OpenPOWER buildroot sources https://git.raptorcs.com/git/buildroot/atom?h=2016.11.2 2016-12-19T21:58:36+00:00 2016-12-19T21:58:36+00:00 Peter Korsgaard peter@korsgaard.com 2016-12-02T20:16:52+00:00 urn:sha1:7567aff8fcfbabece38b4969e93541706f7341c5 c-ares: fix for single-byte buffer overwrite, CVE-2016-5180, more information at https://c-ares.haxx.se/adv_20160929.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> (cherry picked from commit 7fe6b5d9dc88708ba5141ef5c8aa923a6ae54339) 2016-12-19T21:56:56+00:00 Patrick Devlin cloudyparts@icloud.com 2016-11-14T16:58:50+00:00 urn:sha1:722b2d11a06a6048a62554d0941802e2ac5388e4 Fixes CVE-2016-5172 - V8 arbitrary memory read: https://nodejs.org/en/blog/vulnerability/october-2016-security-releases/ https://nodejs.org/en/blog/release/v6.9.1/ The patches from 6.7.0 have been copied to 6.9.1. [Peter: add CVE reference] Signed-off-by: Patrick Devlin <cloudyparts@icloud.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> (cherry picked from commit 5f899d7f1cd807ff7a92b2facfd4718dad139724) 2016-09-30T09:51:57+00:00 Martin Bark martin@barkynet.com 2016-09-29T19:12:46+00:00 urn:sha1:6f3792ae9fc2010f9680ba017d314ed17ac63439 https://nodejs.org/en/blog/release/v6.7.0/ The patches from 6.2.1 have been copied to 6.7.0 with the following changes: - Add 0002-inspector-don-t-build-when-ssl-support-is-disabled.patch to disable the new V8 inspector when openssl is not included. Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2016-09-30T09:35:12+00:00 Martin Bark martin@barkynet.com 2016-09-29T19:12:45+00:00 urn:sha1:734ea7ce27bbe5f26f6aa4e04de5504e98aa5fe4 https://nodejs.org/en/blog/release/v0.10.47/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2016-06-03T12:47:51+00:00 Martin Bark martin@barkynet.com 2016-06-03T10:41:17+00:00 urn:sha1:dc725e763c87dca541d0e48cd9c37140c62cf65f See https://nodejs.org/en/blog/release/v6.2.1/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-05-09T20:54:48+00:00 Martin Bark martin@barkynet.com 2016-05-09T14:18:21+00:00 urn:sha1:34d4337f93ca2085f39af5c095a7183c8c60c3dd See https://nodejs.org/en/blog/release/v0.10.45/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-05-09T20:54:19+00:00 Martin Bark martin@barkynet.com 2016-05-09T14:18:20+00:00 urn:sha1:fbd387c08cde92ca629495d7b5f7265ef0ba5bd6 See https://nodejs.org/en/blog/release/v6.1.0/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-04-28T18:38:03+00:00 Martin Bark martin@barkynet.com 2016-04-28T15:39:55+00:00 urn:sha1:692005ae90c5b483ca9daa38b0723e4b2b002b31 See https://nodejs.org/en/blog/release/v6.0.0/ The patches from 5.11.0 have been copied to 6.0.0 with the following changes: - Removed 0001-Remove-dependency-on-Python-bz2-module.patch, 0003-Fix-va_list-not-declared.patch and 0004-Fix-support-for-uClibc-ng.patch as all 3 have been fixed upstream - Renamed 0002-gyp-force-link-command-to-use-CXX.patch to 0001-gyp-force-link-command-to-use-CXX.patch Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2016-04-26T19:58:03+00:00 Martin Bark martin@barkynet.com 2016-04-26T10:28:58+00:00 urn:sha1:fbf9411d0a4a440abd2755b4f61b4e5e9e169cf2 See https://nodejs.org/en/blog/release/v5.11.0/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-04-26T19:57:54+00:00 Martin Bark martin@barkynet.com 2016-04-26T10:28:57+00:00 urn:sha1:09f2657562829f3d98afa4f6fd1d79ee6c34fc78 See https://nodejs.org/en/blog/release/v0.10.44/ Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>