linux/poky.git/meta/recipes-devtools, branch daisy

mklibs-native: update SRC_URI

2017-09-11T09:48:04+00:00

The upstream oe-core recipe fixed similar fetcher issues by switching to a specific debian snapshot version. However, the debian snapshot doesn't provide mklibs 0.1.38 so fetch from yoctoproject.org mirror instead. (From OE-Core rev: bad46f25ec5d0069d7274e22662b71ba9a9753c4) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

dpkg: update SRC_URI

2017-09-11T09:48:04+00:00

The upstream oe-core recipe fixed similar fetcher issues by switching to a specific debian snapshot version. However, the debian snapshot doesn't provide dpkg v1.17.4 so fetch from yoctoproject.org mirror instead. (From OE-Core rev: f1dd3d54f1b104e0ab3d3857c4cdc9f6f1ecde9f) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

ossp-uuid: use snapshot.debian.org for SRC_URI

2017-09-11T09:48:04+00:00

Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will only contain releases that are currently in Debian. So, move all of SRC_URI to the .bb so it can use snapshot.debian.org instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues to work. [YOCTO #10040] (From OE-Core rev: 1194231ad4d3076824a84a92004ced13379d1983) Signed-off-by: Maxin B. John (cherry picked from commit 1b38ad4cb8faeb86c5e8cb6b7201194722c5ef31) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

ossp-uuid: update SRC_URI to not use Google Code

2017-09-11T09:48:04+00:00

Google Code is shutting down so tarballs will be fetched from a Debian mirror instead (From OE-Core rev: d8a3f404f2c54ce3f3aae15f1fc3fd4dcbdc1424) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton (cherry picked from commit 779c53911da663f06437e8a06c9a8c361d614fe6) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

dosfstools: fix SRC_URI

2017-09-11T09:48:04+00:00

Fixed: WARNING: Failed to fetch URL ftp://ftp.uni-erlangen.de/pub/Linux/LOCAL/dosfstools/dosfstools-2.11.src.tar.gz, attempting MIRRORS if available And add a HOMEPAGE for it, there is no dosfstools 2.11 on its official page (but 3.x). (From OE-Core rev: 9e7710c8f021b7e88f1e8d16846b707e62fb3d35) Signed-off-by: Robert Yang (cherry picked from commit cba73a598abc396fae4fb582be98fc04cb2a580f) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

squashfs-tools: enable building unsquashfs and fix squashfs-4.2-fix-CVE-2012-4025.patch

2015-07-16T19:45:25+00:00

* build unsqaushfs, useful when debuging corrupt squashfs from mksquashfs * squashfs-4.2-fix-CVE-2012-4025.patch fixes CVE in unsquashfs which we weren't building and it actually breaks building it, because someone missed squashfs_fs.h change from the original change * add git headers in all patches and fix references to new github repository (From OE-Core rev: e1a2540227250d854d5bba278634bcc9e7572cda) Signed-off-by: Martin Jansa Signed-off-by: Richard Purdie

e2fsprogs: CVE-2015-0247

2015-05-01T11:34:52+00:00

Fixes input sanitization errors. References http://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=f66e6ce4 http://www.ocert.org/advisories/ocert-2015-002.html (From OE-Core rev: f3e5b052689b2eba30e26903e964791f92241e65) Signed-off-by: Sona Sarmadi Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie

elfutils: CVE-2014-9447

2015-05-01T11:34:52+00:00

directory traversal in read_long_names() Reference https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9447 Upstream commit with the analysis: https://git.fedorahosted.org/cgit/elfutils.git/commit/?id=147018e729e7c22eeabf15b82d26e4bf68a0d18e (From OE-Core rev: 6e7badf6819f372bd6dced191c7fda9748062126) Signed-off-by: Sona Sarmadi Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie

Qemu: CVE-2014-2894

2015-05-01T11:34:51+00:00

Fixes an out of bounds memory access flaw in Qemu's IDE device model Reference http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2894 (From OE-Core rev: 5f7cdf1e1212af5e3dcf36c8817c63cc853b1a91) Signed-off-by: Sona Sarmadi Signed-off-by: Maxin B. John Signed-off-by: Richard Purdie

python: CVE-2014-7185

2015-04-27T14:20:45+00:00

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function. PoC: (From OE-Core rev: 2590eb53a6dac90cba52edd09ea56a6bdf4c4533) Signed-off-by: Richard Purdie