linux/poky.git/meta/recipes-core, branch krogoth

initrdscripts/init-install*: Add rootwait when installing to USB devices

2017-06-27T22:41:01+00:00

It can take a bit for USB devices to be detected, so if a USB device is your rootfs and you don't set rootwait you will most likely get a kernel panic. Fix this by adding rootwait to the kernel command line on installation. Fixes [YOCTO #9462]. (From OE-Core rev: 7f26cee3d8e4b2e9240b30c21be9fa7661186ccd) Signed-off-by: California Sullivan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

build-appliance-image: Update to krogoth head revision

2017-06-07T07:42:54+00:00

(From OE-Core rev: 2a1e8e2c9ff2caa6c207d8fe0d517e472715d1d1) Signed-off-by: Richard Purdie

build-appliance-image: Update to krogoth head revision

2017-06-06T17:52:39+00:00

(From OE-Core rev: 03487ba4d5eb12e826998c76c6f350672853550f) Signed-off-by: Richard Purdie

zlib: update SRC_URI to fix fetching

2017-05-18T12:14:21+00:00

Upstream have removed the file from zlib.net as a new version has been released, switch to fetching from the official sourceforge mirror. [YOCTO #10879] (From OE-Core rev: bb99e4a620efd59556539c156cd98ea23aae74c8) (From OE-Core rev: b7599330f1d629384e16a5fbeffc1a65c1555667) (From OE-Core rev: d2522df5bf85875a896d3b7ddeb20b63af3f4470) Signed-off-by: Joshua Lock Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

expat: CVE-2012-6702, CVE-2016-5300

2017-05-18T12:14:21+00:00

References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6702 http://www.openwall.com/lists/oss-security/2016/06/04/5 Reference to upstream fix: https://bugzilla.redhat.com/attachment.cgi?id=1165210 Squashed backport against vanilla Expat 2.1.1, addressing: * CVE-2012-6702 -- unanticipated internal calls to srand * CVE-2016-5300 -- use of too little entropy (From OE-Core rev: c9a2e2f33e8b473f06a3941dab9b4ecccd111a23) Signed-off-by: Sona Sarmadi Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

build-appliance-image: Update to krogoth head revision

2016-11-09T00:06:48+00:00

(From OE-Core rev: 28da89a20b70f2bf0c85da6e8af5d94a3b7d76c9) Signed-off-by: Richard Purdie

This is a backport from master of 2 consecutive fixes.

2016-11-08T23:47:14+00:00

First fix commit: 1100af93cb07caf24d568c039d52fb0c80714c30 Second fix commit: b7b2e348716161deb21c9864ac5caa5f1df1fa9c The error these commits fix can prevent Eclipse debugging on certain target configurations. * base-files: Add shell test quoting tty can return "not a tt" which results in warnings when /etc/profile is executed. (From OE-Core rev: eed586dd238efe859442b21b425f04e262bcdb2b) Signed-off-by: Jussi Kukkonen Signed-off-by: Richard Purdie * base-files: fix profile error under < /dev/null Previous attempts to constrain execution of `resize` to only TTYs did not properly handle situations when `tty` would return the string "not a tty". The symptom is "/etc/profile: line 34: test: too many arguments". Fix this by utilizing the exit code of `tty`. Also use `case` instead of `cut` to eliminate a subshell. (From OE-Core rev: e67637e4472ff3a1e2801b84ee3d69d4e14b9efc) Signed-off-by: Richard Tollerton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (From OE-Core rev: e86ab7487450aea7e44ff70b225517dbb056e3b5) Signed-off-by: brian avery Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

dropbear: fix multiple CVEs

2016-11-08T23:47:13+00:00

CVE-2016-7406 CVE-2016-7407 CVE-2016-7408 CVE-2016-7409 References: https://matt.ucc.asn.au/dropbear/CHANGES http://seclists.org/oss-sec/2016/q3/504 [YOCTO #10443] (From OE-Core rev: cca372506522c1d588f9ebc66c6051089743d2a9) Signed-off-by: Sona Sarmadi Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

glibc: fix CVE-2016-1234, CVE-2016-3075, CVE-2016-5417

2016-11-08T23:47:12+00:00

Only relevant for krogoth since version 2.24+ (master, morty) is not affected. (From OE-Core rev: 88be4b40bacc7c8a08fb76fc220f491deb2c1c3a) Signed-off-by: Pascal Bach Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

util-linux: Security fix for CVE-2016-5011

2016-09-23T14:27:06+00:00

affects util-linux < 2.28.2 (From OE-Core rev: 72a8636e3cfdfef8d95fee4af721dd7acaa89ffc) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie