<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/flex, branch walnascar-5.2</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=walnascar-5.2</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=walnascar-5.2'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2025-03-27T11:19:04+00:00</updated>
<entry>
<title>flex: build occasional build failures in test suite compile</title>
<updated>2025-03-27T11:19:04+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2025-03-26T12:11:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=bf94ea1cc4e966fa2cf55206389f9c34fbd5419d'/>
<id>urn:sha1:bf94ea1cc4e966fa2cf55206389f9c34fbd5419d</id>
<content type='text'>
GNU Make 4.4 has added --shuffle, which randomly orders build jobs and
is great at exposing missing dependencies. Using this the known problem
with the flex test suite build was found and resolved, so remove the
workaround of doing a non-parallel build and apply a patch.

Also remove redundant Make variables that shouldn't be needed to build
the test suite.

(From OE-Core rev: 1bc37e10690dc906da41b9592bc8776bddf4b90b)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: remove obsolete disable-tests.patch</title>
<updated>2025-03-27T11:19:04+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2025-03-26T12:11:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=760a61a7071fb0765763041f2f6fa22cf7039f31'/>
<id>urn:sha1:760a61a7071fb0765763041f2f6fa22cf7039f31</id>
<content type='text'>
We added this because automake was causing things to be built, but now
this doesn't seem to be the case:

  all: all-am

  all-am: Makefile $(SCRIPTS)

  SCRIPTS = $(dist_noinst_SCRIPTS)

  dist_noinst_SCRIPTS = tableopts.sh

tableopts.sh is a source file that is both in the tarballs and git.

Thus, remove the patch.

(From OE-Core rev: 13e8a2831abcb9edd352fcdc6d1f3be0670b1242)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: update CVE_PRODUCT</title>
<updated>2025-02-20T11:57:49+00:00</updated>
<author>
<name>Marta Rybczynska</name>
<email>rybczynska@gmail.com</email>
</author>
<published>2025-02-18T15:30:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4e1b34de24ce0acfa925f9191d9c7946af8f2fcc'/>
<id>urn:sha1:4e1b34de24ce0acfa925f9191d9c7946af8f2fcc</id>
<content type='text'>
NVD uses westes:flex for recent CVEs in flex, based on the GitHub repo

(From OE-Core rev: 8bb6aa4b4acb16c59b66aa55b33053e3e8749e72)

Signed-off-by: Marta Rybczynska &lt;marta.rybczynska@ygreky.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>bash/flex: Ensure BUILD_FLAGS doesn't leak onto target</title>
<updated>2024-03-19T15:25:12+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2024-03-16T15:43:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=54441215bdac4ac3bde1b009b27194edcf7f8147'/>
<id>urn:sha1:54441215bdac4ac3bde1b009b27194edcf7f8147</id>
<content type='text'>
The ptest packages were leaking BUILD_LDFLAGS into the Makefile used
on target. Remove these values instead.

(From OE-Core rev: 599132c7794a1192ddd257669798a3ec6d1191bb)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS</title>
<updated>2023-07-21T10:52:26+00:00</updated>
<author>
<name>Andrej Valek</name>
<email>andrej.valek@siemens.com</email>
</author>
<published>2023-07-20T07:19:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c15e506a4674e558922c5a75512ca2b5c296cd44'/>
<id>urn:sha1:c15e506a4674e558922c5a75512ca2b5c296cd44</id>
<content type='text'>
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)

Signed-off-by: Andrej Valek &lt;andrej.valek@siemens.com&gt;
Reviewed-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta: fix version checks in all github recipes using the github-releases class</title>
<updated>2022-09-28T07:01:10+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2022-09-27T12:09:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=afefe7de281e558ed823460f80ddc631e718feb3'/>
<id>urn:sha1:afefe7de281e558ed823460f80ddc631e718feb3</id>
<content type='text'>
(From OE-Core rev: b04316bdd28b7945c2c91b4e43c007b650eedc14)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>elfutils/flex: Disable parallel make ptest compile</title>
<updated>2022-06-25T20:13:40+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-06-25T07:18:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d891a796cc69a7bf4fdf366c685a960ffb707f46'/>
<id>urn:sha1:d891a796cc69a7bf4fdf366c685a960ffb707f46</id>
<content type='text'>
The recent change enabling parallel make for ptest compile/install caused
autobuilder failures in these two recipes. Disable parallel make here
for now until someone can debug the race and get it fixed (preferably
upstream).

(From OE-Core rev: 12755e3e771eb2f1628e2b3dd7138c8766973d82)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta/scripts: Automated conversion of OE renamed variables</title>
<updated>2022-02-21T23:37:27+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-02-16T20:33:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=71ef3191938da772b07274165dd3a85c2ed011f1'/>
<id>urn:sha1:71ef3191938da772b07274165dd3a85c2ed011f1</id>
<content type='text'>
(From OE-Core rev: aa52af4518604b5bf13f3c5e885113bf868d6c81)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers</title>
<updated>2022-02-20T16:45:25+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-02-18T17:15:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b0130fcf91daee0d905af755302fabe608da141c'/>
<id>urn:sha1:b0130fcf91daee0d905af755302fabe608da141c</id>
<content type='text'>
An automated conversion using scripts/contrib/convert-spdx-licenses.py to
convert to use the standard SPDX license identifiers. Two recipes in meta-selftest
were not converted as they're that way specifically for testing. A change in
linux-firmware was also skipped and may need a more manual tweak.

(From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>flex: Add CVE-2019-6293 to exclusions for checks</title>
<updated>2021-09-07T20:54:11+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-09-06T12:49:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8632de2d7a77042c1f1b7454d4bc3b10968bb9e4'/>
<id>urn:sha1:8632de2d7a77042c1f1b7454d4bc3b10968bb9e4</id>
<content type='text'>
CVE is effectively disputed - yes there is stack exhaustion but no bug and it
is building the parser, not running it, effectively similar to a compiler ICE.
Upstream no plans to address and there is no security issue.

https://github.com/westes/flex/issues/414

(From OE-Core rev: 0cae5d7a24bedf6784781b62cbb3795a44bab4d1)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
