mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-02-20 08:29:42 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
a54010ae2e9e9afd9c2dcdbefd31a0fd4e7210fe
poky/meta/recipes-extended
History
Mikko Rapeli 60ca60be6f zip: whitelist CVE-2018-13410 and CVE-2018-13684 
https://nvd.nist.gov/vuln/detail/CVE-2018-13410 is disputed and
also Debian considers it not a vulnerability:

https://security-tracker.debian.org/tracker/CVE-2018-13410

http://seclists.org/fulldisclosure/2018/Jul/24
"Negligible security impact, would involve that a untrusted party controls the -TT value."

https://nvd.nist.gov/vuln/detail/CVE-2018-13684 is not for zip, also Debian concludes this:

https://security-tracker.debian.org/tracker/CVE-2018-13684

"NOT-FOR-US: smart contract implementation for ZIP"

(From OE-Core rev: f0314a6937a63b3274bcd84817476834c1de876e)

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-01-27 09:32:45 +00:00
..
acpica
acpica: upgrade 20200528 -> 20200717
2020-08-25 16:00:10 +01:00
asciidoc
asciidoc: upgrade 9.0.1 -> 9.0.2
2020-08-25 16:00:10 +01:00
at
at: fix a spelling mistake.
2019-08-21 21:52:59 +01:00
bash
bash: fix CVE-2019-18276
2020-09-24 22:32:49 +01:00
bc
bc: dc: fix exit code of q command
2019-07-02 08:13:07 +01:00
blktool
blktool: remove a duplicate patch
2019-03-29 08:28:53 +00:00
bzip2
bzip2: Add test suite for bzip2
2020-07-08 10:37:12 +01:00
cpio
cpio: add nativesdk support
2020-07-03 11:38:24 +01:00
cracklib
cracklib: Apply patch to fix CVE-2016-6318
2016-09-24 07:30:10 +01:00
cronie
cronie:fix SRC_URI path
2019-12-15 09:10:46 +00:00
cups
cups: Mark CVE-2008-1033 as a non-issue
2021-01-04 11:45:46 +00:00
cwautomacros
cwautomacros: cleanup buildpath in autogen.sh
2015-10-01 07:43:34 +01:00
diffutils
diffutils: Added perl to support ptest & Skipped one test case
2019-09-07 13:08:34 +01:00
ed
ed: upgrade 1.15 -> 1.16
2020-04-24 14:10:08 +01:00
ethtool
ethtool: upgrade 5.7 -> 5.8
2020-08-20 15:30:07 +01:00
findutils
findutils: drop upstream-version-is-even
2020-02-03 13:03:31 +00:00
gawk
gawk: Avoid using host ar during cross compile
2020-11-20 10:53:21 +00:00
ghostscript
ghostscript: fix CVE-2020-15900
2020-08-08 09:17:48 +01:00
go-examples
oe-core: take UPSTREAM_CHECK_COMMITS into use where possible
2017-11-30 10:49:22 +00:00
gperf
gperf: don't use aclocal.m4/acinclude.m4 dance
2017-12-10 22:45:19 +00:00
grep
grep: Fix shell after autotools changes
2020-01-28 11:11:20 +00:00
groff
groff: Fix reproducibility issue
2021-01-04 11:45:47 +00:00
gzip
gzip: do not pull in perl-ptest for gzip-ptest
2020-01-10 21:18:22 +00:00
hdparm
hdparm: upgrade 9.56 -> 9.58
2019-02-19 16:14:57 +00:00
images
*-initramfs: don't use .rootfs IMAGE_NAME_SUFFIX
2020-09-17 09:47:45 +01:00
iptables
iptables: split iptables-apply to its own package
2020-06-17 11:10:28 +01:00
iputils
iputils: Adapt ${PN}-tftpd package dependency to PACKAGECONFIG
2020-09-02 16:00:47 +01:00
less
less: upgrade 551 -> 562
2020-05-30 12:32:48 +01:00
libaio
libaio: Extend to native
2018-11-14 11:14:39 +00:00
libarchive
libarchive: upgrade 3.4.2 -> 3.4.3
2020-06-09 13:13:59 +01:00
libidn
libidn: Move to meta-oe
2020-02-25 10:41:22 +00:00
libmnl
recipes: change SRC_URI to use https
2019-12-06 14:41:28 +00:00
libnsl
libnsl2: upgrade 1.2.0 -> 1.3.0
2020-07-18 11:06:32 +01:00
libnss-nis
libnss-nis: upgrade 3.0 -> 3.1
2019-08-22 22:48:26 +01:00
libpipeline
libpipeline: upgrade 1.5.2 -> 1.5.3
2020-08-25 16:00:10 +01:00
libsolv
libsolv: upgrade 0.7.10 -> 0.7.14
2020-06-04 13:27:30 +01:00
libtirpc
libtirpc: remove extra "-fcommon" from CFLAGS
2020-05-12 15:20:42 +01:00
lighttpd
lighttpd: upgrade 1.4.54 -> 1.4.55
2020-02-08 13:20:02 +00:00
logrotate
logrotate: update 3.16.0 -> 3.17.0
2020-08-02 14:42:09 +01:00
lsb
lsb-release: fix likely reproducabilty timestamp
2020-02-28 23:11:29 +00:00
lsof
lsof: Make it compatible with externalsrc
2018-10-10 17:59:09 +01:00
ltp
meta: add/fix invalid Upstream-Status tags
2020-09-23 20:54:03 +01:00
lzip
lzip: upgrade 1.20 -> 1.21
2019-02-19 16:14:57 +00:00
man-db
man-db: Fix reproducibility issue
2021-01-12 14:25:13 +00:00
man-pages
man-pages: upgrade 5.07 -> 5.08
2020-08-25 16:00:10 +01:00
mc
mc: upgrade 4.8.24 -> 4.8.25
2020-08-25 16:00:10 +01:00
mdadm
mdadm: remove service template from SYSTEMD_SERVICE
2020-06-09 13:14:01 +01:00
mingetty
mingetty: fix usrmerge install path
2018-08-24 07:53:14 +01:00
minicom
minicom: RDEPENDS on ncurses-terminfo-base
2021-01-04 11:45:47 +00:00
msmtp
msmtp: upgrade 1.8.11 -> 1.8.12
2020-09-03 09:44:30 +01:00
net-tools
net-tools: fix upstream version check
2020-08-02 14:42:09 +01:00
newt
libnewt: Backport patch to fix reproducibility
2020-05-07 12:16:00 +01:00
packagegroups
build-appliance/packagegroup-core-base-utils: Replace dhcp-client/dhcp-server with dhcpcd/kea
2020-09-02 16:00:46 +01:00
pam
libpam: Remove option 'obscure' from common-password
2020-06-16 23:39:28 +01:00
parted
parted: Make readline dependency optional
2021-01-04 11:45:47 +00:00
pbzip2
pbzip2: extend for nativesdk
2020-08-01 19:57:49 +01:00
perl
libxml-sax-perl: upgrade 1.00 -> 1.02
2019-06-19 12:46:43 +01:00
pigz
Revert "pigz: Add debug for autobuilder errors"
2019-06-30 23:33:45 +01:00
procps
procps: upstream has switched to gitlab
2020-02-18 23:53:54 +00:00
psmisc
Revert "psmisc: Fix dependency for USE_NLS=no"
2020-02-25 10:41:22 +00:00
quota
quota: update to 4.05
2019-04-23 23:30:19 +01:00
rpcbind
rpcbind: Use update-alternatives for rpcinfo
2020-09-05 22:19:19 +01:00
rpcsvc-proto
rpcsvc-proto: upgrade 1.4.1 -> 1.4.2
2020-07-18 11:06:32 +01:00
screen
screen: upgrade 4.7.0 -> 4.8.0
2020-02-21 17:48:08 +00:00
sed
sed: upgrade 4.7 -> 4.8
2020-02-03 13:03:32 +00:00
shadow
libtools-cross/shadow-sysroot: Use nopackages inherit
2020-10-06 23:14:25 +01:00
slang
slang: modify an array test
2019-06-07 09:11:49 +01:00
stress-ng
stress-ng: upgrade 0.11.19 -> 0.11.21
2020-09-30 15:01:51 +01:00
sudo
sudo: fix multilib conflict
2020-12-18 23:01:48 +00:00
sysklogd
sysklogd: fix parallel build issue
2020-09-30 15:01:51 +01:00
sysstat
sysstat: fix installed-vs-shipped QA Issue in systemd
2020-09-02 16:00:46 +01:00
tar
tar: Fix build determinism, disable rsh
2020-02-06 12:16:34 +00:00
tcp-wrappers
tcp-wrappers: Remove redundant forward declarations
2020-01-21 12:52:53 +00:00
texinfo
texinfo: update to 6.7
2019-12-09 12:00:43 +00:00
texinfo-dummy-native
texinfo/texinfo-dummy-native: Drop native path prefix
2020-02-03 00:10:11 +00:00
time
time:1.8 -> 1.9
2018-05-04 13:28:05 +01:00
timezone
timezone: upgrade to 2020f
2021-01-12 14:25:13 +00:00
unzip
unzip: Fix CVE-2019-13232
2019-09-30 16:55:21 +01:00
watchdog
watchdog: use /run instead of /var/run in systemd service file
2020-10-17 12:34:29 +01:00
wget
wget: improve reproducible build
2020-05-09 18:57:21 +01:00
which
which: fix it so the manpage will respect alternatives
2017-03-17 16:53:04 +00:00
xdg-utils
recipes: change SRC_URI to use https
2019-12-06 14:41:28 +00:00
xinetd
xinetd: 2.3.15 -> 2.3.15.4
2020-06-09 13:14:00 +01:00
xz
xz: upgrade 5.2.4 -> 5.2.5
2020-05-19 22:57:27 +01:00
zip
zip: whitelist CVE-2018-13410 and CVE-2018-13684
2021-01-27 09:32:45 +00:00