summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* squid: change ksh reference in krb ldap helper to shChong Lu2014-11-043-30/+41
| | | | | | | | | | This solves the following warning: squid-3.4.7: squid requires /bin/bash, /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* polarssl: set LIB_INSTALL_DIR to baselibChong Lu2014-11-041-1/+1
| | | | | | | | | | | | | | | | | | This solves the following warning: polarssl-1.3.8: polarssl: Files/directories were installed but not shipped /usr/lib /usr/lib/libpolarssl.so.1.3.8 /usr/lib/libpolarssl.so.7 /usr/lib/libpolarssl.so /usr/lib/libpolarssl.a /usr/lib/.debug /usr/lib/.debug/libpolarssl.so.1.3.8 [installed-vs-shipped] polarssl-1.3.8: polarssl requires libpolarssl.so.7()(64bit), but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: fix for Security Advisory - CVE-2014-3565Roy Li2014-11-042-0/+456
| | | | | | | | | | | | | snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3565 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ntp: make daemon run under ntp:ntpChen Qi2014-11-041-1/+1
| | | | | | | | Fix the service so that the ntpd daemon is run under ntp:ntp. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Acked-by: Peter A. Bigot <pab@pabigot.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ntp: add sntp.service for sntp packageChong Lu2014-11-041-0/+1
| | | | | | | | | | This solves the following warning: lib32-ntp-4.2.6p5: lib32-ntp: Files/directories were installed but not shipped /lib/systemd/system/sntp.service [installed-vs-shipped] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* webmin: remove init script for gentooChong.Lu@windriver.com2014-10-311-0/+1
| | | | | | | | | | The configure.initd.gentoo script is used for gentoo, it is invalid for oe. So remove it to solve the following warning: webmin-1.700: webmin-module-ajaxterm requires /sbin/runscript, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
* phpmyadmin: fix for Security Advisory CVE-2014-7217Roy Li2014-10-312-0/+30
| | | | | | | | | | | | | Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ENUM value that is improperly handled during rendering of the (1) table search or (2) table structure page, related to libraries/TableSearch.class.php and libraries/Util.class.php. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7217 Signed-off-by: Roy Li <rongqing.li@windriver.com>
* phpmyadmin: fix for Security Advisory CVE-2014-5274Roy Li2014-10-312-0/+44
| | | | | | | | | | | Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5274 Signed-off-by: Roy Li <rongqing.li@windriver.com>
* phpmyadmin: fix for Security Advisory CVE-2014-5273Roy Li2014-10-312-0/+30
| | | | | | | | | | | | | | Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5273 Signed-off-by: Roy Li <rongqing.li@windriver.com>
* apache: add fix for CVE-2014-0117 Security AdvisoryKang Kai2014-10-312-1/+292
| | | | | | | | | | | | | | | | The patch comes from upstream: http://svn.apache.org/viewvc?view=revision&revision=1610674 SECURITY (CVE-2014-0117): Fix a crash in mod_proxy. In a reverse proxy configuration, a remote attacker could send a carefully crafted request which could crash a server process, resulting in denial of service. Thanks to Marek Kroemeke working with HP's Zero Day Initiative for reporting this issue. Submitted by: Edward Lu, breser, covener Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com>
* openvpn: bypass check for /sbin/ip on the hostBen Shelton2014-10-301-0/+3
| | | | | | | | | | | | | In the commit 'openvpn: use default iproute2 path', the configure flag to explicitly set the iproute2 path was removed, since busybox now provides the 'ip' applet at the default path. However, setting this flag is necessary to bypass the configure-time check for /sbin/ip on the host, which will otherwise fail if iproute2 is not installed on the host. Add back the flag (pointing to the correct path), and add a comment to describe why this is necessary. Signed-off-by: Ben Shelton <ben.shelton@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* vlc/libdvdcss: Upgrade to 1.3.0MiLo2014-10-301-2/+2
| | | | | | | Tested and in use for a while in OpenPLi. Signed-off-by: Mike Looijmans <milo-software@users.sourceforge.net> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* inetutils: inherit texinfoRoy.Li2014-10-301-1/+1
| | | | | | | inherit texinfo to use native command instead of host command Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* syslog-ng: add gawk to RDEPENDSChong.Lu@windriver.com2014-10-301-0/+1
| | | | | | | | | | This solves the following warning: syslog-ng-3.5.4.1: syslog-ng requires /usr/bin/awk, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* libhugetlbfs: add bash and perl to RDEPENDSChong.Lu@windriver.com2014-10-301-1/+2
| | | | | | | | | | | | This solves the following warning: libhugetlbfs-2.18: libhugetlbfs-tests requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] libhugetlbfs-2.18: libhugetlbfs requires /bin/bash, /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* sharutils: Add new packageHongjun.Yang2014-10-302-0/+47
