mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-08-31 15:51:17 +00:00
Wang Mingyu
03d118928b
Changelog: =========== - docs: wrap Chat-80 HOWTO output - Sandbox Stanford JAR execution to nltk_data directories - Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377) - Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400) - Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835) - fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841) - fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378) - fix(security): validate corpus-reader roots against the data sandbox (CWE-73) - fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88) - Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Khem Raj raj.khem@gmail.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories