OpenPOWER buildroot sources https://git.raptorcs.com/git/buildroot/atom?h=2017.02 2017-02-23T08:55:57+00:00 2017-02-23T08:55:57+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2017-02-22T19:56:53+00:00 urn:sha1:a5015f1025a1aee173c2c2ab39ccac5ce38f30c3 From https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.2-ReleaseNotes This release fixes su(1) security issue CVE-2017-2616: It is possible for any local user to send SIGKILL to other processes with root privileges. To exploit this, the user must be able to perform su with a successful login. SIGKILL can only be sent to processes which were executed after the su process. It is not possible to send SIGKILL to processes which were already running. Drop upstream patches and autoreconf since it's no longer required. [Peter: extend commit message with CVE info / description] Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-01-24T18:55:59+00:00 Vicente Olivert Riera Vincent.Riera@imgtec.com 2017-01-24T18:14:02+00:00 urn:sha1:7d756e50bf82faa6cf11124416ea010fb4ead9be 0001-build-sys-prefer-pkg-config-for-ncurses.patch already included: http://git.kernel.org/cgit/utils/util-linux/util-linux.git/commit/?id=3f7429fd2d539c7f948f72bd829404b55ac19d9f 0002-build-sys-cleanup-UL_NCURSES_CHECK.patch already included: http://git.kernel.org/cgit/utils/util-linux/util-linux.git/commit/?id=862326451184bb0fe9c2b2b110fcfc986f9b1734 0003-build-sys-fix-compilation-with-ncurses-and-uClibc-or.patch already included: http://git.kernel.org/cgit/utils/util-linux/util-linux.git/commit/?id=9ea8ded37b648bbd538cbf9c4d144b8b1a93c1b5 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2016-12-22T09:26:54+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2016-12-22T06:03:49+00:00 urn:sha1:5b83b31a824606645c272b49309bb9e44b91497b Removed patch applied upstream: http://git.kernel.org/cgit/utils/util-linux/util-linux.git/commit/?id=7f0d4d56a2f1ed34c3da4501e65fb79497b3dda1 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2016-09-08T20:03:49+00:00 Vicente Olivert Riera Vincent.Riera@imgtec.com 2016-09-07T15:54:47+00:00 urn:sha1:031659024b3cf27bb68dc58d07519b563ef472a1 --enable-findfs and --enable-lsblk configure options don't exist anymore. Now, findfs and lsblk are always built by default unless you pass --disable-all-programs to the configure script. Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-08-19T21:40:23+00:00 Rahul Bedarkar rahul.bedarkar@imgtec.com 2016-08-11T18:09:56+00:00 urn:sha1:a351f375973072eecafc09f1c233c5c53bbaad3f Drop upstream patch 0001-build-sys-fix-uClibc-ng-scanf-check.patch. Release notes: https://www.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28.1-ReleaseNotes Signed-off-by: Rahul Bedarkar <rahul.bedarkar@imgtec.com> [Thomas: remove --enable-libuuid-force-uuidd support.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-04-18T19:22:12+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2016-04-18T13:59:48+00:00 urn:sha1:baccb506a6feabf114623866568121f49712f5df Drop upstream patches (0004-0008). Convert 0001-sscanf-no-ms-as.patch to git format. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-11-03T14:48:56+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-11-03T10:53:24+00:00 urn:sha1:465bb83c93ed3f7074f0f8f0338d39873c8b60da Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-09-11T17:45:11+00:00 Vicente Olivert Riera Vincent.Riera@imgtec.com 2015-09-11T13:26:27+00:00 urn:sha1:4335dbebe5925850f8c3879cfaa77bb6f1dde9e4 Removed 0002-program-invocation-short-name.patch since the changes it does are now upstream: https://kernel.googlesource.com/pub/scm/utils/util-linux/util-linux/+/37edac9a0ca83f311279d2e49bacd6ac80310dc8 This release includes a security fix: CVE-2015-5224 - chfn, chsh file name collision due to incorrect mkstemp use if compiled without libuser. [thanks to Qualys Security Advisory team; qualys.com] Release notes here: https://www.kernel.org/pub/linux/utils/util-linux/v2.27/v2.27-ReleaseNotes Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Tested-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-05-01T08:04:47+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-04-30T17:57:48+00:00 urn:sha1:c549fb71088e79014a141c34baf92cdfae67c520 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-03-13T21:54:27+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-03-13T21:01:31+00:00 urn:sha1:519d36e085ae2bf92ec2317b738073701a4bad22 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>