summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
* log4cpp: Fix build system path in pkgconfig file QA failure.Philip Balister2016-04-172-3/+25
| | | | | | | | | * Must remove path from pc.in and stop configure.in from regenerating the file. * Also included some changes requested in earlier review that arrived late. Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xmlstarlet: Disable PARALLEL_MAKERichard Purdie2016-04-171-0/+7
| | | | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mplayer2: fix building with gcc 5.xBelal, Awais2016-04-172-3/+137
| | | | | | | | | | | | | | | | This patch works around a potential problem in the theora glue code where it assumes that the compiler will somehow find a function which is not exported explicitly through the libtheora library. Due to this problem the build fails with gcc-5.x compiler. The included patch essentially backports a commit which updates the glue code to use the Theora 1.0 API to eliminate this problem and PNBLACKLIST is cleared for mplayer2. Signed-off-by: Awais Belal <awais_belal@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xdelta3: Security fix CVE-2014-9765Armin Kuster2016-02-212-0/+312
| | | | | | CVE-2014-9765 xdelta: buffer overflow in main_get_appheader Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: Security fix CVE-2016-1903Armin Kuster2016-02-102-0/+56
| | | | | | CVE-2016-1903 php: Out-of-bounds memory read via gdImageRotateInterpolated Signed-off-by: Armin Kuster <akuster@mvista.com>
* php: Security fix CVE-2015-7804Armin Kuster2016-02-102-0/+65
| | | | | | CVE-2015-7804 php: uninitialized pointer in phar_make_dirstream() Signed-off-by: Armin Kuster <akuster@mvista.com>
* php: Security fix CVE-2015-7803Armin Kuster2016-02-102-1/+88
| | | | | | CVE-2015-7803 php: NULL pointer dereference in phar_get_fp_offset() Signed-off-by: Armin Kuster <akuster@mvista.com>
* qwt: Fix host-user-contaminatedArmin Kuster2016-02-061-0/+1
| | | | | | | WARNING: QA Issue: qwt: /qwt-examples/usr/bin/event_filter is owned by uid 1000, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated] WARNING: QA Issue: qwt: /qwt-examples/usr/bin/cpuplot is owned by uid 1000, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* orrery: fix host-user-contaminatedYi Zhao2016-02-061-0/+1
| | | | | | | | | | Fix QA warning: WARNING: QA Issue: orrery: /orrery/usr/share/orrery/deepSky/messier is owned by uid 1000, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* logwatch: fix host-user-contaminatedYi Zhao2016-02-061-0/+1
| | | | | | | | | | Fix QA warning: WARNING: QA Issue: logwatch: /logwatch/usr/share/logwatch/scripts/services/resolver is owned by uid 1000, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* networkmanager: fix QA warningArmin Kuster2016-02-061-0/+1
| | | | | | | WARNING: QA Issue: networkmanager rdepends on libnewt, but it isn't a build dependency? [build-deps] WARNING: QA Issue: networkmanager rdepends on polkit, but it isn't a build dependency? [build-deps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* waf-samba: enable parallel buildsJens Rehsack2016-02-061-0/+4
| | | | | | | | | | Instead of relying on sequencial waf build invoked by make, invoke waf as documented with default switch for building in parallel. Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mozjs: fix linking issues on i586Maciej Borzecki2016-02-062-0/+47
| | | | | | | | | | | When building for qemux86 on a x86 host, there's a possibility that the build will try to link with incorrect libraries. Due to problematic -rpath-link the linker may try to use host libraries if they are present and are arch compatible. Signed-off-by: Maciej Borzecki <maciej.borzecki@open-rnd.pl> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fltk: Fix license warningArmin Kuster2016-01-141-0/+43
| | | | | | | | WARNING: fltk: No generic license file exists for: FLTK in any provider Add license Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fltk: fix build issue.Armin Kuster2016-01-142-0/+38
| | | | | | | | this patch fixes: Fl_JPEG_Image.cxx: In constructor 'Fl_JPEG_Image::Fl_JPEG_Image(const char*)': | Fl_JPEG_Image.cxx:156:29: error: invalid conversion from 'int' to 'boolean' [-fpermissive] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* polkit-gnome: remove unrecognized configure optionsYi Zhao2016-01-141-4/+0
| | | | | | | | | | Fix QA warning: WARNING: QA Issue: polkit-gnome: configure was passed unrecognised options: --disable-examples --disable-introspection [unknown-configure-option] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* iperf3: fix build-deps qa warningKai Kang2016-01-141-0/+3
| | | | | | | | | | | Add PACKAGECONFIG lksctp to fix qa warning: | WARNING: QA Issue: iperf3 rdepends on lksctp-tools, but it isn't a | build dependency? [build-deps] Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* opencv: support machines based on oe-core tune-corei7.incAndre McCurdy2016-01-142-0/+4
| | | | | | | | | | | oe-core tune-corei7.inc enables -msse4.2 (rather than -msse3, which is only enabled by tune-core2.inc). Add test for -msse4.2 to ensure that SSE is enabled for machines based on tune-corei7.inc (also add a test for -msse4.1 for completeness). Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* opencv: limit ARM_INSTRUCTION_SET = "arm" over-ride to armv4/armv5Andre McCurdy2016-01-142-2/+4
| | | | | | Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* opencv: sort PACKAGECONFIG optionsAndre McCurdy2016-01-142-9/+11
| | | | | | | | Recipe cleanup only, no functional changes. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* edac-utils: add patches for initscriptKai Kang2016-01-143-5/+145
| | | | | | | | | | | | | | | | | | | | | | Update LIC_FILES_CHKSUM that the whole license file should be used rather than the first 2 lines. Remove COMPATIBLE_HOST that edac-utils could build for all architectures. Update runtime dependencies: * add perl modules that edac-ctl needs * add dmidecode for the archs which are in COMPATIBLE_HOST of dmidecode that dmidecode is required by command edac-ctl. And add patches for initscripts to: * add restart subcommand * make init script be able to load EDAC module automatically Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mce-inject: add recipeKai Kang2015-12-311-0/+20
| | | | | | | Add recipe of mce-inject which is required to run mcelog ptest cases. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* libgxim: move from meta-ruby back to meta-oeMartin Jansa2015-12-302-0/+46
| | | | | | | | | * it was moved to meta-ruby (totherer with imsettings which depends on libgxim) because of ruby-native dependency, now when ruby was moved from meta-ruby to oe-core we can move libgxim back to meta-oe (which also allows imsettings in meta-xfce to depend only on meta-oe as well) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* lcdproc5: add dependency on lircMartin Jansa2015-12-201-1/+1
| | | | | | | | * it's autodetected from sysroot: ERROR: lcdproc: lcdd-driver-lirc package isn't created when building with minimal dependencies? Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tmux: add PACKAGECONFIG for utempterYi Zhao2015-12-201-0/+4
| | | | | | | | | | Fix QA warning: WARNING: QA Issue: tmux rdepends on libutempter, but it isn't a build dependency? [build-deps] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lmsensors-config: fix the packaging for sensordJackie Huang2015-12-201-1/+4
| | | | | | | | | /etc/sysconfig/sensord is needed by sensord.service so it should be packaged in lmsensors-config-sensord. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libvpx: fix host-user-comtaminated QA issueQi.Chen@windriver.com2015-12-201-4/+1
| | | | | | | | | Fix 'host-user-comtaminated' QA issue by using chown in do_install. Also remove the useless do_compile function. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tipcutils: fix host-user-comtaminated QA issueQi.Chen@windriver.com2015-12-201-0/+1
| | | | | | | | Fix the 'host-user-comtaminated' QA issue by using chown in do_install. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* canutils: rdep on iproute2Christopher Larson2015-12-201-0/+3
| | | | | | | | | busybox ip fails to configure can interfaces, so we need iproute2 to do so. See also http://www.armadeus.com/wiki/index.php?title=CAN_bus_Linux_driver. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pmtools: support huge ACPI tableKai Kang2015-12-202-1/+69
| | | | | | | | | | | | | | | | For some servers such as Canoe Pass or Thunder Ridge, they have much more entries in ACPI table, so original 1K buffer is insufficient. Switch to dynamic buffer for this situation. Remove 'protocol' field in SRC_URI as well which cause warning: | WARNING: Failed to fetch URL git://github.com/anyc/pmtools.git;protocol=https, | attempting MIRRORS if available Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* htop: delete not used patchRadek Dostal2015-12-201-13/+0
| | | | | | | | | remove-proc-test.patch was not used since commit 78909f65d8 "htop: upgrade to version 1.0.2" Signed-off-by: Radek Dostal <radek.dostal@streamunlimited.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* hplip: specify cupsbackenddir and cupsfilterdirYi Zhao2015-12-201-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix QA issue when enable multilib: ERROR: QA Issue: hplip: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/cups /usr/lib/cups/filter /usr/lib/cups/backend /usr/lib/cups/filter/hpcac /usr/lib/cups/filter/foomatic-rip-hplip /usr/lib/cups/filter/pstotiff /usr/lib/cups/filter/hpcups /usr/lib/cups/filter/hplipjs /usr/lib/cups/filter/hpps /usr/lib/cups/filter/.debug /usr/lib/cups/filter/.debug/hplipjs /usr/lib/cups/filter/.debug/hpcups /usr/lib/cups/filter/.debug/hpps /usr/lib/cups/backend/hp /usr/lib/cups/backend/.debug /usr/lib/cups/backend/.debug/hp Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. hplip: 17 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* rrdtool: install python site packages into libdirQi.Chen@windriver.com2015-12-201-4/+4
| | | | | | | | | Fix the do_configure function to suite the latest version to install python libraries into ${libdir}. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pam-passwdqc: fix the hardcoded libdirYi Zhao2015-12-201-3/+4
| | | | | | | | | | | | Fix QA issue when enable multilib: WARNING: QA Issue: pam-passwdqc-dbg: found library in wrong location: /lib/security/.debug/pam_passwdqc.so pam-passwdqc: found library in wrong location: /lib/security/pam_passwdqc.so [libdir] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tree: respect the package's own default CFLAGSAndre McCurdy2015-12-201-2/+9
| | | | | | | | | | | | | The tree Makefile defines default CFLAGS form Linux (-DLINUX, etc) which are lost if we don't manually include them in the final CFLAGS. Also break the dependency on EXTRA_OEMAKE containing '-e', disable the unused configure task and, since package has a very short description, set SUMMARY instead of DESCRIPTION. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postgresql: Don't symlink to perl if it's disabledGeorge McCollister2015-12-201-8/+10
| | | | | | | | | Don't create a symlink to libperl.so if perl isn't in PACKAGECONFIG. Attempting to do so will fail if perl hasn't been built. Signed-off-by: George McCollister <george.mccollister@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mcelog: remove bashism and create ptest subpackageKai Kang2015-12-203-11/+60
| | | | | | | | | | | Create ptest subpackage. Add a patch to remove bashism and then only ptest package depends on bash. Inherit autotools-brokensep and re-write do_install as well. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mariadb.inc: fix mysqld hung at first init time based on systemdHongxu Jia2015-12-206-25/+132
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While SYSTEMD_AUTO_ENABLE_mariadb-server = "enable", the mysqld service hungs. ... [ **] A start job is running for Run pending postinsts (25s / no limit) [ OK ] Stopped MariaDB database server. ... In mariadb-server's pkg_postinst, it install db at first runtime. And the following 'systemctl mysqld restart' casued the hunging. So the fix idea is to reomove pkg_postinst and still install db at first runtime. Introduce mysql-systemd-start from ${S}/packaging/rpm-oel/. For review convenience, we add them as file. The mysql-systemd-start provides two functions: the install_db is to install db at fist runtime (the first runtime means if a db existed, the install_db will directly exit); the pinger is to wait for mysqld service startup completed. The mysqld.service add ExecStartPost than previous which invoke 'mysql-systemd-start post' to wait for mysqld service startup completed. We add a package to provide install_db, so the user could choose it to install database for mariadb at first boot before mysqld started. It also fix another issue: When you manually restart mysqld and do mysql test to connect the server, the return of the restart could make sure mysqld is ready, and the following db connect will not fail with: ... Can't connect to local MySQL server through socket ... Tweak my.cnf to remove obsolete/incorrect parameter. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libssh2: make crypto library selectableKai Kang2015-12-201-3/+7
| | | | | | | | | | Add PACKAGECONFs 'openssl' and 'gcrypt' to make crypto library selectable. Only one of them could be set. If they are both set, 'gcrypt' is invalide. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* gpsd: also support bluez5Christopher Larson2015-12-201-2/+2
| | | | | | | | | gpsd uses libbluetooth, not the dbus interface, so it can work with bluez5 as well, as the library is compatible. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* poppler-data: install CMap resources for CJK glyph supportJoshua Lock2015-12-201-3/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | CID-keyed fonts, as commonly used to support pictographic East Asian character sets require Character Maps which unidirectionally map character codes (i.e. Unicode encoding) to CID (the glyphs in the font face). Without a CMap poppler isn't able to correctly PDF files in Chinese, Japanese or Korean without embedded fonts. This change installs a copy of the Identity files from Adobe's CMap Resources[1] based on a similar change in Fedora's poppler-data[2][3]. This is an updated version of the v2 patch originally created and sent by my colleague, Joshua Lock. 1. https://github.com/adobe-type-tools/cmap-resources 2. http://pkgs.fedoraproject.org/cgit/poppler-data.git/tree/poppler-data.spec#n18 3. https://bugzilla.redhat.com/show_bug.cgi?id=842351 Co-Authored-By: Bob Ham <bob.ham@collabora.com> Signed-off-by: Bob Ham <bob.ham@collabora.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* poppler: move RDEPENDS on poppler-data to libpopplerBob Ham2015-12-201-1/+1
| | | | | | | | | | | | | | The poppler-data package contains data needed by consumers of the libpoppler package, for example evince. However, the RDEPENDS in this recipe is only for the poppler package. Moving the RDEPENDS to libpoppler ensures that poppler-data is included in any builds with separate libpoppler consumers but not poppler. The poppler package automatically depends on libpoppler so poppler's dependency on poppler-data is not lost. Signed-off-by: Bob Ham <bob.ham@collabora.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sessreg: add a patch to avoid build errors.Li xin2015-12-202-6/+34
| | | | | | | | | Do not build man dir since it is always build failed. This is not a good way,but can remove sessreg form PNBLACKLIST. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* syslog-ng: add UPDATE_ALTERNATIVE for syslog-serviceSteffen Sledz2015-12-201-1/+7
| | | | | | | | | | Use ALTERNATIVE mechanism in OE to manage the syslog service to avoid conflicts with other syslog implementations like rsyslog or busybox. Signed-off-by: Steffen Sledz <sledz@dresearch-fe.de> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2015-2698Wenzong Fan2015-12-202-0/+135
| | | | | | | | | | | | | | | | | The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2015-2697Wenzong Fan2015-12-202-0/+59
| | | | | | | | | | | | | | The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789 Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2015-2696Wenzong Fan2015-12-202-0/+740
| | | | | | | | | | | | | | | lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krb5: fix CVE-2015-2695Wenzong Fan2015-12-202-0/+573
| | | | | | | | | | | | | | | lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samba, ctdb, libldb, libtdb, libtevent, talloc: move to meta-networkingMartin Jansa2015-11-1632-35667/+0
| | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* qt-mobility: fix dependencies and PACKAGECONFIGMartin Jansa2015-11-163-3/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * this isn't proper fix, just to silence various QA issues * nobody cares about qt-mobility, this is just last step before adding PNBLACKLIST for this (or moving it to separate meta-qt4) * "Fixes" qt-mobility-embedded-1.2.0: qt-mobility-embedded: invalid PACKAGECONFIG: bluez5 [invalid-packageconfig] qt-mobility-x11-1.2.0: qt-mobility-x11: invalid PACKAGECONFIG: bluez5 [invalid-packageconfig] qt-mobility doesn't really support bluez5, so we'll just silence the QA warning, existing PACKAGECONFIGs for bluez4 and pulseaudio are useless as well, because without disable option both are still autodetected from ssysroot * "Fixes" WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on glib-2.0, but it isn't a build dependency? WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on gstreamer, but it isn't a build dependency? WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libasound, but it isn't a build dependency? WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libgstapp-0.10, but it isn't a build dependency? WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libgstvideo-0.10, but it isn't a build dependency? WARN: qt-mobility-x11: qt-mobility-x11 rdepends on glib-2.0, but it isn't a build dependency? WARN: qt-mobility-x11: qt-mobility-x11 rdepends on gstreamer, but it isn't a build dependency? WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libasound, but it isn't a build dependency? WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstapp-0.10, but it isn't a build dependency? WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstinterfaces-0.10, but it isn't a build dependency? WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstvideo-0.10, but it isn't a build dependency? WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libxext, but it isn't a build dependency? WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libxv, but it isn't a build dependency? but it adds dependency on meta-multimedia layer (which isn't in meta-oe dependencies), so it's not correct, but won't make things worse then they already are since qt-mobility was moved from oe-core, hopefully it will move to separate meta-qt4 soon. gstreamer was already in DEPENDS, but DEPENDS was overwritten by qt-mobility_1.2.0.inc which was included later, also drop qt4* dependencies because these are already taken care of in qt4(e).bbclass. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-29 06:01:54 +0000