Moved LIC_FILES_CHKSUM from .inc to .bb
5.6.18 changed do to yr update.
Includes: CVE-2016-2554
and
PCRE:
Upgraded bundled PCRE library to 8.38. (CVE-2015-8383, CVE-2015-8386, CVE-2015-8387, CVE-2015-8389, CVE-2015-8390, CVE-2015-8391, CVE-2015-8393, CVE-2015-8394)
see http://php.net/ChangeLog-5.php#5.6.18 for more info.
http://php.net/ChangeLog-5.php#5.5.32
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The lsscsi command lists information about SCSI devices in Linux
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
removed two files as they got accecpted upstream
Update SRC_URI to location where this version exists
Includes security fix CVE-2014-9765
CVE-2014-9765 xdelta: buffer overflow in main_get_appheader
(fixed in 3.0.9 and after)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: /tmp/work/armv5e-poky-linux-gnueabi/krb5/1.12.2-r0/krb5-1.12.2/src/ ('S') doesn't exist, please set 'S' to a proper value
remove extra "/"
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
QA error fix:
ERROR: QA Issue: ntp: Files/directories were installed but not shipped in any package:
/usr/libexec
CVES addressed:
Bug 2948 / CVE-2015-8158
Bug 2945 / CVE-2015-8138: origin: Zero Origin Timestamp Bypass
Bug 2942 / CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode
Bug 2940 / CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list
Bug 2939 / CVE-2015-7977: reslist NULL pointer dereference
Bug 2938 / CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames
Bug 2937 / CVE-2015-7975: nextvar() missing length check
Bug 2936 / CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers
Bug 2935 / CVE-2015-7973: Deja Vu: Replay attack on authenticated broadcast mode
Bug 2947 / CVE-2015-8140: ntpq vulnerable to replay attacks
Bug 2946 / CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin
NTP-4.2.8p5
NtpBug2956: Small-step/Big-step CVE-2015-5300
Bug #2829 Clean up pipe_fds in ntpd.c
Bug #2887 stratum -1 config results as showing value 99.
Bug #2932 Update leapsecond file info in miscopt.html.
Bug #2934 tests/ntpd/t-ntp_scanner.c has a magic constant wired in.
Bug #2944 errno is not preserved properly in ntpdate after sendto call.
Bug #2952 peer associations were broken by the fix for NtpBug2901 CVE-2015-7704
Bug #2954 Version 4.2.8p4 crashes on startup on some OSes.
Bug #2957 'unsigned int' vs 'size_t' format clash.
Bug #2958 ntpq: fatal error messages need a final newline.
Bug #2962 truncation of size_t/ptrdiff_t on 64bit targets.
Bug #2965 Local clock didn't work since 4.2.8p4.
Bug #2967 ntpdate command suffers an assertion failure
Bug #2969 Seg fault from ntpq/mrulist when looking at server with lots of clients.
Bug #2971 ntpq bails on ^C: select fails: Interrupted system call
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Update to a LTS version which might EOL in April 2018
The following security fixes are included;
CVE-2015-8213
CVE-2015-5964
CVE-2015-5963
CVE-2015-5145
CVE-2015-5144
CVE-2015-5143
CVE-2015-3982
CVE-2015-2317
CVE-2015-2316
CVE-2015-2241
LIC_FILES_CHKSUM changed do to:
https://github.com/django/django/commit/1dae4ac1778f04805c0ed62c8debb13b281ba02b
* Removed trailing whitespace.
* Added newline to EOF if missing.
* Removed blank lines at EOF.
* Removed some stray tabs.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
restore PE
updated comments:
QT is the new default GUI for the binary 'wireshark'. This mode is currently disabled in the build. We build with GTK as the default gui so the resulting binary is now wireshark-gtk.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
polkit failed to build do to missing mozjs libs. The libs created are:
libmozjs-..a libmozjs-..so
this was caused by a perl script error
Can't use 'defined(@array)' (Maybe you should just omit the defined()?) at config/milestone.pl line 58.
this script is use to determine the major and minor lib versions. I believe this
issue is do to the recent perl update.
this fixes the lib creation error and polkit build error.
I am not a perl person so this may not be the idea fix.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Acked-By: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
make[3]: *** No rule to make target `Xkl-1.0.typelib', needed by `all-am'. Stop.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: /usr/sbin/mount.unionfs_unionfs-fuse contained in package unionfs-fuse requires /bin/bash, but no providers found in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: /usr/bin/apxs_apache2-dev contained in package apache2-dev requires /usr/bin/perl, but no providers found in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
include a security fixes but no CVE #
The following vulnerabilities have been fixed.
