aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/bash
AgeCommit message (Collapse)Author
2014-10-12bash: Fix-for-CVE-2014-6278Catalin Popeanga
This vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277 See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6278 (From OE-Core daisy rev: de596b5f31e837dcd2ce991245eb5548f12d72ae) Signed-off-by: Catalin Popeanga <Catalin.Popeanga@enea.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2014-10-12bash: Fix for CVE-2014-6277Catalin Popeanga
Follow up bash42-049 to parse properly function definitions in the values of environment variables, to not allow remote attackers to execute arbitrary code or to cause a denial of service. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6277 (From OE-Core daisy rev: 85961bcf81650992259cebb0ef1f1c6cdef3fefa) Signed-off-by: Catalin Popeanga <Catalin.Popeanga@enea.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2014-10-12bash: Fix for CVE-2014-7186 and CVE-2014-7187Catalin Popeanga
This is a followup patch to incomplete CVE-2014-6271 fix code execution via specially-crafted environment https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7186 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7187 (From OE-Core daisy rev: 153d1125659df9e5c09e35a58bd51be184cb13c1) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2014-10-12bash: Fix for exported function namespace changeCatalin Popeanga
This is a followup patch to incomplete CVE-2014-6271 fix code execution via specially-crafted environment This patch changes the encoding bash uses for exported functions to avoid clashes with shell variables and to avoid depending only on an environment variable's contents to determine whether or not to interpret it as a shell function. (From OE-Core daisy rev: 6c51cc96d03df26d1c10867633e7a10dfbec7c45) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2014-10-02bash: add missing patch for CVE-2014-7169 to 4.2 recipePaul Eggleton
The bash_4.2 recipe was missed when the fix was backported to the dora branch. Patch from OE-Core master rev: 76a2d6b83472995edbe967aed80f0fcbb784b3fc by Khem Raj <raj.khem@gmail.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-10-02bash: add missing patch for CVE-2014-6271 to 4.2 recipePaul Eggleton
The bash_4.2 recipe was missed when the fix was backported to the dora branch. Patch based on the one from OE-Core master rev 798d833c9d4bd9ab287fa86b85b4d5f128170ed3 by Ross Burton <ross.burton@intel.com>, with the content replaced from the appropriate upstream patch. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-10-02bash: Fix CVE-2014-7169Khem Raj
This is a followup patch to incomplete CVE-2014-6271 fix code execution via specially-crafted environment Change-Id: Ibb0a587ee6e09b8174e92d005356e822ad40d4ed (From OE-Core master rev: 76a2d6b83472995edbe967aed80f0fcbb784b3fc) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-10-02bash: fix CVE-2014-6271Ross Burton
CVE-2014-6271 aka ShellShock. "GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment." (From OE-Core master rev: 798d833c9d4bd9ab287fa86b85b4d5f128170ed3) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2013-08-09bash: reference acl*.m4 from ${S}Bian Naimeng
bash: reference acl*.m4 from ${S}. The build directory had been moved to ${WORKDIR}/build, so we should reference acl*.m4 from ${S}. Otherwise, the following configure error will be caught. | cat: aclocal.m4: No such file or directory | ERROR: Function failed: do_configure (log file is located at ...) Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-07-25bash: Add ptestMuhammad Shakeel
ptest support was already added for v4.2 but for the distros using GPLv2 version of bash (3.2.48) this update is required. Signed-off-by: Muhammad Shakeel <muhammad_shakeel@mentor.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-06-25bash ptest: Sed away the Makefile dependency to remove error messages.Björn Stenberg
The bash Makefile defines a dependency on itself and tries to run configure, causing error messages when running ptest on target: make: *** No rule to make target `configure.in', needed by `configure'. make: *** No rule to make target `aclocal.m4', needed by `configure'. make: *** No rule to make target `config.h.in', needed by `configure'. make: *** No rule to make target `Makefile.in', needed by `Makefile'. make: Failed to remake makefile `Makefile'. This patch edits out this dependency in the Makefile installed for ptest, to get rid of these messages. Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-05-12Upstream-Status: Correct CapitalizationSaul Wold
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-03-07bash: Use new _ptest functionsBjörn Stenberg
Signed-off-by: Björn Stenberg <bjst@enea.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-01-09bash: fix mkbuiltins build failureSaul Wold
Same patch for non-gplv3 version: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=1fd9a16d2a4594a4e9179dc7353ac51ce32eb712 [YOCTO #3646] Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-12-25Add ptest for bash.Björn Stenberg
Signed-off-by: Björn Stenberg <bjst@enea.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2012-11-14bash: fix mkbuiltins build failureChristopher Larson
On hosts with FORTIFY_SOURCES, stringize support is required, as it's used by the macros to wrap functions (e.g. read and open in unistd.h). Those wrappers use the STRING() macro from unistd.h. A header in the bash sources overrides the unistd.h macro to 'x' when HAVE_STRINGIZE is not defined, causing the wrappers to generate calls to 'xread' and 'xopen', which do not exist, resulting in a failure to link. Assume we have stringize support when cross-compiling, which works around the issue. It may be best for upstream to either give up on supporting compilers without stringize support, or to not define STRING() at all when FORTIFY_SOURCES is defined, letting the unistd.h one be used, instead. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-11-12meta: remove redundant _FOR_BUILD variablesRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-09-24bash: Make it possible to run bash 3.2.48 instead of 4.2.Martin Ertsaas
bash-3.2.48 did not provide the linking from sh to bash, making it unusable. Moving the license part out of the bash.inc file, and into bash_4.2.bb file makes us able to use that file also for bash_3.2.48.bb, which makes maintaining both at the same time a lot easier. Signed-off-by: Martin Ertsaas <mertsas@cisco.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-08-31nativesdk: Switch to using nativesdk as a prefix, not a suffixRichard Purdie
As discussed on the mailing lists, using a suffix to package names is hard and has lead to many recipes having to do PKGSUFFIX games. Its looking extremely hard to scale nativesdk much further without hacking many recipes. By comparison, using a prefix like multilib does works much better and doesn't involve "hacking" as many recipes. This change converts nativesdk to use a prefix using the existing multilib infrastructure. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-07-26bash: fix warning about bashbug reference /usr/bin when installed in /binOtavio Salvador
Change the installation process so we have bashbug in ${bindir} and bash at ${base_bindir}. Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2012-05-30bash: Update to new update-alternatives syntaxRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-03-14PR bump for all recipes that DEPEND on ncursesScott Garman
The packaging changes to ncurses could break package feeds, so bump the PR on everythong that DEPENDS on ncurses. Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-12-22bash: Add SRC_URI Checksums for GPLv2Saul Wold
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2011-12-15Patch Upstream Status UpdatesSaul Wold
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2011-12-13bash: Add SRC_URI Checksums for GPLv2Saul Wold
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2011-11-04bash: Ensure we fully reautoconf the recipes so site data is usedRichard Purdie
This ensures bug 487 (missing job control functionality) really gets fixed. [YOCTO #487] Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-10-14bash: update to 4.2Saul Wold
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2011-05-12bash: enable update-alternative to use bash as default shellJingdong Lu
Signed-off-by: Jingdong Lu <jingdong.lu@windriver.com>
2011-05-08bash.inc: Add bison-native to DEPENDSTom Rini
This is f0652d96ff5c3b08b8e4c4972f7fb0296df6d898 from OE. Signed-off-by: Tom Rini <tom_rini@mentor.com>
2011-03-23Various: Switch to using GNU_MIRRORTom Rini
Signed-off-by: Tom Rini <tom_rini@mentor.com>
2011-02-12recipes: pre/post actionsMark Hatle
A number of the recipes did not properly label their pre and post actions, causing the actions to occur in all split packages. This was corrected by defaulting to _${PN} in most cases. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2011-01-28bash: use /bin/bash as default shell when bash is includedKevin Tian
though bash is included in LSB profile, it doesn't use update-alternative to take effect and thus it's still busybox behaving as /bin/sh. Signed-off-by: Kevin Tian <kevin.tian@intel.com>
2010-12-09SRC_URI Checksums AdditionalsSaul Wold
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2010-10-20bash: There is no such configure option as --with-ncurses and --with-curses ↵Richard Purdie
breaks the build Signed-off-by: Richard Purdie <rpurdie@linux.intel.com>
2010-10-20bash: fix job controlQing He
job control can't be automatically detected when cross-compiling, enable it explicitly. Fixes [BUGID #487] Signed-off-by: Qing He <qing.he@intel.com>
2010-08-27Major layout change to the packages directoryRichard Purdie
Having one monolithic packages directory makes it hard to find things and is generally overwhelming. This commit splits it into several logical sections roughly based on function, recipes.txt gives more information about the classifications used. The opportunity is also used to switch from "packages" to "recipes" as used in OpenEmbedded as the term "packages" can be confusing to people and has many different meanings. Not all recipes have been classified yet, this is just a first pass at separating things out. Some packages are moved to meta-extras as they're no longer actively used or maintained. Signed-off-by: Richard Purdie <rpurdie@linux.intel.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-06-21 01:37:22 +0000