Commit Graph

6 Commits

Author SHA1 Message Date
Armin Kuster 3aaf023202 bzip2: Security fix CVE-2016-3189
Affects bzip2 <= 1.0.6
CVSS v2 Base Score: 4.3 MEDIUM

(From OE-Core rev: 979c61e47d416b940ca53e22acffdacb2625cf89)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-07-20 10:28:52 +01:00
Ross Burton 45c19447ae bzip2: set correct soname
The correct name for the bzip2 shared library is libbz2.so.1.0.6, not
libbz2.so.0.0.0.  Pass -version-info to libtool to correct this.

Also fix the configure.ac so that is doesn't mention libXrender and has the
right version.

(From OE-Core rev: 1ae11a6ea5ff82f6492a880ff45e19f3779918da)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-06 22:57:25 +01:00
Wenzong Fan dc8495fd1c bzip2: fix bunzip2 -qt returns 0 for corrupt archives
"bzip2 -t FILE" returns 2 if FILE exists, but is not a valid bzip2 file.
"bzip2 -qt FILE" returns 0 when this happens, although it does print out
an error message as is does so.

This has been fix by Debian, just port changes from Debian patch file
"20-legacy.patch".

Debian defect:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=279025

Fix item from changelog:
http://archive.debian.net/changelogs/pool/main/b/bzip2/bzip2_1.0.2-7/changelog

  * Fixed "bunzip2 -qt returns 0 for corrupt archives" (Closes: #279025).

(From OE-Core rev: b983822b57f60c5c210c9f23b3541f450d04ae3d)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-27 07:24:27 +00:00
Ross Burton 36360f26d7 bzip2: use "foreign" automake strictness
bzip2 doesn't want GNU-levels of automake strictness so tell it to be "foreign".

(From OE-Core rev: 5b5462acd059ec195c4f39c2716c1f3acc52a188)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-16 10:31:16 +01:00
Björn Stenberg 3907ed5211 bzip2: Add ptest
The existing bzip2 tests in the upstream Makefile are copied to Makefile.am
(yocto's) and modified to adopt to the ptest format.

(From OE-Core rev: f02258b304dc4544567601a1502080f3581c00fa)

Signed-off-by: Björn Stenberg <bjst@enea.com>
Signed-off-by: Anders Roxell <anders.roxell@enea.com>
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-06-28 09:14:06 +01:00
Qing He a0fb0c2090 bzip2: upgrade to version 1.0.6
resolves security bug CVE-2010-0405

Signed-off-by: Qing He <qing.he@intel.com>
2010-11-10 21:09:22 +08:00