summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* ethtool: Upgrade to 4.11Changhyeok Bae2017-07-171-3/+3
| | | | | | | | | | Restore SRC_URI address (From OE-Core rev: 79212fea2ad6bf61097a8e1cda2e17ea30d059cb) Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libarchive: Upgrade to 3.3.2 releaseOtavio Salvador2017-07-171-2/+2
| | | | | | | | (From OE-Core rev: 00cd51e4f9e4344faf0d2e6c1a7fa109901b48b2) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* acpitests: Remove as unmaintainedJussi Kukkonen2017-07-173-406/+0
| | | | | | | | | | | | This recipe was last upgraded about ~30 releases or three years ago, it seems to only be touched when something breaks. It also has an 'interesting' license that maybe is open source... (From OE-Core rev: 42a0fcec9c956834cc0f05bdf66701424472b1b4) Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lsof: update SRC_URIAndre McCurdy2017-07-081-3/+6
| | | | | | | | | | | | | | | | | | Upstream lsof releases are hosted on an ftp server which times out download attempts from hosts for which it can not perform a DNS reverse-lookup. See: https://people.freebsd.org/~abe/ http://www.mirrorservice.org seems to be the most commonly used alternative (and using it for SRC_URI allows the custom UPSTREAM_CHECK_URI to be removed). (From OE-Core rev: 4e718242c1554021689a7946add055b22b81ec42) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lsof: minor recipe cleanupAndre McCurdy2017-07-081-7/+8
| | | | | | | | | | | | | - Add HOMEPAGE - Remove ${S} from LIC_FILES_CHKSUM path - Use tabs consistently to indent do_configure() - Re-order LIC_FILES_CHKSUM definition to follow OE style guide (From OE-Core rev: 78701c5b873605240226c502de3b940097433596) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysklogd: Improve build and fix runtime crashKhem Raj2017-07-083-3/+66
| | | | | | | | | | Patch the makefile so it can respect flags from environment add a patch to fix a run time crash (From OE-Core rev: 39c00c7c42fe7e555eb65ea7c01bfc9cb8a34514) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: add acl, attr, curl and util-linux runtime dependenciesFathi Boudra2017-07-061-2/+22
| | | | | | | | | | | | | | | | | | * Use a list and re-order alphabetically to make it easier to read and update. * Add missing runtime dependencies: - acl (getfacl/setfacl commands are required) - attr (getfattr/setfattr commands are required) - iproute2 (required for netns tests) - curl (curl command is required) - util-linux (ipcs command is required) Reported-by: Naresh Kamboju <naresh.kamboju@linaro.org> (From OE-Core rev: a7480beb33e69d7cb63353ffa215326f4ae4b87d) Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Reduce local Pending patchesDengke Du2017-07-063-22/+25
| | | | | | | | | | | | | | Rebase the patch on latest ltp upstream: 0007-fix-__WORDSIZE-undeclared-when-building-with-musl.patch [Yocto #11548] (From OE-Core rev: 69bd27d9d268d4c52aa521a0ceed0eb5a259a516) Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: syscalls/add_key02: fix for nonempty NULL payloadFathi Boudra2017-07-062-0/+137
| | | | | | | | | | | | | Add upstream patch to fix syscalls/add_key02 test for nonempty NULL payload: https://github.com/linux-test-project/ltp/commit/25045624e941ee76a13febd36187e23c6c435507 (From OE-Core rev: c7c72b73a841c6eadf88428db643e77deb0c0e65) Signed-off-by: Milosz Wasilewski <milosz.wasilewski@linaro.org> Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* grep: upgrade to 3.1Dengke Du2017-07-061-2/+2
| | | | | | | | (From OE-Core rev: 26289550c572ac4a7c06a21354f8dc7bcbd38114) Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat:11.5.5 -> 11.5.6susanbian2017-07-061-2/+2
| | | | | | | | | | Upgrade sysstat from 11.5.5 to 11.5.6. (From OE-Core rev: 7b8ae7711273e32a187830c7fab493e6fbb065c3) Signed-off-by: susanbian <bianyq@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* slang: add ptestStefan Strogin2017-06-283-1/+57
| | | | | | | | | | | | | | | | This patch adds ptest for slang, it uses `make runtests` to run tests. The Makefile runs runtests.sh for each *.sl and *.slc tests. runtests.sh is patched for printing test results in a common format, Makefile is patched in order not to compile any dependencies. Changes v2->v3: rebased on the latest master (1d9a88f6). (From OE-Core rev: 643c81afc16f8d3522cc5dc491459a1bae14d827) Signed-off-by: Stefan Strogin <sstrogin@cisco.com> Cc: xe-linux-external@cisco.com Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iptables: Apply 0001-fix-build-with-musl.patch unconditionallyKhem Raj2017-06-281-2/+2
| | | | | | | | | | | This patch is generic enough, That it can be applied universally and makes maintainence easier (From OE-Core rev: f769b8389091b4ffaff8f6f8fc7e53462ce176a5) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tzcode-native: quote ${CC}Enrico Scholz2017-06-281-1/+1
| | | | | | | | | | | | | build fails else with | + make -j 8 -l 6 cc=ccache gcc | make: *** No rule to make target 'gcc'. Stop. (From OE-Core rev: 5729c1563359e12ebb4451bb1ce7ba3fff4ed2d4) Signed-off-by: Enrico Scholz <enrico.scholz@sigma-chemnitz.de> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: don't change permissions of /var/run/cups/certs in do_packageRoss Burton2017-06-281-7/+0
| | | | | | | | | | This directory is deleted by do_install, so luckily the lack of error checking meant this didn't break. (From OE-Core rev: 4030274eceaf0b95cac5c54c55c3f91ef45fa9b4) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: use upstream patch to fix faccessat/fchmodat build warningsFathi Boudra2017-06-283-71/+69
| | | | | | | | | | | | | Use 0037-faccessat-and-fchmodat-Fx-build-warnings.patch instead of 0012-fix-faccessat01.c-build-fails-with-security-flags.patch. The new patch has been merged upstream and will be available in next LTP release. (From OE-Core rev: 3c1d9629ac3b5af47d0f4db09b4eb7e0eb4b0afe) Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* logrotate: fix upstream version checkAlexander Kanavin2017-06-281-0/+1
| | | | | | | (From OE-Core rev: 861817af203399e21bd97601bf00d66fbcee436a) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mailx: remove the recipeAlexander Kanavin2017-06-2811-557/+0
| | | | | | | | | | | | | This recipe was carried only for LSB compatibility, with upstream being defunct for a long time; if there is a need for a modern, supported implementation of mail/mailx, then s-nail (http://sdaoden.eu/code.html) or mailutils (http://mailutils.org/) should be used. (From OE-Core rev: 0b44f399ce98c61353b30143c205831c1403626f) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes-lsb4/perl: remove the recipesAlexander Kanavin2017-06-281-6/+0
| | | | | | | | | | These were required by LSB 4.1 tests; there's no other reason to continue carrying them in oe-core. (From OE-Core rev: 30fb4c8f329fe3aa3c528ffeba60ee7d702e873e) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpng12: remove the recipeAlexander Kanavin2017-06-281-1/+0
| | | | | | | | | It was only in oe-core because of LSB; let's remove it. Current libpng is 1.6.x. (From OE-Core rev: 839af0eafc39b4d182617925e6ab9299431c8601) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* packagegroup-core-lsb: do not include Qt4 anymoreAlexander Kanavin2017-06-281-26/+0
| | | | | | | | | | | | | Last version of qt4 was released 2 years ago, and Qt4 was officially EOLd at the end of 2015. On the other hand, LSB is no longer being developed, and so will 'require' Qt4 until the end of time. Let's pull the plug. (From OE-Core rev: a9807738178529c76ea719af158cae1d8566b256) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Add/fix missing Upstream-Status to patchesRichard Purdie2017-06-2724-3/+35
| | | | | | | | | This adds or fixes the Upstream-Status for all remaining patches missing it in OE-Core. (From OE-Core rev: 563cab8e823c3fde8ae4785ceaf4d68a5d3e25df) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Fix malformed Upstream-Status tagsRoss Burton2017-06-272-2/+2
| | | | | | | | | | Fix a variety of spelling and format mistakes to improve the ease of reading the tags programatically. (From OE-Core rev: 6e1aaf80b0d951b48cd25cb7161ec19448295094) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* texi2html: Add a dependency on perlPeter Kjellerstedt2017-06-231-0/+2
| | | | | | | | (From OE-Core rev: c391547e95b1854960b90d93fd9f80f02f761e61) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: add X11 PACKAGECONFIG infoJoe Slater2017-06-231-1/+15
| | | | | | | | | | | | | Add information necessary to build for x11, but do not enable that option. Fix parallel build directory creation issue. (From OE-Core rev: 2bfc7be412da501d8a9138a3dde33636c5fe2616) Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: move to version 9.21Joe Slater2017-06-2311-276/+98
| | | | | | | | | | | | | | | | Eliminate CVE patches that are now in source. Add CUPSCONFIG to configure options. (From OE-Core rev: 3041f94896b50a5a5d19caf0dd0e7910c730e18e) Signed-off-by: Joe Slater <jslater@windriver.com> to be scrunched Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnewt: 0.52.19 -> 0.52.20Huang Qiyu2017-06-232-2/+2
| | | | | | | | | | Upgrade libnewt from 0.52.19 to 0.52.20. (From OE-Core rev: a83715c10536904db1d274bfb3faf87a1b3d19bc) Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tzdata: Install zone1970.tabJan Kiszka2017-06-231-0/+2
| | | | | | | | | | The modern version of zone.tab is required by tzselect e.g. (From OE-Core rev: de467998ecfa5fa1d2e9dd43a4a3d828cf9ccade) Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: Drop remnants of uclibc supportRichard Purdie2017-06-2210-258/+0
| | | | | | | | | | | | | | uclibc support was removed a while ago and musl works much better. Start to remove the various overrides and patches related to uclibc which are no longer needed. uclibc support in a layer would still be possible. I have strong reasons to believe nobody is still using uclibc since patches are missing and I doubt the metadata even parses anymore. (From OE-Core rev: 653704e9cf325cb494eb23facca19e9f05132ffd) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sed: changes to support merged /usrAmarnath Valluri2017-06-141-0/+1
| | | | | | | | | | | Few of the perl scripts referring '#!/bin/sed' inside the script. But when 'usrmerge' feature is enabled this path would be /usr/bin/sed. So to satisfy build dependency add '/bin/sed' to it's providers list. (From OE-Core rev: 4f33950156c50aab68cbdf80fe52345eea6fb76c) Signed-off-by: Amarnath Valluri <amarnath.valluri@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash: changes to support merged /usrAmarnath Valluri2017-06-141-0/+2
| | | | | | | | | | | | Most of shell scripts refer to '#!/bin/{sh,bash}' inside the script. But when 'usrmege' feature is enabled this path will be /usr/bin/{sh, bash}. so to satisify build dependency add '/bin/{sh,bash}' to its providers list. (From OE-Core rev: 4759408677a4e60c5fa7131afcb5bc184cf2f90a) Signed-off-by: Amarnath Valluri <amarnath.valluri@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnsl2: Include stdint.hKhem Raj2017-06-132-0/+28
| | | | | | | | | uintptr_t is defined in stdint.h (From OE-Core rev: 29366ea3ed574848cbf5a6fd9012bf53eddb338f) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: Include stdint.h for uintptr_tKhem Raj2017-06-132-0/+35
| | | | | | | | | Fixes build with musl and upcoming glibc (From OE-Core rev: af314c17f6c32afbed9a277775156b9bbc5ac033) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffutils: prevent host path leaks, set pr pathJussi Kukkonen2017-06-121-1/+1
| | | | | | | | | | | | Note that this just removes a host path leakage: diffutils still doesn't depend on coreutils so 'pr' might not actually be there on image (this only breaks "diff -l" so no big deal). (From OE-Core rev: 3f7fd738981752a8c34c6cf4a1f2d4c035b081ca) Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gzip: add ptestDenys Zagorui2017-06-123-1/+84
| | | | | | | | (From OE-Core rev: 9f389cfc6023be50816491bbdd3e4266195573d3) Signed-off-by: Denys Zagorui <denys.zagorui@globallogic.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libtirpc: Fix CVE-2017-8779Fan Xin2017-06-092-0/+277
| | | | | | | | | | | | This vulnerability is also called "rpcbomb". Backport upstream patch to fix this vulnerability. CVE: CVE-2017-8779 (From OE-Core rev: d10edb97f0a7d6952adf9e0dbb6b4d5c0d168195) Signed-off-by: Fan Xin<fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* hdparm: Upgrade to 9.52Fan Xin2017-06-091-3/+3
| | | | | | | | | | | | | | | | | | 1. Upgrade hdparm from 9.51 to 9.52 2. Update the checksum of LIC_FILES_CHKSUM The following content is appended to LICENSE.TXT, the licence is still BSD & GPLv2. The apt.c file is Copyright (c) 2009 Jan Friesse <jfriesse@gmail.com>. You may use/distribute apt.c freely, under the terms of either (your choice) the GNU General Public License version 2, or a BSD style license. (From OE-Core rev: 3cd7aa486527d34bf6d20dd37046fe683230a4b6) Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-pages: Upgrade to 4.11Fan Xin2017-06-091-2/+2
| | | | | | | | (From OE-Core rev: b4052ce99349dc3fc9fba87b831d19a2e7c4e90e) Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat: upgrade to 11.5.5Chen Qi2017-06-091-2/+2
| | | | | | | | (From OE-Core rev: 5639c36ab221e0764884374d7741805a93772cf7) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lsbinitscripts: Upgrade to 9.72Fan Xin2017-06-062-23/+28
| | | | | | | | | | | | | 1. Upgrade lsbinitscripts from 9.68 to 9.72 2. Rebase the following patch file. functions.patch (From OE-Core rev: be117d6ea79882d10cce4c061385832e26d23bff) Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* logrotate: Support system dates back to the year 1970Zhenbo Gao2017-06-062-0/+28
| | | | | | | | | | backport commit bdbfea3 from logrotate upstream. (From OE-Core rev: ae87a0967d687cf9e308b22b35facb0b38a9141a) Signed-off-by: Zhenbo Gao <zhenbo.gao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml-namespacesupport-perl: Upgrade 1.11 -> 1.12Fan Xin2017-06-061-3/+3
| | | | | | | | | | | | | 1. Upgrade libxml-namespacesupport-perl from 1.11 to 1.12 2. Update the checksum of licence file because the author and contributors's name list is deleted. The content of licence has no change. (From OE-Core rev: 6894a25d80358f48b3f503e5434f0e99354c9471) Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* acpica: Upgrade 20150515 -> 20170303Fan Xin2017-06-062-31/+32
| | | | | | | | | | | | 1. Upgrade acpica from 20150515 to 20170303 2. Rebase the patch file for 20170303 (From OE-Core rev: c08ca9353fabb595de1011cf9d6db6ff6cc06ce3) Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: upgrade to 20170516Dengke Du2017-06-063-42/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | 1. rebase patch 0034-periodic_output.patch This patch can't apply, because in memcg_stress_test.sh, it used a different value for RUN_TIME: 15*60, we can check it here: https://github.com/linux-test-project/ltp/blob/20170516/testcases/kernel/controllers/memcg/stress/memcg_stress_test.sh#L40 Previous is 60*60, we can check it here: https://github.com/linux-test-project/ltp/blob/20170116/testcases/kernel/controllers/memcg/stress/memcg_stress_test.sh#L40 2. delete patch 0039-fcntl-fix-the-time-def-to-use-time_t.patch This patch didn't need any more, because the upstream has remove the unneeded time() declaration. We can check it here: https://github.com/linux-test-project/ltp/commit/f8c96804e5e89d360707c9670b18221b11cf3858 (From OE-Core rev: f09b8d587aa5a0bbaaa653ef9dc0d25837336e17) Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: Upgrade 2.2.2 -> 2.2.3Fan Xin2017-06-062-6/+6
| | | | | | | | (From OE-Core rev: 886f9afa1ac7a8b6eba514846f616378b78d088e) Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lzip: Upgrade 1.18 -> 1.19Fan Xin2017-06-061-2/+2
| | | | | | | | (From OE-Core rev: 74bc135e9c2f2458a742734015be03d16e9c03eb) Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: Replace "cp -a" with "cp -R --no-dereference --preserve=mode, links"Martin Jansa2017-06-061-1/+1
| | | | | | | | | | | | * Using "cp -a" leaks UID of user running the builds, causing many QA warnings. * See this thread for details: http://lists.openembedded.org/pipermail/openembedded-core/2015-November/112904.html (From OE-Core rev: 2fcb9bee2487ba8c5e7b2c1fda2fdffcf7fb7f78) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: CVE-2016-7977, CVE-2016-7978, CVE-2016-7979, CVE-2017-9216Catalin Enache2017-05-305-0/+151
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document. Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice. Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser. libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file. References: https://nvd.nist.gov/vuln/detail/CVE-2016-7977 https://nvd.nist.gov/vuln/detail/CVE-2016-7978 https://nvd.nist.gov/vuln/detail/CVE-2016-7979 https://nvd.nist.gov/vuln/detail/CVE-2017-9216 Upstream patches: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8abd22010eb4db0fb1b10e430d5f5d83e015ef70 http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=6f749c0c44e7b9e09737b9f29edf29925a34f0cf http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=875a0095f37626a721c7ff57d606a0f95af03913 http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=3ebffb1d96ba0cacec23016eccb4047dab365853 (From OE-Core rev: 584dfa2f780d5785aaff01f84fbabc18b3478d76) Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lsof: clear setuidKai Kang2017-05-291-1/+1
| | | | | | | | | | | Having 'lsof' as a +s (setuid) binary could lead to security issues if a compromise in the binary is found. It is better that it be -s by default as a precaution. (From OE-Core rev: 346c65dd6855106069d1861ca965d3121eb084d1) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rpcbind: Fix CVE-2017-8779Fan Xin2017-05-252-0/+222
| | | | | | | | | | | | | This vulnerability is also called "rpcbomb". Backport upstream patch to fix this vulnerability. CVE: CVE-2017-8779 (From OE-Core rev: 7936c9451eb4c376a78a0ac7461d1b2430c7f1f3) Signed-off-by: Fan Xin<fan.xin@jp.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-11-13 18:03:07 +0000