aboutsummaryrefslogtreecommitdiffstats
path: root/meta-oe
AgeCommit message (Collapse)Author
2015-04-29gsoap: fold .inc and -native into one recipeMartin Jansa
* use BBCLASSEXTEND instead of separate recipe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-04-29gsoap-native: add missing dependency on flex-nativeMartin Jansa
* otherwise fails with: | gcc -DHAVE_CONFIG_H -I. -I/work/x86_64-linux/gsoap-native/2.8.12-r1/gsoap-2.8/gsoap/src -I../.. -isystem/sysroots/x86_64-linux/usr/include -DWITH_BISON -DWITH_LEX -DSOAPCPP_IMPORT_PATH="\"/sysroots/x86_64-linux/usr/share/gsoap/import\"" -DLINUX -isystem/sysroots/x86_64-linux/usr/include -O2 -pipe -c -o soapcpp2-soapcpp2_yacc.o `test -f 'soapcpp2_yacc.c' || echo '/work/x86_64-linux/gsoap-native/2.8.12-r1/gsoap-2.8/gsoap/src/'`soapcpp2_yacc.c | /bin/bash /work/x86_64-linux/gsoap-native/2.8.12-r1/gsoap-2.8/ylwrap /work/x86_64-linux/gsoap-native/2.8.12-r1/gsoap-2.8/gsoap/src/soapcpp2_lex.l .c soapcpp2_lex.c -- /bin/bash /work/x86_64-linux/gsoap-native/2.8.12-r1/gsoap-2.8/missing flex | /work/x86_64-linux/gsoap-native/2.8.12-r1/gsoap-2.8/missing: line 81: flex: command not found | WARNING: 'flex' is missing on your system. | You should only need it if you modified a '.l' file. | You may want to install the Fast Lexical Analyzer package: | <http://flex.sourceforge.net/> | make[4]: *** [soapcpp2_lex.c] Error 127 | make[4]: Leaving directory `/work/x86_64-linux/gsoap-native/2.8.12-r1/build/gsoap/src' | make[3]: *** [all-recursive] Error 1 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-04-29enca: drop unrecognized --with-libiconv-prefix optionMartin Jansa
* fixes: WARNING: QA Issue: enca: configure was passed unrecognised options: --with-libiconv-prefix [unknown-configure-option] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-04-01python-pyqt : Move RDEPENDS on python-sip to PyQT.Philip Balister
python-sip has the runtime support for PyQT. Also drop the need for anki to RDEPEND on python-sip. Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-26sip: Split python into a new package for runtime support.Philip Balister
The package is named python-sip for backwards compatibility. Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-21xbitmaps: fix build warning.Bian Naimeng
Can't install xbitmaps-dev-1.1.1-r0: no package provides xbitmaps = 1.1.1-r0 Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-21pxaregs: Add source file and fix SRC_URISven Ebenfeld
The old URI is not available anymore. If you visit that website in a browser, you will only see ads. Signed-off-by: Sven Ebenfeld <sven.ebenfeld@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-21claws-mail: Fix SRC_URISven Ebenfeld
Signed-off-by: Sven Ebenfeld <sven.ebenfeld@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-21log4c: fix undeclared dependency on expatAndre McCurdy
The original log4c configure.in is buggy and requires fixing before "configure --with-expat" works as expected. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-21lxdm: RDEPEND on libsvg-gtkDan McGregor
The theme uses svg files. If libsvg-gtk isn't available lxdm still runs, but throws a bunch of pixbuf errors. Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-21tmux: remove sed-native from DEPENDSPaul Eggleton
We rely on the host sed all over the place; we don't need sed-native here just because it's being used in do_configure. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-21samba: add mirrorsAndreas Müller
Samba server is down currently so add mirrors. Both were short tested by wget. Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-16anki: python-sip package replaces with just sip.Philip Balister
The sip package provides python support for the target. Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-16sip: Update to 4.14.2.Philip Balister
The sip configure.py script now has some support for cross compiling. This allowed simplication of the existing OpenEmbedded sip support. The sip recipe now produces support for builds via sip-native and target runtime via sip. This has been build and runtime tested on the zedboard and ettus-e300. Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-16python-pyqt: Update to 4.11.3.Philip Balister
The configure.py script now has support for cross compiling. This simplified the recipe substantially. The recipe was tested with gnuradio-companion on the zedboard and ettus-e300. This is the first time we have been able to use grc with pyqt built with OpenEmbedded. Build tested on armv7, x86, x86_64 and mips. Dropped patches from previous versions. Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-03rsyslog: fix name of syslogd ua groupSteffen Sledz
All the other syslogd implementations use 'syslogd' as update alternatives group name. So rsyslogd should use this too. Signed-off-by: Steffen Sledz <sledz@dresearch-fe.de> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-01-28xmlto: remove recipe as it's in OE coreQi.Chen@windriver.com
Remove xmlto recipe from meta-oe because it's in OE core now. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-28nbench-byte: Fix license QA errorOtavio Salvador
The license is not a common only and seems to be a 'free distribution' license but without explicit rules about modification or similar. Due that, we copied the license text from the README file and added it onto nbench-byte license file. This fixes following QA error: ,---- | WARNING: Recipe nbench-byte, LICENSE (freely distributable) has | invalid format, LICENSES must have operator "([&|() ])" between | them. `---- Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-28iperf: fix out of tree configurationBelal, Awais
The configure step uses a package header to check for support of types/declares, this package header encapsulates all the required system headers for providing the needed resources. When configured from an out of tree directory the package header is not found due to the hard path. We now make the path for package header relative to 'srcdir' so it is found appropriately. Signed-off-by: Awais Belal <awais_belal@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-12php5: update to later minor version 5.4.36Armin Kuster
