPP_API with visibility("default"), to
explicitly export them, and then makes the default visibility "hidden" via
-fvisibility=hidden.
This reduces the number of exported symbols by more than 50%, which has
a small application start-up time and memory useage benefit. It also
makes it more feasible to audit the set of exported symbols in automated
ABI compatibility systems.
Gbp-Pq: Name symbol-visibility.patch
Reiner Herrmann [Thu, 14 May 2020 08:29:07 +0000 (09:29 +0100)]
Make the build reproducible
Bug-Debian: https://bugs.debian.org/808714
Last-Update: 2016-10-11
Gbp-Pq: Name reproducible-build.patch
Paul Novotny [Thu, 14 May 2020 08:29:07 +0000 (09:29 +0100)]
Install libs and cmake files to the Debian location
Forwarded: not-needed
Last-Update: 2015-11-29
Instead of moving the libs to the DEB_HOST_MULTIARCH lib directory during
packaging, have cmake install the libs directly. This is needed so the CMake
development files point to the correct location for the libs. Also, install
yaml-cpp-config.cmake, yaml-cpp-config-version.cmake, and
yaml-cpp-targets.cmake.
Gbp-Pq: Name install-cmake-dev-files.patch
Gianfranco Costamagna [Thu, 14 May 2020 08:29:07 +0000 (09:29 +0100)]
yaml-cpp (0.6.3-8) unstable; urgency=medium
[ Debian Janitor ]
* Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
Repository-Browse.
[ Helmut Grohne ]
* Fix FTCBFS: Don't build tests for DEB_BUILD_OPTIONS=nocheck.
(Closes: #960167)
[dgit import unpatched yaml-cpp 0.6.3-8]
Gianfranco Costamagna [Thu, 14 May 2020 08:29:07 +0000 (09:29 +0100)]
Import yaml-cpp_0.6.3-8.debian.tar.xz
[dgit import tarball yaml-cpp 0.6.3-8 yaml-cpp_0.6.3-8.debian.tar.xz]
Gianfranco Costamagna [Wed, 13 May 2020 17:26:42 +0000 (18:26 +0100)]
Merge yaml-cpp (0.6.3-7) import into refs/heads/workingbranch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "fix up static, so works as DLL (#559)"
This reverts commit
774f25800e6f19f4b927023c85d1389af322da5e.
Gbp-Pq: Name 0005-Revert-fix-up-static-so-works-as-DLL-559.patch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "Apply formatting/style tweaks to comply with compile time diagnostics for g++ and clang++ (#686)"
This reverts commit
0d5c57150cebb430fcc216d8066dbb28aeaafe8e.
Gbp-Pq: Name 0004-Revert-Apply-formatting-style-tweaks-to-comply-with-.patch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "Disallow moving for the Parser."
This reverts commit
bd7f8c60c82614bb0bd1c526db2cbc39dac02fec.
Gbp-Pq: Name 0003-Revert-Disallow-moving-for-the-Parser.patch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "Improve error messages on operator[] or as<> (#656)"
This reverts commit
012269756149ae99745b6dafefd415843d7420bb.
Gbp-Pq: Name 0002-Revert-Improve-error-messages-on-operator-or-as-656.patch
Adrian Bunk [Sun, 10 May 2020 08:39:29 +0000 (11:39 +0300)]
Revert "Static analysis fix: replace 0 and NULL with nullptr (#738)"
This reverts commit
db0bda7087a6fac811e78957787fc5037465ac4e.
Gbp-Pq: Name 0001-Revert-Static-analysis-fix-replace-0-and-NULL-with-n.patch
Simon Quigley [Wed, 13 May 2020 17:26:42 +0000 (18:26 +0100)]
Fix unbounded recursion CVEs
Origin: https://github.com/jbeder/yaml-cpp/pull/807
Forwarded: yes
Bug: https://github.com/jbeder/yaml-cpp/issues/459
Bug: https://github.com/jbeder/yaml-cpp/issues/655
Bug: https://github.com/jbeder/yaml-cpp/issues/654
Bug: https://github.com/jbeder/yaml-cpp/issues/660
This cherry-picks the (so-far-unmerged) upstream pull request.
The final 5 commits of that PR are not included; they only add tests
to a file not present in the 0.6.2 (or 0.6.3) release.
