Age | Commit message (Collapse) | Author |
|
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Fixes hybrid systemd/sysvinit setups.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
This gets masked automatically by samba.service if systemd is running.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
This includes samba.service, which other major distributions install, too.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
EXTRA_OECONF includes --with-pammodulesdir=${base_libdir}/security
when pam is enabled.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
systemd.bbclass takes care of deleting unused startup scripts.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
There's no need to create multiple packages.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Split libraries and plugins into their own packages. Create packages
for admin-server, kdc, user and examples. Remove some unneeded binaries.
Enable daemons on boot.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Fix description, use packageconfig, use packagesplitfuncs.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Since libcdio 0.90, libcdio-paranoia is a separate project.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e5d586750e05878683926d039c9e66ca33505386)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Thanks Koen for this fix.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 54edcc5700964eaa5c080daebbcc78ca30d7af93)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit bd28b29d9fb48ae50fd63fe9707cbf7cdefca7bf)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 610e0942289e99cbe2739ac956b9923cf55ab535)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Keep it disabled by default, makes builds more
deterministic
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit eb45dac03da296beffbba30991a7077a73220300)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Upgrade 17.x to latest on master
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 99fce36cad8510911b8d72d27f03c381c9966c6b)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
remove obsoleted xbmc recipes
rename to recipes-mediacenter
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ab4369c5841e7f87bdc52aa8a67363c4e6524211)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Consider vc4 options on raspberryPi class of
devices
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 67485ec597b99f169bf1e8be958760102a2c3b8f)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Depends on p8platform therefore add recipe for
p8platform
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 35f77c6250d1123e4af3ac01a539477163c89bdf)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Transport from meta-dominion, to support
new kodi mediacenter
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 7f27b88ed6ab5a853227b9a68107cc5bfe92f426)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
* fix CVEs: CVE-2015-8629, CVE-2015-8630, CVE-2015-8631
* update LIC_FILES_CHKSUM, only Copyright changed in NOTICE file:
-Copyright (C) 1985-2015 by the Massachusetts Institute of Technology.
+Copyright (C) 1985-2016 by the Massachusetts Institute of Technology.
* remove useless functions: krb5_do_unpack(), do_unpack()
* remove patches that included by new release:
- 0001-Work-around-uninitialized-warning-in-cc_kcm.c.patch
- Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
- Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
- Fix-build_principal-memory-bug-CVE-2015-2697.patch
- Fix-IAKERB-context-export-import-CVE-2015-2698.patch
- krb5-CVE-2016-3119.patch
- krb5-CVE-2016-3120.patch
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 2ed5ad2e40ea29b549c1d39aad70e2e4f7d57b28)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Use this workaround as long as there is no better (upstream) fix
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit b60c60806e57f69233db582ef88d113867c2ecd1)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
* Use =+ to replace the previous += to let samba-pidl
do package before samba to guarantee the file /usr/bin/pidl
packaged in samba-pidl as both samba and samba-pidl have
rules to package /usr/bin/pidl and the command pidl depends
on perl modules such as Parse/Pidl.pm resides in samba-pidl
Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit b4b6465fe3409c17de25f144a6240eaf74f32a5f)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
This is CVE-2016-3120
The validate_as_request function in kdc_util.c in the Key Distribution
Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before
1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect
client data structure, which allows remote authenticated users to cause
a denial of service (NULL pointer dereference and daemon crash) via an
S4U2Self request.
Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 19dc7117fd0e95d1477eb5797fbe2a3cca8f7760)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
This commit also change RDEPENDS code style and add python-urllib3
as runtime dependence.
Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 26b10138433e5d35f19680f6cdf515736936a179)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit ed70cd5761cf531fb5d71b02e901c43ff2a1aed2)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 97691e5ace620a27685ba5e06964503da7bf2915)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 06b06a35dca041bfe7e5cf5d24efd3d6974a6853)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
* Bug fix release
* Update RDEPENDS
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 0ebc75611c1ac04c3f03abf755db456a437b91c2)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
* This is a security release in order to address the following defect:
- CVE-2016-2119 (Client side SMB2/3 required signing can be downgraded)
* Detail release note:
- https://www.samba.org/samba/history/samba-4.4.5.html
* Removed part of the 10-use-only-libsystemd.patch
which has been fixed in new version.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 35326fa74dee53ffa4bd454e5fc95fdcbf0d5da6)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Fixed do_package error:
WARNING: samba-4.4.2-r0 do_package: FILES contains file '/var/log/samba' which resides under a directory symlink. Please fix the recipe and use the real path for the file.
