mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-25 06:32:12 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
d334181ac89068bacd3df3e3afd925a25afdbdfd
poky/meta/recipes-extended
History
Ralph Siemsen 45dace7e9f tar: filter CVEs using vendor name 
Recently a number of CVEs have been logged against a nodejs project
called "node-tar". These appear as false positives against the GNU tar
being built by Yocto. Some of these have been manually excluded using
CVE_CHECK_WHITELIST.

To avoid this problem, use the vendor name (in addition to package name)
for filtering CVEs. The syntax for this is:
  CVE_PRODUCT = "vendor:package"
When not specified, the vendor defaults to "%" which matches anything.

(From OE-Core rev: 45d1a0bea0c628f84a00d641a4d323491988106f)

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-10-11 18:41:38 +01:00
..
acpica
acpica: set precise BSD license
2021-09-03 09:03:34 +01:00
asciidoc
Convert to new override syntax
2021-08-02 15:44:10 +01:00
at
systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'
2021-09-07 21:54:11 +01:00
bash
bash: Ensure deterministic build
2021-09-16 09:50:34 +01:00
bc
Convert to new override syntax
2021-08-02 15:44:10 +01:00
blktool
blktool: remove a duplicate patch
2019-03-29 08:28:53 +00:00
bzip2
bzip2: Update soname for libbz2 1.0.8
2021-09-26 14:36:48 +01:00
cpio
cpio: backport fix for CVE-2021-38185
2021-09-01 14:06:17 +01:00
cracklib
Convert to new override syntax
2021-08-02 15:44:10 +01:00
cronie
systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'
2021-09-07 21:54:11 +01:00
cups
Convert to new override syntax
2021-08-02 15:44:10 +01:00
cwautomacros
meta/recipes-extended: Add HOMEPAGE / DESCRIPTION
2021-03-06 22:39:04 +00:00
diffutils
diffutils: update 3.7 -> 3.8
2021-08-23 08:25:52 +01:00
ed
meta/recipes-extended: Add HOMEPAGE / DESCRIPTION
2021-03-06 22:39:04 +00:00
ethtool
Convert to new override syntax
2021-08-02 15:44:10 +01:00
findutils
findutils: add ptest
2021-10-11 18:41:38 +01:00
gawk
Convert to new override syntax
2021-08-02 15:44:10 +01:00
ghostscript
Convert to new override syntax
2021-08-02 15:44:10 +01:00
go-examples
Convert to new override syntax
2021-08-02 15:44:10 +01:00
gperf
gperf: don't use aclocal.m4/acinclude.m4 dance
2017-12-10 22:45:19 +00:00
grep
grep: upgrade 3.6 -> 3.7
2021-08-18 17:01:06 +01:00
groff
Convert to new override syntax
2021-08-02 15:44:10 +01:00
gzip
gzip: upgrade 1.10 -> 1.11
2021-10-11 18:41:38 +01:00
hdparm
hdparm: set correct license
2021-09-04 08:44:11 +01:00
images
Convert to new override syntax
2021-08-02 15:44:10 +01:00
iptables
Convert to new override syntax
2021-08-02 15:44:10 +01:00
iputils
recipes: Add missing pkgconfig inherit
2021-09-21 23:44:08 +01:00
less
Convert to new override syntax
2021-08-02 15:44:10 +01:00
libaio
libaio: upgrade 0.3.111 -> 0.3.112
2020-12-15 22:51:56 +00:00
libarchive
Convert to new override syntax
2021-08-02 15:44:10 +01:00
libidn
libidn2: upgrade 2.3.1 -> 2.3.2
2021-08-23 08:25:53 +01:00
libmnl
recipes: change SRC_URI to use https
2019-12-06 14:41:28 +00:00
libnsl
libnsl2: upgrade 1.3.0 -> 2.0.0
2021-08-26 08:07:55 +01:00
libnss-nis
Convert to new override syntax
2021-08-02 15:44:10 +01:00
libpipeline
libpipeline: upgrade 1.5.2 -> 1.5.3
2020-08-25 16:00:10 +01:00
libsolv
libsolv: disable rpm bdb format support
2021-10-11 18:41:37 +01:00
libtirpc
Convert to new override syntax
2021-08-02 15:44:10 +01:00
lighttpd
systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'
2021-09-07 21:54:11 +01:00
logrotate
Convert to new override syntax
2021-08-02 15:44:10 +01:00
lsb
Convert to new override syntax
2021-08-02 15:44:10 +01:00
lsof
lsof: update 4.91 -> 4.94.0
2021-10-11 18:41:37 +01:00
ltp
ltp: backport ioctl_ns05 fix from upstream
2021-08-26 08:07:55 +01:00
lzip
meta/recipes-extended: Add HOMEPAGE / DESCRIPTION
2021-03-06 22:39:04 +00:00
man-db
systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'
2021-09-07 21:54:11 +01:00
man-pages
Convert to new override syntax
2021-08-02 15:44:10 +01:00
mc
mc: fix reproducibility
2021-08-24 09:37:21 +01:00
mdadm
systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'
2021-09-07 21:54:11 +01:00
mingetty
Convert to new override syntax
2021-08-02 15:44:10 +01:00
minicom
Convert to new override syntax
2021-08-02 15:44:10 +01:00
msmtp
Convert to new override syntax
2021-08-02 15:44:10 +01:00
net-tools
Convert to new override syntax
2021-08-02 15:44:10 +01:00
newt
Convert to new override syntax
2021-08-02 15:44:10 +01:00
packagegroups
Convert to new override syntax
2021-08-02 15:44:10 +01:00
pam
libpam: update 1.5.1 -> 1.5.2
2021-10-11 18:41:37 +01:00
parted
parted: update patch status
2021-08-12 06:26:15 +01:00
pbzip2
Convert to new override syntax
2021-08-02 15:44:10 +01:00
perl
libconvert-asn1-perl: 0.27 -> 0.31
2021-08-12 06:26:15 +01:00
pigz
Convert to new override syntax
2021-08-02 15:44:10 +01:00
procps
Convert to new override syntax
2021-08-02 15:44:10 +01:00
psmisc
Convert to new override syntax
2021-08-02 15:44:10 +01:00
quota
quota: remove BSD license
2021-09-03 09:03:34 +01:00
rpcbind
systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'
2021-09-07 21:54:11 +01:00
rpcsvc-proto
Convert to new override syntax
2021-08-02 15:44:10 +01:00
screen
Convert to new override syntax
2021-08-02 15:44:10 +01:00
sed
Convert to new override syntax
2021-08-02 15:44:10 +01:00
shadow
shadow-sysroot: sync license with shadow
2021-09-04 08:44:11 +01:00
slang
Convert to new override syntax
2021-08-02 15:44:10 +01:00
stress-ng
stress-ng: upgrade 0.12.12 -> 0.13.00
2021-08-23 08:25:53 +01:00
sudo
sudo: Use specific BSD license variant
2021-09-02 12:12:07 +01:00
sysklogd
Convert to new override syntax
2021-08-02 15:44:10 +01:00
sysstat
systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'
2021-09-07 21:54:11 +01:00
tar
tar: filter CVEs using vendor name
2021-10-11 18:41:38 +01:00
tcp-wrappers
Convert to new override syntax
2021-08-02 15:44:10 +01:00
texinfo
Convert to new override syntax
2021-08-02 15:44:10 +01:00
texinfo-dummy-native
meta/recipes-extended: Add HOMEPAGE / DESCRIPTION
2021-03-06 22:39:04 +00:00
time
Convert to new override syntax
2021-08-02 15:44:10 +01:00
timezone
tzdata: Remove BSD License specifier
2021-09-02 12:12:07 +01:00
unzip
Convert to new override syntax
2021-08-02 15:44:10 +01:00
watchdog
Convert to new override syntax
2021-08-02 15:44:10 +01:00
wget
Convert to new override syntax
2021-08-02 15:44:10 +01:00
which
Convert to new override syntax
2021-08-02 15:44:10 +01:00
xdg-utils
xdg-utils: Add fix for CVE-2020-27748
2021-09-04 08:44:11 +01:00
xinetd
systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'
2021-09-07 21:54:11 +01:00
xz
Convert to new override syntax
2021-08-02 15:44:10 +01:00
zip
meta/recipes-extended: Add HOMEPAGE / DESCRIPTION
2021-03-06 22:39:04 +00:00
zstd
zstd: fix CVE_PRODUCT
2021-08-02 15:44:11 +01:00