linux/poky.git/meta/recipes-support, branch danny

gnupg: integrate fix for CVE-2012-6085

2013-04-29T17:00:00+00:00

From http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-6085: "The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet." Patch taken from upstream git, which is identical in both branches. (From OE-Core rev: 44ed6605c1978325782d229d0c01329465c4c5c7) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libproxy: add dependency on glib-2.0

2013-04-23T12:00:53+00:00

libproxy uses glib-2.0, but the depends is missing Fixes intermittent build errors. (From OE-Core rev: df39cc2820aeaa8d5187a65945f7739bc6fa53cb) Signed-off-by: Alexandru DAMIAN Signed-off-by: Richard Purdie

libproxy: Fix for CVE-2012-4504

2012-12-13T15:21:42+00:00

Reference:https://code.google.com/p/libproxy/source/detail?r=853 Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4504 [YOCTO #3487] (From OE-Core rev: a1ef9a5f647abfafd337b22b6353848962bcb00d) Signed-off-by: yanjun.zhu Signed-off-by: Richard Purdie

gdbm: Resolve host contamination issue

2012-10-10T21:46:52+00:00

The autoconf macros detect the presence of -ldbm or -lndbm on the host system and add the library to link against, for now good reason I can explain. This patch makes the build behave determinstically whether they're present or not. Other than the extra linkage, there doesn't appear to be any other change in behaviour from these options and they look like dead code. The extra linkage can cause problems where sstate is used on a machine where the extra librbary isn't present causing build failures. (From OE-Core rev: f609bf5525450bfdb8e0864d44c41cce7f9319c9) Signed-off-by: Richard Purdie

Cleanup: fix PN == BPN cases

2012-10-02T10:40:50+00:00

When building target packages, it used to be enought to check for PN == BPN, however with the multilib configurations, this can lead to subtle errors. Change instances of PN == BPN, to ${CLASSOVERRIDE} == 'class-target'. (From OE-Core rev: acc988272b4e74a9ad1e6da5af5b2d208584197b) Signed-off-by: Mark Hatle Signed-off-by: Richard Purdie

boost: Support enums in hash

2012-09-28T14:19:39+00:00

Fixes builds which were building fine with previous versions of boost (From OE-Core rev: 139b65affbf50c4230e344cd4d0205ef025bb7c3) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

libcap: Fix erroneous path in last commit

2012-09-25T09:41:26+00:00

The directory used as SBINDIR should be ${sbindir} not ${base_sbindir}. Reported by Martin Jansa (From OE-Core rev: 2c6725c1f8427a0920c2810d649010f98b7869eb) Signed-off-by: Phil Blundell Signed-off-by: Richard Purdie

libcap: respect ${base_sbindir}

2012-09-24T10:30:35+00:00

Need to pass the path explicitly to "make install" to ensure that the binaries end up in the right locations. (From OE-Core rev: 3dffb9f577b794e8b78fb884adf9a15c45965bc4) Signed-off-by: Phil Blundell Signed-off-by: Richard Purdie

sqlite3: enable USE_PREAD

2012-09-24T10:30:35+00:00

This gives a small but measureable performance improvement for I/O heavy workloads. (From OE-Core rev: e4bd65e68c3d0dd798ff69c2e9491e5b2dcafdc3) Signed-off-by: Phil Blundell Signed-off-by: Richard Purdie

recipes: bump PR to rebuild after libffi5 -> libffi6

2012-09-19T16:56:26+00:00

(From OE-Core rev: 211200fb98a72ba815e7c411fbebfd781879064c) Signed-off-by: Martin Jansa Signed-off-by: Saul Wold Signed-off-by: Richard Purdie