Wenzong Fan f4ed56d0d4 krb5: fix CVE-2015-2698 ...

The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c
in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly
accesses a certain pointer, which allows remote authenticated users
to cause a denial of service (memory corruption) or possibly have
unspecified other impact by interacting with an application that calls
the gss_export_sec_context function. NOTE: this vulnerability exists
because of an incorrect fix for CVE-2015-2696.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>

2015-12-18 12:28:24 +01:00

..

bluez

bluez4: Allow systemd to activate bluetooth

2015-08-18 11:38:04 +02:00

gammu

gammu: add missing dependency on libgudev

2015-11-16 21:50:07 +01:00

gnokii

gnokii: refine selector for bluez4 package config

2015-02-12 19:35:40 +01:00

gnuradio/gnuradio

…

hostapd

hostapd: Drop DEFAULT_PREFERRENCE setting

2015-08-18 11:52:30 +02:00

irssi

irssi: add --with-ncurses option

2014-07-15 15:02:28 +02:00

krb5

krb5: fix CVE-2015-2698

2015-12-18 12:28:24 +01:00

libimobiledevice

libimobiledevice: fix gcc 5 link failure

2015-10-13 12:28:16 +02:00

libmbim

libmbim: replace udev by libgudev in DEPENDS

2015-09-23 15:39:43 +02:00

libmtp

meta-oe: fix the install dir for udev rules and files

2015-06-23 12:40:10 +02:00

libndp

libndp: initial add 1.5

2015-07-16 21:09:03 +02:00

libnet

…

libqmi

libqmi: initial add 1.12.2

2015-02-19 10:09:57 +01:00

libtorrent

meta-oe: use BPN in SRC_URI

2014-07-15 14:56:55 +02:00

linuxptp

linuxptp: Use environment compiler settings

2014-07-15 15:02:28 +02:00

lirc

lirc: use weak assignment in PACKAGECONFIG like other recipes

2015-10-23 12:53:23 +02:00

loudmouth

gnome: add explicit bz2 compress type to older packages

2015-08-31 19:17:08 +02:00

modemmanager

modemmanager: Start always

2015-12-18 12:28:22 +01:00

mosh

gegl, crash, libsecret, mpg123, tinymembench, gammu, mosh, llvm3.3, breakpad, php, mozjs, libopus: disable thumb where it fails for qemuarm

2015-07-16 21:09:05 +02:00

networkmanager

networkmanager: add openvpn plugin

2015-12-18 12:28:23 +01:00

obex

obex, gnome-bluetooth: Make bluez{4, 5} dep conditional on DISTRO_FEATURE

2015-05-17 09:46:28 +02:00

obexftp

*obex*, navit, libsyncml, foxtrotgps, gypsy, bluez-hcidump, bluez4, gst-plugin-bluetooth, gnome-bluetooth: blacklist bluez4 only recipes when bluez5 is in DISTRO_FEATURES

2015-05-11 10:27:28 +02:00

phonet-utils

…

rabbitmq-c

rabbitmq-c: update to v0.7.0.

2015-07-16 21:09:06 +02:00

rfkill

rfkill: update to 0.5

2015-01-08 11:58:43 +01:00

rtorrent

rtorrent: add ncurses dependency

2014-07-22 00:01:58 +02:00

ser2net

ser2net: change file used in LIC_FILES_CHKSUM

2014-07-22 00:01:59 +02:00

smstools3

smstools: fix makefile override

2015-05-28 10:35:17 +02:00

soft66

soft66: Fix license format QA error

2014-12-31 16:32:30 +01:00

telepathy

telepathy-mission-control: add (moved from oe-core)

2015-01-05 13:04:50 +01:00

umip

umip: add new recipe

2014-11-28 13:41:01 +01:00

usbmuxd

…

wvdial

wvstreams: Fix QA warnings

2015-05-11 10:57:11 +02:00

zabbix

zabbix: set MACHINE_ARCH, because it depends on MACHINE specific KERNEL_VERSION

2015-11-16 21:50:08 +01:00

zeroc-ice

PNBLACKLIST: use weak assignments

2014-12-17 12:55:40 +01:00

zeromq

cppzmq: Bump rev.

2015-08-31 19:51:38 +02:00