Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2025-10-30T06:43:31+00:00 2025-10-30T06:43:31+00:00 Peter Marko peter.marko@siemens.com 2025-10-11T12:36:27+00:00 urn:sha1:d27a9c3b6e416167f18c1d476c5838ee94987884 This will remove false-positive CVE-2024-50655 from reports. There are different emlog components from other vendors around. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d8d45d909315f5c784234261bb3e97d2e1f0a102) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2023-11-14T15:35:05+00:00 Yoann Congal yoann.congal@smile.fr 2023-11-14T10:35:12+00:00 urn:sha1:3bd22863ce8de903a550cfd8461a4ac1954e5fab CVE-2022-3968 & CVE-2023-43291 apply to the other "emlog" and can be safely ignored. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-11-09T06:51:28+00:00 Khem Raj raj.khem@gmail.com 2023-11-09T02:17:41+00:00 urn:sha1:59410b1587fd29ba9351a00b6abd1b775159f041 Its not needed anymore. Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-10-30T22:25:03+00:00 Khem Raj raj.khem@gmail.com 2023-10-30T22:23:58+00:00 urn:sha1:08edc0b6ace0d04688a5617cf05546a7b8ba6cca This is 0.70 release with few more commits on top. Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-07-27T15:54:40+00:00 Andrej Valek andrej.valek@siemens.com 2023-07-26T09:50:09+00:00 urn:sha1:8af2f17a6fa8bf282c4c27054adbea1bf0873069 - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-07-14T03:33:23+00:00 Khem Raj raj.khem@gmail.com 2023-07-13T22:10:03+00:00 urn:sha1:15da208e526786febabbd24e1bc15bb0de55d8e1 Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-06-21T16:15:20+00:00 Martin Jansa Martin.Jansa@gmail.com 2023-06-21T16:09:11+00:00 urn:sha1:be8c765c7c4ed48404da8fd8e813c9f3ab5ad415 There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-04-05T22:56:47+00:00 Peter Kjellerstedt pkj@axis.com 2023-04-04T23:50:47+00:00 urn:sha1:2e0a581bee7fc15a78f6e19ba1e596930edee414 With the exception of paho-mqtt-cpp, the double protocol= attributes were added to the SRC_URIs when protocol=https was added to all SRC_URIs fetching from github.com in commit b402a3076f (recipes: Update SRC_URI branch and protocols). Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-07-06T04:08:14+00:00 Davide Gardenal davidegarde2000@gmail.com 2022-07-04T09:40:55+00:00 urn:sha1:eaf1ea2e1fe9201af66426cdab0ae680362fbf83 This product is not present in the NVD database but another one with exactly the same name is in fact present. For that reason cve-check is outputting CVEs that are unrelated so they can be ignored. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-03-05T01:41:45+00:00 Khem Raj raj.khem@gmail.com 2022-03-04T08:44:20+00:00 urn:sha1:14c7d8a0d7cb843ac8b0d25cc4170fa640ac1295 Signed-off-by: Khem Raj <raj.khem@gmail.com>