| | | | | Signed-off-by: Hongjun.Yang <hongjun.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* audiofile: Use gnome mirrors for SRC_URIKhem Raj2014-10-301-1/+1
| | | | | | | original uri seems to be down now Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* mpd: upgrade to 0.19.1Cristian Iorga2014-10-301-5/+4
| | | | | | | | - Added icu and boost as dependencies; Signed-off-by: Cristian Iorga <ubik3000@gmail.com> Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* mpg123: upgrade to 1.21.0Cristian Iorga2014-10-301-2/+2
| | | | | Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* mpd: fix fetch failure for 0.18.xCristian Iorga2014-10-301-1/+1
| | | | | | | | | | | MPD stable download location will contain only the latest stable branch, so fetch will not work in case of an older OE recipe. i.e., mpd 0.18.x recipe will no longer work after 0.19 branch is released (as it is the case now). Signed-off-by: Cristian Iorga <ubik3000@gmail.com> Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* modphp: Security Advisory - php - CVE-2014-3597Yue Tao2014-10-302-0/+283
| | | | | | | | | | | | | | Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3597 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* modphp: Security Advisory - php - CVE-2014-3587Yue Tao2014-10-302-0/+32
| | | | | | | | | | | | | Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3587 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* modphp: Security Advisory - php - CVE-2014-5120Yue Tao2014-10-302-0/+36
| | | | | | | | | | | | | gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5120 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* squid: Add a PACKAGECONFIG for libnetfilter-conntrackChong.Lu@windriver.com2014-10-301-0/+2
| | | | | | | | | | This solves the following warning: WARNING: QA Issue: squid rdepends on libnetfilter-conntrack, but it isn't a build dependency? [build-deps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* tcpdump: Add ptestHongjun.Yang2014-10-303-1/+50
| | | | | | | Add ptest supports for tcpdump Signed-off-by: Hongjun.Yang <hongjun.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ruby-lang.org changed the subdomain/hostname of their download server.Chad Nelson2014-10-301-1/+1
| | | | | Signed-off-by: Chad Nelson <cnelson@agleader.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* libtinyxml2: new packageA. Varnin2014-10-271-0/+38
| | | | | | | TinyXML-2 is a rewrite of TinyXML-1. It provides some advantages over the original. They are covered on the homepage. (http://www.grinninglizard.com/tinyxml2/) Signed-off-by: A. Varnin <fenixk19@mail.ru> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* toybox: Upgrade to v0.5.0Paul Barker2014-10-272-16/+34
| | | | | | | The patch applied to toybox is rebased onto the new release and updated. Signed-off-by: Paul Barker <paul@paulbarker.me.uk> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* vim: Upgrade to v7.4.481Paul Barker2014-10-271-1/+1
| | | | | Signed-off-by: Paul Barker <paul@paulbarker.me.uk> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* modphp, xdebug: blacklist because of conflict with phpMartin Jansa2014-10-272-0/+4
| | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* efl, elementary, e-wm: upgrade to 1.11.4 and 0.19.1Martin Jansa2014-10-273-6/+6
| | | | | | | | * announcements: https://phab.enlightenment.org/phame/live/3/post/efl_elementary_1_11_3_and_enlightenment_0_19_1_releases/ https://phab.enlightenment.org/phame/live/3/post/efl_and_elementary_1_11_4_releases/ Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* terminology: upgrade from 0.5.1 to 0.7.0Martin Jansa2014-10-272-8/+8
| | | | | | | | | * announcements: https://phab.enlightenment.org/phame/live/3/post/terminology_0_6_codename_space_shuttle_just_took_off/ https://phab.enlightenment.org/phame/live/3/post/terminology_0_6_1/ https://phab.enlightenment.org/phame/live/3/post/terminology_0_7/ Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ruby: make build deterministic by adding PACKAGECONFIG for valgrindJackie Huang2014-10-271-0/+3
| | | | | | | | | * disabled by default * fixes: ruby/1.9.3-p547-r1.0/ruby-1.9.3-p547/gc.c:43:32:fatal error: valgrind/memcheck.h: No such file or directory Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* log4c: new packageA. Varnin2014-10-271-0/+16
| | | | | | | Log4c is logging library for C (http://log4c.sourceforge.net/) Signed-off-by: A. Varnin <fenixk19@mail.ru> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* network-manager-applet: add basic AP supportAndreas Müller2014-10-273-0/+178
| | | | | | | | | | | | | Tested with gumstix overo as access point and connected windows pc and android smartphone. Note that there are are some settings available for AP which do not make sense - see [1] for further details. [1] https://bugzilla.gnome.org/show_bug.cgi?id=734589#c6 Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* networkmanager: make shared connections workAndreas Müller2014-10-271-1/+2
