linux/poky.git/meta/recipes-extended, branch daisy

lsof: update SRC_URI

2017-09-11T09:48:04+00:00

The official lsof ftp site rejects download attempts from hosts for which it can not perform a DNS reverse-lookup. See: https://people.freebsd.org/~abe/ Fix for long download timeout and warnings from the bitbake fetcher. (From OE-Core rev: 65887209baf4c97241716621fd1609999a1fd76f) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

mailx: fix SRC_URI

2017-09-11T09:48:04+00:00

The old one is not available any more. (From OE-Core rev: 6edc2a0bc5f579893ee40fbcf39bcb9f8cbf1ee8) Signed-off-by: Robert Yang Signed-off-by: Ross Burton (cherry picked from commit 3569d434e754a62ec998fbf48380d653d1524dc4) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

pigz: Update SRC_URI

2017-09-11T09:48:04+00:00

Upstream have released a new tarball and removed the old one. Revert to the Yocto Project source mirror instead, preserving the upstream version check. (From OE-Core rev: de49fa8db38ea4e2d925c85b3cce252191916035) Signed-off-by: Richard Purdie (cherry picked from commit 839b17ffd96abff3e9cf47fb4a6d680637c865b1) Tweak commit to apply to older pigz v2.3.1 recipe in OE 1.6 Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

stat: fix SRC_URI

2017-09-11T09:48:04+00:00

The old SRC_URI is redirected to the new one, fixed: WARNING: Failed to fetch URL ftp://metalab.unc.edu/pub/Linux/utils/file/stat-3.3.tar.gz, attempting MIRRORS if available (From OE-Core rev: c7bb712d0a5f1333eb97a515e8f839d606141274) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie (cherry picked from commit 45034239c7e38ec991aa75d7c30417c22bfdef28) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

cpio: fix bug CVE-2014-9112 for cpio-2.8

2015-02-06T14:56:06+00:00

Obtain detain from following URL. http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d (From OE-Core rev: 732fc8de55a9c7987608162879959c03423de907) (From OE-Core rev: 6f238c8293c3578eead15bf9f9ab5fdf95d1e9a5) Signed-off-by: Bian Naimeng Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

cpio: fix bug CVE-2014-9112 for cpio-2.11

2015-02-06T14:56:06+00:00

Obtain detain from following URL. http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d (From OE-Core rev: 9a32da05f5a9bc62c592fd2d6057dc052e363261) (From OE-Core rev: 674e1b4d44c7b108a843d486178182b943607a55) Signed-off-by: Bian Naimeng Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

wget: Fix for CVE-2014-4887

2014-11-06T11:40:38+00:00

(From OE-Core rev: 52f9eebe86e4b641229b524dd7701c01d9ed833c) Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

libarchive: avoid dependency on e2fsprogs

2014-11-06T11:40:38+00:00

libarchive's configure script looks for ext2fs/ext2_fs.h in order to use some defines for file attributes support if present (but doesn't link to any additional libraries.) There is no configure option to disable this, and if e2fsprogs is rebuilding between do_configure and do_compile you can currently get a failure. Because it doesn't need anything else from e2fsprogs, and e2fsprogs isn't currently buildable for nativesdk anyway, copy the headers in from e2fsprogs-native which we're likely to have built already (and add it to DEPENDS just to be sure we have.) Fixes [YOCTO #6268]. (From OE-Core master rev: ad754e46ad477acfbe7543187a5c38bc333b8612) (From OE-Core rev: 7504c2e715d675775e166a52ae83cf48504add19) Signed-off-by: Paul Eggleton Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

ltp: Added zip-native as a DEPENDS

2014-11-04T15:13:56+00:00

The Makefile checks for zip during installation [YOCTO #6699] (From OE-Core rev: a6e8ced3fa8e8e2aa3df0798b80eb26e5ebc4b15) (From OE-Core rev: 00dc2ac9e0a7d4cec2d94f4d934dc1ab42d5b20b) Signed-off-by: Alejandro Hernandez Signed-off-by: Richard Purdie Conflicts: meta/recipes-extended/ltp/ltp_20140115.bb

bash: Fix-for-CVE-2014-6278

2014-10-10T17:06:09+00:00

This vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277 See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6278 (From OE-Core rev: de596b5f31e837dcd2ce991245eb5548f12d72ae) Signed-off-by: Catalin Popeanga Signed-off-by: Richard Purdie