<feed xmlns='http://www.w3.org/2005/Atom'>
<title>buildroot/package/imlib2, branch 2016.08</title>
<subtitle>OpenPOWER buildroot sources</subtitle>
<id>https://git.raptorcs.com/git/buildroot/atom?h=2016.08</id>
<link rel='self' href='https://git.raptorcs.com/git/buildroot/atom?h=2016.08'/>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/'/>
<updated>2016-06-14T10:22:41+00:00</updated>
<entry>
<title>imlib2: drop unneeded autoreconf</title>
<updated>2016-06-14T10:22:41+00:00</updated>
<author>
<name>Peter Korsgaard</name>
<email>peter@korsgaard.com</email>
</author>
<published>2016-06-14T10:22:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=f6c1bd002eb3d66ad4f8e615387db3f488f6897c'/>
<id>urn:sha1:f6c1bd002eb3d66ad4f8e615387db3f488f6897c</id>
<content type='text'>
This was forgotten when the patch to Makefile.am was removed in 779676f62d56
(imlib2: security bump to version 1.4.8).

Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>imlib2: security bump to version 1.4.9</title>
<updated>2016-05-01T20:34:30+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2016-05-01T13:34:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=69a30b2817cee6fa1a857f3e6950ace559d43830'/>
<id>urn:sha1:69a30b2817cee6fa1a857f3e6950ace559d43830</id>
<content type='text'>
It already includes the fixes for CVE-2016-3994 and CVE-2011-5326 so
drop the patches, and additionally fixes:
CVE-2016-4024 - integer overflow in imlib2, which result in insufficient
heap allocation.

Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>imlib2: security bump to version 1.4.8</title>
<updated>2016-04-14T20:51:10+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2016-04-14T15:43:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=779676f62d56774c6290dabe4a1e3727f1cb834d'/>
<id>urn:sha1:779676f62d56774c6290dabe4a1e3727f1cb834d</id>
<content type='text'>
Fixes:
CVE-2016-3994 - out of bound read in GIF loader
CVE-2011-5326 - divide by zero on 2x1 ellipse

Switch to sourceforge hashes.
And drop all previous patches, they're upstream, yay.

Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package/imlib2: fix musl compilation issue</title>
<updated>2015-08-06T06:57:46+00:00</updated>
<author>
<name>Brendan Heading</name>
<email>brendanheading@gmail.com</email>
</author>
<published>2015-08-03T11:51:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=f68270c92ec81d72ab8bd2e1076b52b50cbe4dbd'/>
<id>urn:sha1:f68270c92ec81d72ab8bd2e1076b52b50cbe4dbd</id>
<content type='text'>
Fixes http://autobuild.buildroot.net/results/a6e/a6e61bfb376946b479085f243601d6e1634adc6d/

musl is strict about including time.h when using time_t.

Signed-off-by: Brendan Heading &lt;brendanheading@gmail.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>packages: indentation cleanup</title>
<updated>2015-03-31T11:57:41+00:00</updated>
<author>
<name>Jerzy Grzegorek</name>
<email>jerzy.grzegorek@trzebnica.net</email>
</author>
<published>2015-03-31T07:21:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=bd8c733fb4a0ca6ca1aa72f8b549d53dcd37f4ee'/>
<id>urn:sha1:bd8c733fb4a0ca6ca1aa72f8b549d53dcd37f4ee</id>
<content type='text'>
This commit doesn't touch infra packages.

Signed-off-by: Jerzy Grzegorek &lt;jerzy.grzegorek@trzebnica.net&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>imlib2: imlib2-config: delete old reference to @my_libs@</title>
<updated>2015-03-08T17:32:13+00:00</updated>
<author>
<name>Fabio Porcedda</name>
<email>fabio.porcedda@gmail.com</email>
</author>
<published>2015-03-08T16:54:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=76b55b9509bdb3f608e4a0a58388ccf396240691'/>
<id>urn:sha1:76b55b9509bdb3f608e4a0a58388ccf396240691</id>
<content type='text'>
The script "imlib2-config" returns "@my_libs@" that causes build failures
on the programs that use it.
This is a regression of version v1.4.6.

Add a upstream patch to fix it and reorder the patches to follow
upstream branch order.

