openembedded-core.git/meta/recipes-core, branch pyro Mirror of openembedded-core build-appliance-image: Update to master head revision 2017-05-01T07:56:43+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2017-05-01T07:56:43+00:00 123962018251dfb1d6ca5aa5c0d02534007de3ab Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
build-appliance-image: Update to master head revision 2017-04-29T10:17:55+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2017-04-29T10:17:55+00:00 4fe59183dae7c556363bc885cfda11a38c0d2d47 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
build-appliance-image: Update to master head revision 2017-04-29T10:17:31+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2017-04-29T10:17:31+00:00 766bef5755521960e24ed7192214bf66bbee8354 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
busybox: make bash a valid login shell if enabled 2017-04-29T10:16:25+00:00 Andreas Oberritter obi@opendreambox.org 2017-04-28T18:31:29+00:00 86a2db0b2997fd05882ae0119ef45b1ea5411d39 Add bash to /etc/shells if busybox is built with bash applet anabled to fix login via dropbear. Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Add bash to /etc/shells if busybox is built with bash applet anabled
to fix login via dropbear.

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libxml2: CVE-2016-9318 2017-04-28T10:26:07+00:00 Catalin Enache catalin.enache@windriver.com 2017-04-14T08:43:32+00:00 0dd44c00e3b2fbc3befc3f361624a3a60161d979 libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document. Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9318 Upstream patch: https://git.gnome.org/browse/libxml2/commit/?id=2304078555896cf1638c628f50326aeef6f0e0d0 Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier
and other products, does not offer a flag directly indicating that
the current document may be read but other files may not be opened,
which makes it easier for remote attackers to conduct XML External
Entity (XXE) attacks via a crafted document.

Reference:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9318

Upstream patch:
https://git.gnome.org/browse/libxml2/commit/?id=2304078555896cf1638c628f50326aeef6f0e0d0

Signed-off-by: Catalin Enache <catalin.enache@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
build-appliance-image: Update to master head revision 2017-04-21T07:22:14+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2017-04-21T07:22:14+00:00 e584be78f92ee6f08f570c239698d56ac78d05f9 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
busybox: fix typo in CVE-2016-2147_2.patch Upstream-Status tag 2017-04-21T07:22:00+00:00 Andre McCurdy armccurdy@gmail.com 2017-04-20T00:47:34+00:00 7fe8bb9c736eadbd1201c008e57527cee9de9a71 Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
build-appliance-image: Update to master head revision 2017-04-20T07:16:42+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2017-04-20T07:16:42+00:00 0126fe8934ecae3c91e441c4e1f5a86a15837679 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
build-appliance-image: Update to master head revision 2017-04-20T07:16:12+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2017-04-20T07:16:12+00:00 0b8167fa3e792dac272e24e3f06af88ada90ff14 Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
busybox: drop unmaintained _git recipe 2017-04-13T22:58:19+00:00 Andre McCurdy armccurdy@gmail.com 2017-03-30T18:06:20+00:00 139c97fa7f71a554ce85900ac33054a216db62e9 The busybox _git recipe is not formally tested or kept up to date. The gstreamer _git recipes were recently removed from oe-core and the justifications for that change apply to the busybox _git recipe too. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
The busybox _git recipe is not formally tested or kept up to date.
The gstreamer _git recipes were recently removed from oe-core and the
justifications for that change apply to the busybox _git recipe too.

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>