Skip to contentSkip to conversation

Patches and Updates

PATCH In review Saul Wold 1 participant 8 messages Mar 4, 2014 – Mar 6, 2014

lore
Share & tools
lore

Saul Wold

author
#0 lore raw

cover Patches and Updates

Ricahrd,

Some patches and updates that I have been working on to resolve various issues.

The bind and dhcp go hand in hand and address some CVE issues.

Sau!

The following changes since commit 82c773e88aaefd9321481ad297554d5b4a3ae0b2:

Revert "ncurses: use ln -r to generate relative symlink" (2014-03-03 15:52:26 +0000)

are available in the git repository at:

git://git.openembedded.org/openembedded-core-contrib sgw/updates
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=sgw/updates

Saul Wold (6):
util-linux: Update to 2.24.1
bind: Update to 9.9.5
dhcp: Update to 4.3.0
grub-efi: use autotools-brokensep
parted: add patch to handle deprecated readline function
security_flags: Update to correctly link X modules

 meta/conf/distro/include/security_flags.inc        |   9 ++
 meta/recipes-bsp/grub/grub-efi_2.00.bb             |   2 +-
 .../bind-9.8.1-CVE-2012-5166.patch                 |   0
 .../{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch  |   0
 .../{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch  |   0
 .../{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch  |   0
 .../{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch  |   0
 .../bind-Fix-CVE-2012-4244.patch                   |   0
 .../bind/{bind-9.8.1 => bind}/conf.patch           |   0
 .../{bind-9.8.1 => bind}/cross-build-fix.patch     |   0
 .../make-etc-initd-bind-stop-work.patch            |   0
 .../mips1-not-support-opcode.diff                  |   0
 .../bind/{bind_9.8.1.bb => bind_9.9.5.bb}          |  15 +--
 meta/recipes-connectivity/dhcp/dhcp.inc            |   2 +-
 .../dhcp/dhcp/fix-external-bind.patch              | 115 +++++++++++----------
 meta/recipes-connectivity/dhcp/dhcp_4.2.5-P1.bb    |  12 ---
 meta/recipes-core/util-linux/util-linux.inc        |  12 +--
 .../{util-linux_2.23.2.bb => util-linux_2.24.1.bb} |   7 +-
 .../parted-3.1/fix-deprecated-readline.patch       |  34 ++++++
 meta/recipes-extended/parted/parted_3.1.bb         |   1 +
 20 files changed, 121 insertions(+), 88 deletions(-)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-9.8.1-CVE-2012-5166.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-Fix-CVE-2012-4244.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/conf.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/cross-build-fix.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/make-etc-initd-bind-stop-work.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/mips1-not-support-opcode.diff (100%)
 rename meta/recipes-connectivity/bind/{bind_9.8.1.bb => bind_9.9.5.bb} (77%)
 delete mode 100644 meta/recipes-connectivity/dhcp/dhcp_4.2.5-P1.bb
 rename meta/recipes-core/util-linux/{util-linux_2.23.2.bb => util-linux_2.24.1.bb} (79%)
 create mode 100644 meta/recipes-extended/parted/parted-3.1/fix-deprecated-readline.patch
Signature · 1 line
1.8.3.1
author
#1 lore raw

PATCH 1/6 util-linux: Update to 2.24.1

---
 meta/recipes-core/util-linux/util-linux.inc                  | 12 ++++++------
 .../{util-linux_2.23.2.bb => util-linux_2.24.1.bb}           |  7 +++----
 2 files changed, 9 insertions(+), 10 deletions(-)
 rename meta/recipes-core/util-linux/{util-linux_2.23.2.bb => util-linux_2.24.1.bb} (79%)
meta/recipes-core/util-linux/util-linux.inc +6 -6
index 4c80bf2..51c982a 100644
@@ -7,22 +7,22 @@ SECTION = "base"
 
 LICENSE = "GPLv2+ & LGPLv2.1+ & BSD"
 
-LIC_FILES_CHKSUM = "file://README.licensing;md5=679af3e410ee112a5ec94de6501bf5c3 \
+LIC_FILES_CHKSUM = "file://README.licensing;md5=1715f5ee3e01203ca1e1e0b9ee65918c \
                     file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
                     file://Documentation/licenses/COPYING.GPLv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
                     file://Documentation/licenses/COPYING.LGPLv2.1;md5=4fbd65380cdd255951079008b364516c \
                     file://Documentation/licenses/COPYING.BSD-3;md5=58dcd8452651fc8b07d1f65ce07ca8af \
                     file://Documentation/licenses/COPYING.UCB;md5=263860f8968d8bafa5392cab74285262 \
-                    file://libuuid/COPYING;md5=aa3ac5b4a5bcb707f714f78794011b80 \
-                    file://libmount/COPYING;md5=152f98bc301a5ea649769ede7203ac82 \
-                    file://libblkid/COPYING;md5=152f98bc301a5ea649769ede7203ac82"
+                    file://libuuid/COPYING;md5=b442ffb762cf8d3e9df1b99e0bb4af70 \
+                    file://libmount/COPYING;md5=fb93f01d4361069c5616327705373b16 \
+                    file://libblkid/COPYING;md5=fb93f01d4361069c5616327705373b16"
 
 inherit autotools gettext pkgconfig systemd
 DEPENDS = "zlib ncurses"
 DEPENDS_append_class-native = " lzo-native"
 DEPENDS_append_class-nativesdk = " lzo-native"
 
-SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-linux-${PV}.tar.bz2 \
+SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-linux-${PV}.tar.xz \
            file://MCONFIG \
            file://defines.h \
            file://make_include \
@@ -39,7 +39,7 @@ PACKAGES =+ "util-linux-agetty util-linux-fdisk util-linux-cfdisk util-linux-sfd
              util-linux-partx ${PN}-bash-completion"
 
 SHARED_EXTRA_OECONF = "--disable-use-tty-group \
-                       --disable-makeinstall-chown --enable-elvtune \
+                       --disable-makeinstall-chown \
                        --enable-kill --enable-last --enable-mesg --enable-partx \
                        --enable-raw --enable-reset --disable-login \
                        --disable-vipw --disable-newgrp --disable-chfn-chsh \
meta/recipes-core/util-linux/util-linux_2.24.1.bb renamed from meta/recipes-core/util-linux/util-linux_2.23.2.bb +3 -4
similarity index 79%
rename from meta/recipes-core/util-linux/util-linux_2.23.2.bb
rename to meta/recipes-core/util-linux/util-linux_2.24.1.bb
index f65932c..dd65566 100644
@@ -1,4 +1,4 @@
-MAJOR_VERSION = "2.23"
+MAJOR_VERSION = "2.24"
 require util-linux.inc
 
 # To support older hosts, we need to patch and/or revert
@@ -10,12 +10,11 @@ SRC_URI += "file://util-linux-ng-replace-siginterrupt.patch \
             file://util-linux-ng-2.16-mount_lock_path.patch \
             file://uclibc-__progname-conflict.patch \
             file://configure-sbindir.patch \
-            file://fix-configure.patch \
             ${OLDHOST} \
 "
 
-SRC_URI[md5sum] = "39a02ad0b3b37824c394f40930b7aa38"
-SRC_URI[sha256sum] = "6c5be3f7beec91b4893de14bbd722886fa2521be5bfa0fc079b749d0018633b1"
+SRC_URI[md5sum] = "88d46ae23ca599ac5af9cf96b531590f"
+SRC_URI[sha256sum] = "835eb6232cfab0118ef2e4fd649de0ba9f5bd1b8cbf9a7d4d84594541dec8410"
 
 CACHED_CONFIGUREVARS += "scanf_cv_alloc_modifier=as"
 EXTRA_OECONF_class-native = "${SHARED_EXTRA_OECONF} \
Signature · 1 line
1.8.3.1
author
#2 lore raw

PATCH 2/6 bind: Update to 9.9.5

Remove CVE patches that are in bind
Updated COPYRIGHT includes date changes the NetBSD Copyright Modifies the Base BSD License to 3-Clause (removes advertising clause)w

---
 .../{bind-9.8.1 => bind}/bind-9.8.1-CVE-2012-5166.patch   |  0
 .../bind/{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch    |  0
 .../bind/{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch    |  0
 .../bind/{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch    |  0
 .../bind/{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch    |  0
 .../{bind-9.8.1 => bind}/bind-Fix-CVE-2012-4244.patch     |  0
 .../bind/{bind-9.8.1 => bind}/conf.patch                  |  0
 .../bind/{bind-9.8.1 => bind}/cross-build-fix.patch       |  0
 .../make-etc-initd-bind-stop-work.patch                   |  0
 .../{bind-9.8.1 => bind}/mips1-not-support-opcode.diff    |  0
 .../bind/{bind_9.8.1.bb => bind_9.9.5.bb}                 | 15 ++++-----------
 11 files changed, 4 insertions(+), 11 deletions(-)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-9.8.1-CVE-2012-5166.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-Fix-CVE-2012-4244.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/conf.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/cross-build-fix.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/make-etc-initd-bind-stop-work.patch (100%)
 rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/mips1-not-support-opcode.diff (100%)
 rename meta/recipes-connectivity/bind/{bind_9.8.1.bb => bind_9.9.5.bb} (77%)
meta/recipes-connectivity/bind/bind/bind-9.8.1-CVE-2012-5166.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-9.8.1-CVE-2012-5166.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-9.8.1-CVE-2012-5166.patch
rename to meta/recipes-connectivity/bind/bind/bind-9.8.1-CVE-2012-5166.patch
meta/recipes-connectivity/bind/bind/bind-CVE-2011-4313.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2011-4313.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2011-4313.patch
rename to meta/recipes-connectivity/bind/bind/bind-CVE-2011-4313.patch
meta/recipes-connectivity/bind/bind/bind-CVE-2012-1667.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-1667.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-1667.patch
rename to meta/recipes-connectivity/bind/bind/bind-CVE-2012-1667.patch
meta/recipes-connectivity/bind/bind/bind-CVE-2012-3817.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-3817.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-3817.patch
rename to meta/recipes-connectivity/bind/bind/bind-CVE-2012-3817.patch
meta/recipes-connectivity/bind/bind/bind-CVE-2013-2266.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2013-2266.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2013-2266.patch
rename to meta/recipes-connectivity/bind/bind/bind-CVE-2013-2266.patch
meta/recipes-connectivity/bind/bind/bind-Fix-CVE-2012-4244.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-Fix-CVE-2012-4244.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-Fix-CVE-2012-4244.patch
rename to meta/recipes-connectivity/bind/bind/bind-Fix-CVE-2012-4244.patch
meta/recipes-connectivity/bind/bind/conf.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/conf.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/conf.patch
rename to meta/recipes-connectivity/bind/bind/conf.patch
meta/recipes-connectivity/bind/bind/cross-build-fix.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/cross-build-fix.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/cross-build-fix.patch
rename to meta/recipes-connectivity/bind/bind/cross-build-fix.patch
meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/make-etc-initd-bind-stop-work.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/make-etc-initd-bind-stop-work.patch
rename to meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch
meta/recipes-connectivity/bind/bind/mips1-not-support-opcode.diff renamed from meta/recipes-connectivity/bind/bind-9.8.1/mips1-not-support-opcode.diff +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/mips1-not-support-opcode.diff
rename to meta/recipes-connectivity/bind/bind/mips1-not-support-opcode.diff
meta/recipes-connectivity/bind/bind_9.9.5.bb renamed from meta/recipes-connectivity/bind/bind_9.8.1.bb +4 -11
similarity index 77%
rename from meta/recipes-connectivity/bind/bind_9.8.1.bb
rename to meta/recipes-connectivity/bind/bind_9.9.5.bb
index e12bb39..998d111 100644
@@ -3,32 +3,25 @@ HOMEPAGE = "http://www.isc.org/sw/bind/"
 SECTION = "console/network"
 
 LICENSE = "ISC & BSD"
-LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=0fbe2a3ab3c68ac3fea3cad13093877c"
+LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=a3df5f651469919a0e6cb42f84fb6ff1"
 
 DEPENDS = "openssl libcap"
-PR = "r5"
 
 SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \
            file://conf.patch \
            file://cross-build-fix.patch \
            file://make-etc-initd-bind-stop-work.patch \
-           file://bind-9.8.1-CVE-2012-5166.patch \
-           file://bind-CVE-2011-4313.patch \
-           file://bind-CVE-2012-1667.patch \
-           file://bind-CVE-2012-3817.patch \
-           file://bind-CVE-2013-2266.patch \
-           file://bind-Fix-CVE-2012-4244.patch \
            file://mips1-not-support-opcode.diff \
 	   "
 
-SRC_URI[md5sum] = "cf31117c5d35af34d4c0702970ad9fb7"
-SRC_URI[sha256sum] = "02285dc429cb2a6687a1b2446e9ee22c1df27f2577225b05be5092395ee7c92c"
+SRC_URI[md5sum] = "e676c65cad5234617ee22f48e328c24e"
+SRC_URI[sha256sum] = "d4b64c1dde442145a316679acff2df4008aa117ae52dfa3a6bc69efecc7840d1"
 
 # --enable-exportlib is necessary for building dhcp
 ENABLE_IPV6 = "--enable-ipv6=${@base_contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}"
 EXTRA_OECONF = " ${ENABLE_IPV6} --with-randomdev=/dev/random --disable-threads \
                  --disable-devpoll --disable-epoll --with-gost=no \
-                 --with-gssapi=no \
+                 --with-gssapi=no --with-ecdsa=yes \
                  --sysconfdir=${sysconfdir}/bind \
                  --with-openssl=${STAGING_LIBDIR}/.. --with-libxml2=${STAGING_LIBDIR}/.. \
                  --enable-exportlib --with-export-includedir=${includedir} --with-export-libdir=${libdir} \
Signature · 1 line
1.8.3.1
author
#3 lore raw

Re: [PATCH 2/6] bind: Update to 9.9.5

Please Hold this and the DHCP update which relies on the version of bind.

I will submit a v2 in the next couple of days.

Sau!

Quoted 115 lines · Saul Wold

Remove CVE patches that are in bind
Updated COPYRIGHT includes date changes the NetBSD Copyright Modifies the Base BSD License to 3-Clause (removes advertising clause)w

---
  .../{bind-9.8.1 => bind}/bind-9.8.1-CVE-2012-5166.patch   |  0
  .../bind/{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch    |  0
  .../bind/{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch    |  0
  .../bind/{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch    |  0
  .../bind/{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch    |  0
  .../{bind-9.8.1 => bind}/bind-Fix-CVE-2012-4244.patch     |  0
  .../bind/{bind-9.8.1 => bind}/conf.patch                  |  0
  .../bind/{bind-9.8.1 => bind}/cross-build-fix.patch       |  0
  .../make-etc-initd-bind-stop-work.patch                   |  0
  .../{bind-9.8.1 => bind}/mips1-not-support-opcode.diff    |  0
  .../bind/{bind_9.8.1.bb => bind_9.9.5.bb}                 | 15 ++++-----------
  11 files changed, 4 insertions(+), 11 deletions(-)

rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-9.8.1-CVE-2012-5166.patch (100%) rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2011-4313.patch (100%) rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-1667.patch (100%) rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2012-3817.patch (100%) rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-CVE-2013-2266.patch (100%) rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/bind-Fix-CVE-2012-4244.patch (100%) rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/conf.patch (100%)
rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/cross-build-fix.patch (100%) rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/make-etc-initd-bind-stop-work.patch (100%) rename meta/recipes-connectivity/bind/{bind-9.8.1 => bind}/mips1-not-support-opcode.diff (100%) rename meta/recipes-connectivity/bind/{bind_9.8.1.bb => bind_9.9.5.bb} (77%)

meta/recipes-connectivity/bind/bind/bind-9.8.1-CVE-2012-5166.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-9.8.1-CVE-2012-5166.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-9.8.1-CVE-2012-5166.patch
rename to meta/recipes-connectivity/bind/bind/bind-9.8.1-CVE-2012-5166.patch
meta/recipes-connectivity/bind/bind/bind-CVE-2011-4313.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2011-4313.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2011-4313.patch
rename to meta/recipes-connectivity/bind/bind/bind-CVE-2011-4313.patch
meta/recipes-connectivity/bind/bind/bind-CVE-2012-1667.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-1667.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-1667.patch
rename to meta/recipes-connectivity/bind/bind/bind-CVE-2012-1667.patch
meta/recipes-connectivity/bind/bind/bind-CVE-2012-3817.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-3817.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2012-3817.patch
rename to meta/recipes-connectivity/bind/bind/bind-CVE-2012-3817.patch
meta/recipes-connectivity/bind/bind/bind-CVE-2013-2266.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2013-2266.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-CVE-2013-2266.patch
rename to meta/recipes-connectivity/bind/bind/bind-CVE-2013-2266.patch
meta/recipes-connectivity/bind/bind/bind-Fix-CVE-2012-4244.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/bind-Fix-CVE-2012-4244.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/bind-Fix-CVE-2012-4244.patch
rename to meta/recipes-connectivity/bind/bind/bind-Fix-CVE-2012-4244.patch
meta/recipes-connectivity/bind/bind/conf.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/conf.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/conf.patch
rename to meta/recipes-connectivity/bind/bind/conf.patch
meta/recipes-connectivity/bind/bind/cross-build-fix.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/cross-build-fix.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/cross-build-fix.patch
rename to meta/recipes-connectivity/bind/bind/cross-build-fix.patch
meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch renamed from meta/recipes-connectivity/bind/bind-9.8.1/make-etc-initd-bind-stop-work.patch +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/make-etc-initd-bind-stop-work.patch
rename to meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch
meta/recipes-connectivity/bind/bind/mips1-not-support-opcode.diff renamed from meta/recipes-connectivity/bind/bind-9.8.1/mips1-not-support-opcode.diff +0 -0
similarity index 100%
rename from meta/recipes-connectivity/bind/bind-9.8.1/mips1-not-support-opcode.diff
rename to meta/recipes-connectivity/bind/bind/mips1-not-support-opcode.diff
meta/recipes-connectivity/bind/bind_9.9.5.bb renamed from meta/recipes-connectivity/bind/bind_9.8.1.bb +4 -11
similarity index 77%
rename from meta/recipes-connectivity/bind/bind_9.8.1.bb
rename to meta/recipes-connectivity/bind/bind_9.9.5.bb
index e12bb39..998d111 100644
@@ -3,32 +3,25 @@ HOMEPAGE = "http://www.isc.org/sw/bind/"
  SECTION = "console/network"
 
  LICENSE = "ISC & BSD"
-LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=0fbe2a3ab3c68ac3fea3cad13093877c"
+LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=a3df5f651469919a0e6cb42f84fb6ff1"
 
  DEPENDS = "openssl libcap"
-PR = "r5"
 
  SRC_URI = "ftp://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \
             file://conf.patch \
             file://cross-build-fix.patch \
             file://make-etc-initd-bind-stop-work.patch \
-           file://bind-9.8.1-CVE-2012-5166.patch \
-           file://bind-CVE-2011-4313.patch \
-           file://bind-CVE-2012-1667.patch \
-           file://bind-CVE-2012-3817.patch \
-           file://bind-CVE-2013-2266.patch \
-           file://bind-Fix-CVE-2012-4244.patch \
             file://mips1-not-support-opcode.diff \
  	   "
 
-SRC_URI[md5sum] = "cf31117c5d35af34d4c0702970ad9fb7"
-SRC_URI[sha256sum] = "02285dc429cb2a6687a1b2446e9ee22c1df27f2577225b05be5092395ee7c92c"
+SRC_URI[md5sum] = "e676c65cad5234617ee22f48e328c24e"
+SRC_URI[sha256sum] = "d4b64c1dde442145a316679acff2df4008aa117ae52dfa3a6bc69efecc7840d1"
 
  # --enable-exportlib is necessary for building dhcp
  ENABLE_IPV6 = "--enable-ipv6=${@base_contains('DISTRO_FEATURES', 'ipv6', 'yes', 'no', d)}"
  EXTRA_OECONF = " ${ENABLE_IPV6} --with-randomdev=/dev/random --disable-threads \
                   --disable-devpoll --disable-epoll --with-gost=no \
-                 --with-gssapi=no \
+                 --with-gssapi=no --with-ecdsa=yes \
                   --sysconfdir=${sysconfdir}/bind \
                   --with-openssl=${STAGING_LIBDIR}/.. --with-libxml2=${STAGING_LIBDIR}/.. \
                   --enable-exportlib --with-export-includedir=${includedir} --with-export-libdir=${libdir} \
author
#4 lore raw

PATCH 3/6 dhcp: Update to 4.3.0

In reply to Saul Wold

Rebase fix-external-bind patch
LICENSE file has date update to 2014

---
 meta/recipes-connectivity/dhcp/dhcp.inc            |   2 +-
 .../dhcp/dhcp/fix-external-bind.patch              | 115 +++++++++++----------
 meta/recipes-connectivity/dhcp/dhcp_4.2.5-P1.bb    |  12 ---
 3 files changed, 63 insertions(+), 66 deletions(-)
 delete mode 100644 meta/recipes-connectivity/dhcp/dhcp_4.2.5-P1.bb
meta/recipes-connectivity/dhcp/dhcp.inc +1 -1
index ad82b57..512127c 100644
@@ -8,7 +8,7 @@ easier to administer devices."
 HOMEPAGE = "http://www.isc.org/"
 
 LICENSE = "ISC"
-LIC_FILES_CHKSUM = "file://LICENSE;beginline=4;md5=bb6fd41f5895b67088ebea61ad365e74"
+LIC_FILES_CHKSUM = "file://LICENSE;beginline=4;md5=c5c64d696107f84b56fe337d14da1753"
 
 DEPENDS = "openssl bind"
 
meta/recipes-connectivity/dhcp/dhcp/fix-external-bind.patch +62 -53

159 lines not on this page · raw message

meta/recipes-connectivity/dhcp/dhcp_4.2.5-P1.bb deleted +0 -12
deleted file mode 100644
index 08db41b..0000000
@@ -1,12 +0,0 @@
-require dhcp.inc
-
-PR = "r1"
-
-SRC_URI += "file://dhcp-3.0.3-dhclient-dbus.patch;striplevel=0 \
-            file://fix-external-bind.patch \
-            file://link-with-lcrypto.patch \
-            file://fixsepbuild.patch \
-           "
-
-SRC_URI[md5sum] = "f68e3c1f00a9af5742bc5e71d567cf93"
-SRC_URI[sha256sum] = "59b06c9f5d775e46999b422c45b9229402c462b114ce1685617bfb2b8b028250"
Signature · 1 line
1.8.3.1
author
#5 lore raw

PATCH 4/6 grub-efi: use autotools-brokensep

In reply to Saul Wold
---
 meta/recipes-bsp/grub/grub-efi_2.00.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
meta/recipes-bsp/grub/grub-efi_2.00.bb +1 -1
index e02def3..8958b04 100644
@@ -51,7 +51,7 @@ python __anonymous () {
     d.setVar("GRUB_IMAGE", grubimage)
 }
 
-inherit autotools
+inherit autotools-brokensep
 inherit gettext
 inherit deploy
 
Signature · 1 line
1.8.3.1
author
#6 lore raw

PATCH 5/6 parted: add patch to handle deprecated readline function

In reply to Saul Wold
---
 .../parted-3.1/fix-deprecated-readline.patch       | 34 ++++++++++++++++++++++
 meta/recipes-extended/parted/parted_3.1.bb         |  1 +
 2 files changed, 35 insertions(+)
 create mode 100644 meta/recipes-extended/parted/parted-3.1/fix-deprecated-readline.patch
meta/recipes-extended/parted/parted-3.1/fix-deprecated-readline.patch new file +34 -0
new file mode 100644
index 0000000..c4ca06d
@@ -0,0 +1,34 @@
+
+From: Gustavo Zacarias
+Subject: bug#16929: [PATCH] ui: switch to new-style readline typedef
+Date: Mon, 3 Mar 2014 10:40:08 -0300
+
+The CPPFunction typedef (among others) have been deprecated in favour of
+specific prototyped typedefs since readline 4.2 (circa 2001).
+It's been working since because compatibility typedefs have been in
+place until they where removed in the recent readline 6.3 release.
+Switch to the new style to avoid build breakage.
+
+Signed-off-by: Gustavo Zacarias <address@hidden>
+
+Upstream-Status: Backport
+
+Signed-off-by: Saul Wold <[email protected]>
+
+---
+ parted/ui.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/parted/ui.c b/parted/ui.c
+index 786deed..b33f6fc 100644
+--- a/parted/ui.c
++++ b/parted/ui.c
+@@ -1470,7 +1470,7 @@ init_readline (void)
+ #ifdef HAVE_LIBREADLINE
+   if (!opt_script_mode) {
+     rl_initialize ();
+-    rl_attempted_completion_function = (CPPFunction*) complete_function;
++    rl_attempted_completion_function = (rl_completion_func_t *) complete_function;
+     readline_state.in_readline = 0;
+   }
+ #endif
meta/recipes-extended/parted/parted_3.1.bb +1 -0
index 1e07da4..8344ea8 100644
@@ -12,6 +12,7 @@ SRC_URI = "${GNU_MIRROR}/parted/parted-${PV}.tar.xz \
            file://fix-git-version-gen.patch \
            file://fix-doc-mandir.patch \
            file://fix-dvh-overflows.patch \
+           file://fix-deprecated-readline.patch \
            file://run-ptest \
            file://Makefile \
 "
Signature · 1 line
1.8.3.1
author
#7 lore raw

PATCH 6/6 security_flags: Update to correctly link X modules

In reply to Saul Wold

Remove the -z,now flag from linking

[YOCTO #5885]

---
 meta/conf/distro/include/security_flags.inc | 9 +++++++++
 1 file changed, 9 insertions(+)
meta/conf/distro/include/security_flags.inc +9 -0
index a871a3f..fa604fd 100644
@@ -1,6 +1,7 @@
 SECURITY_CFLAGS ?= "-fstack-protector-all -pie -fpie -D_FORTIFY_SOURCE=2"
 SECURITY_NO_PIE_CFLAGS ?= "-fstack-protector-all -D_FORTIFY_SOURCE=2"
 SECURITY_LDFLAGS ?= "-Wl,-z,relro,-z,now"
+SECURITY_X_LDFLAGS ?= "-Wl,-z,relro"
 
 # powerpc does not get on with pie for reasons not looked into as yet
 SECURITY_CFLAGS_powerpc = "-fstack-protector-all -D_FORTIFY_SOURCE=2"
@@ -72,3 +73,11 @@ SECURITY_CFLAGS_pn-pulseaudio = "${SECURITY_NO_PIE_CFLAGS}"
 
 TARGET_CFLAGS_append = " ${SECURITY_CFLAGS}"
 TARGET_LDFLAGS_append = " ${SECURITY_LDFLAGS}"
+
+SECURITY_LDFLAGS_pn-xf86-video-fbdev = "${SECURITY_X_LDFLAGS}"
+SECURITY_LDFLAGS_pn-xf86-video-intel = "${SECURITY_X_LDFLAGS}"
+SECURITY_LDFLAGS_pn-xf86-video-omapfb = "${SECURITY_X_LDFLAGS}"
+SECURITY_LDFLAGS_pn-xf86-video-omap = "${SECURITY_X_LDFLAGS}"
+SECURITY_LDFLAGS_pn-xf86-video-vesa = "${SECURITY_X_LDFLAGS}"
+SECURITY_LDFLAGS_pn-xf86-video-vmware = "${SECURITY_X_LDFLAGS}"
+SECURITY_LDFLAGS_pn-xserver-xorg = "${SECURITY_X_LDFLAGS}"
Signature · 1 line
1.8.3.1