openembedded-core.git/meta/recipes-extended, branch master-next Mirror of openembedded-core diffutils: Fix build with gcc7 2017-05-04T12:49:46+00:00 Khem Raj raj.khem@gmail.com 2017-04-16T14:57:44+00:00 8a087df77cb17bfa3145632ad2fa9f8fc1169367 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
mdadm: Backport and make fixes for building with gcc7 2017-05-04T12:49:46+00:00 Khem Raj raj.khem@gmail.com 2017-04-20T02:31:47+00:00 25372ee708e2fb2cefab4840a7f1e115344da8af Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
pax: Fix build with gcc7 2017-05-04T12:49:46+00:00 Khem Raj raj.khem@gmail.com 2017-04-20T02:31:45+00:00 53e288a0beaa2bb2a927eeb6c342d0200b0c9608 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
libtirpc: Enable des APIs for musl 2017-05-04T12:49:46+00:00 Khem Raj raj.khem@gmail.com 2017-04-18T16:40:13+00:00 f8160dfa979c30bcf76d4963589bf523d1b23080 Use memset() API instead of __bzero() Drop the patch removing des_* functions for musl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
Use memset() API instead of __bzero()
Drop the patch removing des_* functions for musl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
libtirpc: Expose key_secretkey_is_set API 2017-05-04T12:49:46+00:00 Khem Raj raj.khem@gmail.com 2017-04-19T16:45:45+00:00 1aaac113cb706ec1b180035735e0e93aec2d3e3a libnsl needs this API Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
libnsl needs this API

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
libidn: Fix build with gcc7 2017-05-04T12:49:46+00:00 Khem Raj raj.khem@gmail.com 2017-04-19T01:58:39+00:00 0cc68a51c5009032479d351da5ecabe27244f934 Replace a local patch for format warning with the one that got committed upstream Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
Replace a local patch for format warning with the one
that got committed upstream

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
rpcbind: Remove uneeded patches 2017-05-04T12:49:46+00:00 Khem Raj raj.khem@gmail.com 2017-04-19T01:58:38+00:00 dcb79de418e4c916f742a95375b1250817285db0 We were carrying patches which are no longer needed when building rpcbind for musl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
We were carrying patches which are no longer
needed when building rpcbind for musl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
libtirpc: Backport fixes from 1.0.2rc3 2017-05-04T12:49:46+00:00 Khem Raj raj.khem@gmail.com 2017-04-19T01:58:35+00:00 891010ed11462db6f221b9cd6a1569ac5c64296d These fixes are needed for it to work with gcc7 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
These fixes are needed for it to work with gcc7

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
libsolv: switch on ENABLE_COMPLEX_DEPS 2017-05-04T12:49:46+00:00 Alexander Kanavin alexander.kanavin@linux.intel.com 2017-04-21T12:39:55+00:00 ee3aef3baaa0e57f1c9c8f90a7a05a7bfbd42022 This is required by recent versions of libdnf. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
This is required by recent versions of libdnf.

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
ghostscript : CVE-2016-10219, CVE-2016-10220, CVE-2017-5951 2017-04-28T10:26:07+00:00 Catalin Enache catalin.enache@windriver.com 2017-04-21T12:04:17+00:00 6679a4d4379f6f18554ed0042546cce94d5d0b19 The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file. The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file that is mishandled in the PDF Transparency module. The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10219 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10220 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5951 Upstream patches: http://git.ghostscript.com/?p=ghostpdl.git;h=4bef1a1d32e29b68855616020dbff574b9cda08f http://git.ghostscript.com/?p=ghostpdl.git;h=daf85701dab05f17e924a48a81edc9195b4a04e8 http://git.ghostscript.com/?p=ghostpdl.git;h=bfa6b2ecbe48edc69a7d9d22a12419aed25960b8 Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> 
The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript
9.20 allows remote attackers to cause a denial of service (divide-by-zero
error and application crash) via a crafted file.

The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc.
Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL
pointer dereference and application crash) via a crafted file that is
mishandled in the PDF Transparency module.

The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc.
Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL
pointer dereference and application crash) via a crafted file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10219
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10220
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5951

Upstream patches:
http://git.ghostscript.com/?p=ghostpdl.git;h=4bef1a1d32e29b68855616020dbff574b9cda08f
http://git.ghostscript.com/?p=ghostpdl.git;h=daf85701dab05f17e924a48a81edc9195b4a04e8
http://git.ghostscript.com/?p=ghostpdl.git;h=bfa6b2ecbe48edc69a7d9d22a12419aed25960b8

Signed-off-by: Catalin Enache <catalin.enache@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>