linux/poky.git/meta/recipes-support/lz4, branch scarthgap

lz4: Remove a reference to the rejected CVE-2025-62813

2026-06-10T13:35:20+00:00

The CVE-2025-62813 is rejected so do not reference it anymore. So keep the patch but without referencing the CVE identifier. The CVE database indicates the following reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. (From OE-Core rev: 99706716626324605c049a9130f705f2090a9f91) Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 9c840a69b62a5fdffb3679a44d68dd5630b2916c) Signed-off-by: Deepak Rathore Signed-off-by: Yoann Congal Signed-off-by: Paul Barker

lz4: fix CVE-2025-62813

2025-11-03T15:17:02+00:00

Prevent attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in lib/lz4frame.c mishandles NULL checks. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-62813 Upstream patch: https://github.com/lz4/lz4/commit/f64efec011c058bd70348576438abac222fe6c82 (From OE-Core rev: 0a63e3e120cc6958e2963a3ad510ec7c03f1adae) Signed-off-by: David Nyström Signed-off-by: Steve Sakoman

cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

2023-07-21T10:52:26+00:00

- Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version (From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7) Signed-off-by: Andrej Valek Reviewed-by: Peter Marko Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

lz4: Add ptest support

2023-05-02T09:25:40+00:00

Add a ptest for lz4. - It is taking around 9 min to execute with kvm, so added it to PTEST_SLOW. - It contains one case: test_frame. - Below is the run log: START: ptest-runner 2023-04-06T00:36 BEGIN: /usr/lib/lz4/ptest Starting lz4frame tester (64-bits, 1.9.4) Seed = 7314 Basic tests completed All tests completed PASS: lz4/test_frame DURATION: 573 END: /usr/lib/lz4/ptest 2023-04-06T00:45 STOP: ptest-runner TOTAL: 1 FAIL: 0 (From OE-Core rev: 2ee144a0bfb88823bfa788697bb7afc9a572c413) Signed-off-by: Qiu Tingting Signed-off-by: Richard Purdie

lz4: upgrade 1.9.3 -> 1.9.4

2022-09-01T09:14:01+00:00

CVE-2021-3520.patch removed since it's included in 1.9.4 License-Update: Copyright year updated to 2020 description of 3rd party applications changed (From OE-Core rev: f95c66050bc69af7769d1868b0118cefb24e5b0d) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

meta/scripts: Automated conversion of OE renamed variables

2022-02-21T23:37:27+00:00

(From OE-Core rev: aa52af4518604b5bf13f3c5e885113bf868d6c81) Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

recipes: Update github.com urls to use https

2021-11-03T10:12:42+00:00

Github has announced there will be no more git:// fetching from their servers: https://github.blog/2021-09-01-improving-git-protocol-security-github/#no-more-unauthenticated-git and they're about to start having brownout periods to encourage people to update. This runs the conversion script over OE-Core to update our urls to use https instead of git. (From OE-Core rev: b37b61e9a1e448a34957db9ae39285d21352552e) Signed-off-by: Richard Purdie

lz4: remove redundant BSD license

2021-09-03T08:03:34+00:00

The upstream license is BSD-2-Clause or GPLv2, so remove the redundant and ambiguous BSD license. (From OE-Core rev: 53cf640e72118d0a7916b165d78c68090aa06381) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

lz4: remove rest of ptest artifacts

2021-09-01T13:06:17+00:00

Commit: 953f6d9a71 lz4: remove ptest changes missed removing the run-ptest file (From OE-Core rev: 28aaf1223396820f8fcd9a6aade46b5007b030a6) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie