<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/conf/distro, branch hardknott</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=hardknott</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=hardknott'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2022-03-02T00:22:13+00:00</updated>
<entry>
<title>uninative: Upgrade to 3.5</title>
<updated>2022-03-02T00:22:13+00:00</updated>
<author>
<name>Michael Halstead</name>
<email>mhalstead@linuxfoundation.org</email>
</author>
<published>2022-02-11T18:10:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ee5299bca182e86adb513bc80c19bde9b8aade51'/>
<id>urn:sha1:ee5299bca182e86adb513bc80c19bde9b8aade51</id>
<content type='text'>
Add support for glibc 2.35.

(From OE-Core rev: 5bde365accec6837dc5751e1ac01b767898a2c5d)

Signed-off-by: Michael Halstead &lt;mhalstead@linuxfoundation.org&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 347b8c87fb4e2c398644f900728cf6e22ba4516d)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
(cherry picked from commit eeae63c343c8ebd418679915ee20aa8c02fa0fdc)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>default-distrovars.inc: Switch connectivity check to a yoctoproject.org page</title>
<updated>2022-02-20T15:32:27+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-02-11T17:42:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=35eb6d39517ccf9f69b394fa0d6e51f52d48ebdf'/>
<id>urn:sha1:35eb6d39517ccf9f69b394fa0d6e51f52d48ebdf</id>
<content type='text'>
example.com is proving unreliable at present so switch to our own connectivity
page instead. That page is very simple avoiding app overhead on our web server
which was an original reason for switching to example.com.

(From OE-Core rev: 3d9f68e06736817871d8694fe0c6e779c005872b)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit dc6b043cb75c5751b5a98afd2201aa31f9b4b9f6)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>gcc: upgrade to gcc-10.3 version</title>
<updated>2022-01-31T21:56:01+00:00</updated>
<author>
<name>Pgowda</name>
<email>pgowda.cve@gmail.com</email>
</author>
<published>2022-01-22T11:15:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8e1796eef4e6aae3ad0673583d505c47a5563c2a'/>
<id>urn:sha1:8e1796eef4e6aae3ad0673583d505c47a5563c2a</id>
<content type='text'>
gcc-10.2 in Hardknott branch has been upgraded to gcc-10.3 version
that includes many bug fixes.
Regression tested on X86-64, Arm and Aarch64 without issues.

(From OE-Core rev: 87fbe11fbe04a6f2d3e798d282935b26fbc43e77)

Signed-off-by: pgowda &lt;pgowda.cve@gmail.com&gt;
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve-extra-exclusions: add db CVEs to exclusion list</title>
<updated>2021-12-15T07:40:29+00:00</updated>
<author>
<name>Steve Sakoman</name>
<email>steve@sakoman.com</email>
</author>
<published>2021-12-05T17:21:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=a96b0ad6eb9be742d640638ddd4a9d875d7694c4'/>
<id>urn:sha1:a96b0ad6eb9be742d640638ddd4a9d875d7694c4</id>
<content type='text'>
Since Oracle relicensed bdb, the open source community is slowly but surely replacing bdb with
supported and open source friendly alternatives. As a result these CVEs are unlikely to ever be fixed.

(From OE-Core rev: b3056b937a76ddd6c02cd6b17e7a0c178931add4)

Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 679fc70f907fb221f4541ebf30c1610e937209b7)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>uninative: Add version to uninative tarball name</title>
<updated>2021-12-05T12:35:43+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-11-12T13:51:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5648b1612a76dd5fc93a106b7b323bc1ff41e34c'/>
<id>urn:sha1:5648b1612a76dd5fc93a106b7b323bc1ff41e34c</id>
<content type='text'>
uninative works via hashes and doesn't need the version in the tarball name but
it does make things easier to inspect in DL_DIR. There were reasons such as
ease of publication of the build tarballs but we can handle those differently
now and the signature issues from the early code aren't an issue now. From 3.4
onwards we can use a version'd name.

