<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/flex/flex_2.6.0.bb, branch halstead/hashclient</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=halstead%2Fhashclient</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=halstead%2Fhashclient'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2019-12-04T12:30:58+00:00</updated>
<entry>
<title>flex: update to 2.6.4</title>
<updated>2019-12-04T12:30:58+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2019-11-29T13:11:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e8543db1c6e4a3ae6d6ed4481114090fdd43fa8f'/>
<id>urn:sha1:e8543db1c6e4a3ae6d6ed4481114090fdd43fa8f</id>
<content type='text'>
Add a backport patch that addresses segfaults on newer glibc versions.

Remove:
CVE-2016-6354.patch (backport)
0002-avoid-c-comments-in-c-code-fails-with-gcc-6.patch (issue fixed upstream)
do_not_create_pdf_doc.patch (issue fixed upstream)

ptest pass rate is 100%.

(From OE-Core rev: a0fe05f3ffd67dc42e053c20bd019bb9d463d0ad)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: Clarify BSD license variant</title>
<updated>2019-10-15T13:16:11+00:00</updated>
<author>
<name>Christophe PRIOUZEAU</name>
<email>christophe.priouzeau@st.com</email>
</author>
<published>2019-10-07T13:08:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fb8613fc4ed361c953087207b34b97ca23a8d4e4'/>
<id>urn:sha1:fb8613fc4ed361c953087207b34b97ca23a8d4e4</id>
<content type='text'>
The license of flex is BSD-2-Clause.

(From OE-Core rev: e8118c5cf205e8bbb005486d7b3e1f7be1e27aac)

Signed-off-by: Christophe Priouzeau &lt;christophe.priouzeau@st.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: set CVE_PRODUCT to include vendor</title>
<updated>2019-07-18T11:16:19+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2019-07-17T10:45:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=7f5f884e555e9fc8afbbb1dd666026241f64789b'/>
<id>urn:sha1:7f5f884e555e9fc8afbbb1dd666026241f64789b</id>
<content type='text'>
There are many projects called Flex and they have CVEs, so also set the vendor
to remove these false positives.

(From OE-Core rev: 0598ccdcb31e16f1d1227197591b10ba441fcfe2)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>gettext/flex/m4/bzip2/gzip/parted/slang/attr: Add make to -ptest packages</title>
<updated>2019-05-16T15:35:12+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2019-05-16T11:45:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fd87837e367049fb58b2941dbf46a83729a7866a'/>
<id>urn:sha1:fd87837e367049fb58b2941dbf46a83729a7866a</id>
<content type='text'>
This solves ptest runtime errors where make was missing causing the ptests
to fail.

(From OE-Core rev: 2ade2c53388c92d36b8b30dae30670fd96ca4821)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: create separate package for libfl</title>
<updated>2018-03-08T18:39:32+00:00</updated>
<author>
<name>Andre McCurdy</name>
<email>armccurdy@gmail.com</email>
</author>
<published>2018-03-06T02:41:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=3a7f48ebcbf201b1a22fa97804673e559701f321'/>
<id>urn:sha1:3a7f48ebcbf201b1a22fa97804673e559701f321</id>
<content type='text'>
Target binaries linked with libfl currently generate a runtime
dependency on the entire flex package (and therefore m4 and bison
too). Copy Debian's approach and create a separate package for libfl.

(From OE-Core rev: 1bc6ad19d56498847dc95cce0ea371ba77eff143)

Signed-off-by: Andre McCurdy &lt;armccurdy@gmail.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex_2.6.0.bb: remove build host references</title>
<updated>2017-08-31T16:41:41+00:00</updated>
<author>
<name>Juro Bystricky</name>
<email>juro.bystricky@intel.com</email>
</author>
<published>2017-08-28T20:28:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=176bbbf8127e0b4a2ed8df2f7b203849210d5282'/>
<id>urn:sha1:176bbbf8127e0b4a2ed8df2f7b203849210d5282</id>
<content type='text'>
Remove build host references from flex-ptest package.

[YOCTO #11667]

(From OE-Core rev: e395bc4ab6c4a819958a761ee24de96f31294139)

Signed-off-by: Juro Bystricky &lt;juro.bystricky@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>Revert "flex: upgrade to 2.6.2"</title>
<updated>2017-03-01T23:27:06+00:00</updated>
<author>
<name>Trevor Woerner</name>
<email>twoerner@gmail.com</email>
</author>
<published>2017-02-10T20:13:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=2d238896de3dd946022eab4c447243bd33641a14'/>
<id>urn:sha1:2d238896de3dd946022eab4c447243bd33641a14</id>
<content type='text'>
This reverts commit 3632abd01abb8dfff230e18f828af705da488f97.

Multiple people have expressed issues with flex-2.6.2; personally I had
problems compiling libsepol from meta-selinux (for libselinux). I tried
upgrading to flex-2.6.3, but that caused binutils-cross_2.27 to fail.

The simplest for now is to downgrade to flex-2.6.0.

(From OE-Core rev: b45776bbdafa6f6afe815714ac329494ad57e644)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: upgrade to 2.6.2</title>
<updated>2017-01-16T18:05:12+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2017-01-09T15:28:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=2bc83c8a3b87f29b62fe778ca1e8790604b72d5f'/>
<id>urn:sha1:2bc83c8a3b87f29b62fe778ca1e8790604b72d5f</id>
<content type='text'>
Patches dropped as they are merged upstream:
- CVE-2016-6354.patch
- 0002-avoid-c-comments-in-c-code-fails-with-gcc-6.patch
- do_not_create_pdf_doc.patch

Apply a patch from github to simplify cross-compilation and not need a
flex-native to bootstrap.

(From OE-Core rev: 3632abd01abb8dfff230e18f828af705da488f97)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: Backport buffer overflow fix</title>
<updated>2016-10-11T07:27:27+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2016-10-10T08:30:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=55a8fe7e49000ce32b9858b93595693cfca0ccba'/>
<id>urn:sha1:55a8fe7e49000ce32b9858b93595693cfca0ccba</id>
<content type='text'>
Fix a heap-based buffer overflow in yy_get_next_buffer()
(CVE-2016-6354).

(From OE-Core rev: 68d56306baa21e66756fb44c6c5680e725b1e3bc)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: Update upstream check uri</title>
<updated>2016-10-11T07:27:26+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2016-10-10T08:30:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=2109c620d42c099b633a4da4c2f0c0685b0a9b24'/>
<id>urn:sha1:2109c620d42c099b633a4da4c2f0c0685b0a9b24</id>
<content type='text'>
Flex has moved to github, update UPSTREAM_CHECK_URI.

(From OE-Core rev: 591a5aecfe4a52dc3b9e11883334c604dd9fc957)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
