linux/meta-openembedded.git/meta-oe/recipes-devtools/yasm, branch master

yasm: drop recipe

2025-12-02T17:18:20+00:00

Yasm was introduced as a rewrite of nasm, however its commits have dried up over the years, while its unmitigated CVEs keep piling up. Also, nasm is a healthier project with regular contributions still. There are no known recipes depending on yasm. Let's remove it. Cc: Ross Burton Cc: Yogesh Tyagi Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

yasm: patch CVE-2021-33456

2025-11-15T23:49:44+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2021-33465 The patch was taken from Debian: https://sources.debian.org/patches/yasm/1.3.0-8/1020-hash-null-CVE-2021-33456.patch/ Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

yasm: patch CVE-2021-33464

2025-11-15T23:49:44+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2021-33464 The patch was taken from Debian: https://sources.debian.org/patches/yasm/1.3.0-8/1010-nasm-pp-no-env-CVE-2021-33464.patch/ Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

yasm: patch CVE-2023-29579

2025-11-15T23:49:44+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2023-29579 The patch was taken from Debian: https://sources.debian.org/patches/yasm/1.3.0-8/1000-x86-dir-cpu-CVE-2023-29579.patch/ Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

yasm: add alternative CVE_PRODUCT

2025-11-15T23:49:44+00:00

There are multiple vendors for yasm: $ sqlite3 ./nvdcve_2-2.db "select distinct vendor, product from products where product = 'yasm';" tortall|yasm yasm_project|yasm Both products refer to the same application Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

meta-openembedded/all: adapt to UNPACKDIR changes

2025-06-25T13:44:52+00:00

Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin Signed-off-by: Khem Raj

yasm: fix build with gcc-15

2025-04-24T02:35:01+00:00

* fixes: libyasm/bitvect.h:86:32: error: cannot use keyword 'false' as enumeration constant 86 | typedef enum boolean { false = FALSE, true = TRUE } boolean; | ^~~~~ libyasm/bitvect.h:86:32: note: 'false' is a keyword with '-std=c23' onwards as suggested in: https://github.com/yasm/yasm/issues/283#issuecomment-2661108816 Signed-off-by: Martin Jansa Signed-off-by: Khem Raj

yasm: update to latest git revision

2025-01-21T04:20:26+00:00

Last tag is from 2014, but bugfixing continued and last commit is from year 2024. Additional 87 commits are present, mostly bugfixes. PV already has "+git" although it was exactly on tag, no edit needed. Drop 3 patches which are included in current git version. Add CVE_STATUS for 2 CVEs from those patches. Also mark one additional CVE as fixed: CVE-2021-33454. Stack trace from https://github.com/yasm/yasm/issues/166 References the same line of code as corrected in https://github.com/yasm/yasm/pull/244 Signed-off-by: Peter Marko Signed-off-by: Khem Raj

unionfs-fuse, dropwatch, postgresql, yasm, multipath-tools, python3-pybind11: add missing Upstream-Status

2024-03-17T20:10:09+00:00

* add Pending to .patch files where it was accidentally droped with upgrades or modifications in: f88e5b146e postgresql: upgrade 15.5 -> 16.2 c904e169db multipath-tools: upgrade 0.9.3 -> 0.9.8 105be9b3d9 unionfs-fuse: upgrade 2.2 --> 3.4 or new patches where the author didn't notice/care: 2a7f74cdb0 dropwatch: Use header files from sysroot instead of build host f5cc9f272a yasm: improve reproducibility 39028d0d9d python3-pybind11: Restore strip prevention patch authors of these added to CC, please be more careful with removing or not adding these or enable patch-status in ERROR_QA for your builds, see: https://lists.openembedded.org/g/openembedded-core/topic/104922136#197113 * added with: for p in `/OE/layers/openembedded-core/scripts/contrib/patchreview.py -v . | grep Missing.Upstream-Status.tag | sed 's/.*(//g;s/)$//g'`; do grep -q ^Upstream-Status: $p || sed -i "s/^---$/\nUpstream-Status: Pending\n---/g" $p; grep -q ^Upstream-Status: $p || sed -i "1iUpstream-Status: Pending\n" $p; done Signed-off-by: Martin Jansa Signed-off-by: Khem Raj

yasm: improve reproducibility

2024-02-27T17:05:18+00:00

Place reproducible build date in source files instead of actual build date if SOURCE_DATE_EPOCH available. Signed-off-by: Oleh Matiusha Signed-off-by: Khem Raj