Commit Graph

3671 Commits

Author SHA1 Message Date
Belal, Awais 108016f9e7 mplayer2: fix building with gcc 5.x
This patch works around a potential problem in the theora
glue code where it assumes that the compiler will
somehow find a function which is not exported explicitly
through the libtheora library. Due to this problem the
build fails with gcc-5.x compiler.
The included patch essentially backports a commit which
updates the glue code to use the Theora 1.0 API to
eliminate this problem and PNBLACKLIST is cleared
for mplayer2.

Signed-off-by: Awais Belal <awais_belal@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17 07:41:40 -07:00
Armin Kuster a715bdffac xdelta3: Security fix CVE-2014-9765
CVE-2014-9765 xdelta: buffer overflow in main_get_appheader

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-21 07:49:40 -08:00
Armin Kuster dc5634968b php: Security fix CVE-2016-1903
CVE-2016-1903 php: Out-of-bounds memory read via gdImageRotateInterpolated

Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-10 15:08:20 +01:00
Armin Kuster 889258fd3a php: Security fix CVE-2015-7804
CVE-2015-7804 php: uninitialized pointer in phar_make_dirstream()

Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-10 15:08:20 +01:00
Armin Kuster 4fecce0035 php: Security fix CVE-2015-7803
CVE-2015-7803 php: NULL pointer dereference in phar_get_fp_offset()

Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-10 15:08:19 +01:00
Armin Kuster f53801a361 qwt: Fix host-user-contaminated
WARNING: QA Issue: qwt: /qwt-examples/usr/bin/event_filter is owned by uid 1000, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated]
WARNING: QA Issue: qwt: /qwt-examples/usr/bin/cpuplot is owned by uid 1000, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-06 16:56:47 -08:00
Yi Zhao 7434c03b3b orrery: fix host-user-contaminated
Fix QA warning:
WARNING: QA Issue: orrery: /orrery/usr/share/orrery/deepSky/messier is owned by uid 1000,
which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-06 16:56:47 -08:00
Yi Zhao 13f7a3a66b logwatch: fix host-user-contaminated
Fix QA warning:
WARNING: QA Issue: logwatch: /logwatch/usr/share/logwatch/scripts/services/resolver is owned by uid 1000,
which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-06 16:56:47 -08:00
Armin Kuster 20416eb946 networkmanager: fix QA warning
WARNING: QA Issue: networkmanager rdepends on libnewt, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: networkmanager rdepends on polkit, but it isn't a build dependency? [build-deps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-06 16:56:47 -08:00
Jens Rehsack 7665832e98 waf-samba: enable parallel builds
Instead of relying on sequencial waf build invoked by make,
invoke waf as documented with default switch for building in
parallel.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-06 16:56:47 -08:00
Maciej Borzecki c70f2be562 mozjs: fix linking issues on i586
When building for qemux86 on a x86 host, there's a possibility that the build
will try to link with incorrect libraries. Due to problematic -rpath-link the
linker may try to use host libraries if they are present and are arch
compatible.

Signed-off-by: Maciej Borzecki <maciej.borzecki@open-rnd.pl>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-06 16:56:47 -08:00
Armin Kuster b556364b72 fltk: Fix license warning
WARNING: fltk: No generic license file exists for: FLTK in any provider

Add license

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-14 11:22:11 +01:00
Armin Kuster 3c1ad2dcf9 fltk: fix build issue.
this patch fixes:
Fl_JPEG_Image.cxx: In constructor 'Fl_JPEG_Image::Fl_JPEG_Image(const char*)':
| Fl_JPEG_Image.cxx:156:29: error: invalid conversion from 'int' to 'boolean' [-fpermissive]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-14 11:22:11 +01:00
Yi Zhao 93ea7d3651 polkit-gnome: remove unrecognized configure options
Fix QA warning:
WARNING: QA Issue: polkit-gnome: configure was passed unrecognised options:
--disable-examples --disable-introspection [unknown-configure-option]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-14 11:22:10 +01:00
Kai Kang af8c5dd119 iperf3: fix build-deps qa warning
Add PACKAGECONFIG lksctp to fix qa warning:

| WARNING: QA Issue: iperf3 rdepends on lksctp-tools, but it isn't a
| build dependency? [build-deps]

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-14 11:22:09 +01:00
Andre McCurdy 25b57117f1 opencv: support machines based on oe-core tune-corei7.inc
oe-core tune-corei7.inc enables -msse4.2 (rather than -msse3, which is
only enabled by tune-core2.inc). Add test for -msse4.2 to ensure that
SSE is enabled for machines based on tune-corei7.inc (also add a test
for -msse4.1 for completeness).

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-14 11:22:09 +01:00
Andre McCurdy 651fdfc649 opencv: limit ARM_INSTRUCTION_SET = "arm" over-ride to armv4/armv5
Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-14 11:22:09 +01:00
Andre McCurdy 5b64550b80 opencv: sort PACKAGECONFIG options
Recipe cleanup only, no functional changes.

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-14 11:22:09 +01:00
Kai Kang 53d75fdf0b edac-utils: add patches for initscript
Update LIC_FILES_CHKSUM that the whole license file should be used
rather than the first 2 lines.

Remove COMPATIBLE_HOST that edac-utils could build for all architectures.

Update runtime dependencies:

* add perl modules that edac-ctl needs
* add dmidecode for the archs which are in COMPATIBLE_HOST of dmidecode
  that dmidecode is required by command edac-ctl.

And add patches for initscripts to:

* add restart subcommand
* make init script be able to load EDAC module automatically

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-14 11:22:07 +01:00
Kai Kang ad6133a2e9 mce-inject: add recipe
Add recipe of mce-inject which is required to run mcelog ptest cases.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-31 14:10:56 +01:00
Martin Jansa 8ed39aa43a libgxim: move from meta-ruby back to meta-oe
* it was moved to meta-ruby (totherer with imsettings which depends on libgxim)
  because of ruby-native dependency, now when ruby was moved from meta-ruby to
  oe-core we can move libgxim back to meta-oe (which also allows imsettings
  in meta-xfce to depend only on meta-oe as well)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-30 13:05:45 +01:00
Martin Jansa ea92216bd6 lcdproc5: add dependency on lirc
* it's autodetected from sysroot:
  ERROR: lcdproc: lcdd-driver-lirc package isn't created when building with minimal dependencies?

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:34 -08:00
Yi Zhao 10a6e53eef tmux: add PACKAGECONFIG for utempter
Fix QA warning:
WARNING: QA Issue: tmux rdepends on libutempter, but it isn't a build
dependency? [build-deps]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Jackie Huang 53bb7ab6c6 lmsensors-config: fix the packaging for sensord
/etc/sysconfig/sensord is needed by sensord.service
so it should be packaged in lmsensors-config-sensord.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Qi.Chen@windriver.com 1dbc273c82 libvpx: fix host-user-comtaminated QA issue
Fix 'host-user-comtaminated' QA issue by using chown in do_install.
Also remove the useless do_compile function.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Qi.Chen@windriver.com e1010b329a tipcutils: fix host-user-comtaminated QA issue
Fix the 'host-user-comtaminated' QA issue by using chown in do_install.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:33:33 -08:00
Christopher Larson bd06eeb7a9 canutils: rdep on iproute2
busybox ip fails to configure can interfaces, so we need iproute2 to do so.
See also http://www.armadeus.com/wiki/index.php?title=CAN_bus_Linux_driver.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:32:22 -08:00
Kai Kang b544906e29 pmtools: support huge ACPI table
For some servers such as Canoe Pass or Thunder Ridge, they have much
more entries in ACPI table, so original 1K buffer is insufficient.

Switch to dynamic buffer for this situation.

Remove 'protocol' field in SRC_URI as well which cause warning:

| WARNING: Failed to fetch URL git://github.com/anyc/pmtools.git;protocol=https,
| attempting MIRRORS if available

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:31:37 -08:00
Radek Dostal ae951ebb35 htop: delete not used patch
remove-proc-test.patch was not used since commit
78909f65d8 "htop: upgrade to version 1.0.2"

Signed-off-by: Radek Dostal <radek.dostal@streamunlimited.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:31:01 -08:00
Yi Zhao 9f22c913e7 hplip: specify cupsbackenddir and cupsfilterdir
Fix QA issue when enable multilib:
ERROR: QA Issue: hplip: Files/directories were installed but not shipped in any package:
  /usr/lib
  /usr/lib/cups
  /usr/lib/cups/filter
  /usr/lib/cups/backend
  /usr/lib/cups/filter/hpcac
  /usr/lib/cups/filter/foomatic-rip-hplip
  /usr/lib/cups/filter/pstotiff
  /usr/lib/cups/filter/hpcups
  /usr/lib/cups/filter/hplipjs
  /usr/lib/cups/filter/hpps
  /usr/lib/cups/filter/.debug
  /usr/lib/cups/filter/.debug/hplipjs
  /usr/lib/cups/filter/.debug/hpcups
  /usr/lib/cups/filter/.debug/hpps
  /usr/lib/cups/backend/hp
  /usr/lib/cups/backend/.debug
  /usr/lib/cups/backend/.debug/hp
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
hplip: 17 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:30:15 -08:00
Qi.Chen@windriver.com 96757c3b6d rrdtool: install python site packages into libdir
Fix the do_configure function to suite the latest version to install
python libraries into ${libdir}.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:29:51 -08:00
Yi Zhao 5c3aaa9eaf pam-passwdqc: fix the hardcoded libdir
Fix QA issue when enable multilib:
WARNING: QA Issue: pam-passwdqc-dbg: found library in wrong location:
/lib/security/.debug/pam_passwdqc.so
pam-passwdqc: found library in wrong location:
/lib/security/pam_passwdqc.so [libdir]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:29:11 -08:00
Andre McCurdy 655b9806eb tree: respect the package's own default CFLAGS
The tree Makefile defines default CFLAGS form Linux (-DLINUX, etc)
which are lost if we don't manually include them in the final CFLAGS.

Also break the dependency on EXTRA_OEMAKE containing '-e', disable the
unused configure task and, since package has a very short description,
set SUMMARY instead of DESCRIPTION.

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:28:52 -08:00
George McCollister 05f285254f postgresql: Don't symlink to perl if it's disabled
Don't create a symlink to libperl.so if perl isn't in PACKAGECONFIG.
Attempting to do so will fail if perl hasn't been built.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:28:29 -08:00
Kai Kang 456eb95308 mcelog: remove bashism and create ptest subpackage
Create ptest subpackage. Add a patch to remove bashism and then only
ptest package depends on bash.

Inherit autotools-brokensep and re-write do_install as well.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:27:21 -08:00
Hongxu Jia 9560894109 mariadb.inc: fix mysqld hung at first init time based on systemd
While SYSTEMD_AUTO_ENABLE_mariadb-server = "enable", the mysqld service
hungs.
...
[    **] A start job is running for Run pending postinsts (25s / no limit)
[  OK  ] Stopped MariaDB database server.
...

In mariadb-server's pkg_postinst, it install db at first runtime. And the
following 'systemctl mysqld restart' casued the hunging. So the fix idea
is to reomove pkg_postinst and still install db at first runtime.

Introduce mysql-systemd-start from ${S}/packaging/rpm-oel/. For review
convenience, we add them as file.

The mysql-systemd-start provides two functions: the install_db is to install
db at fist runtime (the first runtime means if a db existed, the install_db
will directly exit); the pinger is to wait for mysqld service startup
completed.

The mysqld.service add ExecStartPost than previous which invoke
'mysql-systemd-start post' to wait for mysqld service startup completed.

We add a package to provide install_db, so the user could choose it
to install database for mariadb at first boot before mysqld started.

It also fix another issue:
When you manually restart mysqld and do mysql test to connect the server,
the return of the restart could make sure mysqld is ready, and the following db
connect will not fail with:
...
Can't connect to local MySQL server through socket
...

Tweak my.cnf to remove obsolete/incorrect parameter.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:26:37 -08:00
Kai Kang 9af04860be libssh2: make crypto library selectable
Add PACKAGECONFs 'openssl' and 'gcrypt' to make crypto library
selectable. Only one of them could be set. If they are both set,
'gcrypt' is invalide.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:25:42 -08:00
Christopher Larson 6cc7fbfc3b gpsd: also support bluez5
gpsd uses libbluetooth, not the dbus interface, so it can work with bluez5 as
well, as the library is compatible.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:25:24 -08:00
Joshua Lock 0afe8af234 poppler-data: install CMap resources for CJK glyph support
CID-keyed fonts, as commonly used to support pictographic East
Asian character sets require Character Maps which unidirectionally
map character codes (i.e. Unicode encoding) to CID (the glyphs in
the font face).

Without a CMap poppler isn't able to correctly PDF files in
Chinese, Japanese or Korean without embedded fonts.

This change installs a copy of the Identity files from Adobe's
CMap Resources[1] based on a similar change in Fedora's
poppler-data[2][3].

This is an updated version of the v2 patch originally created and sent
by my colleague, Joshua Lock.

1. https://github.com/adobe-type-tools/cmap-resources
2. http://pkgs.fedoraproject.org/cgit/poppler-data.git/tree/poppler-data.spec#n18
3. https://bugzilla.redhat.com/show_bug.cgi?id=842351

Co-Authored-By: Bob Ham <bob.ham@collabora.com>
Signed-off-by: Bob Ham <bob.ham@collabora.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:20:27 -08:00
Bob Ham 76df85bd1a poppler: move RDEPENDS on poppler-data to libpoppler
The poppler-data package contains data needed by consumers of
the libpoppler package, for example evince.  However, the RDEPENDS in
this recipe is only for the poppler package.  Moving the RDEPENDS to
libpoppler ensures that poppler-data is included in any builds with
separate libpoppler consumers but not poppler.  The poppler package
automatically depends on libpoppler so poppler's dependency on
poppler-data is not lost.

Signed-off-by: Bob Ham <bob.ham@collabora.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:18:40 -08:00
Li xin cc33b97f15 sessreg: add a patch to avoid build errors.
Do not build man dir since it is always build failed.
This is not a good way,but can remove sessreg form PNBLACKLIST.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:17:57 -08:00
Steffen Sledz 5826ba6968 syslog-ng: add UPDATE_ALTERNATIVE for syslog-service
Use ALTERNATIVE mechanism in OE to manage the syslog service to
avoid conflicts with other syslog implementations like rsyslog
or busybox.

Signed-off-by: Steffen Sledz <sledz@dresearch-fe.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:12:16 -08:00
Wenzong Fan 6c1b51eff1 krb5: fix CVE-2015-2698
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c
in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly
accesses a certain pointer, which allows remote authenticated users
to cause a denial of service (memory corruption) or possibly have
unspecified other impact by interacting with an application that calls
the gss_export_sec_context function. NOTE: this vulnerability exists
because of an incorrect fix for CVE-2015-2696.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:11:57 -08:00
Wenzong Fan be9179c85d krb5: fix CVE-2015-2697
The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT
Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users
to cause a denial of service (out-of-bounds read and KDC crash) via
an initial '\0' character in a long realm field within a TGS request.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:11:42 -08:00
Wenzong Fan ac3b050b11 krb5: fix CVE-2015-2696
lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14
relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted IAKERB packet that is mishandled during
a gss_inquire_context call.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:11:27 -08:00
Wenzong Fan 000b5f2941 krb5: fix CVE-2015-2695
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before
1.14 relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted SPNEGO packet that is mishandled during
a gss_inquire_context call.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-12-20 14:11:08 -08:00
Martin Jansa 89163f1a8f samba, ctdb, libldb, libtdb, libtevent, talloc: move to meta-networking
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:57:47 +01:00
Martin Jansa 2bae637b92 qt-mobility: fix dependencies and PACKAGECONFIG
* this isn't proper fix, just to silence various QA issues
* nobody cares about qt-mobility, this is just last step before adding
  PNBLACKLIST for this (or moving it to separate meta-qt4)
* "Fixes"
  qt-mobility-embedded-1.2.0: qt-mobility-embedded: invalid PACKAGECONFIG: bluez5 [invalid-packageconfig]
  qt-mobility-x11-1.2.0: qt-mobility-x11: invalid PACKAGECONFIG: bluez5 [invalid-packageconfig]
  qt-mobility doesn't really support bluez5, so we'll just silence the
  QA warning, existing PACKAGECONFIGs for bluez4 and pulseaudio are
  useless as well, because without disable option both are still
  autodetected from ssysroot
* "Fixes"
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on glib-2.0, but it isn't a build dependency?
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on gstreamer, but it isn't a build dependency?
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libasound, but it isn't a build dependency?
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libgstapp-0.10, but it isn't a build dependency?
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libgstvideo-0.10, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on glib-2.0, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on gstreamer, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libasound, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstapp-0.10, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstinterfaces-0.10, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstvideo-0.10, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libxext, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libxv, but it isn't a build dependency?
  but it adds dependency on meta-multimedia layer (which isn't in meta-oe dependencies),
  so it's not correct, but won't make things worse then they already are since
  qt-mobility was moved from oe-core, hopefully it will move to separate meta-qt4
  soon. gstreamer was already in DEPENDS, but DEPENDS was overwritten by
  qt-mobility_1.2.0.inc which was included later, also drop qt4* dependencies
  because these are already taken care of in qt4(e).bbclass.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:57:47 +01:00
Martin Jansa ceb9d22c38 lmsensors: exclude lmsensors-config dependency with SIGGEN_EXCLUDE_SAFE_RECIPE_DEPS
* see:
  http://lists.openembedded.org/pipermail/openembedded-devel/2015-September/103271.html
* fixes:
ERROR: lmsensors different signature for task do_package_write_ipk.sigdata between qemux86copy and qemux86
runtaskdeps changed from ['bashbash_4.3.30.bb.do_packagedata', 'lm_sensorslmsensors-config_1.0.bb.do_packagedata', 'lm_sensorslmsensors_3.4.0.bb.do_package', 'lm_sensorslmsensors_3.4.0.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'perlperl_5.22.0.bb.do_packagedata', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'rrdtoolrrdtool_1.5.4.bb.do_packagedata'] to ['bashbash_4.3.30.bb.do_packagedata', 'lm_sensorslmsensors-config_1.0.bb.do_packagedata', 'lm_sensorslmsensors_3.4.0.bb.do_package', 'lm_sensorslmsensors_3.4.0.bb.do_packagedata', 'opkg-utilsopkg-utils_git.bb.do_populate_sysroot:virtual:native', 'perlperl_5.22.0.bb.do_packagedata', 'pseudopseudo_1.7.4.bb.do_populate_sysroot:virtual:native', 'rrdtoolrrdtool_1.5.4.bb.do_packagedata']
meta-openembedded/meta-oe/recipes-support/lm_sensors/lmsensors-config_1.0.bb.do_packagedata with hash 26762e381db19859b96a0c8ce13ee808
 changed to
meta-openembedded/meta-oe/recipes-support/lm_sensors/lmsensors-config_1.0.bb.do_packagedata with hash a94903117ba4beac7f22a4edd3084d9b
Hash for dependent task lm_sensorslmsensors-config_1.0.bb.do_packagedata changed from 26762e381db19859b96a0c8ce13ee808 to a94903117ba4beac7f22a4edd3084d9b

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:57:47 +01:00
Jens Rehsack deb13634e9 samba: fix dependencies and QA issues
Fix remaining QA issues (dependency-wise) like

  WARNING: QA Issue: samba rdepends on libacl, but it isn't a build dependency? [build-deps]
  WARNING: QA Issue: samba rdepends on libavahi-client, but it isn't a build dependency? [build-deps]

broken perl library path, having a default PACKAGECONFIG, but allow
user-defined one and rely on PACKAGECONFIG instead of DISTRO_FEATURES.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:57:47 +01:00