From
d540476e31b080aa1f903ad20ec0426dd3838be7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Antoine=20Beaupr=C3=A9?= <anarcat@debian.org>
Date: Tue, 25 Apr 2017 20:10:20 -0400
Subject: [PATCH 1/9] fix stack overflow in HandleNode() (CVE-2017-5950)
simply set a hardcoded recursion limit to 2000 (inspired by Python's)
to avoid infinitely recursing into arbitrary data structures
assert() the depth. unsure if this is the right approach, but given
that HandleNode() is "void", I am not sure how else to return an
error. the problem with this approach of course is that it will still
crash the caller, unless they have proper exception handling in place.
Closes: #459
Gbp-Pq: Name fix-unbounded-recursion-depth.patch
Simon Quigley [Wed, 13 May 2020 17:26:42 +0000 (18:26 +0100)]
fix-CVE-2017-11692
commit
c9460110e072df84b7dee3eb651f2ec5df75fb18
Author: Jesse Beder <jbeder@gmail.com>
Date: Mon Jan 20 18:05:15 2020 -0600
Fix reading empty token stack with a node with properties but no scalar.
E.g. `!2`.
Gbp-Pq: Name fix-CVE-2017-11692.patch
Simon Quigley [Wed, 13 May 2020 17:26:42 +0000 (18:26 +0100)]
symbol-visibility
commit
df9206778fe9ff1bdd56d975c29c43dfe1e66de7
Author: Christopher James Halse Rogers <christopher.halse.rogers@canonical.com>
Date: Fri Nov 23 15:26:53 2018 +1100
Export only YAML_CPP_API-tagged symbols on Linux.
This marks classes tagged with YAML_CPP_API with visibility("default"), to
explicitly export them, and then makes the default visibility "hidden" via
-fvisibility=hidden.
This reduces the number of exported symbols by more than 50%, which has
a small application start-up time and memory useage benefit. It also
makes it more feasible to audit the set of exported symbols in automated
ABI compatibility systems.
Gbp-Pq: Name symbol-visibility.patch
Reiner Herrmann [Wed, 13 May 2020 17:26:42 +0000 (18:26 +0100)]
Make the build reproducible
Bug-Debian: https://bugs.debian.org/808714
Last-Update: 2016-10-11
Gbp-Pq: Name reproducible-build.patch
Paul Novotny [Wed, 13 May 2020 17:26:42 +0000 (18:26 +0100)]
Install libs and cmake files to the Debian location
Forwarded: not-needed
Last-Update: 2015-11-29
Instead of moving the libs to the DEB_HOST_MULTIARCH lib directory during
packaging, have cmake install the libs directly. This is needed so the CMake
development files point to the correct location for the libs. Also, install
yaml-cpp-config.cmake, yaml-cpp-config-version.cmake, and
yaml-cpp-targets.cmake.
Gbp-Pq: Name install-cmake-dev-files.patch
Gianfranco Costamagna [Wed, 13 May 2020 17:26:42 +0000 (18:26 +0100)]
yaml-cpp (0.6.3-7) unstable; urgency=medium
* Team upload
[ Adrian Bunk ]
* From Adrian Bunk, fix other c++ symbols that broke ABI
(Closes: #959201)
[dgit import unpatched yaml-cpp 0.6.3-7]
Gianfranco Costamagna [Wed, 13 May 2020 17:26:42 +0000 (18:26 +0100)]
Import yaml-cpp_0.6.3-7.debian.tar.xz
[dgit import tarball yaml-cpp 0.6.3-7 yaml-cpp_0.6.3-7.debian.tar.xz]
Simon Quigley [Thu, 30 Apr 2020 01:24:07 +0000 (02:24 +0100)]
Import yaml-cpp_0.6.3.orig.tar.gz
[dgit import orig yaml-cpp_0.6.3.orig.tar.gz]
Peter Michael Green [Fri, 18 Jan 2019 20:49:45 +0000 (20:49 +0000)]
Merge yaml-cpp (0.6.2-4+rpi1) import into refs/heads/workingbranch
Simon Quigley [Fri, 18 Jan 2019 20:49:45 +0000 (20:49 +0000)]
symbol-visibility
commit
df9206778fe9ff1bdd56d975c29c43dfe1e66de7
Author: Christopher James Halse Rogers <christopher.halse.rogers@canonical.com>
Date: Fri Nov 23 15:26:53 2018 +1100
Export only YAML_CPP_API-tagged symbols on Linux.
This marks classes tagged with YAML_CPP_API with visibility("default"), to
explicitly export them, and then makes the default visibility "hidden" via
-fvisibility=hidden.
