buildroot/package, branch 2015.11.1

libpng: security bump to version 1.6.20

2015-12-04T21:02:01+00:00

Fixes: CVE-2015-8126 - incorrect implementation of png_set_PLTE() that uses png_ptr not info_ptr, that left png_set_PLTE() open to this vuln. (fix in previous release was incomplete) Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard (cherry picked from commit 371e2f7f3c2f66eadba91e5d33c32f462f9691b7)

openssl: security bump to version 1.0.2e

2015-12-04T21:01:15+00:00

Fixes: CVE-2015-3193 - BN_mod_exp may produce incorrect results on x86_64 CVE-2015-3194 - Certificate verify crash with missing PSS parameter CVE-2015-3195 - X509_ATTRIBUTE memory leak Enable IDEA as well since otherwise the build breaks (always great upstream) - it's no longer patent encumbered. [Peter: correct sha256] Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard (cherry picked from commit e9fb14ecef2427d3b98586c667f1e19112de5f90)

dropbear: bump to version 2015.71

2015-12-04T20:59:54+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard (cherry picked from commit c2505381d0103d94e4202bad949fa37184b01920)

busybox: add another upstream patch to fix (g)unzip

2015-12-02T23:02:02+00:00

0002-unzip.patch was added in 69516e0 to fix a segmentation fault in the gunzip applet. However, it introduced a new issue that made the unzipping of some files fail. Add an upstream patch that fixes this new issue. Fixes #8501. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) Cc: Jason Rush Signed-off-by: Peter Korsgaard (cherry picked from commit 63fdab6b4fcc860abd8dbc8342c7b01643a37e1a)

package/gawk: do not use readeline or mpfr in host variant

2015-12-02T23:01:52+00:00

gawk has an optional dependency on mpfr (and thus gmp) and readline, and will probe for them. If they are present, they are used; if they are missing, that's not an error. mpfr (and gmp) is used for "BIGNUM" support on gawk; readline is used by the gawk debugger. However, mpfr (bringing gmp) are also host-packages in Buildroot, but in the standard build order (i.e. a plain 'make'), they are built after gawk. Ditto readline (from ncurses). If the user has the development files for gmp and mpfr, then gawk is linked to them. Ditto readline. Now, further on in the build, we build gmp and mpfr (for gcci or guile), so we install them in the host dir. Ditto readline (for gdb, ncurses itself and a few other packages...) But because we forcibly set an RPATH tag on all our host binaries, our host gawk will now dynamically link with our versions, when it was in fact built against the host ones. This did not seem to cause any harm so far, but is far from ideal. Since we do not really need BIGNUM or the debugger in our host gawk, we just forcibly disable them and configure gawk without readline or mpfr (there's no switch for gmp, but it's not a direct dependency, it comes just with mpfr). [Adjust comment as suggested by Thomas/Yann] Signed-off-by: "Yann E. MORIN" Cc: Peter Korsgaard Cc: Thomas Petazzoni Signed-off-by: Peter Korsgaard (cherry picked from commit fc08a57305264d8dd0b6c54a4e35ecd3e151c22f)

conntrack-tools: work around build issue with musl

2015-11-30T16:20:19+00:00

Building conntrack-tools with kernel headers >= 4.2 + musl fails due to a well-known symbol clash that occurs when userspace and kernel headers are included simultaneously (see [1], question 7, for details). In the case of conntrack-tools, the inclusion of both 'netinet/in.h' and 'linux/in.h' occurs inside the C helper files (src/helpers/*.c) indirectly via e.g. 'libnetfilter_conntrack/libnetfilter_conntrack.h', which itself includes 'netinet/in.h', and 'linux/netfilter.h', which includes 'linux/in.h' in kernel headers >= 4.2. The approach to solving this type of conflict with musl usually involves removing the inclusion of kernel headers or refactoring the code so as to avoid the mentioned simultaneous inclusion. This is unfortunately non-trivial in the case of conntrack-tools since the clashing headers get included indirectly by headers that are strictly necessary (because of definitions used in some helper callbacks). Work around the issue by defining __GLIBC__ when musl is used. This eliminates the conflicts as the kernel headers avoid redefining certain symbols when they see __GLIBC__ defined (linux/libc-compat.h). Note that other glibc-compatible libraries, like uClibc, already do that internally. Fixes: http://autobuild.buildroot.net/results/66e/66ec247fa0fc385bef8d2084c65bf5cad3a8e8ca/ http://autobuild.buildroot.net/results/624/624a0d48decd819eb58cbb3c58ee904b87ebfb21/ [1] http://wiki.musl-libc.org/wiki/FAQ Signed-off-by: Rodrigo Rebello Signed-off-by: Peter Korsgaard

libsigsegv: fix sparc64 compile

2015-11-30T16:15:57+00:00

Compile tested for sparc/glibc and sparc64/glibc. Fixes following autobuilder problem: http://autobuild.buildroot.net/results/1d8e0c22594aef53f7a4de3491454aa78311c815/ Signed-off-by: Waldemar Brodkorb Signed-off-by: Peter Korsgaard

package/libv4l: v4l-utils need locale

2015-11-30T16:13:04+00:00

To reproduce the setlocale-related build error use this minimal defconfig: BR2_TOOLCHAIN_BUILDROOT_CXX=y BR2_PACKAGE_LIBV4L=y BR2_PACKAGE_LIBV4L_UTILS=y After enabling locale support the build error is fixed: BR2_TOOLCHAIN_BUILDROOT_LOCALE=y BR2_TOOLCHAIN_BUILDROOT_CXX=y BR2_PACKAGE_LIBV4L=y BR2_PACKAGE_LIBV4L_UTILS=y Fixes http://autobuild.buildroot.net/results/f2e/f2e4e34fb14ce355a6e92afc83024b0445f52513/ http://autobuild.buildroot.net/results/fe5/fe56063ddd2232fea7699f5117497beb3deca11e/ http://autobuild.buildroot.net/results/1be/1be55f096ddef2aa38fdba681ed97cf74905477a/ Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

valgrind: add a patch to fix MIPS R6 by replacing ADDI with ADDIU

2015-11-30T16:08:10+00:00

The ADDI instruction has been removed for MIPS R6, so valgrind fails to build for this revision level because it uses that assembly instruction. Using ADDIU instead fixes the problem. The patch has been sent upstream: https://bugs.kde.org/show_bug.cgi?id=356112 Fixes: http://autobuild.buildroot.net/results/488/488937704b3b6bae8daed7b24da8c740b56f4d84/ Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libglib2: force arm mode when building with thumb1

2015-11-30T07:19:59+00:00

Fixes #8491 glib/valgrind.h contains inline asm not compatible with thumb1, so build it in arm mode: CC libglib_2_0_la-gstringchunk.lo /tmp/ccSVEXME.s: Assembler messages: /tmp/ccSVEXME.s:587: Error: shifts in CMP/MOV instructions are only supported in unified syntax -- `mov r12,r12,ror#3' /tmp/ccSVEXME.s:587: Error: shifts in CMP/MOV instructions are only supported in unified syntax -- `mov r12,r12,ror#13' /tmp/ccSVEXME.s:588: Error: shifts in CMP/MOV instructions are only supported in unified syntax -- `mov r12,r12,ror#29' /tmp/ccSVEXME.s:588: Error: shifts in CMP/MOV instructions are only supported in unified syntax -- `mov r12,r12,ror#19' /tmp/ccSVEXME.s:589: Error: lo register required -- `orr r10,r10,r10' Makefile:2087: recipe for target 'libglib_2_0_la-gslice.lo' failed Signed-off-by: Peter Korsgaard