linux/poky.git/meta/recipes-extended, branch hardknott-next

xinetd: Exclude CVE-2013-4342 from cve-check

2021-06-02T22:32:44+00:00

We use the SUSE mirror of xinetd. The CVE fix was added to the main repo after the latest release but is included in the version from the SUSE repo. (From OE-Core rev: 14477263562fe683f914ae640e0ff30a4d54977a) Signed-off-by: Richard Purdie

ltp: Disable problematic tests causing autobuilder hangs

2021-05-30T07:19:35+00:00

We've seen three hangs in cgroup_xattr and two in proc01 so far. The new plan is just to disable any tests seen to hang. I've had enough of these causing problems on our testing infrastructure. (From OE-Core rev: 622b1a409aaa8fd895821a53ee5db33206b98825) Signed-off-by: Richard Purdie

cups: whitelist CVE-2021-25317

2021-05-22T09:03:10+00:00

This CVE relates to bad ownership of /var/log/cups, which we don't have. (From OE-Core rev: 60bca0789b9830fa27694c5d65042d1206a07fe2) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ghostscript: Exclude CVE-2013-6629 from cve-check

2021-05-22T09:01:03+00:00

The CVE is in the jpeg sources included with ghostscript. We use our own external jpeg library so this doesn't affect us. (From OE-Core rev: e19caff111bcbd70e5e7507388a4aaea2d10f7e0) Signed-off-by: Richard Purdie

cpio: Exclude CVE-2010-4226 from cve-check

2021-05-22T09:01:03+00:00

Issue applies to use of cpio in SUSE/OBS, doesn't apply to us. (From OE-Core rev: a175059e678bf9a5e843d00ac1bbf65b49f97f32) Signed-off-by: Richard Purdie

unzip: Exclude CVE-2008-0888 from cve-check

2021-05-22T09:01:03+00:00

The patch mentioned as the fix for the CVE is applied to the 6.0 source code. Zip versioning makes CPE entry changes hard. (From OE-Core rev: f816be9387d4691dbacd17673749809fe125d35c) Signed-off-by: Richard Purdie

logrotate: Exclude CVE-2011-1548,1549,1550 from cve-check

2021-05-22T09:01:02+00:00

These CVEs apply to the way logrotate was installed on Gentoo, Debian and SUSE, exclude from cve-check as they don't apply to OE. (From OE-Core rev: 55b53c501e911df04bdff6fca54b11c3e54770c9) Signed-off-by: Richard Purdie

lsb-release: fix reproducibility failure

2021-05-15T16:18:21+00:00

Make sure help2man output is reproducible. Fixes: | .\"·DO·NOT·MODIFY·THIS·FILE!··It·was·generated·by·help2man·1.022. .\"·DO·NOT·MODIFY·THIS·FILE!··It·was·generated·by·help2man·1.022. | .TH·FSG·"1"·"April·2021"·"FSG·lsb_release·v1.4"·FSG .TH·FSG·"1"·"May·2021"·"FSG·lsb_release·v1.4"·FSG | .SH·NAME 3 .SH·NAME (From OE-Core rev: e73898b59eb79d20082963e629ce6f8cc75103c9) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie (cherry picked from commit 49371207a7f1fe3d3feb7b8b9aabb62b43ae34d1) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

ltp: fix empty ltp-dev package

2021-04-30T13:37:25+00:00

Currently the headers are not installed and the ltp-dev package is empty. This patch adds an include-install make target in the do_install step to install them in sysroot which ends up as a working ltp-dev package. (From OE-Core rev: c4419fb58b6ab5f4fbdcd65e5b6d2e7742c8d66f) Signed-off-by: Jonas Höppner Signed-off-by: Richard Purdie (cherry picked from commit f6943da4444cd71053650be0c9212bc25ac53137) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

groff: not ship /usr/bin/grap2graph

2021-04-30T13:37:25+00:00

grap2graph which converts a GRAP diagram into a cropped image fails to run as below: $ grap2graph /usr/bin/grap2graph: line 89: convert: command not found /usr/bin/grap2graph: warning: falling back to old '-crop 0x0' trim method /usr/bin/grap2graph: line 104: convert: command not found /usr/bin/grap2graph: line 103: grap: command not found Considering we don't often need to convert a GRAP diagram into a cropped image and the recipe ImageMagick which provides convert command is in meta-oe layer, so don't ship the related files to avoid the confusion about the above run time error. (From OE-Core rev: b096417b9635c5a790616d20f0490bc15b9d7c0f) Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie (cherry picked from commit 251be7279a475ee18c0c53fe9795bb37bffc2b45) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie