After installing python-unittest, the following errors occur when executing
"import unittest" from a python commandline:
ImportError: No module named StringIO
ImportError: No module named pprint
ImportError: No module named difflib
ImportError: No module named pprint
ImportError: No module named fn
On 12/06/2013 06:41 AM, Saul Wold wrote:
On 12/05/2013 12:55 AM, qi.c...@windriver.com wrote:
From: Chen Qi
Characters like '-O2' or '-Ofast' will be replaced by '-O1' when
compiling cipher. If we are cross compiling libgcrypt and sysroot
contains such characters, we would get compile errors b
From: Yue Tao
acpid.c in acpid before 2.0.9 does not properly handle a situation in which
a process has connected to acpid.socket but is not reading any data, which
allows local users to cause a denial of service (daemon hang) via a crafted
application that performs a connect system call but no r
From: Baogen Shang
cve description:
Heap-based buffer overflow in the readgifimage function in the gif2tiff
tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial
of service (crash) and possibly execute arbitrary code via a crafted height
and width values in a GIF image.
htt
From: Baogen Shang
cve description:
Use-after-free vulnerability in the t2p_readwrite_pdf_image function
in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause
a denial of service (crash) or possible execute arbitrary code via a
crafted TIFF image.
http://web.nvd.nist.gov/view/vul
From: Ming Liu
Heap-based buffer overflow in the tp_process_jpeg_strip function in tiff2pdf
in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted TIFF image
file.
http://web.nvd.nist.gov/view/vuln/detail?vulnId
From: Li Wang
xinetd does not enforce the user and group configuration directives
for TCPMUX services, which causes these services to be run as root
and makes it easier for remote attackers to gain privileges by
leveraging another vulnerability in a service.
http://web.nvd.nist.gov/view/vuln/deta
From: Yue Tao
Use-after-free vulnerability in International Components for Unicode (ICU),
as used in Google Chrome before 30.0.1599.66 and other products, allows
remote attackers to cause a denial of service or possibly have unspecified
other impact via unknown vectors.
http://web.nvd.nist.gov/v
Each of the patches in this set fix various CVE items. This is the matching
set for the dora commits sent earlier, only for master. They all still apply.
The following changes since commit 300760193c6bcfd20f1d4908f912bebd53e86281:
tcl: fix tclConfig.sh to point to the correct private headers
On 11/22/2013 06:02 PM, Hongxu Jia wrote:
On 11/23/2013 09:56 AM, Hongxu Jia wrote:
On 11/23/2013 06:30 AM, Saul Wold wrote:
On 11/21/2013 05:14 AM, Hongxu Jia wrote:
Add PACKAGECONFIG to support --enable-python-bindings
Add PACKAGECONFIG to support lttng-ust
Signed-off-by: Hongxu Jia
---
From: Baogen Shang
cve description:
Use-after-free vulnerability in the t2p_readwrite_pdf_image function
in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause
a denial of service (crash) or possible execute arbitrary code via a
crafted TIFF image.
http://web.nvd.nist.gov/view/vul
From: Ming Liu
Heap-based buffer overflow in the tp_process_jpeg_strip function in tiff2pdf
in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted TIFF image
file.
http://web.nvd.nist.gov/view/vuln/detail?vulnId
From: Baogen Shang
cve description:
Heap-based buffer overflow in the readgifimage function in the gif2tiff
tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial
of service (crash) and possibly execute arbitrary code via a crafted height
and width values in a GIF image.
htt
From: Yue Tao
Use-after-free vulnerability in International Components for Unicode (ICU),
as used in Google Chrome before 30.0.1599.66 and other products, allows
remote attackers to cause a denial of service or possibly have unspecified
other impact via unknown vectors.
http://web.nvd.nist.gov/v
From: Li Wang
xinetd does not enforce the user and group configuration directives
for TCPMUX services, which causes these services to be run as root
and makes it easier for remote attackers to gain privileges by
leveraging another vulnerability in a service.
http://web.nvd.nist.gov/view/vuln/deta
From: Yue Tao
acpid.c in acpid before 2.0.9 does not properly handle a situation in which
a process has connected to acpid.socket but is not reading any data, which
allows local users to cause a denial of service (daemon hang) via a crafted
application that performs a connect system call but no r
Each of the patches in this set fix various CVE items. They apply to dora,
it has not yet been checked if they apply to master as well.
The following changes since commit c303f5ecf7cda1c3b8bb776a6800946c0487cd93:
Revert "utils.bbclass: Fix override ordering for FILESPATH" (2013-12-03
12:55:47
From: Ming Liu
-- Sent for YP compliance --
Also changes ownerships of subdirs from root to bind and move chroot
entries to volatiles.
Based on meta-selinux commit: 0c2d3c680b1d43d73e4187f326990ae900b9055b
Signed-off-by: Ming Liu
Signed-off-by: Robert Yang
Signed-off-by: Mark Hatle
---
met
From: Yue Tao
-- Sent for YP compliance --
Signed-off-by: Yue Tao
Signed-off-by: Robert Yang
---
.../bind-add-init-bind-status-command.patch| 45 ++
meta/recipes-connectivity/bind/bind_9.8.1.bb | 3 +-
2 files changed, 47 insertions(+), 1 deletion(-)
create
From: Ming Liu
-- Sent for YP compliance --
1. Introduce bind-chroot package, contains files/directories used as jail.
2. Add hooks to init script for setting up named to run chroot.
3. Setting ROOTDIR in /etc/default/bind9 is needed to run chroot.
These components mainly come from:
ftp://ftp.r
From: Wenzong Fan
-- Sent for YP compliance --
The nsinstall is a tool that only runs on host to install built files.
It was not included in native tools somehow, while building lib64-nss
on 32bit host, it will fail with errors:
1) On OpenSUSE 11.x 32bit:
* nsinstall.c:1:0: sorry, unimplemented
From: "Junxian.Xiao"
-- Sent for YP compliance --
These two packages both install /etc/sysctl.conf, but we should
make sure we will install this file in base-files package.
Signed-off-by: Junxian.Xiao
Signed-off-by: Mark Hatle
---
meta/recipes-extended/procps/procps_3.2.8.bb | 4
1 file
From: Chen Qi
-- Sent for YP compliance --
This patch adds support for read-only rootfs to the bind service.
Now the init script will check a variable, ALLOW_ROOTFS_READ_ONLY,
to see whether it should start the bind service in a read-only rootfs
or not. The value is by default unset, thus disab
From: Amy Fong
-- Sent for YP compliance --
On some builds with really long paths, we can end up exceeding the maximum
length line for an interpreter (man execve: A maximum line length of
127 characters is allowed for the first line in a #! executable shell
script.)
To avoid this limit, we use
The following patches are various items that we have in our tree, but I
don't believe are generally applicable and should likely -not- be merged
into oe-core.
These are being sent for Yocto Project compliance.
Note a few of these have previous been sent. The items were resent because
later patch
On 12/05/2013 12:55 AM, qi.c...@windriver.com wrote:
From: Chen Qi
Characters like '-O2' or '-Ofast' will be replaced by '-O1' when
compiling cipher. If we are cross compiling libgcrypt and sysroot
contains such characters, we would get compile errors because the
sysroot path has been modified.
On Thu, 2013-12-05 at 17:18 -0500, Philip Balister wrote:
> On 12/04/2013 07:38 PM, Ross Burton wrote:
> > Instead of the class-specific variables OECMAKE_BUILDPATH and
> > OECMAKE_SOURCEPATH, just use ${B} and ${S}.
> >
> > If these two paths are different, delete any existing ${B} before running
On 12/04/2013 07:38 PM, Ross Burton wrote:
> Instead of the class-specific variables OECMAKE_BUILDPATH and
> OECMAKE_SOURCEPATH, just use ${B} and ${S}.
>
> If these two paths are different, delete any existing ${B} before running a
> build so that previous builds don't taint the current build.
>
Using a whitelist for image names to default to when none are
specified on the command line is no longer desired. Instead,
choose the most recently created image filename that conforms
to typical image naming conventions.
Fixes [YOCTO #5617].
Signed-off-by: Scott Garman
---
scripts/runqemu | 17
Hi all,
It's been a while since I've submitted a patch, let's see if I can get
this process right the first time. ;)
This is a fix for Yocto bug #5617. Ross Burton wasn't a fan of the image
filename whitelist, and I have to agree - it's not very maintainable. So
when we have to guess the image fi
On 12/05/2013 12:51 PM, Mark Hatle wrote:
On 11/22/13, 12:43 PM, Saul Wold wrote:
On 11/20/2013 11:05 PM, Mark Hatle wrote:
From: Ming Liu
Heap-based buffer overflow in the tp_process_jpeg_strip function in
tiff2pdf
in libtiff 4.0.3 and earlier allows remote attackers to cause a
denial of
ser
On Wed, Dec 04, 2013 at 11:10:32PM +0100, Martin Jansa wrote:
> * I'm not entirely sure it's best way to do it, but it's the easiest one
> * we can clean TARGET_FPU in allarch.bbclass to resolve icc_version
> * we can provide separate icc_get_tool function for native recipes
I've tried to implemen
On 11/22/13, 12:43 PM, Saul Wold wrote:
On 11/20/2013 11:05 PM, Mark Hatle wrote:
From: Ming Liu
Heap-based buffer overflow in the tp_process_jpeg_strip function in tiff2pdf
in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary
On 12/05/2013 01:01 AM, Andrei Gherzan wrote:
This version includes libavresample needed for packages like xbmc.
To use this version add:
PREFERRED_VERSION_libav = "9.10".
Removed git version as being an older version of a 9.X release.
Signed-off-by: Andrei Gherzan
---
.../libav/{libav_git.bb
Andrei:
I see RP already merged this, but I have a couple of comments
On 12/05/2013 01:01 AM, Andrei Gherzan wrote:
Signed-off-by: Andrei Gherzan
---
.../0001-configure-enable-pic-for-AArch64.patch | 0
meta/recipes-multimedia/libav/{libav_0.8.8.bb => libav_0.8.9.bb} |
On 12/04/2013 10:14 PM, chong...@windriver.com wrote:
From: Chong Lu
Update commit in order to add patches like below:
doc/examples: error out when a subdir make fails
fix: lttng-gen-tp: add missing spaces around flags
Signed-off-by: Chong Lu
---
meta/recipes-kernel/lttng/l
IMAGETEST is now TEST_IMAGE, and TEST_SCEN and TEST_SERIALIZE don't exist
anymore.
Signed-off-by: Ross Burton
---
meta/conf/documentation.conf |4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/meta/conf/documentation.conf b/meta/conf/documentation.conf
index 648..a40b
When building expect with rm_work enabled, it was not finding the correct
private
header files because they were removed from the WORKDIR, this fixes the
tclConfig.sh
to point to the sysroot private area instead.
This also fixes the -L directory to point to STAGING_LIBDIR instead if INCDIR!
[YO
Ensure the right branches are set in SRC_URI to match the revisions
used. This resolves certain fetch failures.
Signed-off-by: Richard Purdie
---
diff --git a/meta/recipes-graphics/mx/mx-1.0_1.4.7.bb
b/meta/recipes-graphics/mx/mx-1.0_1.4.7.bb
index 5657469..ce35b61 100644
--- a/meta/recipes-grap
Upstream git has a fix for broken compilation against Freetype 2.5.1.
It also integrates the link patch we had, and installs into $bindir.
Signed-off-by: Ross Burton
---
.../files/dso_linking_change_build_fix.patch | 74
meta/recipes-graphics/fstests/fstests_git.bb
On Thu, 2013-12-05 at 08:24 -0700, Gary Thomas wrote:
> On 2013-12-05 08:09, Richard Purdie wrote:
> > On Thu, 2013-12-05 at 07:09 -0700, Gary Thomas wrote:
> >> On 2013-12-05 06:50, Richard Purdie wrote:
> >>> On Thu, 2013-12-05 at 05:18 -0700, Gary Thomas wrote:
> I try to use a local source
On 2013-12-05 08:09, Richard Purdie wrote:
On Thu, 2013-12-05 at 07:09 -0700, Gary Thomas wrote:
On 2013-12-05 06:50, Richard Purdie wrote:
On Thu, 2013-12-05 at 05:18 -0700, Gary Thomas wrote:
I try to use a local source mirror, fully populated with packages, so I
can deliver a complete (no n
This avoids certain fetcher failures and network accesses.
Signed-off-by: Richard Purdie
---
diff --git a/meta/recipes-sato/matchbox-keyboard/matchbox-keyboard_git.bb
b/meta/recipes-sato/matchbox-keyboard/matchbox-keyboard_git.bb
index bcf6f6c..225e66e 100644
--- a/meta/recipes-sato/matchbox-key
On Thu, 2013-12-05 at 07:09 -0700, Gary Thomas wrote:
> On 2013-12-05 06:50, Richard Purdie wrote:
> > On Thu, 2013-12-05 at 05:18 -0700, Gary Thomas wrote:
> >> I try to use a local source mirror, fully populated with packages, so I
> >> can deliver a complete (no network required) bundle to my cu
On 2013-12-05 06:50, Richard Purdie wrote:
On Thu, 2013-12-05 at 05:18 -0700, Gary Thomas wrote:
I try to use a local source mirror, fully populated with packages, so I
can deliver a complete (no network required) bundle to my customers. This
has recently been broken.
I can no longer use BB_NO
On Thu, 2013-12-05 at 05:18 -0700, Gary Thomas wrote:
> I try to use a local source mirror, fully populated with packages, so I
> can deliver a complete (no network required) bundle to my customers. This
> has recently been broken.
>
> I can no longer use BB_NO_NETWORK=1 for git recipes, since th
The revision specified is on the cross_prelink branch so mark the
url accordingly else the fetch can fail in the no network case.
Signed-off-by: Richard Purdie
---
diff --git a/meta/recipes-devtools/prelink/prelink_git.bb
b/meta/recipes-devtools/prelink/prelink_git.bb
index 744a55f..9f6e315 1006
On Wednesday 04 December 2013 16:40:28 Paul Eggleton wrote:
> libarchive's configure script looks for ext2fs/ext2_fs.h in order to use
> some defines for file attributes support if present (but doesn't link to
> any additional libraries.) There is no configure option to disable this,
> and if e2fsp
On Thursday 05 December 2013 13:42:17 Paul Eggleton wrote:
> On Thursday 05 December 2013 13:32:54 Richard Purdie wrote:
> > On Thu, 2013-12-05 at 12:55 +, Ross Burton wrote:
> > > Signed-off-by: Ross Burton
> > > ---
> > >
> > > meta/conf/documentation.conf |1 -
> > > 1 file changed, 1
On Thursday 05 December 2013 13:32:54 Richard Purdie wrote:
> On Thu, 2013-12-05 at 12:55 +, Ross Burton wrote:
> > Signed-off-by: Ross Burton
> > ---
> >
> > meta/conf/documentation.conf |1 -
> > 1 file changed, 1 deletion(-)
> >
> > diff --git a/meta/conf/documentation.conf b/meta/co
On Thu, 2013-12-05 at 12:55 +, Ross Burton wrote:
> Signed-off-by: Ross Burton
> ---
> meta/conf/documentation.conf |1 -
> 1 file changed, 1 deletion(-)
>
> diff --git a/meta/conf/documentation.conf b/meta/conf/documentation.conf
> index 648..db3701b 100644
> --- a/meta/conf/documen
If some services have failed to start, get the status of them and some of their
log to help debug the problem.
Signed-off-by: Ross Burton
---
meta/lib/oeqa/runtime/systemd.py |4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/meta/lib/oeqa/runtime/systemd.py b/meta/lib/oeq
If connman isn't running and we're running under systemd, use systemctl to get
the state according to systemd and the end of the connman log.
Signed-off-by: Ross Burton
---
meta/lib/oeqa/runtime/connman.py | 11 ++-
1 file changed, 10 insertions(+), 1 deletion(-)
diff --git a/meta/lib
Signed-off-by: Ross Burton
---
meta/conf/documentation.conf |1 -
1 file changed, 1 deletion(-)
diff --git a/meta/conf/documentation.conf b/meta/conf/documentation.conf
index 648..db3701b 100644
--- a/meta/conf/documentation.conf
+++ b/meta/conf/documentation.conf
@@ -118,7 +118,6 @@ IMA
Convert custom DISTRO_FEATURES test to distro_features_check.bbclass,
and keep exceptions for libpciaccess and pixman.
Signed-off-by: Andreas Oberritter
---
meta/recipes-graphics/xorg-lib/libpciaccess_0.13.2.bb | 2 ++
meta/recipes-graphics/xorg-lib/pixman_0.30.2.bb | 2 ++
meta/recipes-gr
Ping.
On 17.10.2013 13:31, Andreas Oberritter wrote:
> - Cairo was auto-detected, but not listed as a dependency.
>
> Signed-off-by: Andreas Oberritter
> ---
> meta/recipes-graphics/cogl/cogl-1.0.inc | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/meta/recipes-graphics/cogl/cogl-1.0.i
I try to use a local source mirror, fully populated with packages, so I
can deliver a complete (no network required) bundle to my customers. This
has recently been broken.
I can no longer use BB_NO_NETWORK=1 for git recipes, since this revision:
commit 2354250a95eab484459f41f8715ae112295c2174
Au
Hi Roy,
On Thursday 05 December 2013 09:08:49 rongqing...@windriver.com wrote:
> From: Roy Li
>
> After 1b8e4abd2d9c0 [bitbake.conf/package: Collapse PKGDATA_DIR into
> a single machine specific directory], oe-pkgdata-util does not use
> target_suffix parameter, so do not need to loop the vendor
On Wed, Dec 04, 2013 at 08:35:51PM -0800, Iyad Qumei wrote:
> The original icecc script does not handle toolchain content
> properly, resulting in build failures, such as
>
>gxx: fatal error: -fuse-linker-plugin, but liblto_plugin.so not found
>
> This patch brings in the latest script form t
This will allow offline creation of a rootfs, using only
the RPM package repository and a toolchain tarball.
Ref: https://github.com/nysan/rootfs-sandbox
Signed-off-by: David Nyström
---
meta/recipes-core/packagegroups/nativesdk-packagegroup-sdk-host.bb | 1 +
1 file changed, 1 insertion(+)
di
On Thu, Dec 05, 2013 at 10:10:02AM +, Richard Purdie wrote:
> On Thu, 2013-12-05 at 00:38 +, Ross Burton wrote:
> > Hi,
> >
> > This is a Request For Comments because it changes behaviour of the cmake
> > class
> > and I'm not entirely knowledgeable in cmake.
> >
> > For some reason, cma
When writing out variable values to pkgdata, if the value has been set
in the datastore with an override for the package, we use the package
name override in the pkgdata key as well; however the recently added
code to read pkgdata in buildhistory.bbclass was just using the override
where we normall
On Thu, 2013-12-05 at 00:38 +, Ross Burton wrote:
> Hi,
>
> This is a Request For Comments because it changes behaviour of the cmake class
> and I'm not entirely knowledgeable in cmake.
>
> For some reason, cmake.bbclass doesn't use ${S} and ${B}, but instead has it's
> own variables OECMAKE_
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ross Burton schreef op 05-12-13 01:38:
> Hi,
>
> This is a Request For Comments because it changes behaviour of the cmake
> class and I'm not entirely knowledgeable in cmake.
>
> For some reason, cmake.bbclass doesn't use ${S} and ${B}, but instead h
From: Chen Qi
The '-c DEV' option is specific to the switch_root provided by busybox.
switch_root from util-linux doesn't recognize this option. As a result,
if we we this init-live.sh script together with util-linux, we would get
a kernel panic when executing switch_root.
Besides, this option d
From: Chen Qi
The following changes since commit c51730aaa91066cfb51ad6ec2920fb4f9d9ea94c:
bitbake: Hob: check if warnings are related to package build (2013-12-03
17:45:54 +)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib ChenQi/initramfs-switch_root
Signed-off-by: Andrei Gherzan
---
.../0001-configure-enable-pic-for-AArch64.patch | 0
meta/recipes-multimedia/libav/{libav_0.8.8.bb => libav_0.8.9.bb} | 8 +++-
2 files changed, 3 insertions(+), 5 deletions(-)
rename meta/recipes-multimedia/libav/{libav-0.8.8 =>
libav-0.
This version includes libavresample needed for packages like xbmc.
To use this version add:
PREFERRED_VERSION_libav = "9.10".
Removed git version as being an older version of a 9.X release.
Signed-off-by: Andrei Gherzan
---
.../libav/{libav_git.bb => libav_9.10.bb} | 17 +++
From: Chen Qi
The following changes since commit c51730aaa91066cfb51ad6ec2920fb4f9d9ea94c:
bitbake: Hob: check if warnings are related to package build (2013-12-03
17:45:54 +)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib ChenQi/libgcrypt
http://git.po
From: Chen Qi
Characters like '-O2' or '-Ofast' will be replaced by '-O1' when
compiling cipher. If we are cross compiling libgcrypt and sysroot
contains such characters, we would get compile errors because the
sysroot path has been modified.
Fix this by adding whitespaces before and after the o
70 matches
Mail list logo
