Commit Graph

11350 Commits

Author SHA1 Message Date
Armin Kuster
8760facba1 wireshark: 2.4.8 src moved to all-versions
update SRC_URI

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-11-26 08:48:11 -07:00
Armin Kuster
aa9b1f50f4 sblim-sfc-common: use official SPDX license for EPL
WARNING: sblim-sfc-common-1.0.1-r0 do_populate_lic: sblim-sfc-common: No generic license file exists for: EPL in any provider

it is  EPL-1.0

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-11-26 08:48:11 -07:00
Leon Anavi
03a7bad10a rygel: Update license to LGPLv2.1
Fix the warning below and set proper license according to the
content of file COPYING in Rygel:

WARNING: rygel-0.34.0-r0 do_populate_lic: rygel: \
No generic license file exists for: LGPL1.1 in any provider

According to a git commit in Rygel made two years ago by Jens
Georg: "all: Update license text to LGPLv2.1 proper We always
claimed being LGPLv2.1 but the license text said differently."
In the same time the tag for Rygel 0.34 has been created on
20 March 2017, aka after this git commit. For more details:
cdcb6bd55e

Furthermore, the changelog of Rygel 0.34.0 also indicates
that the license is LGPLv2.1+ (after a fix in release 0.29.1):
https://abi-laboratory.pro/tracker/changelog/rygel/0.34.0/log.html

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-11-26 08:48:11 -07:00
Armin Kuster
8fe066cca1 postgresql: update to 9.4.20
Bug fix only updates.
see: https://www.postgresql.org/docs/9.4/release-9-4-20.html

Patches refreshed

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-11-21 18:43:58 -08:00
Armin Kuster
d6d4e56c42 boinc: refresh patches
used quilt refresh patch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-30 12:26:20 -07:00
Gregory Vimont
666e1d2d1e tbb: check the version of the cross gcc instead of host gcc
When cross compiling on linux with gcc, the host gcc was used instead of
the cross gcc to set compilation flags according to gcc version.

Signed-off-by: Gregory Vimont <gregory.vimont@softbankrobotics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-29 09:00:33 -07:00
Richard Purdie
9fbfdd309c xmlstarlet: Disable PARALLEL_MAKE (again)
* MJ: this was applied for 1.5.0 version in:
  https://patchwork.openembedded.org/patch/116023/
  then removed with the upgrade to 1.6.1 in:
  https://patchwork.openembedded.org/patch/141059/
  but as reported before this issue is still reproducible
  with 1.6.1

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-29 08:59:44 -07:00
Khem Raj
2bb21ef27c poppler: Update to 0.64
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-27 08:49:10 -07:00
Takuro Ashie
b2de0889c8 uim: Fix SRC_URI
The place of uim archives has been moved to
https://github.com/uim/uim/releases

Signed-off-by: Takuro Ashie <ashie@clear-code.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-27 08:24:23 -07:00
Khem Raj
d50be66491 gedit: Add dep on python-six-native
Fixes errors e.g.
recipe-sysroot-native/usr/share/gtk-doc/python/gtkdoc/common.py", line 31, in <module>
    import six
ImportError: No module named 'six'
make[3]: *** [install-data-local] Error 1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-27 07:27:26 -07:00
Nicolas Dechesne
58a7d9e959 meta-multimedia: fixup LAYERDEPENDS
libebml depends on dos2unix classe since 26dafa0f35 (libebml: inherit
dos2unix), so LAYERDEPENDS needs to be updated accordingly, otherwise we are
getting a ParseError:

ERROR: ParseError at
/srv/work/oe/meta-openembedded/meta-multimedia/recipes-mkv/libebml/libebml_1.3.0.bb:13:
Could not inherit file classes/dos2unix.bbclass

It was initially found with yocto-check-layer script.

In OE/master branch, the dos2unix class was moved to oe-core, so the problem
does not exist in master, and this patch is less invasive than cherry pick the
change from master (move dos2unix from meta-oe to oe-core).

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-26 18:51:25 -07:00
Paul Eggleton
bf02ea81dc protobuf: make python-protobuf dependency optional and default to off
A dependency on python-protobuf was added in commit
5f6fcfd362 for the sole purpose of
providing a ptest, however python-protobuf is in meta-python and thus
this means that meta-oe would depend on meta-python by default (assuming
your distro enables ptest by default), and we don't want that - meta-oe
isn't supposed to depend upon any layer other than openembedded-core.
Luckily we can still have a ptest even without the python support, so
add a PACKAGECONFIG and leave it disabled by default.

Note: the PACKAGECONFIG here is not particularly useful since it's only
about what goes into the -ptest package and thus also the dependency. I
contemplated just using LANG_SUPPORT instead, but PACKAGECONFIG does
have the advantage that it's introspectable and fairly well understood
so in the end I went with it.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-26 18:51:25 -07:00
Sinan Kaya
ca2870ff8e dnsmasq: CVE-2017-15107
* CVE-2017-15107
A vulnerability was found in Dnsmasq's implementation of DNSSEC.
Wildcard synthesized NSEC records could be improperly interpreted
to prove the non-existence of hostnames that actually exist.

Affects dnsmasq <= 2.78

CVE: CVE-2017-15107
Ref: https://access.redhat.com/security/cve/cve-2017-15107
Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-26 18:51:17 -07:00
Armin Kuster
35c6359155 grpc: move it from oe to networking layer
grpc has dependancy on meta-networking packages.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-24 06:49:24 -07:00
Martin Jansa
7fbbbead47 openocd: prevent fetching git submodules during do_configure
* I've tried just disabling them with:
  --disable-internal-jimtcl --disable-internal-libjaylink
  but that still tries to use missing jim.h:
  | ./src/helper/jim-nvp.h:47:10: fatal error: jim.h: No such file or directory
  |  #include <jim.h>
  |           ^~~~~~~
  | compilation terminated.
  | Makefile:3619: recipe for target 'src/libopenocd_la-openocd.lo' failed
  | make[2]: *** [src/libopenocd_la-openocd.lo] Error 1

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-09 16:21:36 -07:00
Martin Jansa
b3fffe67e0 libqb: Fix build with gold
* since the upgrade to 1.0.3 more specifically since this commit:
  20246f544f (diff-67e997bcfdac55191033d57a16d1408a)
  it was failing to build with gold
* add --enable-nosection-fallback to work around the issue

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-09 16:21:36 -07:00
Jagadeesh Krishnanjanappa
be79b8b111 fuse: CVE-2018-10906
* CVE-2018-10906-1:

fusermount: don't feed "escaped commas" into mount options

The old code permits the following behavior:

$ _FUSE_COMMFD=10000 priv_strace -etrace=mount -s200 fusermount -o 'foobar=\,allow_other' mount
mount("/dev/fuse", ".", "fuse", MS_NOSUID|MS_NODEV, "foobar=\\,allow_other,fd=3,rootmode=40000,user_id=1000,group_id=1000") = -1 EINVAL (Invalid argument)

However, backslashes do not have any special meaning for the kernel here.

As it happens, you can't abuse this because there is no FUSE mount option
that takes a string value that can contain backslashes; but this is very
brittle. Don't interpret "escape characters" in places where they don't
work.

* CVE-2018-10906-2:

fusermount: refuse unknown options

Blacklists are notoriously fragile; especially if the kernel wishes to add
some security-critical mount option at a later date, all existing systems
with older versions of fusermount installed will suddenly have a security
problem.
Additionally, if the kernel's option parsing became a tiny bit laxer, the
blacklist could probably be bypassed.

Whitelist known-harmless flags instead, even if it's slightly more
inconvenient.

Affects fuse < 2.9.8 and fuse < 3.2.5

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-26 11:03:11 -07:00
Oleksandr Kravchuk
aea43f26ee libsodium: update to 1.0.16
Added link to bug tracker and updated md5sum of LICENSE, which has been
updated with the copyright year.

Signed-off-by: Oleksandr Kravchuk <dev@sashko.rv.ua>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit edf011c303)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-26 10:55:40 -07:00
Armin Kuster
4a75fa2690 wireshark: update to 2.4.8
Bug fix update only

includes security fixes:

wnpa-sec-2018-25 The LDSS dissector could crash. (Bug 14615)
wnpa-sec-2018-28 Multiple dissectors could consume excessive memory. (Bug 14678)
wnpa-sec-2018-29 The DNS dissector could crash. (Bug 14681)
wnpa-sec-2018-30 The GSM A DTAP dissector could crash. (Bug 14688)
wnpa-sec-2018-31 The Q.931 dissector could crash. (Bug 14689)
wnpa-sec-2018-33 Multiple dissectors could crash. (Bug 14703)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-19 07:34:23 -07:00
leimaohui
e11c0b9340 libnih: Fix do_package error when enable mutilib.
Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-19 07:22:34 -07:00
leimaohui
7825bc0ed5 python-pytest: Fix conflict error as following:
file /usr/bin/py.test conflicts between attempted installs of python3-pytest-3.4.2-r0 and python-pytest-3.4.2-r0
  file /usr/bin/pytest conflicts between attempted installs of python3-pytest-3.4.2-r0 and python-pytest-3.4.2-r0

Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 28fab4c8f5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-19 07:19:58 -07:00
Denys Dmytriyenko
4504d2e78d devmem2: ensure word is 32-bit, add support for 64-bit long
Since sizeof(unsigned long) can be 8-byte on 64-bit architectures, use
uint32_t instead for "word" access to always be 4-byte/32-bit long.

Also introduce proper "long" 8-byte/64-bit access by using uint64_t.

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1bcd15ed5b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-19 07:19:58 -07:00
changqing.li@windriver.com
3c978f910e php: upgrade 7.2.4 -> 7.2.7
Included:

7.2.5
Fixed bug #76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value). (CVE-2018-10549)
Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on invalid sequence). (CVE-2018-10546)
Fixed bug #76248 (Malicious LDAP-Server Response causes Crash). (CVE-2018-10548)
Fixed bug #76129 (fix for CVE-2018-5712 may not be complete). (CVE-2018-10547)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 188097b4e9)
[Bug fix update]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-08 15:03:52 -07:00
Armin Kuster
6ae1ddbcb8 wireshark: update to 2.4.7
Bug fix update only
includes:
wnpa-sec-2018-25
The LDSS dissector could crash. (Bug 14615)

wnpa-sec-2018-28
Multiple dissectors could consume excessive memory. (Bug 14678)

wnpa-sec-2018-29
The DNS dissector could crash. (Bug 14681)

wnpa-sec-2018-30
The GSM A DTAP dissector could crash. (Bug 14688)

wnpa-sec-2018-31
The Q.931 dissector could crash. (Bug 14689)

wnpa-sec-2018-33
Multiple dissectors could crash. (Bug 14703)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-08 14:58:53 -07:00
leimaohui
b0950aeff5 python-lockfile: Fix build error as following:
"distutils.errors.DistutilsError: Could not find suitable distribution for Requirement.parse('pbr>=1.8')"

Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 75540ab149)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:27:46 -07:00
Hongxu Jia
603b5a07ed xfce4-notifyd: fix parallel build issue
While do an out-of-tree build, if xfce4-notifyd-config is not created
in time, there is a compile failure:
...
|LC_ALL=C intltool-merge -d -u -c ./po/.intltool-merge-cache
../xfce4-notifyd-0.4.0/po ../xfce4-notifyd-0.4.0/xfce4-notifyd-config/
xfce4-notifyd-config.desktop.in xfce4-notifyd-config/xfce4-notifyd-config.desktop
|Died at intltool-merge line 1184.
...

Ensure xfce4-notifyd-config subdirectory exists fixes the issue.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Acked-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit acfc380d4e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:18:47 -07:00
Khem Raj
ddb2dc2927 iperf3: Drop redundant patch
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f604119524)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:18:01 -07:00
Mikko Rapeli
802b338875 lmbench: fix Upstream-Status metadata typos in patch
Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f5017313a1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:17:25 -07:00
Trevor Woerner
0472f7400a gtest: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 316753e9cf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:15:51 -07:00
Hannu Lounento
bba95005e8 vlan: use update-alternatives for vconfig
Busybox also provides the command 'vconfig' when CONFIG_VCONFIG is
enabled.

Busybox has a priority of 50.

Prior to the patch running

    bitbake core-image-minimal

produced the warnings

    WARNING: core-image-minimal-1.0-r0 do_rootfs: busybox.postinst returned 1, marking as unpacked only, configuration required on target.
    WARNING: core-image-minimal-1.0-r0 do_rootfs: Intentionally failing postinstall scriptlets of ['busybox'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} ().
    If deferring to first boot wasn't the intent, then scriptlet failure may mean an issue in the recipe, or a regression elsewhere.
    Details of the failure are in /path/to/poky/build/tmp-glibc/work/qemux86-oe-linux/core-image-minimal/1.0-r0/temp/log.do_rootfs.
    WARNING: core-image-minimal-1.0-r0 do_rootfs: [log_check] core-image-minimal: found 1 warning message in the logfile:
    [log_check] WARNING: Intentionally failing postinstall scriptlets of ['busybox'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} ().

where log.do_rootfs contained

    update-alternatives: Error: not linking /path/to/poky/build/tmp-glibc/work/qemux86-oe-linux/core-image-minimal/1.0-r0/rootfs/sbin/vconfig to /bin/busybox.nosuid since /path/to/poky/build/tmp-glibc/work/qemux86-oe-linux/core-image-minimal/1.0-r0/rootfs/sbin/vconfig exists and is not a link

when a workspace layer created by devtool contained

    $ cat workspace/appends/busybox_%.bbappend
    FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"

    SRC_URI_append = " file://vconfig.cfg"

and

    $ cat workspace/appends/busybox/vconfig.cfg
    CONFIG_VCONFIG=y

and local.conf contained

    $ tail -n2 conf/local.conf
    IMAGE_INSTALL_append = " busybox"
    IMAGE_INSTALL_append = " vlan"

Signed-off-by: Hannu Lounento <hannu.lounento@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cb7b35a4f9)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:14:45 -07:00
Christophe PRIOUZEAU
21b3569494 minicoredumper: relocate admin-binaries to sbin
Change path of minicoredumper on init/service script to /usr/sbin.

Since the commit "relocate admin-binaries to sbin" on minicoredumper,
minicoredumper binaries are installed on /usr/sbin directory instead
of /usr/bin.
src/minicoredumper/Makefile.am: sbin_PROGRAMS = minicoredumper

Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d1cfe7a70c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:13:40 -07:00
Zheng Ruoqin
ae42bbad28 xorgxrdp: Fix the License
Change the License to MIT as Fedora. And I also found the license it's MIT in the spdx file of xorgxrdp.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d2a777b925)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:12:57 -07:00
Michael Siebecker
ea0f32a916 Fix zram module paramter name
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 89535bb64d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:12:07 -07:00
texierp
a4ec81345b minicoredumper: fixes for sysvinit and systemd
The sysv initscript and systemd service assumes minicoredumper is
installed in /usr/bin/. In our case minicoredumper is installed in
/usr/sbin/ by default. Therefore, fix this path.

Signed-off-by: Pierre-Jean TEXIER <texier.pj2@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 26ba552614)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:11:13 -07:00
Trevor Woerner
1e5368d0bf geoip-perl: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit fed506befd)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:10:15 -07:00
Trevor Woerner
738825cf8e ipcalc: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 216652c73b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:09:57 -07:00
Trevor Woerner
fb953f4dbd wolfssl: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 83cedc2f76)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:09:38 -07:00
Trevor Woerner
1e0c5cc980 tinyalsa: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit c460d66b1f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:09:20 -07:00
Yi Zhao
a3f1a33818 networkmanager-openvpn: fix QA issue error for multilib
When enable multilib build, there is a QA Issue error:
ERROR: networkmanager-openvpn-1.2.8-r0 do_package: QA Issue: networkmanager-openvpn: Files/directories were installed but not shipped in any package:
  /usr/lib
  /usr/lib/NetworkManager
  /usr/lib/NetworkManager/VPN
  /usr/lib/NetworkManager/VPN/nm-openvpn-service.name
Please set FILES such that these items are packaged.  Alternatively if they are unneeded, avoid installing them or delete them within do_install.
networkmanager-openvpn: 4 installed and not shipped files.  [installed-vs-shipped]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 028f302074)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:05:41 -07:00
Yi Zhao
a1b4509bcb networkmanager: fix QA issue error for multilib
When enable multilib build, there is a QA Issue error:
ERROR: networkmanager-1.10.6-r0 do_package: QA Issue: networkmanager: Files/directories were installed but not shipped in any package:
  /usr/lib/NetworkManager
  /usr/lib/NetworkManager/VPN
  /usr/lib/NetworkManager/conf.d
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
networkmanager: 3 installed and not shipped files.  [installed-vs-shipped]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 9a654a35b7)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:05:22 -07:00
Armin Kuster
275dd812d5 ntp: update to 4.2.8.p11
This release addresses five security issues in ntpd:

  LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability: ephemeral association attack
  INFO/MEDIUM: Sec 3412 / CVE-2018-7182 / VU#961909: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak
  LOW: Sec 3415 / CVE-2018-7170 / VU#961909: Multiple authenticated ephemeral associations
  LOW: Sec 3453 / CVE-2018-7184 / VU#961909: Interleaved symmetric mode cannot recover from bad state
  LOW/MEDIUM: Sec 3454 / CVE-2018-7185 / VU#961909: Unauthenticated packet can reset authenticated interleaved association

one security issue in ntpq:
  MEDIUM: Sec 3414 / CVE-2018-7183 / VU#961909: ntpq:decodearr() can write beyond its buffer limit

Signed-off-by: Armin Kuster <akuster@mvista.com>
(cherry picked from commit 18b4b0ec54)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:04:24 -07:00
Trevor Woerner
fbccaab475 openh264: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit aa177bc615)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:02:43 -07:00
Trevor Woerner
e1862e63e7 openh264: fix build for 32-bit intel arch
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 4d49d3b53d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:02:24 -07:00
Mark Asselstine
abd5934ea8 gnome-keyring: fix 'installed but not shipped' QA issue
Building the 'gnome-keyring' recipe with "installed-vs-shipped"
included in ERROR_QA will result in:

    ERROR: gnome-keyring-3.20.0-r0 do_package: QA Issue: gnome-keyring: \
      Files/directories were installed but not shipped in any package:
      /usr/lib64/pkcs11/gnome-keyring-pkcs11.la
      /lib64/security/pam_gnome_keyring.la

>From various documents the .la files should not be packaged in either
the main recipe package or the -dev package unless required. So
inherit 'remove-libtool' to have all the .la files cleaned up as they
don't appear to be necessary.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 973aec3a2a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:01:36 -07:00
Robert Joslyn
f8a1c6888e htop: Fix typo
Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 14d7dce4f8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:00:52 -07:00
Trevor Woerner
77c0dea3fb python-cpuset: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit c2404f15b8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:00:28 -07:00
Trevor Woerner
2028bda732 libwebsockets: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit dd80399993)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 20:00:09 -07:00
Trevor Woerner
dafba0a9a3 libuv: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 0c37018e7b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 19:59:16 -07:00
Sipke Vriend
734513d8b3 python-robotframework: Add runtime dependencies to robot framework
Add the runtime dependencies robot framework has so they are available on
images including it.
python-robotframework.inc is included by both python3 and python
robot framework.
python3 includes zlib by default so include python-zlib as a runtime
dependency in the python-robotframework recipe and not in the
python3-robotframework.

Signed-off-by: Sipke Vriend <sipke.vriend@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit f90318b625)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 19:58:51 -07:00
Trevor Woerner
31cdab6e1e libsrtp: switch away from github archive
Since we know that github archives which are automatically generated have a
tendency to change their checksums[1], switch to using a git clone.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2017-September/114916.html

Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 2d06171cf6)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-14 19:58:15 -07:00