CVE-2013-7459: Heap-based buffer overflow in the ALGnew function in
block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows
remote attackers to execute arbitrary code as demonstrated by a crafted
iv parameter to cryptmsg.py.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2013-7459
Patch from:
8dbe0dc3ee
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit e4af9cf961c70bb4a96eaafd995d0ff2c264cb8e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Immediate expansion for PERLVERSION(in perl-version.bbclass)
is too early, it will result in 'None' before perl is built,
then the module file is installed incorrectly:
$ rpm -ql adduser|grep Common
/usr/lib/perl/None/Debian/AdduserCommon.pm
So use get_perl_version directly instead of PERLVERSION.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This fixes following errors when compiling with clang:
| ../json_spirit/libjson_spirit.so.4.0.8: error: undefined reference to '__atomic_load_4'
| ../json_spirit/libjson_spirit.so.4.0.8: error: undefined reference to '__atomic_compare_exchange_4'
| ../json_spirit/libjson_spirit.so.4.0.8: error: undefined reference to '__atomic_fetch_sub_4'
| ../json_spirit/libjson_spirit.so.4.0.8: error: undefined reference to '__atomic_fetch_add_4'
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit ac2a6d2b5d69937577effcb8bb2149651bac0176)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Dont hardcode cpp to point to gcc collection, helps
compiling with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
License checksum changed due to opyright year changed to 2017
Fix build with clang/hardening
ak] 7.1.x updates are bug or security fixes only. no new functions. Per PHP policy.
so update makes sence IMHO
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit ad9df2b36a57d5a2760dc5924e8fa91201916bc0)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The uim-anthy package is created that empty.
To avoid this problem by defining a packages with a rough PATH list after the uim-anthy package.
Signed-off-by: Yusuke Mitsuki <mickey.happygolucky@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit f1d6a486846862bda3874fe8b1b02885a0a8dc23)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
It is used in NVD database for CVE's like:
https://nvd.nist.gov/vuln/detail/CVE-2016-3120
Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 236ca5e37c5368cdaf95e02d395f6e2479cd98b3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
gnu_fribidi is used in NVD for CVE's like:
https://nvd.nist.gov/vuln/detail/CVE-2010-3444
Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 854b98c05acb416f46846428425c97b53e87d987)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
It is used in NVD for CVE's like:
https://nvd.nist.gov/vuln/detail/CVE-2014-0004
Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 57fac9d8ac44a6f9dce38b47224aba639eec3b8d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Its unused, moreover it helps it compile with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 43022b71013e4fd992a7b381d70dea2df59de127)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
We were passing empty string '' to make as option when
ISA was not thumb this breaks build for machines/distros
which do not use ARM_INSTRUCTION_SET = thumb
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit cafe21e8a20610deffa3b79af223b939518ef9a8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
:**/fuse*.bb
* Assert INITSCRIPT_PARAMS to install the fuse initscript according to
its LSB header instead of defaults. Script now starts only during
runlevel 'S'.
* Also set priority to 03 such that fuse is loaded before udev. This
enables systems which utilize udev to mount exfat and other
fuse-provided filesystems as a part of the boot process.
Natinst-CAR-ID: 630632
Signed-off-by: Alex Stewart <alex.stewart@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit a246dd26a5af8f9b23a98756ce0bcfc21d91a17e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Because github archives can be regenerated from time to time, update
SRC_URI with git fetcher for gflags.
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 65a4fce6d8ab6547d57985e0ee2a8e197aadca64)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This is needed for hard float ABI selection options
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andrea Adami <andrea.adami@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit c6afff8d92a37f592030713196a9f66d02c0aa4a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
klibc failed to build with armv7+ when using thumb2
it needed to resepct TUNE_CCARGS
Add patches to fix build with musl, to sort out
the linux header maze.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andrea Adami <andrea.adami@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 15266c135acec3efdd4dfa1b504a266b5efcbf6b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
It uses symbols from libpthread e.g. pthread_mutexattr_init and pthread_mutexattr_settype
but does not link with pthreads, gold is strict about it and calls out with an error
../src/.libs/libdbus-c++-1.so: error: undefined reference to 'pthread_mutexattr_init'
../src/.libs/libdbus-c++-1.so: error: undefined reference to 'pthread_mutexattr_settype'
Therefore correct the linker cmdline
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 592e9f26cca4944adf4e534af5794680f07d098c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
DEBUG: Executing shell function BUILDSPEC
| error: line 109: %package -n mtp-tools: package mtp-tools already exists
Yes, there are two entries in libmtp.spec. Under packages-split, mtp-tools is empty but
libmtp-bin is not.
Removed PKG_${PN}-bin , this alignes how Debian split its packages
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The ltrace package fails to build under icecream distributed compiler
because of harmless warning emitted during preprocessing. See the patch
itself for more information.
Colleague of mine has submitted the patch but I'm afraid that the
project is dead.
Please note that icecream support in oe-core has some issues currently.
I have some local fixes and I plan to send them.
Signed-off-by: Tomas Novotny <tomas@novotny.cz>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This is because when using fortify warnings we need to have
some level of optimization, while we append warnings to CC
we dont do the same for optimization, which results in compile
failures when doing build with hardened flags
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