This reduces the number of exported symbols by more than 50%, which has
a small application start-up time and memory useage benefit. It also
makes it more feasible to audit the set of exported symbols in automated
ABI compatibility systems.
Gbp-Pq: Name symbol-visibility.patch
Reiner Herrmann [Fri, 18 Jan 2019 20:49:45 +0000 (20:49 +0000)]
Make the build reproducible
Bug-Debian: https://bugs.debian.org/808714
Last-Update: 2016-10-11
Gbp-Pq: Name reproducible-build.patch
Paul Novotny [Fri, 18 Jan 2019 20:49:45 +0000 (20:49 +0000)]
Install libs and cmake files to the Debian location
Forwarded: not-needed
Last-Update: 2015-11-29
Instead of moving the libs to the DEB_HOST_MULTIARCH lib directory during
packaging, have cmake install the libs directly. This is needed so the CMake
development files point to the correct location for the libs. Also, install
yaml-cpp-config.cmake, yaml-cpp-config-version.cmake, and
yaml-cpp-targets.cmake.
Gbp-Pq: Name install-cmake-dev-files.patch
Peter Michael Green [Fri, 18 Jan 2019 20:49:45 +0000 (20:49 +0000)]
yaml-cpp (0.6.2-4+rpi1) buster-staging; urgency=medium
* Update symbols file for raspbian.
[dgit import unpatched yaml-cpp 0.6.2-4+rpi1]
Peter Michael Green [Fri, 18 Jan 2019 20:49:45 +0000 (20:49 +0000)]
Import yaml-cpp_0.6.2-4+rpi1.debian.tar.xz
[dgit import tarball yaml-cpp 0.6.2-4+rpi1 yaml-cpp_0.6.2-4+rpi1.debian.tar.xz]
Simon Quigley [Mon, 7 Jan 2019 22:00:33 +0000 (22:00 +0000)]
Merge yaml-cpp (0.6.2-4) import into refs/heads/workingbranch
Simon Quigley [Mon, 7 Jan 2019 22:00:33 +0000 (22:00 +0000)]
symbol-visibility
commit
df9206778fe9ff1bdd56d975c29c43dfe1e66de7
Author: Christopher James Halse Rogers <christopher.halse.rogers@canonical.com>
Date: Fri Nov 23 15:26:53 2018 +1100
Export only YAML_CPP_API-tagged symbols on Linux.
This marks classes tagged with YAML_CPP_API with visibility("default"), to
explicitly export them, and then makes the default visibility "hidden" via
-fvisibility=hidden.
This reduces the number of exported symbols by more than 50%, which has
a small application start-up time and memory useage benefit. It also
makes it more feasible to audit the set of exported symbols in automated
ABI compatibility systems.
Gbp-Pq: Name symbol-visibility.patch
Reiner Herrmann [Mon, 7 Jan 2019 22:00:33 +0000 (22:00 +0000)]
Make the build reproducible
Bug-Debian: https://bugs.debian.org/808714
Last-Update: 2016-10-11
Gbp-Pq: Name reproducible-build.patch
Paul Novotny [Mon, 7 Jan 2019 22:00:33 +0000 (22:00 +0000)]
Install libs and cmake files to the Debian location
Forwarded: not-needed
Last-Update: 2015-11-29
Instead of moving the libs to the DEB_HOST_MULTIARCH lib directory during
packaging, have cmake install the libs directly. This is needed so the CMake
development files point to the correct location for the libs. Also, install
yaml-cpp-config.cmake, yaml-cpp-config-version.cmake, and
yaml-cpp-targets.cmake.
Gbp-Pq: Name install-cmake-dev-files.patch
Simon Quigley [Mon, 7 Jan 2019 22:00:33 +0000 (22:00 +0000)]
yaml-cpp (0.6.2-4) unstable; urgency=medium
* Upload to Sid.
