aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2016-09-18php: Upgrade 5.6.12 -> 5.6.16fan.xin
Fix CVE-2015-7803, CVE-2015-7804 and other bugs http://php.net/ChangeLog-5.php Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> (cherry picked from commit ecaad588c79437be3209d987c49928ecbd907d8e) dropped several security patch included in this update. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-09-18php: check for existance of directory before 'rmdir' in ↵Derek Straka
do_install_append_class-target Signed-off-by: Derek Straka <derek@asterius.io> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> (cherry picked from commit 7744e5992c17f78ec0fc0bf5af1208a037110469) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-09-18php: Upgrade 5.5.26 -> 5.5.30fan.xin
Fix CVE-2015-7803, CVE-2015-7804 and other bugs http://php.net/ChangeLog-5.php Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> (cherry picked from commit c29091fa51aa79356d498447737e1eab79b6c432) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-31python-cryptography: fix compile issue with openssl 1.0.2hArmin Kuster
this fixes: error: 'SSLv2_method' redeclared as different kind of symbol | SSL_METHOD* (*SSLv2_method)(void) = NULL; Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-05-31python-cryptography: fix build issue do to openssl 1.0.1g upgradeArmin Kuster
this fixes build/temp.linux-x86_64-2.7/_openssl.c:697:6: error: conflicting types for 'BIO_new_mem_buf' BIO *BIO_new_mem_buf(void *, int); ^ In file included from /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/qemuarm/usr/include/openssl/asn1.h:65:0, from build/temp.linux-x86_64-2.7/_openssl.c:413: Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-05-19ntp: Security fixes via update to 4.2.8p7Armin Kuster
CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 CVE-2016-1547 CVE-2015-7704 CVE-2015-8138 CVE-2016-1550 for more info see: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security Signed-off-by: Armin Kuster <akuster@mvista.com> Acked-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-04-28gstreamer: fix argument parsing when using Bison 3Stefan Agner
Remove the argument fix patch and add a patch which fixes the grammer.y Bison input file. YYLEX_PARAM seems to be no longer supported and has been replaced with %parse-param which has been introduced already in 2003. This fixes a segmentation fault when launching gst-launch-0.10. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28mozjs: fix configure host contaminationMark Asselstine
When building mozjs the following error was observed | Traceback (most recent call last): | File "./config.status", line 9, in <module> | from ConfigStatus import config_status | File "/build/bitbake_build/tmp/work/corei7-64-wrs-linux/mozjs/17.0.0-r0/mozjs17.0.0/js/src/build/ConfigStatus.py", line 11, in <module> | import sys, re, os, posixpath, ntpath | File "/usr/lib/python2.7/ntpath.py", line 15, in <module> | from genericpath import _unicode | ImportError: cannot import name _unicode | WARNING: exit code 1 from a shell command. | ERROR: Function failed: do_configure (log file is located at /build//bitbake_build/tmp/work/corei7-64-wrs-linux/mozjs/17.0.0-r0/temp/do_configure/log.do_configure.1056 Note the host paths found in the error msg. Further this issue can be explored using the host python, which will not error when attempting the above import, and the python in the sysroot, which will fail when we attempt the import. By inheriting pythonnative we ensure the proper paths are set to avoid this host contamination. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28mariadb: Fix rootfs creation errorsLi xin
error: file /usr/share/doc/README from install of mariadb-leftovers-5.5.46-* conflicts with file from package dmidecode-doc-2.12-* Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28rsnapshot: use ${bindir} as rsync locationAndré Draszik
Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28mozjs_17.0.0.bb: Fix do_srpm errorLi xin
The function do_sourceclean() will lead to do_srpm failed, so use do_unpack instead. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28krb5-CVE-2016-3119.patchZhixiong Chi
Backport <commit 08c642c09c38a9c6454ab43a9b53b2a89b9eef99> from krb5 upstream <https://github.com/krb5/krb5> to fix CVE-2016-3119 avoid remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal. Signed-off-by: Zhixiong Chi <Zhixiong.Chi@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28mozjs: fix armeb buildsKoen Kooi
The mozjs builds fails on armeb, so add a define to make it work. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28flite: fix license issue.Armin Kuster
copy license from http://www.speech.cs.cmu.edu/flite/ and include text WARNING: flite-alsa: No generic license file exists for: flite in any provider Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28xcursorgen: fix License issueArmin Kuster
WARNING: xcursorgen: No generic license file exists for: ManishSingh in any provider copied COPYING file to meta-oe licenses to fix issue. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-28udisk2: fix build issue with missing dependsArmin Kuster
checking for sys/acl.h... no | configure: error: *** ACL headers not found. | NOTE: The following config.log files may provide further information. add acl to DEPENDS Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17net-snmp: fix some invalid pathsCatalin Enache
Because the package is not built in place @srcdir@ is an absolute path to the source directory instead of ".". Because of this some target scripts like net-snmp-create-v3-user and net-snmp-config that are using thisvariable in their *.in files (NSC_SRCDIR=@srcdir@) contain invalid paths. Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17net-snmp: fix invalid paths in target net-snmp-configCatalin Enache
Only net-snmp-config used for sysroot should have sysroot specific paths. Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17net-snmp: fix the replacement in net-snmp-configRoy Li
when net-snmp-config is used to configure by other package, and fail since /libnl3 is not found, in fact, it should be -I/usr/include/libnl3, and is modified as /libnl3 incorrectly. instead of modify the net-snmp-config for target, the one under ${bindir_crossscripts} should be replaced with ${TAGING_INCDIR} Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17net-snmp: apply patch for cross-compilationRafaël Carré
7fb5479 added the patch but did not apply it Rename patch to explicit it differentiate it from other patches Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17net-snmp: apply patch for cross-compilationRafaël Carré
7fb5479 added the patch but did not apply it Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17libsmi: set the SH to the target pathJackie Huang
Set the SH to the target path to avoid host contamination, which causes the following issue on some hosts: | WARNING: QA Issue: /usr/bin/smicache_libsmi contained in package libsmi requires /usr/bin/sh, but no providers found in its RDEPENDS [file-rdeps] | Computing transaction...error: Can't install libsmi-0.4.8-r0.0@corei7_64: no package provides /usr/bin/sh Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17libftdi: Fix cpp-wrapper optionsMartin Jansa
* fixes following issue found with test-dependencies WARN: libftdi: libftdi rdepends on libgcc, but it isn't a build dependency? WARN: libftdi: libftdi rdepends on libstdc++, but it isn't a build dependency? * when boost is found it was still building libftdipp1.so.2.2.0 * as shown in log.do_package: DEBUG: calculating shlib requirements for libftdi DEBUG: libftdi: Dependency libftdi1.so.2 requires package libftdi (used by files: /home/jenkins/oe/world/shr-core/tmp-glibc/work/i586-oe-linux/libftdi/1.2-r0/packages-split/libftdi/usr/lib/libftdipp1.so.2.2.0) DEBUG: libftdi: Dependency libusb-1.0.so.0 requires package libusb1 (used by files: /home/jenkins/oe/world/shr-core/tmp-glibc/work/i586-oe-linux/libftdi/1.2-r0/packages-split/libftdi/usr/lib/libftdipp1.so.2.2.0) DEBUG: libftdi: Dependency libstdc++.so.6 requires package libstdc++ (used by files: /home/jenkins/oe/world/shr-core/tmp-glibc/work/i586-oe-linux/libftdi/1.2-r0/packages-split/libftdi/usr/lib/libftdipp1.so.2.2.0) DEBUG: libftdi: Dependency libgcc_s.so.1 requires package