The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in
Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows
remote attackers to cause a denial of service (snmptrapd crash) via an
empty community string in an SNMP trap, which triggers a NULL pointer
dereference within the newSVpv function in Perl.
Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1072044
Signed-off-by: Junling Zheng <zhengjunling@huawei.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
ipsec-tools-0.8.2: ipsec-tools: Files/directories were installed but not shipped
/lib
/lib/systemd
/lib/systemd/system
/lib/systemd/system/racoon.service [installed-vs-shipped]
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
ntp 4.2.8p2 has more CVE fixes, like CVE-2015-1799, CVE-2015-1798;
and remove ntp-4.2.8-ntp-keygen-no-openssl.patch which 4.2.8p2 has integrated
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Neither -utils nor -ptest packages make sense w/o actual kernel support
for SCTP protocol. Make both packages RRECOMMEND kernel-module-sctp.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Because the license of libpcscspy.c is GPLv3+.
So modified the license of pcsc-lite-dev.
Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Some of recipes produce errors if the distro has enabled usage of
security_flags.inc file. Fix those errors (and QA warnings) by providing
an additional include file that is require'd from conf/layer.conf.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
python-cryptography is required by python-pyopenssl >= 0.14
Includes python-cryptography-vectors package for ptest
Over 75k unit tests (100% coverage):
* tested on nuc (x86) and beaglebone (arm) hardware.
** will overload ram on default qemux86/qemuarm
Signed-off-by: Tim Orling <TicoTimo@gmail.com>
python-py is required by python-pytest
python-pytest is required for ptest of python-cryptography
Signed-off-by: Tim Orling <TicoTimo@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* it was removed from libtool recipe in oe-core commit:
commit 5e40bcd93d9ea64f1a6d75e62aabda3dcb33fc01
Author: Robert Yang <liezhi.yang@windriver.com>
Date: Fri Apr 10 02:30:02 2015 -0700
Subject: libtool: remove libltdl-dev libltdl-dbg libltdl-staticdev from PACKAGES
There should be only one dev and dbg package
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
methodjit uses assembler instructions which are not available on armv4
architecture. Disable methodjit for it.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add a recipe for lprng - rather small, but powerfull implementation of
LPR print spooler functionality.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
QA reports a warning because lmsensors-config-cgi uses rrdtool, but does
not declare runtime dependency on it. Add rrdtool to RDEPENDS_${PN}-cgi.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Set the S variable to $WORKDIR to remove the warning about S being not
existant (which is true for this package, since there are no original
sources for it).
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
When we search for the git repository associated with a file and the there's no
repository associated, we incorrectly find the yocto repository itself.
To prevent the search from finding an incorrect repository, we only accept
repositories found within the build directory.
Signed-off-by: Daniel Markus <daniel.markus@leica-geosystems.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
This configuration file is only suitable for kexecboot > 0.5.9.
With the upcoming release of linux_4.0 based kexecboot kernels it is preferable
to clearly distinguish old and new versions.
Fix WARNING: ... kexecboot-cfg-0.1 ('S') doesn't exist, please set 'S' to a proper value
Remove PR
Increase PV
Signed-off-by: Andrea Adami <andrea.adami@gmail.com>
CyaSSL is now called wolfSSL. Recipe updates included RPROVIDE and
PROVIDE lines, with updates to sha/md5 sums.
Signed-off-by: lchristina26 <leah@wolfssl.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
LIC_FILES_CHKSUM changes:
BDSL: update copyright notice with "2013"
GPL: update to GPLv2
LEGAL: added license info for ccan files
dropped patches since they are now incorperated.
several security fixes included:
CVE-2014-2525
CVE-2014-0160
CVE-2014-2734
CVE-2014-8080
CVE-2014-8090
for addional information:
http://svn.ruby-lang.org/repos/ruby/tags/v2_2_1/ChangeLog
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* otherwise zlib license text provider isn't found:
WARNING: The license listed zlib was not in the licenses collected for liblinebreak
WARNING: liblinebreak: No generic license file exists for: zlib in any provider
[YOCTO #7584]
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
COMPATIBLE_HOST included support for x86_64 but not for
32-bit x86 architectures - added i586 arch name to cover qemux86, etc.
Signed-off-by: Gary S. Robertson <gary.robertson@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
A tiny initramfs image suitable for initial bringup of the hardware.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add a tiny simple debug script that will mount all available virtual
file systems and then execute a shell.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Junling Zheng
Roy Li
Bian Naimeng
Robert Yang
Chunrong Guo
Dmitry Eremin-Solenikov
Andrea Adami
leimaohui
Amarnath Valluri
Tim Orling
Martin Jansa
Daniel Markus
Denys Dmytriyenko
Wenzong Fan
Andreas Oberritter
lchristina26
Jianchuan Wang
Alexandre Belloni
Armin Kuster
Andre McCurdy
gary.robertson@linaro.org
Chen Qi