mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-11-12 15:31:03 +00:00
Ricardo Salveti
82ca468de8
This release is mostly hardening against untrusted repository content. It fixes two checkout issues: a crafted whiteout name that strips to ".." and makes a --whiteouts checkout delete the destination's parent (GHSA-cp2j-qv7x-wcw4), and union checkouts following a symlink planted at a directory name and writing outside the destination (GHSA-7pq7-3pmj-9wp6). Composefs and commit signature checks with the OpenSSL ed25519/SPKI backends now accept only EVP_DigestVerify() == 1, where error returns used to count as a valid signature. Static delta, content header, commit and curl header parsing gain bounds checks. Behaviour changes: the default min-free-space is now min(3%, 1GB), and the systemd generator leaves boot.mount to systemd-fstab-generator when /etc/fstab has a /boot entry. https://github.com/ostreedev/ostree/releases/tag/v2026.5 AI-Generated: Uses Claude Code (Claude Opus 5.5) Signed-off-by: Ricardo Salveti <ricardo.salveti@oss.qualcomm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Khem Raj raj.khem@gmail.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories