Commit Graph

6681 Commits

Author SHA1 Message Date
Martin Jansa
8ed39aa43a libgxim: move from meta-ruby back to meta-oe
* it was moved to meta-ruby (totherer with imsettings which depends on libgxim)
  because of ruby-native dependency, now when ruby was moved from meta-ruby to
  oe-core we can move libgxim back to meta-oe (which also allows imsettings
  in meta-xfce to depend only on meta-oe as well)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-30 13:05:45 +01:00
Khem Raj
595877c908 imsettings: Move from meta-ruby to meta-xfce
It depends on xfconf which is XFCE component, no one
depends on imsettings in meta-ruby so move it close
to its dependencies.

Ideally, xfconf should be turned into PACKAGECONFIG
and this recipe then moved to meta-oe since all kind
of DE's can use it then.

For now it frees meta-ruby from unnecessary dependency on xfce layer

Change-Id: I6b5896b0db504fad49a9da5967d3493e27c627b0
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-28 09:34:04 -08:00
Jackie Huang
b830b52364 netmap-modules: Modules may not have the same arch as userspace
Kernel modules may not have the same architecture as user space.  So we
tell INSANE_SKIP to skip checking the arch for the modules.  This is
consistent with other kernel modules and the kernel recipe.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-22 10:16:59 -08:00
Jackie Huang
7879f8c306 netmap-modules: make deterministic builds for drivers
The driver builds are optional, but for deterministic builds,
we should should be able to explicitly enable/disable the
builds for them in a proper place (maybe in BSP).
But we can't use PACKAGECONFIG since there is no option for
each driver, and the options are:
 --no-drivers    do not compile any driver
 --no-drivers=   do not compile the given drivers (comma sep.)
 --drivers=      only compile the given drivers (comma sep.)

So use NETMAP_DRIVERS to list the needed drivers and add proper
configs to EXTRA_OECONF, the default is no drivers, and all
supported drivers are listed in NETMAP_ALL_DRIVERS.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-22 10:16:37 -08:00
Martin Jansa
4207d1adce mpd: add dependency on libupnp
* it's autodetected from sysroot:
  WARN: mpd: mpd rdepends on libupnp, but it isn't a build dependency?

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:34 -08:00
Martin Jansa
ea92216bd6 lcdproc5: add dependency on lirc
* it's autodetected from sysroot:
  ERROR: lcdproc: lcdd-driver-lirc package isn't created when building with minimal dependencies?

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:34 -08:00
Martin Jansa
7b23c7b3d4 gnome-panel: add dependency on dbus
* it's autodetected from sysroot:
  WARN: gnome-panel: gnome-panel rdepends on dbus-lib, but it isn't a build dependency?

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Yi Zhao
10a6e53eef tmux: add PACKAGECONFIG for utempter
Fix QA warning:
WARNING: QA Issue: tmux rdepends on libutempter, but it isn't a build
dependency? [build-deps]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Jackie Huang
beaed0004f xfsprogs: fix the license
The library named "libhandle" and some specific header files
are licensed under LGPLv2.1, all other components are licensed
under GPLv2.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Jackie Huang
53bb7ab6c6 lmsensors-config: fix the packaging for sensord
/etc/sysconfig/sensord is needed by sensord.service
so it should be packaged in lmsensors-config-sensord.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Qi.Chen@windriver.com
1dbc273c82 libvpx: fix host-user-comtaminated QA issue
Fix 'host-user-comtaminated' QA issue by using chown in do_install.
Also remove the useless do_compile function.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Qi.Chen@windriver.com
e1010b329a tipcutils: fix host-user-comtaminated QA issue
Fix the 'host-user-comtaminated' QA issue by using chown in do_install.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Wenzong Fan
239f80a473 phpmyadmin: fix CVE-2015-7873
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1
and 4.5.x before 4.5.1 allows remote attackers to spoof content via the
url parameter.

Backport upstream commit to fix it:
cd09765675

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Christopher Larson
bd06eeb7a9 canutils: rdep on iproute2
busybox ip fails to configure can interfaces, so we need iproute2 to do so.
See also http://www.armadeus.com/wiki/index.php?title=CAN_bus_Linux_driver.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:32:22 -08:00
Kai Kang
b544906e29 pmtools: support huge ACPI table
For some servers such as Canoe Pass or Thunder Ridge, they have much
more entries in ACPI table, so original 1K buffer is insufficient.

Switch to dynamic buffer for this situation.

Remove 'protocol' field in SRC_URI as well which cause warning:

| WARNING: Failed to fetch URL git://github.com/anyc/pmtools.git;protocol=https,
| attempting MIRRORS if available

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:31:37 -08:00
Radek Dostal
ae951ebb35 htop: delete not used patch
remove-proc-test.patch was not used since commit
78909f65d8 "htop: upgrade to version 1.0.2"

Signed-off-by: Radek Dostal <radek.dostal@streamunlimited.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:31:01 -08:00
Yi Zhao
9f22c913e7 hplip: specify cupsbackenddir and cupsfilterdir
Fix QA issue when enable multilib:
ERROR: QA Issue: hplip: Files/directories were installed but not shipped in any package:
  /usr/lib
  /usr/lib/cups
  /usr/lib/cups/filter
  /usr/lib/cups/backend
  /usr/lib/cups/filter/hpcac
  /usr/lib/cups/filter/foomatic-rip-hplip
  /usr/lib/cups/filter/pstotiff
  /usr/lib/cups/filter/hpcups
  /usr/lib/cups/filter/hplipjs
  /usr/lib/cups/filter/hpps
  /usr/lib/cups/filter/.debug
  /usr/lib/cups/filter/.debug/hplipjs
  /usr/lib/cups/filter/.debug/hpcups
  /usr/lib/cups/filter/.debug/hpps
  /usr/lib/cups/backend/hp
  /usr/lib/cups/backend/.debug
  /usr/lib/cups/backend/.debug/hp
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
hplip: 17 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:30:15 -08:00
Qi.Chen@windriver.com
96757c3b6d rrdtool: install python site packages into libdir
Fix the do_configure function to suite the latest version to install
python libraries into ${libdir}.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:29:51 -08:00
Yi Zhao
5c3aaa9eaf pam-passwdqc: fix the hardcoded libdir
Fix QA issue when enable multilib:
WARNING: QA Issue: pam-passwdqc-dbg: found library in wrong location:
/lib/security/.debug/pam_passwdqc.so
pam-passwdqc: found library in wrong location:
/lib/security/pam_passwdqc.so [libdir]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:29:11 -08:00
Andre McCurdy
655b9806eb tree: respect the package's own default CFLAGS
The tree Makefile defines default CFLAGS form Linux (-DLINUX, etc)
which are lost if we don't manually include them in the final CFLAGS.

Also break the dependency on EXTRA_OEMAKE containing '-e', disable the
unused configure task and, since package has a very short description,
set SUMMARY instead of DESCRIPTION.

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:28:52 -08:00
George McCollister
05f285254f postgresql: Don't symlink to perl if it's disabled
Don't create a symlink to libperl.so if perl isn't in PACKAGECONFIG.
Attempting to do so will fail if perl hasn't been built.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:28:29 -08:00
Kai Kang
9fc5f4b831 apache2: fix host-user-contaminated warnings
It shows warnings when build apache2 such as:

| WARNING: QA Issue: apache2: /apache2-dev/usr/share/apache2/icons/small/movie.gif
| is owned by uid 1785, which is the same as the user running bitbake.
| This may be due to host contamination [host-user-contaminated]

Set the owner and group to root to fix it.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:27:45 -08:00
Kai Kang
456eb95308 mcelog: remove bashism and create ptest subpackage
Create ptest subpackage. Add a patch to remove bashism and then only
ptest package depends on bash.

Inherit autotools-brokensep and re-write do_install as well.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:27:21 -08:00
Andreas Müller
c9b4fcea6f faenza-icon-theme: fix host-user-contamination
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:26:57 -08:00
Hongxu Jia
9560894109 mariadb.inc: fix mysqld hung at first init time based on systemd
While SYSTEMD_AUTO_ENABLE_mariadb-server = "enable", the mysqld service
hungs.
...
[    **] A start job is running for Run pending postinsts (25s / no limit)
[  OK  ] Stopped MariaDB database server.
...

In mariadb-server's pkg_postinst, it install db at first runtime. And the
following 'systemctl mysqld restart' casued the hunging. So the fix idea
is to reomove pkg_postinst and still install db at first runtime.

Introduce mysql-systemd-start from ${S}/packaging/rpm-oel/. For review
convenience, we add them as file.

The mysql-systemd-start provides two functions: the install_db is to install
db at fist runtime (the first runtime means if a db existed, the install_db
will directly exit); the pinger is to wait for mysqld service startup
completed.

The mysqld.service add ExecStartPost than previous which invoke
'mysql-systemd-start post' to wait for mysqld service startup completed.

We add a package to provide install_db, so the user could choose it
to install database for mariadb at first boot before mysqld started.

It also fix another issue:
When you manually restart mysqld and do mysql test to connect the server,
the return of the restart could make sure mysqld is ready, and the following db
connect will not fail with:
...
Can't connect to local MySQL server through socket
...

Tweak my.cnf to remove obsolete/incorrect parameter.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:26:37 -08:00
Kai Kang
9af04860be libssh2: make crypto library selectable
Add PACKAGECONFs 'openssl' and 'gcrypt' to make crypto library
selectable. Only one of them could be set. If they are both set,
'gcrypt' is invalide.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:25:42 -08:00
Christopher Larson
6cc7fbfc3b gpsd: also support bluez5
gpsd uses libbluetooth, not the dbus interface, so it can work with bluez5 as
well, as the library is compatible.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:25:24 -08:00
Joshua Lock
0afe8af234 poppler-data: install CMap resources for CJK glyph support
CID-keyed fonts, as commonly used to support pictographic East
Asian character sets require Character Maps which unidirectionally
map character codes (i.e. Unicode encoding) to CID (the glyphs in
the font face).

Without a CMap poppler isn't able to correctly PDF files in
Chinese, Japanese or Korean without embedded fonts.

This change installs a copy of the Identity files from Adobe's
CMap Resources[1] based on a similar change in Fedora's
poppler-data[2][3].

This is an updated version of the v2 patch originally created and sent
by my colleague, Joshua Lock.

1. https://github.com/adobe-type-tools/cmap-resources
2. http://pkgs.fedoraproject.org/cgit/poppler-data.git/tree/poppler-data.spec#n18
3. https://bugzilla.redhat.com/show_bug.cgi?id=842351

Co-Authored-By: Bob Ham <bob.ham@collabora.com>
Signed-off-by: Bob Ham <bob.ham@collabora.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:20:27 -08:00
Bob Ham
76df85bd1a poppler: move RDEPENDS on poppler-data to libpoppler
The poppler-data package contains data needed by consumers of
the libpoppler package, for example evince.  However, the RDEPENDS in
this recipe is only for the poppler package.  Moving the RDEPENDS to
libpoppler ensures that poppler-data is included in any builds with
separate libpoppler consumers but not poppler.  The poppler package
automatically depends on libpoppler so poppler's dependency on
poppler-data is not lost.

Signed-off-by: Bob Ham <bob.ham@collabora.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:18:40 -08:00
Li xin
cc33b97f15 sessreg: add a patch to avoid build errors.
Do not build man dir since it is always build failed.
This is not a good way,but can remove sessreg form PNBLACKLIST.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:17:57 -08:00
Haris Okanovic
c5b295aa9b python-jinja2: Disable make clean
Makefile doesn't define "clean". Unless disabled, base_do_configure()
will fail the build attempting to run `make clean` when rebuilding
this recipe.

Signed-off-by: Haris Okanovic <haris.okanovic@ni.com>
Natinst-ReviewBoard-ID: 119389
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:16:42 -08:00
Robert Yang
6fa49f3763 dracut: fix host-user-contaminated
Fixed:
dracut-043+giteab03540cd695d940062af5b55c02e8829aaa526: dracut: /dracut/usr/lib/dracut/modules.d/99img-lib/img-lib.sh is owned by uid 15220, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated]
lib32-dracut-043+giteab03540cd695d940062af5b55c02e8829aaa526: lib32-dracut: /lib32-dracut/usr/lib/dracut/modules.d/99img-lib/img-lib.sh is owned by uid 15220, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated]

