<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/flex/flex_2.6.4.bb, branch styhead-5.1.4</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=styhead-5.1.4</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=styhead-5.1.4'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2024-03-19T15:25:12+00:00</updated>
<entry>
<title>bash/flex: Ensure BUILD_FLAGS doesn't leak onto target</title>
<updated>2024-03-19T15:25:12+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2024-03-16T15:43:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=54441215bdac4ac3bde1b009b27194edcf7f8147'/>
<id>urn:sha1:54441215bdac4ac3bde1b009b27194edcf7f8147</id>
<content type='text'>
The ptest packages were leaking BUILD_LDFLAGS into the Makefile used
on target. Remove these values instead.

(From OE-Core rev: 599132c7794a1192ddd257669798a3ec6d1191bb)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS</title>
<updated>2023-07-21T10:52:26+00:00</updated>
<author>
<name>Andrej Valek</name>
<email>andrej.valek@siemens.com</email>
</author>
<published>2023-07-20T07:19:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c15e506a4674e558922c5a75512ca2b5c296cd44'/>
<id>urn:sha1:c15e506a4674e558922c5a75512ca2b5c296cd44</id>
<content type='text'>
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)

Signed-off-by: Andrej Valek &lt;andrej.valek@siemens.com&gt;
Reviewed-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta: fix version checks in all github recipes using the github-releases class</title>
<updated>2022-09-28T07:01:10+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2022-09-27T12:09:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=afefe7de281e558ed823460f80ddc631e718feb3'/>
<id>urn:sha1:afefe7de281e558ed823460f80ddc631e718feb3</id>
<content type='text'>
(From OE-Core rev: b04316bdd28b7945c2c91b4e43c007b650eedc14)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>elfutils/flex: Disable parallel make ptest compile</title>
<updated>2022-06-25T20:13:40+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-06-25T07:18:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d891a796cc69a7bf4fdf366c685a960ffb707f46'/>
<id>urn:sha1:d891a796cc69a7bf4fdf366c685a960ffb707f46</id>
<content type='text'>
The recent change enabling parallel make for ptest compile/install caused
autobuilder failures in these two recipes. Disable parallel make here
for now until someone can debug the race and get it fixed (preferably
upstream).

(From OE-Core rev: 12755e3e771eb2f1628e2b3dd7138c8766973d82)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta/scripts: Automated conversion of OE renamed variables</title>
<updated>2022-02-21T23:37:27+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-02-16T20:33:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=71ef3191938da772b07274165dd3a85c2ed011f1'/>
<id>urn:sha1:71ef3191938da772b07274165dd3a85c2ed011f1</id>
<content type='text'>
(From OE-Core rev: aa52af4518604b5bf13f3c5e885113bf868d6c81)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers</title>
<updated>2022-02-20T16:45:25+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-02-18T17:15:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b0130fcf91daee0d905af755302fabe608da141c'/>
<id>urn:sha1:b0130fcf91daee0d905af755302fabe608da141c</id>
<content type='text'>
An automated conversion using scripts/contrib/convert-spdx-licenses.py to
convert to use the standard SPDX license identifiers. Two recipes in meta-selftest
were not converted as they're that way specifically for testing. A change in
linux-firmware was also skipped and may need a more manual tweak.

(From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: Add CVE-2019-6293 to exclusions for checks</title>
<updated>2021-09-07T20:54:11+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-09-06T12:49:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8632de2d7a77042c1f1b7454d4bc3b10968bb9e4'/>
<id>urn:sha1:8632de2d7a77042c1f1b7454d4bc3b10968bb9e4</id>
<content type='text'>
CVE is effectively disputed - yes there is stack exhaustion but no bug and it
is building the parser, not running it, effectively similar to a compiler ICE.
Upstream no plans to address and there is no security issue.

https://github.com/westes/flex/issues/414

(From OE-Core rev: 0cae5d7a24bedf6784781b62cbb3795a44bab4d1)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>Convert to new override syntax</title>
<updated>2021-08-02T14:44:10+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-07-28T22:28:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=bb6ddc3691ab04162ec5fd69a2d5e7876713fd15'/>
<id>urn:sha1:bb6ddc3691ab04162ec5fd69a2d5e7876713fd15</id>
<content type='text'>
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py &lt;oe-core directory&gt;

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: correct license information</title>
<updated>2021-05-28T05:41:03+00:00</updated>
<author>
<name>Nikolay Papenkov</name>
<email>n.papenkov@inango-systems.com</email>
</author>
<published>2021-05-25T11:23:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=40d3366bea8d2417e89a37c6f2d38e1542160342'/>
<id>urn:sha1:40d3366bea8d2417e89a37c6f2d38e1542160342</id>
<content type='text'>
License-Update: Corrected license information

flex package is under two licenses:
- "BSD-3-Clause" is provided in top-level COPYING file; the license
  actually include third obligation (without the actual "3" numbering)
- "LGPL-2.0+" is explained by src/gettext.h

(From OE-Core rev: 7beaae812f55a43797a459f3ad25f1be121bdbe1)

Signed-off-by: Dmitry Kisil &lt;d.kisil@inango-systems.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: Fix --noline option behavior</title>
<updated>2021-01-20T22:46:18+00:00</updated>
<author>
<name>Oleksiy Obitotskyy</name>
<email>oobitots@cisco.com</email>
</author>
<published>2021-01-19T12:49:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d610e691d09faeff25573276dfe480feb6839c15'/>
<id>urn:sha1:d610e691d09faeff25573276dfe480feb6839c15</id>
<content type='text'>
Option --noline or -L does not handled properly.
So generated code contains #line directives with
file absolute path and prevents to create
reproducible builds.

(From OE-Core rev: 0bf2cb7dc2123f220accf1542c2ae4c4b4b8275a)

Signed-off-by: Oleksiy Obitotskyy &lt;oobitots@cisco.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
