Commit Graph

2609 Commits

Author SHA1 Message Date
Chong.Lu@windriver.com 18e196f16e samba: Security Advisory - CVE-2013-4475
Samba 3.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1,
when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote
attackers to bypass intended file restrictions by leveraging ACL
differences between a file and an associated alternate data stream
(ADS).

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4475

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:25 +02:00
Chong.Lu@windriver.com 69e765c464 samba: Security Advisory - CVE-2013-4124
Integer overflow in the read_nttrans_ea_list function in nttrans.c in
smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before
4.0.8 allows remote attackers to cause a denial of service (memory
consumption) via a malformed packet.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4124

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:25 +02:00
Chong.Lu@windriver.com fe32c95ab0 samba: fix two CVEs CVE-2013-0213 CVE-2013-0214
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:24 +02:00
Chong.Lu@windriver.com 65ac416470 samba: fix parsing linemarkers in preprocessor output
When PIDL calls out to C preprocessor to expand IDL files
and parse the output, it filters out linemarkers and line control
information as described in http://gcc.gnu.org/onlinedocs/cpp/Preprocessor-Output.html
and http://gcc.gnu.org/onlinedocs/cpp/Line-Control.html#Line-Control

With gcc 4.8 stdc-predef.h is included automatically and linemarker for the
file has extended flags that PIDL couldn't parse ('system header that needs to
be extern "C" protected for C++')

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:24 +02:00
Chong.Lu@windriver.com 3d5d8c6d0f samba: Security Advisory - CVE-2013-4496
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6
does not enforce the password-guessing protection mechanism for all
interfaces, which makes it easier for remote attackers to obtain access
via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4496

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:24 +02:00
Martin Jansa 84d6edad90 fim: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:24 +02:00
Richard Purdie 12cdf070d2 talloc: fix build with B!=S
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:14 +02:00
Richard Purdie 01eb0f9192 libetpan: fix build with B!=S
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:14 +02:00
Richard Purdie 00d884a616 xpext: fix build with B!=S
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:14 +02:00
Richard Purdie b623c7ac51 gtkextra: add missing dependency on gobject-introspection-stub
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:14 +02:00
Richard Purdie 495f009c42 glade3: add missing dependency on gnome-common and libxml2
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:14 +02:00
Richard Purdie e29addd7d6 polkit-gnome: add missing dependency on gnome-common
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:14 +02:00
Richard Purdie 7c64126149 enca: add missing dependency on virtual/libiconv
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:14 +02:00
Richard Purdie 74783ca190 libmtp: add missing dependency on virtual/libiconv
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Richard Purdie f6ecec16d7 recipes: add missing gtk-doc class dependencies
* These recipes all use gtk-doc m4 macros but were missing
  dependencies on the class.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Richard Purdie 36d57b9234 recipes: add missing pkgconfig class inherits
* These recipes all use pkg-config in some way but were missing
  dependencies on the tool, this patch adds them.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Richard Purdie 0ee1083568 recipes: add missing dependency on intltool-native
* These recipes all require intltool-native to build but were missing
  a dependency on it.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Martin Jansa 8d9191534f sylpheed: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Martin Jansa a6112684d8 omgps: Blacklist because it's broken since gcc upgrade to 4.9
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Martin Jansa 9b66f08ff3 vala-terminal: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Martin Jansa a03b235b31 libusbg: Blacklist, because of B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:22 +02:00
Martin Jansa 38a2bd6463 libftdi, soft66: Blacklist, because of libftdi is broken without libusb-config
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:21 +02:00
Martin Jansa 8eea692502 libwmf: Blacklist because freetype-config was removed
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:21 +02:00
Martin Jansa 0ca63b3ba3 qconnman, qconnman-e: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:21 +02:00
Martin Jansa bd71f9bb27 xchat: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:21 +02:00
Martin Jansa 1b4bfcec1e openmotif: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:21 +02:00
Martin Jansa fbc6b3a738 krb5: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:20 +02:00
Martin Jansa 06015d66c6 zsh: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:20 +02:00
Martin Jansa e983da919e xf86-input-mtev: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:20 +02:00
Martin Jansa 0144400b2f apcupsd: Blacklist because of broken with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:20 +02:00
Roy Li 52b21a1951 dialog: inherit brokensep and use pkg-config to detect ncurses
1. inherit autotools-brokensep, or else configuration will fail since B!=S
2. use pkg-config to detect ncurses, since ncurses-config no longer works

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:20 +02:00
Fathi Boudra 5177d38d46 pm-qa: update to 0.4.11 release
Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:19 +02:00
Denys Dmytriyenko 162a0867b6 fbset: the package doesn't use autotools at all
Previous attempt at fixing it (3649e6b52f) was
to replace inherit autotools with autotools-brokensep. But since the package
doesn't use autotools at all, there's no need to inherit either of those
classes.

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:19 +02:00
Martin Jansa c811ad2cdc libsocketcan: Fix build with B!=S
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:54 +02:00
Martin Jansa a04c794b58 tracker: move from meta-oe to meta-gnome
* it rdepends on gvfs which is available only in meta-gnome and nothing
  in meta-oe depends on tracker

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:54 +02:00
Steffen Sledz c794fb0ed6 live555: fix fetch problem
live.2013.04.30.tar.gz is no longer available at original live555 url
and the url of the FreeBSD mirror has changed according to[1].

[1] <http://ftp.freebsd.org/pub/FreeBSD/ports/distfiles/README.txt>

Signed-off-by: Steffen Sledz <sledz@dresearch-fe.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:54 +02:00
Roy Li 5e0545d79e rsyslog: use pkgconfig to check libgcrypt
libgcrypt does no longer provide libgcrypt-config, and provide
*.pc, so we should use pkgconfig to check

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:54 +02:00
Paul Eggleton 054f814707 pv: fix metadata fields
* Use correct LICENSE value to match up with common license file (and
  avoid corresponding warning)
* Set SUMMARY instead of DESCRIPTION

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:54 +02:00
Paul Eggleton 87b89ba7a1 pv: upgrade to 1.5.3
Autotools breakage fixed upstream (which also fixes the S!=B issue).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:54 +02:00
Paul Eggleton cf2140877b lcdproc: fix do_install for S!=B
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:53 +02:00
Koen Kooi e2f0d002cb swig: use pkg-config for pcre detection.
OE-core commit 5870bd272b0b077d0826fb900b251884c1c05061 sabotaged the binconfig way.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:53 +02:00
Nick Lewis a6eaef9425 libxml++: fix ptest target paths
Signed-off-by: Nick Lewis <nick.lewis@usa.g4s.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:53 +02:00
Marko Lindqvist d12abd8fea libsdl-ttf: Fix build with separate builddir
Do not assume that sources are in the current directory in
do_configure_prepend() but refer to them with path to source directory.

Signed-off-by: Marko Lindqvist <cazfi74@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:32:31 +02:00
Marko Lindqvist 497dc74fb3 libsdl-image: Fix build with separate builddir
Do not assume that sources are in the current directory in
do_configure_prepend() but refer to them with path to source directory.

Signed-off-by: Marko Lindqvist <cazfi74@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:32:31 +02:00
Ash Charles 20944d9c8a eject: copy po subdirectory for out-of-tree build
The po subdirectory found on the VPATH for an out-of-tree build so we
copy it over. See [1] for discussion.

[1] http://lists.openembedded.org/pipermail/openembedded-devel/2014-May/096052.html

v3: only create and populate po/ if it doesn't already exist
v4: test to see if we're building out-of-tree

Signed-off-by: Ash Charles <ashcharles@gmail.com>
Reviewed-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:32:31 +02:00
Balasubramanian, Aparna c992b1ba17 rng-tools: Update rng-tools version to 4
Signed-off-by: Aparna Balasubramanian <aparnab@ti.com>
Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:32:31 +02:00
Koen Kooi cb457359b5 acpica: pass target cflags
This fixes:

| make[1]: *** [obj/aeexec.o] Error 1
| In file included from /build/linaro/build/build/tmp-eglibc/sysroots/genericarmv7a/usr/include/features.h:402:0,
|                  from /build/linaro/build/build/tmp-eglibc/sysroots/genericarmv7a/usr/include/string.h:25,
|                  from ../../../source/include/platform/aclinux.h:115,
|                  from ../../../source/include/platform/acenv.h:150,
|                  from ../../../source/include/acpi.h:56,
|                  from ../../../source/tools/acpiexec/aecommon.h:51,
|                  from ../../../source/tools/acpiexec/aehandlers.c:44:
| /build/linaro/build/build/tmp-eglibc/sysroots/genericarmv7a/usr/include/gnu/stubs.h:7:29: fatal error: gnu/stubs-soft.h: No such file or directory
|  # include <gnu/stubs-soft.h>
|                              ^
| compilation terminated.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:32:31 +02:00
Armin Kuster ee37bcbbae libnet: fix build issue with package upgrade
The main issue was the endianess detection. The ac override did not work.
The current version has updated automake and autoconf files that address better endianess detection and it plays well with YP autotools.

Build tested on all qemus arches.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:32:30 +02:00
Matthieu CRAPET d4312063b7 id3lib: fix autoheader warning due to missing AC_DEFINE template
For more information:
https://www.mail-archive.com/openembedded-devel@lists.openembedded.org/msg36641.html

Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:32:30 +02:00
Armin Kuster 8316933b40 libol: compile issue files missing in B and packaging issue
needed to copy over a file from S to B.
remove packaging requirement for /usr/bin/scsh. Not needed (see link)
https://lists.balabit.hu/pipermail/syslog-ng/2000-August/000795.html

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-13 13:38:12 +02:00