summaryrefslogtreecommitdiffstats
path: root/meta
AgeCommit message (Collapse)Author
2016-02-19ruby: break out ri-docs and rdoc into separate packagesIoan-Adrian Ratiu
The ri (Ruby Interactive) documentation for the Ruby standard library consumes a significant amount of space on disk. It is useful to developers, but is usually not necessary for users who just want to run applications written in Ruby. Break it out into a separate package so Ruby can be installed without it. Also break out the rdoc documentation generator in its own package. (From OE-Core rev: adc53d40932151b4822ce2ac74cb31306684ba95) Signed-off-by: Ben Shelton <ben.shelton@ni.com> Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19insane.bbclass: print more info for build-deps and file-rdepsRobert Yang
This is useful for oe newbie: * build-deps: print recipe name, and suggest fixing from DEPENDS or PACKAGECONFIG, for example: WARNING: QA Issue: patch rdepends on libattr, but it isn't a build dependency, missing attr in DEPENDS or PACKAGECONFIG? [build-deps] * file-rdeps: print RDEPENDS_pkg rather than RDEPENDS, for example: WARNING: QA Issue: /sbin/osd_login contained in package nfs-utils requires /bin/bash, but no providers found in RDEPENDS_nfs-utils? [file-rdeps] Fix a bug in file-rdeps, there was "@underscore@" in file-rdeps: WARNING: QA Issue: /sbin/osd@underscore@login_nfs-utils contained in [snip] [YOCTO #8922] [YOCTO #8847] (From OE-Core rev: f8754281451bbb64c3d26bbdbf1e596271534469) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19curl: re-enable proxy support by defaultAndre McCurdy
Proxy support is a feature, so should not have been disabled in the previous commit (which disabled support for legacy protocols): http://git.openembedded.org/openembedded-core/commit/?id=b26634900d487a22eef41e9e077d35fb347d4c29 (From OE-Core rev: dfb0064fb16eba1446b8f3db13e0b8b3b4764481) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19libtool: Don't hardcode grep pathsRichard Purdie
If sharing sstate between different distros, some of which have /bin/grep and some /usr/bin/grep, this can break. Simply don't hardcode the path. (From OE-Core rev: f6e7a3b1ac75c274493666b9a31cca83b7d2138b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19cml1.bbclass: fix do_menuconfigMarkus Lehtonen
The functionality got broken after bitbake commit 8bf33a8e92c0e188fa392030025756196c96fcbb which disabled the (bitbake) variable expansion inside python functions. (From OE-Core rev: 51c6ea30060eeddf93e4255cbd3847fc6aedaf9f) Signed-off-by: Markus Lehtonen <markus.lehtonen@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19cups: upgrade to 2.1.3Chen Qi
(From OE-Core rev: e6cd13770b19e221cfd5d66fe36138f6e1de0158) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19coreutils: upgrade to 8.25Chen Qi
(From OE-Core rev: 086d59455a7c273f7eccf442067df3c538f43c05) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19findutils: upgrade to 4.5.19Chen Qi
(From OE-Core rev: 4ec00dbb121cb06d365a6536229fc5819d671228) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19diffstat: upgrade to 1.61Chen Qi
(From OE-Core rev: 89e63d7feb4b7e12d017d650420fad02b913920c) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-19grep: upgrade to 2.23Chen Qi
(From OE-Core rev: ee3db91738e2d98b18a6426944fd70946e002a94) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18pulseaudio: 6.0 -> 8.0Tanu Kaskinen
Release notes for 7.0: https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/7.0/ Release notes for 8.0: https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/ 7.0 added support for soxr resamplers, but neither oe-core nor meta-oe have libsoxr packaged. The default resampler is still speexdsp based, so most people wouldn't be using the soxr resamplers anyway. If someone cares enough to package soxr, then we can enable the feature. Bash completions moved in 7.0 from /etc to the standard location under /usr/share/bash-completion. We now use the bash-completion class to package the completion files. The private library libpulsecore moved from /usr/lib to /usr/lib/pulseaudio. The new routing features advertised in the 8.0 release notes are reverted for now, because they caused regressions. I'll remove the revert once a proper fix is available. Removed two patches, because they are included in the new release. Rebased three patches. Updated Upstream-Status tags to reflect the current situation. (From OE-Core rev: 10351d2e7ab27d0f0311c491b70d0f0056a8f76b) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18alsa-plugins: 1.0.29 -> 1.1.0Tanu Kaskinen
Changelog: http://alsa-project.org/main/index.php/Changes_v1.0.29_v1.1.0 The licensing of the libsamplerate plugin was relaxed a bit: if the licensee has a commercial license for libsamplerate, the plugin can be used under the terms of LGPL instead of GPL. Both old patches are included in the new release, so dropped them. Added a new patch to fix building against libspeexdsp 1.2rc3. (From OE-Core rev: 2106108f83001cadc0188612b3e51de0c678d3c0) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18alsa-utils: 1.0.29 -> 1.1.0Tanu Kaskinen
Changelog: http://alsa-project.org/main/index.php/Changes_v1.0.29_v1.1.0 This release introduces two new tools: - alsatplg for converting topology data from text representation to a binary format consumed by the kernel - alsabat; "bat" stands for "basic audio tester" Backported a patch from upstream that renames bat to alsabat. Rebased patch "0001-alsactl-don-t-let-systemd-unit-restore-the-volume-wh.patch". Dropped patches "alsa-utils-aplay-interrupt-signal-handling.patch" and "assume-storing-is-success-if-not-sound-card-device.patch", because the issues have been fixed upstream. (From OE-Core rev: 0b10c468cee39520bb8f7330222fb177ceff249d) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18alsa-tools: 1.0.29 -> 1.1.0Tanu Kaskinen
Changelog: http://alsa-project.org/main/index.php/Changes_v1.0.29_v1.1.0 There are almost no changes in the new version: just one invalid macro was removed from the cspctl man page. Rebased patches "autotools.patch" and "makefile_no_gtk.patch". (From OE-Core rev: b072baa03ec7e41bc4f9a05702c1b65150ebff49) Signed-off-by: Tanu Kaskinen <tanuk@iki.fi> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18avahi: update to version 0.6.32Maxin B. John
0.6.31 -> 0.6.32 a. Switched to the new repository hosted in github. b. Removed the following Upstreamed/Backported patches 1. 0001-Don-t-log-warnings-about-invalid-packets-Fixes-lathi.patch 2. 0001-avahi-fix-avahi-status-command-error-prompt.patch 3. avahi_fix_install_issue.patch 4. fix_for_automake_1.12.x.patch 5. out-of-tree.patch 6. reuseport-check.patch c. Added UPSTREAM_CHECK_URI [YOCTO #7553] (From OE-Core rev: 5ba7df63c4f0ac56f8513f9aecdbf3b12a121cd1) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18no-static-libs.inc: Add libcap-nativeRichard Purdie
We need to disable static flags for libcap-native as well. (From OE-Core rev: b1fa25a238d118f433759102b13896094394ceeb) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18libsdl2: Fix build with static libraries disabledRichard Purdie
libsdl2 was using foo.o in Makefile dependencies but if libtool is being used then those are the statically linked intermediate files. When static libraries are globally disabled they won't be generated by libtool so the build fails. Instead, use the libtool intermediate wrapper .lo files so the build succeeds. (From OE-Core rev: 3f935a6e9155e81165e26e94fd6c8504b272441e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18uboot-inc: Backport patch to fix Beaglebone Black bootloaderErkka Kääriä
Beaglebone Black boot started failing after upstream patch 755324c432f, and was fixed in 7205442e6. Unfortunately, the u-boot upgrade from 2015.10 to 2016.01 only includes the former patch. The latter patch is backported to fix this. (From OE-Core rev: 68d02c54342c8146ec89dfeadedd733cb59fc7d8) Signed-off-by: Erkka Kääriä <erkka.kaaria@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18busybox: drop patches that are not valid anymoreMaxin B. John
1. Removed following patches a) busybox-appletlib-dependency.patch - Kbuild rules handles that dependency b) get_header_tar.patch - tar applet uses a different code path to handle that scenario now. 2. Updated the upstream-status of fail_on_no_media.patch as Denied. (From OE-Core rev: 48f5c2962a4121ba6172b535c90eaa16e8afa538) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18pcmciautils: Update SRC_URIRichard Purdie