* [1]wnpa-sec-2015-19
WCCP dissector crash. ([2]Bug 11153)
* [3]wnpa-sec-2015-20
GSM DTAP dissector crash. ([4]Bug 11201)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
This includes CVE-2015-4335.
LICENSE checksum changed do to copyright update.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
fixed broken url and cleaned up the PACKAGECONFIG
removed patch as it is included in this release
The following vulnerabilities have been fixed.
* [1]wnpa-sec-2015-12
The LBMR dissector could go into an infinite loop. ([2]Bug 11036)
[3]CVE-2015-3808 [4]CVE-2015-3809
* [5]wnpa-sec-2015-13
The WebSocket dissector could recurse excessively. ([6]Bug 10989)
[7]CVE-2015-3810
* [8]wnpa-sec-2015-14
The WCP dissector could crash while decompressing data. ([9]Bug
10978) [10]CVE-2015-3811
* [11]wnpa-sec-2015-15
The X11 dissector could leak memory. ([12]Bug 11088)
[13]CVE-2015-3812
* [14]wnpa-sec-2015-16
The packet reassembly code could leak memory. ([15]Bug 11129)
[16]CVE-2015-3813
* [17]wnpa-sec-2015-17
The IEEE 802.11 dissector could go into an infinite loop. ([18]Bug
11110) [19]CVE-2015-3814
* [20]wnpa-sec-2015-18
The Android Logcat file parser could crash. Discovered by Hanno
Böck. ([21]Bug 11188) [22]CVE-2015-3815
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
This allow an easier method of getting a XFCE image to demo and use.
V2: allow IMAGE_LINGUAS override
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: /usr/lib/libnet-ssleay-perl/ptest/t/local/38@underscore@priv-key.t_libnet-ssleay-perl-ptest contained in package libnet-ssleay-perl-ptest requires /usr/bin/perl, but no providers found in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
depends on gnome if an image includes packagegroup-xfce-base.
depends on meta-networking if an image includes packagegroup-xfce-base-extended.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
ERROR: Nothing PROVIDES 'libdnet' (but /home/akuster/oss/clean/meta-openembedded/meta-oe/recipes-connectivity/daq/daq_2.0.2.bb DEPENDS on or otherwise requires it). Close matches:
libnet
libnewt
libidn
ERROR: Required build target 'daq' has no buildable providers.
Missing or unbuildable dependency chain was: ['daq', 'libdnet']
world build fails for meta-oe.
move daq to meta-networking where snort and libdnet both reside.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
WARNING: Failed to fetch URL http://www.packagekit.org/releases/PackageKit-0.5.6.tar.gz;name=archive, attempting MIRRORS if available
WARNING: QA Issue: packagekit rdepends on libgudev, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: packagekit requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
packagekit.org is no longer responding, changed SRC_URI
Signed-off-by: Armin Kuster <akuster808@gmail.com>
it seems ftp does not work. changing to http.
WARNING: Failed to fetch URL ftp://ftp.kermitproject.org/kermit/archives/cku302.tar.gz;subdir=ckermit-302, attempting MIRRORS if available
ERROR: Fetcher failure: Fetch command failed with exit code 4, no output
ERROR: Function failed: Fetcher failure for URL: 'ftp://ftp.kermitproject.org/kermit/archives/cku302.tar.gz;subdir=ckermit-302'. Unable to fetch URL from any source.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
ftp server not responding.
WARNING: Failed to fetch URL ftp://invisible-island.net/xterm/xterm-303.tgz, attempting MIRRORS if available
ERROR: Fetcher failure: Fetch command failed with exit code 4, no output
ERROR: Function failed: Fetcher failure for URL: 'ftp://invisible-island.net/xterm/xterm-303.tgz'. Unable to fetch URL from any source.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
WARNING: QA Issue: mosh-server rdepends on libutempter, but it isn't a build dependency? [build-deps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: gammu-dev requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
WARNING: QA Issue: gammu requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
altlinux.org link is dead, update to new git repo
WARNING: Failed to fetch URL ftp://ftp.altlinux.org/pub/people/ldv/utempter/libutempter-1.1.6.tar.bz2, attempting MIRRORS if available
ERROR: Fetcher failure: Fetch command failed with exit code 4, no output
ERROR: Function failed: Fetcher failure for URL: 'ftp://ftp.altlinux.org/pub/people/ldv/utempter/libutempter-1.1.6.tar.bz2'. Unable to fetch URL from any source.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
WARNING: QA Issue: pkcs11-helper rdepends on nspr, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: pkcs11-helper rdepends on nss, but it isn't a build dependency? [build-deps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: wvstreams requires /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: usbpath requires /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: foxtrotgps requires /usr/bin/python, /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WAWARNING: QA Issue: fio rdepends on numactl, but it isn't a build dependency? [build-deps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: qt-creator requires /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: fbida requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: pcsc-lite requires /usr/bin/python, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: rarpd requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: gateone requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: pm-qa requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: lio-utils requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: udisks rdepends on lvm2, but it isn't a build dependency? [build-deps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: hplip-filter requires /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
WARNING: QA Issue: lirc-plugins rdepends on libusb-compat, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: lirc-plugins rdepends on libjack, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: lirc-plugins rdepends on portaudio-v19, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: lirc rdepends on libx11, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: lirc requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
googlecode is shutting down so had to move SRC_URI to github.
changed LIC_FILES_CHKSUM to LICENSE since COPY.TXT has been removed.
updated fixed the following build issue:
| tmp/work/ppc7400-poky-linux/protobuf/2.5.0-r0/protobuf-2.5.0/src/google/protobuf/extension_set.cc:81:3: error: 'GoogleOnceInit' is not a member of 'google::protobuf'
| ::google::protobuf::GoogleOnceInit(®istry_init_, &InitRegistry);
| ^
| tmp/work/ppc7400-poky-linux/protobuf/2.5.0-r0/protobuf-2.5.0/src/google/protobuf/extension_set.cc:81:39: error: 'registry_init_' was not declared in this scope
| ::google::protobuf::GoogleOnceInit(®istry_init_, &InitRegistry);
| ^
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
ERROR: Nothing PROVIDES 'ruby-native' (but /home/akuster/oss/clean/meta-openembedded/meta-oe/recipes-extended/libgxim/libgxim_0.5.0.bb DEPENDS on or otherwise requires it). Close matches:
db-native
bc-native
byacc-native
ERROR: Required build target 'libgxim' has no buildable providers.
Missing or unbuildable dependency chain was: ['libgxim', 'ruby-native']
move libgxim from meta-oe to meta-ruby, it really belongs in meta-gir but it is un-maintained.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
ERROR: Nothing PROVIDES 'libmnl' (but /home/akuster/oss/clean/meta-openembedded/meta-oe/recipes-extended/collectd/collectd_5.4.1.bb DEPENDS on or otherwise requires it). Close matches:
libnl
libyaml
libxml2
ERROR: Required build target 'collectd' has no buildable providers.
Missing or unbuildable dependency chain was: ['collectd', 'libmnl']
remove libmnl from depends list to PACKAGECONFIG libmnl is in meta-networking.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Includes among other things: CVE-2015-1855: Ruby OpenSSL Hostname Verification
for more info see:
http://svn.ruby-lang.org/repos/ruby/tags/v2_2_2/ChangeLog
also, fixed runtime error.
only include "enable-wide-getaddrinfo" if IVP6 is enabled in disto feature
otherwise 'gem install rails' throws an error for the missing symbol 'getipnodebyname'.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
LIC_FILES_CHKSUM changes:
BDSL: update copyright notice with "2013"
GPL: update to GPLv2
LEGAL: added license info for ccan files
dropped patches since they are now incorperated.
several security fixes included:
CVE-2014-2525
CVE-2014-0160
CVE-2014-2734
CVE-2014-8080
CVE-2014-8090
for addional information:
http://svn.ruby-lang.org/repos/ruby/tags/v2_2_1/ChangeLog
Signed-off-by: Armin Kuster <akuster808@gmail.com>
configure: error: Header file pcap.h not found; if you installed libpcap
don't use pcap. Use the internal version.
And minor configure cleanups
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
this moves libcap-ng out of meta-selinux and meta-security into
a common layer
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The following vulnerabilities have been fixed.
* [1]wnpa-sec-2015-01
The WCCP dissector could crash. ([2]Bug 10720, ws-buglink:10806)
CVE-2015-0559, CVE-2015-0560
* [3]wnpa-sec-2015-02
The LPP dissector could crash. ([4]Bug 10773)
CVE-2015-0561
* [5]wnpa-sec-2015-03
The DEC DNA Routing Protocol dissector could crash. ([6]Bug 10724)
CVE-2015-0562
* [7]wnpa-sec-2015-04
The SMTP dissector could crash. ([8]Bug 10823)
CVE-2015-0563
* wnpa-sec-2015-05
Wireshark could crash while decypting TLS/SSL sessions.
Discovered by Noam Rathaus.
CVE-2015-0564
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
dropped proftpd-sftp.patch as it is included in update.
combined make.patch, move-pidfile-to-var-run.patch, move-runfile-to-var-run.patch into
build_fixup
Added several packagesconfig options (too much eggnog)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
please consider this package for meta-perl.
No real need for this to be in meta-security
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
please consider this for meta-perl. I would like to move it from
meta-security to common location. This also updates to latest.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Armin Kuster