libgcc (used by files: /home/jenkins/oe/world/shr-core/tmp-glibc/work/i586-oe-linux/libftdi/1.2-r0/packages-split/libftdi/usr/lib/libftdipp1.so.2.2.0) DEBUG: libftdi: Dependency libusb-1.0.so.0 requires package libusb1 (used by files: /home/jenkins/oe/world/shr-core/tmp-glibc/work/i586-oe-linux/libftdi/1.2-r0/packages-split/libftdi/usr/lib/libftdi1.so.2.2.0) DEBUG: libftdi: Dependency libc.so.6 requires package glibc (used by files: /home/jenkins/oe/world/shr-core/tmp-glibc/work/i586-oe-linux/libftdi/1.2-r0/packages-split/libftdi/usr/lib/libftdi1.so.2.2.0) DEBUG: Python function package_do_shlibs finished Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17luajit: depend on luajit-native to provide host luaMartin Jansa
* otherwise minilua for host is built during build of target lua, see comment in Makefile: # If left blank, minilua is built and used. You can supply an installed # copy of (plain) Lua 5.1 or 5.2, plus Lua BitOp. E.g. with: HOST_LUA=lua * be aware that there is still native buildvm which needs the same headers if it fails for you, then you probably need to install libc6-dev:i386 which installs these headers to hosts /usr/include, some architectures are passing HOST_CC="${BUILD_CC} -m32" in EXTRA_OEMAKE, that's why you need 32bit headers on 64bit host. * building native minilua fails on some hosts like this: ERROR: luajit-2.0.4-r0 do_compile: oe_runmake failed ERROR: luajit-2.0.4-r0 do_compile: Function failed: do_compile (log file is located at /home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5te-oe-linux-gnueabi/luajit/2.0.4-r0/temp/log.do_compile.3067) ERROR: Logfile of failure stored in: /home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5te-oe-linux-gnueabi/luajit/2.0.4-r0/temp/log.do_compile.3067 Log data follows: | DEBUG: Executing shell function do_compile | NOTE: make -j 8 CROSS=arm-oe-linux-gnueabi- TARGET_CFLAGS= --sysroot=/home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/qemuarm -march=armv5te -mthumb TARGET_LDFLAGS= --sysroot=/home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/qemuarm TARGET_SHLDFLAGS= --sysroot=/home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/qemuarm HOST_CC=gcc -m32 | ==== Building LuaJIT 2.0.4 ==== | make -C src | make[1]: Entering directory `/home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5te-oe-linux-gnueabi/luajit/2.0.4-r0/LuaJIT-2.0.4/src' | HOSTCC host/buildvm_asm.o | HOSTCC host/minilua.o | HOSTCC host/buildvm_peobj.o | HOSTCC host/buildvm_lib.o | HOSTCC host/buildvm_fold.o | CC lj_gc.o | CC lj_obj.o | CC lj_char.o | In file included from host/buildvm_peobj.c:9:0: | host/buildvm.h:9:23: fatal error: sys/types.h: No such file or directory | #include <sys/types.h> | ^ | compilation terminated. | In file included from host/buildvm_fold.c:6:0: | host/buildvm.h:9:23: fatal error: sys/types.h: No such file or directory | #include <sys/types.h> | ^ | compilation terminated. | In file included from host/buildvm_asm.c:6:0: | host/buildvm.h:9:23: fatal error: sys/types.h: No such file or directory | #include <sys/types.h> | ^ | compilation terminated. | In file included from host/buildvm_lib.c:6:0: | host/buildvm.h:9:23: fatal error: sys/types.h: No such file or directory | #include <sys/types.h> | ^ | compilation terminated. | In file included from /usr/include/limits.h:25:0, | from /usr/lib/gcc/x86_64-linux-gnu/4.8/include-fixed/limits.h:168, | from /usr/lib/gcc/x86_64-linux-gnu/4.8/include-fixed/syslimits.h:7, | from /usr/lib/gcc/x86_64-linux-gnu/4.8/include-fixed/limits.h:34, | from host/minilua.c:33: | /usr/include/features.h:374:25: fatal error: sys/cdefs.h: No such file or directory | # include <sys/cdefs.h> | ^ | compilation terminated. | make[1]: *** [host/buildvm_lib.o] Error 1 | make[1]: *** Waiting for unfinished jobs.... | make[1]: *** [host/buildvm_fold.o] Error 1 | make[1]: *** [host/buildvm_asm.o] Error 1 | make[1]: *** [host/buildvm_peobj.o] Error 1 | make[1]: *** [host/minilua.o] Error 1 | make[1]: Leaving directory `/home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5te-oe-linux-gnueabi/luajit/2.0.4-r0/LuaJIT-2.0.4/src' | make: *** [default] Error 2 | ERROR: oe_runmake failed | ERROR: Function failed: do_compile (log file is located at /home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5te-oe-linux-gnueabi/luajit/2.0.4-r0/temp/log.do_compile.3067) NOTE: recipe luajit-2.0.4-r0: task do_compile: Failed ERROR: Task 6 (/home/jenkins/oe/world/shr-core/meta-openembedded/meta-oe/recipes-devtools/luajit/luajit_2.0.4.bb, do_compile) failed with exit code '1' Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17openldap: control ipv6 support via DISTRO_FEATURESRichard Tollerton
Explicitly disable ipv6 support if the distro does not include it. Signed-off-by: Richard Tollerton <rich.tollerton@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17postgresql: Security Advisory-postgresql-CVE-2016-0766Zhixiong Chi
add CVE-2016-0766 patch for avoiding attackers to gain privileges via unspecified vectors. Patch comes from: http://git.postgresql.org/gitweb/?p=postgresql.git;a=summary commit f4aa3a18a20d51575562520754aa376b3b08b2d0 Signed-off-by: Zhixiong Chi <Zhixiong.Chi@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17efl-native: add dependency on opensslMartin Jansa
* without this many recipes which use e.g. edje_cc fail after last openssl upgrade in oe-core with: | /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/edje_cc: /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/../../lib/libcrypto.so.1.0.0: version `OPENSSL_1.0.0' not found (required by /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/libeet.so.1) | /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/edje_cc: /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/../../lib/libcrypto.so.1.0.0: version `OPENSSL_1.0.0' not found (required by /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/./libecore_con.so.1) | /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/edje_cc: /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/././libssl.so.1.0.0: version `OPENSSL_1.0.0' not found (required by /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/./libecore_con.so.1) | /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/edje_cc: /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/../../lib/libcrypto.so.1.0.0: version `OPENSSL_1.0.0' not found (required by /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/./libemile.so.1) | /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/edje_cc: /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/././libssl.so.1.0.0: version `OPENSSL_1.0.0' not found (required by /home/jenkins/oe/world/shr-core/tmp-glibc/sysroots/x86_64-linux/usr/bin/../lib/./libemile.so.1) | make[4]: *** [modules/ethumb/emotion/template.edj] Error 1 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17vlc: Fix typo introduced in 0f2b3139521570ad494a72399f8a9dae76e69b16Rafaël Carré
vlc-2.2.1: vlc: invalid PACKAGECONFIG: {@bb.utils.contains('DISTRO_FEATURES', [invalid-packageconfig] vlc-2.2.1: vlc: invalid PACKAGECONFIG: 'x11', [invalid-packageconfig] vlc-2.2.1: vlc: invalid PACKAGECONFIG: 'x11 [invalid-packageconfig] vlc-2.2.1: vlc: invalid PACKAGECONFIG: sdl', [invalid-packageconfig] vlc-2.2.1: vlc: invalid PACKAGECONFIG: '', [invalid-packageconfig] vlc-2.2.1: vlc: invalid PACKAGECONFIG: d)} [invalid-packageconfig] Signed-off-by: Rafaël Carré <funman@videolan.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17recipes: Replace "cp -a" with "cp -R --no-dereference --preserve=mode,links"Martin Jansa
* Using "cp -a" leaks UID of user running the builds, causing many QA warnings. * See this thread for details: http://lists.openembedded.org/pipermail/openembedded-core/2015-November/112904.html Dropped Lua patch as no ptest support exists in jethro Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Conflicts: meta-oe/recipes-devtools/lua/lua_5.3.1.bb
2016-04-17tracker: fix packaging issuesAlexander Kanavin
ERROR: tracker-0.14.2-r7 do_package_qa: QA Issue: -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/writeback-modules/libwriteback-taglib.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-pdf.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-tiff.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-mp3.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-abw.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-jpeg.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-ps.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-icon.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-text.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-gstreamer.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-epub.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-msoffice-xml.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-oasis.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-png.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-html.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-gif.so' -dev package contains non-symlink .so: tracker-dev path 'work/armv5te-oe-linux-gnueabi/tracker/0.14.2-r7/packages-split/tracker-dev/usr/lib/tracker-0.14/extract-modules/libextract-msoffice.so' [dev-elf] Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17log4cpp: Fix build system path in pkgconfig file QA failure.Philip Balister
* Must remove path from pc.in and stop configure.in from regenerating the file. * Also included some changes requested in earlier review that arrived late. Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17xmlstarlet: Disable PARALLEL_MAKERichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17vlc: make sdl optional (enabled by default)Rafaël Carré
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17vlc: make x11 DISTRO_FEATURE optional (enabled by default)Rafaël Carré
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17net-snmp: fix cross-compile breakage, add libnl pkgconfig optionStephen Arnold
This patch enhances a previously unapplied patch on jethro, plus adds some flexibility in terms of required deps and a few cleanups. Signed-off-by: Stephen Arnold <stephen.arnold42@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17netkit-rsh: add two patches and some fixes.Mingli Yu
* Update the checksum of the license text to include all the license text to instead of the previous only from two to three line. * Customize compile option such as CFLAGS= -D_GNU_SOURCE and the specific install folder. * Customize pam configuration file for rsh, rexec. and rlogin to make them work. * Update the line "server = /usr/bin/tcpd" to "server = /usr/sbin/tcpd" for /etc/xinetd.d/{rexec,rlogin,rsh}. * Fix some typo such as replace RPROVIDES_${PN}-rshd = "rshd" to RPROVIDES_${PN}-server = "rshd" * Fix host variable when rsh is renamed to other. * Add rexec to support ipv6. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17netkit-telnet: Add to generate telnetlogin.Mingli Yu
* Add oe_runmake line for telnetlogin to make the telnetlogin folder to be built. * Add FILES_${PN} line to let ${libdir}/telnetlogin to be included in netkit-telnet package. * Customize "install -D -m 4750 ${B}/telnetlogin/telnetlogin ${D}/${libdir}/telnetlogin" to let the telnetlogin to be installed under /usr/lib64 on 64bit system. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17gst-plugins-base: add perl runtime dependency to gst-plugins-base-appsAndre McCurdy
gst-plugins-base-apps contains /usr/bin/gst-visualise-0.10, which is a perl script. Note that the gst-visualise-0.10 script was dropped upstream prior to the first gst-plugins-base 1.0 release: http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=227be98c0b65a1616c0d0689db6fa7576bcbe434 Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17fix missing packageconfig for samba with sysvinitStephano Cetola
Building samba with sysvinit currently throws a QA warning about "invalid PACKAGECONFIG: sysv". This fixes that issue. Signed-off-by: Stephano Cetola <stephanoc@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17mplayer2: fix building with gcc 5.xBelal, Awais
This patch works around a potential problem in the theora glue code where it assumes that the compiler will somehow find a function which is not exported explicitly through the libtheora library. Due to this problem the build fails with gcc-5.x compiler. The included patch essentially backports a commit which updates the glue code to use the Theora 1.0 API to eliminate this problem and PNBLACKLIST is cleared for mplayer2. Signed-off-by: Awais Belal <awais_belal@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17ctdb: rdep on bashChristopher Larson
onnode is a shell script with bashisms and bash #!. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-17lldpd: configure the systemd unit file dirRoy Li
configure the systemd unit file dir, otherwise it will be auto-checked by 'pkg-config --variable=systemdsystemunitdir systemd', but if systemd is not built firstly, and the the unit file will not be installed, and lead to below error: ERROR: Function failed: SYSTEMD_SERVICE_lldpd value lldpd.service does not exist and disable sysusersdir, since sysuser is not used currently. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-09python-m2crypto: fix SSLv2 symbol issueArmin Kuster
missed using "-D" for OPENSSL_NO_SSL2 swig_features. ERROR: Failed to import the "M2Crypto" module: .../usr/lib/python2.7/site-packages/M2Crypto/__m2crypto.so: undefined symbol: SSLv2_method disable using SSLv2_method if not supported in openssl. This is now the case with the advent of CVE-2016-0800 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-02-23ntp: update 4.2.8p6Armin Kuster
QA error fix: ERROR: QA Issue: ntp: Files/directories were installed but not shipped in any package: /usr/libexec CVES addressed: Bug 2948 / CVE-2015-8158 Bug 2945 / CVE-2015-8138: origin: Zero Origin Timestamp Bypass Bug 2942 / CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode Bug 2940 / CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list Bug 2939 / CVE-2015-7977: reslist NULL pointer dereference Bug 2938 / CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames Bug 2937 / CVE-2015-7975: nextvar() missing length check Bug 2936 / CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers Bug 2935 / CVE-2015-7973: Deja Vu: Replay attack on authenticated broadcast mode Bug 2947 / CVE-2015-8140: ntpq vulnerable to replay attacks Bug 2946 / CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin NTP-4.2.8p5 NtpBug2956: Small-step/Big-step CVE-2015-5300 Bug #2829 Clean up pipe_fds in ntpd.c Bug #2887 stratum -1 config results as showing value 99. Bug #2932 Update leapsecond file info in miscopt.html. Bug #2934 tests/ntpd/t-ntp_scanner.c has a magic constant wired in. Bug #2944 errno is not preserved properly in ntpdate after sendto call. Bug #2952 peer associations were broken by the fix for NtpBug2901 CVE-2015-7704 Bug #2954 Version 4.2.8p4 crashes on startup on some OSes. Bug #2957 'unsigned int' vs 'size_t' format clash. Bug #2958 ntpq: fatal error messages need a final newline. Bug #2962 truncation of size_t/ptrdiff_t on 64bit targets. Bug #2965 Local clock didn't work since 4.2.8p4. Bug #2967 ntpdate command suffers an assertion failure Bug #2969 Seg fault from ntpq/mrulist when looking at server with lots of clients. Bug #2971 ntpq bails on ^C: select fails: Interrupted system call Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-21phpmyadmin: CVE-2015-8669Liu Jian
libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message. This patch is from https://github.com/phpmyadmin/phpmyadmin/commit/c4d649325b25139d7c097e56e2e46cc7187fae45 Signed-off-by: Jian Liu <jian.liu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-21xdelta3: Security fix CVE-2014-9765Armin Kuster
CVE-2014-9765 xdelta: buffer overflow in main_get_appheader Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-10php: Security fix CVE-2016-1903Armin Kuster
CVE-2016-1903 php: Out-of-bounds memory read via gdImageRotateInterpolated Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-10php: Security fix CVE-2015-7804Armin Kuster
CVE-2015-7804 php: uninitialized pointer in phar_make_dirstream() Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-10php: Security fix CVE-2015-7803Armin Kuster
CVE-2015-7803 php: NULL pointer dereference in phar_get_fp_offset() Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-02-10geoip: add ptest functionalityJoe Slater
Also make geoip package rdepend on geoip-database and add symbolic link to GeoIPCity.dat. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>