Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2026-05-21T03:27:48+00:00 2026-05-21T03:27:48+00:00 Theo Gaige tgaige.opensource@witekio.com 2026-05-19T13:26:14+00:00 urn:sha1:7acc7441941f8af0bb78700f62e926da2bbc12c9 Backport upstream fix for CVE-2026-31323 [1]. [1] https://git.kernel.org/pub/scm/utils/dash/dash.git/commit/?id=0034bfe185d3d875cebace8cb3ca5c9dabf9e0f3 Signed-off-by: Theo Gaige <tgaige.opensource@witekio.com> Reviewed-by: Bruno Vernay <bruno.vernay@se.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2025-10-30T06:43:34+00:00 Peter Marko peter.marko@siemens.com 2025-10-14T23:32:12+00:00 urn:sha1:b2a0dd6c8d2696ff4f1a1ae5e76b983f5e3e161d This removes false positive CVE-2024-21485 from cve reports. $ sqlite3 nvdcve_2-2.db sqlite> select * from products where product = 'dash'; CVE-2009-0854|dash|dash|0.5.4|=|| CVE-2024-21485|plotly|dash|||2.13.0|< CVE-2024-21485|plotly|dash|2.14.0|>=|2.15.0|< Our dash:dash did not reach major version 1 yet. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e1427013e01df44b9275908f7605e8e25fc3fd83) Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> 2024-04-07T15:36:35+00:00 Dan McGregor dan.mcgregor@usask.ca 2024-04-05T17:00:25+00:00 urn:sha1:5cfc85d2cf08fb74097e70ea300f7b01e47a5185 According to its copyright file, dash is only BSD-3-Clause. It has a build time tool from bash that's under the GPL, but only the tool's output is used, not the tool itself. So all compiled artefacts in dash appear to share the same licence. Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-12-23T16:52:22+00:00 Wang Mingyu wangmy@fujitsu.com 2022-12-20T12:12:40+00:00 urn:sha1:98480b3e1be22daba5634ee98c3f382856b1c2e7 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>