[OE-core] [PATCH v2] dhcp: Workaround busybox limitation in Linux dhclient-script

nd busybox. Patch submitted upstream to ISC, tracked as bug 48771. Signed-off-by: Haris Okanovic --- ...-limitation-in-linux-dhclient-script.patch | 65 +++ meta/recipes-connectivity/dhcp/dhcp_4.4.1.bb | 1 + 2 files changed, 66 insertions(+) create mode 100644 meta/recipes-co

[OE-core] [PATCH] dhcp: Workaround busybox limitation in Linux dhclient-script

nd busybox. Patch submitted upstream to ISC, tracked as bug 48771. Signed-off-by: Haris Okanovic --- ...-limitation-in-linux-dhclient-script.patch | 64 +++ meta/recipes-connectivity/dhcp/dhcp_4.4.1.bb | 1 + 2 files changed, 65 insertions(+) create mode 100644 meta/recipes-co

[OE-core] [PATCH] meta/lib/oe/package_manager.py: Enable sha256 checksums in opkg indexer

. Signed-off-by: Haris Okanovic --- meta/lib/oe/package_manager.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/lib/oe/package_manager.py b/meta/lib/oe/package_manager.py index c7135ce918..4ff19cf09c 100644 --- a/meta/lib/oe/package_manager.py +++ b/meta/lib/oe

[OE-core] [PATCH] gnupg/libksba/npth/pinentry: Add nativesdk to BBCLASSEXTEND

Enable nativesdk builds of gnupg and it's dependencies (libksba, npth, and pinentry) to fix builds of nativesdk-opkg. This is necessary on distribution which enable gpg signature verification in opkg and also build SDK images that include opkg. Signed-off-by: Haris Okanovic --- meta/recipes

[OE-core] [PATCH 2/2] opkg: RDEPEND "gnupg-gpg" instead of "gnupg"

gnupg-gpg is a minimal installation of gnupg with enough functionality to verify signatures and manage keys. Use this package instead of full gnupg to slim down opkg installations with "--enable-gpg". Signed-off-by: Haris Okanovic --- meta/recipes-devtools/opkg/opkg_0.4.1.bb | 5 +++

[OE-core] [PATCH 1/2] gnupg: Split gpg and gpg-agent into a minimal gnupg-gpg package

provides just enough functionality to verify and manage keys in opkg, in order to minimize disk overhead. Signed-off-by: Haris Okanovic --- meta/recipes-support/gnupg/gnupg_2.2.17.bb | 15 +++ 1 file changed, 15 insertions(+) diff --git a/meta/recipes-support/gnupg/gnupg_2.2.17.bb b/

[OE-core] [PATCH] isoimage-isohybrid.py: Parameterize ESP partition size

Add "esp_extra_blocks" plugin parameter so that caller may change ESP's free space from the default 100 blocks. Signed-off-by: Haris Okanovic --- scripts/lib/wic/plugins/source/isoimage-isohybrid.py | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/scrip

[OE-core] [PATCH] isoimage-isohybrid.py: Parameterize ESP label

Add "esp_label" plugin parameter so that caller may override default ESP partition label 'EFIimg'. Signed-off-by: Haris Okanovic --- scripts/lib/wic/plugins/source/isoimage-isohybrid.py | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/scripts/lib/wic/plug

[OE-core] [PATCH] initscripts/sysfs.sh: Mount /sys/firmware/efi/efivars when possible

-by: Haris Okanovic --- meta/recipes-core/initscripts/initscripts-1.0/sysfs.sh | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-core/initscripts/initscripts-1.0/sysfs.sh b/meta/recipes-core/initscripts/initscripts-1.0/sysfs.sh index f5b5b9904b..4871ee94e5 100644 --- a/meta/recipes

[OE-core] [PATCH] populate_sdk_base/check_sdk_sysroots(): Normalize os.path.commonprefix()

Normalize path (norm_path()) returned by os.path.commonprefix() to strip trailing slash and prevent false negatives. Add bb.note() on error to indicate which paths failed. Signed-off-by: Haris Okanovic --- meta/classes/populate_sdk_base.bbclass | 4 +++- 1 file changed, 3 insertions(+), 1

[OE-core] [PATCH] depmodwrapper-cross: Add kmod-native to DEPENDS

epmod (via depmodwrapper) to index newly installed modules. Signed-off-by: Haris Okanovic <haris.okano...@ni.com> --- meta/recipes-kernel/kmod/depmodwrapper-cross_1.0.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-kernel/kmod/depmodwrapper-cross_1.0.bb b/meta/rec

Re: [OE-core] [PATCH v9] kernel: Add support for multiple kernel packages

33 ./boot/bzImage-4.12.14-yocto-standard -- Haris On 12/13/2017 06:31 AM, Burton, Ross wrote: On 12 December 2017 at 22:19, Haris Okanovic <haris.okano...@ni.com <mailto:haris.okano...@ni.com>> wrote: I can see a reference to "/boot/bzImage" in both buildhistory and

Re: [OE-core] [PATCH v9] kernel: Add support for multiple kernel packages

me/kernel-image-bzimage" [2] clean rebuild command: bitbake -c cleanall virtual/kernel bitbake virtual/kernel Which file are you diffing? Could you share the full path? -- Haris Ross On 10 November 2017 at 21:51, Haris Okanovic <haris.okano...@ni.com <mailto:haris.okano...@ni

Re: [OE-core] [PATCH v9] kernel: Add support for multiple kernel packages

On 11/10/2017 04:00 PM, Wold, Saul wrote: On Fri, 2017-11-10 at 15:51 -0600, Haris Okanovic wrote: No problem! Thanks for all the good feedback. I think we shook out most of the gremlins in the last few months. Thanks again for your patience ! Let me know if you need help with boot loader

Re: [OE-core] [PATCH v9] kernel: Add support for multiple kernel packages

works well, now I have the extra work of getting these kernel known to systemd-boot! Acked-by below! Sau! On Tue, 2017-11-07 at 12:40 -0600, Haris Okanovic wrote: Some distros may want to provide alternate kernel "flavors" via feeds or within bootable images. For example, readily availa

[OE-core] [PATCH v9] kernel: Add support for multiple kernel packages

39130 [YOCTO #11363] Signed-off-by: Ioan-Adrian Ratiu <adrian.ra...@ni.com> Signed-off-by: Gratian Crisan <gratian.cri...@ni.com> Signed-off-by: Haris Okanovic <haris.okano...@ni.com> Coauthored-by: Gratian Crisan <gratian.cri...@ni.com> Coauthored-by: Haris Okanovic &l

Re: [OE-core] [PATCH v8] kernel: Add support for multiple kernel packages

On 10/23/2017 04:38 PM, Saul Wold wrote: Haris, We are really really close, one suggestion in the commit message and linux-yocto-rt needs a fix similar to linux-yocto.inc (or maybe code removed). See below Thanks so much for this work Sau! On Thu, 2017-10-19 at 14:19 -0500, Haris Okanovic

Re: [OE-core] [PATCH v8] kernel: Add support for multiple kernel packages

On 10/25/2017 03:00 AM, Bruce Ashfield wrote: On Thu, Oct 19, 2017 at 3:19 PM, Haris Okanovic <haris.okano...@ni.com> wrote: Some distros may want to provide alternate kernel "flavors" via feeds or within bootable images. For example, readily available builds which provide ce

[OE-core] [PATCH v8] kernel: Add support for multiple kernel packages

lected to boot via symlink. Discussion threads: http://lists.openembedded.org/pipermail/openembedded-core/2015-December/thread.html#114122 http://lists.openembedded.org/pipermail/openembedded-core/2017-July/thread.html#139130 Signed-off-by: Ioan-Adrian Ratiu <adrian.ra...@ni.com> Signed-off-

[OE-core] [PATCH] package_manager.py: Add PACKAGE_ENABLE_FILELIST option to OpkgIndexer

with PACKAGE_ENABLE_FILELIST="1" and verified each subfeed has Packages.filelist; took ~3min longer for 8,200 IPKs. Signed-off-by: Haris Okanovic <haris.okano...@ni.com> --- meta/lib/oe/package_manager.py | 10 -- 1 file changed, 8 insertions(+), 2 deletions(-) diff --g

[OE-core] [PATCH v7] kernel: Add support for multiple kernel packages

lected to boot via symlink. Discussion threads: http://lists.openembedded.org/pipermail/openembedded-core/2015-December/thread.html#114122 http://lists.openembedded.org/pipermail/openembedded-core/2017-July/thread.html#139130 Signed-off-by: Ioan-Adrian Ratiu <adrian.ra...@ni.com> Signed-off-

Re: [OE-core] [PATCH v6] kernel: Add support for multiple kernel packages

On 08/16/2017 11:00 AM, Wold, Saul wrote: On Mon, 2017-08-14 at 16:29 -0500, Haris Okanovic wrote: Some distros may want to provide alternate kernel "flavors" via feeds or within bootable images. For example, readily available builds which provide certain diagnostic features

[OE-core] [PATCH v6] kernel: Add support for multiple kernel packages

lected to boot via symlink. Discussion threads: http://lists.openembedded.org/pipermail/openembedded-core/2015-December/thread.html#114122 http://lists.openembedded.org/pipermail/openembedded-core/2017-July/thread.html#139130 Signed-off-by: Ioan-Adrian Ratiu <adrian.ra...@ni.com> Signed-off-

Re: [OE-core] [PATCH v5] kernel: Add support for multiple kernel packages

On 08/08/2017 05:33 PM, Wold, Saul wrote: On Tue, 2017-08-08 at 10:30 -0500, Haris Okanovic wrote: Some distros may want to provide alternate kernel "flavors" via feeds or within bootable images. For example, readily available builds which provide certain diagnostic features

Re: [OE-core] [PATCH v4] kernel: Add support for multiple kernel packages

On 08/03/2017 11:18 AM, Ovidiu-Adrian Vancea wrote: On Thu, 2017-07-27 at 11:01 -0700, Rees, Kevron wrote: On Wed, Jul 19, 2017 at 8:56 AM, Wold, Saul <saul.w...@intel.com> wrote: On Tue, 2017-07-18 at 08:34 -0500, Haris Okanovic wrote: On 07/17/2017 03:31 PM, Wold, Saul wrote:

Re: [OE-core] [PATCH v4] kernel: Add support for multiple kernel packages

On 07/19/2017 10:56 AM, Wold, Saul wrote: On Tue, 2017-07-18 at 08:34 -0500, Haris Okanovic wrote: On 07/17/2017 03:31 PM, Wold, Saul wrote: On Wed, 2017-07-05 at 12:33 -0500, Haris Okanovic wrote: Some distros may want to provide alternate kernel "flavors" via feeds or withi

Re: [OE-core] [PATCH v4] kernel: Add support for multiple kernel packages

On 07/27/2017 01:01 PM, Rees, Kevron wrote: On Wed, Jul 19, 2017 at 8:56 AM, Wold, Saul <saul.w...@intel.com> wrote: On Tue, 2017-07-18 at 08:34 -0500, Haris Okanovic wrote: On 07/17/2017 03:31 PM, Wold, Saul wrote: On Wed, 2017-07-05 at 12:33 -0500, Haris Okanovic wrote: Some d

[OE-core] [PATCH v5] kernel: Add support for multiple kernel packages

elected to boot via symlink. Discussion thread: http://lists.openembedded.org/pipermail/openembedded-core/2015-December/thread.html#114122 Signed-off-by: Ioan-Adrian Ratiu <adrian.ra...@ni.com> Signed-off-by: Gratian Crisan <gratian.cri...@ni.com> Signed-off-by: Haris Okanovic <haris.

[OE-core] [PATCH v5] kernel: Add support for multiple kernel packages

elected to boot via symlink. Discussion thread: http://lists.openembedded.org/pipermail/openembedded-core/2015-December/thread.html#114122 Signed-off-by: Ioan-Adrian Ratiu <adrian.ra...@ni.com> Signed-off-by: Gratian Crisan <gratian.cri...@ni.com> Signed-off-by: Haris Okanovic <haris.

Re: [OE-core] [PATCH v4] kernel: Add support for multiple kernel packages

On 07/17/2017 03:31 PM, Wold, Saul wrote: On Wed, 2017-07-05 at 12:33 -0500, Haris Okanovic wrote: Some distros may want to provide alternate kernel "flavors" via feeds or within bootable images. For example, readily available builds which provide certain diagnostic features

Re: [OE-core] [PATCH] [RFC] image.bbclass & image.py: Add check_image_file_ownership()

s command? That wouldn’t be specific to tar, but would be just as effective, since those run under pseudo. On Fri, Jul 7, 2017 at 12:36 PM, Haris Okanovic <haris.okano...@ni.com <mailto:haris.okano...@ni.com>> wrote: An IMAGE_POSTPROCESS_COMMAND verifying image tarballs have sy

[OE-core] [PATCH] [RFC] image.bbclass & image.py: Add check_image_file_ownership()

: Verified core-image-base still builds Patch: https://github.com/harisokanovic/openembedded-core/commits/dev/hokanovi/image-ownership-sanity-check Signed-off-by: Haris Okanovic <haris.okano...@ni.com> --- meta/classes/image.bbclass | 25 +- meta/lib/oe/image.py

[OE-core] [PATCH v4] kernel: Add support for multiple kernel packages

elected to boot via symlink. Discussion thread: http://lists.openembedded.org/pipermail/openembedded-core/2015-December/thread.html#114122 Signed-off-by: Ioan-Adrian Ratiu <adrian.ra...@ni.com> Signed-off-by: Gratian Crisan <gratian.cri...@ni.com> Signed-off-by: Haris Okanovic <haris.

Re: [OE-core] [PATCH] package_manager.py: Add PACKAGE_ENABLE_FILELIST option to OpkgIndexer

reproducible and insulates that process from OE bugs. -- Haris On 05/19/2017 12:29 PM, Martin Jansa wrote: On Fri, May 19, 2017 at 10:01:21AM -0500, Haris Okanovic wrote: Setting PACKAGE_ENABLE_FILELIST option generates Packages.filelist on `bitbake package-index`, which is index of files

[OE-core] [PATCH] package_manager.py: Add PACKAGE_ENABLE_FILELIST option to OpkgIndexer

with PACKAGE_ENABLE_FILELIST="1" and verified each subfeed has Packages.filelist; took ~3min longer for 8,200 IPKs. Signed-off-by: Haris Okanovic <haris.okano...@ni.com> --- meta/lib/oe/package_manager.py | 10 -- 1 file changed, 8 insertions(+), 2 deletions(-) diff --g

Re: [OE-core] [PATCH] run-postinsts: Print message before running deferred postinst scripts

On 12/05/2016 04:51 PM, Burton, Ross wrote: On 5 December 2016 at 21:48, Haris Okanovic <haris.okano...@ni.com <mailto:haris.okano...@ni.com>> wrote: Opkg can defer running postinst scripts to first boot, which can take a while on some systems. The output of `op

[OE-core] [PATCH v2] run-postinsts: Print message before running deferred postinst scripts

in the very postinst scripts being executed by this process. It's therefore not safe to assume Tee (or any other packaged util) is available until the configure process finishes. Signed-off-by: Haris Okanovic <haris.okano...@ni.com> --- meta/recipes-devtools/run-postinsts/run-postinsts/run-pos

[OE-core] [PATCH] run-postinsts: Print message before running deferred postinst scripts

in the very postinst scripts being executed by this process. It's therefore not safe to assume Tee (or any other packaged util) is available until the configure process finishes. Signed-off-by: Haris Okanovic <haris.okano...@ni.com> --- meta/recipes-devtools/run-postinsts/run-postinsts/run-postins

[OE-core] [PATCH v3] kernel: Add support for multiple kernel packages

ory. Discussion thread: http://lists.openembedded.org/pipermail/openembedded-core/2015-December/thread.html#114122 Signed-off-by: Ioan-Adrian Ratiu <adrian.ra...@ni.com> Signed-off-by: Gratian Crisan <gratian.cri...@ni.com> Signed-off-by: Haris Okanovic <haris.okano...@ni.com> Coauthored-by: G

Re: [OE-core] [PATCH v2] kernel: Add support for multiple kernel packages

Hi Diego, On 02/02/2016 10:12 AM, Diego Sueiro wrote: Haris, On 19 January 2016 at 22:40, Haris Okanovic <haris...@gmail.com <mailto:haris...@gmail.com>> wrote: Any concerns pulling this into master as-is? We briefly discussed the possibility of building out-of-

Re: [OE-core] [PATCH 2/2] bitbake.conf: Define source package, disabled by default

Are there any other issues with this change? Andre raised a few several weeks ago, when this was still an RFC*. Those were all addressed in the initial patch. * http://thread.gmane.org/gmane.comp.handhelds.openembedded.core/72660 -- Haris On 12/14/2015 06:25 PM, Haris Okanovic wrote: Add

Re: [OE-core] [PATCH 1/2] package.bbclass/package.py: Add do_install_source() task

Are there any other issues with this change? Andre raised a few several weeks ago, when this was still an RFC*. Those were all addressed in the initial patch. * http://thread.gmane.org/gmane.comp.handhelds.openembedded.core/72660 -- Haris On 12/14/2015 06:25 PM, Haris Okanovic wrote: Add

Re: [OE-core] [PATCH v2] kernel: Add support for multiple kernel packages

i...@ni.com> Signed-off-by: Haris Okanovic <haris.okano...@ni.com> Coauthored-by: Haris Okanovic <haris.okano...@ni.com> Coauthored-by: Josh Hernstrom <josh.hernst...@ni.com> Natinst-ReviewBoard-ID: 120348 Natinst-ReviewBoard-ID: 120447 --- meta/classes/kernel-modul

Re: [OE-core] [PATCH v2] tzdata: Make /etc/timezone optional

On 01/12/2016 04:24 AM, Burton, Ross wrote: On 12 January 2016 at 04:03, Andre McCurdy > wrote: You lose a style point for == in a shell script... Patch sent. We really need to scan for bashisms in our shell fragments. Bah, my bad.

[OE-core] [PATCH v2] tzdata: Make /etc/timezone optional

ult config and verified CONFFILES_tzdata still has both /etc/timezone and /etc/localtime and both are in the image. Built with INSTALL_TIMEZONE_FILE = "0" and verified /etc/timezone is removed from CONFFILES_tzdata and the image. Successfully installed package to an x64 target. Signed-of

Re: [OE-core] [PATCH] tzdata: Make /etc/timezone optional

On 01/05/2016 07:03 AM, Burton, Ross wrote: On 23 December 2015 at 23:51, Haris Okanovic <haris.okano...@ni.com <mailto:haris.okano...@ni.com>> wrote: +CONFFILES_${PN} += "${@['','${sysconfdir}/timezone'][d.getVar('INSTALL_TIMEZONE_FILE', True) == '1']}"

[OE-core] [PATCH] tzdata: Make /etc/timezone optional

ult config and verified CONFFILES_tzdata still has both /etc/timezone and /etc/localtime and both are in the image. Built with INSTALL_TIMEZONE_FILE = "0" and verified /etc/timezone is removed from CONFFILES_tzdata and the image. Successfully installed package to an x64 target. Signed-of

Re: [OE-core] [PATCH v2] kernel: Add support for multiple kernel packages

Hi Khem, On 12/14/2015 06:33 PM, Khem Raj wrote: On Dec 14, 2015, at 2:35 PM, Haris Okanovic <haris.okano...@ni.com> wrote: From: Gratian Crisan <gratian.cri...@ni.com> This change allows distributions to provide multiple builds of kernel and module packages. For example, a dis

[OE-core] [PATCH 2/2] bitbake.conf: Define source package, disabled by default

disabled by default, but may be overridden by distro configs or individual recipes as needed. This is change is part of a series which add source packages to OE. See the following thread for more information: http://thread.gmane.org/gmane.comp.handhelds.openembedded.core/72660 Signed-off-by: Haris

[OE-core] [PATCH 1/2] package.bbclass/package.py: Add do_install_source() task

Signed-off-by: Haris Okanovic <haris.okano...@ni.com> --- meta/classes/package.bbclass | 5 +++ meta/conf/documentation.conf | 1 + meta/lib/oe/package.py | 96 3 files changed, 102 insertions(+) diff --git a/meta/classes/package.bbclass

[OE-core] [PATCH] kernel: Add support for multiple kernel packages

modules packages with alternate name next to default kernel. Signed-off-by: Gratian Crisan <gratian.cri...@ni.com> Signed-off-by: Haris Okanovic <haris.okano...@ni.com> Coauthored-by: Haris Okanovic <haris.okano...@ni.com> Coauthored-by: Josh Hernstrom <josh.hernst...@ni.com> Natinst-Re

[OE-core] [PATCH v2] kernel: Add support for multiple kernel packages

@ni.com> Signed-off-by: Haris Okanovic <haris.okano...@ni.com> Coauthored-by: Haris Okanovic <haris.okano...@ni.com> Coauthored-by: Josh Hernstrom <josh.hernst...@ni.com> Natinst-ReviewBoard-ID: 120348 Natinst-ReviewBoard-ID: 120447 --- meta/classes/kernel-module-split.bbclas

Re: [OE-core] [PATCH] kernel: Add support for multiple kernel packages

Hi Bruce, Thanks for taking time to look over our patch! On 12/14/2015 02:02 PM, Bruce Ashfield wrote: On Mon, Dec 14, 2015 at 2:17 PM, Bruce Ashfield <bruce.ashfi...@gmail.com <mailto:bruce.ashfi...@gmail.com>> wrote: On Mon, Dec 14, 2015 at 2:06 PM, Haris Okanovic

Re: [OE-core] [RFC] Source packages

Hi Andre, Thanks for the quick response! On 12/09/2015 11:56 AM, Andre McCurdy wrote: Hi Haris, On Tue, Dec 8, 2015 at 12:53 PM, Haris Okanovic <haris.okano...@ni.com> wrote: This change enables creation of ${PN}-src packages which provide recipe source code on target ma

[OE-core] [RFC] Source packages

This change enables creation of ${PN}-src packages which provide recipe source code on target machines. A distribution might use this facility to provide a feed of source packages for user reference and debugging/development activities. The packaged source code is copy of SRC_URI files + a

[OE-core] [PATCH] sdk.py / OpkgSdk: remove_packaging_data() after install

/var/lib/opkg/ is empty after running populate_sdk() in a Fido based distribution. [1] http://git.yoctoproject.org/cgit/cgit.cgi/opkg/commit/?h=opkg-0.3.x=f9022a8520fcde8f1b71424d26a652c218fce685 Signed-off-by: Haris Okanovic <haris.okano...@ni.com> Reviewed-by: Alejandro del Ca

