strongswan: Security Advisory - strongswan - CVE-2014-2891

strongSwan before 5.1.2 allows remote attackers to cause a denial of
service (NULL pointer dereference and IKE daemon crash) via a crafted
ID_DER_ASN1_DN ID payload.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2891

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
quagga: Security Advisory - quagga - CVE-2013-2236

Stack-based buffer overflow in the new_msg_lsa_change_notify function in
the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when
--enable-opaque-lsa and the -a command line option are used, allows
remote attackers to cause a denial of service (crash) via a large LSA.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2236

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
znc: Fix for CVE-2013-2130

ZNC 1.0 allows remote authenticated users to cause a denial of service
(NULL pointer reference and crash) via a crafted request to the (1) editnetwork,
(2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
Per: http://cwe.mitre.org/data/definitions/476.html
CWE-476: NULL Pointer Dereference

Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
mplayer2: Inherit python3native

A host machine without python3 on the PATH fails to build
mplayer.

Inherit python3native to avoid host dependency on python3.

Signed-off-by: Sipke Vriend <sipke.vriend@xilinx.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
opencv: Disable 'gtk' backend if X11 is not available

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
opencv: Bump SRCREV to 2.4.9 release tag, PV is now 2.4.9+git.

Signed-off-by: Nick D'Ademo <nickdademo@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
packagegroups: Remove deprecated "task" backward compatibility

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
tcpslice: add recipe under tcpdump

tcpslice is a tool for extracting parts of a tcpdump packet trace,
so put it under tcpdump dir

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
keystone: package openLDAP 2.4.39

The patches are taken from Debian.

Signed-off-by: Amy Fong <amy.fong@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
abiword: remove blacklist, libgsf and wv have been fixed

Also disable collab service due to gnutls build errors.

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
add support for opendataplane

The OpenDataPlane (ODP) project provides a data plane application
programming environment that is easy to use, high performance,
and portable between networking SoCs.

support build opendataplane release 0.2 and current HEAD from linaro.
For dpdk build, it is tested against layer meta-intel's
common/recipes-extended/dpdk/dpdk_1.6.0r2.bb recipe.
And it is needed to change its do_configure to add support for
a single intel_dpdk library.(default is multiple static libraries)
for example:
@@ -35,6 +35,8 @@ do_configure () {
        #############################################################
        unset prefix

+       sed -i -e "s/CONFIG_RTE_BUILD_COMBINE_LIBS=n/CONFIG_RTE_BUILD_COMBINE_LIBS=y/g" \
+               config/defconfig_${TARGET_ARCH}-default-${TARGET_OS}app-gcc
        make O=$RTE_TARGET T=$RTE_TARGET config

Signed-off-by: Yao Zhao <yao.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
integrate fcgi-2.4.0 and add OML license file

Signed-off-by: YangHaibo <b40869@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
gimp 2.8.10: add bzip dependency

WARNING: QA Issue: gimp rdepends on libbz2 but its not a build
dependency? [build-deps]

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
epiphany: add missing dependencies

WARNING: QA Issue: epiphany rdepends on libavahi-common but its not a
build dependency? [build-deps]
WARNING: QA Issue: epiphany rdepends on libnotify but its not a build
dependency? [build-deps]
WARNING: QA Issue: epiphany rdepends on libavahi-gobject but its not a
build dependency? [build-deps]
WARNING: QA Issue: epiphany rdepends on libavahi-client but its not a
build dependency? [build-deps]

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
libusbg: update to latest git and fix S!=B

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
dnsmasq: fix parallel make failure

The dnsmasq target depends on .configured and $(objs). .configured does an rm
-f *.o. Yet the only thing telling make to build the .configured target before
the $(objs) target was the order of the dependencies of the dnsmasq target. We
can't rely on that order when doing a paralllel make build, so add an explicit
rule to enforce that order.

Signed-off-by: Christopher Larson <kergoth@gmail.com>
Signed-off-by: Shrikant Bobade <Shrikant_Bobade@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
evtest: Stop using Cgit based archive

The Cgit based archive may change depending on the order of images,
timestamp and like causing checksum to change.

This patch uses the same 1.25 version but fetching it using Git, so no
code changes are done.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Acked-by: Otavio Salvador <otavio@ossystems.com.br>
Acked-by: Cliff Brake <cbrake@bec-systems.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
evtest: Update to 0e14da9 revision

This updates to 1.31, plus fixes available in the Git tree.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
pm-qa: update to 0.4.12 release

Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
netcf: init script should be installed under /etc/init.d/

init script should be installed under /etc/init.d/, not /etc/rc.d/init.d

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>