linux/poky.git/meta/recipes-devtools/apt/apt.inc, branch uninative-1.5

apt: Fix build in musl it was break due to upgrade to 1.2.12

2016-08-10T09:46:28+00:00

methods/connect.cc: Musl doesn't support AI_IDN flag in netdb.h header so define it manually. apt-pkg/contrib/srvrec.h: Add explicity include of sys/types.h to avoid errors in types u_int_SIZE. (From OE-Core rev: a088018e6e36073c0723b160f8b087a5243836ee) Signed-off-by: Aníbal Limón Signed-off-by: Richard Purdie

apt: Upgrade to 1.2.12

2016-08-04T14:22:21+00:00

Test was made building core-image-sato with package_deb on qemux86 and qemuarm then run for two of them testimage and install packages with apt-get using PACKAGE_FEED_URI's configuration. Now apt support drop priviligies for install packages using a sandbox with _apt user, the useradd class was inherit and configured to install _apt user and group. Rebased patches: - 0001-Revert-always-run-dpkg-configure-a-at-the-end-of-our.patch - 0001-fix-the-gcc-version-check.patch - 0001-remove-Wsuggest-attribute-from-CFLAGS.patch - disable-test.patch - no-curl.patch (From OE-Core rev: 369a7f7232aa8406b63376f7888896fe90f9ce40) Signed-off-by: Aníbal Limón Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

apt: Add support for building for musl targets

2016-01-24T09:40:28+00:00

Turn bzip2 support into a PACKAGECONFIG zlibs is a must have and therefore add it to DEPENDS will make the build consistent (From OE-Core rev: ded03dab901647a7388d219a3a228d4f4f4298e8) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

meta: more removals of redunant FILES_${PN}-dbg

2015-12-16T11:56:30+00:00

In some recipes overly-split -dbg packages were merged into PN-dbg. Unless there's a very good reason, recipes should have a single -dev and -dbg package. (From OE-Core rev: a3b000643898d7402b9e57c02e8d10e677cc9722) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

package_regex.inc: split Debian-related entries into their own recipes

2015-12-08T10:20:51+00:00

(From OE-Core rev: 2a5e1848c11bd9a3c64cf8fcc0cb334c738bc5c5) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

apt: update to 1.0.10.1

2015-08-11T16:28:51+00:00

(From OE-Core rev: 37c8700560b6da569cdf9d7c306a9aa31dcdf06f) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

apt: remove invalid ac_cv_glibc_ver

2015-07-16T14:09:16+00:00

There is no ac_cv_glibc_ver in configure, can't find it in config.log after remove, either. (From OE-Core rev: 945e2bf6845b052eeb5101033c4770d766142bb1) (From OE-Core rev: 3234c79940f67ca48e8ee7961c87d80cc27939e5) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

apt: upgrade to 1.0.9.9

2015-05-29T09:17:15+00:00

1. Upgrade to fix the several CVEs: CVE-2014-0488, CVE-2014-0490 2. Remove apt-0.9.9.4-CVE-2014-0478.patch, which was backport. 3. Romve no-ko-translation.patch, apt-1.0.9.9 has ko translation 4. Update use-host.patch no-curl.patch db_linking_hack.patch and noconfigure.patch 5. Not build the test cases since it requires gtest 6. install libapt-private.so.* to libdir, otherwise this file is not installed into sysroot for native, and apt-get will use host's, and lead to fail 7. Revert apt commit[a2a75ff45]"always run 'dpkg --configure -a' at the end of our dpkg callings" for native package, otherwise the postscript for these installed packages will be run, and fail since the rootfs dir is not considered 8. Add lzma dependency by PACKAGECONFIG for target, and add xz dependency for native 9. Support to compile apt-native on centos6 (From OE-Core rev: 7dd4a53a99277b46696dea5558fa321a2267af0a) Signed-off-by: Roy Li Acked-by: Aníbal Limón Signed-off-by: Richard Purdie

apt: fix SRC_URI

2015-03-16T17:41:59+00:00

Fixed: WARNING: Failed to fetch URL ftp://ftp.debian.org/debian/pool/main/a/apt/apt_0.9.9.4.tar.gz, attempting MIRRORS if available (From OE-Core rev: 490d20e1a7e6e3a0cae24af37bcb0192a3916409) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

apt: fix for CVE-2014-0478

2014-09-30T13:10:34+00:00

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0478 (From OE-Core rev: 3dd692fcf2b0c11731b3f30abdf2b1878458a898) Signed-off-by: Wenlin Kang Signed-off-by: Chong Lu Signed-off-by: Richard Purdie