Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead 2024-08-09T21:25:16+00:00 2024-08-09T21:25:16+00:00 Wang Mingyu wangmy@fujitsu.com 2024-08-06T08:46:01+00:00 urn:sha1:adf0c1d6c090d76b1cf8e59278ec1a7485a8f211 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-07-24T15:56:45+00:00 Alexandre Truong alexandre.truong@smile.fr 2024-07-22T12:39:04+00:00 urn:sha1:c8c4433e234b4309ae783bd873e910c7f6e9fea1 Modifying existing UPSTREAM_CHECK_URI and UPSTREAM_CHECK_REGEX fix UNKNOWN_BROKEN status from running devtool check-upgrade-status. The next version of the package can be found from upstream sources. Signed-off-by: Alexandre Truong <alexandre.truong@smile.fr> Reviewed-by: Yoann Congal <yoann.congal@smile.fr> 2024-07-16T15:24:26+00:00 Markus Volk f_l_k@t-online.de 2024-07-16T12:46:38+00:00 urn:sha1:975c047a1fe7805f610d83c685ae527e55c74c3c Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-06-14T17:23:13+00:00 Khem Raj raj.khem@gmail.com 2024-06-14T14:28:31+00:00 urn:sha1:d4a7efe3a83acd29500f8172665cab4304bfd36b Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-05-23T15:44:44+00:00 Khem Raj raj.khem@gmail.com 2024-05-13T21:16:55+00:00 urn:sha1:ffc64e9c6fee0af7eea3466135416d011172a5e6 Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-03-08T18:07:26+00:00 Mingli Yu mingli.yu@windriver.com 2024-03-07T05:51:36+00:00 urn:sha1:05afab094d4a264c0a25ad3b36cae0ef3fb33e56 * Remove one backported patch and rebase two patches to the new version. * License update: Copyright year updated to 2023 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-07-27T15:54:40+00:00 Andrej Valek andrej.valek@siemens.com 2023-07-26T09:50:09+00:00 urn:sha1:8af2f17a6fa8bf282c4c27054adbea1bf0873069 - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-06-05T05:29:45+00:00 Peter Marko peter.marko@siemens.com 2023-06-02T09:18:20+00:00 urn:sha1:81c18e0797694d74198a737dac08a3e8f631cac9 Investigation based on https://bugzilla.mozilla.org/show_bug.cgi?id=1774654 leads to following: * fixed in 3.87 (https://hg.mozilla.org/projects/nss/rev/a7f363511333b8062945557607691002fd6e40b9) * changed code was introduced in 3.77 (https://hg.mozilla.org/projects/nss/rev/be6a97823bfe10fa08e17c9584938a2d525a38da) * NVD claims fix in 3.81, but there is no evidence for it in commit history (https://hg.mozilla.org/projects/nss/graph/a7f363511333b8062945557607691002fd6e40b9) * Debian also says for old versions "nss <not-affected> (Vulnerable code not present/was introduced later)" (https://security-tracker.debian.org/tracker/CVE-2022-3479) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-04-11T03:13:28+00:00 Wentao Zhang wentao.zhang@windriver.com 2023-04-11T02:59:39+00:00 urn:sha1:366af48fa5661425f6daa6f440cb06cca37e52e4 The expiration date of the "PayPalEE.cert" test certificate in the nss package is Jan 12 2022 and causing a test failure. Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2022-12-09T18:39:27+00:00 Mathieu Dubois-Briand mbriand@witekio.com 2022-12-08T14:23:45+00:00 urn:sha1:90645db2fa078b50ec6807c75acea913b49ea669 These CVEs only affect libnssdbm, compiled when --enable-legacy-db is used. https://bugzilla.mozilla.org/show_bug.cgi?id=1360782#c6 https://bugzilla.mozilla.org/show_bug.cgi?id=1360778#c8 https://bugzilla.mozilla.org/show_bug.cgi?id=1360900#c6 https://bugzilla.mozilla.org/show_bug.cgi?id=1360779#c9 Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>