buildroot, branch 2017.05

Update for 2017.05

2017-05-31T21:55:40+00:00

Signed-off-by: Peter Korsgaard

bash: disable bash malloc by default

2017-05-31T20:36:15+00:00

Bash's malloc relies on sbrk which is implemented as a fail-only stub in musl. Presently, it is disabled when configured for static libs. Instead, default to using libc malloc. Fixes: # bash bash: xmalloc: locale.c:81: cannot allocate 18 bytes (0 bytes allocated) Signed-off-by: Daniel Sabogal Signed-off-by: Thomas Petazzoni

package/hans: fix build failures with high 'make -j' values

2017-05-31T19:32:24+00:00

The top-level doesn't handle correctly the build dependencies between .o files. Since hans doesn't take too many time to build, just use MAKE1. Fixes: http://autobuild.buildroot.net/results/d14/d142f4a439d4d5fcc89865abde3e593c45ad5d96 http://autobuild.buildroot.net/results/28e/28ed230e40cc154db9274f9765085cd7f0eee85a http://autobuild.buildroot.net/results/900/9008c3be3bcf46f0fc21a34f48e3cf9da1397d9a Signed-off-by: Romain Naour Signed-off-by: Thomas Petazzoni

sudo: add upstream security patch for CVE-2017-1000367

2017-05-31T10:30:49+00:00

CVE-2017-1000367 - Potential overwrite of arbitrary files on Linux On Linux systems, sudo parses the /proc/[pid]/stat file to determine the device number of the process's tty (field 7). The fields in the file are space-delimited, but it is possible for the command name (field 2) to include spaces, which sudo does not account for. A user with sudo privileges can cause sudo to use a device number of the user's choosing by creating a symbolic link from the sudo binary to a name that contains a space, followed by a number. If SELinux is enabled on the system and sudo was built with SELinux support, a user with sudo privileges may be able to to overwrite an arbitrary file. This can be escalated to full root access by rewriting a trusted file such as /etc/shadow or even /etc/sudoers. For more details, see: https://www.sudo.ws/alerts/linux_tty.html Signed-off-by: Peter Korsgaard

linux-headers: bump 4.1.x series

2017-05-31T06:02:27+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

strongswan: add upstream security patches

2017-05-30T21:37:26+00:00

Fixes: CVE-2017-9022 - RSA public keys passed to the gmp plugin aren't validated sufficiently before attempting signature verification, so that invalid input might lead to a floating point exception and crash of the process. A certificate with an appropriately prepared public key sent by a peer could be used for a denial-of-service attack. https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9022%29.html CVE-2017-9023 - ASN.1 CHOICE types are not correctly handled by the ASN.1 parser when parsing X.509 certificates with extensions that use such types. This could lead to infinite looping of the thread parsing a specifically crafted certificate. https://www.strongswan.org/blog/2017/05/30/strongswan-vulnerability-%28cve-2017-9023%29.html Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

package/xen: Backport a header include fix for makedev

2017-05-30T21:29:20+00:00

maekdev() is available from sys/types.h but only due to a bug in glibc. This is being fixed by printing an error when using makedev() from sys/types.h. To fix the issue we should include sys/sysmacros.h for makedev(). As this has already been fixed in upstream Xen we can backport the patch. Fixes: http://autobuild.buildroot.net/results/552/552e66d764885341b2fe208a0e4382b5fe05ea9d/ Signed-off-by: Alistair Francis Signed-off-by: Thomas Petazzoni

package/madplay: add custom libtool patch

2017-05-30T21:22:09+00:00

madplay use a libtool script in version 1.5.2 but the libtool patch "buildroot-libtool-v1.5.patch.patch" doesn't apply. From [1]: "It's libtool dropping -static. That's because madplay has a weird version of libtool, on which our libtool patch doesn't apply so we have MADPLAY_LIBTOOL_PATCH = NO. Therefore, the hack we have that makes libtool -static behave like -all-static isn't applied, causing this build failure." Fixes: http://autobuild.buildroot.net/results/60def1b15ea61d3cb5f50e9de3f354dd2e17d270 [1] http://lists.busybox.net/pipermail/buildroot/2017-May/192959.html Signed-off-by: Romain Naour Signed-off-by: Thomas Petazzoni

stm32flash: fix help text format

2017-05-30T21:20:22+00:00

Warning reported by check-package. Signed-off-by: Luca Ceresoli Signed-off-by: Thomas Petazzoni

snmppp: fix help text format

2017-05-30T21:20:17+00:00

Warning reported by check-package. Signed-off-by: Luca Ceresoli Cc: Gustavo Zacarias Signed-off-by: Thomas Petazzoni