linux/meta-openembedded.git/meta-oe/recipes-dbs/influxdb, branch masterMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master2026-01-12T18:25:57+00:00influxdb: ignore CVE-2024-308962026-01-12T18:25:57+00:00Ankur Tyagiankur.tyagi85@gmail.com2026-01-12T10:21:04+00:00urn:sha1:2f1d7a8597596d8e51a6f6f3b62e7e5f153f6e73
As mentioned in the comment[1], vulnerability is in
/api/v2/authorizations API which only exists in 2.x, 1.x is not affected.
Details: https://nvd.nist.gov/vuln/detail/CVE-2024-30896
[1] https://github.com/influxdata/influxdb/issues/24797#issuecomment-2514690740
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb: Update module cache content2025-09-03T06:36:18+00:00Christian Lindebergchristian.lindeberg@axis.com2025-09-03T06:29:22+00:00urn:sha1:cf96ad86223302cd1ca4f8958121e26ebf5bd6cc
The Go module cache content URIs has been regenerated by listing
dependencies with "${GO_INSTALL}" instead of "${GO_IMPORT}/..." as the
package patterns.
Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb: Add spdx parameter to license URIs2025-09-02T15:57:41+00:00Christian Lindebergchristian.lindeberg@axis.com2025-09-02T14:30:29+00:00urn:sha1:f739fb9ab272218804e131e4555d867657da1794
Add an "spdx" parameter with the identified license name to the URIs in
LIC_FILES_CHECKSUM in influxdb-licenses.inc.
Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb: Do not skip it anymore2025-07-07T05:39:31+00:00Khem Rajraj.khem@gmail.com2025-06-19T15:57:45+00:00urn:sha1:c575193dbb700b493f987a43151318beeaea8ece
The gomod fetcher has all the needed modules in SRC_URI now
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb: Use GO_SRCURI_DESTSUFFIX in SRC_URI2025-07-07T05:39:31+00:00Christian Lindebergchristian.lindeberg@axis.com2025-06-23T09:42:07+00:00urn:sha1:c8d5b30af610cd7bbfe623f1cd1a87e9393d5e8b
Use the GO_SRCURI_DESTSUFFIX convenience variable for the Go main module
in the SRC_URI variable.
Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb: remove S in recipes that fetch from git via setting BB_GIT_DEFAULT_DESTSUFFIX2025-07-07T05:39:31+00:00Alper Akalperyasinak1@gmail.com2025-06-21T09:49:15+00:00urn:sha1:9587da2ba4fd0c90aee849eafb748c7c80eadcba
Removing all the S = ${WORKDIR}/git assignments works because BB_GIT_DEFAULT_DESTSUFFIX
is set to match S from bitbake.conf (which itself is set to match typical tarball
releases).
ERROR: influxdb-1.8.10-r0 do_unpack: Recipes that set S = "${WORKDIR}/git" or S = "${UNPACKDIR}/git" should remove that assignment, as S set by bitbake.conf in oe-core now works.
Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb: Use go module fetcher2025-07-07T05:39:31+00:00Christian Lindebergchristian.lindeberg@axis.com2025-06-19T14:57:38+00:00urn:sha1:1b27703d9f78feb34b652e4afd11e21f055abd33
Use the go module fetcher instead of allowing network access during the
compile task.
Apply patch to replace github.com/pkg/term with github.com/kraj/term
unconditionally to avoid conditional module dependencies.
Reorder variables according to the recipe style guide.
Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb,etcd: Skip from building2025-05-18T16:08:11+00:00Khem Rajraj.khem@gmail.com2025-05-13T16:07:21+00:00urn:sha1:d5bec49b73a656bc24a5f7176bbdb983b5eef91b
Latest layer compatibility checks have been enhanced to check for
network access during non-fetch tasks and flag it as failure, which
is now happening for these recipes since it calls go module fetcher
during do_compile
Latest gomod fetcher has got improvements and can be used for these
recipes but it needs some work. Skip them until it is fixed
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb: Update CVE status for CVE-2019-103292024-06-28T18:22:03+00:00Ninette Adhikarininette@thehoodiefirm.com2024-06-26T14:10:59+00:00urn:sha1:524acf0542cafed3f5e82cd94291a653f6cf86e1
The version don't match and only the Jenkins plugin is affected.
Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
influxdb: Do not remove non-existing files2024-05-23T15:44:41+00:00Khem Rajraj.khem@gmail.com2024-05-19T01:27:27+00:00urn:sha1:cd6e2d8f53b45108ae9aa7b2a2988452dff4a2eb
Signed-off-by: Khem Raj <raj.khem@gmail.com>