Re: [OE-core] [OE-Core] [Fido] [PATCH] openssh: Backport CVE-2015-5600 fix

://kingcope.wordpress.com/2015/07/16/openssh-keyboard-interactive-authentication-brute-force-vulnerability-maxauthtries-bypass/ Regards, Joshua 1. http://cgit.openembedded.org/openembedded-core-contrib/log/?h=joshuagl/fido-next Signed-off-by: Haris Okanovic <haris.okano...@ni.com> Re

[OE-core] [PATCH] populate_sdk_base: Add sysroot symlink check

ot; to enable this check. Use case: The -h option may be set via SDKTAROPTS in some configurations to create symlink-less SDK archives for Windows file systems. Signed-off-by: Haris Okanovic <haris.okano...@ni.com> --- meta/classes/populate_sdk_base.bbclass | 53 +-

[OE-core] [OE-Core] [Fido] [PATCH] openssh: Backport CVE-2015-5600 fix

an openssh 7.1p1-1 client on Arch. Signed-off-by: Haris Okanovic <haris.okano...@ni.com> Reviewed-by: Rich Tollerton <rich.toller...@ni.com> Reviewed-by: Ken Sharp <ken.sh...@ni.com> Natinst-ReviewBoard-ID: 115602 Natinst-CAR-ID: 541263 --- This patch only applies to Fido and ear

[OE-core] [OE-Core] [master/glibc 2.21] [PATCH] glibc: CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow

with a misaligned buffer could use this flaw to crash the application or, potentially, execute arbitrary code with the permissions of the user running the application. https://sourceware.org/bugzilla/show_bug.cgi?id=18287 Signed-off-by: Haris Okanovic haris.okano...@ni.com Reviewed-by: Ben Shelton ben.shel

Re: [OE-core] [PATCH 2/2] glibc: CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow

On 05/14/2015 03:39 PM, Burton, Ross wrote: Will you be able to port this to master which is currently glibc 2.21? Sure. I'll post a second patch to oe-core for master (glibc 2.21) once I test it out. It'll be the same .patch file for glibc's source, but a different change in the bb recipe.

[OE-core] [PATCH 2/2] glibc: CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow

with a misaligned buffer could use this flaw to crash the application or, potentially, execute arbitrary code with the permissions of the user running the application. https://sourceware.org/bugzilla/show_bug.cgi?id=18287 Signed-off-by: Haris Okanovic haris.okano...@ni.com Signed-off-by: Ken Sharp ken.sh

[OE-core] [PATCH 1/2] glibc: CVE-2015-1472: wscanf allocates too little memory

://sourceware.org/bugzilla/show_bug.cgi?id=16618 Signed-off-by: Haris Okanovic haris.okano...@ni.com Signed-off-by: Ken Sharp ken.sh...@ni.com Reviewed-by: Rich Tollerton rich.toller...@ni.com --- Natinst-CAR-ID: 518552 Natinst-ReviewBoard-ID: 96712 --- ...5-1472-wscanf-allocates-too-little-memory.patch | 127

Re: [OE-core] [PATCH 1/2] glibc: CVE-2015-1472: wscanf allocates too little memory

On 05/07/2015 06:19 PM, Haris Okanovic wrote: Backport Paul Pluzhnikov's glibc patch for CVE-2015-1472: Under certain conditions wscanf can allocate too little memory for the to-be-scanned arguments and overflow the allocated buffer. The implementation now correctly computes the required

Re: [OE-core] [PATCH 2/2] glibc: CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow

On 05/07/2015 06:19 PM, Haris Okanovic wrote: Backport Arjun Shankar's patch for CVE-2015-1781: A buffer overflow flaw was found in the way glibc's gethostbyname_r() and other related functions computed the size of a buffer when passed a misaligned buffer as input. An attacker able to make