summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* curl: CVE-2016-8625Sona Sarmadi2017-02-103-0/+646
| | | | | | | | | | | IDNA 2003 makes curl use wrong host Affected versions: curl 7.12.0 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102K.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8624Sona Sarmadi2017-02-102-0/+52
| | | | | | | | | | | invalid URL parsing with '#' Affected versions: curl 7.1 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102J.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8623Sona Sarmadi2017-02-102-0/+210
| | | | | | | | | | | Use-after-free via shared cookies Affected versions: curl 7.10.7 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102I.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8622Sona Sarmadi2017-02-102-0/+95
| | | | | | | | | | | URL unescape heap overflow via integer truncation Affected versions: curl 7.24.0 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102H.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8621Sona Sarmadi2017-02-102-0/+121
| | | | | | | | | | | curl_getdate read out of bounds Affected versions: curl 7.12.2 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102G.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8620Sona Sarmadi2017-02-102-0/+45
| | | | | | | | | | | glob parser write/read out of bounds Affected versions: curl 7.34.0 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102F.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8619Sona Sarmadi2017-02-102-0/+53
| | | | | | | | | | | double-free in krb5 code Affected versions: curl 7.3 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102E.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8618Sona Sarmadi2017-02-102-0/+53
| | | | | | | | | | | double-free in curl_maprintf Affected versions: curl 7.1 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102D.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8617Sona Sarmadi2017-02-102-0/+29
| | | | | | | | | | | | OOB write via unchecked multiplication Affected versions: curl 7.1 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102C.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8616Sona Sarmadi2017-02-102-0/+50
| | | | | | | | | | | | case insensitive password comparison Affected versions: curl 7.7 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102B.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curl: CVE-2016-8615Sona Sarmadi2017-02-102-0/+78
| | | | | | | | | | | | cookie injection for other servers Affected versions: curl 7.1 to and including 7.50.3 Reference: https://curl.haxx.se/docs/adv_20161102A.html Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nss: Disable warning on deprecated API usageZeeshan Ali2017-02-102-0/+23
| | | | | | | | | | | | nss itself enables Werror if gcc is version 4.8 of greater, which fails the build against new glibc (2.24) because of use of readdir_r(), which is now deprecated. Let's just disable warnings on deprecated API usage. https://bugzilla.yoctoproject.org/show_bug.cgi?id=10644 Signed-off-by: Zeeshan Ali <zeeshan.ali@pelagicore.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* curl: security fix for CVE-2016-7141Sona Sarmadi2016-09-232-0/+51
| | | | | | | | | | | | | | | Affected versions: Affected versions: libcurl 7.19.6 to and including 7.50.1 Not affected versions: libcurl >= 7.50.2 Reference to upstream patch: https://curl.haxx.se/CVE-2016-7141.patch (From OE-Core rev: fb8f291d9ea2ebc011403f72cb91af372a795091) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: security fix for CVE-2016-5421Maxin B. John2016-09-022-0/+37
| | | | | | | | | Affected versions: libcurl 7.32.0 to and including 7.50.0 (From OE-Core rev: 2a9f4823483b6f5decc6d504858f06f66ab9e06c) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: security fix for CVE-2016-5420Maxin B. John2016-09-022-0/+32
| | | | | | | | | Affected versions: libcurl 7.1 to and including 7.50.0 (From OE-Core rev: cc567d8fb9eca630cd21d40ece99babcc5b7d045) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: security fix for CVE-2016-5419Maxin B. John2016-09-022-1/+79
| | | | | | | | | Affected versions: libcurl 7.1 to and including 7.50.0 (From OE-Core rev: 0b56a2f6174a44495f8a58dc0864c161ffd37b80) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lzop: Fix build with gcc-6Khem Raj2016-08-252-3/+40
| | | | | | | | (From OE-Core rev: 384ca1c459d28ed2e1b4290e05e88cf4aef2dc6a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libproxy: use snapshot.debian.org for SRC_URIMaxin B. John2016-08-011-1/+3
| | | | | | | | | | | | | | | | | Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will only contain releases that are currently in Debian. So, move all of SRC_URI to the .bb so it can use snapshot.debian.org instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues to work. [YOCTO #10040] (From OE-Core rev: 85ab50390edd3c0de632386da71ccc9256d4d4c5) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* serf: use snapshot.debian.org for SRC_URIMaxin B. John2016-08-011-1/+3
| | | | | | | | | | | | | | | | Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will only contain releases that are currently in Debian. So, move all of SRC_URI to the .bb so it can use snapshot.debian.org instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues to work. [YOCTO #10040] (From OE-Core rev: 114ac0213c0f80ac4192bd7ab7b1a5c974a965e8) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss: fix build for gcc-6Tim Orling2016-07-272-0/+344
| | | | | | | | | | [YOCTO #9897] (Fedora-24 host is gcc-6) (From OE-Core rev: 1882abd101d211e5ab3f1a0a77580395778e6301) Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpcre: Fix CVE-2016-3191Ismo Puustinen2016-06-292-0/+175
| | | | | | | | | | | | | | | | | | Fix workspace overflow for (*ACCEPT) with deeply nested parentheses. The patch is from libpcre version control at http://vcs.pcre.org/pcre?view=revision&revision=1631 with the ChangeLog part removed. Original author is Philip Hazel. (From OE-Core rev: 386534f968f4da376ba7778b5d436bad4ce8355b) (From OE-Core rev: 4d3dad3329c8a9c9bb5254bb329031e9d2dafd7b) Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* popt: fix dependencies and QA IssueMaxin B. John2016-06-291-0/+2
| | | | | | | | | | | | | | | | | | Fix the following QA warning: WARNING: popt-1.16-r3 do_package_qa: QA Issue: popt rdepends on libiconv, but it isn't a build dependency, missing libiconv in DEPENDS or PACKAGECONFIG? [build-deps] (From OE-Core rev: 08aeb5a9e0067e2e9e0fba8614409102e5a0a00e) (From OE-Core rev: df05fa063c6d0b41156c8af9b46cf894176500e6) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunwind: backport aarch64_be supportRuslan Bilovol2016-06-293-0/+69
| | | | | | | | | | | | | | | Backport 2 patches from v1.2-rc1 tag of libunwind git repo. These patches add aarch64_be support to this package. (From OE-Core rev: 396353c3127b20244c4c5cc321adad7d4e48f544) (From OE-Core rev: e4761a4e62f44847343f939577009b425816b753) Signed-off-by: Ruslan Bilovol <rbilovol@cisco.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: improve configureRoss Burton2016-04-291-12/+8
| | | | | | | | | | | | | | | | Instead of adding a custom task (do_boostconfig) simply use the existing do_configure. Ensure that there are no relative paths in do_configure. Instead of editing the user-config.jam sample file in the source tree (which is entirely comments) and extending it on every build, create a new user-config.jam in ${WORKDIR}. (From OE-Core rev: 1f3cfc77f1dcbfffd319f09591814611f7a5c6bf) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: delete the build directory before rebuildingRoss Burton2016-04-291-0/+1
| | | | | | | | | | | If there is an existing build directory when do enter do_compile() then delete it, as it contains the previous build. If the rebuild was caused because dependencies have changed we want to ensure that a rebuild actually happens. (From OE-Core rev: e96b6d73e0842e559810e780f20e49267ebb686e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ca-certificates: support ToyboxPatrick Ohly2016-04-182-0/+35
| | | | | | | | | | | "mktemp -t" is deprecated and does not work when using Toybox. Replace with something that works also with Toybox. (From OE-Core rev: 8d47d075ca02612fe16e403be1aa2079edc3ef5f) Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: remove redundant ac_cv_sizeof_off_t assignmentsRoss Burton2016-04-121-4/+0
| | | | | | | | | | | | | | ac_cv_sizeof_off_t was previously in the site cache files, which was breaking large file support and required a workaround in each recipe that actually wanted to use large files. Now that the entry has been removed from the site cache, we can remove the workarounds. (From OE-Core rev: 1485d7cae88adb3575c6eaa47784fe50820d2740) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* apr-util: fix path in rules.mk for nativesdkRobert Yang2016-04-091-4/+4
| | | | | | | | | | | | Fixed when build nativesdk-apr-util: | gawk: fatal: can't open source file `/opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/build-1/make_exports.awk' for reading (No such file or directory) The ${S} should be ${B}. (From OE-Core rev: ba29845a5b9bf16cda2230540d7ce17d0f82e8fa) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bdwgc: installed-vs-shipped for nativesdkRobert Yang2016-04-091-1/+1
| | | | | | | | | | | | | | | | | | | | Fixed: ERROR: nativesdk-bdwgc-7.4.2-r0 do_package: QA Issue: nativesdk-bdwgc: Files/directories were installed but not shipped in any package: /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc/porting.html /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc/gcinterface.html /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc/gcdescr.html /opt/poky/2.0+snapshot/sysroots/x86_64-pokysdk-linux/usr/share/gc/README.solaris2 [snip] This was caused by hardcode of datadir. (From OE-Core rev: 7bbe8e79f5c010a12b8b0ec2693d55539fd67994) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bdwgc: use github repo for source locationBill Randle2016-04-051-6/+4
| | | | | | | | | | | | The Yocto Autobuilder has been unable to fetch the release package from the developer's website at www.hboehm.info, so change recipe to fetch from the developer's github repo instead. (From OE-Core rev: b2dc5a68e74dafedf7960ef77ad3d73912ed7960) Signed-off-by: Bill Randle <william.c.randle@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libassuan: use package specific licensingAndre McCurdy2016-04-031-2/+4
| | | | | | | | | | | | | | - The main libassuan.so library is LGPLv2.1+ - Test apps (in tests sub directory) and documentation are GPLv3+ - Windows CE specific binaries (gpgcedev.dll and gpgcemgr) are GPLv3+ When building the current OE recipe, the test apps are compiled but not installed. The Windows CE specific binaries are not compiled. (From OE-Core rev: 3af7ba2b8c3712a8af3d333e1d8f17670ca9bcbf) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes-support/rng-tools: Change runlevel start from S to 2, 3, 4, 5.Aníbal Limón2016-03-311-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using systemd as init rng-tools is causing a circular dependency between units, [ 7.706250] systemd[1]: basic.target: Found ordering cycle on basic.target/start [ 7.706934] systemd[1]: basic.target: Found dependency on sysinit.target/start [ 7.707795] systemd[1]: basic.target: Found dependency on rng-tools.service/start [ 7.708692] systemd[1]: basic.target: Found dependency on basic.target/start [ 7.709461] systemd[1]: basic.target: Breaking ordering cycle by deleting job rng-tools.service/start [ 7.710404] systemd[1]: rng-tools.service: Job rng-tools.service/start deleted to break ordering cycle starting with basic.target/start The problem is related to systemd running sysvinit scripts by default add dependency of basic.target for sysvinit script so when sysvscript is at rcS is added also as dependency of sysinit.target causing a cirular dependency in this case: basic.target -> sysinit.target -> rng-tools.service -> basic.target. (From OE-Core rev: e3fc8ef152494e9b7cff8de110a784150295f17e) Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ptest-runner_2.0.bb: Update recipe to point git.yoctoproject.org repo.Aníbal Limón2016-03-301-2/+2
| | | | | | | | | | Since ptest-runner is a Yocto Project tool is better to have hosted into git.yoctoproject.org. (From OE-Core rev: 2fa1e9b3ebf3abb2b0b49ba1404e4f18483695d9) Signed-off-by: Aníbal Limón <anibal.limon@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunwind: Fix build on mips/mips64 for musl targetsKhem Raj2016-03-282-0/+91
| | | | | | | (From OE-Core rev: c1847278dbfc3424790f7256be2b35bcdbaaf018) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunwind: Fix build with fstack-protector on muslKhem Raj2016-03-254-11/+99
| | | | | | | | | | | | | | | | | | | | | libunwind makery inserts -nostdlib during linking which fails the build on musl when security flags are enabled since it remove ssp from linking, so add them explicitly to SECURITY_LDFLAGS disable tests for musl targets, tests use obsolete posix APIs e.g. getcontext patchout x86_local_resume() on x86, gets a working linunwind on x86, it seems that it wont work even in glibc case but lets leave it as it is for glibc and apply the patch only for musl (From OE-Core rev: c8ac9d483f6e1cfca82dad8cf3e0745935e96214) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bdgwc: Backport nios2 supportMarek Vasut2016-03-202-0/+72
| | | | | | | | | | | | | | | | Backport patch from bdwgc mainline which adds initial support for nios2 architecture. (From OE-Core rev: e93885ef51c14921aefe2e56cf990058a5903f17) Signed-off-by: Marek Vasut <marex@denx.de> Cc: Ley Foon Tan <lftan@altera.com> Cc: Richard Purdie <richard.purdie@linuxfoundation.org> Cc: Ross Burton <ross.burton@intel.com> Cc: Thomas Chou <thomas@wytron.com.tw> Cc: Walter Goossens <waltergoossens@home.nl> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libatomic-ops: Backport nios2 supportMarek Vasut2016-03-202-1/+74
| | | | | | | | | | | | | | | Backport a patch adding nios2 support into libatomic-ops (From OE-Core rev: ed204b6f28e9930831a0df4b791db8ed68ccb132) Signed-off-by: Marek Vasut <marex@denx.de> Cc: Ley Foon Tan <lftan@altera.com> Cc: Richard Purdie <richard.purdie@linuxfoundation.org> Cc: Ross Burton <ross.burton@intel.com> Cc: Thomas Chou <thomas@wytron.com.tw> Cc: Walter Goossens <waltergoossens@home.nl> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bdwgc: Check for getcontext() API during configureKhem Raj2016-03-202-0/+30
| | | | | | | | | | | | This helps in compiling dependent components like guile where it shows the problem of missing getcontext API when using libc which dont implement it e.g. musl (From OE-Core rev: ee60d562c7352fb5a595274490e7f377645aa650) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes-gnome: fix introspection supportAlexander Kanavin2016-03-124-8/+9
| | | | | | | (From OE-Core rev: 1011ce60412b17e4a1d2293dabe76027547429f7) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libsoup-2.4: enable gobject introspectionAlexander Kanavin2016-03-121-1/+1
| | | | | | | (From OE-Core rev: acc6fb629deb5d7e953b8d1f1c012e1f33c13c40) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: The variable named p in the patch file was incorrectly named.ngutzmann2016-03-111-1/+1
| | | | | | | | | | | | The variable in question should have been called ecc->p. The patch has been updated so that the compilation of the nettle recipe would complete successfully. The backport originated from this commit https://git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d (From OE-Core rev: 7d2476ca6d72be518189ff1441a090a896749f6a) Signed-off-by: ngutzmann <nathangutzmann@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: disable static for 2.7.1Ross Burton2016-03-101-0/+2
| | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: Security fix CVE-2015-8804Armin Kuster2016-03-102-0/+273
| | | | | | | | | | | | | | | | (From OE-Core master rev: 7474c7dbf98c1a068bfd9b14627b604da5d79b67) minor tweak to get x86_64/ecc-384-modp.asm to apply (From OE-Core rev: d1903e264ab62d34daeb652c89c6fb67e7c9b42d) (From OE-Core rev: 6140379b263c5898128b41857a0bd9d58af84399) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Joshua Lock <joshua.g.lock@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nettle: Security fix CVE-2015-8803 and CVE-2015-8805Armin Kuster2016-03-102-0/+74
| | | | | | | | | | | | | | | | | | (From OE-Core master rev: f62eb452244c3124cc88ef01c14116dac43f377a) hand applied changes for ecc-256.c (From OE-Core rev: cb03397ac97bfa99df6b72c80e1e03214e059e6e) (From OE-Core rev: e5026f1e3fd069c3421789a179f2310df3796519) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Joshua Lock <joshua.g.lock@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* db: remove the NO_UPDATE_REASON and replace it a comment about RPMMark Hatle2016-03-091-1/+1
| | | | | | | (From OE-Core rev: 82aeafe722f447a55e04c39aec70e88f2a1962e3) Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* createrepo: Fix stat floating timestampsRichard Purdie2016-03-072-0/+20
| | | | | | | | | | When reading the mtime from disk, the system can get a floating point value. Convert this to an int for comparision purposes, else some packages always get reindexed as the value in the index is an int. (From OE-Core rev: cc01ffeee757738c169f8970fd89bf0933e93532) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nspr: Fix build regression on musl from last upgradeKhem Raj2016-03-072-43/+3
| | | | | | | | | | This patch is no longer required as upstreamed has fixed the problem in more comprehensive way (From OE-Core rev: 3eb83b880e66fff0e715e79546ed98d9818390b5) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* acl: Fix re pattern in test casesHe Zhe2016-03-073-0/+194
| | | | | | | | | | | ls adds a '.' at the end of the permission field list on SELinux machines, filter this out so root tests work on SELinux machines. And backport one patch for other tests. (From OE-Core rev: 2981d026460658fd2db7df3618d718fe6e8bfca0) Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* uclibc support for rng-toolsMaxin B. John2016-02-282-1/+66
| | | | | | | | | | | Uclibc has its own argp implemented as libuargp. So, we add a new option --enable-uclibc to select it. (From OE-Core rev: 0bbbc0b377e4fd9a788f5aa7688afa5516e263dd) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost.inc: fix BJAM_OPTS --build-dir optionAndre McCurdy2016-02-281-1/+1
| | | | | | | | | | The correct syntax is --build-dir ( --builddir is silently ignored ). (From OE-Core rev: 0a8e78b67254ab1a0348cd47c4d96907af558de1) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-04-30 10:20:30 +0000