summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* imsettings: Move from meta-ruby to meta-xfceKhem Raj2015-12-284-1/+1
| | | | | | | | | | | | | | | | | It depends on xfconf which is XFCE component, no one depends on imsettings in meta-ruby so move it close to its dependencies. Ideally, xfconf should be turned into PACKAGECONFIG and this recipe then moved to meta-oe since all kind of DE's can use it then. For now it frees meta-ruby from unnecessary dependency on xfce layer Change-Id: I6b5896b0db504fad49a9da5967d3493e27c627b0 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* netmap-modules: Modules may not have the same arch as userspaceJackie Huang2015-12-221-0/+5
| | | | | | | | | | | Kernel modules may not have the same architecture as user space. So we tell INSANE_SKIP to skip checking the arch for the modules. This is consistent with other kernel modules and the kernel recipe. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* netmap-modules: make deterministic builds for driversJackie Huang2015-12-221-1/+25
| | | | | | | | | | | | | | | | | | | | The driver builds are optional, but for deterministic builds, we should should be able to explicitly enable/disable the builds for them in a proper place (maybe in BSP). But we can't use PACKAGECONFIG since there is no option for each driver, and the options are: --no-drivers do not compile any driver --no-drivers= do not compile the given drivers (comma sep.) --drivers= only compile the given drivers (comma sep.) So use NETMAP_DRIVERS to list the needed drivers and add proper configs to EXTRA_OECONF, the default is no drivers, and all supported drivers are listed in NETMAP_ALL_DRIVERS. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mpd: add dependency on libupnpMartin Jansa2015-12-201-1/+1
| | | | | | | | * it's autodetected from sysroot: WARN: mpd: mpd rdepends on libupnp, but it isn't a build dependency? Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lcdproc5: add dependency on lircMartin Jansa2015-12-201-1/+1
| | | | | | | | * it's autodetected from sysroot: ERROR: lcdproc: lcdd-driver-lirc package isn't created when building with minimal dependencies? Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gnome-panel: add dependency on dbusMartin Jansa2015-12-201-1/+1
| | | | | | | | * it's autodetected from sysroot: WARN: gnome-panel: gnome-panel rdepends on dbus-lib, but it isn't a build dependency? Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tmux: add PACKAGECONFIG for utempterYi Zhao2015-12-201-0/+4
| | | | | | | | | | Fix QA warning: WARNING: QA Issue: tmux rdepends on libutempter, but it isn't a build dependency? [build-deps] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xfsprogs: fix the licenseJackie Huang2015-12-201-1/+1
| | | | | | | | | | The library named "libhandle" and some specific header files are licensed under LGPLv2.1, all other components are licensed under GPLv2. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lmsensors-config: fix the packaging for sensordJackie Huang2015-12-201-1/+4
| | | | | | | | | /etc/sysconfig/sensord is needed by sensord.service so it should be packaged in lmsensors-config-sensord. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libvpx: fix host-user-comtaminated QA issueQi.Chen@windriver.com2015-12-201-4/+1
| | | | | | | | | Fix 'host-user-comtaminated' QA issue by using chown in do_install. Also remove the useless do_compile function. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tipcutils: fix host-user-comtaminated QA issueQi.Chen@windriver.com2015-12-201-0/+1
| | | | | | | | Fix the 'host-user-comtaminated' QA issue by using chown in do_install. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* phpmyadmin: fix CVE-2015-7873Wenzong Fan2015-12-202-0/+49
| | | | | | | | | | | | | The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter. Backport upstream commit to fix it: https://github.com/phpmyadmin/phpmyadmin/commit/cd097656758f981f80fb9029c7d6b4294582b706 Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* canutils: rdep on iproute2Christopher Larson2015-12-201-0/+3
| | | | | | | | | busybox ip fails to configure can interfaces, so we need iproute2 to do so. See also http://www.armadeus.com/wiki/index.php?title=CAN_bus_Linux_driver. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pmtools: support huge ACPI tableKai Kang2015-12-202-1/+69
| | | | | | | | | | | | | | | | For some servers such as Canoe Pass or Thunder Ridge, they have much more entries in ACPI table, so original 1K buffer is insufficient. Switch to dynamic buffer for this situation. Remove 'protocol' field in SRC_URI as well which cause warning: | WARNING: Failed to fetch URL git://github.com/anyc/pmtools.git;protocol=https, | attempting MIRRORS if available Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* htop: delete not used patchRadek Dostal2015-12-201-13/+0
| | | | | | | | | remove-proc-test.patch was not used since commit 78909f65d8 "htop: upgrade to version 1.0.2" Signed-off-by: Radek Dostal <radek.dostal@streamunlimited.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hplip: specify cupsbackenddir and cupsfilterdirYi Zhao2015-12-201-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix QA issue when enable multilib: ERROR: QA Issue: hplip: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/cups /usr/lib/cups/filter /usr/lib/cups/backend /usr/lib/cups/filter/hpcac /usr/lib/cups/filter/foomatic-rip-hplip /usr/lib/cups/filter/pstotiff /usr/lib/cups/filter/hpcups /usr/lib/cups/filter/hplipjs /usr/lib/cups/filter/hpps /usr/lib/cups/filter/.debug /usr/lib/cups/filter/.debug/hplipjs /usr/lib/cups/filter/.debug/hpcups /usr/lib/cups/filter/.debug/hpps /usr/lib/cups/backend/hp /usr/lib/cups/backend/.debug /usr/lib/cups/backend/.debug/hp Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. hplip: 17 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* rrdtool: install python site packages into libdirQi.Chen@windriver.com2015-12-201-4/+4
| | | | | | | | | Fix the do_configure function to suite the latest version to install python libraries into ${libdir}. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pam-passwdqc: fix the hardcoded libdirYi Zhao2015-12-201-3/+4
| | | | | | | | | | | | Fix QA issue when enable multilib: WARNING: QA Issue: pam-passwdqc-dbg: found library in wrong location: /lib/security/.debug/pam_passwdqc.so pam-passwdqc: found library in wrong location: /lib/security/pam_passwdqc.so [libdir] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tree: respect the package's own default CFLAGSAndre McCurdy2015-12-201-2/+9
| | | | | | | | | | | | | The tree Makefile defines default CFLAGS form Linux (-DLINUX, etc) which are lost if we don't manually include them in the final CFLAGS. Also break the dependency on EXTRA_OEMAKE containing '-e', disable the unused configure task and, since package has a very short description, set SUMMARY instead of DESCRIPTION. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: Don't symlink to perl if it's disabledGeorge McCollister2015-12-201-8/+10
| | | | | | | | | Don't create a symlink to libperl.so if perl isn't in PACKAGECONFIG. Attempting to do so will fail if perl hasn't been built. Signed-off-by: George McCollister <george.mccollister@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apache2: fix host-user-contaminated warningsKai Kang2015-12-201-0/+2
| | | | | | | | | | | | | | It shows warnings when build apache2 such as: | WARNING: QA Issue: apache2: /apache2-dev/usr/share/apache2/icons/small/movie.gif | is owned by uid 1785, which is the same as the user running bitbake. | This may be due to host contamination [host-user-contaminated] Set the owner and group to root to fix it. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mcelog: remove bashism and create ptest subpackageKai Kang2015-12-203-11/+60
| | | | | | | | | | | Create ptest subpackage. Add a patch to remove bashism and then only ptest package depends on bash. Inherit autotools-brokensep and re-write do_install as well. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* faenza-icon-theme: fix host-user-contaminationAndreas Müller2015-12-201-0/+1
| | | | | | Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb.inc: fix mysqld hung at first init time based on systemdHongxu Jia2015-12-206-25/+132
