mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-02-20 08:29:42 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
496d8492249bdf01ac84715486e02cbfb3b8059a
poky/meta/recipes-extended
History
Mikko Rapeli 615cb60fd4 zip: whitelist CVE-2018-13410 and CVE-2018-13684 
https://nvd.nist.gov/vuln/detail/CVE-2018-13410 is disputed and
also Debian considers it not a vulnerability:

https://security-tracker.debian.org/tracker/CVE-2018-13410

http://seclists.org/fulldisclosure/2018/Jul/24
"Negligible security impact, would involve that a untrusted party controls the -TT value."

https://nvd.nist.gov/vuln/detail/CVE-2018-13684 is not for zip, also Debian concludes this:

https://security-tracker.debian.org/tracker/CVE-2018-13684

"NOT-FOR-US: smart contract implementation for ZIP"

(From OE-Core rev: 06b72a91b6dcf63fed437fd2105c59e922ba6525)

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-16 22:39:36 +00:00
..
acpica
acpica: upgrade 20201113 -> 20201217
2020-12-30 14:01:06 +00:00
asciidoc
asciidoc: upgrade 9.0.2 -> 9.0.4
2020-11-03 08:21:12 +00:00
at
at: fix a spelling mistake.
2019-08-21 21:52:59 +01:00
bash
bash: Rename patch name
2020-12-18 22:52:24 +00:00
bc
bc: dc: fix exit code of q command
2019-07-02 08:13:07 +01:00
blktool
blktool: remove a duplicate patch
2019-03-29 08:28:53 +00:00
bzip2
bzip2: run ptests without valgrind
2020-12-18 22:52:24 +00:00
cpio
cpio: add nativesdk support
2020-07-03 11:38:24 +01:00
cracklib
cracklib: Apply patch to fix CVE-2016-6318
2016-09-24 07:30:10 +01:00
cronie
cronie:fix SRC_URI path
2019-12-15 09:10:46 +00:00
cups
cups: Mark CVE-2008-1033 as a non-issue
2020-12-21 22:29:57 +00:00
cwautomacros
cwautomacros: cleanup buildpath in autogen.sh
2015-10-01 07:43:34 +01:00
diffutils
diffutils: Added perl to support ptest & Skipped one test case
2019-09-07 13:08:34 +01:00
ed
ed: upgrade 1.16 -> 1.17
2021-01-13 23:13:46 +00:00
ethtool
ethtool: upgrade 5.9 -> 5.10
2020-12-30 14:01:06 +00:00
findutils
findutils: upgrade 4.7.0 -> 4.8.0
2021-01-13 23:13:46 +00:00
gawk
gawk: add missing ptest dependency
2020-12-31 11:53:26 +00:00
ghostscript
ghostscript: update 9.52 -> 9.53.3
2020-10-30 13:22:48 +00:00
go-examples
oe-core: take UPSTREAM_CHECK_COMMITS into use where possible
2017-11-30 10:49:22 +00:00
gperf
gperf: don't use aclocal.m4/acinclude.m4 dance
2017-12-10 22:45:19 +00:00
grep
grep: add nativesdk to BBCLASSEXTEND
2020-12-18 22:52:24 +00:00
groff
groff: Fix reproducibility issue
2020-12-21 22:29:57 +00:00
gzip
gzip: do not pull in perl-ptest for gzip-ptest
2020-01-10 21:18:22 +00:00
hdparm
hdparm: upgrade 9.58 -> 9.60
2020-11-29 20:24:32 +00:00
images
*-initramfs: don't use .rootfs IMAGE_NAME_SUFFIX
2020-09-17 09:47:45 +01:00
iptables
iptables: upgrade 1.8.5 -> 1.8.6
2020-11-03 08:21:12 +00:00
iputils
iputils: Adapt ${PN}-tftpd package dependency to PACKAGECONFIG
2020-09-02 16:00:47 +01:00
less
less: upgrade 562 -> 563
2020-11-03 08:21:11 +00:00
libaio
libaio: upgrade 0.3.111 -> 0.3.112
2020-12-15 22:51:56 +00:00
libarchive
libarchive: upgrade 3.4.3 -> 3.5.1
2021-01-16 22:39:35 +00:00
libidn
libidn: Move to meta-oe
2020-02-25 10:41:22 +00:00
libmnl
recipes: change SRC_URI to use https
2019-12-06 14:41:28 +00:00
libnsl
libnsl2: upgrade 1.2.0 -> 1.3.0
2020-07-18 11:06:32 +01:00
libnss-nis
libnss-nis: upgrade 3.0 -> 3.1
2019-08-22 22:48:26 +01:00
libpipeline
libpipeline: upgrade 1.5.2 -> 1.5.3
2020-08-25 16:00:10 +01:00
libsolv
libsolv: upgrade 0.7.14 -> 0.7.16
2020-11-03 08:21:12 +00:00
libtirpc
libtirpc: upgrade 1.2.6 -> 1.3.1
2020-12-30 14:01:06 +00:00
lighttpd
lighttpd: upgrade 1.4.56 -> 1.4.57
2020-12-30 14:01:06 +00:00
logrotate
logrotate: update 3.16.0 -> 3.17.0
2020-08-02 14:42:09 +01:00
lsb
meta: fix some unresponsive homepages and bugtracker links
2020-10-30 13:22:48 +00:00
lsof
lsof: Make it compatible with externalsrc
2018-10-10 17:59:09 +01:00
ltp
ltp: Fix ltp-pan crash on 32bit arches using 64bit time_t
2020-12-21 22:29:57 +00:00
lzip
lzip: upgrade 1.20 -> 1.21
2019-02-19 16:14:57 +00:00
man-db
man-db: Fix reproducibility issue
2021-01-03 08:58:26 +00:00
man-pages
man-pages: upgrade 5.09 ->5.10
2021-01-08 10:10:15 +00:00
mc
mc: upgrade 4.8.24 -> 4.8.25
2020-08-25 16:00:10 +01:00
mdadm
mdadm: remove service template from SYSTEMD_SERVICE
2020-06-09 13:14:01 +01:00
mingetty
mingetty: fix usrmerge install path
2018-08-24 07:53:14 +01:00
minicom
minicom: RDEPENDS on ncurses-terminfo-base
2020-12-15 22:51:56 +00:00
msmtp
msmtp: upgrade 1.8.13 -> 1.8.14
2020-12-30 14:01:07 +00:00
net-tools
net-tools: split mii-tool into its own package
2021-01-12 17:44:16 +00:00
newt
libnewt: Backport patch to fix reproducibility
2020-05-07 12:16:00 +01:00
packagegroups
build-appliance/packagegroup-core-base-utils: Replace dhcp-client/dhcp-server with dhcpcd/kea
2020-09-02 16:00:46 +01:00
pam
libpam: remove unused code
2021-01-13 23:13:46 +00:00
parted
parted: Make readline dependency optional
2020-12-18 22:52:24 +00:00
pbzip2
meta: fix some unresponsive homepages and bugtracker links
2020-10-30 13:22:48 +00:00
perl
libxml-sax-perl: upgrade 1.00 -> 1.02
2019-06-19 12:46:43 +01:00
pigz
Revert "pigz: Add debug for autobuilder errors"
2019-06-30 23:33:45 +01:00
procps
procps: split ps and sysctl into individual packages
2021-01-12 17:44:16 +00:00
psmisc
Revert "psmisc: Fix dependency for USE_NLS=no"
2020-02-25 10:41:22 +00:00
quota
quota: upgrade 4.05 -> 4.06
2020-12-09 12:20:32 +00:00
rpcbind
rpcbind: Use update-alternatives for rpcinfo
2020-09-05 22:19:19 +01:00
rpcsvc-proto
rpcsvc-proto: upgrade 1.4.1 -> 1.4.2
2020-07-18 11:06:32 +01:00
screen
screen: upgrade 4.7.0 -> 4.8.0
2020-02-21 17:48:08 +00:00
sed
sed: add nativesdk to BBCLASSEXTEND
2020-12-18 22:52:24 +00:00
shadow
shadow: Remove lastlog pam plugin on musl system
2021-01-03 08:58:26 +00:00
slang
slang: modify an array test
2019-06-07 09:11:49 +01:00
stress-ng
stress-ng: upgrade 0.11.24 -> 0.12.00
2020-12-30 14:01:06 +00:00
sudo
sudo: split sudo binary into its own package
2021-01-12 17:44:16 +00:00
sysklogd
sysklogd: fix parallel build issue
2020-09-30 15:01:51 +01:00
sysstat
sysstat: upgrade 12.4.1 -> 12.4.2
2021-01-10 12:34:40 +00:00
tar
tar: Fix build determinism, disable rsh
2020-02-06 12:16:34 +00:00
tcp-wrappers
tcp-wrappers: Remove redundant forward declarations
2020-01-21 12:52:53 +00:00
texinfo
texinfo: update to 6.7
2019-12-09 12:00:43 +00:00
texinfo-dummy-native
texinfo/texinfo-dummy-native: Drop native path prefix
2020-02-03 00:10:11 +00:00
time
time:1.8 -> 1.9
2018-05-04 13:28:05 +01:00
timezone
timezone: upgrade to 2020f
2021-01-05 13:48:41 +00:00
unzip
unzip: Fix CVE-2019-13232
2019-09-30 16:55:21 +01:00
watchdog
watchdog: use /run instead of /var/run in systemd service file
2020-10-17 12:34:29 +01:00
wget
wget: improve reproducible build
2020-05-09 18:57:21 +01:00
which
which: add nativesdk to BBCLASSEXTEND
2020-12-18 22:52:24 +00:00
xdg-utils
recipes: change SRC_URI to use https
2019-12-06 14:41:28 +00:00
xinetd
xinetd: 2.3.15 -> 2.3.15.4
2020-06-09 13:14:00 +01:00
xz
xz: upgrade 5.2.4 -> 5.2.5
2020-05-19 22:57:27 +01:00
zip
zip: whitelist CVE-2018-13410 and CVE-2018-13684
2021-01-16 22:39:36 +00:00
zstd
zstd: update 1.4.5 -> 1.4.8
2020-12-30 14:01:07 +00:00