[OE-core] [PATCH] boot-directdisk: add the support of vmdk

2013-11-19 Thread yanjun.zhu
add the support of vmdk. --- meta/classes/boot-directdisk.bbclass | 21 ++--- 1 files changed, 18 insertions(+), 3 deletions(-) diff --git a/meta/classes/boot-directdisk.bbclass b/meta/classes/boot-directdisk.bbclass index 5535728..3277666 100644 ---

[OE-core] [PATCH] pr-util: insert appropriate parameter to adapt libtool

2013-11-18 Thread yanjun.zhu
When ccache is enabled, a parameter ccache is inserted. libtool can not handle this parameter correctly. So --tag=CC is introduced to help libtool handle it. --- meta/recipes-support/apr/apr-util_1.5.2.bb |5 + 1 files changed, 5 insertions(+), 0 deletions(-) diff --git

[OE-core] [PATCH 1/1] Python: Fix for CVE-2012-2135

2013-03-03 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:http://bugs.python.org/issue14579 The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information

[OE-core] [oe-core][V2PATCH] pulseaudio_2.1: Remove the dependence of fftw. Signed-off-by: yanjun.zhu yanjun....@windriver.com

2013-02-03 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com --- meta/recipes-multimedia/pulseaudio/pulseaudio.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-multimedia/pulseaudio/pulseaudio.inc b/meta/recipes-multimedia/pulseaudio/pulseaudio.inc index 6633e38..2fed4f9 100644 --- a/meta

[OE-core] [oe-core][V2 PATCH] pulseaudio_2.1: Remove the dependence of fftw.

2013-02-03 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Signed-off-by: yanjun.zhu yanjun@windriver.com --- meta/recipes-multimedia/pulseaudio/pulseaudio.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-multimedia/pulseaudio/pulseaudio.inc b/meta/recipes-multimedia/pulseaudio

[OE-core] [oe-core][PATCH] pulseaudio_2.1: when do_compile, pulseaudio needs fftw3.h header file. In order to provide fftw3.h, the dependence of fftw is added.

2013-01-31 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Signed-off-by: yanjun.zhu yanjun@windriver.com --- meta/recipes-multimedia/pulseaudio/pulseaudio_2.1.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-multimedia/pulseaudio/pulseaudio_2.1.bb b/meta/recipes

[OE-core] [V2 PATCH 1/1] squashfs: fix CVE-2012-4025

2012-12-12 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference: http://squashfs.git.sourceforge.net/git/gitweb.cgi? p=squashfs/squashfs;a=patch;h=8515b3d420f502c5c0236b86e2d6d7e3b23c190e Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote

[OE-core] [PATCH 1/1] squashfs: fix CVE-2012-4025

2012-12-11 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com CQID:WIND00366813 Reference: http://squashfs.git.sourceforge.net/git/gitweb.cgi? p=squashfs/squashfs;a=patch;h=8515b3d420f502c5c0236b86e2d6d7e3b23c190e Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier

[OE-core] [PATCH 1/1] Python: Fix for CVE-2012-2135

2012-11-30 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:http://bugs.python.org/issue14579 The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information

[OE-core] [PATCH 1/1] libproxy: Fix for CVE-2012-4504

2012-11-30 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:https://code.google.com/p/libproxy/source/detail?r=853 Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file. http

[OE-core] [PATCH 1/1] Python: Fix for CVE-2012-2135

2012-11-30 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:http://bugs.python.org/issue14579 The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information

[OE-core] [PATCH 1/1] squashfs: fix for CVE-2012-4024

2012-11-30 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:http://squashfs.git.sourceforge.net/git/gitweb.cgi?p= squashfs/squashfs;a=commit;h=19c38fba0be1ce949ab44310d7f49887576cc123 Fix potential stack overflow in get_component() where an individual pathname component in an extract file (specified

[OE-core] [PATCH 1/1] Python: Fix for CVE-2012-2135

2012-11-30 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:http://http://bugs.python.org/issue14579 The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive

[OE-core] [PATCH 1/1] Python: Fix for CVE-2012-2135

2012-11-30 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:http://http://bugs.python.org/issue14579 The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive

[OE-core] [oe][PATCH 1/1] squashfs: fix for CVE-2012-4024

2012-11-29 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:http://squashfs.git.sourceforge.net/git/gitweb.cgi?p= squashfs/squashfs;a=commit;h=19c38fba0be1ce949ab44310d7f49887576cc123 Fix potential stack overflow in get_component() where an individual pathname component in an extract file (specified

[OE-core] [PATCH 1/1] Python: Fix for CVE-2012-2135

2012-11-29 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:http://http://bugs.python.org/issue14579 The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive

[OE-core] [PATCH 1/1] libproxy: Fix for CVE-2012-4504

2012-11-29 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:https://code.google.com/p/libproxy/source/detail?r=853 Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file. http

[OE-core] [PATCH 1/1] libproxy: Fix for CVE-2012-4504

2012-11-29 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:https://code.google.com/p/libproxy/source/detail?r=853 Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file. http

[OE-core] [oe][PATCH] libproxy: Fix for CVE-2012-4504

2012-11-28 Thread yanjun.zhu
From: yanjun.zhu yanjun@windriver.com Reference:https://code.google.com/p/libproxy/source/detail?r=853 Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file. http