openembedded-core.git/meta/recipes-support, branch krogoth Mirror of openembedded-core curl: security fix for CVE-2016-7141 2016-09-23T14:26:09+00:00 Sona Sarmadi sona.sarmadi@enea.com 2016-09-08T13:33:50+00:00 fb8f291d9ea2ebc011403f72cb91af372a795091 Affected versions: Affected versions: libcurl 7.19.6 to and including 7.50.1 Not affected versions: libcurl >= 7.50.2 Reference to upstream patch: https://curl.haxx.se/CVE-2016-7141.patch Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 
Affected versions:
    Affected versions: libcurl 7.19.6 to and including 7.50.1
    Not affected versions: libcurl >= 7.50.2

Reference to upstream patch:
https://curl.haxx.se/CVE-2016-7141.patch

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
curl: security fix for CVE-2016-5421 2016-09-02T07:48:04+00:00 Maxin B. John maxin.john@intel.com 2016-08-22T11:15:41+00:00 2a9f4823483b6f5decc6d504858f06f66ab9e06c Affected versions: libcurl 7.32.0 to and including 7.50.0 Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Affected versions: libcurl 7.32.0 to and including 7.50.0

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
curl: security fix for CVE-2016-5420 2016-09-02T07:48:04+00:00 Maxin B. John maxin.john@intel.com 2016-08-22T11:15:40+00:00 cc567d8fb9eca630cd21d40ece99babcc5b7d045 Affected versions: libcurl 7.1 to and including 7.50.0 Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Affected versions: libcurl 7.1 to and including 7.50.0

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
curl: security fix for CVE-2016-5419 2016-09-02T07:48:04+00:00 Maxin B. John maxin.john@intel.com 2016-08-22T11:15:39+00:00 0b56a2f6174a44495f8a58dc0864c161ffd37b80 Affected versions: libcurl 7.1 to and including 7.50.0 Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Affected versions: libcurl 7.1 to and including 7.50.0

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
lzop: Fix build with gcc-6 2016-08-25T22:09:04+00:00 Khem Raj raj.khem@gmail.com 2016-08-25T21:01:18+00:00 384ca1c459d28ed2e1b4290e05e88cf4aef2dc6a Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
libproxy: use snapshot.debian.org for SRC_URI 2016-08-01T11:14:31+00:00 Maxin B. John maxin.john@intel.com 2016-07-28T13:38:27+00:00 85ab50390edd3c0de632386da71ccc9256d4d4c5 Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will only contain releases that are currently in Debian. So, move all of SRC_URI to the .bb so it can use snapshot.debian.org instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues to work. [YOCTO #10040] Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 
Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will
only contain releases that are currently in Debian.

So, move all of SRC_URI to the .bb so it can use snapshot.debian.org
instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream
release checking continues to work.

[YOCTO #10040]

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
serf: use snapshot.debian.org for SRC_URI 2016-08-01T11:14:17+00:00 Maxin B. John maxin.john@intel.com 2016-07-28T12:15:13+00:00 114ac0213c0f80ac4192bd7ab7b1a5c974a965e8 Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will only contain releases that are currently in Debian. So, move all of SRC_URI to the .bb so it can use snapshot.debian.org instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues to work. [YOCTO #10040] Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 
Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will
only contain releases that are currently in Debian. So, move all of SRC_URI
to the .bb so it can use snapshot.debian.org instead, and set
UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues
to work.

[YOCTO #10040]

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
nss: fix build for gcc-6 2016-07-27T07:33:24+00:00 Tim Orling timothy.t.orling@linux.intel.com 2016-07-17T18:37:23+00:00 1882abd101d211e5ab3f1a0a77580395778e6301 [YOCTO #9897] (Fedora-24 host is gcc-6) Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 
[YOCTO #9897] (Fedora-24 host is gcc-6)

Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
libpcre: Fix CVE-2016-3191 2016-06-29T18:34:41+00:00 Ismo Puustinen ismo.puustinen@intel.com 2016-05-04T13:06:46+00:00 4d3dad3329c8a9c9bb5254bb329031e9d2dafd7b Fix workspace overflow for (*ACCEPT) with deeply nested parentheses. The patch is from libpcre version control at http://vcs.pcre.org/pcre?view=revision&revision=1631 with the ChangeLog part removed. Original author is Philip Hazel. (From OE-Core rev: 386534f968f4da376ba7778b5d436bad4ce8355b) Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> 
Fix workspace overflow for (*ACCEPT) with deeply nested parentheses.

The patch is from libpcre version control at
http://vcs.pcre.org/pcre?view=revision&revision=1631 with the ChangeLog
part removed. Original author is Philip Hazel.

(From OE-Core rev: 386534f968f4da376ba7778b5d436bad4ce8355b)

Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>
popt: fix dependencies and QA Issue 2016-06-29T18:33:25+00:00 Maxin B. John maxin.john@intel.com 2016-04-26T08:48:23+00:00 df05fa063c6d0b41156c8af9b46cf894176500e6 Fix the following QA warning: WARNING: popt-1.16-r3 do_package_qa: QA Issue: popt rdepends on libiconv, but it isn't a build dependency, missing libiconv in DEPENDS or PACKAGECONFIG? [build-deps] (From OE-Core rev: 08aeb5a9e0067e2e9e0fba8614409102e5a0a00e) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> 
Fix the following QA warning:

WARNING: popt-1.16-r3 do_package_qa: QA Issue: popt rdepends on
libiconv, but it isn't a build dependency, missing libiconv in DEPENDS
or PACKAGECONFIG? [build-deps]

(From OE-Core rev: 08aeb5a9e0067e2e9e0fba8614409102e5a0a00e)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster@mvista.com>