This is related to SSLv3 POODLE vulnerability CVE-2014-3566
Building python without SSLv3 support when openssl is built without
any support for SSLv3 (e.g. by adding EXTRA_OECONF = -no-ssl3 in
the openssl recipes).
Backport from:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768611#22
On 15 January 2015 at 15:33, Martin Jansa martin.ja...@gmail.com wrote:
ping, please merge this to dizzy as well.
This is in my MUT but we've been stalling on merging anything into master
until the kernel builds are fixed.
Ross
--
___
Maxin,
Is this related to (URL request injection CVE-2014-8150)
http://curl.haxx.se/mail/archive-2015-01/0019.html?
If yes, wouldn't it be better to mention this (the CVE) in the commit message?
//Sona
-Original Message-
From: openembedded-core-boun...@lists.openembedded.org
Hi Sona,
On Fri, Jan 16, 2015 at 01:30:53PM +0100, Sona Sarmadi wrote:
Maxin,
Is this related to (URL request injection CVE-2014-8150)
http://curl.haxx.se/mail/archive-2015-01/0019.html?
curl 7.40 contains fix for below listed CVE bugs:
1. CVE-2014-8150
2. CVE-2014-8151
If yes, wouldn't
/var/tmp and /var/log are symlinks created by base-files and point to their
respective directories in /var/volatile.
With this patch we avoid systemd-tmpfiles runtime errors like:
systemd-tmpfiles[108]: chmod(/var/tmp) failed: No such file or directory
Signed-off-by: Andrei Gherzan
Hi guys,
On Fri, Jan 16, 2015 at 2:38 PM, Andrei Gherzan and...@gherzan.ro wrote:
/var/tmp and /var/log are symlinks created by base-files and point to their
respective directories in /var/volatile.
With this patch we avoid systemd-tmpfiles runtime errors like:
systemd-tmpfiles[108]:
Upgraded version include fixes for these CVE bugs:
1. CVE-2014-8150
2. CVE-2014-8151
Signed-off-by: Maxin B. John maxin.j...@enea.com
---
meta/recipes-support/curl/{curl_7.38.0.bb = curl_7.40.0.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename
Does the fix for Yocto bug 6824 need the .2 update?
Is someone going to reply to comment #8?
https://bugzilla.yoctoproject.org/show_bug.cgi?id=6824#c8
- armin
On 01/15/2015 11:00 PM, Lei Maohui wrote:
The new patches 0060-Only-xxx and 0061-Fix-xxx aim to fix the bug in e500v2 as
following:
On Thu, 2015-01-15 at 18:31 +0200, Daniel Dragomir wrote:
Remove libgfortran packages from PACKAGES list and skip them at compiling
and installing as long as libgfortran has separate receipe since commit
5bde5d9b39ea67f19a1a6aedd0c08c6cfedcbe5f
gcc: Allow fortran to build successfully in 4.8
Hi,
On Mon, 12 Jan 2015 14:48:42 +0800 Chong Lu chong...@windriver.com wrote:
It maybe depends on other layers when one layer is added to BBLAYERS. If
define
LAYERDEPENDS variable in this layer, we will get error from bitbake. But
sometimes, we don't have defined. Add a mechanism to extend
On Fri, Jan 16, 2015 at 7:06 AM, Maxin B. John maxin.j...@enea.com wrote:
Upgraded version include fixes for these CVE bugs:
1. CVE-2014-8150
2. CVE-2014-8151
Signed-off-by: Maxin B. John maxin.j...@enea.com
---
meta/recipes-support/curl/{curl_7.38.0.bb = curl_7.40.0.bb} | 4 ++--
1 file
Without a dm to handle the session management systemd-logind can make it
difficult for X to gain ownership of devices and behave properly.
Since X seems to work without enabling systemd-logind, always disable it for
now, and we can revisit it if we ever want to try to take advantage of
multi-user
Instead of having the source files 'opkg.conf.comments', 'dest' and 'src', we
simply have one 'opkg.conf' file containing all the necessary configuration.
This does mean that replacing 'src' in a bbappend to define distro-specific
package feeds is no longer supported, but these feed
Sorry it has took so long to respin these as V2, it's been a busy few weeks!
Original notes:
Summary of changes:
- The opkg recipe is cleanup up and opkg.inc is merged into opkg_0.2.4.bb.
- opkg-collateral is updated and then merged into the main opkg recipe.
- The
This recipe was not usable as-is. A much better way of configuring package feeds
for opkg is provided by the distro-feed-config recipe in meta-oe.
Signed-off-by: Paul Barker p...@paulbarker.me.uk
---
.../feed-config/poky-feed-config-opkg_1.0.bb | 44 --
1 file changed,
There is no benefit to having a separate .inc file when we only support one
version of opkg.
The .inc file had multiple do_install_append functions and several variables
were defined out of the usual order. This arrangement should be better.
Signed-off-by: Paul Barker p...@paulbarker.me.uk
---
All non-arch-specific and non-distro-specific configuration is now kept in the
main 'opkg' recipe and package.
Signed-off-by: Paul Barker p...@paulbarker.me.uk
---
meta/classes/rootfs_ipk.bbclass | 2 +-
meta/recipes-devtools/opkg/opkg-collateral.bb | 19
The name 'opkg-arch-config' is much more descriptive.
Signed-off-by: Paul Barker p...@paulbarker.me.uk
---
meta/conf/layer.conf | 2 +-
.../opkg/{opkg-config-base_1.0.bb = opkg-arch-config_1.0.bb}| 5 -
The improvements to opkg-key made for v0.3.0 are backported. The rest of v0.3.0
needs further testing and bugfixing prior to release, but the improvements to
opkg-key have been tested and work well.
Signed-off-by: Paul Barker p...@paulbarker.me.uk
---
This recipe wraps package and package feed verification keys into a package,
making the management and deployment of verification keys much easier. Comments
on how to select keys for inclusion in this package are provided in the recipe
file.
Signed-off-by: Paul Barker p...@paulbarker.me.uk
---
On Fri, 2015-01-16 at 18:31 +, Dragomir, Daniel wrote:
On Thu, 2015-01-15 at 18:31 +0200, Daniel Dragomir wrote:
Remove libgfortran packages from PACKAGES list and skip them at compiling
and installing as long as libgfortran has separate receipe since commit
And bump PR to avoid:
configure: error: source directory already configured; run make distclean
there first
Signed-off-by: Robert Yang liezhi.y...@windriver.com
---
meta/recipes-connectivity/neard/neard.inc |4 ++--
meta/recipes-connectivity/neard/neard_0.14.bb |1 +
2 files
There might be no src dir if the src/builtin.h runs earlier, create it
to fix the race issue:
src/genbuiltin nfctype1 nfctype2 nfctype3 nfctype4 p2p src/builtin.h
/bin/sh: src/builtin.h: No such file or directory
Signed-off-by: Robert Yang liezhi.y...@windriver.com
---
The following changes since commit 6541799c2e9a5a1586676c207d62f885c70e24dc:
lib/oe/rootfs.py: Fix reference to abiversion file location (2015-01-16
23:14:26 +)
are available in the git repository at:
git://git.openembedded.org/openembedded-core-contrib rbt/neard_guile
Fixed:
guile-2.0.11: guile: Files/directories were installed but not shipped
/usr/lib64/libguile-2.0*-gdb.scm [installed-vs-shipped]
This is because when there is no file in the directory:
for f in libguile-2.0*; do
[snip]
done
The f would be libguile-2.0* itself, use install-exec-hook
This reverts commit 397f27cdceaa4874d8d06aad10cd37a5817d90b8.
The fix isn't correct, caused:
install: cannot create regular file
`/path/to/sysroots/x86_64-linux/usr/lib/libguile-2.0.so.22.7.2': File exists
will add a new fix.
Signed-off-by: Robert Yang liezhi.y...@windriver.com
---
26 matches
Mail list logo
