linux/meta-openembedded.git/meta-oe/recipes-connectivity/libtorrent, branch styhead Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead 2024-04-18T06:47:22+00:00 libtorrent: remove incorrect CVE mapping 2024-04-18T06:47:22+00:00 Beniamin Sandu beniaminsandu@gmail.com 2024-04-17T22:31:32+00:00 urn:sha1:ffb9e53b12bb62d38a91478ba1ede68256222542 The CVE_PRODUCT variable is assigned automatically to BPN. Unset it for this recipe so the CVEs can be checked against the correct recipe. Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Revert "libtorrent: remove CVE mention" 2024-04-16T04:01:20+00:00 Khem Raj raj.khem@gmail.com 2024-04-10T23:04:47+00:00 urn:sha1:ad340c8fe23e7043d6fcc815dbf6462a6244352d This reverts commit 0597c931ffbadf2a2242d8ed9cccb8567953d489. libtorrent: remove CVE mention 2024-04-05T17:21:15+00:00 Beniamin Sandu beniaminsandu@gmail.com 2024-04-05T15:13:35+00:00 urn:sha1:0597c931ffbadf2a2242d8ed9cccb8567953d489 The CVE mentioned in the recipe applies to a different libtorrent library, from: https://github.com/arvidn/libtorrent Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> libtorrent: Add UPSTREAM_CHECK_GITTAGREGEX 2023-11-08T03:59:58+00:00 Peter Kjellerstedt pkj@axis.com 2023-11-07T07:12:30+00:00 urn:sha1:253e33e343ec13aa3908a237b5a3f44abc2c5c87 This makes sure only tags like "vX.Y.Z" are identified as releases. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Revert "libtorrent: upgrade 0.13.8 -> 1" 2023-11-08T03:59:58+00:00 Peter Kjellerstedt pkj@axis.com 2023-11-07T07:12:29+00:00 urn:sha1:89e86cd407e6fdac9a5f4f703ab01fc87d22843b This reverts commit 3259bc75f5cbe83623e340efd4518414ae2f7593. AUH incorrectly identified the tag "pre-merge-1" as version "1". Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> libtorrent: upgrade 0.13.8 -> 1 2023-11-06T16:47:16+00:00 Khem Raj raj.khem@gmail.com 2023-11-04T00:19:21+00:00 urn:sha1:3259bc75f5cbe83623e340efd4518414ae2f7593 Signed-off-by: Khem Raj <raj.khem@gmail.com> cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS 2023-07-27T15:54:40+00:00 Andrej Valek andrej.valek@siemens.com 2023-07-26T09:50:09+00:00 urn:sha1:8af2f17a6fa8bf282c4c27054adbea1bf0873069 - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> libtorrent: Update to tip of trunk 2023-01-21T18:02:02+00:00 Khem Raj raj.khem@gmail.com 2023-01-18T06:07:48+00:00 urn:sha1:6d0eaf9a27b7085ff7634eb302db51d2c27e9266 Drop cross compile patch as we do not need it anymore since we now use --enable-aligned License-Update: Correctly mark the license as GPL-2.0+ Signed-off-by: Khem Raj <raj.khem@gmail.com> meta-oe: ignore patched CVEs 2022-07-18T16:11:22+00:00 Davide Gardenal davidegarde2000@gmail.com 2022-07-18T11:07:06+00:00 urn:sha1:efa12676dd0676fd0aa63457d7ba360fe8a6fae2 Some old CVEs don't have a vulnerable version range in the NVD database, this causes come mismatch with cve-check. Ignore many CVEs that are picked up by the class but are patched in our products. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> recipes: Update LICENSE variable to use SPDX license identifiers 2022-03-05T01:41:45+00:00 Khem Raj raj.khem@gmail.com 2022-03-04T08:44:20+00:00 urn:sha1:14c7d8a0d7cb843ac8b0d25cc4170fa640ac1295 Signed-off-by: Khem Raj <raj.khem@gmail.com>