linux/poky.git/meta/recipes-support/libyaml, branch yocto-5.2.4

libyaml: Ignore CVE-2024-35325

2024-08-28T08:14:26+00:00

This is similar CVE as the previous ones from the same author. https://github.com/yaml/libyaml/issues/303 explain why this is misuse (or wrong use) of libyaml. (From OE-Core rev: c97f00d122f60501751625e27b9c70166396d754) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie

libyaml: ignore CVE-2024-35326

2024-08-09T21:33:38+00:00

This is the same problem as already ignored CVE-2024-35328. See laso this comment in addition: https://github.com/yaml/libyaml/issues/298#issuecomment-2167684233 (From OE-Core rev: 0632d739fd6bae33f9e58681e117b906a947a307) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie

libyaml: Amend CVE status as 'upstream-wontfix'

2024-08-01T13:32:22+00:00

Use an existing defined CVE_CHECK_STATUSMAP key in meta/lib/oe/cve_check.py in order to avoid following complaint from BitBake: WARNING: libyaml-native-0.2.5-r0 do_create_spdx: Invalid detail "wontfix" for CVE_STATUS[CVE-2024-35328] = "wontfix: Upstream thinks there is no working code that is exploitable - https://github.com/yaml/libyaml/issues/302", fallback to Unpatched (From OE-Core rev: c66d9a2a0d197498fa21ee8ca51a4afb59f75473) Signed-off-by: Niko Mauno Signed-off-by: Richard Purdie

libyaml: Change CVE status to wontfix

2024-08-01T08:20:27+00:00

This has not yet been disputed officially (From OE-Core rev: 7ec7384837f3e3fb68b25a6108ed7ec0f261a4aa) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

libyaml: Update status of CVE-2024-35328

2024-07-30T11:32:53+00:00

This is open yet but seems to be disputed (From OE-Core rev: 4cba8ad405b1728afda3873f99ac88711ab85644) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

libyaml: Enable static lib on native/nativesdk

2021-01-13T23:13:46+00:00

Helps building static tools which depend on libyaml during build or shipped with SDK libyaml is MIT licensed so static linking would not be as prohibitive (From OE-Core rev: 1c2be08fc66c09ed7547eda172da4c99e8563091) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

libyaml: upgrade 0.2.4 -> 0.2.5

2020-06-04T12:27:32+00:00

(From OE-Core rev: b574c04a26ab49ee0588e37606dd100a939a90a9) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

libyaml: upgrade 0.2.2 -> 0.2.4

2020-05-30T11:32:48+00:00

-License-Update: file name changed from LICENSE to License. Copyright year updated to 2020. (From OE-Core rev: 93cd242d3d75492cd67adb59f297505851919eae) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie

recipes: change SRC_URI to use https

2019-12-06T14:41:28+00:00

Change all recipes to https where we get an http 301 permanent redirect. (From OE-Core rev: e514acda9e12bccde6d3974e0fd1a37b3837191a) Signed-off-by: Stefan Müller-Klieser Signed-off-by: Richard Purdie