[YOCTO #12970]

(From OE-Core rev: e3ba0041ccb9633ec21241cb6852aa50c2663677)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit dadba70d6a24d8ebb5576598efffa973151c7218)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta/scripts: Manual git url branch additions</title>
<updated>2021-11-21T11:40:35+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-10-29T12:34:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ab13c838e4fd97b1e4ddba3828b290c4098a97f6'/>
<id>urn:sha1:ab13c838e4fd97b1e4ddba3828b290c4098a97f6</id>
<content type='text'>
Following the scripted conversion adding branches to git://
SRC_URI entries, add the remaining references, mainly in the selftests
and recipetool.

(From OE-Core rev: 87ac0c0a643cca436784dfcd86472adcf2e04130)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 5340c0d688036c1be6c938f05d8a8c1e3b49ec38)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>uninative: Upgrade to 3.4</title>
<updated>2021-11-01T10:36:35+00:00</updated>
<author>
<name>Michael Halstead</name>
<email>mhalstead@linuxfoundation.org</email>
</author>
<published>2021-08-31T20:54:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b035d49f9406833017ec528268ce028d835de86e'/>
<id>urn:sha1:b035d49f9406833017ec528268ce028d835de86e</id>
<content type='text'>
This adds a patch to glibc which allows it to work with Docker and
clone3 syscall issues cased by EPERM vs ENOSYS.

(From OE-Core rev: 47e638ada946af7d69fb65619858a1e4564613c4)

Signed-off-by: Michael Halstead &lt;mhalstead@linuxfoundation.org&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>uninative: Upgrade to 3.3, support glibc 2.34</title>
<updated>2021-10-29T10:17:21+00:00</updated>
<author>
<name>Michael Halstead</name>
<email>mhalstead@linuxfoundation.org</email>
</author>
<published>2021-08-16T23:03:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=a980a7913683329088df628b98f4b50bdf5f1448'/>
<id>urn:sha1:a980a7913683329088df628b98f4b50bdf5f1448</id>
<content type='text'>
(From OE-Core rev: 8759cc146661bd8d06ab0e8b4168b1d9e6bd16c2)

Signed-off-by: Michael Halstead &lt;mhalstead@linuxfoundation.org&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 4aa4dcd5f31657073f2207a9a4a43247322c7eb1)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>Update mailing list address</title>
<updated>2021-10-07T14:10:40+00:00</updated>
<author>
<name>Jon Mason</name>
<email>jdmason@kudzu.us</email>
</author>
<published>2021-09-16T22:40:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=dbfbe31cffafd429b1a8db0cd976d4ef28ced51c'/>
<id>urn:sha1:dbfbe31cffafd429b1a8db0cd976d4ef28ced51c</id>
<content type='text'>
(From OE-Core rev: c2531bf2503e8dd736bba0acde9e329a439f3fda)

Signed-off-by: Jon Mason &lt;jdmason@kudzu.us&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 83169c33f7585da25560784f79eaad2c6f029f3c)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve-extra-exclusions.inc: add exclusion list for intractable CVE's</title>
<updated>2021-05-30T07:19:35+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-05-06T17:12:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f8298d40148f2754414761a193f52e409ad2c434'/>
<id>urn:sha1:f8298d40148f2754414761a193f52e409ad2c434</id>
<content type='text'>
The preferred methods for CVE resolution are:

1. Version upgrades where possible
2. Patches where not possible
3. Database updates where version info is incorrect
4. Exclusion from checking where it is determined that the CVE
   does not apply to our environment

In some cases none of these methods are possible. For example the
CVE may be decades old with no apparent resolution, and with broken
links that make further research impractical. Some CVEs are vauge
with no specific action the project can take too.

This patch creates a mechanism for users to remove this type of
CVE from the cve-check results via an optional include file.

Based on an initial patch from Steve Sakoman &lt;steve@sakoman.com&gt;
but extended heavily by RP.

(From OE-Core rev: 4a70af7b89d2ddff341b724a97cb96987874a3b0)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