Fixes:
http://autobuild.buildroot.net/results/e1a7691a6528d635c308d7bf47a8be8aa0594190
http://autobuild.buildroot.net/results/23fea2e4d668d69565d5f50493635fc834c54ce1

Signed-off-by: Fabio Porcedda &lt;fabio.porcedda@gmail.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>imlib2: use giflib instead of soon to be deprecated libungif</title>
<updated>2015-03-07T16:41:59+00:00</updated>
<author>
<name>Fabio Porcedda</name>
<email>fabio.porcedda@gmail.com</email>
</author>
<published>2015-03-07T16:26:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=b637d6af9e759bcdce260c5b029eb7bc0b1ba264'/>
<id>urn:sha1:b637d6af9e759bcdce260c5b029eb7bc0b1ba264</id>
<content type='text'>
Add three upstream patch to support giflib version 5.1

Also rename the previous patches to match the order of the commits in
the upstream master branch.

Signed-off-by: Fabio Porcedda &lt;fabio.porcedda@gmail.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>imlib2: bump to version 1.4.6</title>
<updated>2015-03-07T16:41:52+00:00</updated>
<author>
<name>Fabio Porcedda</name>
<email>fabio.porcedda@gmail.com</email>
</author>
<published>2015-03-07T16:26:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=d8be6f7bbc26640519688e359f3802daa5abde7d'/>
<id>urn:sha1:d8be6f7bbc26640519688e359f3802daa5abde7d</id>
<content type='text'>
Also add two upstream patch to fix a warning and a build failure of the
version 1.4.6.

Also add AUTORECONF because one patch change the file
"src/lib/Makefile.am".

Signed-off-by: Fabio Porcedda &lt;fabio.porcedda@gmail.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package: add hashes for SourceForge-hosted packages</title>
<updated>2014-12-28T21:21:16+00:00</updated>
<author>
<name>Yann E. MORIN</name>
<email>yann.morin.1998@free.fr</email>
</author>
<published>2014-12-28T12:19:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=2ced21f8f982ef199b99ccc1f35dff6611b90c89'/>
<id>urn:sha1:2ced21f8f982ef199b99ccc1f35dff6611b90c89</id>
<content type='text'>
Since SourceForge sometimes serves us faulty tarballs, we can tons of
autobuild failures:
    http://autobuild.buildroot.org/results/9fb/9fba5bf086a4e7a29e5f7156ec43847db7aacfc4/
    http://autobuild.buildroot.org/results/6c8/6c837b244c45ac3b3a887734a371cd6d226cf216/
    ...

Fix that by adding hash files for all SourceForge-hosted packages (thos
etht did not already have it).

We normally prefer to use hashes published by upstream, but hunting them
all one by one is a tedious task, so those hashes were all locally
computed with a script that searched for SF-hosted packages, downloades
the associated tarball, computed the hash, and stored it in the
corresponding .hash file.

Also, SF publishes sha1 hashes, while I used the stronger sha256, since
sha1 is now considered to be relatively weak.

Signed-off-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
Cc: Peter Korsgaard &lt;jacmet@uclibc.org&gt;
Cc: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
Cc: Maxime Hadjinlian &lt;maxime.hadjinlian@gmail.com&gt;
Cc: Richard Braun &lt;rbraun@sceen.net&gt;
Cc: Nathaniel Roach &lt;nroach44@gmail.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>Rename BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS</title>
<updated>2014-12-11T21:48:13+00:00</updated>
<author>
<name>Thomas Petazzoni</name>
<email>thomas.petazzoni@free-electrons.com</email>
</author>
<published>2014-12-03T21:41:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=665e13c85e1fd216499cdd335a88a4d1c20f175f'/>
<id>urn:sha1:665e13c85e1fd216499cdd335a88a4d1c20f175f</id>
<content type='text'>
Since a while, the semantic of BR2_PREFER_STATIC_LIB has been changed
from "prefer static libraries when possible" to "use only static
libraries". The former semantic didn't make much sense, since the user
had absolutely no control/idea of which package would use static
libraries, and which packages would not. Therefore, for quite some
time, we have been starting to enforce that BR2_PREFER_STATIC_LIB
should really build everything with static libraries.

As a consequence, this patch renames BR2_PREFER_STATIC_LIB to
BR2_STATIC_LIBS, and adjust the Config.in option accordingly.

This also helps preparing the addition of other options to select
shared, shared+static or just static.

Note that we have verified that this commit can be reproduced by
simply doing a global rename of BR2_PREFER_STATIC_LIB to
BR2_STATIC_LIBS plus adding BR2_PREFER_STATIC_LIB to Config.in.legacy.

Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
Reviewed-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
</content>
</entry>
</feed>
