The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT
Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users
to cause a denial of service (out-of-bounds read and KDC crash) via
an initial '\0' character in a long realm field within a TGS request.
Backport upstream commit to fix it:
f0c094a1b7
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14
relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted IAKERB packet that is mishandled during
a gss_inquire_context call.
Backport upstream commit to fix it:
e04f028351
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before
1.14 relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted SPNEGO packet that is mishandled during
a gss_inquire_context call.
Backport upstream commit to fix it:
b51b33f2bc
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
dleyna-renderer is a library for implementing Digital Media
(DLNA) Renderers, and also provides a sample implementation
of such a renderer.
"dleyna-renderer-service" is designed to be started and
consumed using D-Bus.
Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
dleyna-server is a library for implementing Digital Media
(DLNA) Servers, and also provides a sample implementation
of such a server.
"dleyna-server-service" is designed to be started and
consumed using D-Bus.
Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
dleyna-connector-dbus is a D-Bus connector library
depending on "dleyna-core", and needed by dLeyna
implementations (most notably "dleyna-server" and
"dleyna-renderer"). It allows them to discover D-Bus
buses, and to be started via D-Bus services files.
Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
dleyna-core is a library of utility functions needed by
other dLeyna packages (most notably "dleyna-connector-dbus"
"dleyna-server" and "dleyna-renderer").
It provides APIs for logging, error, settings, task
management and an IPC abstraction API.
Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
restore PE
updated comments:
QT is the new default GUI for the binary 'wireshark'. This mode is currently disabled in the build. We build with GTK as the default gui so the resulting binary is now wireshark-gtk.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Kernel modules may not have the same architecture as user space. So we
tell INSANE_SKIP to skip checking the arch for the modules. This is
consistent with other kernel modules and the kernel recipe.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
The driver builds are optional, but for deterministic builds,
we should should be able to explicitly enable/disable the
builds for them in a proper place (maybe in BSP).
But we can't use PACKAGECONFIG since there is no option for
each driver, and the options are:
--no-drivers do not compile any driver
--no-drivers= do not compile the given drivers (comma sep.)
--drivers= only compile the given drivers (comma sep.)
So use NETMAP_DRIVERS to list the needed drivers and add proper
configs to EXTRA_OECONF, the default is no drivers, and all
supported drivers are listed in NETMAP_ALL_DRIVERS.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Upgrade snort from 2.9.6.0 to 2.9.7.5, as its dependency upgrade daq from
2.0.2 to 2.0.6, and accordingly update the patches:
* Add 2 new patches for snort to solve the cross compile issues
* Discard 2 snort patches since it is not needed
* Refresh the patch for daq new version
* Remove redundant '/' to getting round the rpm debugedit bug:
canonicalization unexpectedly shrank character
Signed-off-by: Zhiquan Li <zhiquan.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
configure the systemd unit file dir, otherwise it will be auto-checked
by 'pkg-config --variable=systemdsystemunitdir systemd', but if systemd
is not built firstly, and the the unit file will not be installed, and
lead to below error:
ERROR: Function failed: SYSTEMD_SERVICE_lldpd value lldpd.service does not exist
and disable sysusersdir, since sysuser is not used currently.
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
The previous xl2tpd was significantly out of date, so update the git
recipe and add in a release recipe for anyone looking to use the latest
stable release.
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Based on this thread:
http://comments.gmane.org/gmane.comp.handhelds.openembedded/70890
it seems that lldpd is a more complete implementation of the LLDP
protocol. Remove this implementation to provide better direction to
newcomers and to attempt to focus support for a single implementation in
the meta-networking layer.
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* hopefully fixes:
WARN: vlc: vlc rdepends on libavc1394, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libcroco, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libcrypto, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libdvdnav, but it isn't a build dependency?
WARN: vlc: vlc rdepends on librsvg, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libssh2, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libssl, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libupnp, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libvorbis, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libxml2, but it isn't a build dependency?
