linux/poky.git/meta/recipes-core/readline, branch 2.1_M1

readline: apply missing upstream patches

2015-12-01T21:32:10+00:00

Some readline-6.3 upstream patches was missing. Also ensure that the upstream patches are applied in the same way as in readline-5.2. Remove 'readline-dispatch-multikey.patch' and 'readline-cve-2014-2524.patch' since they are already included in upstream patches 'readline63-002' and 'readline63-003'. [YOCTO #8451] (From OE-Core rev: 7b1fde3f65b674f5973800731c0c284f7d415248) Signed-off-by: Petter Mabäcker Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

readline: prepare for readline6.3 upstream patches

2015-12-01T21:32:10+00:00

Upstream patches are always preferred to be applied first (before integration patches). In order to apply readline-6.3 specific upstream patches in a preferred order we need to apply the integration-patches at the end in the 6.3 specific recipe (this is already the case for readline-5.2). Also take the oppertunity to move 'norpath.patch' to readline-6.3 dir since this patch is not shared between the 5.2 and 6.3 recipe. [YOCTO #8451] (From OE-Core rev: d454d1c06247b658c6b7d12de610eb6ac72cd7d4) Signed-off-by: Petter Mabäcker Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

readline: rename patch to contain CVE reference

2015-11-16T11:39:33+00:00

To help automated scanning of CVEs, put the CVE ID in the filename. (From OE-Core rev: 211bce4f23230c7898cccdb73b582420f830f977) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

readline: actually apply readline63-003 (aka CVE-2014-2524)

2015-10-06T23:11:21+00:00

This file wasn't named as a patch, nor told to apply explicity, so it was just unpacked to the work directory and not applied. Rename the file so the patch is applied correctly. (thanks to Petter Mabäcker for spotting this) (From OE-Core rev: 02be728762c77962f9c3034cd7995ad51afaee95) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

recipes: Delete superfluous assignments, S = ${WORKDIR}/${BP}

2015-02-24T17:41:44+00:00

Given that bitbake.conf sets the default values: BP = "${BPN}-${PV}" S = "${WORKDIR}/${BP}" there are a number of recipes that set the variable S completely superfluously, so get rid of them. (From OE-Core rev: ebe8578df3f162045086cd60a129eb7ac3eacf4c) Signed-off-by: Robert P. J. Day Signed-off-by: Richard Purdie

readline: Patch for readline multikey dispatch issue

2014-11-08T11:14:31+00:00

(From OE-Core rev: d301ef7c2a5e857bd87be2a24251243ff181fa24) Signed-off-by: Saul Wold Signed-off-by: Richard Purdie Signed-off-by: Paul Eggleton Signed-off-by: Richard Purdie

readline: Security Advisory - readline - CVE-2014-2524

2014-10-18T14:14:04+00:00

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2524 (From OE-Core rev: 0e95eef8817f51504dcc50d855dcbef172cfc897) Signed-off-by: Yue Tao Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

readline-5.2: exclude autoheader

2014-06-06T08:26:04+00:00

readline hand-maintains config.h.in so exclude autoheader and re-use a patch from readline-6.3 to fix a typo in variable names. See oe-core 8c37d32d6133c6ad2b9142e7a42775e7a979b570 against readline-6.3 for further rationale. (From OE-Core rev: 8281133c6dcb2f31666d76e282d02bafe65e15d7) Signed-off-by: Ross Burton Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

readline-5.2: use upstream's aclocal.m4 as acinclude.m4

2014-06-06T08:26:04+00:00

Instead of shipping a fork of the upstream aclocal.m4, simply rename it to acinclude.m4 at configure time. We don't need the fork now that autoheader is excluded. (From OE-Core rev: 7b98575797c2e8822e6a26d95cb7e727d6efef4b) Signed-off-by: Ross Burton Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

readline: use upstream's aclocal.m4 as acinclude.m4

2014-05-29T16:53:40+00:00

Instead of shipping a fork of the upstream aclocal.m4, simply rename it to acinclude.m4 at configure time. We don't need the fork now that autoheader is excluded. (From OE-Core rev: e531923c4c17becb2f1a8a89adfeff0a82961a4a) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie