Commit Graph

15 Commits

Author SHA1 Message Date
Peter Marko
da07e6ee34 libyaml: Ignore CVE-2024-35325
This is similar CVE as the previous ones from the same author.
https://github.com/yaml/libyaml/issues/303 explain why this is misuse
(or wrong use) of libyaml.

(From OE-Core rev: a28240d49c111050e253e373507ac3094b74f6e1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-09-04 05:57:57 -07:00
Peter Marko
0d356a401d libyaml: ignore CVE-2024-35326
This is the same problem as already ignored CVE-2024-35328.
See laso this comment in addition:
https://github.com/yaml/libyaml/issues/298#issuecomment-2167684233

(From OE-Core rev: 18e011245dd978985eecc368c503822f61d52f21)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-08-28 06:49:22 -07:00
Peter Marko
25a9b7b70c libyaml: Update status of CVE-2024-35328
This is open yet but seems to be disputed
This has not yet been disputed officially

Based on:
OE-Core rev: 4cba8ad405b1728afda3873f99ac88711ab85644
OE-Core rev: 7ec7384837f3e3fb68b25a6108ed7ec0f261a4aa
OE-Core rev: c66d9a2a0d197498fa21ee8ca51a4afb59f75473
Squashed and converted to CVE_CHECK_IGNORE syntax

(From OE-Core rev: 70489234bff3f2b8613ce6f8069bae448fbc61ed)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-08-16 08:09:14 -07:00
Richard Purdie
bb6ddc3691 Convert to new override syntax
This is the result of automated script conversion:

scripts/contrib/convert-overrides.py <oe-core directory>

converting the metadata to use ":" as the override character instead of "_".

(From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-08-02 15:44:10 +01:00
Khem Raj
43e8dd7934 libyaml: Enable static lib on native/nativesdk
Helps building static tools which depend on libyaml during build or
shipped with SDK

libyaml is MIT licensed so static linking would not be as prohibitive

(From OE-Core rev: 1c2be08fc66c09ed7547eda172da4c99e8563091)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-13 23:13:46 +00:00
Wang Mingyu
6ce944904f libyaml: upgrade 0.2.4 -> 0.2.5
(From OE-Core rev: b574c04a26ab49ee0588e37606dd100a939a90a9)

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-06-04 13:27:32 +01:00
zhengruoqin
4ee5da311e libyaml: upgrade 0.2.2 -> 0.2.4
-License-Update: file name changed from LICENSE to License.
                 Copyright year updated to 2020.

(From OE-Core rev: 93cd242d3d75492cd67adb59f297505851919eae)

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-05-30 12:32:48 +01:00
Stefan Müller-Klieser
820c10e689 recipes: change SRC_URI to use https
Change all recipes to https where we get an http 301 permanent redirect.

(From OE-Core rev: e514acda9e12bccde6d3974e0fd1a37b3837191a)

Signed-off-by: Stefan Müller-Klieser <s.mueller-klieser@phytec.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-12-06 14:41:28 +00:00
Yi Zhao
a098e31efc libyaml: update SRC_URI[md5sum] and SRC_URI[sha256sum]
Upstream appear to have regenerated the tarball, the new one is the same except the
directory name changed from libyaml to yaml. Adapt to this.

(From OE-Core rev: 9ab05b6ec860078df37c4ea68267ecffaa0ce38c)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-16 11:10:02 +01:00
Oleksandr Kravchuk
8a2435b3e0 libyaml: update to 0.2.2
LICENSE checksum was changed due to copyright year change.

(From OE-Core rev: edc7f213ae3f976d367734cde5a1b2ee929b70ac)

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-04-12 14:05:38 +01:00
Ross Burton
c441b34e42 libyaml: upgrade to 0.2.1
License changed due to copyright dates being added.

(From OE-Core rev: 079df0021b0819f4b88e20ac8f3350a0f153c6bc)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-07-24 11:52:26 +01:00
Brad Bishop
7a932424ca libyaml: Enable nativesdk bake
(From OE-Core rev: 3694176e13442068acfe54b7165d5f828190fe08)

Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-11-15 15:19:53 +00:00
Alexander Kanavin
b0e728871e libyaml: update to 0.1.7
Drop backported libyaml-CVE-2014-9130.patch

(From OE-Core rev: 2dfdf483e9de5bcb24149f619b0c7fc466221204)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-09-03 09:58:39 +01:00
Mariano Lopez
e5c011b041 Add "CVE:" tag to current patches in OE-core
The currnet patches in OE-core doesn't have the "CVE:"
tag, now part of the policy of the patches.

This is patch add this tag to several patches. There might
be patches that I miss; the tag can be added in the future.

(From OE-Core rev: 065ebeb3e15311d0d45385e15bf557b1c95b1669)

Signed-off-by: Mariano Lopez <mariano.lopez@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-11 23:26:32 +00:00
Alexander Kanavin
5198ec99e2 libyaml: add a recipe from meta-oe
libyaml is a dependency of ruby

(From OE-Core rev: 9c8679acb6e611d2fa6e51299b856394da9ea98d)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-12 22:48:25 +01:00