linux/poky.git, branch daisy-11.0.3

build-appliance-image: Update to daisy head revision

2015-05-13T12:28:56+00:00

(From OE-Core rev: 5a577ec878a15f3caaf4893b819825ffb8c81266) Signed-off-by: Richard Purdie

security_flags: Fix typo for cups

2015-05-13T07:52:06+00:00

(From OE-Core rev: 327da66bb4d0b2a219e8a1b0805b504b269b22d9) Signed-off-by: Richard Purdie

powertop: Fix build for !uclibc

2015-05-12T14:46:59+00:00

* EXTRA_LDFLAGS isn't defined for !uclibc and configure fails when it reads it unexpanded, see config.log snippet: configure:4177: checking whether the C compiler works configure:4199: i586-oe-linux-gcc -m32 -march=i586 --sysroot=/OE/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -Wl,-O1 -Wl,--hash-style=gnu -Wl,--as-needed ${EXTRA_LDFLAGS} conftest.c >&5 i586-oe-linux-gcc: error: ${EXTRA_LDFLAGS}: No such file or directory configure:4203: $? = 1 configure:4241: result: no (From OE-Core rev: fd6418949249be252e4831ecf88f84297f81eaeb) Signed-off-by: Martin Jansa Signed-off-by: Ross Burton Backported from OpenEmbedded Dizzy branch, commit c8f9b5c9a8e5179c2013f25decd6a5483df9c716. Signed-off-by: Jens Rottmann Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

systemd: fix /var/log/journal ownership

2015-05-12T14:46:59+00:00

The ownership needs to be explicitly set otherwise it inherits the user and group id of the build user. (From OE-Core rev: 0752c79282b1cc9699743e719518e6c341d50a3a) (From OE-Core rev: e64cee7ccf9dedbadc3a63e4ed3eb15172ef4403) Signed-off-by: Jonathan Liu Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Saul Wold Conflicts: meta/recipes-core/systemd/systemd_219.bb Signed-off-by: Richard Purdie

eglibc: fix two security issues.

2015-05-01T11:34:52+00:00

The includes two CVE fixes: CVE-2012-3406 CVE-2014-7817 (From OE-Core rev: fed4d140da67fc51d54b02df83882177f6ddab10) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

e2fsprogs: CVE-2015-0247

2015-05-01T11:34:52+00:00

Fixes input sanitization errors. References http://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=f66e6ce4 http://www.ocert.org/advisories/ocert-2015-002.html (From OE-Core rev: f3e5b052689b2eba30e26903e964791f92241e65) Signed-off-by: Sona Sarmadi Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie

elfutils: CVE-2014-9447

2015-05-01T11:34:52+00:00

directory traversal in read_long_names() Reference https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9447 Upstream commit with the analysis: https://git.fedorahosted.org/cgit/elfutils.git/commit/?id=147018e729e7c22eeabf15b82d26e4bf68a0d18e (From OE-Core rev: 6e7badf6819f372bd6dced191c7fda9748062126) Signed-off-by: Sona Sarmadi Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie

coreutils: parse-datetime: CVE-2014-9471

2015-05-01T11:34:52+00:00

Memory corruption flaw in parse_datetime() Reference https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9471 (From OE-Core rev: 0b13fbf3f9b4419141445b381ffa9445af6e52ab) Signed-off-by: Sona Sarmadi Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie

libpng16: CVE-2015-0973

2015-05-01T11:34:51+00:00

Fixes CVE-2015-0973 (duplicate of CVE-2014-9495), a heap-based overflow vulnerability in the png_combine_row() function of the libpng library, when very large interlaced images were used. Upstream patch: http://sourceforge.net/p/libpng/code/ci/dc294204b641373bc6eb603075a8b98f51a75dd8/ External Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0973 http://seclists.org/oss-sec/2014/q4/1133 (From OE-Core rev: 10c8aeebca301ffd853e75df3f9c1d16d0352d76) Signed-off-by: Sona Sarmadi Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie

Qemu: CVE-2014-2894

2015-05-01T11:34:51+00:00

Fixes an out of bounds memory access flaw in Qemu's IDE device model Reference http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2894 (From OE-Core rev: 5f7cdf1e1212af5e3dcf36c8817c63cc853b1a91) Signed-off-by: Sona Sarmadi Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie