{"push_id":708415535,"size":324,"distinct_size":324,"ref":"refs/heads/dizzy","head":"9c4ff467f66428488b1cd9798066a8cb5d6b4c3b","before":"9aff3a4ec058a1a1149d026ebedcc6251089fffb","commits":[{"sha":"ff5510b3fad2e808a9bf23648612d913814ebb41","author":{"email":"c2469683ba2f6b7abc56fa9bbe36de099a9d17e7@usask.ca","name":"Dan McGregor"},"message":"systemd: Use ${ROOT_HOME} instead of /root\n\nsystemd avoids using nss lookups for the root user, so\nnaturally it assumes that root's home directory is /root.\nIn OE that's not the case, and it can lead to long delays when\nshutting down due to user shutdown unit failures.\n\n(From OE-Core rev: e0e8a904cd287a23352e5713a93aeab3933e4563)\n\nSigned-off-by: Dan McGregor <dan.mcgregor@usask.ca>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/ff5510b3fad2e808a9bf23648612d913814ebb41"},{"sha":"b9b5aeffa60d94c4a6283c1232b015b6afde8c62","author":{"email":"1d31b11c1b92bf5d043d36edfe7174db39a6b891@ossystems.com.br","name":"Otavio Salvador"},"message":"nativesdk-cmake: Adjust toolchain paths dynamically\n\nThis patch adds a flexible way to configure the CMake in SDKs. It adds\na toolchain configuration script which supports subscripts for\nextensions, as for example Qt5.\n\n(From OE-Core rev: 484502e4e062fae1130a60626f39f5512af4c5c8)\n\nSigned-off-by: Otavio Salvador <otavio@ossystems.com.br>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/b9b5aeffa60d94c4a6283c1232b015b6afde8c62"},{"sha":"58a629a1a0091c1b61dc86a6ebad832e79c98ed3","author":{"email":"cd36ec7a67dfb8d589bc66b85fd0a6cf213f3854@intel.com","name":"Ross Burton"},"message":"poky.conf: add Debian 7.7 to SANITY_TESTED_DISTROS\n\n(From meta-yocto rev: 28fde806133c413e40da18beaf94bfd2eb016d57)\n\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/58a629a1a0091c1b61dc86a6ebad832e79c98ed3"},{"sha":"f3a177cf045b19612b7d2c96889ac24307191c3d","author":{"email":"49ec7cfe045884df7178a7e982697c7043dbc82b@windriver.com","name":"Jackie Huang"},"message":"license.bbclass: canonicalise the licenses named with 'X+'\n\nIf INCOMPATIBLE_LICENSE=GPLv3, GPLv3+ should be excluded\nas well but not now since there is no SPDXLICENSEMAP for\nlicenses named with 'X+', we can add all the SPDXLICENSEMAP\nsettings for licenses named with 'X+' in licenses.conf,\nbut it's more like a duplication, so improve the canonical_license\nfunction to auto map for 'X+' if SPDXLICENSEMAP for 'X' is\navailable, so GPLv3+ becomes GPL-3.0+.\n\n(From OE-Core rev: 1d6dab1dbbbfbcb32e58dba3111130157ef2b24f)\n\n(From OE-Core rev: 652008fd9dc909836819e5c6808c63643eff6db6)\n\nSigned-off-by: Jackie Huang <jackie.huang@windriver.com>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/f3a177cf045b19612b7d2c96889ac24307191c3d"},{"sha":"2eb659d7655ab210728d8017a281f079c440749b","author":{"email":"5d406dce269323502edf9245f3ac4bf2666d3bf9@linux.intel.com","name":"Saul Wold"},"message":"wget: Fix for CVE-2014-4887\n\n(From OE-Core rev: 6815a99d6735a39f4af09726d4f514ac27801406)\n\nSigned-off-by: Saul Wold <sgw@linux.intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/2eb659d7655ab210728d8017a281f079c440749b"},{"sha":"df87cb27efeaea1455f20692f9f1397c6fcab254","author":{"email":"5d406dce269323502edf9245f3ac4bf2666d3bf9@linux.intel.com","name":"Saul Wold"},"message":"readline: Patch for readline multikey dispatch issue\n\n(From OE-Core rev: 4fc3553cfecb42c124b7cfff8e0d20ade14a3ffc)\n\nSigned-off-by: Saul Wold <sgw@linux.intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/df87cb27efeaea1455f20692f9f1397c6fcab254"},{"sha":"9fcd5826d9d6cfc6cec2423a59cb05180e54cb06","author":{"email":"41765ab18fb75e64ff0efe27f2ebcdb2d6f7e44e@windriver.com","name":"Mark Hatle"},"message":"meta-environment: Fix config-site with a multilib config\n\n[YOCTO #6951]\n\nThe TOOLCHAIN_CONFIGSITE_SYSROOTCACHE value was defaulting to the nativesdk\npath and not the associated target path.  Set the value in toolchain-scripts\nto the target path.\n\nBe sure to set the MLPREFIX within the meta-environment script as multilibs\nare processed.\n\nUpdate the config_site file name to use -BPN- not PN.  Otherwise the\nenvironment processing can't find the correct filename.\n\n(From OE-Core rev: 26a2f98155a867a71217e52d33f761dcc60800ca)\n\nSigned-off-by: Mark Hatle <mark.hatle@windriver.com>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/9fcd5826d9d6cfc6cec2423a59cb05180e54cb06"},{"sha":"081fddd3e464935e5f438a7686eb8f8856da6281","author":{"email":"a3e08e35e4a42be768e7d0e76ae1ba321c2a66dd@phytec.de","name":"Stefan Müller-Klieser"},"message":"bitbake: data_smart.py: fix variable splitting at _remove mechanism\n\nIf we split variables only at whitespaces, a slipped in tab will render\na value unremovable.\n\n(Bitbake rev: 0da22ba3e930fbb060b31fc423fd3333ca8843a0)\n\nSigned-off-by: Stefan Müller-Klieser <s.mueller-klieser@phytec.de>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/081fddd3e464935e5f438a7686eb8f8856da6281"},{"sha":"929d04b40416d1695c5df0f55c1d6000e24bb245","author":{"email":"3b7a1db6efedd40440bc6443bf377195011524e5@linuxfoundation.org","name":"Richard Purdie"},"message":"bitbake: siggen: Fix shared work checksum mismatch/rebuild issues\n\nSimilar to the last shared work task signature bug, we've found another\none. Looking at the improved output of diffsigs in this case:\n\nruntaskdeps changed from [\n'autoconf_2.69.bb.do_populate_sysroot:virtual:native',\n'gnu-config_20120814.bb.do_populate_sysroot:virtual:native',\n'libgcc-initial_4.9.bb.do_patch:virtual:nativesdk'\n] to [\n'autoconf_2.69.bb.do_populate_sysroot:virtual:native',\n'gcc-crosssdk-initial_4.9.bb.do_patch',\n'gnu-config_20120814.bb.do_populate_sysroot:virtual:native'\n]\n\nso we can get a different task hash since libgcc sorts before gnu-config\nand gcc sorts after it. We could do with a way of fixing this, the best\nI can come up with is to include a single parent directory. Since\nrecipes are never at the top of any metadata trees I've seen, this\nshould suffice for now.\n\nI'm planning to burn the concept of shared work within bitbake\nand do something at the metadata level in the 1.8 timeframe as its just\ntoo fragile as things stand and hard to fix well.\n\n(Bitbake rev: fc7ebf3835a206a5daafd4e1b73bac2549714ad3)\n\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/929d04b40416d1695c5df0f55c1d6000e24bb245"},{"sha":"09430c66b3757fb9fd7e9fd2ebd5a87bafb983c2","author":{"email":"efc047639ba8c71536184282000fe2228c6f62ae@windriver.com","name":"Yue Tao"},"message":"subversion: Security Advisory - subversion - CVE-2014-3522\n\nThe Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18\nand 1.8.x before 1.8.10 does not properly handle wildcards in the Common\nName (CN) or subjectAltName field of the X.509 certificate, which allows\nman-in-the-middle attackers to spoof servers via a crafted\ncertificate.<a href=http://cwe.mitre.org/data/definitions/297.html\ntarget=_blank>CWE-297: Improper Validation of Certificate with Host\nMismatch</a>\n\nhttp://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3522\n\n(From OE-Core rev: 06a33cd00ea11abec1ebe9d5883e44778075ccc6)\n\n(From OE-Core rev: 529ce75be949944a6e54151cd4233703e40c6351)\n\nSigned-off-by: Yue Tao <Yue.Tao@windriver.com>\nSigned-off-by: Jackie Huang <jackie.huang@windriver.com>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/09430c66b3757fb9fd7e9fd2ebd5a87bafb983c2"},{"sha":"ffdef915868739130020edb6116e4ef512944838","author":{"email":"efc047639ba8c71536184282000fe2228c6f62ae@windriver.com","name":"Yue Tao"},"message":"subversion: Security Advisory - subversion - CVE-2014-3528\n\nApache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before\n1.8.10 uses an MD5 hash of the URL and authentication realm to store\ncached credentials, which makes it easier for remote servers to obtain\nthe credentials via a crafted authentication realm.\n\nhttp://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3528\n\n(From OE-Core rev: e0dc0432b13f38d16f642bdadf8ebc78b7a74806)\n\n(From OE-Core rev: 4ff3355e4daf841c66fb78e88bf2d6e26d8f9ced)\n\nSigned-off-by: Yue Tao <Yue.Tao@windriver.com>\nSigned-off-by: Jackie Huang <jackie.huang@windriver.com>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/ffdef915868739130020edb6116e4ef512944838"},{"sha":"5deb78802ae787e74d08f4cc326651575be2dc0b","author":{"email":"a184fd94204b33e92041f8bdf4cc18886c495134@windriver.com","name":"Chong Lu"},"message":"curl: Security Advisory - curl - CVE-2014-3613\n\nBy not detecting and rejecting domain names for partial literal IP addresses\nproperly when parsing received HTTP cookies, libcurl can be fooled to both\nsending cookies to wrong sites and into allowing arbitrary sites to set cookies\nfor others.\n\n(From OE-Core rev: 985ef933208da1dd1f17645613ce08e6ad27e2c1)\n\n(From OE-Core rev: 7c4dfa64fd88066f2e0fbc917d8660f5b35e00c4)\n\nSigned-off-by: Chong Lu <Chong.Lu@windriver.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/5deb78802ae787e74d08f4cc326651575be2dc0b"},{"sha":"19750cac36cc2400adb13a5bd247f255d37adc10","author":{"email":"a184fd94204b33e92041f8bdf4cc18886c495134@windriver.com","name":"Chong Lu"},"message":"curl: Security Advisory - curl - CVE-2014-3620\n\nlibcurl wrongly allows cookies to be set for Top Level Domains (TLDs), thus\nmaking them apply broader than cookies are allowed. This can allow arbitrary\nsites to set cookies that then would get sent to a different and unrelated site\nor domain.\n\n(From OE-Core rev: ddbaade8afbc9767583728bfdc220639203d6853)\n\n(From OE-Core rev: db194a3af25a37ff2d6f091ef021894967ca5910)\n\nSigned-off-by: Chong Lu <Chong.Lu@windriver.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/19750cac36cc2400adb13a5bd247f255d37adc10"},{"sha":"2138890fa6b73d63765faf792e678328bd21b3f4","author":{"email":"525edcd226fb27e7f47fbb319a38fe989c677548@gmail.com","name":"Armin Kuster"},"message":"tzcode: update to 2014j\n\n(From OE-Core rev: 2f8940e8b2a0537f131a6d5410e85bba07a8c116)\n\n(From OE-Core rev: 429077a21c7753dee64ea869a73309903b659f6a)\n\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/2138890fa6b73d63765faf792e678328bd21b3f4"},{"sha":"cccad8c33ff3bc3a1973445b48ed29c9bdefa5ea","author":{"email":"525edcd226fb27e7f47fbb319a38fe989c677548@gmail.com","name":"Armin Kuster"},"message":"tzdata: update to 2014j\n\n(From OE-Core rev: 3ab9dfb703835fee21fd73c4e5cbad1c34c6a163)\n\n(From OE-Core rev: 06ffe5637f23f6036aaf58b40f7f9a721624cd5b)\n\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Ross Burton <ross.burton@intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/cccad8c33ff3bc3a1973445b48ed29c9bdefa5ea"},{"sha":"9bfb78bff606700176909abaa5cf8a332292738a","author":{"email":"f66bf62bd6ae2fe84a21d414af2ae81bdc552ed9@windriver.com","name":"Wenzong Fan"},"message":"serf: uprev to 1.3.7 for fixing CVE-2014-3504\n\nThe (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_-\nssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7\ndoes not properly handle a NUL byte in a domain name in the subject's\nCommon Name (CN) field of an X.509 certificate, which allows man-in-\nthe-middle attackers to spoof arbitrary SSL servers via a crafted\ncertificate issued by a legitimate Certification Authority.\n\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3504\n\n(From OE-Core rev: 832aa4c5a7989636dae3068f508ab2bff8b4ab23)\n\nSigned-off-by: Wenzong Fan <wenzong.fan@windriver.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/9bfb78bff606700176909abaa5cf8a332292738a"},{"sha":"33e95afc83f244fe182a36b90affaf7d211bd6b6","author":{"email":"3b7a1db6efedd40440bc6443bf377195011524e5@linuxfoundation.org","name":"Richard Purdie"},"message":"curl: Fixup line ending merge issues\n\nSomehow the patch line endings got messed up during merge. This restores\nthe delta.\n\n(From OE-Core rev: 5dee4e241d64e6144d74967cca583d249689773a)\n\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/33e95afc83f244fe182a36b90affaf7d211bd6b6"},{"sha":"db7f4f31c915a59c502cac4be905d23df5246b3d","author":{"email":"a184fd94204b33e92041f8bdf4cc18886c495134@windriver.com","name":"Chong Lu"},"message":"nss: CVE-2014-1568\n\nthe patch comes from:\nhttp://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-1568\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=1064636\nnss ng log:\n=====\nchangeset:   11252:ad411fb64046\nuser:        Kai Engert <kaie@kuix.de>\ndate:        Tue Sep 23 19:28:34 2014 +0200\nsummary:     Fix bug 1064636, patch part 2, r=rrelyea\n=====\nchangeset:   11253:4e90910ad2f9\nuser:        Kai Engert <kaie@kuix.de>\ndate:        Tue Sep 23 19:28:45 2014 +0200\nsummary:     Fix bug    1064636, patch part 3, r=rrelyea\n=====\nchangeset:   11254:fb7208e91ae8\nuser:        Kai Engert <kaie@kuix.de>\ndate:        Tue Sep 23 19:28:52 2014 +0200\nsummary:     Fix bug    1064636, patch part 1, r=rrelyea\n=====\nchangeset:   11255:8dd6c6ac977d\nuser:        Kai Engert <kaie@kuix.de>\ndate:        Tue Sep 23 19:39:40 2014 +0200\nsummary:     Bug 1064636, follow up commit to fix Windows build bustage\n\n(From OE-Core rev: 0ed9070619f959b802dcc4ee8399d252d0349583)\n\nSigned-off-by: Li Wang <li.wang@windriver.com>\nSigned-off-by: Chong Lu <Chong.Lu@windriver.com>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/db7f4f31c915a59c502cac4be905d23df5246b3d"},{"sha":"00af5317ebe0819f9e9e5c10184b00b59eecccb5","author":{"email":"1c8a3d9fe0daebf50077f18cba0f71e4a3d97b0e@linux.intel.com","name":"Tom Zanussi"},"message":"wic: Don't allow mkfs to fail silently in partition command\n\nThe return code from the mkfs command used by the partition creation\ncommand was being ignored, allowing it to silently fail and leaving\nusers mystified as to why the resulting filesystem was corrupted.\n\nThis became obvious when failures occurred when creating large\ne.g. sdk filesystems [YOCTO #6863].\n\n(From OE-Core rev: 8cef3b06f7e9f9d922673f430ddb3170d2fac000)\n\n(From OE-Core rev: ac7b2eb0a35613d030eeef0b8df0d69ae0935b43)\n\nSigned-off-by: Tom Zanussi <tom.zanussi@linux.intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/00af5317ebe0819f9e9e5c10184b00b59eecccb5"},{"sha":"b466e00cf6aba73d265f0515c980e12ff5175a5e","author":{"email":"1c8a3d9fe0daebf50077f18cba0f71e4a3d97b0e@linux.intel.com","name":"Tom Zanussi"},"message":"wic: Update the help text to include -D (--debug)\n\nThe --debug option is missing from the wic help text; this adds it and\nat the same time rearranges the usage into a more logical arrangement.\n\n(From OE-Core rev: cf5144ef241d8f4ccaa3461ae5c9f89c2cf2f8d1)\n\n(From OE-Core rev: e7f18c43f1b368b71acdc507e1a9035179d7e53f)\n\nSigned-off-by: Tom Zanussi <tom.zanussi@linux.intel.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>\nSigned-off-by: Armin Kuster <akuster808@gmail.com>\nSigned-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/drewmoseley/poky-public/commits/b466e00cf6aba73d265f0515c980e12ff5175a5e"}]}