Commit Graph

983 Commits

Author SHA1 Message Date
Zhang Xiao 997caf9146 dnsmasq: backport CVE fixes from dnsmasq 2.78
CVE-2017-1449{1-6}

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:08:25 -07:00
Armin Kuster 2628a2ccac wireshark: Update Package to 2.2.12
Includes:
	wnpa-sec-2018-01,  Multiple dissectors could crash. (Bug 14253) CVE-2018-5336

	wnpa-sec-2018-02, The MRDISC dissector could crash. (Bug 14299, Bug 13707) CVE-2017-17997

	wnpa-sec-2018-03, The IxVeriWave file parser could crash. (Bug 14297) CVE-2018-5334

	wnpa-sec-2018-04, The WCP dissector could crash. (Bug 14251) CVE-2018-5335

Full release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.2.12.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Armin Kuster b6a6853f67 wireshark: Update to 2.2.11
changed --with-ssh to --with-libssh=DIR

includes:

wnpa-sec-2017-47 : CVE-2017-17084
    The IWARP_MPA dissector could crash. (Bug 14236)

wnpa-sec-2017-48 : CVE-2017-17083
    The NetBIOS dissector could crash. (Bug 14249)

wnpa-sec-2017-49 : CVE-2017-17085
    The CIP Safety dissector could crash. (Bug 14250)

release notes:
https://www.wireshark.org/docs/relnotes/wireshark-2.2.11.html

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Armin Kuster 59c7c0111c wireshark: update to 2.2.10
The following vulnerabilities have been fixed:
     * [1]wnpa-sec-2017-42
       BT ATT dissector crash ([2]Bug 14049) [3]CVE-2017-15192
     * [4]wnpa-sec-2017-43
       MBIM dissector crash ([5]Bug 14056) [6]CVE-2017-15193
     * [7]wnpa-sec-2017-44
       DMP dissector crash ([8]Bug 14068) [9]CVE-2017-15191

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Armin Kuster d946152884 wireshark: update to 2.2.9
Change LIC_FILES_CHKSUM from README.linux to COPYING as COPYING contains the license info

2.2.9 security fixes:
    wnpa-sec-2017-38
    MSDP dissector infinite loop (Bug 13933) CVE-2017-13767

    wnpa-sec-2017-39
    Profinet I/O buffer overrun (Bug 13847) CVE-2017-13766

    wnpa-sec-2017-41
    IrCOMM dissector buffer overrun (Bug 13929) CVE-2017-13765

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Kai Kang 7f7fdd5e51 wireshark: 2.2.7 -> 2.2.8
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
fan.xin dd63394477 wireshark: Upgrade to 2.2.7
Upgrade wireshark from 2.2.6 to 2.2.7

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Armin Kuster b400424d90 wireshark: update to 2.2.6
The following vulnerabilities have been fixed:
* [1]wnpa-sec-2017-12
  IMAP dissector crash ([2]Bug 13466) [3]CVE-2017-7703
* [4]wnpa-sec-2017-13
  WBMXL dissector infinite loop ([5]Bug 13477) [6]CVE-2017-7702
* [7]wnpa-sec-2017-14
  NetScaler file parser infinite loop ([8]Bug 13478) [9]CVE-2017-7700
* [10]wnpa-sec-2017-15
  RPCoRDMA dissector infinite loop ([11]Bug 13558) [12]CVE-2017-7705
* [13]wnpa-sec-2017-16
  BGP dissector infinite loop ([14]Bug 13557) [15]CVE-2017-7701
* [16]wnpa-sec-2017-17
  DOF dissector infinite loop ([17]Bug 13453) [18]CVE-2017-7704
* [19]wnpa-sec-2017-18
  PacketBB dissector crash ([20]Bug 13559)
* [21]wnpa-sec-2017-19
  SLSK dissector long loop ([22]Bug 13576)
* [23]wnpa-sec-2017-20
  SIGCOMP dissector infinite loop ([24]Bug 13578)
* [25]wnpa-sec-2017-21
  WSP dissector infinite loop ([26]Bug 13581)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Oleksandr Kravchuk 8869e7cf7c wireshark: update to 2.2.5
Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
dengke.du@windriver.com 010e7ae6aa opensaf: fix QA Issue
Move the do_sysvinit_install contents to do_install_append.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-21 06:48:11 -07:00
Oleksandr Kravchuk 68a75186f8 lftp: change SRC_URI source
Changed SRC_URI source to official web-site, which keeps tarballs with
old releases.

Cherry-picked from master, but without the upgrade to 4.7.5.

  commit a2e075ba65
  Author: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
  Date:   Mon Jan 9 15:34:07 2017 +0100

    lftp: update to 4.7.5 and change SRC_URI source

    Updated lftp to version 4.7.5 and changed SRC_URI source to official
    web-site, which keeps tarballs with old releases.

Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-21 06:48:03 -07:00
Joe Slater 30ac31d098 chrony: fix build failure for arma9
Eliminate references to syscalls not available
for ARM_EABI.  Also add a dependency on libseccomp
which is needed for scfilter to work.

Set PACKAGECONFIG to not enable scfilter, since
kernel CONFIG_SECCOMP is unlikely to be set.  This
aligns the usage of libseccomp with that of other packages.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-06-26 11:19:12 -07:00
Armin Kuster fe5c83312d libdnet: Update SRC_URI to fix checksum errors
ERROR: libdnet-1.12-r0 do_fetch: Fetcher failure for URL: 'https://github.com/dugsong/libdnet/archive/libdnet-1.12.tar.gz'. Checksum mismatch!
File: '/home/akuster/oss/downloads/libdnet-1.12.tar.gz' has md5 checksum d2f1b72eac2a1070959667e9e61dcf20 when 9253ef6de1b5e28e9c9a62b882e44cc9 was expected
File: '/home/akuster/oss/downloads/libdnet-1.12.tar.gz' has sha256 checksum b6360659c93fa2e3cde9e0a1fc9c07bc4111f3448c5de856e095eb98315dd424 when 83b33039787cf99990e977cef7f18a5d5e7aaffc4505548a83d31bd3515eb026 was expected

use Gentoo url instead of github

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-28 11:37:51 -05:00
Armin Kuster a44baf37d8 libdnet: update SRC_URI
ERROR: libdnet-1.12-r0 do_checkuri: Fetcher failure for URL: 'http://libdnet.googlecode.com/files/libdnet-1.12.tgz'. URL http://libdnet.googlecode.com/files/libdnet-1.12.tgz doesn't work

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Khem Raj b53fe10e02 inetutils: Disable rsh, rcp, rlogin on musl
They all need rcmd() API from rpc implementation
and while glibc provides it bundled, musl does not
so we disable these apps

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 3773725982)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Khem Raj fae7d92ab9 ipsec-tools: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit f99ac6369e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Andreas Oberritter ecc787c764 samba: conditionalize sed call for onnode
| sed: can't read .../4.4.5-r0/image/usr/bin/onnode: No such file or directory

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit cc32689a5b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Kai Kang e0ba1ef682 openl2tp: update SRC_URI
The original SRC_URI is not valid, so update it with openl2tp official
ftp site.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit c50baaa487)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Kai Kang fc8d895d87 ctdb: update SRC_URI
The SRC_URI of ctdb is not right for multilib. Replace var 'PN' with
'BPN' to fix it.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 885a8588ad)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Kai Kang d836c393fe pimd: update SRC_URI
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 742ef73eb5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Armin Kuster 85ab36e6a1 fetchmail: update SRC_URI
ERROR: fetchmail-6.3.26-r0 do_checkuri: Fetcher failure for URL: 'http://download.berlios.de/fetchmail/fetchmail-6.3.26.tar.xz'. URL http://download.berlios.de/fetchmail/fetchmail-6.3.26.tar.xz doesn't work
ERROR: fetchmail-6.3.26-r0 do_checkuri: Function failed: do_checkuri
ERROR: Logfile of failure stored in: /home/akuster/oss/maint/poky/build/tmp/work/i586-poky-linux/fetchmail/6.3.26-r0/temp/log.do_checkuri.28438
ERROR: Task (/home/akuster/oss/maint/meta-openembedded/meta-networking/recipes-support/fetchmail/fetchmail_6.3.26.bb:do_checkuri) failed with exit code '1'

per homepage:
NEWS: NOW HOSTED BY SOURCEFORGE.NET AFTER BERLIOS SHUTDOWN

The BerliOS developer's website has shut down in the week following 2014 May 12th, and most of the fetchmail contents have been moved to SourceForge.net, including mailing list subscriptions, archives back to 2004, web site contents, download and Git repository. See http://sourceforge.net/projects/fetchmail/.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 09:00:31 -08:00
Armin Kuster 25f87bf041 ipsec-tools: change SRC_URI fetcher.
ERROR: ipsec-tools-0.8.2-r0 do_checkuri: Fetcher failure for URL: 'ftp://ftp.netbsd.org/pub/NetBSD/misc/ipsec-tools/0.8/ipsec-tools-0.8.2.tar.bz2'. URL ftp://ftp.netbsd.org/pub/NetBSD/misc/ipsec-tools/0.8/ipsec-tools-0.8.2.tar.bz2 doesn't work
ERROR: ipsec-tools-0.8.2-r0 do_checkuri: Function failed: do_checkuri

https seems more reliable.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 09:00:06 -08:00
Armin Kuster aeb521dc69 netkit-ruser: update SRC_URI
ERROR: netkit-telnet-0.17-r0 do_checkuri: Fetcher failure for URL: 'ftp://ftp.uk.linux.org/pub/linux/Networking/netkit/netkit-telnet-0.17.tar.gz'. URL ftp://ftp.uk.linux.org/pub/linux/Networking/netkit/netkit-telnet-0.17.tar.gz doesn't work
ERROR: netkit-telnet-0.17-r0 do_checkuri: Function failed: do_checkuri