| | | | | | | | | | * set correct path for dnsmasq * add dnsmasq to RRECOMMENDS this popped up when testing access point enabled for network-manager-applet Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* packagegroup-xfce-extended: replace xfce4-brightness-plugin by ↵Andreas Müller2014-10-271-1/+1
| | | | | | | xfce4-powermanager-plugin Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* xfce4-power-manager: update to 1.4.1 to fix power buttonAndreas Müller2014-10-272-687/+19
| | | | | | | | with 1.2.0 pressing power button shuts down independent of the setting in xfce4-power-manager Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* rsnapshot: fix rsnapshot.conf.defaultWenzong Fan2014-10-272-2/+54
| | | | | | | | | | | | | | | This change is used for fixing cmd path in rsnapshot.conf.default. The options --without-* disable checking command * on host and get the default path used, otherwise the host path will be injected into target configs. The runtime dependencies to ssh, logger, cp, du are optional and could be customized in rsnapshot.conf, so it's not needed that using PACKAGECONFIG to define the runtime dependencies. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Monkey: new v1.5.4 release.Eduardo Silva2014-10-271-2/+2
| | | | | | | | | | | | | | | | | This patch add the new Monkey HTTP Server v1.5.4. For more details about software changes please visit: http://monkey-project.com/Announcements/v1.5.4 === Build Tests == This version have been tested on Yocto/Daisy based on RPM. monkey-yocto/a617991e40bd5c3779ad7b3689f78857d3e45248 Signed-off-by: Eduardo Silva <eduardo@monkey.io> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* radvd: fix daemon start-upChen Qi2014-10-213-5/+7
| | | | | | | | 1. Fix radvd.service to start daemon correctly. 2. Make the daemon run under 'radvd' user by default. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* wireshark: add PACKAGECONFIG for krb5Jackie Huang2014-10-211-0/+1
| | | | | | | | * fixes floating dependency: WARNING: QA Issue: wireshark rdepends on krb5, but it isn't a build dependency? [build-deps] Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ntp: add status for initscriptWenzong Fan2014-10-211-1/+8
| | | | | Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: add ac_cv_header_valgrind_* to CACHED_CONFIGUREVARSJackie Huang2014-10-211-0/+5
| | | | | | | | | There have been occasions that net-snmp sees valgrind and then later it's not available, adding this setting ensures determinism by disabling it by default Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* tftp-hpa: fix the empty file writing errorRoy.Li2014-10-212-0/+40
| | | | | | | | | | | make write_behind to return 0 if a empty file is written, to distinguish a true writing failure[on which the write_behind will return -1], then the annoying wrong log will disappear. ____ |Error code 3: Disk full or allocation exceeded ----- Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* Revert "tftp-hpa: bug fix on empty file put error"Roy.Li2014-10-212-34/+0
| | | | | | | | | This reverts commit b2eb21a5fbcb065e84ed582e87de21bdc3082f00. It make 3d8520a0b411[tftp-hpa: add error check for disk filled up] unable to work Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* PolarSSL: update package descriptionEduardo Silva2014-10-211-3/+15
| | | | | Signed-off-by: Eduardo Silva <eduardo@monkey.io> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* postfix: remove overriding config config_directoryKang Kai2014-10-211-1/+1
| | | | | | | | | | | | | | | | | | | | | postfix 2.11.1 adds overriding config check. In postinstall script, it calls command newaliases to read configure file main.cf_2.0. config_directory is set in config main.cf_2.0, but it is an overriding config and warning shows when build an image: WARNING: log_check: There is a warn message in the logfile WARNING: log_check: Matched keyword: [warn] WARNING: log_check: newaliases: warning: /buildarea3/kkang/poky/qemuarm-build/tmp/work/qemuarm-poky-linux-gnueabi/core- image-minimal/1.0-r0/rootfs/etc/postfix/main.cf, line 27: overriding earlier entry: config_directory=/buildarea3/kkang/ poky/qemuarm-build/tmp/work/qemuarm-poky-linux-gnueabi/core-image-minimal/1.0-r0/rootfs/etc/postfix Remove config_directory setting in main.cf_2.0 to avoid this warning. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* quagga: remove watchquagga when start with systemdChong.Lu@windriver.com2014-10-211-2/+3
| | | | | | | | | When we start with sysvinit, watchquagga uses quagga init script to monitor zebra daemon. But we need not do this in systemd environment. Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ebtables: fix for sysvinit and systemdChen Qi2014-10-214-166/+192
| | | | | | | | | The solution mainly references Fedora20. Extract the common part of the code and install it into ${sbindir}. Add systemd service file. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-05 11:43:38 +0000