Dizzy is missing several CVE's and upgrading to a later version within the same series seems reasonable since most changes are bugfixes or Security releated. if you are ok with this approach, please Ack and I will stage this with the next series of updates I am working on. - armin 18-Dec-2014 Core: Upgraded crypt_blowfish to version 1.3. Fixed bug #68545 (NULL pointer dereference in unserialize.c). Fixed bug #68594 (Use after free vulnerability in unserialize()). (CVE-2014-8142) Mcrypt: Fixed possible read after end of buffer and use after free. 13 Nov 2014 Core: Fixed bug #68365 (zend_mm_heap corrupted after memory overflow in zend_hash_copy). Fileinfo: Fixed bug #68283 (fileinfo: out-of-bounds read in elf note headers). (CVE-2014-3710) GMP: Fixed bug #63595 (GMP memory management conflicts with other libraries using GMP). PDO_pgsql: Fixed bug #66584 (Segmentation fault on statement deallocation). 16 Oct 2014 Fileinfo: Fixed bug #66242 (libmagic: don't assume char is signed). Core: Fixed bug #67985 (Incorrect last used array index copied to new array after unset). Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669) cURL: Fixed bug #68089 (NULL byte injection - cURL lib). EXIF: Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670) OpenSSL: Reverted fixes for bug #41631, due to regressions. XMLRPC: Fixed bug #68027 (Global buffer overflow in mkgmtime() function). (CVE-2014-3668) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-12-26mplayer2: cleanup empty directoriesBelal, Awais
The mplayer "make install" phase leaves an empty /usr/lib directory seemingly regardless of the setting of libdir. Remove it to avoid a packaging warning. Signed-off-by: Drew Moseley <drew_moseley@mentor.com> Signed-off-by: Awais Belal <awais_belal@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26mplayer2: use autotools-brokensep (B = S)Belal, Awais
The mplayer2 package does not support out of tree builds and the do_configure step also tries to find the configure script in the same build directory while the script lies in the src directory. This patch updates the builddir to point to the srcdir in order to cope with the above issues. Signed-off-by: Drew Moseley <drew_moseley@mentor.com> Signed-off-by: Awais Belal <awais_belal@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26PNBLACKLIST: use weak assignmentsMartin Jansa
* this makes it easier to unblacklist it from local.conf which is parsed before the recipes Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26rfkill: fix the SRC_URIJackie Huang
It has been changed to: http://www.kernel.org/pub/software/network/rfkill/ Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26enca: fix broken automakeAwais Belal
The added patch fixes the usage of AM_ICONV macro and comes straight from the Buildroot source tree. Signed-off-by: Drew Moseley <drew_moseley@mentor.com> Signed-off-by: Awais Belal <awais_belal@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26obex-data-server: conflict with bluez5Peter Bigot
Although this package builds with bluez5, it was removed from Fedora 20 [1] and is not used in bluez5-based GNOME [2], suggesting the bluez5 obexd is to be used instead. [1] http://pkgs.fedoraproject.org/cgit/obex-data-server.git/log/?h=f20 [2] http://www.hadess.net/2013/11/bluetooth-file-sharing-obexpush-in.html Signed-off-by: Peter A. Bigot <pab@pabigot.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26libhugetlbfs: Fix page size & text offset for arm archesGary S. Robertson
Fixed computation of page size and text segment offset for various arm architectures - including both LE and BE variants of armv7 as well as aarch64 Upstream Status: Accepted at libhugetlbfs project Signed-off-by: Gary S. Robertson <gary.robertson@linaro.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26libhugetlbfs: Make cross-devel recognize all ix86 archesGary S. Robertson
In a non-native cross-development scenario, the Makefile only recognized i386 or x86_64 PC architectures. Extended this to also recognize i486, i586, and i686 Upstream Status: Accepted but not yet applied by libhugetlbfs project Signed-off-by: Gary S. Robertson <gary.robertson@linaro.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26libcanberra: fix installed-vs-shipped warningRobert Yang
When build libcanberra for powerpc64 bsp, it shows warning: WARNING: QA Issue: libcanberra: Files/directories were installed but not shipped /lib /lib/systemd /lib/systemd/system /lib/systemd/system/canberra-system-shutdown.service /lib/systemd/system/canberra-system-shutdown-reboot.service /lib/systemd/system/canberra-system-bootup.service [installed-vs-shipped] Update FILES_${PN}-systemd to fix it. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26xserver-common: disable TCP connectionsJavier Viguera
For security reasons disable TCP connections to the xserver. Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26iotop: Drop python-distutils from RDEPENDSMartin Jansa
* nothing in iotop is using that for normal function Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26lvm2: add lvm.con to CONFFILESLiu Jian
* Files will be over written when updating using rpm. * If there is no %config micro before the file in the spec file, this file will be over-written after updating this package using rpm. This will make our settings lost. Signed-off-by: Jian Liu <jian.liu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26hostapd: several fixes for init scriptJackie Huang
* restart: The stop may delay a few seconds according to different wireless devices, on debian/ubuntu, the init script directly sleep 8 seconds to wait the stop complete, here we add a delay function (sleep in a loop) to ensure the stop is completed before start. * add status command. * add --oknodo for stop so it will not break restart if there is no running process. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26glibmm: add perl to RDEPENDS_{PN}-devAndreas Müller
