linux/poky.git/meta/recipes-extended/tar, branch zeus-next

tar: Fix build determinism, disable rsh

2020-02-11T23:05:12+00:00

rsh is insecure and obsolete but tar will enable support if the binary is on the host system. Some systems point it at ssh. Lets explictly disable it for now unless someone actually needs/uses this at which point it could become a packageconfig. (From OE-Core rev: d14a4b0db92a9a7d1ff72a2e0faca7f1a23a0b68) (From OE-Core rev: 6bdc5f787af46e9c849947cad06ad40aa401b767) (From OE-Core rev: af4a284bb6fbfd8b58d10d4a5f0f10297c949912) Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

m4/tar: Remove remove-gets.patch

2019-05-27T16:06:34+00:00

When the original problem was fixed in gnulib the patches were rebased on top of the upstream fix... (From OE-Core rev: d93ad85d94ea99e3fad7e4c2f6be999088e2f9f9) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

cpio/tar/native.bbclass: move rmt to sbindir and add a prefix to avoid native clashing

2019-05-08T11:15:17+00:00

The rmt in cpio-native and tar-native is clashing, since tar-native has set var-NATIVE_PACKAGE_PATH_SUFFIX, we move rmt to sbindir, and add suffix NATIVE_PACKAGE_PATH_SUFFIX to sbindir could avoid the clashing. And in Ubuntu, rmt is in sbindir $ which rmt /usr/sbin/rmt (From OE-Core rev: e9ac5ac2f4d135734f549d17cce3ebc52132b7d0) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

tar: update to 1.32

2019-04-12T13:05:37+00:00

(From OE-Core rev: 472258c7bf25672d6b8922061e8ea382d7be478a) Signed-off-by: Oleksandr Kravchuk Signed-off-by: Richard Purdie

tar: upgrade to 1.31

2019-02-20T11:30:35+00:00

Remove the musl specific do_install, as it's not suitable for this version. (From OE-Core rev: 348a96a5b4016a7615f8d22c03ec1ced60367c3b) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

tar: control acl PACKAGECONFIG based on acl distro feature

2018-05-04T12:28:05+00:00

(From OE-Core rev: fa8f3bda2680d9890ff6d2bc0ce9737a4d40b4f7) Signed-off-by: Andre McCurdy Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

tar: merge tar.inc into tar recipe

2018-05-04T12:28:05+00:00

There's only one user of tar.inc (meta-gplv2 has its own copy), so merge the .inc file into the tar recipe. (From OE-Core rev: cce7b627f9046c15dde49c001481003cee33fc9c) Signed-off-by: Andre McCurdy Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

tar: 1.29 -> 1.30

2018-02-06T11:06:28+00:00

1.Upgrade tar from 1.29 to 1.30. 2.Modify musl_dirent.patch, since the data has been changed. 3.Delete CVE-2016-6321.patch, since it is integrated upstream. (From OE-Core rev: 9dc417ef8f94b51140fe2befcd492f6ea9726a4a) Signed-off-by: Huang Qiyu Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07T20:05:31+00:00

These are recipes where the upstream has moved to GPLv3 and these old versions are the last ones under the GPLv2 license. There are several reasons for making this move. There is a different quality of service with these recipes in that they don't get security fixes and upstream no longer care about them, in fact they're actively hostile against people using old versions. The recipes tend to need a different kind of maintenance to work with changes in the wider ecosystem and there needs to be isolation between changes made in the v3 versions and those in the v2 versions. There are probably better ways to handle a "non-GPLv3" system but right now having these in OE-Core makes them look like a first class citizen when I believe they have potential for a variety of undesireable issues. Moving them into a separate layer makes their different needs clearer, it also makes it clear how many of these there are. Some are probably not needed (e.g. mc), I also wonder whether some are useful (e.g. gmp) since most things that use them are GPLv3 only already. Someone could now more clearly see how to streamline the list of recipes here. I'm proposing we mmove to this separate layer for 2.3 with its future maintinership and testing to be determined in 2.4 and beyond. (From OE-Core rev: 19b7e950346fb1dde6505c45236eba6cd9b33b4b) Signed-off-by: Richard Purdie

tar: CVE-2016-6321

2017-03-01T23:27:10+00:00

Skip members whose names contain "..". Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6321 Upstream patch: http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f671 (From OE-Core rev: cfa2b5facd1aa6a2bac4cb04687e1a977c533934) Signed-off-by: Sona Sarmadi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie