summaryrefslogtreecommitdiffstats
path: root/recipes-devtools
Commit message (Collapse)AuthorAgeFilesLines
* qemu: Drop CVE patchesMartin Borg2018-03-017-362/+0
| | | | | | The CVEs have been fixed in upstream poky/rocko. Signed-off-by: Martin Borg <martin.borg@enea.com>
* Drop CVE patches that have been fixed in upstream poky/rockoMartin Borg2018-02-283-279/+0
| | | | Signed-off-by: Martin Borg <martin.borg@enea.com>
* DPKG: Fix and test case for CVE-2017-8283Sona Sarmadi2017-12-143-0/+279
| | | | | | | | | | | Directory Traversal Vulnerability References: https://nvd.nist.gov/vuln/detail/CVE-2017-8283 http://www.securityfocus.com/bid/98064/info Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* run-postinsts: don't call update-rc.d if systemd is presentGabriel Ionescu2017-12-061-4/+11
| | | | | | | | This patch removes the call to update-rc.d in order to fix the console login issue for the Cavium board. Signed-off-by: Gabriel Ionescu <gabriel.ionescu@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* run-postinsts: Disable dpkg --configure for debs to fix boot lockupGabriel Ionescu2017-11-221-0/+7
| | | | | | | | | | | | When a board boots for the first time, it executes run-postinsts.service and dpkg-configure.service. Since both services run dpkg --configure, it sometimes results in locking up the login service. This patch disables the execution of dpkg --configure from run-postinsts by removing the deb keyword from the list of scanned packet types. Signed-off-by: Gabriel Ionescu <gabriel.ionescu@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* qemu: CVE-2017-5931Sona Sarmadi2017-09-182-0/+53
| | | | | | | | | | Fixes integer overflow in in handling virtio-crypto requests Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5931 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Martin Borg <martin.borg@enea.com>
* qemu: CVE-2017-8309Sona Sarmadi2017-08-292-0/+43
| | | | | | | | | | | | | | | | | | Qemu built with the Audio subsystem support is vulnerable to a host memory leakage issue. It could occur if a guest user was to repeatedly start and stop audio capture. A privileged user inside guest could use this flaw to exhaust host memory, resulting in DoS. Reference: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-8309 Upstream patch: https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* qemu: CVE-2017-6505Sona Sarmadi2017-08-292-0/+57
| | | | | | | | | | | | | | | | | Quick Emulator built with the USB OHCI Emulation support is vulnerable to an infinite loop issue. It could occur while processing an endpoint list descriptor in ohci_service_ed_list(). A guest user/process could use this flaw to crash Qemu process resulting in DoS. References: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-6505 Upstream patch: http://git.qemu-project.org/?p=qemu.git;a=commitdiff;h=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* qemu: CVE-2017-7471Sona Sarmadi2017-08-292-0/+71
| | | | | | | | | | | | | | | | | | Qemu built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host. References: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471 Upstream patch: http://git.qemu-project.org/?p=qemu.git;a=commitdiff;h=96bae145e27d4df62671b4eebd6c735f412016cf Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* qemu: CVE-2017-2620Sona Sarmadi2017-08-293-0/+138
| | | | | | | | | | | | | | | QEMU built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. References: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620 Upstream patch: https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* elfutils,gdb: Drop bbappendsAdrian Dudau2017-06-2110-222/+0
| | | | | | | We won't upstream this and we won't maintain it anymore, so drop it. Signed-off-by: Adrian Dudau <adrian.dudau@enea.com> Signed-off-by: Martin Borg <martin.borg@enea.com>
* automake: remove patch integrated in pokyTudor Florea2016-03-302-40/+0
| | | | | Signed-off-by: Tudor Florea <tudor.florea@enea.com> Signed-off-by: Martin Borg <martin.borg@enea.com>
* binutils: drop the bbappendsMartin Borg2016-02-246-1097/+0
| | | | | | | | | | | | | | | | | This was a temporary fix for 64bit PPC kernel builds with binutils 2.24 [1]. The build problem was fixed in meta-fsl-ppc by backport of a kernel patch (commit a6c4175595b0f316e543cf93a8b6dc1a7f098997) and this backported patch was later removed when the kernel version was upgraded (commit e321cb35d66d31b4d7f10da989e7b94eea3337c3). binutils has also been upgraded to 2.25.1 on poky master ------- [1] https://lists.yoctoproject.org/pipermail/meta-freescale/2014-April/008083.html Signed-off-by: Martin Borg <martin.borg@enea.com> Signed-off-by: Huimin She <huimin.she@enea.com>
* valgrind: drop the bbappendMartin Borg2016-02-242-78/+0
| | | | | | | | | | | These workarounds were needed because Power ISA 2.07 was not supported in GCC 4.8.2 (introduced in GCC 4.9). GCC 4.8 support has been dropped from poky master since commit d9aabf9639510fdb3e2ccc21ba5ae4aa9f6e4a57. Signed-off-by: Martin Borg <martin.borg@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* elfutils: upgrade elfutils to version 0.164Martin Borg2016-02-242-7/+7
| | | | | | | elfutils 0.164 is now the default version used on poky master Signed-off-by: Martin Borg <martin.borg@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* gdb: upgrade gdb to version 7.10.1Martin Borg2016-02-222-15/+0
| | | | | | | | | | Upgrade gdb so changes apply to the version used on poky master branch. The patch to avoid ksh dependency was removed since the patched file has been removed from gdb. Signed-off-by: Martin Borg <martin.borg@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* python-smartpm: drop the bbappendMartin Borg2016-02-052-59/+0
| | | | | | | | The patch exists on poky master since commit e5a11759d8d6f15191167ab1f3ffb3db8b6715aa Signed-off-by: Martin Borg <martin.borg@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* e2fsprogs: drop the bbappendMartin Borg2016-02-051-1/+0
| | | | | | | | Fixed on poky master since commit 06ff3c420ca3b4237271879571d9933bbe6463ec Signed-off-by: Martin Borg <martin.borg@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* tclap: drop the bbappendMartin Borg2016-02-051-1/+0
| | | | | | | | The problem has been fixed in meta-openembedded, commit f6f4cadd65c7609776b5e6946e2448bee22397d0 Signed-off-by: Martin Borg <martin.borg@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* ptest: set relative path for test-driverTudor Florea2015-12-142-0/+40
| | | | | | | | | | | | Starting with dizzy(poky v1.7) parallel testing was activated and test-driver is the log driver for this mechanism. But generated Makefile is using an absolute path when calls the test-driver which is a wrong path at run-time. Signed-off-by: Adrian Calianu <adrian.calianu@enea.com> Signed-off-by: George Nita <george.nita@enea.com> Signed-off-by: Tudor Florea <tudor.florea@enea.com> Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* tclap: add ALLOW_EMPTY in bb fileAdrian Dudau2015-12-111-0/+1
| | | | | | | This is ported from meta-openembedded:master Signed-off-by: Adrian Dudau <adrian.dudau@enea.com> Signed-off-by: Tudor Florea <tudor.florea@enea.com>
* gdb: Add ptestPaul Vaduva2015-12-077-0/+172
| | | | | Signed-off-by: Paul Vaduva <Paul.Vaduva@enea.com> Signed-off-by: George Nita <george.nita@enea.com>
* python-smartpm: change "already installed" warnings into info messagesTudor Florea2015-11-242-0/+59
| | | | | | | | | | | | | | | | | | | It's possible to trigger "already installed" messages during normal usage if you explicitly install something in the image through IMAGE_INSTALL that has a dependency on some -dev packages and also have dev-pkgs in IMAGE_FEATURES. Since we now check the do_rootfs log for warnings, these are reported as warnings at the build system level. This situation should not trigger warnings, nor is it really cause for concern under any other circumstance if the user asks smart to install something that's already installed, so make it an info message rather than a warning. Fixes [YOCTO #7840]. This patch was ported from poky/master Signed-off-by: Tudor Florea <tudor.florea@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* elfutils: add ptestTudor Florea2015-11-104-0/+65
| | | | | | | Add Enea Specific ptest Signed-off-by: Tudor Florea <tudor.florea@enea.com> Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
* Initial commitAdrian Dudau2015-10-289-0/+1176
result of splitting up meta-enea Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-05-11 23:26:00 +0000