Commit Graph

5829 Commits

Author SHA1 Message Date
Armin Kuster
902964a4da python-m2crypto: fix SSLv2 symbol issue
ERROR: Failed to import the "M2Crypto" module: .../usr/lib/python2.7/site-packages/M2Crypto/__m2crypto.so: undefined symbol: SSLv2_method

disable using SSLv2_method if not supported in openssl. This is now the case
with the advent of CVE-2016-0800

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-03-09 20:11:13 +01:00
Armin Kuster
68c1651eaf krb5: Fix warning.
WARNING: /tmp/work/armv5e-poky-linux-gnueabi/krb5/1.12.2-r0/krb5-1.12.2/src/ ('S') doesn't exist, please set 'S' to a proper value

remove extra "/"

Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-08 14:13:40 +01:00
Armin Kuster
a7c1a2b0e6 php: Security fix CVE-2016-1903
CVE-2016-1903 php: Out-of-bounds memory read via gdImageRotateInterpolated

Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-08 14:13:40 +01:00
Armin Kuster
7cb8c764e7 php: Security fix CVE-2015-7804
CVE-2015-7804 php: uninitialized pointer in phar_make_dirstream()

Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-08 14:13:39 +01:00
Armin Kuster
40eed80072 php: Security fix CVE-2015-7803
CVE-2015-7803 php: NULL pointer dereference in phar_get_fp_offset()

Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-08 14:13:39 +01:00
Wenzong Fan
c2107a12ab ntp: upgrade 4.2.8p3 -> 4.2.8p4
4.2.8p4 fixed following 13 low- and medium-severity vulnerabilities:

  * Bug 2941 CVE-2015-7871
  * Bug 2922 CVE-2015-7855
  * Bug 2921 CVE-2015-7854
  * Bug 2920 CVE-2015-7853
  * Bug 2919 CVE-2015-7852
  * Bug 2918 CVE-2015-7851
  * Bug 2917 CVE-2015-7850
  * Bug 2916 CVE-2015-7849
  * Bug 2913 CVE-2015-7848
  * Bug 2909 CVE-2015-7701
  * Bug 2902 CVE-2015-7703
  * Bug 2901 CVE-2015-7704, CVE-2015-7705
  * Bug 2899 CVE-2015-7691, CVE-2015-7692, CVE-2015-7702

And three bugs: Bug 2382, 1774, 1593

Details at:
  http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-08 14:13:39 +01:00
Qi.Chen@windriver.com
989721ec10 ntp: fix rpath QA issue
When ntp could be correctly built with openssh and libcrypto, we would meet
the following QA issue.

WARNING: QA Issue: package ntp contains bad RPATH ... [rpath]

Fix this problem by adding '--disable-rpath' to EXTRA_OECONF.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-08 14:13:39 +01:00
Armin Kuster
5b2e937448 squid: serveral missing security fixes
SQUID-2015:2 - Does not affect Squid-3.4 and older versions are not vulnerable.
CVE-2015-5400
CVE-2015-3455
CVE-2014-7142
CVE-2014-7141
CVE-2014-6270

see http://www.squid-cache.org/Advisories/

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-08 14:13:39 +01:00
Roy Li
e8a8e0be8e tcpslice: fix do_install
replace to run "make install" with directly calling install command,
since "make install" asks "bin" user and group, and maybe fail when
system has not;

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-01-04 14:50:23 +01:00
Martin Jansa
fd20102399 terminus-font, ttf*: exclude fontconfig dependency with SIGGEN_EXCLUDE_SAFE_RECIPE_DEPS
* see:
  http://lists.openembedded.org/pipermail/openembedded-devel/2015-September/103271.html
* fixes:
ERROR: terminus-font different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'terminus-fontterminus-font_4.38.bb.do_package', 'terminus-fontterminus-font_4.38.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'terminus-fontterminus-font_4.38.bb.do_package', 'terminus-fontterminus-font_4.38.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-arphic-uming different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-arphic-uming_20080216.bb.do_package', 'ttf-fontsttf-arphic-uming_20080216.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-arphic-uming_20080216.bb.do_package', 'ttf-fontsttf-arphic-uming_20080216.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-dejavu different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-dejavu_2.35.bb.do_package', 'ttf-fontsttf-dejavu_2.35.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-dejavu_2.35.bb.do_package', 'ttf-fontsttf-dejavu_2.35.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-droid different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-droid_git.bb.do_package', 'ttf-fontsttf-droid_git.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-droid_git.bb.do_package', 'ttf-fontsttf-droid_git.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-gentium different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-gentium_1.02.bb.do_package', 'ttf-fontsttf-gentium_1.02.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-gentium_1.02.bb.do_package', 'ttf-fontsttf-gentium_1.02.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-hunkyfonts different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-hunkyfonts_0.3.0.bb.do_package', 'ttf-fontsttf-hunkyfonts_0.3.0.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-hunkyfonts_0.3.0.bb.do_package', 'ttf-fontsttf-hunkyfonts_0.3.0.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-inconsolata different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-inconsolata_20100526.bb.do_package', 'ttf-fontsttf-inconsolata_20100526.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-inconsolata_20100526.bb.do_package', 'ttf-fontsttf-inconsolata_20100526.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-liberation different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-liberation_0.2.bb.do_package', 'ttf-fontsttf-liberation_0.2.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-liberation_0.2.bb.do_package', 'ttf-fontsttf-liberation_0.2.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-mplus different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-mplus_027.bb.do_package', 'ttf-fontsttf-mplus_027.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-mplus_027.bb.do_package', 'ttf-fontsttf-mplus_027.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-sazanami different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-sazanami_20040629.bb.do_package', 'ttf-fontsttf-sazanami_20040629.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-sazanami_20040629.bb.do_package', 'ttf-fontsttf-sazanami_20040629.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-tlwg different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-tlwg_0.6.1.bb.do_package', 'ttf-fontsttf-tlwg_0.6.1.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-tlwg_0.6.1.bb.do_package', 'ttf-fontsttf-tlwg_0.6.1.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-ubuntu-font-family different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-ubuntu-font-family_0.80.bb.do_package', 'ttf-fontsttf-ubuntu-font-family_0.80.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-ubuntu-font-family_0.80.bb.do_package', 'ttf-fontsttf-ubuntu-font-family_0.80.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

ERROR: ttf-wqy-zenhei different signature for task do_package_write_ipk.sigdata between qemux86copy and qemuarm
runtaskdeps changed from ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-wqy-zenhei_0.9.45.bb.do_package', 'ttf-fontsttf-wqy-zenhei_0.9.45.bb.do_packagedata'] to ['fontconfigfontconfig_2.11.94.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'ttf-fontsttf-wqy-zenhei_0.9.45.bb.do_package', 'ttf-fontsttf-wqy-zenhei_0.9.45.bb.do_packagedata']
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 736c4f55866f0d3dc2df677413ac50d8
 changed to
openembedded-core/meta/recipes-graphics/fontconfig/fontconfig_2.11.94.bb.do_packagedata with hash 44d2223000ef1b272de20bb6212e20e2
Hash for dependent task fontconfigfontconfig_2.11.94.bb.do_packagedata changed from 736c4f55866f0d3dc2df677413ac50d8 to 44d2223000ef1b272de20bb6212e20e2

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-01-04 14:50:23 +01:00
Martin Jansa
6c4cb0fb00 ktap: add libelf PACKAGECONFIG also to ktap-module
* building ktap-module without elfutils fails with:
  ktap-module/0.4-r0/git/Makefile:107: No libelf found, disables symbol resolving, please install elfutils-libelf-devel/libelf-dev

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-01-04 14:50:23 +01:00
Li xin
220b31d536 ntp: upgrade 4.2.8p2 -> 4.2.8p3
4.2.8p3 fixed CVE-2015-5146 and Bugs.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-26 21:43:09 +01:00
Roy Li
692b646456 ntp: uprev to 4.2.8p2
ntp 4.2.8p2 has more CVE fixes, like CVE-2015-1799, CVE-2015-1798;
and remove ntp-4.2.8-ntp-keygen-no-openssl.patch which 4.2.8p2 has integrated

4.2.8.p1 included CVE-2014-9297, CVE-2014-9298 (ak).

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-26 21:43:09 +01:00
Tim Orling
ceecb1b63e vlc: fix for libtool error
Changes since v1:
  typo caught by Andreas Oberritter

Patch recommended by:
  Rafaël Carré funman@videolan.org

Signed-off-by: Tim Orling <TicoTimo@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-26 21:43:08 +01:00
Martin Jansa
4ca988fd80 nautilus3: Fix build with B != S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-26 21:43:08 +01:00
Tudor Florea
6a591c9367 fuse: fix for CVE-2015-3202 Privilege Escalation
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before
invoking (1) mount or (2) umount as root, which allows local users to write
to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is
used by mount's debugging feature.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202
http://www.openwall.com/lists/oss-security/2015/05/21/9

Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-26 21:43:08 +01:00
Roy Li
dd407add55 ipsec-tools: Security Advisory - CVE-2015-4047
This fixed the CVE-2015-4047:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4047

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-26 21:43:08 +01:00
Roy Li
7ab203e051 mariadb: Security Advisory -CVE-2015-2305
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2305

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

Conflicts:
	meta-oe/recipes-support/mysql/mariadb.inc
	removed ref to patch fix-a-building-failure.patch
2015-10-26 21:43:08 +01:00
Martin Jansa
763de0599b ruby: explicitly disable dtrace support
both 2.2.1 and 2.2.2 are failing on some hosts native builds with:
| linking miniruby
| load.o: In function `rb_f_load':
| load.c:(.text+0x3af): undefined reference to `RUBY_DTRACE_LOAD_ENTRY_ENABLED'
| load.c:(.text+0x428): undefined reference to `RUBY_DTRACE_LOAD_RETURN_ENABLED'
| load.c:(.text+0x452): undefined reference to `RUBY_DTRACE_LOAD_RETURN'
| load.c:(.text+0x492): undefined reference to `RUBY_DTRACE_LOAD_ENTRY'
| load.o: In function `rb_require_internal':

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-14 21:17:27 +02:00
Martin Jansa
4821df058d lirc: use weak assignment in PACKAGECONFIG like other recipes
* using append makes it harder to disable PACKAGECONFIGs set from
  DISTRO_FEATURES

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13 17:40:11 +02:00
Khem Raj
82c66f0957 lirc: Make X support to be a packageconfig
When we dont have x11 in distro features it fails to build
since libx11 dependency is not satisfied

Change-Id: I6774a83f965551a41afe12b1304e44e73fc789c0
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13 17:40:08 +02:00
Martin Jansa
df2f700d66 geoclue: add PACKAGECONFIG for geoip
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13 13:48:19 +02:00
Martin Jansa
c689a31134 tcpdump: add PACKAGECONFIG for smi
* libsmi is autodetected in configure, but in most cases disabled because of
  cross-compilation so keep it explicitly disabled
* resolves following difference in builds with and without libsmi built
  before tcpdump:
  4.7.4-r0-with/temp/log.do_configure:checking smi.h usability... yes
  4.7.4-r0-with/temp/log.do_configure:checking smi.h presence... yes
  4.7.4-r0-with/temp/log.do_configure:checking for smi.h... yes
  4.7.4-r0-with/temp/log.do_configure:checking for smiInit in -lsmi... yes
  4.7.4-r0-with/temp/log.do_configure:checking whether to enable libsmi... not when cross-compiling

  4.7.4-r0-without/temp/log.do_configure:checking smi.h usability... no
  4.7.4-r0-without/temp/log.do_configure:checking smi.h presence... no
  4.7.4-r0-without/temp/log.do_configure:checking for smi.h... no

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13 13:48:19 +02:00
Martin Jansa
44f60714d1 gupnp-igd: fix missing dependencies
* add gobject-introspection-stub-native to fix:
  | doc/Makefile.am:70: warning: 'INCLUDES' is the old name for 'AM_CPPFLAGS' (or '*_CPPFLAGS')
  | libgupnp-igd/Makefile.am:65: error: HAVE_INTROSPECTION does not appear in AM_CONDITIONAL
* add sqlite3 to fix:
  WARNING: QA Issue: gupnp-igd rdepends on libsqlite3, but it isn't a build dependency? [build-deps]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13 13:48:19 +02:00
Martin Jansa
d9eff6abb9 oscam: respect *flags set from OE
* build with -mfloat-abi=hard are failing with:
  sysroots/foo/usr/include/gnu/stubs.h:7:29: fatal error: gnu/stubs-soft.h: No such file or directory
  because cmake wasn't respecting *flags set from OE

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13 13:48:19 +02:00
Martin Jansa
e16d1f7130 llvm.inc: fix PACKAGES_DYNAMIC
* all dynamically created packages start with libllvm${LLVM_RELEASE}-
  libllvm${LLVM_RELEASE}-%s-dbg
  libllvm${LLVM_RELEASE}-%s
  libllvm${LLVM_RELEASE}-%s-staticdev

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-10-13 13:47:03 +02:00
Fabio Berton
54d8915b29 python-pyzmq: Add python-multiprocessing in RDEPENDS
Fix the following runtime error:

>>> import zmq
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/usr/lib/python2.7/site-packages/zmq/__init__.py", line 53, in
<module>
from zmq import devices
File "/usr/lib/python2.7/site-packages/zmq/devices/__init__.py", line 7,
in <module>
from zmq.devices import basedevice, proxydevice, monitoredqueue,
monitoredqueuedevice
File "/usr/lib/python2.7/site-packages/zmq/devices/basedevice.py", line
9, in <module>
from multiprocessing import Process
ImportError: No module named multiprocessing

Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-09-18 14:07:50 +02:00
Tim Orling
01c6d2fbab python-cffi/python-pycparser: enable native build
Signed-off-by: Tim Orling <TicoTimo@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-09-18 14:07:43 +02:00
Martin Jansa
214e1801d0 dhcp: fix parsing warning
* fixes:
  WARNING: Variable key FILES_${PN}-client (${base_sbindir}/dhclient ${base_sbindir}/dhclient-script ${sysconfdir}/dhcp/dhclient.conf)
    replaces original key FILES_dhcp-client ( ${systemd_unitdir}/system/dhclient.service).

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-09-15 16:06:58 +02:00
Dominic Sacré
b79914ee9b fio: Add PACKAGECONFIG for numa, re-enable ARM build
Make fio's NUMA support optional via PACKAGECONFIG.
Enable this feature by default, except on ARM where libnuma/numactl
is not available.

Signed-off-by: Dominic Sacré <dominic.sacre@gmx.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-09-15 15:57:00 +02:00
Dmitry Eremin-Solenikov
6c5bce759e syslog-ng: add util-linux to DEPENDS list
Add util-linux to the DEPENDS list to get rid of the following QA
warning:

syslog-ng-3.5.4.1: syslog-ng-libs rdepends on util-linux-libuuid, but it isn't a build dependency? [build-deps]

Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Robert Yang
4ab3ee5bc1 opensaf: RDEPENDS on python and bash
python:
opensaf/usr/share/opensaf/samples/immsv/immom_python/immom.py

bash:
opensaf/usr/share/opensaf/immxml/verify.sh
opensaf/usr/share/opensaf/immxml/immxml-modify-config
opensaf/usr/share/opensaf/immxml/immxml-configure
opensaf/usr/share/opensaf/immxml/immxml-clustersize
opensaf/usr/share/opensaf/immxml/immxml-nodegen
opensaf/usr/share/opensaf/samples/INSTALL
opensaf/usr/share/opensaf/samples/smfsv/campaigns/smf-verify
opensaf/usr/lib/opensaf/configure_tipc

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
gary.robertson@linaro.org
6d78face56 libhugetlbfs: x86 - don't link against host libs
An earlier patch from Chunrong Guo <B40290@freescale.com> fixed the
linker command scripts in ldscripts to comment out hard-coded paths
for the linker search directories.  This allows the command line
to specifiy the proper paths without being overridden.
However, the 32-bit ix86 scripts evidently were added after this
earlier patch was created and were not corrected by it - so here
we simply duplicate the technique in the earlier patch and extend it
to correct the linker scripts for 32-bit ix86 builds.

Signed-off-by: Gary S. Robertson <gary.robertson@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Josep Puigdemont
1235f48667 libhugetlbfs: project moved to github
Signed-off-by: Josep Puigdemont <josep.puigdemont@enea.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Haris Okanovic
2ae3be14ae start-stop-daemon: Fix RCONFLICTS typo
Signed-off-by: Haris Okanovic <haris.okanovic@ni.com>
Reviewed-by: Ben Shelton <ben.shelton@ni.com>
Acked-by: Brad Mouring <brad.mouring@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
eb2c61cac7 gpsd: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
618a56c2de synergy: fix ${PN}-${PV} -> ${BP} for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
797bf2562e iperf: fix ${PN}-${PV} -> ${BP} for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
465ea45ec6 mozjs: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
9b977afd65 soci: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
a879a4f549 picocom: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
40ab1749ac openct: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
eba0101fdf mime-support: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
c1dfdbbda8 fltk: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
1d3d8753c5 orrery: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
928e72601e omgps: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
47d9bc4f5d navit: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
2172b83340 xbitmaps: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
6ea949c878 takao-fonts: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Yi Zhao
eb5bf8f4d6 fbgrab: fix PN -> BPN for multilib
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00