- Dec 18, 2015
-
-
Philip Balister authored
Signed-off-by:
Philip Balister <philip@balister.org> Signed-off-by:
Martin Jansa <Martin.Jansa@gmail.com>
-
Robert Yang authored
Fixed: dracut-043+giteab03540cd695d940062af5b55c02e8829aaa526: dracut: /dracut/usr/lib/dracut/modules.d/99img-lib/img-lib.sh is owned by uid 15220, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated] lib32-dracut-043+giteab03540cd695d940062af5b55c02e8829aaa526: lib32-dracut: /lib32-dracut/usr/lib/dracut/modules.d/99img-lib/img-lib.sh is owned by uid 15220, which is the same as the user running bitbake. This may be due to host contamination [host-user-contaminated] Its Makefile uses cp -arx to install modules.d, so fix the owner to root:root Signed-off-by:
Robert Yang <liezhi.yang@windriver.com> Signed-off-by:
-
Rafaël Carré authored
Signed-off-by: -
Rafaël Carré authored
Enable it by default. Make both dvdread and dvdnav also depend on libdvdcss Signed-off-by: -
Rafaël Carré authored
Enable it by default Signed-off-by: -
Rafaël Carré authored
Enable it by default Signed-off-by: -
Rafaël Carré authored
Signed-off-by: -
Rafaël Carré authored
They are only needed if the modules introduced in ea319464 are enabled. Add these modules to default PACKAGECONFIG to keep existing defaults. Signed-off-by:
-
Hongxu Jia authored
Backport two patches from uptream to fix test failure with openssl 1.0.2b or above. Signed-off-by:
Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by:
-
Hongxu Jia authored
There is a build failure while installing libhtml-tree-perl to sdk: ... |Computing transaction...error: Can't install nativesdk-libhtml-tree- perl-5.03-r0.1@x86_64_nativesdk: no package provides tmp/sysroots/ x86_64-linux/usr/bin/perl-native/perl.real ... The rpm detects the shebang of perl script, so we correct it. Signed-off-by:
-
Nicolas Ferre authored
Python-evdev is a Python module that gives access to the input event interface from userspace. https://python-evdev.readthedocs.org/en/latest/ Signed-off-by:
Nicolas Ferre <nicolas.ferre@atmel.com> Signed-off-by:
-
Scott Ellis authored
The python-requests module has runtime dependencies. Signed-off-by:
Scott Ellis <scott@jumpnowtek.com> Signed-off-by:
-
Andre McCurdy authored
https://github.com/libjpeg-turbo/libjpeg-turbo/blob/1.4.2/ChangeLog.txt 1.4.2 ===== [1] Fixed an issue whereby cjpeg would segfault if a Windows bitmap with a negative width or height was used as an input image (Windows bitmaps can have a negative height if they are stored in top-down order, but such files are rare and not supported by libjpeg-turbo.) [2] Fixed an issue whereby, under certain circumstances, libjpeg-turbo would incorrectly encode certain JPEG images when quality=100 and the fast integer forward DCT were used. This was known to cause 'make test' to fail when the library was built with '-march=haswell' on x86 systems. [3] Fixed an issue whereby libjpeg-turbo would crash when built with the latest & greatest development version of the Clang/LLVM compiler. This was caused by an x86-64 ABI conformance issue in some of libjpeg-turbo's 64-bit SSE2 SIMD routines. Those routines were incorrectly using a 64-bit mov instruction to transfer a 32-bit JDIMENSION argument, whereas the x86-64 ABI allows the upper (unused) 32 bits of a 32-bit argument's register to be undefined. The new Clang/LLVM optimizer uses load combining to transfer multiple adjacent 32-bit structure members into a single 64-bit register, and this exposed the ABI conformance issue. [4] Fixed a bug in the MIPS DSPr2 4:2:0 "plain" (non-fancy and non-merged) upsampling routine that caused a buffer overflow (and subsequent segfault) when decompressing a 4:2:0 JPEG image whose scaled output width was less than 16 pixels. The "plain" upsampling routines are normally only used when decompressing a non-YCbCr JPEG image, but they are also used when decompressing a JPEG image whose scaled output height is 1. [5] Fixed various negative left shifts and other issues reported by the GCC and Clang undefined behavior sanitizers. None of these was known to pose a security threat, but removing the warnings makes it easier to detect actual security issues, should they arise in the future. Signed-off-by:
Andre McCurdy <armccurdy@gmail.com> Signed-off-by:
-
Steffen Sledz authored
Use ALTERNATIVE mechanism in OE to manage the syslog service to avoid conflicts with other syslog implementations like rsyslog or busybox. Signed-off-by:
Steffen Sledz <sledz@dresearch-fe.de> Signed-off-by:
-
Wenzong Fan authored
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd Signed-off-by:
Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by:
-
Wenzong Fan authored
The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789 Signed-off-by:
-
Wenzong Fan authored
lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a Signed-off-by:
-
Wenzong Fan authored
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call. Backport upstream commit to fix it: https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d Signed-off-by:
-
Manuel Bachmann authored
dleyna-renderer is a library for implementing Digital Media (DLNA) Renderers, and also provides a sample implementation of such a renderer. "dleyna-renderer-service" is designed to be started and consumed using D-Bus. Signed-off-by:
Manuel Bachmann <manuel.bachmann@iot.bzh> Signed-off-by:
-
Manuel Bachmann authored
dleyna-server is a library for implementing Digital Media (DLNA) Servers, and also provides a sample implementation of such a server. "dleyna-server-service" is designed to be started and consumed using D-Bus. Signed-off-by:
-
Manuel Bachmann authored
dleyna-connector-dbus is a D-Bus connector library depending on "dleyna-core", and needed by dLeyna implementations (most notably "dleyna-server" and "dleyna-renderer"). It allows them to discover D-Bus buses, and to be started via D-Bus services files. Signed-off-by:
-
Manuel Bachmann authored
dleyna-core is a library of utility functions needed by other dLeyna packages (most notably "dleyna-connector-dbus" "dleyna-server" and "dleyna-renderer"). It provides APIs for logging, error, settings, task management and an IPC abstraction API. Signed-off-by:
-
Adrian authored
Signed-off-by:
Adrian Freihofer <adrian.freihofer@gmail.com> Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
Signed-off-by:
-
Adrian authored
- Fixes segfaults, memleaks and other bugs - Support more modems Signed-off-by:
-
- Nov 30, 2015
-
-
Armin Kuster authored
restore PE updated comments: QT is the new default GUI for the binary 'wireshark'. This mode is currently disabled in the build. We build with GTK as the default gui so the resulting binary is now wireshark-gtk. Signed-off-by:
Armin Kuster <akuster808@gmail.com> Signed-off-by:
Joe MacDonald <joe_macdonald@mentor.com>
-
Roy Li authored
ufw needs lots of netfilter module to run Signed-off-by:
Roy Li <rongqing.li@windriver.com> Signed-off-by:
-
Jackie Huang authored
Kernel modules may not have the same architecture as user space. So we tell INSANE_SKIP to skip checking the arch for the modules. This is consistent with other kernel modules and the kernel recipe. Signed-off-by:
Jackie Huang <jackie.huang@windriver.com> Signed-off-by:
Mark Hatle <mark.hatle@windriver.com> Signed-off-by:
-