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* fixes:
cifs-utils-6.4: cifs-utils rdepends on samba, but it isn't a build dependency? [build-deps]
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* hopefully fixes:
sox-14.4.0: sox rdepends on libflac, but it isn't a build dependency? [build-deps]
sox-14.4.0: sox rdepends on opencore-amr, but it isn't a build dependency? [build-deps]
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* dmapi is in meta-filesystems
* hopefully fixes:
WARN: samba: samba rdepends on cyrus-sasl, but it isn't a build dependency?
WARN: samba: samba rdepends on dmapi, but it isn't a build dependency?
WARN: samba: samba rdepends on libbsd, but it isn't a build dependency?
WARN: samba: samba rdepends on libpam, but it isn't a build dependency?
WARN: samba: samba-python rdepends on libbsd, but it isn't a build dependency?
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* this isn't proper fix, just to silence various QA issues
* nobody cares about qt-mobility, this is just last step before adding
PNBLACKLIST for this (or moving it to separate meta-qt4)
* "Fixes"
qt-mobility-embedded-1.2.0: qt-mobility-embedded: invalid PACKAGECONFIG: bluez5 [invalid-packageconfig]
qt-mobility-x11-1.2.0: qt-mobility-x11: invalid PACKAGECONFIG: bluez5 [invalid-packageconfig]
qt-mobility doesn't really support bluez5, so we'll just silence the
QA warning, existing PACKAGECONFIGs for bluez4 and pulseaudio are
useless as well, because without disable option both are still
autodetected from ssysroot
* "Fixes"
WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on glib-2.0, but it isn't a build dependency?
WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on gstreamer, but it isn't a build dependency?
WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libasound, but it isn't a build dependency?
WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libgstapp-0.10, but it isn't a build dependency?
WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libgstvideo-0.10, but it isn't a build dependency?
WARN: qt-mobility-x11: qt-mobility-x11 rdepends on glib-2.0, but it isn't a build dependency?
WARN: qt-mobility-x11: qt-mobility-x11 rdepends on gstreamer, but it isn't a build dependency?
WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libasound, but it isn't a build dependency?
WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstapp-0.10, but it isn't a build dependency?
WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstinterfaces-0.10, but it isn't a build dependency?
WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstvideo-0.10, but it isn't a build dependency?
WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libxext, but it isn't a build dependency?
WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libxv, but it isn't a build dependency?
but it adds dependency on meta-multimedia layer (which isn't in meta-oe dependencies),
so it's not correct, but won't make things worse then they already are since
qt-mobility was moved from oe-core, hopefully it will move to separate meta-qt4
soon. gstreamer was already in DEPENDS, but DEPENDS was overwritten by
qt-mobility_1.2.0.inc which was included later, also drop qt4* dependencies
because these are already taken care of in qt4(e).bbclass.
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* optional dependency added to efl in:
commit 664708b817ab0cdc7177df3743b5d9c9ab7dd2b0
Author: Carsten Haitzler (Rasterman) <raster@rasterman.com>
Date: Tue May 5 11:35:16 2015 +0900
Subject: eina - start a much improved eina dbug infra and have eina_log use it
* fixes:
efl-1.15.1: edje rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-input-evas rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: eo rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: libeet rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: efreet-trash rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-ipc rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: eina rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-x rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: emotion rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-imf-evas rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: libemotion rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: efl rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-input rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-file rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ethumb rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-con rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: evas rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: efreet-mime rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: eeze rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: libefreet rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: embryo rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-evas rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-imf rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: ecore-audio rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: eldbus rdepends on libunwind, but it isn't a build dependency? [build-deps]
efl-1.15.1: eio rdepends on libunwind, but it isn't a build dependency? [build-deps]
enjoy-0.1.0+gitrAUTOINC+aa8fec69e8: enjoy rdepends on libunwind, but it isn't a build dependency? [build-deps]
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
