Chong Lu 6a30031708 apt: fix for CVE-2014-0478 ...

APT before 1.0.4 does not properly validate source packages, which allows
man-in-the-middle attackers to download and install Trojan horse packages
by removing the Release signature.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0478

(From OE-Core rev: 3dd692fcf2b0c11731b3f30abdf2b1878458a898)

Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-09-30 14:10:34 +01:00

..

apt

apt: fix for CVE-2014-0478

2014-09-30 14:10:34 +01:00

autoconf

autoconf: add rdep on perl-module-data-dumper

2014-08-15 18:21:49 +01:00

autogen

autogen-native: inherit pkgconfig to fix a build failure

2014-08-25 10:26:00 +01:00

automake

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

binutils

binutils-cross-canadian: Explicitly DEPEND on nativesdk-flex, we require it anyway

2014-07-25 15:33:58 +01:00

bison

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

bootchart2

bootchart2: no bashism in bootchartd.in

2014-08-28 15:12:44 +01:00

btrfs-tools

btrfs-tools: Upgrade 3.12 -> 3.14.2

2014-07-17 12:28:50 +01:00

ccache

ccache: update to upstream version 3.1.9

2013-08-26 11:47:19 +01:00

cdrtools

cdrtools-native: upgrade to 3.01a20

2014-01-14 11:33:52 +00:00

chrpath

chrpath: upgrade to 0.16

2014-03-02 17:25:28 +00:00

cmake

cmake: Avoid accidentally including libacl.h

2014-05-28 08:19:30 +01:00

desktop-file-utils

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

devel-config

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues

2014-02-17 15:28:59 +00:00

diffstat

diffstat: update to version 1.59

2014-07-19 00:09:01 +01:00

distcc

Globally replace 'base_contains' calls with 'bb.utils.contains'

2014-04-25 17:19:19 +01:00

dmidecode

mirrors.bbclass: Add mirror site for savannah

2014-05-11 12:27:21 +01:00

docbook-dsssl-stylesheets

sgml-common-native: fix the generation of sgml-docbook.cat

2014-03-19 14:42:43 +00:00

docbook-sgml-dtd

sgml-common-native: fix the generation of sgml-docbook.cat

2014-03-19 14:42:43 +00:00

docbook-utils

docbook-utils-native: Unbreak the build after source and build dir split

2013-03-25 20:51:19 +00:00

docbook-xml

docbook-xml: add docbook-xml-dtd4

2014-07-16 10:20:50 +01:00

dosfstools

Don't set DESCRIPTION to the same value as SUMMARY

2013-12-03 17:45:52 +00:00

dpkg

dpkg: Security Advisory - CVE-2014-3127

2014-06-17 10:23:53 +01:00

e2fsprogs

e2fsprogs: update acinclude.m4

2014-09-10 15:38:55 +01:00

elfutils

elfutils/elfutils-native: Fix patching generated files

2014-07-03 17:41:17 +01:00

expect

expect: fix shared object file cannot be opened

2014-08-23 23:01:57 +01:00

file

file: remove dump and filesystems

2014-07-16 10:20:50 +01:00

flex

flex: fix the deps for ptest builds

2014-09-22 13:04:21 +01:00

gcc

gcc-configure/gcc-common: Move preconfigure definition to common include

2014-09-16 22:14:12 +01:00

gdb

gdb: allow compilation for __aarch64__

2014-09-10 11:33:26 +01:00

git

git: add Git perl module to perltools package

2014-09-29 12:12:45 +01:00

gnu-config

gnu-config: Let it recognise *-*-musl* triplets

2014-06-01 14:29:29 +01:00

guile

guile: workaround ice ssa corruption while DEBUG_BUILD

2014-08-23 23:02:00 +01:00

guilt

guilt-native: tidy up recipe

2014-01-02 12:50:24 +00:00

help2man

help2man-native: Upgrade to 1.46.1

2014-08-02 09:26:16 +01:00

i2c-tools

i2c-tools: create i2c-tools-misc package for perl scripts

2014-09-16 22:14:06 +01:00

icecc-create-env

icecc-create-env-native: add SUMMARY and tweak DESCRIPTION

2014-01-02 12:50:23 +00:00

icon-naming-utils

autotools-brokensep: Mark recipes with broken separate build dir support

2014-02-28 14:01:16 +00:00

insserv

run-ptest: fix bashism

2014-08-28 15:12:44 +01:00

installer

Remove remnants of deleted "do_package_write" task.

2014-08-11 11:01:50 +01:00

intltool

intltool: Define DATADIRNAME=share for uclibc based systems

2014-03-17 14:01:41 +00:00

json-c

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues

2014-02-17 15:28:59 +00:00

kconfig-frontends

kconfig-frontends: add bash to RDEPENDS_kconfig-frontends

2014-08-23 09:26:10 +01:00

libtool

libtool: add bash to RDEPENDS_libtool

2014-08-23 09:26:10 +01:00

linuxdoc-tools

linuxdoc-tools: remove usage of FILESPATH

2014-05-13 19:32:05 +01:00

m4

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

make

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

makedevs

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

mkelfimage

autotools-brokensep: Mark recipes with broken separate build dir support

2014-02-28 14:01:16 +00:00

mklibs

mklibs-native: upgrade from 0.1.38 to 0.1.39

2014-04-23 11:43:28 +01:00

mmc

mmc-utils: fix compilation failure for mips64 target.

2014-05-08 13:00:32 +01:00

mtd

mtd-utils: upgrade to 1.5.1+gitAUTOINC+12158de

2014-04-23 11:43:28 +01:00

mtools

Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.

2014-05-02 20:46:59 +01:00

nasm

nasm: Update 2.11.02 -> 2.11.05

2014-07-17 12:28:50 +01:00

openjade

sgml-common-native: fix the generation of sgml-docbook.cat

2014-03-19 14:42:43 +00:00

opensp

opensp: replace obsolete automake macros with working ones

2013-01-15 08:10:12 +00:00

opkg

opkg: Add runtime dep on gnupg if 'gpg' is in PACAKGECONFIG

2014-08-23 23:01:59 +01:00

opkg-utils

opkg-utils: Update SRCREV

2014-08-02 09:26:17 +01:00

orc

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

ossp-uuid

ossp-uuid: obey LDFLAGS

2014-09-22 13:04:22 +01:00

packagegroups

packagegroup-*: add RREPLACES/RCONFLICTS

2012-09-04 18:03:18 +01:00

patch

Globally replace 'base_contains' calls with 'bb.utils.contains'

2014-04-25 17:19:19 +01:00

patchelf

patchelf: Add patchelf recipe

2014-08-28 15:12:42 +01:00

pax-utils

pax-utils: add bash to RDEPENDS_pax-utils

2014-08-23 09:26:10 +01:00

perl

perl: remove unneeded patches in ptest directory

2014-09-22 13:04:23 +01:00

pkgconfig

pkgconfig: Drop version from RPROVIDES

2014-07-17 12:28:49 +01:00

postinst-intercept

postinst-intercept: New recipe to include postinstall intercepts in nativesdk

2014-02-02 22:37:40 +00:00

prelink

prelink_git: Update to current head of cross-prelink development

2014-08-15 18:21:49 +01:00

pseudo

pseudo: uprev to 1.6.1

2014-07-19 00:18:21 +01:00

python

python: obey LDFLAGS

2014-09-22 13:04:22 +01:00

qemu

pcihp: fix possible array out of bounds, CVE-2014-5388

2014-09-10 15:38:55 +01:00

quilt

run-ptest: fix bashism

2014-08-28 15:12:44 +01:00

remake

remake: fix build error

2014-08-11 10:53:05 +01:00

rpm

rpmresolve: ignore null requires

2014-09-03 16:00:28 +01:00

rsync

rsync: remove trailing whitespace

2014-09-16 22:14:09 +01:00

run-postinsts

run-postinsts.service: remove redundant line

2014-09-03 11:09:07 +01:00

sgml-common

sgml-common-native: fix the generation of sgml-docbook.cat

2014-03-19 14:42:43 +00:00

sgmlspl

Don't set DESCRIPTION to the same value as SUMMARY

2013-12-03 17:45:52 +00:00

squashfs-tools

squashfs-tools: Add support for LZO and LZ4 compression

2014-08-15 18:21:51 +01:00

strace

strace: fix ptest execution failure

2014-08-23 09:26:12 +01:00

subversion

subversion: Disable make install parallelism

2014-07-19 00:08:58 +01:00

swabber

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

syslinux

syslinux: add perl to RDEPENDS_syslinux-misc

2014-08-23 09:26:11 +01:00

tcf-agent

meta: fix no newline at end of file

2014-07-03 17:41:16 +01:00

tcltk

run-ptest: fix bashism

2014-08-28 15:12:44 +01:00

unfs3

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

unifdef

Replace one-line DESCRIPTION with SUMMARY

2014-01-02 12:50:18 +00:00

vala

vala: inherit pkgconfig

2014-04-10 17:35:15 +01:00

valgrind

valgrind: backport enabling for glibc 2.20

2014-09-10 11:33:25 +01:00

xmlto

xmlto: add bash to RDEPENDS_xmlto

2014-08-23 09:26:10 +01:00

yasm

yasm: add from meta-oe and tweak

2013-08-13 23:05:58 +01:00

zisofs-tools

Revert "zisofs-tools-native: Add missing dependency on zlib-native"

2014-03-31 23:04:35 +01:00