buildroot/package/libseccomp, branch 2019.02-op-build

package/libseccomp: security bump to version 2.4.0

2019-03-27T21:49:59+00:00

>From the advisory: Jann Horn identified a problem in current versions of libseccomp where the library did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE). Jann has done a search using codesearch.debian.net and it would appear that only systemd and Tor are using libseccomp in such a way as to trigger the bad code. In the case of systemd this appears to affect the socket address family and scheduling class filters. In the case of Tor it appears that the bad filters could impact the memory addresses passed to mprotect(2). The libseccomp v2.4.0 release fixes this problem, and should be a direct drop-in replacement for previous v2.x releases. https://www.openwall.com/lists/oss-security/2019/03/15/1 v2.4.0 adds a new scmp_api_level utility, so update 0001-remove-static.patch to match. Signed-off-by: Peter Korsgaard (cherry picked from commit 02300786c2fcba2cf641a040a2d87c4022ddb7fc) Signed-off-by: Peter Korsgaard

libseccomp: bump to version 2.3.3

2018-06-07T15:49:07+00:00

- Update patch and sent it upstream - Remove LIBSECCOMP_FIXUP_M4_DIR (not needed anymore) - Add hash for license file Signed-off-by: Fabrice Fontaine Signed-off-by: Thomas Petazzoni

package/lib*: fix wrapping of Config.in help text

2017-07-31T17:10:08+00:00

The check-package script when ran gives warnings on text wrapping on all of these Config files. This patch cleans up all warnings related to the text wrapping for the Config files starting with lib in the package directory. The appropriate indentation is: <2 spaces><62 chars> See http://nightly.buildroot.org/#writing-rules-config-in for more information. Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

libseccomp: enable on ARM

2017-05-07T13:57:45+00:00

libseccomp can now be used on ARM, so allow it to be selected. Fixes bug #9806. Signed-off-by: Thomas Petazzoni

libseccomp: introduce BR2_PACKAGE_LIBSECCOMP_ARCH_SUPPORTS

2017-05-07T13:56:55+00:00

Instead of duplicating the architecture dependency between the main option and the Config.in comment, add a BR2_PACKAGE_LIBSECCOMP_ARCH_SUPPORTS hidden option. This is done in preparation to enabling libseccomp on ARM. Signed-off-by: Thomas Petazzoni

boot, package: use SPDX short identifier for LGPLv2.1/LGPLv2.1+

2017-04-01T13:18:10+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for LGPLv2.1/LGPLv2.1+ is LGPL-2.1/LGPL-2.1+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/LGPLv2.1(\+)?/LGPL-2.1\1/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

libseccomp: bump version to 2.3.1

2016-08-02T19:38:52+00:00

Bump libseccomp version to 2.3.1 to enable power architectures. Signed-off-by: Judd Meinders Signed-off-by: Matt Weber Signed-off-by: Thomas Petazzoni

libseccomp: add .hash file

2016-06-16T06:40:35+00:00

Fixes: http://autobuild.buildroot.org/results/07f/07fecbce8ca4b0a69e86b93021df80dbc2c45497/ Similar to jquery-keyboard, it seems the libseccomp tarball on the autobuilder is corrupt. Fix it by adding a .hash file so it falls back to our s.b.o mirror. Signed-off-by: Peter Korsgaard

package/libseccomp: fix musl build

2016-02-01T13:11:33+00:00

Fixes http://autobuild.buildroot.net/results/0cd/0cd47d7e6a49c268b57981ae8bb9abe4c4a183c7/ http://autobuild.buildroot.net/results/34b/34b0bea52bd7e65a927142dc0e1f28f85629c634/ [Thomas: adjust patch format.] Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/libseccomp: bump version to 2.2.3

2016-02-01T13:11:33+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni