Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=krogoth 2017-05-18T12:14:21+00:00 2017-05-18T12:14:21+00:00 Sona Sarmadi sona.sarmadi@enea.com 2017-01-16T06:30:00+00:00 urn:sha1:11b217d60bbe6643936214431030f6448cad2dba References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6702 http://www.openwall.com/lists/oss-security/2016/06/04/5 Reference to upstream fix: https://bugzilla.redhat.com/attachment.cgi?id=1165210 Squashed backport against vanilla Expat 2.1.1, addressing: * CVE-2012-6702 -- unanticipated internal calls to srand * CVE-2016-5300 -- use of too little entropy (From OE-Core rev: c9a2e2f33e8b473f06a3941dab9b4ecccd111a23) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2016-01-07T13:40:16+00:00 Zhixiong Chi Zhixiong.Chi@windriver.com 2015-12-24T09:29:59+00:00 urn:sha1:30c06a412e3a85eb2770f6aeb6f9b3ce632ca19d Add CVE-2015-1283 patch for fixing integer overflow bug in expat. Details are at below link: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283 Patch comes from: https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c https://codereview.chromium.org/1224303003 (From OE-Core rev: c89c5383e304a52b604a3672ac93fd88b5eb8b41) Signed-off-by: Zhixiong Chi <Zhixiong.Chi@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2014-02-20T14:28:13+00:00 Matthieu Crapet Matthieu.Crapet@ingenico.com 2014-02-19T15:13:54+00:00 urn:sha1:b88321ac7879686d66eae3f48bec186bfc75c325 Completes previous commit b5292d4115a4555a66b5e35acdc67dd71fb8577f. Updates SUMMARY[doc] (meta/conf/documentation.conf). Changes: - rename DESCRIPTION with length < 80 to (non present tag) SUMMARY - drop final point character at the end of SUMMARY string - remove trailing whitespace of SUMMARY line Note: don't bump PR (From OE-Core rev: ad17dfd31a2b97b3e610a0ea0889f5ecb2a63b97) Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2013-10-30T14:52:04+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2013-10-29T11:14:13+00:00 urn:sha1:5e427966756700e596740778f16b96d03e8568c8 Remove all PR = "r0" from all .bb files in oe-core. This was done with the command sed -e '/^PR.*=.*r0\"/d' recipes*/*/*.bb -i We've switching to the PR server, PR bumps are no longer needed and this saves people either accidentally bumping them or forgetting to remove the lines (r0 is the default anyway). (From OE-Core rev: 58ae94f1b06d0e6234413dbf9869bde85f154c85) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2012-05-16T06:34:28+00:00 Marko Lindqvist cazfi74@gmail.com 2012-05-10T21:43:51+00:00 urn:sha1:120e29504caa88ce21a8a75a7cec8a2cb857e61b (From OE-Core rev: 445f2721f92bae4a9ae86e13f14775e924dc7f84) Signed-off-by: Marko Lindqvist <cazfi74@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2012-03-21T15:33:07+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2012-03-21T11:26:09+00:00 urn:sha1:40f95685e6a3b4359d2ab2fea1418fe5e4bd0aa1 Due to the system providing a copy of gzip, we face some issues when we 'shadow' that copy with our own leading to a varient of race type bugs, and issues for example if a dependency such as libz is missing but the binary is still present. We usually rely on our dependency logic to protect us from this but for gzip, we don't have this protection since its not listed by all its users (and doing so would be impractical). This patch installed pigz and gzip into their own directory which we only add to PATH when we explictly want these binaries in much the same way we do with perl-native. This means dependency logic is correct when we use the binary and everything should work well. The patch adds an explict dependency into image.bbclass since the accelerated speed of compression is most appreciated at rootfs time. (From OE-Core rev: 7a98c0ef28822ae1fcee45b14db3edcfd4c7ad8f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2011-10-25T07:36:16+00:00 Martin Jansa martin.jansa@gmail.com 2011-10-25T07:31:35+00:00 urn:sha1:fc94f925e848684244a38dcffe15cb1192dfbed8 * this isn't probably complete list.. just what failed here (From OE-Core rev: f586aaa8d00361a9597a546d665077c75cf4d520) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2011-05-17T14:14:42+00:00 Scott Garman scott.a.garman@intel.com 2011-05-16T03:04:27+00:00 urn:sha1:0dbd791e5b837a096f020635c773715bae7b15f5 Add Upstream-Status tag to patches for the following recipes: openssh dbus-glib expat opensp sgml-common at cpio (GPLv3 version) libpam icu (From OE-Core rev: 0702602332ad63c2cfaa207516497bb0b75bfdf3) Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2010-12-09T16:18:17+00:00 Saul Wold sgw@linux.intel.com 2010-12-08T04:06:29+00:00 urn:sha1:3d08b9f2c65835822b1c0ed30e3170f02f877ce3 Signed-off-by: Saul Wold <sgw@linux.intel.com> 2010-11-24T00:47:02+00:00 Mei Lei lei.mei@intel.com 2010-11-23T09:17:34+00:00 urn:sha1:f3a3b93e3a16cf6a8745aa5a1d1135067e6d6b7d Add COPYING file checksum to bb file Signed-off-by: Mei Lei <lei.mei@intel.com>