ERROR: samba-4.4.2-r0 do_package: File './var/log/samba' cannot be packaged into 'samba-base' because its parent directory structure does not exist. One of its parent directories is a symlink whose target directory is not included in the package.
ERROR: samba-4.4.2-r0 do_package: Function failed: populate_packages
It has a file ${sysconfdir}/tmpfiles.d/samba.conf which will create
/var/log/samba when systemd, and volatiles.03_samba when sysvinit.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 74d994ed27e53370101a3a44f25cd07327d774ad)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
inherit update-rc.d to manage init script, so we
can avoid duplicating the update-rc.d commands,
and the default behavior can be easily overridden
by distro.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 32a6fd48ab781c15c37551f4e8ed6721ca5cb87b)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
This patch was disappeared while moved to 4.4.2
Signed-off-by: Gyorgy Szombathelyi <gyurco@freemail.hu>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit b6e805c83eb5dd27729959443abdc5191cb2c74c)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit c29c8e3a8f8746b2061e3c532f13ae99c55fb42a)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Change from distutils to setuptools.
simplejson's setup.py is written to import setup, Extension, Command
from setuptools and fallback to distutils if the import fails. Prior to
this change files were being installed to a host polluted path
/usr/lib/python2.7/site-packages/simplejson-3.8.2-py2.7-linux-x86_64.egg
(even on ARM targets). python was unable to import simplejson. Switching
to setuptools corrects the problem.
Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit c2c895ec5496ab5813d20a4d011ecdc73e46b256)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
Update license checksum and verify it is still Apache 2.0
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 5e5e66d6cd26761a33cbe553af892b8f83ccc3bc)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
|
|
This allow the fetching of packages in a backward compatible way[1],
using un-hashed packages.
1. https://bitbucket.org/pypa/pypi/issues/438/backwards-compatible-un-hashed-package
A equivalent fix is available on master in commit 7edad4d (pypi:
update the base pypi url to use the package info without requiring the
hash) so this is really a backport but without unrelated changes.
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Acked-by: Tim Orling (Intel) <ticotimo@gmail.com>
Tested-by: Tim Orling (Intel) <ticotimo@gmail.com>
Acked-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
|
|
WARNING: multipath-tools-0.5.0+git770e6d0da0-r0 do_fetch: Failed to fetch URL git://git.opensvc.com/multipath-tools/.git;protocol=http, attempting MIRRORS if available
ERROR: multipath-tools-0.5.0+git770e6d0da0-r0 do_fetch: Fetcher failure: Fetch command failed with exit code 128, output:
fatal: Unable to find remote helper for 'http'
removed "protocol=http"
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
This version includes fix for CVE-2016-0787
and other changes, for details please see:
https://www.libssh2.org/changes.html
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit df5141af8dfd19c2b2dbfb65f58eda7a509fafd8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Changelog:
version 0.7.3 (released 2016-01-23)
* Fixed CVE-2016-0739
* Fixed ssh-agent on big endian
* Fixed some documentation issues
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit d71cccd4cbd6bc5a764cc769a65ef5507efb767b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Upgrade mariadb from 5.5.46 to 5.5.50.
* update runtime dependency of mariadb-setupdb which requires command install
[AK]
This update appears to be mostly bug fixes and is why is was merge from master.
plus the following securiy fixes
5.5.49:
CVE-2016-0647 CVE-2016-0648 CVE-2016-0666 CVE-2016-0643
CVE-2016-5444 CVE-2016-3452
5.5.48:
CVE-2016-0640 CVE-2016-0644 CVE-2016-0646 CVE-2016-0649
CVE-2016-0650 CVE-2016-0641
5.5.47:
CVE-2016-0546 CVE-2016-0505 CVE-2016-0596 CVE-2016-0597
CVE-2016-0616 CVE-2016-0598 CVE-2016-0600 CVE-2016-0606
CVE-2016-0608 CVE-2016-0609 CVE-2016-0642 CVE-2016-0651
CVE-2016-2047
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 6255219b93d2af4cf56611fb5b1c3dc55ada2c6b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
* Replace the usage of readdir_r() with readdir()
to address a compilation error under glibc 2.24
due to the deprecation of readdir_r
| ../../collectd-5.5.0/src/vserver.c: In function 'vserver_read':
| ../../collectd-5.5.0/src/vserver.c:167:3: error: 'readdir_r' is deprecated [-Werror=deprecated-declarations]
| status = readdir_r (proc, (struct dirent *) dirent_buffer, &dent);
| ^~~~~~
| In file included from /buildarea4/myu2/build/prj_test_20160722/bitbake_build/tmp/sysroots/qemux86/usr/include/features.h:368:0,
| from /buildarea4/myu2/build/prj_test_20160722/bitbake_build/tmp/sysroots/qemux86/usr/include/stdio.h:27,
| from ../../collectd-5.5.0/src/daemon/collectd.h:34,
| from ../../collectd-5.5.0/src/vserver.c:29:
| /buildarea4/myu2/build/prj_test_20160722/bitbake_build/tmp/sysroots/qemux86/usr/include/dirent.h:189:12: note: declared here
| extern int __REDIRECT (readdir_r,
| ^
[1]https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=7584a3f96de88d5eefe5d6c634515278cbfbf052;hp=8d9c92017d85f23ba6a2b3614b2f2bcf1820d6f0
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 9bf3e362e769e5d600fbb621ac0c1edd89529acf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
This update is mostly bug fixes.
Includes: CVE-2016-4979 and CVE-2016-5387 and is why I merged from master.
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 7707dd5bc82583e4cc41ae3080b40d0d6ede8a45)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Includes many CVE fixes and other bug fixes:
http://php.net/ChangeLog-5.php#5.5.37
http://php.net/ChangeLog-5.php#5.6.23
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit aa01ab95a374fd00a8cbde841ce0efffdada63c4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Fix build error:
../../gtksourceview-2.10.5/gtksourceview/gtksourceprintcompositor.c:
In function 'strdup_strftime':
../../gtksourceview-2.10.5/gtksourceview/gtksourceprintcompositor.c:1951:3:
error: format not a string literal, format string not checked [-Werror=format-nonliteral]
tmplen = strftime (tmpbuf, tmpbufsize, locale_format, tm);
^~~~~~
A wrapper for strftime() would compile failed with -Werror=format-nonliteral
in newer GCC. See GCC bug:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=39438
Since most of the strdup_strftime function code is taken from GLib's
g_date_strftime() in gdate.c which already had a fix:
https://bugzilla.gnome.org/show_bug.cgi?id=761550
So this patch refers the glib fixes:
https://git.gnome.org/browse/glib/commit/?id=0817af40e8c74c721c30f6ef482b1f53d12044c7
https://git.gnome.org/browse/glib/commit/?id=8cdbc7fb2c8c876902e457abe46ee18a0b134486
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit ca363445b80b47f3e0c18cb9d96b9463ce86b913)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
The useless rpath caused oe QA issue:
...
|ERROR: QA Issue: x11vnc: work/i586-poky-linux/x11vnc/0.9.13-r0/packages-split/
x11vnc/usr/bin/x11vnc contains probably-redundant RPATH /usr/lib [useless-rpaths]
...
In oe build, it is unnecessary and redundant to pass "-R/usr/lib" to the linker.
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit d209e32ffbcbbf419c3b5677777ac2e244bcebc1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Otherwise the dependency on intltool-dev is icluded
mistakenly to RRECOMMENDS of the libxfce4ui-dev package.
Signed-off-by: Dmitry Rozhkov <dmitry.rozhkov@linux.intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit e7aeb11f7c73b1e06983c82d867e0ce50a1f93e3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
The net-snmp-server package is a meta-package requiring
net-snmp-server-snmpd and net-snmp-server-snmptrapd package.
The net-snmp-server-snmpd package provides the startup scripts
not the meta net-snmp-server package.
Signed-off-by: Anders Wallin <anders.wallin@windriver.com>
Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 4fbb4d2371648ceb9ad6b99f46261ed5a125fb98)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|