openembedded-core.git/meta/recipes-extended/cpio, branch dizzy Mirror of openembedded-core cpio: fix CVE-2015-1197 2015-04-17T21:38:34+00:00 Robert Yang liezhi.yang@windriver.com 2015-03-26T09:18:09+00:00 68aaca0ff60a9cc770583d3dd89b0c4281b88675 Additional directory traversal vulnerability via symlinks cpio CVE-2015-1197 Initial report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669 Upstream report: https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html And fix the indent in SRC_URI. [YOCTO #7182] (From OE-Core rev: af18ce070bd1c73f3619d6370928fe7e2e06ff5e) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> 
Additional directory traversal vulnerability via symlinks
cpio CVE-2015-1197

Initial report:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669
Upstream report:
https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html

And fix the indent in SRC_URI.

[YOCTO #7182]

(From OE-Core rev: af18ce070bd1c73f3619d6370928fe7e2e06ff5e)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
cpio: fix bug CVE-2014-9112 for cpio-2.11 2014-12-31T10:17:00+00:00 Bian Naimeng biannm@cn.fujitsu.com 2014-12-08T05:45:07+00:00 f5c196fdde79402119ae1893c6150b4bfbc137a1 Obtain detain from following URL. http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d (From OE-Core rev: 9a32da05f5a9bc62c592fd2d6057dc052e363261) Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> 
Obtain detain from following URL.
  http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html
  http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d

(From OE-Core rev: 9a32da05f5a9bc62c592fd2d6057dc052e363261)

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
cpio: fix bug CVE-2014-9112 for cpio-2.8 2014-12-31T10:16:59+00:00 Bian Naimeng biannm@cn.fujitsu.com 2014-12-08T05:45:06+00:00 695d14dc92d7de89ae02dac0928f184519b8b57d Obtain detain from following URL. http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d (From OE-Core rev: 732fc8de55a9c7987608162879959c03423de907) Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> 
Obtain detain from following URL.
http://lists.gnu.org/archive/html/bug-cpio/2014-12/msg00000.html
http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=746f3ff670dcfcdd28fcc990e79cd6fccc7ae48d

(From OE-Core rev: 732fc8de55a9c7987608162879959c03423de907)

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it. 2014-05-01T22:17:50+00:00 Max Eliaser max.eliaser@intel.com 2014-05-01T20:00:28+00:00 e6fb2f9afe2ba6b676c46d1eb297ca9cc532d405 The class itself currently does nothing. The idea is to mark all recipes that make use of the texinfo utilities. In the future, this class could be used to suppress the generation/formatting of documentation for performance, explicitly track dependencies on these utilities, and eliminate Yocto's current dependency on the host system's texinfo utilities. Signed-off-by: Max Eliaser <max.eliaser@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
The class itself currently does nothing. The idea is to mark all recipes that
make use of the texinfo utilities. In the future, this class could be used to
suppress the generation/formatting of documentation for performance,
explicitly track dependencies on these utilities, and eliminate Yocto's
current dependency on the host system's texinfo utilities.

Signed-off-by: Max Eliaser <max.eliaser@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
cpio: Split RMT from cpio 2012-12-06T12:30:31+00:00 Mark Hatle mark.hatle@windriver.com 2012-11-15T21:26:09+00:00 487d58a98cd9fe4b368f0e7d119f8ff7ac852781 After the recent change of the libexecdir definition, the update-alternatives for the libexec rmt broke. Fix this by moving rmt from libexec to /sbin. Also split the rmt app from cpio as it's likely not useful to many users. Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> 
After the recent change of the libexecdir definition, the update-alternatives
for the libexec rmt broke.  Fix this by moving rmt from libexec to /sbin.  Also
split the rmt app from cpio as it's likely not useful to many users.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
grub,guile,cpio,tar,wget: Fix gnulib for absense of gets in eglibc 2012-07-17T09:42:34+00:00 Khem Raj raj.khem@gmail.com 2012-07-04T19:30:07+00:00 497d8d82b8e7e04a457a7fdd689c657903218c0d eglibc 2.16 does not export gets anymore Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
eglibc 2.16 does not export gets anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
cpio: use new update-alternatives 2012-05-30T09:45:33+00:00 Mark Hatle mark.hatle@windriver.com 2012-05-21T21:17:40+00:00 6dee3050a4a0c4f3cc9fec23a0bc02155d680863 Signed-off-by: Mark Hatle <mark.hatle@windriver.com> 
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
cpio: Fix unpackaged files warnings 2012-03-16T16:46:28+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2012-03-16T14:57:08+00:00 da88ac4b30a367641451167868bd8fc48010f646 WARNING: For recipe cpio, the following files/directories were installed but not shipped in any package: WARNING: /usr/bin Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
WARNING: For recipe cpio, the following files/directories were installed but not shipped in any package:
WARNING:   /usr/bin

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
gplv2 recipes update upstream status of patches 2011-05-23T14:33:55+00:00 Nitin A Kamble nitin.a.kamble@intel.com 2011-05-19T22:45:12+00:00 fbc0fdbbb759b37d97de6f28daf04055531fbe0b grep-2.5.1a: update upstream status of patches tar-1.17: update upstream-status of patches at-3.1.12: update upstream-status for patches cpio-2.8: update upstream-status for patches Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com> 
grep-2.5.1a: update upstream status of patches
tar-1.17: update upstream-status of patches
at-3.1.12: update upstream-status for patches
cpio-2.8: update upstream-status for patches

Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com>
recipes: Add Upstream-Status to various recipe patches 2011-05-17T13:38:51+00:00 Scott Garman scott.a.garman@intel.com 2011-05-16T03:04:27+00:00 0702602332ad63c2cfaa207516497bb0b75bfdf3 Add Upstream-Status tag to patches for the following recipes: openssh dbus-glib expat opensp sgml-common at cpio (GPLv3 version) libpam icu Signed-off-by: Scott Garman <scott.a.garman@intel.com> 
Add Upstream-Status tag to patches for the following recipes:

openssh
dbus-glib
expat
opensp
sgml-common
at
cpio (GPLv3 version)
libpam
icu

Signed-off-by: Scott Garman <scott.a.garman@intel.com>