summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* net-snmp: fix for Security Advisory - CVE-2014-3565Roy Li2014-12-012-0/+456
| | | | | | | | | | | | | | snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3565 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* phpmyadmin: fix for Security Advisory CVE-2014-5274Roy Li2014-12-012-0/+44
| | | | | | | | | | | | Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5274 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* phpmyadmin: fix for Security Advisory CVE-2014-5273Roy Li2014-12-012-0/+30
| | | | | | | | | | | | | | | Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) browse table page, related to js/sql.js; (2) ENUM editor page, related to js/functions.js; (3) monitor page, related to js/server_status_monitor.js; (4) query charts page, related to js/tbl_chart.js; or (5) table relations page, related to libraries/tbl_relation.lib.php. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5273 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openvpn: bypass check for /sbin/ip on the hostBen Shelton2014-12-012-1/+292
| | | | | | | | | | | | | In the commit 'openvpn: use default iproute2 path', the configure flag to explicitly set the iproute2 path was removed, since busybox now provides the 'ip' applet at the default path. However, setting this flag is necessary to bypass the configure-time check for /sbin/ip on the host, which will otherwise fail if iproute2 is not installed on the host. Add back the flag (pointing to the correct path), and add a comment to describe why this is necessary. Signed-off-by: Ben Shelton <ben.shelton@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* openvpn: bypass check for /sbin/ip on the hostBen Shelton2014-10-301-0/+3
| | | | | | | | | | | | | In the commit 'openvpn: use default iproute2 path', the configure flag to explicitly set the iproute2 path was removed, since busybox now provides the 'ip' applet at the default path. However, setting this flag is necessary to bypass the configure-time check for /sbin/ip on the host, which will otherwise fail if iproute2 is not installed on the host. Add back the flag (pointing to the correct path), and add a comment to describe why this is necessary. Signed-off-by: Ben Shelton <ben.shelton@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* update maintainer info in README's for dizzyArmin Kuster2014-10-3016-56/+144
| | | | | | | | * This is the first time meta-python is being taged with a release Acked-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* vlc/libdvdcss: Upgrade to 1.3.0MiLo2014-10-301-2/+2
| | | | | | | Tested and in use for a while in OpenPLi. Signed-off-by: Mike Looijmans <milo-software@users.sourceforge.net> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* inetutils: inherit texinfoRoy.Li2014-10-301-1/+1
| | | | | | | inherit texinfo to use native command instead of host command Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* syslog-ng: add gawk to RDEPENDSChong.Lu@windriver.com2014-10-301-0/+1
| | | | | | | | | | This solves the following warning: syslog-ng-3.5.4.1: syslog-ng requires /usr/bin/awk, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* libhugetlbfs: add bash and perl to RDEPENDSChong.Lu@windriver.com2014-10-301-1/+2
| | | | | | | | | | | | This solves the following warning: libhugetlbfs-2.18: libhugetlbfs-tests requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] libhugetlbfs-2.18: libhugetlbfs requires /bin/bash, /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* sharutils: Add new packageHongjun.Yang2014-10-302-0/+47
| | | | | Signed-off-by: Hongjun.Yang <hongjun.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* audiofile: Use gnome mirrors for SRC_URIKhem Raj2014-10-301-1/+1
| | | | | | | original uri seems to be down now Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* mpd: upgrade to 0.19.1Cristian Iorga2014-10-301-5/+4
| | | | | | | | - Added icu and boost as dependencies; Signed-off-by: Cristian Iorga <ubik3000@gmail.com> Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* mpg123: upgrade to 1.21.0Cristian Iorga2014-10-301-2/+2
| | | | | Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* mpd: fix fetch failure for 0.18.xCristian Iorga2014-10-301-1/+1
| | | | | | | | | | | MPD stable download location will contain only the latest stable branch, so fetch will not work in case of an older OE recipe. i.e., mpd 0.18.x recipe will no longer work after 0.19 branch is released (as it is the case now). Signed-off-by: Cristian Iorga <ubik3000@gmail.com> Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* modphp: Security Advisory - php - CVE-2014-3597Yue Tao2014-10-302-0/+283
| | | | | | | | | | | | | | Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3597 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* modphp: Security Advisory - php - CVE-2014-3587Yue Tao2014-10-302-0/+32
| | | | | | | | | | | | | Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3587 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* modphp: Security Advisory - php - CVE-2014-5120Yue Tao2014-10-302-0/+36
| | | | | | | | | | | | | gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5120 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* squid: Add a PACKAGECONFIG for libnetfilter-conntrackChong.Lu@windriver.com2014-10-301-0/+2
| | | | | | | | | | This solves the following warning: WARNING: QA Issue: squid rdepends on libnetfilter-conntrack, but it isn't a build dependency? [build-deps] Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* tcpdump: Add ptestHongjun.Yang2014-10-303-1/+50
| | | | | | | Add ptest supports for tcpdump Signed-off-by: Hongjun.Yang <hongjun.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ruby-lang.org changed the subdomain/hostname of their download server.Chad Nelson2014-10-301-1/+1
| | | | | Signed-off-by: Chad Nelson <cnelson@agleader.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* libtinyxml2: new packageA. Varnin2014-10-271-0/+38
| | | | | | | TinyXML-2 is a rewrite of TinyXML-1. It provides some advantages over the original. They are covered on the homepage. (http://www.grinninglizard.com/tinyxml2/) Signed-off-by: A. Varnin <fenixk19@mail.ru> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* toybox: Upgrade to v0.5.0Paul Barker2014-10-272-16/+34
| | | | | | | The patch applied to toybox is rebased onto the new release and updated. Signed-off-by: Paul Barker <paul@paulbarker.me.uk> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* vim: Upgrade to v7.4.481Paul Barker2014-10-271-1/+1
| | | | | Signed-off-by: Paul Barker <paul@paulbarker.me.uk> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* modphp, xdebug: blacklist because of conflict with phpMartin Jansa2014-10-272-0/+4
| | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* efl, elementary, e-wm: upgrade to 1.11.4 and 0.19.1Martin Jansa2014-10-273-6/+6
| | | | | | | | * announcements: https://phab.enlightenment.org/phame/live/3/post/efl_elementary_1_11_3_and_enlightenment_0_19_1_releases/ https://phab.enlightenment.org/phame/live/3/post/efl_and_elementary_1_11_4_releases/ Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* terminology: upgrade from 0.5.1 to 0.7.0Martin Jansa2014-10-272-8/+8
| | | | | | | | | * announcements: https://phab.enlightenment.org/phame/live/3/post/terminology_0_6_codename_space_shuttle_just_took_off/ https://phab.enlightenment.org/phame/live/3/post/terminology_0_6_1/ https://phab.enlightenment.org/phame/live/3/post/terminology_0_7/ Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ruby: make build deterministic by adding PACKAGECONFIG for valgrindJackie Huang2014-10-271-0/+3
| | | | | | | | | * disabled by default * fixes: ruby/1.9.3-p547-r1.0/ruby-1.9.3-p547/gc.c:43:32:fatal error: valgrind/memcheck.h: No such file or directory Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* log4c: new packageA. Varnin2014-10-271-0/+16
| | | | | | | Log4c is logging library for C (http://log4c.sourceforge.net/) Signed-off-by: A. Varnin <fenixk19@mail.ru> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* network-manager-applet: add basic AP supportAndreas Müller2014-10-273-0/+178
| | | | | | | | | | | | | Tested with gumstix overo as access point and connected windows pc and android smartphone. Note that there are are some settings available for AP which do not make sense - see [1] for further details. [1] https://bugzilla.gnome.org/show_bug.cgi?id=734589#c6 Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* networkmanager: make shared connections workAndreas Müller2014-10-271-1/+2
| | | | | | | | | | * set correct path for dnsmasq * add dnsmasq to RRECOMMENDS this popped up when testing access point enabled for network-manager-applet Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* packagegroup-xfce-extended: replace xfce4-brightness-plugin by ↵Andreas Müller2014-10-271-1/+1
| | | | | | | xfce4-powermanager-plugin Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* xfce4-power-manager: update to 1.4.1 to fix power buttonAndreas Müller2014-10-272-687/+19
| | | | | | | | with 1.2.0 pressing power button shuts down independent of the setting in xfce4-power-manager Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* rsnapshot: fix rsnapshot.conf.defaultWenzong Fan2014-10-272-2/+54
| | | | | | | | | | | | | | | This change is used for fixing cmd path in rsnapshot.conf.default. The options --without-* disable checking command * on host and get the default path used, otherwise the host path will be injected into target configs. The runtime dependencies to ssh, logger, cp, du are optional and could be customized in rsnapshot.conf, so it's not needed that using PACKAGECONFIG to define the runtime dependencies. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Monkey: new v1.5.4 release.Eduardo Silva2014-10-271-2/+2
| | | | | | | | | | | | | | | | | This patch add the new Monkey HTTP Server v1.5.4. For more details about software changes please visit: http://monkey-project.com/Announcements/v1.5.4 === Build Tests == This version have been tested on Yocto/Daisy based on RPM. monkey-yocto/a617991e40bd5c3779ad7b3689f78857d3e45248 Signed-off-by: Eduardo Silva <eduardo@monkey.io> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* radvd: fix daemon start-upChen Qi2014-10-213-5/+7
| | | | | | | | 1. Fix radvd.service to start daemon correctly. 2. Make the daemon run under 'radvd' user by default. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* wireshark: add PACKAGECONFIG for krb5Jackie Huang2014-10-211-0/+1
| | | | | | | | * fixes floating dependency: WARNING: QA Issue: wireshark rdepends on krb5, but it isn't a build dependency? [build-deps] Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ntp: add status for initscriptWenzong Fan2014-10-211-1/+8
| | | | | Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: add ac_cv_header_valgrind_* to CACHED_CONFIGUREVARSJackie Huang2014-10-211-0/+5
| | | | | | | | | There have been occasions that net-snmp sees valgrind and then later it's not available, adding this setting ensures determinism by disabling it by default Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* tftp-hpa: fix the empty file writing errorRoy.Li2014-10-212-0/+40
| | | | | | | | | | | make write_behind to return 0 if a empty file is written, to distinguish a true writing failure[on which the write_behind will return -1], then the annoying wrong log will disappear. ____ |Error code 3: Disk full or allocation exceeded ----- Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* Revert "tftp-hpa: bug fix on empty file put error"Roy.Li2014-10-212-34/+0
| | | | | | | | | This reverts commit b2eb21a5fbcb065e84ed582e87de21bdc3082f00. It make 3d8520a0b411[tftp-hpa: add error check for disk filled up] unable to work Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* PolarSSL: update package descriptionEduardo Silva2014-10-211-3/+15
| | | | | Signed-off-by: Eduardo Silva <eduardo@monkey.io> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* postfix: remove overriding config config_directoryKang Kai2014-10-211-1/+1
| | | | | | | | | | | | | | | | | | | | | postfix 2.11.1 adds overriding config check. In postinstall script, it calls command newaliases to read configure file main.cf_2.0. config_directory is set in config main.cf_2.0, but it is an overriding config and warning shows when build an image: WARNING: log_check: There is a warn message in the logfile WARNING: log_check: Matched keyword: [warn] WARNING: log_check: newaliases: warning: /buildarea3/kkang/poky/qemuarm-build/tmp/work/qemuarm-poky-linux-gnueabi/core- image-minimal/1.0-r0/rootfs/etc/postfix/main.cf, line 27: overriding earlier entry: config_directory=/buildarea3/kkang/ poky/qemuarm-build/tmp/work/qemuarm-poky-linux-gnueabi/core-image-minimal/1.0-r0/rootfs/etc/postfix Remove config_directory setting in main.cf_2.0 to avoid this warning. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* quagga: remove watchquagga when start with systemdChong.Lu@windriver.com2014-10-211-2/+3
| | | | | | | | | When we start with sysvinit, watchquagga uses quagga init script to monitor zebra daemon. But we need not do this in systemd environment. Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ebtables: fix for sysvinit and systemdChen Qi2014-10-214-166/+192
| | | | | | | | | The solution mainly references Fedora20. Extract the common part of the code and install it into ${sbindir}. Add systemd service file. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* vim: add ncurses-terminfo-base as a runtime dependencyChen Qi2014-10-181-0/+1
| | | | | | | | | | | | Without this patch, we may have problem using vim. Steps to reproduce the problem is as follows: 1. Set NO_RECOMMENDATIONS to "1". 2. bitbake core-image-minimal 3. runqemu qemux86 4. On target, execute `vi 1.txt'. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* libgphoto2: add bash to RDEPENDSAndreas Müller2014-10-161-0/+1
| | | | | | | | fix libgphoto2-2.4.11: libgphoto2 requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
* geany update to 1.24.1Andreas Müller2014-10-161-2/+2
| | | | Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
* xfce4-dev-tools: add bash to RDEPENDSAndreas Müller2014-10-161-0/+2
| | | | | | | | fixes: | WARNING: QA Issue: xfce4-dev-tools requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
* tumbler: make build deterministic by adding PACKAGECONFIG for ↵Andreas Müller2014-10-161-0/+3
| | | | | | | | | | | gstreamer-thumbnailer * disabled by default * fixes: | tumbler-0.1.30: tumbler rdepends on gstreamer1.0, but it isn't a build dependency? [build-deps] | tumbler-0.1.30: tumbler rdepends on libgsttag-1.0, but it isn't a build dependency? [build-deps] Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 13:45:44 +0000