Debian moved these sources

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:59:46 -08:00
Armin Kuster d7edfe52bd tcpdump: update to 4.9.0 for security fixes
CVE included in this release:
CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925
CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929
CVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933
CVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937
CVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973
CVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984
CVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993
CVE-2016-8574 CVE-2016-8575 CVE-2017-5202 CVE-2017-5203
CVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342
CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485
CVE-2017-5486

updated add-ptest patch to apply to Makefile.in

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:58:08 -08:00
Oleksandr Kravchuk 70f1e0fa31 tcpdump: upgrade to 4.8.1
Upgraded tcpdump to version 4.8.1 and removed deprecated ipv6 configure
flag.

This update includes:
CVE-2014-8767, CVE-2014-8768, CVE-2014-8769

Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:56:55 -08:00
Armin Kuster 6794ea398d wireshark: fix build issue
This should fix:
 Making all in ui/gtk
| make[2]: Entering directory '/home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5e-oe-linux-gnueabi/wireshark/1_2.2.4-r0/build/ui/gtk'
| /bin/bash: glib-compile-resources: command not found

Fix which glib-compile-resources is picked up. Ensure we use the native glib-2.0p version and not one from the host.

I could not reproduce this but "which  glib-compile-resources" pointed out the problem.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:50:08 -08:00
Chai, Chong Yi 5983889675 libtalloc: fix SRC_URI to use https instead of http
Fetching using http from samba.org is no longer working and changing to https
would fix the issue.

Signed-off-by: Chai, Chong Yi <chong.yi.chai@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 41feeb4df9)
Signed-off-by: Chai, Chong Yi <chong.yi.chai@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Andreas Müller 86610438b5 libtevent: fix SRC_URI - http has gone
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 3a3e443864)
Signed-off-by: Chai, Chong Yi <chong.yi.chai@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Andreas Müller 6fb2449710 libtdb: fix SRC_URI - http has gone
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 7131b825b6)
Signed-off-by: Chai, Chong Yi <chong.yi.chai@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Armin Kuster 87a0103993 wireshark: update package to 2.2.4
The following vulnerabilities have been fixed:
     * [1]wnpa-sec-2017-01
       The ASTERIX dissector could go into an infinite loop. ([2]Bug
       13344)
     * [3]wnpa-sec-2017-02
       The DHCPv6 dissector could go into a large loop. ([4]Bug 13345)

see: https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Oleksandr Kravchuk 77161f5b1e wireshark: update to 2.2.3
Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Kai Kang a4f56c5bc5 postfix: add dependency icu
It calls icu-config to detect icu support in file makedefs of postfix.
The compile results are different depends on whether icu has been built
already.

postfix should provide Unicode support, so add dependency icu to solve
the problem.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:36:19 -05:00
Zheng Ruoqin 815066eceb wireshark: 2.2.1 -> 2.2.2
Upgrade wireshark from 2.2.1 to 2.2.2

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:35:51 -05:00
Chen Qi c7c3097754 tftp-hpa: fix ALTERNATIVE_PRIORITY to avoid conflict
Fix ALTERNATIVE_PRIORITY to avoid the same priority of the 'tftp' utility
with that from busybox.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:35:38 -05:00
Chen Qi e9bb4c52c9 netcat-openbsd: fix ALTERNATIVE_PRIORITY to avoid conflict
Fix ALTERNATIVE_PRIORITY to avoid the same priority of the 'nc' utility
with that from busybox.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:35:26 -05:00
Chen Qi 67ce9d817a inetutils: fix alternative priority to avoid conflict
Fix ALTERNATIVE_PRIORITY for the logger utility to avoid the same priority
with that from util-linux.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:34:56 -05:00
Haiqing Bai bce352f909 crda: check the word size of target instead of host machine.
Issue: LIN8-5177

When 'USE_OPENSSL=1' is configured for crda, key2pub.py doesn't
create "keys-ssl.c" with target's word size. Pass 'SITEINFO_BITS'
from building system to key2pub.py.