Switch to use KERNELORG_MIRROR. Use .xz tarball instead of bz2 as not all kernel mirrors carry .bz2 now. This resolves various checkuri issues on the autobuilder infrastructure. (From OE-Core rev: b2725bf1b2dbe69617801850659fcae7be0587b5) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18debianutils: Upgrade 4.5.1 -> 4.7Richard Purdie
Tarball now uses the standard ${BPN}-${PV} so drop custom S setting. (From OE-Core rev: 4c05c5e2d9fce43b815a8fd6a8bb256d94e54732) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18busybox: Add musl config for _git recipeMaxin B. John
busybox_git recipe also requires musl specific configuration (From OE-Core rev: 2f551835cb9414597eed1f1ae94632aa516488f9) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18debianutils: Fix SRC_URI to use debian snapshotRichard Purdie
This allows checkuri to pass since the old version is no longer in the debian pool. (From OE-Core rev: 96bc993b15cf2329c440b0af10a0c92609b448d5) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18nfs-utils: bugfix: adjust name of statd service unitUlrich Ölmann
Upstream nfs-utils use 'rpc-statd.service' and Yocto introduced 'nfs-statd.service' instead but forgot to update the mount.nfs helper 'start-statd' accordingly. (From OE-Core rev: cda5b219d62fece0e67ee766290e73a6636bd652) Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18musl: Upgrade to 1.1.13+Khem Raj
Rich Felker (3): fix assumption in fputs that fwrite returning 0 implies an error fix unlikely corner cases in getopt's message printing in crypt-sha*, reject excessive rounds as error rather than clamping (From OE-Core rev: d22e9cd34c714a6946ef194e36b61d352b26e326) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18dpkg: Update to 1.18.4Marek Vasut
Update dpkg version to 1.18.4 . This adds nios2 architecture support among other fixes. One patch was updated so it would apply to 1.18.4. (From OE-Core rev: 27b265641d5c13040268ac70b70bfe84fb092763) Signed-off-by: Marek Vasut <marex@denx.de> Cc: Alexander Kanavin <alexander.kanavin@linux.intel.com> Cc: Richard Purdie <richard.purdie@linuxfoundation.org> Cc: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18glew: upgrade to 1.13.0.Ross Burton
(From OE-Core rev: b15496ac48748f50a258720c2f35e985faee39e9) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18glew: rewrite to use upstream build systemRoss Burton
Instead of patching in a whole new build system using autotools, use the makefile-based system in upstream with careful variable assignments so that it cross-compiles correctly. One small patch was required to stop an unavoidable strip. Upstream does have a cmake-based build but it's not used or supported by the maintainer, and is quite buggy (for example: doesn't version the libraries, fails to link to required libraries). (From OE-Core rev: c77d0dfa18b2467f8856571837e7007f8fcd9b20) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18socat: Fix build with muslKhem Raj
NETDB_INTERNAL is a glibc define (From OE-Core rev: eb513884519804b3b8d600eeb7aadf3ec54e0345) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18binutils: Fix useless rpaths QA warningKhem Raj
elfedit and readelf contains /usr/lib in elf header this patch deletes them from binaries, ideally it should be fixed in libtool and Makery of binutils mips target binutils dont build gold so remove them from ALTERNATIVES list depend on own version of chrpath native, so builds on build OS like Centos can work, the verison of chrpath on centos is old enough to not support dealing with multi-arch ELF files. (From OE-Core rev: 9043202f4e705932a3847f2f7635fca06fe5a916) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18image/populate_sdk: seprate variables to fix dependencyChen Qi
Previously, do_rootfs depends on variables like SDK_OS, SDK_OUTPUT, etc. And changing variables like POPULATE_SDK_POST_HOST_COMMAND doesn't cause do_populate_sdk to rerun. This patch separates variables so that do_rootfs and do_populate_sdk could correctly depend on their related variables. [YOCTO #8670] (From OE-Core rev: 590cf4be70f1355622d3a94d76b4cc6d525d4a34) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18gcc: Backport nios2 r31 fixMarek Vasut
Backport a fix from GCC mainline, which fixes libpcre 8.38 and expat 2.1.0 build on nios2. The example of the fixed error follows: | ./nios2-poky-linux-libtool --silent --mode=compile nios2-poky-linux-gcc -mel -mhw-div -mhw-mul --sysroot=/mnt/work/Yocto/build-nios2/tmp/sysroots/10m50 -I../expat-2.1.0/lib -I. -O2 -pipe -g -feliminate-unused-debug-types -Wall -Wmissing-prototypes -Wstrict-prototypes -fexceptions -DHAVE_EXPAT_CONFIG_H -o lib/xmltok.lo -c ../expat-2.1.0/lib/xmltok.c | {standard input}: Assembler messages: | {standard input}:4988: Error: r31 cannot be used with jmp; use ret instead | {standard input}:9703: Error: r31 cannot be used with jmp; use ret instead | {standard input}:20068: Error: r31 cannot be used with jmp; use ret instead | {standard input}:24020: Error: r31 cannot be used with jmp; use ret instead | Makefile:196: recipe for target 'lib/xmltok.lo' failed | make: *** [lib/xmltok.lo] Error 1 | WARNING: exit code 1 from a shell command. (From OE-Core rev: 24b0f08ae4fbaf285d494ab53a3b168a6dd17b20) Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18sqlite3: update 3.10.2 -> 3.11.0Andre McCurdy
http://www.sqlite.org/releaselog/3_11_0.html (From OE-Core rev: f92465c02ea6aef59f5e65a9eb70ebc6a5c92617) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18insane: wrap autotools checks in inherits_class(autotools) checksRoss Burton
There's no point doing the autotools sanity checks if a recipe didn't inherit autotools, so check the inherits before doing the checks. Also pass -F (fixed strings) and -q (quiet) to grep. (From OE-Core rev: 75ae572427d9cd3f0b3e9e7d4d0e7a93a4f04690) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18cmake: don't inherit autotoolsRoss Burton
autotools was inherited for some functions some time ago, but now all it's using it for explicitly is autotools_do_install(), which is basically just "make install". Invoke that directly and we can remove the inherit autotools. (From OE-Core rev: 1cbc0400621c23243d96dedf4a226a732f5c87c9) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18oeqa/selftest/bbtests: Test bitbake --setscene-only optionDaniel Istrate
Bitbake option to restore from sstate only within a build (i.e. execute no real tasks, only setscene) fix for [YOCTO #8876] (From OE-Core rev: 3821aee0129b87a859b3a540b82745fdae184721) Signed-off-by: Daniel Istrate <daniel.alexandrux.istrate@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18glew: don't put our CFLAGS into the pkgconfig fileRoss Burton
The pkgconfig file doesn't need to know what CFLAGS we're using to build with. (From OE-Core rev: 50e14c5db88bd523b8b4112476d88b230811393d) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18dbus: update large file patchRoss Burton
Upstream has accepted this patch, so update the header and revise the patch to reflect the form that was merged. (From OE-Core rev: 17cdfcb742f989af9af821d4a4517e7068ae5ad9) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18coreutils: fix problem with acl for 6.9 versionChen Qi
If 'acl' is not in DISTRO_FEATURES, building coreutils 6.9 would sometimes fail. The problem could be reproduced by executing the following command. `bitbake acl && bitbake coreutils -c configure && bitbake acl -c cleansstate && bitbake coreutils -c compile' Fix this problem by setting the correct value for the 'acl' PACKAGECONFIG. [YOCTO #8906] (From OE-Core rev: a9004ff3f8de83d22d9159a9f103e2773e927a0b) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18gcc-4.9/5.3: Ignore -fdebug-prefix-map in producer stringHongxu Jia
Backport from upstream master. The discussion detail: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69821 Compile without this fix: objdump -g packages-split/lib32-glibc-dev/usr/lib/gcrt1.o ... | <5f> DW_AT_producer : (indirect string, offset: 0x1b): GNU C99 5.3.0 -m32-march=core2 -mtune=core2 -msse3 -mfpmath=sse -mpreferred-stack-boundary=4 -g -O2 -std=gnu99 -fgnu89-inline -fdebug-prefix-map=/buildarea/raid0/hjia/buil d-20160127-yocto-buildpath-2/tmp/sysroots/lib32-qemux86-64= -feliminate-unused-debug-types -fmerge-all-constants -frounding-math -ftls-model=initial-exec ... Compile with this fix: objdump -g packages-split/lib32-glibc-dev/usr/lib/gcrt1.o ... | <5f> DW_AT_producer : (indirect string, offset: 0xa1): GNU C99 5.3.0 -m32 -march=core2 -mtune=core2 -msse3 -mfpmath=sse -mpreferred-stack-boundary=4 -g -O2 -std=gnu99 -fgnu89-inline -feliminate-unused-debug-types -fmerge-all-constants -frounding-math -ftls-model=initial-exec ... [YOCTO #7058] (From OE-Core rev: a0d444a2e3e1b6b095f30b7fe1c9cfd8bce5a845) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18bitbake.conf: use target path as compile dir in debugging infoHongxu Jia
In debugging information, it uses target paths rather than build ones as compile dir. ... -fdebug-prefix-map=old=new When compiling files in directory old, record debugging information describing them as in new instead. ... Compile without this fix: objdump -g git/test.o ... The Directory Table (offset 0x1b): | 1 /buildarea/raid0/hjia/build-20160119-yocto-buildpath/tmp/sysroots/x86_64-linux/usr/lib/ i686-pokymllib32-linux.lib32-gcc-cross-initial-i686/gcc/i686-pokymllib32-linux/5.3.0/include | 2 /buildarea/raid0/hjia/build-20160119-yocto-buildpath/tmp/sysroots/lib32-qemux86-64/usr/include/bits | 3 /buildarea/raid0/hjia/build-20160119-yocto-buildpath/tmp/sysroots/lib32-qemux86-64/usr/include ... Compile with this fix: objdump -g git/test.o ... The Directory Table (offset 0x1b): | 1 /usr/lib/i686-pokymllib32-linux.lib32-gcc-cross-initial-i686/gcc/i686-pokymllib32-linux/ 5.3.0/include | 2 /usr/include/bits | 3 /usr/include ... [YOCTO #7058] (From OE-Core rev: 0fe42caad8f7c142741a28b09458f4e2fdf289ff) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18glibc: Security fix CVE-2015-7547Armin Kuster
CVE-2015-7547: getaddrinfo() stack-based buffer overflow (From OE-Core rev: 3f454361fc323119c2850aeb239171e40d085161) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18glibc: CVE-2015-8776Armin Kuster
it was found that out-of-range time values passed to the strftime function may cause it to crash, leading to a denial of service, or potentially disclosure information. (From OE-Core rev: cf747f0bbcd53af41a7f3981ac65c2b6b6e668f8) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18glibc: CVE-2015-9761Armin Kuster
A stack overflow vulnerability was found in nan* functions that could cause applications which process long strings with the nan function to crash or, potentially, execute arbitrary code. (From OE-Core rev: 2859c809ac59789d0e631b5386bdf78a5d5c4f4c) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18glibc: CVE-2015-8779Armin Kuster
A stack overflow vulnerability in the catopen function was found, causing applications which pass long strings to the catopen function to crash or, potentially execute arbitrary code. (From OE-Core rev: e0f71f123147bf4f48cc90c7f26a50164ed4115e) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18glibc: CVE-2015-8777.patchArmin Kuster
The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable. (From OE-Core rev: bc51411d2edda908cbef733066d78a986dfec0c0) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-16oeqa/parselogs: Whitelist dmi firmware failure message in 4.4 kernelsRichard Purdie
(From OE-Core rev: 31af4a37c429bb1db8bfc64242b2963220f9a0e1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-16rng-tools: Fix underquoted m4 and libgcrypt floating dependencyRichard Purdie
The underquoted m4 caused build failures if libgcrypt wasn't present. The floating dependency on libgcrypt was just plain incorrect, particularly given the incorrect libgcrypt RDEPENDS. Change to use PACKAGECONFIG an default to on. (From OE-Core rev: 17b3044d7508a921916da4979ff8bfbab1e206ce) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-16lib/qa.py: raise ValueError if file isn't an ELFRoss Burton
Instead of raising a generic Exception that can't be handled specifically, raise a ValueError. Also update the callers so any unexpected exceptions are not ignored. Also, rename isBigEngian() to isBigEndian(). (From OE-Core rev: c136652f9c0b35aafa393e63567daf029ae03929) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-16lib/oe/qa: ELFFile: check that a path is a file before opening itRoss Burton
When opening an ELF file check that a filename points to a normal file before attempting to open it, as if the file turns out to be something more exotic like a FIFO it could hang forever. (From OE-Core rev: 4b3576bc30d8f8cdcde25189def8b059fc92b27c) (From OE-Core rev: d3af2058e2753516b9aaf7f6d71162363eea11d4) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>