linux/poky.git/meta/recipes-core, branch yocto-2.3.2

Revert "expat: Don't use getrandom() in the -native case"

2017-09-11T22:51:59+00:00

This reverts commit 450942db7f4638eba7ec262901fe1d7e1b1f6070. Applied in error to the pyro branch. Signed-off-by: Richard Purdie

libxml2: Fix CVE-2017-8872

2017-09-11T21:15:58+00:00

fix global-buffer-overflow in htmlParseTryOrFinish (HTMLparser.c:5403) https://bugzilla.gnome.org/show_bug.cgi?id=775200 Here is the reproduce steps on ubuntu 16.04, use clang with "-fsanitize=address" ... export CC="clang" export CFLAGS="-fsanitize=address" ./configure --disable-shared make clean all -j wget https://bugzilla.gnome.org/attachment.cgi?id=340871 -O poc ./xmllint --html --push poc ==2785==ERROR: AddressSanitizer: global-buffer-overflow on address 0x000000a0de21 at pc 0x0000006a7f6e bp 0x7ffdfe940c10 sp 0x7ffdfe940c08 READ of size 1 at 0x000000a0de21 thread T0 #0 0x6a7f6d (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x6a7f6d) #1 0x6a7356 (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x6a7356) #2 0x4f4504 (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x4f4504) #3 0x4f045e (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x4f045e) #4 0x7f81977d682f (/lib/x86_64-linux-gnu/libc.so.6+0x2082f) #5 0x419ad8 (/home/jiahongxu/Downloads/libxml2-2.9.4/xmllint+0x419ad8) ... (From OE-Core rev: a615b0825927a09a0aa8312d131c9acbaef8956d) (From OE-Core rev: 1c9d891886f35e6cc4485f244180d7d0ffa82cd3) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Revert "Add an XML_PARSE_NOXXE flag to block all entities loading even local"

2017-09-11T21:15:58+00:00

The new flag doesn't work and the change even broke the XML_PARSE_NONET option. (From OE-Core rev: 8b586f60778579ee2c9adae429128a07e8437553) (From OE-Core rev: d2b1486bf8773d3eef36c5e77b82e70c88d9c682) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

expat: Don't use getrandom() in the -native case

2017-09-11T21:15:58+00:00

getrandom() is only available in glibc 2.25+ and uninative may relocate binaries onto systems that don't have this function. For now, force the code to the older codepath until we can come up with a better solution for this kind of issue. (From OE-Core rev: da9ac8092497c3f2c246d3534f47e42cb2d9e4e8) (From OE-Core rev: 450942db7f4638eba7ec262901fe1d7e1b1f6070) Signed-off-by: Richard Purdie

libxml2: Make ptest run the Python tests if Python support is enabled

2017-08-31T16:57:11+00:00

Since we go through the trouble of copying the Python tests, we may as well actually run them... This also avoids the following QA issue: ERROR: libxml2-2.9.4-r0 do_package_qa: QA Issue: /usr/lib/libxml2/ptest/python/tests/push.py contained in package libxml2-ptest requires /usr/bin/python, but no providers found in RDEPENDS_libxml2-ptest? [file-rdeps] (From OE-Core rev: 2b9470678d8df152af54899adb4774fb0d481cf3) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

libxml2: move python module to Python 3

2017-08-31T16:57:11+00:00

(From OE-Core rev: 30417429cea525e6eb6c3cfbe760ebe7b13f0980) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

ncurses: add SYSROOT_DESTDIR for siteconfig_gencache

2017-08-29T10:57:29+00:00

After switching to Recipe Specific Sysroots, ncurses will not be populated in its own sysroots, then siteconfig_gencache fails to find some headers, so add ${SYSROOT_DESTDIR}/${includedir} into the search list to fix the issue. (From OE-Core rev: 421850875a5dafa1deed0647b7b30b76df9b25cf) Signed-off-by: Jackie Huang Signed-off-by: Richard Purdie (cherry picked from commit 2ef34f7fb60ecdff29aae1d54a90a2e765c15e1e) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

glibc-common.inc: set CVE_PRODUCT to glibc

2017-08-29T10:57:27+00:00

All recipes which include this .inc map to glibc NVD component. (From OE-Core rev: 5e11fa22f0b9ee18878b49389603ddf5533cbbc4) Signed-off-by: Mikko Rapeli Signed-off-by: Ross Burton (cherry picked from commit 613a13725db4e05539974cc7c66584a287d7b4bd) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

glib.inc: set CVE_PRODUCT to glib

2017-08-29T10:57:27+00:00

NVD uses product glib and vendor gnome for CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2016-6855 (From OE-Core rev: 9621f46bde37e27dd323305d0c1e987a7cca37aa) Signed-off-by: Mikko Rapeli Signed-off-by: Ross Burton (cherry picked from commit 69d6342d45316389afb4b062088919689db0a6dd) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

systemd: workaround login failure on qemumips64 when 'pam' is enabled

2017-07-27T21:36:45+00:00

Append " -fno-tree-switch-conversion -fno-tree-tail-merge" to FULL_OPTIMIZATION to workaround login problem on qemumips64. Otherwise, user cannot login onto the target even username and password are provided. (From OE-Core rev: 89d53c742d3538744b892237698ffde2c9c60009) Signed-off-by: Chen Qi Signed-off-by: Ross Burton (cherry picked from commit 35403ba3707c3c8dd94bcc557eef6f7c66696bc5) Hand applied Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie