summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* libxml2: security bump to version 2.9.9Fabrice Fontaine2019-01-283-35/+2
| | | | | | | | | | | - Fixes CVE-2018-9251 and CVE-2018-14567: https://gitlab.gnome.org/GNOME/libxml2/commit/2240fbf5912054af025fb6e01e26375100275e74 - Fixes CVE-2018-14404: https://gitlab.gnome.org/GNOME/libxml2/issues/5 - Remove patch: CVE-2017-8872 was fixed by https://gitlab.gnome.org/GNOME/libxml2/issues/26 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* minizip: disable compatibility headersFabrice Fontaine2019-01-281-1/+3
| | | | | | | | | | | | | | | | | | minizip enables zip.h and unzip.h compatibility headers since version 2.7.2 and https://github.com/nmoinvaz/minizip/commit/1b2b32c8b8c7ea441b14a2fd827d7e2dc886776c This is an issue as php fails to build if minizip is built after libzip because minizip installs a zip.h header without zip_stat, ZIP_CREATE, ZIP_FL_NOCASE, zip_fopen, etc ... So until the compatibility headers are enhanced/fixed in minizip, disable them Fixes: - http://autobuild.buildroot.org/results/7b41f4e4a521b1e17aa885aac4419b26e0dd8700 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* haproxy: disable on sh4 with gcc < 7Fabrice Fontaine2019-01-281-0/+2
| | | | | | | | | | | | | | | | Build fails on sh4: src/dns.c:290:1: error: unable to find a register to spill in class 'R0_REGS' } This build failure seems related to a known gcc bug that has been fixed only in gcc 7: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=60040 Fixes: - http://autobuild.buildroot.org/results/2e181cc874d5389f10ecddb0d11253c3aa5e7fc4 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libkcapi: bump to version 1.1.4Fabrice Fontaine2019-01-282-3/+3
| | | | | | | | Update hash of COPYING (year has been updated): https://github.com/smuellerDD/libkcapi/commit/3c56934f44a8f5a1257c342942e6e034fc6f20be Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* jansson: bump to version 2.12Fabrice Fontaine2019-01-282-3/+3
| | | | | | | | Update hash of license file (update in year): https://github.com/akheron/jansson/commit/3e13f514ce5185a057a686221b61d9a9d9e86889 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* clamav: needs C++Fabrice Fontaine2019-01-281-2/+3
| | | | | | | | | | | | clamav needs C++ since bump to version 0.101.1 and https://github.com/Cisco-Talos/clamav-devel/commit/d39cb6581f3c854476044f069d2393fc44702c36 Fixes: - http://autobuild.buildroot.org/results/be14aa571309cda32a5963feed9fd7f220e87fe6 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Acked-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* qemu_riscv64_virt_defconfig: fix linux header selectionGwenhael Goavec-Merou2019-01-281-1/+1
| | | | | | | | When the kernel is built by Buildroot BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_X_YY must be used and not BR2_KERNEL_HEADERS_X_YY. Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/gnutls: bump to version 3.6.6Peter Korsgaard2019-01-283-65/+3
| | | | | | | Drop now upstreamed 0001-configure.ac-check-if-libatomic-is-needed.patch and autoreconf. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gnutls: fix build on sparcFabrice Fontaine2019-01-282-0/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | gnutls source code uses the C++11 <atomic> functionality since https://github.com/gnutls/gnutls/commit/7978a733460f92b31033affd0e487c86d66c643d, which internally is implemented using the __atomic_*() gcc built-ins On certain architectures, the __atomic_*() built-ins are implemented in the libatomic library that comes with the rest of the gcc runtime. Due to this, code using <atomic> might need to link against libatomic, otherwise one hits build issues such as: ../lib/.libs/libgnutls.so: undefined reference to `__atomic_fetch_sub_4' on an architecture like SPARC. To solve this, a configure.ac check is added to know if we need to link against libatomic or not. The library is also added to gnutls.pc. Fixes: - http://autobuild.buildroot.org/results/6c749bd592ceffeacadd2ab570d127936cce64b2 - http://autobuild.buildroot.org/results/30aa83d3cf3482af8a59250c196c85f4a278d343 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Tested-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* support/testing: add atop testRicardo Martincoski2019-01-282-0/+41
| | | | | Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/atop: bump to version 2.4.0Ricardo Martincoski2019-01-284-54/+7
| | | | | | | | | | | Drop patch 0001 as it was applied upstream [1]. This new version uses PERF_FLAG_FD_CLOEXEC therefore it needs a toolchain with headers >= 3.14. [1] https://github.com/Atoptool/atop/commit/414127c03669b4eedc85778a7bff80cf601311d8 Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* zbar: needs kernel headers >= 3.17Fabrice Fontaine2019-01-282-6/+6
| | | | | | | | | | | v4l2_query_ext_ctrl has been added in kernel 3.17: https://github.com/torvalds/linux/commit/5082c2417841e64df975789011e182ce99a9dacd Fixes: - http://autobuild.buildroot.org/results/d7b244cf9488eafb59ba8575f17884f4f8512db1 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libva-utils: fix build with gcc 4.8Fabrice Fontaine2019-01-281-0/+120
| | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/64d9b79de5d31eb5a0c219081479bebb1f2527ed Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Acked-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* qemu/aarch64-virt: Emulate cortex-a53 in qemu to match Buildroot configGerome Burlats2019-01-272-1/+2
| | | | | | | | | | | qemu_aarch64_virt_defconfig (implicitly) specifies cortex-a53, so adjust the QEMU command line to also emulate a a53 instead of a57. Also adjust the defconfig to explicitly specify a53 for consistency/clarity. Signed-off-by: Gerome Burlats <gerome.burlats@smile.fr> Cc: Romain Naour <romain.naour@smile.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/usb_modeswitch: avoid overriding variablesRicardo Martincoski2019-01-271-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Overriding variables in packages recipes is an error-prone practice. Current behavior of installing either only as a script or only as a binary is intended, as describe in the commit log of "d3e4db4e34 usb_modeswitch: bump to version 1.2.6" from 2013. Rewrite the code to keep the same behavior while replacing variable override [1] by conditional assignments [2]. [1] VAR = ... if ... VAR = ... [2] if ... VAR = ... else VAR = ... Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/usb_modeswitch: drop unicode space in commentRicardo Martincoski2019-01-271-1/+1
| | | | | | | | | Commit "a554109af8 package/usb_modeswitch: disable parallel build" added a unicode space in a comment. Replace it with a normal ASCII space for consistency with elsewhere. Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Revert "avrdude: add license information"Ricardo Martincoski2019-01-271-2/+0
| | | | | | | | | | | | | | This reverts commit d1f545004bf0533064363d87c2d7c71e7acf7435 from 2014 because the added variables already existed. The real problem at the time was that one of the pre-existent variables had a typo, fixed in a later commit. Currently AVRDUDE_LICENSE and AVRDUDE_LICENSE_FILES are declared twice with the same values for each one. So remove one of them. Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Cc: Wojciech M. Zabolotny <wzab01@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/sdl_sound: actually use the optional CONF_OPTSRicardo Martincoski2019-01-271-6/+5
| | | | | | | | | | | | | | | | Since "57ace26b6c package/sdl_sound: add optional support for libmodplug" from 2016, optional CONF_OPTS are added but they do not really take effect because there is an unconditional override below the conditional append. Currently this does not cause build failures, but it can lead to wrong detection of dependencies because many explicit --enable/--disable are not passed to configure. Fix this by moving the unconditional code to the top. Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/s6-networking: fix dependency when libressl is enabledRicardo Martincoski2019-01-271-1/+1
| | | | | | | | | | | Commit "c5b85231fb s6-networking: enable SSL if libressl is selected" actually dropped the dependency on s6-dns and s6 when libressl is enabled. Fix this by using += inside the conditional code. Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Cc: Eric Le Bihan <eric.le.bihan.dev@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/lighttpd: bump to version 1.4.53Peter Korsgaard2019-01-272-3/+3
| | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/vboot-utils: Add support for openssl 1.1.xVadim Kochan2019-01-271-0/+268
| | | | | | | | | | Backported changes from commit bce7904376beee2912932433a4634c1c25afe2f5, there was some conflicts in few places which includes openssl_compat.h and 1 place in vb2_rsa_sig_alg function. Signed-off-by: Vadim Kochan <vadim4j@gmail.com> Signed-off-by: Patrick Havelange <patrick.havelange@essensium.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/upmpdcli: fix static build issueJörg Krause2019-01-271-0/+5
| | | | | | | | | | | | The spotify plugin requires shared library support and needs <dlfcn.h>. Explicitly disable the spotify plugin when building upmpdcli in a static context. Fixes: http://autobuild.buildroot.net/results/cb942d3c5f68959d6cbc85535ccff4a275369f91/ Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* package/libarchive: add four security patchesThomas De Schampheleire2019-01-274-0/+219
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add backported patches for the following four security issues in libarchive. There is no new release yet including these patches. - CVE-2018-1000877 (https://nvd.nist.gov/vuln/detail/CVE-2018-1000877) "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive." - CVE-2018-1000878 (https://nvd.nist.gov/vuln/detail/CVE-2018-1000878) "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive." - CVE-2018-1000879 (https://nvd.nist.gov/vuln/detail/CVE-2018-1000879) "libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file." - CVE-2018-1000880 (https://nvd.nist.gov/vuln/detail/CVE-2018-1000880) "libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a specially crafted WARC file." Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* python-pyasn1-modules: bump to version 0.2.4Asaf Kahlon2019-01-272-4/+4
| | | | | Signed-off-by: Asaf Kahlon <asafka7@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/rpi-userland: bump version to e5803f2c98Peter Seiderer2019-01-272-2/+2
| | | | | Signed-off-by: Peter Seiderer <ps.report@gmx.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* configs/raspberrypi*: bump kernel version to 83b36f98e1Peter Seiderer2019-01-277-7/+7
| | | | | | | Now based on 4.14.95 (from 4.14.91). Signed-off-by: Peter Seiderer <ps.report@gmx.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/freeswitch: bump version to 1.8.5Bernd Kuhls2019-01-273-81/+7
| | | | | | | | Removed patch 0002, not needed anymore after upstream commit https://freeswitch.org/stash/projects/FS/repos/freeswitch/commits/13f6890f411598bd2c567762d457d1a8163a7a8a Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/libpng: bump version to 1.6.36Bernd Kuhls2019-01-272-8/+7
| | | | | | | | | | | License[1] was bumped to v2, for details see http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2018-November/003791.html [1] http://www.libpng.org/pub/png/src/libpng-LICENSE.txt Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Peter: use Libpng-2.0 as license tag] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/pngquant: bump version to 2.12.2Bernd Kuhls2019-01-272-3/+3
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/znc: bump version to 1.7.2Bernd Kuhls2019-01-272-2/+2
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* prosody: bump to version 0.11.2Francois Perrad2019-01-274-9/+9
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* perl-uri: bump to version 1.76Francois Perrad2019-01-272-4/+4
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* perl-type-tiny: bump to version 1.004004Francois Perrad2019-01-272-5/+5
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* perl-package-stash: bump to version 0.38Francois Perrad2019-01-272-5/+5
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* perl-net-dns: bump to version 1.19Francois Perrad2019-01-272-3/+3
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* perl-mojolicious: bump to version 8.11Francois Perrad2019-01-272-3/+3
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* perl-gd: bump to version 2.70Francois Perrad2019-01-272-3/+3
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* perl-file-slurp: bump to version 9999.25Francois Perrad2019-01-272-4/+4
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* perl-date-manip: bump to version 6.75Francois Perrad2019-01-272-3/+3
| | | | | Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* {linux, linux-headers}: bump 4.{4, 9, 14, 19, 20}.x seriesBernd Kuhls2019-01-273-11/+11
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/clamav: add optional dependency to pcre2Bernd Kuhls2019-01-271-1/+4
| | | | | | | | Upstream recommends pcre2 over pcre: https://github.com/Cisco-Talos/clamav-devel/commit/1f71c2b21ccaef412280471444f4d01ec9b8099d Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/clamav: bump version to 0.101.1Bernd Kuhls2019-01-273-79/+2
| | | | | | | Removed patch applied upstream. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/samba4: security bump to version 4.9.4Bernd Kuhls2019-01-272-3/+3
| | | | | | | | | | | | | | | Fixes the following security issues: - CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression - CVE-2018-16853: Fix S4U2Self crash with MIT KDC build - CVE-2018-16853: Do not segfault if client is not set For more info, see the release notes: https://www.samba.org/samba/history/samba-4.9.4.html Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> [Peter: mention security impact, add CVE info] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/x11r7/xdriver_xf86-video-neomagic: bump version to 1.3.0Bernd Kuhls2019-01-272-3/+8
| | | | | | | Added all hashes provided by upstream and license hash. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/x11r7/xdriver_xf86-video-mga: bump version to 2.0.0Bernd Kuhls2019-01-272-3/+8
| | | | | | | Added all hashes provided by upstream and license hash. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/x11r7/xdriver_xf86-video-i128: bump version to 1.4.0Bernd Kuhls2019-01-273-38/+8
| | | | | | | | Removed patch applied upstream, added all hashes provided by upstream and license hash. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/x11r7/xapp_xcursorgen: bump version to 1.0.7Bernd Kuhls2019-01-272-3/+8
| | | | | | | Added all hashes provided by upstream and license hash. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/vlc: bump version to 3.0.6Bernd Kuhls2019-01-276-221/+9
| | | | | | | | Rebased patch 0006, removed patch 0008 which is included in upstream release version, renumbered remaining patches. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/libva: bump version to 2.4.0Bernd Kuhls2019-01-273-77/+4
| | | | | | | | Removed patch applied upstream: https://github.com/intel/libva/commit/62bad1239d8ea1bb269ca69d3469aa267f57cdec Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* python-psycopg2: bump to version 2.7.7Asaf Kahlon2019-01-272-4/+4
| | | | | Signed-off-by: Asaf Kahlon <asafka7@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
OpenPOWER on IntegriCloud