openembedded-core - OpenEmbedded Core layer

Age	Commit message (Collapse)	Author
2021-01-19	zip: whitelist CVE-2018-13410 and CVE-2018-13684	Mikko Rapeli
	https://nvd.nist.gov/vuln/detail/CVE-2018-13410 is disputed and also Debian considers it not a vulnerability: https://security-tracker.debian.org/tracker/CVE-2018-13410 http://seclists.org/fulldisclosure/2018/Jul/24 "Negligible security impact, would involve that a untrusted party controls the -TT value." https://nvd.nist.gov/vuln/detail/CVE-2018-13684 is not for zip, also Debian concludes this: https://security-tracker.debian.org/tracker/CVE-2018-13684 "NOT-FOR-US: smart contract implementation for ZIP" Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
2020-01-10	zip: Add patch fixing zipnote segfault	Jate Sujjavanich
	This patch has been applied in several Linux distributions Signed-off-by: Jate Sujjavanich <jatedev@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-06-04	zip: Remove build date to improve reproducibility	Joshua Watt
	Applies a patch from Debian to remove the build date from zip. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-08-16	selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting	Alexander Kanavin
	... instead of a global exception list which was problematic. [YOCTO #11896] Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-19	zip: update SRC_URI	Ross Burton
	The infozip FTP server appears to have been taken down, so change the SRC_URI to point at their SourceForge project. Also as the SRC_URI can't be generated from the version and there is no other user of the .inc, merge the .bb and .inc together. [ YOCTO #9655 ] Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-08	package_regex.inc: split entries which blacklist specific versions to their ↵	Alexander Kanavin
	recipes Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2012-11-24	zip: pay some attention to our CFLAGS	Joe Slater
	Makefile makes use of CFLAGS_NOOPT. If we set that when calling make we can options like -g. The Makefile will override any optimization to -O3. Upstream-Status: Pending Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2011-12-08	OECore license fixes: meta/*	Elizabeth Flanagan
	This is a quick audit of only the most obviously wrong licenses found within OECore. These fixes fall into four areas: - LICENSE field had incorrect format so that the parser choked - LICENSE field has a license with no version - LICENSE field was actually incorrect - LICENSE field has an imaginary license that didn't exist This fixes most of the LICENSE warnings thrown, along with my prior commit adding additional licenses to common-licenses and additional SPDXLICENSEMAP entries. HOWEVER..... there is much to be done on the license front. For a list of recipes with licenses that need obvious fixing see: https://wiki.yoctoproject.org/wiki/License_Audit That said, I would suggest another license audit as I've found enough inconsistencies. A good suggestion is when in doubt, look at how openSuse or Gentoo or Debian license the package. Signed-off-by: Elizabeth Flanagan <elizabeth.flanagan@intel.com>
2010-12-09	SRC_URI Checksums Additionals	Saul Wold
	Signed-off-by: Saul Wold <sgw@linux.intel.com>
2010-09-01	packages: Separate out most of the remaining packages into recipes	Richard Purdie
	Signed-off-by: Richard Purdie <rpurdie@linux.intel.com>