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While SYSTEMD_AUTO_ENABLE_mariadb-server = "enable", the mysqld service hungs. ... [ **] A start job is running for Run pending postinsts (25s / no limit) [ OK ] Stopped MariaDB database server. ... In mariadb-server's pkg_postinst, it install db at first runtime. And the following 'systemctl mysqld restart' casued the hunging. So the fix idea is to reomove pkg_postinst and still install db at first runtime. Introduce mysql-systemd-start from ${S}/packaging/rpm-oel/. For review convenience, we add them as file. The mysql-systemd-start provides two functions: the install_db is to install db at fist runtime (the first runtime means if a db existed, the install_db will directly exit); the pinger is to wait for mysqld service startup completed. The mysqld.service add ExecStartPost than previous which invoke 'mysql-systemd-start post' to wait for mysqld service startup completed. We add a package to provide install_db, so the user could choose it to install database for mariadb at first boot before mysqld started. It also fix another issue: When you manually restart mysqld and do mysql test to connect the server, the return of the restart could make sure mysqld is ready, and the following db connect will not fail with: ... Can't connect to local MySQL server through socket ... Tweak my.cnf to remove obsolete/incorrect parameter. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libssh2: make crypto library selectableKai Kang2015-12-201-3/+7
| | | | | | | | | | Add PACKAGECONFs 'openssl' and 'gcrypt' to make crypto library selectable. Only one of them could be set. If they are both set, 'gcrypt' is invalide. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gpsd: also support bluez5Christopher Larson2015-12-201-2/+2
| | | | | | | | | gpsd uses libbluetooth, not the dbus interface, so it can work with bluez5 as well, as the library is compatible. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* poppler-data: install CMap resources for CJK glyph supportJoshua Lock2015-12-201-3/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | CID-keyed fonts, as commonly used to support pictographic East Asian character sets require Character Maps which unidirectionally map character codes (i.e. Unicode encoding) to CID (the glyphs in the font face). Without a CMap poppler isn't able to correctly PDF files in Chinese, Japanese or Korean without embedded fonts. This change installs a copy of the Identity files from Adobe's CMap Resources[1] based on a similar change in Fedora's poppler-data[2][3]. This is an updated version of the v2 patch originally created and sent by my colleague, Joshua Lock. 1. https://github.com/adobe-type-tools/cmap-resources 2. http://pkgs.fedoraproject.org/cgit/poppler-data.git/tree/poppler-data.spec#n18 3. https://bugzilla.redhat.com/show_bug.cgi?id=842351 Co-Authored-By: Bob Ham <bob.ham@collabora.com> Signed-off-by: Bob Ham <bob.ham@collabora.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* poppler: move RDEPENDS on poppler-data to libpopplerBob Ham2015-12-201-1/+1
| | | | | | | | | | | | | | The poppler-data package contains data needed by consumers of the libpoppler package, for example evince. However, the RDEPENDS in this recipe is only for the poppler package. Moving the RDEPENDS to libpoppler ensures that poppler-data is included in any builds with separate libpoppler consumers but not poppler. The poppler package automatically depends on libpoppler so poppler's dependency on poppler-data is not lost. Signed-off-by: Bob Ham <bob.ham@collabora.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sessreg: add a patch to avoid build errors.Li xin2015-12-202-6/+34
| | | | | | | | | Do not build man dir since it is always build failed. This is not a good way,but can remove sessreg form PNBLACKLIST. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-jinja2: Disable `make clean`Haris Okanovic2015-12-201-0/+2
| | | | | | | | | | | Makefile doesn't define "clean". Unless disabled, base_do_configure() will fail the build attempting to run `make clean` when rebuilding this recipe. Signed-off-by: Haris Okanovic <haris.okanovic@ni.com> Natinst-ReviewBoard-ID: 119389 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* dracut: fix host-user-contaminatedRobert Yang2015-12-201-0/+3
| | | | | | | | | | | | | Fixed: dracut-043+giteab03540cd695d940062af5b55c02e8829aaa526: dracut: /dracut/usr/lib/dracut/modules.d/99img-lib/img-lib.sh is owned by uid 15220, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated] lib32-dracut-043+giteab03540cd695d940062af5b55c02e8829aaa526: lib32-dracut: /lib32-dracut/usr/lib/dracut/modules.d/99img-lib/img-lib.sh is owned by uid 15220, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated] Its Makefile uses cp -arx to install modules.d, so fix the owner to root:root Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* VLC: do not use --with-contribRafaël Carré2015-12-201-1/+0
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* VLC: make libdvdread PACKAGECONFIGRafaël Carré2015-12-201-4/+4
| | | | | | | | Enable it by default. Make both dvdread and dvdnav also depend on libdvdcss Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* VLC: explicit PACKAGECONFIG for freetypeRafaël Carré2015-12-201-1/+2
| | | | | | | Enable it by default Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* VLC: explicit PACKAGECONFIG for fontconfigRafaël Carré2015-12-201-1/+2
| | | | | | | Enable it by default Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* VLC: make libnotify a configurable dependencyRafaël Carré2015-12-201-2/+3
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* vlc: remove libdc1394 libraw1394 from DEPENDSRafaël Carré2015-12-201-2/+2
| | | | | | | | They are only needed if the modules introduced in ea31946 are enabled. Add these modules to default PACKAGECONFIG to keep existing defaults. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libnet-ssleay-perl: fix test failures with opensslHongxu Jia2015-12-203-0/+147
| | | | | | | | | Backport two patches from uptream to fix test failure with openssl 1.0.2b or above. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhtml-tree-perl: fix shebangHongxu Jia2015-12-202-1/+28
| | | | | | | | | | | | | | | There is a build failure while installing libhtml-tree-perl to sdk: ... |Computing transaction...error: Can't install nativesdk-libhtml-tree- perl-5.03-r0.1@x86_64_nativesdk: no package provides tmp/sysroots/ x86_64-linux/usr/bin/perl-native/perl.real ... The rpm detects the shebang of perl script, so we correct it. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-requests: Add RDEPENDSScott Ellis2015-12-201-0/+2
| | | | | | | | The python-requests module has runtime dependencies. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* syslog-ng: add UPDATE_ALTERNATIVE for syslog-serviceSteffen Sledz2015-12-201-1/+7
| | | | | | | | | | Use ALTERNATIVE mechanism in OE to manage the syslog service to avoid conflicts with other syslog implementations like rsyslog or busybox. Signed-off-by: Steffen Sledz <sledz@dresearch-fe.de> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2015-2698Wenzong Fan2015-12-202-0/+135
| | | | | | | | | | | | | | | | | The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2015-2697Wenzong Fan2015-12-202-0/+59
| | | | | | | | | | | | | | The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789 Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2015-2696Wenzong Fan2015-12-202-0/+740
| | | | | | | | | | | | | | | lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2015-2695Wenzong Fan2015-12-202-0/+573
| | | | | | | | | | | | | | | lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ufw: improve RRECOMMENDSRoy Li2015-12-201-0/+8
| | | | | | | | ufw needs lots of netfilter module to run Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ctdb: rdep on bashChristopher Larson2015-12-201-0/+3
| | | | | | | | onnode is a shell script with bashisms and bash #!. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* opensaf: remove unused service fileLi Xin2015-12-203-33/+1
| | | | | | | | | | Upstream ships systemd service file plmcboot.service and plmcd.service now, so we don't need this anymore. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ypbind-mt: set path of ypdomainname in ypbind scriptJian Liu2015-12-202-5/+8
| | | | | | | | | | | | The script ypbind will cause error if using ypdomainname command provided by busybox. So add RDEPENDCY on yp-tools and change the path of ypdomainname. Signed-off-by: Jian Liu <jian.liu@windriver.com> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pure-ftpd: add PACKAGECONFIG for libsodiumRoy Li2015-12-201-0/+2
| | | | | | | Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>