QA Issue: glibmm-dev requires /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26rrdtool: add missing dependency on groff-nativeJackie Huang
rrdtool needs groff-native to format the documentation. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26rrdtool: inherit cpan-base to help build perl modulesJackie Huang
It's incorrect to use -I for nativeperl to specify @INC/#include directory to target build perl, which cause error like: | temp/do_configure/run.do_configure.20749: line 112: 20256 Illegal instruction (core dumped) | perl -I/path/to/tmp/sysroots/intel-haswell-64/usr/lib64/perl/$perl_version Makefile.PL Inherit cpan-base and set related env vars to fix this and avoid using sed to hack Makefile when build perl modules. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26dfu-util: Point to gitorious.org repository as gnumonks.org is downChris Morgan
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Chris Morgan <chmorgan@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26samba: fix error messages when startup samba serviceChong.Lu@windriver.com
This solves the following error messages when startup samba: Unable to open new log file '/var/log/samba/log.smbd': No such file or directory Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26samba: add winbind.service to winbind packageChong.Lu@windriver.com
This solves the following warning: lib32-samba-3.6.24: lib32-samba: Files/directories were installed but not shipped /lib/systemd/system/winbind.service [installed-vs-shipped] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26imagemagick: update URI to allow fetching current and previous releasesPeter Bigot
The only version available at the original URI is patch 9. All releases are available at the /releases sub-path. Signed-off-by: Peter A. Bigot <pab@pabigot.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01krb5: fix CVE-2014-5351Wenzong Fan
The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authentic- ated users to forge tickets by leveraging administrative access. This back-ported patch fixes CVE-2014-5351. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01syslog-ng: Fix memory leak when udp connection is used [ LIN7-1379 ]Xufeng Zhang
When udp connection is used, there are several memory leaks happen after run a long time. Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com> Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01libyaml: add fix for CVE-2014-2525 Security AdvisoryKang Kai
Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2525 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01postgresql: add fix for CVE-2014-0065 and CVE-2014-0066 Security AdvisoryKang Kai
Coverity identified a number of places in which it couldn't prove that a string being copied into a fixed-size buffer would fit. We believe that most, perhaps all of these are in fact safe, or are copying data that is coming from a trusted source so that any overrun is not really a security issue. Nonetheless it seems prudent to forestall any risk by using strlcpy() and similar functions. Fixes by Peter Eisentraut and Jozef Mlich based on Coverity reports. In addition, fix a potential null-pointer-dereference crash in contrib/chkpass. The crypt(3) function is defined to return NULL on failure, but chkpass.c didn't check for that before using the result. The main practical case in which this could be an issue is if libc is configured to refuse to execute unapproved hashing algorithms (e.g., "FIPS mode"). This ideally should've been a separate commit, but since it touches code adjacent to one of the buffer overrun changes, I included it in this commit to avoid last-minute merge issues. This issue was reported by Honza Horak. Security: CVE-2014-0065 for buffer overruns, CVE-2014-0066 for crypt() https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0065 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0066 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01postgresql: add fix for CVE-2014-0067 Security AdvisoryKang Kai
The make check command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0067 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01postgresql: add fix for CVE-2014-0063 Security AdvisoryKang Kai
Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0063 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01postgresql: add fix for CVE-2014-0062 Security AdvisoryKang Kai
Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allows remote authenticated users to create an unauthorized index or read portions of unauthorized tables by creating or deleting a table with the same name during the timing window. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0062 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01postgresql: add fix for CVE-2014-0061 Security AdvisoryKang Kai
The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0061 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01postgresql: add fix for CVE-2014-0060 Security AdvisoryKang Kai
PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly enforce the ADMIN OPTION restriction, which allows remote authenticated members of a role to add or remove arbitrary users to that role by calling the SET ROLE command before the associated GRANT command. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0060 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01postgresql: add fix for CVE-2014-0064 Security AdvisoryKang Kai
Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, which trigger a buffer overflow. NOTE: this identifier has been SPLIT due to different affected versions; use CVE-2014-2669 for the hstore vector. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0064 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-04 16:06:37 +0000