linux/poky.git/meta/recipes-core/zlib, branch styhead

zlib: Enable PIE for native builds

2024-08-29T20:58:19+00:00

The zlib crate in rust uses libz.a which comes from the zlib-native build. Some distros like alma9, fedora etc. do not have PIE enabled by default for system compiler. This leads to target-rust-ccld linking error for cargo-native as (line no 22936): error: linking with `/home/pokybuild/yocto-worker/qemuarm64/build/build/tmp/work/x86_64-linux/cargo-native/1.79.0/wrapper/target-rust-ccld` failed: exit status: 1 https://autobuilder.yoctoproject.org/typhoon/#/builders/42/builds/9385/steps/13/logs/stdio Hence, enable PIE option to CFLAGS for native builds. (From OE-Core rev: 7146d260f655fa924461333c8c2944ebb93b2b3c) Signed-off-by: Yash Shinde Signed-off-by: Richard Purdie

zlib: Add CVE_PRODUCT to exclude false positives

2024-08-09T21:33:38+00:00

To avoid false positives (such as CVE-2023-6992, cloudflare:zlib), add a CVE_PRODUCT to identify the vendors that have been used. Removing the present existing CVE_STATUS for CVE-2023-6992. (From OE-Core rev: 119b775b36dfd51286493763cffb6e965893b8fd) Signed-off-by: Het Patel Signed-off-by: Richard Purdie

siteconfig: Drop siteconfig class/code/support

2024-05-31T15:58:36+00:00

The siteconfig code was only used for 5 cache values. The complexity added to sstate to support this code was considerable and the runtime much more significant than any benefit the cache files would have added. Drop the support for this which was only used minimally for ncurses and zlib. (From OE-Core rev: f3766dc038f7ba9780ddaf5eb8d27385ea31d7d0) Signed-off-by: Richard Purdie

zlib: upgrade 1.3 -> 1.3.1

2024-02-16T15:14:26+00:00

Refresh local patch. Changelog: https://github.com/madler/zlib/releases/tag/v1.3.1 (From OE-Core rev: 186475e244d9622817b5a50e83cbfe1e4ed78e34) Signed-off-by: Denys Dmytriyenko Signed-off-by: Richard Purdie

zlib: ignore CVE-2023-6992

2024-01-23T11:53:41+00:00

This CVE is for iCPE cloudflare:zlib. Alternative to ignoring would be to limit CVE_PRODUCT, but historic CVEs already have two - gnu:zlib and zlib:zlib. So limiting it could miss future CVEs. (From OE-Core rev: 9f953a1cd832f03f0b3666168addf45fd4fc8d14) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie

zlib: ignore CVE-2023-45853

2023-10-26T14:29:34+00:00

This CVE relates to a bug in the minizip tool, but we don't build that. (From OE-Core rev: a32f285501b459cfe18e3135a3c531b63f58034c) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

zlib: upgrade 1.2.13 -> 1.3

2023-09-02T17:23:06+00:00

Changelog: ============ - Remove K&R function definitions and zlib2ansi - Fix bug in deflateBound() for level 0 and memLevel 9 - Fix bug when gzungetc() is used immediately after gzopen() - Fix bug when using gzflush() with a very small buffer - Fix crash when gzsetparams() attempted for transparent write - Fix test/example.c to work with FORCE_STORED - Rewrite of zran in examples (see zran.c version history) - Fix minizip to allow it to open an empty zip file - Fix reading disk number start on zip64 files in minizip - Fix logic error in minizip argument processing - Add minizip testing to Makefile - Read multiple bytes instead of byte-by-byte in minizip unzip.c - Add memory sanitizer to configure (--memory) - Various portability improvements - Various documentation improvements - Various spelling and typo corrections (From OE-Core rev: 369780c635cb99a3d93c38dc4e3944eba5a2c2cd) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

zlib: upgrade 1.2.12 -> 1.2.13

2022-10-26T11:28:39+00:00

Drop a number of patches whicih have been merged upstream. (From OE-Core rev: 115eb5326dc7f9256d58147b3655cd13d5994cfc) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

zlib: do out-of-tree builds

2022-10-26T11:28:39+00:00

zlib supports out-of-tree builds, so do them. (From OE-Core rev: e8bf682e9ccf2ddce5149f01ba788ca813329221) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

zlib: use .gz archive and set a PREMIRROR

2022-10-25T12:42:03+00:00

When a new zlib release is made, the top-level URL is no longer available and it is only available as a .gz under the /fossils/ directory. When this happens the source fetch fails and bitbake noisily warns that it is using the mirrors. Avoid this by using the .gz tarball and add the /fossils/ directory to PREMIRRORS so fetches will check there too. (From OE-Core rev: c67f71abc61afec701c50e4e7941128eb701fb0a) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie