summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support/libyaml
Commit message (Collapse)AuthorAgeFilesLines
* recipes: Drop remaining md5sum checksumsRichard Purdie2025-05-011-1/+0
| | | | | | | | | | We have long since obsoleted md5sum in favour of sha256sum. Drop the remaining 56 entries (which were showing many recipes hadn't been touched in a long time). They all do have the corresponding sha256sum entries as is clear from the diff. (From OE-Core rev: 7e4bfcc9706fa8a09f6a0004174a2c3b21c90df3) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: Ignore CVE-2024-35325Peter Marko2024-08-281-0/+1
| | | | | | | | | | | This is similar CVE as the previous ones from the same author. https://github.com/yaml/libyaml/issues/303 explain why this is misuse (or wrong use) of libyaml. (From OE-Core rev: c97f00d122f60501751625e27b9c70166396d754) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: ignore CVE-2024-35326Peter Marko2024-08-091-0/+1
| | | | | | | | | | | This is the same problem as already ignored CVE-2024-35328. See laso this comment in addition: https://github.com/yaml/libyaml/issues/298#issuecomment-2167684233 (From OE-Core rev: 0632d739fd6bae33f9e58681e117b906a947a307) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: Amend CVE status as 'upstream-wontfix'Niko Mauno2024-08-011-1/+1
| | | | | | | | | | | | | Use an existing defined CVE_CHECK_STATUSMAP key in meta/lib/oe/cve_check.py in order to avoid following complaint from BitBake: WARNING: libyaml-native-0.2.5-r0 do_create_spdx: Invalid detail "wontfix" for CVE_STATUS[CVE-2024-35328] = "wontfix: Upstream thinks there is no working code that is exploitable - https://github.com/yaml/libyaml/issues/302", fallback to Unpatched (From OE-Core rev: c66d9a2a0d197498fa21ee8ca51a4afb59f75473) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: Change CVE status to wontfixKhem Raj2024-08-011-1/+1
| | | | | | | | | This has not yet been disputed officially (From OE-Core rev: 7ec7384837f3e3fb68b25a6108ed7ec0f261a4aa) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: Update status of CVE-2024-35328Khem Raj2024-07-301-0/+2
| | | | | | | | | This is open yet but seems to be disputed (From OE-Core rev: 4cba8ad405b1728afda3873f99ac88711ab85644) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Convert to new override syntaxRichard Purdie2021-08-021-2/+2
| | | | | | | | | | | | This is the result of automated script conversion: scripts/contrib/convert-overrides.py <oe-core directory> converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: Enable static lib on native/nativesdkKhem Raj2021-01-131-0/+3
| | | | | | | | | | | | Helps building static tools which depend on libyaml during build or shipped with SDK libyaml is MIT licensed so static linking would not be as prohibitive (From OE-Core rev: 1c2be08fc66c09ed7547eda172da4c99e8563091) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: upgrade 0.2.4 -> 0.2.5Wang Mingyu2020-06-041-2/+2
| | | | | | | (From OE-Core rev: b574c04a26ab49ee0588e37606dd100a939a90a9) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: upgrade 0.2.2 -> 0.2.4zhengruoqin2020-05-301-3/+3
| | | | | | | | | | -License-Update: file name changed from LICENSE to License. Copyright year updated to 2020. (From OE-Core rev: 93cd242d3d75492cd67adb59f297505851919eae) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: change SRC_URI to use httpsStefan Müller-Klieser2019-12-061-2/+2
| | | | | | | | | Change all recipes to https where we get an http 301 permanent redirect. (From OE-Core rev: e514acda9e12bccde6d3974e0fd1a37b3837191a) Signed-off-by: Stefan Müller-Klieser <s.mueller-klieser@phytec.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: update SRC_URI[md5sum] and SRC_URI[sha256sum]Yi Zhao2019-04-161-2/+4
| | | | | | | | | | Upstream appear to have regenerated the tarball, the new one is the same except the directory name changed from libyaml to yaml. Adapt to this. (From OE-Core rev: 9ab05b6ec860078df37c4ea68267ecffaa0ce38c) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: update to 0.2.2Oleksandr Kravchuk2019-04-121-5/+3
| | | | | | | | | LICENSE checksum was changed due to copyright year change. (From OE-Core rev: edc7f213ae3f976d367734cde5a1b2ee929b70ac) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: upgrade to 0.2.1Ross Burton2018-07-241-6/+4
| | | | | | | | | License changed due to copyright dates being added. (From OE-Core rev: 079df0021b0819f4b88e20ac8f3350a0f153c6bc) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: Enable nativesdk bakeBrad Bishop2016-11-151-1/+1
| | | | | | | | (From OE-Core rev: 3694176e13442068acfe54b7165d5f828190fe08) Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: update to 0.1.7Alexander Kanavin2016-09-032-36/+2
| | | | | | | | | Drop backported libyaml-CVE-2014-9130.patch (From OE-Core rev: 2dfdf483e9de5bcb24149f619b0c7fc466221204) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Add "CVE:" tag to current patches in OE-coreMariano Lopez2016-01-111-0/+1
| | | | | | | | | | | | | | The currnet patches in OE-core doesn't have the "CVE:" tag, now part of the policy of the patches. This is patch add this tag to several patches. There might be patches that I miss; the tag can be added in the future. (From OE-Core rev: 065ebeb3e15311d0d45385e15bf557b1c95b1669) Signed-off-by: Mariano Lopez <mariano.lopez@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libyaml: add a recipe from meta-oeAlexander Kanavin2015-09-122-0/+53
libyaml is a dependency of ruby (From OE-Core rev: 9c8679acb6e611d2fa6e51299b856394da9ea98d) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-06-14 00:04:38 +0000