(LOCAL REV: NOT UPSTREAM) -- sent to oe-devel on 20161130

Signed-off-by: Haiqing Bai <Haiqing.Bai@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:34:34 -05:00
Robert Yang d57387900b lftp: do_configure: fix "Argument list too long"
Fixed when len(TMPDIR) =  410:
aclocal: error: cannot open echo [snip]: Argument list too long

This is becuase it has a lot of m4 files, use relative path for them
can fix the problem.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:33:42 -05:00
Robert Yang bfb9612ada inetutils: do_configure: fix "Argument list too long"
Fixed when len(TMPDIR) =  410:
aclocal: error: cannot open echo [snip]: Argument list too long

This is becuase it has a lot of m4 files, use relative path for them
can fix the problem.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:33:15 -05:00
Andreas Oberritter aabd2f0142 samba: Avoid timeout for nmbd if started offline with systemd
If no network connection appears within DefaultTimeoutStartSec
(~ 90s) after startup, nmbd fails to notify systemd and will
therefore get killed.

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:32:33 -05:00
Joe Slater 3c43856b9f ntp: update to version 4.8p9
This fixes two CVE defects.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:31:31 -05:00
Jackie Huang 443ed72112 samba: fix the hardcoded path in init script
Replace the hardcoded path with base_bindir in init
script to fix the error:
/etc/init.d/samba.sh: line 15: /usr/bin/ps: No such file or directory
/etc/init.d/samba.sh: line 17: /usr/bin/sed: No such file or directory
/etc/init.d/samba.sh: line 16: /usr/bin/grep: No such file or directory

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:31:13 -05:00
Khem Raj 401326cbdd crda: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:30:42 -05:00
Li Zhou 362fdb3f43 net-snmp: snmplib, UDPIPv6 transport: Add a missing return statement
Backport a succeeding commit from net-snmp upstream to fix the issue
introduced by commit
<BUG#a2584: Fix snmptrap to use clientaddr from snmp.conf>.
The missing return will cause crash when binding to a non-exist IPv6
address.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:30:02 -05:00
Li Zhou 52a4839bf7 net-snmp: fix snmptrap to use clientaddr from snmp.conf.
Under IPv6 IP-multihomed environment, the socket does not bind to the
clientaddr indicated in snmp.conf when sending snmptrap and it might
choose a random one.
Backport the patch from net-snmp upstream to fix it.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:29:17 -05:00
Mark Asselstine 6cedb84099 dnsmasq: allow for dnsmasq instances to reuse default dnsmasq.conf
By defining 'listen-address' in the global dnsmasq.conf file we
prevent other instances of dnsmasq from using the global config as we
will get an error that the address is already in use. Instead we pass
'local-service' when we start the main dnsmasq instance which will
listen on the loopback address as well as any other local
subnets. This will allow the main dnsmasq instance to play nice with
other instances we might start for network-manager, libvirt, lxc...

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:28:49 -05:00
Mark Asselstine 01f4d8df84 dnsmasq: read the conf files found in dnsmasq.d
The dnsmasq package installs a ${sysconfigdir}/dnsmasq.d directory but
doesn't currently use any configuration files that might be placed
there. This goes against what the user would expect and doesn't match
what you see in other distros.

We could ensure this config directory is read when dnsmasq is started,
as we are doing here, or by including it in the main dnsmasq.conf
file. By doing it here we can have better reuseability of the main
dnsmasq.conf file by other instances of dnsmasq.

There are currently no files added to the dnsmasq.d directory for core
oe images, so this should not result in any runtime behavior changes.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:28:10 -05:00
Kai Kang de93062527 curlpp: fix qa issue of do_configure
curlpp is configured with boost by default. And it searches boost
directory on build machine. If boost is installed on build machine, then
causes qa issue:

| ERROR: curlpp-0.7.3-r0 do_configure: This autoconf log indicates
| errors, it looked at host include and/or library paths while
| determining system capabilities.

Pass the boost directory in ${STAGING_DIR_HOST} to configure script to
disable search on build machine to fix the issue.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:15:41 -05:00
Kai Kang 4758c07d5e samba: correct sub-package name for multilib
The name of sub-package lib${PN}-base is not right when extended by
multilib. Correct it by replace ${PN} with ${BPN}.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:15:02 -05:00
Kai Kang 6f1f4e3007 samba: Fix qa issue and update ctdb-tests
Fix file-rdeps QA warning by replace shell interpreter of script
${bindir}/onnode with /bin/sh that it doesn't has any bashism.

File ${bindir}/ctdb_run_cluster_tests which is a link to
${bindir}/ctdb_run_tests is split into package samba. That causes wrong
runtime dependency that samba depends on samba-ctdb-tests. Split the
file to samba-ctdb-tests to fix the issue.

Script ctdb_run_tests calls command 'getopt', so add runtime dependency
util-linux-getopt. Install config file and test cases for
samba-ctdt-tests at same time.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:14:34 -05:00