linux/poky.git/meta/recipes-devtools/dpkg/dpkg_1.17.4.bb, branch styhead

dpkg: Upgrade to 1.17.21

2014-12-25T08:18:13+00:00

Remove dpkg-1.17.4-CVE-2014-0471, dpkg-1.17.4-CVE-2014-0471-CVE-2014-3127 and ignore_extra_fields patches that are already in upstream. Rebase no-vla-warning patch. (From OE-Core rev: d09ea40d7f5b59f37625e43973c363c07053fdfb) Signed-off-by: Aníbal Limón Signed-off-by: Richard Purdie

dpkg: Security Advisory - CVE-2014-3127

2014-06-17T09:23:53+00:00

v2 changes: * update format for commit log * add Upstream-Status for patch commit a12eb58959d0a10584a428f4a3103a49204c410f upstream Dpkg::Source::Patch: Outright reject C-style filenames in patches Because patch only started recognizing C-style filenames in diffs in version 2.7, it's not safe to assume one behaviour or the other, as the system might or might not have a recent enough version, or a GNU patch program at all. There's also no reason we should be supporting this kind of strange encoded filenames in patches, when we have not done so up to now. Let's just ban these types of diffs and be done with it. Fixes: CVE-2014-0471, CVE-2014-3127 Closes: #746306 [drop the text for debian/changelog,because it's not suitable for the veriosn] (From OE-Core rev: 2c3838443eacd3a86ea8917ea53a20248e7bdf03) Signed-off-by: Wenlin Kang Signed-off-by: Wenzong Fan Signed-off-by: Richard Purdie

dpkg: Security Advisory - CVE-2014-0471

2014-06-17T09:23:53+00:00

v2 changes: * update format for commit log * add Upstream-Status for patch commit a82651188476841d190c58693f95827d61959b51 upstream Dkpkg::Source::Patch: Correctly parse C-style diff filenames We need to strip the surrounding quotes, and unescape any escape sequence, so that we check the same files that the patch program will be using, otherwise a malicious package could overpass those checks, and perform directory traversal attacks on source package unpacking. Fixes: CVE-2014-0471 Reported-by: Jakub Wilk [drop the text for debian/changelog,because it's not suitable for the veriosn] (From OE-Core rev: 81880b34a8261e824c5acafaa4cb321908e554a0) Signed-off-by: Wenlin Kang Signed-off-by: Wenzong Fan Signed-off-by: Richard Purdie

dpkg-compiler.m4: remove -Wvla (fix build on CentOS 5.8)

2014-02-25T17:53:59+00:00

Remove the -Wvla flag from the set of compiler warning flags, since gcc on old host systems such as CentOS 5.8 doesn't support it, and it causes a build error for dpkg-native. (From OE-Core rev: 736ef878570ebe60845da88094907ad28f7b50ff) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

dpkg: fix a link problem for dpkg-native on CentOS 5.8

2014-02-25T17:53:59+00:00

[ CQID: WIND00392830 ] CentOS 5.8 provides the kernel support and headers for the sync_file_range() syscall, but glibc 2.5 doesn't implement the sync_file_range() syscall stub, so we can't link dpkg-native. Add a patch that makes dpkg require a glibc version >= 2.6 in order to use sync_file_range(). (From OE-Core rev: 197dfda0d971e5e423f1b04a13fbe7ab22d2e874) Signed-off-by: Donn Seeley Signed-off-by: Lei Liu Signed-off-by: Randy MacLeod Signed-off-by: Jeff Polk Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

dpkg: use systemd service for first boot configuration

2014-01-28T00:52:35+00:00

Use a systemd service file for first boot configuration for dpkg based images which has 'package-management' in its IMAGE_FEATURES. [YOCTO #5719] (From OE-Core rev: 56490921d267b784118df43cbd107925c8b94200) Signed-off-by: Chen Qi Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

dpkg: upgrade to 1.17.4

2013-12-14T09:11:13+00:00

(From OE-Core rev: 03eaf724efb01b1e27a5888d7e11c8ad9d8fa429) Signed-off-by: Saul Wold Signed-off-by: Richard Purdie