1
0
mirror of https://git.yoctoproject.org/poky synced 2026-06-18 18:49:51 +00:00
Commit Graph

9 Commits

Author SHA1 Message Date
Richard Purdie ca65114e5e recipes: Drop remaining md5sum checksums
We have long since obsoleted md5sum in favour of sha256sum. Drop the remaining
56 entries (which were showing many recipes hadn't been touched in a long time).
They all do have the corresponding sha256sum entries as is clear from the diff.

(From OE-Core rev: 7e4bfcc9706fa8a09f6a0004174a2c3b21c90df3)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-01 14:22:53 +01:00
Peter Marko cd25fc78d8 libyaml: Ignore CVE-2024-35325
This is similar CVE as the previous ones from the same author.
https://github.com/yaml/libyaml/issues/303 explain why this is misuse
(or wrong use) of libyaml.

(From OE-Core rev: c97f00d122f60501751625e27b9c70166396d754)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-08-28 09:14:26 +01:00
Peter Marko 06fa93620e libyaml: ignore CVE-2024-35326
This is the same problem as already ignored CVE-2024-35328.
See laso this comment in addition:
https://github.com/yaml/libyaml/issues/298#issuecomment-2167684233

(From OE-Core rev: 0632d739fd6bae33f9e58681e117b906a947a307)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-08-09 22:33:38 +01:00
Niko Mauno f3479f74c9 libyaml: Amend CVE status as 'upstream-wontfix'
Use an existing defined CVE_CHECK_STATUSMAP key in
meta/lib/oe/cve_check.py in order to avoid following complaint from
BitBake:

  WARNING: libyaml-native-0.2.5-r0 do_create_spdx: Invalid detail "wontfix" for CVE_STATUS[CVE-2024-35328] = "wontfix: Upstream thinks there is no working code that is exploitable - https://github.com/yaml/libyaml/issues/302", fallback to Unpatched

(From OE-Core rev: c66d9a2a0d197498fa21ee8ca51a4afb59f75473)

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-08-01 14:32:22 +01:00
Khem Raj 3ebb2ca832 libyaml: Change CVE status to wontfix
This has not yet been disputed officially

(From OE-Core rev: 7ec7384837f3e3fb68b25a6108ed7ec0f261a4aa)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-08-01 09:20:27 +01:00
Khem Raj 56b6b35626 libyaml: Update status of CVE-2024-35328
This is open yet but seems to be disputed

(From OE-Core rev: 4cba8ad405b1728afda3873f99ac88711ab85644)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-07-30 12:32:53 +01:00
Richard Purdie bb6ddc3691 Convert to new override syntax
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py <oe-core directory>

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-02 15:44:10 +01:00
Khem Raj 43e8dd7934 libyaml: Enable static lib on native/nativesdk
Helps building static tools which depend on libyaml during build or
shipped with SDK

libyaml is MIT licensed so static linking would not be as prohibitive

(From OE-Core rev: 1c2be08fc66c09ed7547eda172da4c99e8563091)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-13 23:13:46 +00:00
Wang Mingyu 6ce944904f libyaml: upgrade 0.2.4 -> 0.2.5
(From OE-Core rev: b574c04a26ab49ee0588e37606dd100a939a90a9)

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-06-04 13:27:32 +01:00