[dgit import unpatched yaml-cpp 0.6.2-4]
Simon Quigley [Mon, 7 Jan 2019 22:00:33 +0000 (22:00 +0000)]
Import yaml-cpp_0.6.2-4.debian.tar.xz
[dgit import tarball yaml-cpp 0.6.2-4 yaml-cpp_0.6.2-4.debian.tar.xz]
Simon Quigley [Wed, 28 Nov 2018 00:23:07 +0000 (00:23 +0000)]
Import yaml-cpp_0.6.2.orig.tar.gz
[dgit import orig yaml-cpp_0.6.2.orig.tar.gz]
Paul Novotny [Wed, 12 Oct 2016 23:48:11 +0000 (00:48 +0100)]
Merge yaml-cpp (0.5.2-4) import into refs/heads/workingbranch
Paul Novotny [Wed, 12 Oct 2016 23:48:11 +0000 (00:48 +0100)]
Fix some Node::operator[] regressions from 0.5.1
Bug-Debian: https://bugs.debian.org/835417
Origin: upstream, https://github.com/jbeder/yaml-cpp/commit/
b426fafff
Last-Update: 2016-10-11
Gbp-Pq: Name backport-
b426fafff.patch
Christian Hofstaedtler [Thu, 30 Jun 2016 22:05:02 +0000 (22:05 +0000)]
Workaround bug in googletest, fixing bug #812284
Gbp-Pq: Name 0003-Workaround-bug-in-googletest-fixing-bug-812284.patch
Reiner Herrmann [Wed, 12 Oct 2016 23:48:11 +0000 (00:48 +0100)]
Make the build reproducible
Bug-Debian: https://bugs.debian.org/808714
Last-Update: 2016-10-11
Gbp-Pq: Name reproducible-build.patch
Paul Novotny [Wed, 12 Oct 2016 23:48:11 +0000 (00:48 +0100)]
Install libs and cmake files to the Debian location
Forwarded: not-needed
Last-Update: 2015-11-29
Instead of moving the libs to the DEB_HOST_MULTIARCH lib directory during
packaging, have cmake install the libs directly. This is needed so the CMake
development files point to the correct location for the libs. Also, install
yaml-cpp-config.cmake, yaml-cpp-config-version.cmake, and
yaml-cpp-targets.cmake.
Gbp-Pq: Name install-cmake-dev-files.patch
Lifeng Sun [Wed, 12 Oct 2016 23:48:11 +0000 (00:48 +0100)]
remove multiarch path in yaml-cpp.pc
Last-Update: Fri, 30 Aug 2013 18:29:05 +0800
Gbp-Pq: Name pkgconfig.patch
Paul Novotny [Wed, 12 Oct 2016 23:48:11 +0000 (00:48 +0100)]
yaml-cpp (0.5.2-4) unstable; urgency=medium
* Make the build reproducible (Closes: #808714)
* Add libboost-dev dependency (Closes: #812851)
* Fix yaml-cpp 0.5.2 issue (Closes: #814499)
* Fix lintian warnings: spelling, standards-version, and Vcs-Git
[dgit import unpatched yaml-cpp 0.5.2-4]
Paul Novotny [Wed, 12 Oct 2016 23:48:11 +0000 (00:48 +0100)]
Import yaml-cpp_0.5.2-4.debian.tar.xz
[dgit import tarball yaml-cpp 0.5.2-4 yaml-cpp_0.5.2-4.debian.tar.xz]
Paul Novotny [Thu, 23 Apr 2015 20:40:20 +0000 (21:40 +0100)]
Import yaml-cpp_0.5.2.orig.tar.gz
[dgit import orig yaml-cpp_0.5.2.orig.tar.gz]
Lifeng Sun [Fri, 30 Aug 2013 10:29:05 +0000 (11:29 +0100)]
pkgconfig
Gbp-Pq: Name pkgconfig.patch
Lifeng Sun [Fri, 30 Aug 2013 10:29:05 +0000 (11:29 +0100)]
yaml-cpp (0.5.1-1) unstable; urgency=low
* New upstream release. (Closes: #706708)
* Bump Standards-Version to 3.9.4.
* libyaml-cpp-dev: remove multiarch path in yaml-cpp.pc to make
lintian happy.
* debian/copyright: new Format URI.
* debian/control: remove Vcs-Svn field.
[dgit import unpatched yaml-cpp 0.5.1-1]
Lifeng Sun [Fri, 30 Aug 2013 10:29:05 +0000 (11:29 +0100)]
Import yaml-cpp_0.5.1.orig.tar.gz
[dgit import orig yaml-cpp_0.5.1.orig.tar.gz]
Lifeng Sun [Fri, 30 Aug 2013 10:29:05 +0000 (11:29 +0100)]
Import yaml-cpp_0.5.1-1.debian.tar.gz
[dgit import tarball yaml-cpp 0.5.1-1 yaml-cpp_0.5.1-1.debian.tar.gz]