linux/poky.git/meta/recipes-extended/zip, branch uninative-3.0

zip: whitelist CVE-2018-13410 and CVE-2018-13684

2021-01-16T22:39:36+00:00

https://nvd.nist.gov/vuln/detail/CVE-2018-13410 is disputed and also Debian considers it not a vulnerability: https://security-tracker.debian.org/tracker/CVE-2018-13410 http://seclists.org/fulldisclosure/2018/Jul/24 "Negligible security impact, would involve that a untrusted party controls the -TT value." https://nvd.nist.gov/vuln/detail/CVE-2018-13684 is not for zip, also Debian concludes this: https://security-tracker.debian.org/tracker/CVE-2018-13684 "NOT-FOR-US: smart contract implementation for ZIP" (From OE-Core rev: 06b72a91b6dcf63fed437fd2105c59e922ba6525) Signed-off-by: Mikko Rapeli Signed-off-by: Richard Purdie

zip: Add patch fixing zipnote segfault

2020-01-10T21:18:22+00:00

This patch has been applied in several Linux distributions (From OE-Core rev: 8e662fced80c98c5495d49c905cc0008cb812589) Signed-off-by: Jate Sujjavanich Signed-off-by: Richard Purdie

zip: Remove build date to improve reproducibility

2019-06-04T08:09:42+00:00

Applies a patch from Debian to remove the build date from zip. (From OE-Core rev: 222d485e4eb789307093d57cb3c8d373c2e695b8) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie

selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting

2017-08-15T23:03:13+00:00

... instead of a global exception list which was problematic. [YOCTO #11896] (From OE-Core rev: 89dfede4ca795ba085f1ee7290c6dede573c11db) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

zip: update SRC_URI

2016-05-19T21:32:07+00:00

The infozip FTP server appears to have been taken down, so change the SRC_URI to point at their SourceForge project. Also as the SRC_URI can't be generated from the version and there is no other user of the .inc, merge the .bb and .inc together. [ YOCTO #9655 ] (From OE-Core rev: 5cb1e0ec46e4fde1c15aeb6812eaaece4840ac1c) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

zip: fix security issues

2016-05-19T08:05:20+00:00

This patch avoids zip recipe fails to compile with compiler flags which elevate common string formatting issues into an error (-Wformat -Wformat-security -Werror=format-security). [YOCTO #9552] (From OE-Core rev: f63a36360b7e138d2a63c84b5b1a8287ffe3d2ae) Signed-off-by: Edwin Plauchu Signed-off-by: Richard Purdie

package_regex.inc: split entries which blacklist specific versions to their recipes

2015-12-08T10:20:52+00:00

(From OE-Core rev: 1eb9e190ef3bb1170b3eaabd9f7900e7ce176624) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

Replace one-line DESCRIPTION with SUMMARY

2014-01-02T12:50:18+00:00

A lot of our recipes had short one-line DESCRIPTION values and no SUMMARY value set. In this case it's much better to just set SUMMARY since DESCRIPTION is defaulted from SUMMARY anyway and then the SUMMARY is at least useful. I also took the opportunity to fix up a lot of the new SUMMARY values, making them concisely explain the function of the recipe / package where possible. (From OE-Core rev: b8feee3cf21f70ba4ec3b822d2f596d4fc02a292) Signed-off-by: Paul Eggleton Signed-off-by: Richard Purdie

zip: explictly disable bzip2 support

2013-03-02T12:56:54+00:00

* we don't depends on bzip2, so make sure it's not autodetected in sysroot (From OE-Core rev: e93186642708cb99bfba776012e345c42e9bd0d5) Signed-off-by: Martin Jansa Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

zip: Remove QA warnings: No GNU_HASH in the elf binary

2012-12-06T12:31:17+00:00

Update the LFLAGS1 in the Makefile to remove warnings: QA Issue: No GNU_HASH in the elf binary (From OE-Core rev: 3b41513a63df6636b617eff09ff1ea9574c5e6f0) Signed-off-by: Christopher Larson Signed-off-by: Muhammad Shakeel Signed-off-by: Saul Wold Signed-off-by: Richard Purdie