Consolidated pull request
cover Consolidated pull request
The following changes consist of:
* security fixes
* tzdata & tzcode backports
* fido specific fixes submitted by the community
* backports to support building on the updated Yocto Project autobuilder cluster, with various newer distro versions than when fido was last released
A slightly divergent poky repository, with the correct change backported from meta-yocto to update that local.conf.sample, has been pushed to:
http://git.yoctoproject.org/cgit/cgit.cgi/poky-contrib/log/?h=joshuagl/fido-next
The following changes since commit 1ebf604cae8d9bd3d2c10d06cd126e79e13732ee:
build-appliance-image: Update to fido head revision (2016-03-13 10:52:37 +0000)
are available in the git repository at:
git://git.openembedded.org/openembedded-core-contrib joshuagl/fido-next
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=joshuagl/fido-next
Armin Kuster (6):
tzdata: update to 2016b
tzcode: update to 2016b
tzdata: update to 2016c
tzcode: update to 2016c
tzcode: update to 2016d
tzdata: update to 2016d
Brad Mouring (2):
busybox: Backport patch to fix zcip false-conflict
busybox_git: Fix SRCREV
Joshua Lock (1):
gtk+_2.24.25: backport a fix for building with newer host perl
Mariano Lopez (1):
dhcp: CVE-2015-8605
Richard Purdie (3):
testimage: Handle ipk/deb packaging format tests correctly scripts/oe-pkgdata-util: Fix variable name in error handling
populate_sdk_base: Ensure PKGDATA_DIR exists
Robert Yang (2):
libsdl: depends on libglu when x11
libsdl: depends on libglu when both x11 and opengl
Ross Burton (5):
Revert "libsdl: depends on libglu when x11"
libsdl: expand PACKAGECONFIG and enable native builds
base: check for existing prefix when expanding names in PACKAGECONFIG
xorg-lib: allow native building without x11 DISTRO_FEATURES conf/local.conf.sample: comment out ASSUME_PROVIDED=libsdl-native
Sona Sarmadi (1):
bind: CVE-2016-1285 CVE-2016-1286
meta/classes/base.bbclass | 5 +-
meta/classes/populate_sdk_base.bbclass | 2 +-
meta/classes/testimage.bbclass | 6 +-
meta/conf/local.conf.sample | 7 +-
.../bind/bind/CVE-2016-1285.patch | 141 +++++++++
.../bind/bind/CVE-2016-1286_1.patch | 78 +++++
.../bind/bind/CVE-2016-1286_2.patch | 318 +++++++++++++++++++++
.../bind/bind/fix-typo-in-CVE-2016-1285.patch | 31 ++
meta/recipes-connectivity/bind/bind_9.9.5.bb | 4 +
.../dhcp/dhcp/CVE-2015-8605.patch | 101 +++++++
.../dhcp/dhcp/CVE-2015-8605_1.patch | 131 +++++++++
meta/recipes-connectivity/dhcp/dhcp_4.3.1.bb | 2 +
...wrong-comparison-of-source-IP-with-our-IP.patch | 34 +++
meta/recipes-core/busybox/busybox_1.23.1.bb | 1 +
meta/recipes-core/busybox/busybox_git.bb | 2 +-
...code-native_2016a.bb => tzcode-native_2016d.bb} | 12 +-
.../tzdata/{tzdata_2016a.bb => tzdata_2016d.bb} | 6 +-
.../gtk+/gtk+/Avoid-perl-warnings.patch | 75 +++++
meta/recipes-gnome/gtk+/gtk+_2.24.25.bb | 1 +
meta/recipes-graphics/libsdl/libsdl_1.2.15.bb | 34 +--
meta/recipes-graphics/xorg-lib/xorg-lib-common.inc | 1 +
scripts/oe-pkgdata-util | 2 +-
22 files changed, 960 insertions(+), 34 deletions(-)
create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2016-1285.patch
create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2016-1286_1.patch
create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2016-1286_2.patch
create mode 100644 meta/recipes-connectivity/bind/bind/fix-typo-in-CVE-2016-1285.patch
create mode 100644 meta/recipes-connectivity/dhcp/dhcp/CVE-2015-8605.patch
create mode 100644 meta/recipes-connectivity/dhcp/dhcp/CVE-2015-8605_1.patch
create mode 100644 meta/recipes-core/busybox/busybox/0001-zcip-fix-wrong-comparison-of-source-IP-with-our-IP.patch
rename meta/recipes-extended/tzcode/{tzcode-native_2016a.bb => tzcode-native_2016d.bb} (48%)
rename meta/recipes-extended/tzdata/{tzdata_2016a.bb => tzdata_2016d.bb} (97%)
create mode 100644 meta/recipes-gnome/gtk+/gtk+/Avoid-perl-warnings.patch--
2.5.5
Quoted 44 lines · Joshua Lock
The following changes consist of:
* security fixes
* tzdata & tzcode backports
* fido specific fixes submitted by the community
* backports to support building on the updated Yocto Project autobuilder cluster, with various newer distro versions than when fido was last releasedA slightly divergent poky repository, with the correct change backported from meta-yocto to update that local.conf.sample, has been pushed to:
http://git.yoctoproject.org/cgit/cgit.cgi/poky-contrib/log/?h=joshuagl/fido-next
The following changes since commit
1ebf604cae8d9bd3d2c10d06cd126e79e13732ee:build-appliance-image: Update to fido head revision (2016-03-13 10:52:37 +0000)
are available in the git repository at:
git://git.openembedded.org/openembedded-core-contribjoshuagl/fido-next
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=joshuagl/fido-nextArmin Kuster (6):
tzdata: update to 2016b
tzcode: update to 2016b
tzdata: update to 2016c
tzcode: update to 2016c
tzcode: update to 2016d
tzdata: update to 2016dBrad Mouring (2):
busybox: Backport patch to fix zcip false-conflict
busybox_git: Fix SRCREVJoshua Lock (1):
gtk+_2.24.25: backport a fix for building with newer host perlMariano Lopez (1):
dhcp: CVE-2015-8605Richard Purdie (3):
testimage: Handle ipk/deb packaging format tests correctlyscripts/oe-pkgdata-util: Fix variable name in error handling
populate_sdk_base: EnsurePKGDATA_DIRexists
Quoted 6 lines
Robert Yang (2):
libsdl: depends on libglu when x11
libsdl: depends on libglu when both x11 and openglRoss Burton (5):
Revert "libsdl: depends on libglu when x11"
Why do you want to backport the change and also its revert?
Quoted 49 lines
libsdl: expand PACKAGECONFIG and enable native builds
base: check for existing prefix when expanding names in PACKAGECONFIG
xorg-lib: allow native building without x11DISTRO_FEATURESconf/local.conf.sample: comment out ASSUME_PROVIDED=libsdl-nativeSona Sarmadi (1):
bind: CVE-2016-1285 CVE-2016-1286meta/classes/base.bbclass | 5 +- meta/classes/populate_sdk_base.bbclass | 2 +- meta/classes/testimage.bbclass | 6 +- meta/conf/local.conf.sample | 7 +- .../bind/bind/CVE-2016-1285.patch | 141 +++++++++ .../bind/bind/CVE-2016-1286_1.patch | 78 +++++ .../bind/bind/CVE-2016-1286_2.patch | 318 +++++++++++++++++++++ .../bind/bind/fix-typo-in-CVE-2016-1285.patch | 31 ++ meta/recipes-connectivity/bind/bind_9.9.5.bb | 4 + .../dhcp/dhcp/CVE-2015-8605.patch | 101 +++++++ .../dhcp/dhcp/CVE-2015-8605_1.patch | 131 +++++++++ meta/recipes-connectivity/dhcp/dhcp_4.3.1.bb | 2 + ...wrong-comparison-of-source-IP-with-our-IP.patch | 34 +++ meta/recipes-core/busybox/busybox_1.23.1.bb | 1 + meta/recipes-core/busybox/busybox_git.bb | 2 +- ...code-native_2016a.bb => tzcode-native_2016d.bb} | 12 +- .../tzdata/{tzdata_2016a.bb => tzdata_2016d.bb} | 6 +- .../gtk+/gtk+/Avoid-perl-warnings.patch | 75 +++++ meta/recipes-gnome/gtk+/gtk+_2.24.25.bb | 1 + meta/recipes-graphics/libsdl/libsdl_1.2.15.bb | 34 +-- meta/recipes-graphics/xorg-lib/xorg-lib-common.inc | 1 + scripts/oe-pkgdata-util | 2 +- 22 files changed, 960 insertions(+), 34 deletions(-) create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2016-1285.patch create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2016-1286_1.patch create mode 100644 meta/recipes-connectivity/bind/bind/CVE-2016-1286_2.patch create mode 100644 meta/recipes-connectivity/bind/bind/fix-typo-in-CVE-2016-1285.patch create mode 100644 meta/recipes-connectivity/dhcp/dhcp/CVE-2015-8605.patch create mode 100644 meta/recipes-connectivity/dhcp/dhcp/CVE-2015-8605_1.patch create mode 100644 meta/recipes-core/busybox/busybox/0001-zcip-fix-wrong-comparison-of-source-IP-with-our-IP.patch rename meta/recipes-extended/tzcode/{tzcode-native_2016a.bb => tzcode-native_2016d.bb} (48%) rename meta/recipes-extended/tzdata/{tzdata_2016a.bb => tzdata_2016d.bb} (97%) create mode 100644 meta/recipes-gnome/gtk+/gtk+/Avoid-perl-warnings.patch--
2.5.5Signature · 4 lines
_______________________________________________ Openembedded-core mailing list [email protected] http://lists.openembedded.org/mailman/listinfo/openembedded-core
Signature · 1 line
Martin 'JaMa' Jansa jabber: [email protected]
Quoted 1 line · Martin Jansa
On Fri, May 06, 2016 at 03:34:11PM +0100, Joshua Lock wrote:
<snip>
Quoted 3 lines
Quoted 2 lines
Ross Burton (5):
Revert "libsdl: depends on libglu when x11"Why do you want to backport the change and also its revert?
Good catch, removed in the repos on *-contrib.
Thanks,
Joshua