Its Makefile uses cp -arx to install modules.d, so fix the owner
to root:root

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:16:19 -08:00
Rafaël Carré
7ad5e2d13b VLC: do not use --with-contrib
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:15:46 -08:00
Rafaël Carré
f6e5bf7977 VLC: make libdvdread PACKAGECONFIG
Enable it by default.
Make both dvdread and dvdnav also depend on libdvdcss

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:15:28 -08:00
Rafaël Carré
f21b8cdcf9 VLC: explicit PACKAGECONFIG for freetype
Enable it by default

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:15:05 -08:00
Rafaël Carré
997600aa6a VLC: explicit PACKAGECONFIG for fontconfig
Enable it by default

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:14:45 -08:00
Rafaël Carré
c756136910 VLC: make libnotify a configurable dependency
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:14:27 -08:00
Rafaël Carré
3b116d7399 vlc: remove libdc1394 libraw1394 from DEPENDS
They are only needed if the modules introduced in ea31946 are enabled.
Add these modules to default PACKAGECONFIG to keep existing defaults.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:14:09 -08:00
Hongxu Jia
677c422dc1 libnet-ssleay-perl: fix test failures with openssl
Backport two patches from uptream to fix test failure with
openssl 1.0.2b or above.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:13:41 -08:00
Hongxu Jia
338321922d libhtml-tree-perl: fix shebang
There is a build failure while installing libhtml-tree-perl to sdk:
...
|Computing transaction...error: Can't install nativesdk-libhtml-tree-
perl-5.03-r0.1@x86_64_nativesdk: no package provides tmp/sysroots/
x86_64-linux/usr/bin/perl-native/perl.real
...

The rpm detects the shebang of perl script, so we correct it.
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:13:10 -08:00
Scott Ellis
96751b7478 python-requests: Add RDEPENDS
The python-requests module has runtime dependencies.

Signed-off-by: Scott Ellis <scott@jumpnowtek.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:12:43 -08:00
Steffen Sledz
5826ba6968 syslog-ng: add UPDATE_ALTERNATIVE for syslog-service
Use ALTERNATIVE mechanism in OE to manage the syslog service to
avoid conflicts with other syslog implementations like rsyslog
or busybox.

Signed-off-by: Steffen Sledz <sledz@dresearch-fe.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:12:16 -08:00
Wenzong Fan
6c1b51eff1 krb5: fix CVE-2015-2698
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c
in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly
accesses a certain pointer, which allows remote authenticated users
to cause a denial of service (memory corruption) or possibly have
unspecified other impact by interacting with an application that calls
the gss_export_sec_context function. NOTE: this vulnerability exists
because of an incorrect fix for CVE-2015-2696.

Backport upstream commit to fix it:
3db8dfec1e

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:11:57 -08:00
Wenzong Fan
be9179c85d krb5: fix CVE-2015-2697
The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT
Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users
to cause a denial of service (out-of-bounds read and KDC crash) via
an initial '\0' character in a long realm field within a TGS request.

Backport upstream commit to fix it:
f0c094a1b7

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:11:42 -08:00
Wenzong Fan
ac3b050b11 krb5: fix CVE-2015-2696
lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14
relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted IAKERB packet that is mishandled during
a gss_inquire_context call.

Backport upstream commit to fix it:
e04f028351

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:11:27 -08:00
Wenzong Fan
000b5f2941 krb5: fix CVE-2015-2695
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before
1.14 relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted SPNEGO packet that is mishandled during
a gss_inquire_context call.

Backport upstream commit to fix it:
b51b33f2bc

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:11:08 -08:00
Roy Li
05d787e42f ufw: improve RRECOMMENDS
ufw needs lots of netfilter module to run

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:10:00 -08:00
Christopher Larson
2e5be89872 ctdb: rdep on bash
onnode is a shell script with bashisms and bash #!.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:09:34 -08:00
Li Xin
7f63341777 opensaf: remove unused service file
Upstream ships systemd service file plmcboot.service and plmcd.service now,
so we don't need this anymore.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:09:16 -08:00
Jian Liu
03af98d351 ypbind-mt: set path of ypdomainname in ypbind script
The script ypbind will cause error if using ypdomainname command
provided by busybox. So add RDEPENDCY on yp-tools and change
the path of ypdomainname.

Signed-off-by: Jian Liu <jian.liu@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:08:29 -08:00