linux/meta-el-common.git/recipes-devtools, branch pyro-nfvaccess

run-postinsts: don't call update-rc.d if systemd is present

2017-12-06T10:40:45+00:00

This patch removes the call to update-rc.d in order to fix the console login issue for the Cavium board. Signed-off-by: Gabriel Ionescu Signed-off-by: Adrian Dudau

run-postinsts: Disable dpkg --configure for debs to fix boot lockup

2017-11-22T10:46:21+00:00

When a board boots for the first time, it executes run-postinsts.service and dpkg-configure.service. Since both services run dpkg --configure, it sometimes results in locking up the login service. This patch disables the execution of dpkg --configure from run-postinsts by removing the deb keyword from the list of scanned packet types. Signed-off-by: Gabriel Ionescu Signed-off-by: Adrian Dudau

qemu: CVE-2017-5931

2017-09-18T11:54:31+00:00

Fixes integer overflow in in handling virtio-crypto requests Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5931 Signed-off-by: Sona Sarmadi Signed-off-by: Martin Borg

qemu: CVE-2017-8309

2017-08-29T11:32:58+00:00

Qemu built with the Audio subsystem support is vulnerable to a host memory leakage issue. It could occur if a guest user was to repeatedly start and stop audio capture. A privileged user inside guest could use this flaw to exhaust host memory, resulting in DoS. Reference: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-8309 Upstream patch: https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

qemu: CVE-2017-6505

2017-08-29T11:32:30+00:00

Quick Emulator built with the USB OHCI Emulation support is vulnerable to an infinite loop issue. It could occur while processing an endpoint list descriptor in ohci_service_ed_list(). A guest user/process could use this flaw to crash Qemu process resulting in DoS. References: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-6505 Upstream patch: http://git.qemu-project.org/?p=qemu.git;a=commitdiff;h=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

qemu: CVE-2017-7471

2017-08-29T11:31:52+00:00

Qemu built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host. References: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471 Upstream patch: http://git.qemu-project.org/?p=qemu.git;a=commitdiff;h=96bae145e27d4df62671b4eebd6c735f412016cf Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

qemu: CVE-2017-2620

2017-08-29T11:30:51+00:00

QEMU built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. References: ========== https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620 Upstream patch: https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html Signed-off-by: Sona Sarmadi Signed-off-by: Adrian Dudau

elfutils,gdb: Drop bbappends

2017-06-21T14:06:53+00:00

We won't upstream this and we won't maintain it anymore, so drop it. Signed-off-by: Adrian Dudau Signed-off-by: Martin Borg

automake: remove patch integrated in poky

2016-03-30T08:18:43+00:00

Signed-off-by: Tudor Florea Signed-off-by: Martin Borg

binutils: drop the bbappends

2016-02-24T12:37:33+00:00

This was a temporary fix for 64bit PPC kernel builds with binutils 2.24 [1]. The build problem was fixed in meta-fsl-ppc by backport of a kernel patch (commit a6c4175595b0f316e543cf93a8b6dc1a7f098997) and this backported patch was later removed when the kernel version was upgraded (commit e321cb35d66d31b4d7f10da989e7b94eea3337c3). binutils has also been upgraded to 2.25.1 on poky master ------- [1] https://lists.yoctoproject.org/pipermail/meta-freescale/2014-April/008083.html Signed-off-by: Martin Borg Signed-off-by: Huimin She