OpenPOWER buildroot sources https://git.raptorcs.com/git/buildroot/atom?h=2019.02-op-build 2019-01-15T20:33:17+00:00 2019-01-15T20:33:17+00:00 Baruch Siach baruch@tkos.co.il 2019-01-15T16:37:28+00:00 urn:sha1:d4dbcb036a8f3708eca974be3d6a62b1b4ca6bb0 Fixes CVE-2018-1000858: Cross Site Request Forgery with arbitrary HTTPS GET requests via HTTP redirect. https://sektioneins.de/en/advisories/advisory-012018-gnupg-wkd.html Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-11-01T12:56:44+00:00 Baruch Siach baruch@tkos.co.il 2018-10-30T11:40:24+00:00 urn:sha1:bf8e55fd08fd1ed55efa3d32c91ae71e43350038 Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2018-06-11T19:36:33+00:00 Baruch Siach baruch@tkos.co.il 2018-06-11T15:53:12+00:00 urn:sha1:b78a365b56eeb57030b8e3ca98c23dddfc416820 Fixes CVE-2018-12020: Unsanitized file names might cause injection of terminal control characters into the status output of gnupg. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-05-04T07:15:32+00:00 Baruch Siach baruch@tkos.co.il 2018-05-04T05:01:42+00:00 urn:sha1:429c6f21b329f56199158e109d956da9bb37dc3f Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2018-04-25T20:47:46+00:00 Baruch Siach baruch@tkos.co.il 2018-04-17T09:37:12+00:00 urn:sha1:3db93884a442f6d0742ada5d8ed7818e24223ace Fixes CVE-2018-9234: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys. Remove --disable-doc from configure options. We pass this options to all autotools packages. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2018-02-28T19:44:53+00:00 Baruch Siach baruch@tkos.co.il 2018-02-28T19:00:28+00:00 urn:sha1:379c34739082f3906ccf4877b85a2e714606bffe Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-01-12T18:53:56+00:00 Baruch Siach baruch@tkos.co.il 2018-01-12T10:39:18+00:00 urn:sha1:97ec1ddd5ae847c9fadedc1b26594f5c3437c5f7 Add license hash. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-12-14T05:33:11+00:00 Baruch Siach baruch@tkos.co.il 2017-12-13T20:02:14+00:00 urn:sha1:02a07dde425786494d54f5e820abe06b8185a9b3 Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-11-27T20:56:49+00:00 Baruch Siach baruch@tkos.co.il 2017-11-14T12:02:39+00:00 urn:sha1:3587d29eae6086c1006526c054df2d0fce6fe687 Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2017-11-27T20:52:13+00:00 Baruch Siach baruch@tkos.co.il 2017-11-14T12:02:38+00:00 urn:sha1:86dfb429ae1770550beb49299ef08ef05605c190 Commit e82fadab236a (gnupg2: bump to version 2.2.0) added a configure option to keep the old 'gpg2' executable name to avoid conflict with the gnupg package. It turns out that gnupg depends on !BR2_PACKAGE_GNUPG2 since commit 2cadb26e6d4 (gnupg: make gnupg and gnupg2 mutually exclusive). Drop this configure option. Rename the config option that controls the removal of gpgv2, now gpgv, to match the new name. Add legacy config symbol handling. Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>