summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * package/cups: security bump to version 2.2.10Fabrice Fontaine2019-03-273-191/+2
| | | | | | | | | | | | | | | | | | | | | | - Fixes CVE-2018-4700: Linux session cookies used a predictable random number seed: https://github.com/apple/cups/releases/tag/v2.2.10. - Remove fifth patch (already in version) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 260d9e534268083e7aa89e1bdb47bb8f3668a052) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * utils/test-pkg: generate package config if it is not specifiedVadim Kochan2019-03-271-1/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is possible to generate one-line config for the package just by normalize it to the form: BR2_PACKAGE_${pkg_replaced-to_and_uppercase} it simplifes a bit of testing package where no additional config options are needed. Signed-off-by: Vadim Kochan <vadim4j@gmail.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit a946813dd581ac2e1aea6745edad2bc7ce44e6aa) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/nodejs: security bump to version 8.15.1Peter Korsgaard2019-03-262-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Fixes the following security issues: Node.js: Slowloris HTTP Denial of Service with keep-alive (CVE-2019-5737) OpenSSL: 0-byte record padding oracle (CVE-2019-1559) For more details, see the CHANGELOG: https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.15.1 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/samba4: security bump to version 4.9.5Bernd Kuhls2019-03-252-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Release notes: https://www.samba.org/samba/history/samba-4.9.5.html Fixes CVE-2019-3824: ldb: Out of bound read in ldb_wildcard_compare Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit e7d67faac5be820b1c8019eb249adf8765d4cf42) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/gerbera: fix static build with curl and libidn2Fabrice Fontaine2019-03-251-0/+41
| | | | | | | | | | | | | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/be5893b507d22a23951efeea20c18642742cef5a Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 7553b6ad23961be3f91798328fa8e955658dbd72) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/beecrypt: fix build without C++Fabrice Fontaine2019-03-251-0/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not check for C++ compiler as C++ support has been disabled since commit dd4d3c18d6753e1224fbe59d91a4b44f39bc38c0 otherwise build will fail on toolchains without a working C++ compiler: checking how to run the C++ preprocessor... /lib/cpp configure: error: in `/data/buildroot/buildroot-test/instance-1/output/build/beecrypt-4.2.1': configure: error: C++ preprocessor "/lib/cpp" fails sanity check Fixes: - http://autobuild.buildroot.org/results/3c79cc68f1b088ad24daf7f9bd70718d702be577 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 6255c816232468b2e92cffcfa835aa79d8fcae04) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/musl: remove rcrt1.o from target installationNorbert Lange2019-03-251-1/+1
| | | | | | | | | | | | | | | | | | | | rcrt1.o is a new startup for "static-pie" apps, and only needed for building, should not end up in the target filesystem. Signed-off-by: Norbert Lange <norbert.lange@andritz.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit de5fef8c0482889743fb27542ccb013c10f1db8a) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * linux{, -headers}: support downloads of v5+Arnout Vandecappelle (Essensium/Mind)2019-03-252-14/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the arrival of linux v5.0, we need yet another condition to set _SITE correctly. Instead of continuing this madness, solve the problem generically: use v2.6 for 2.6.*, and use the number before the first dot in the other cases. While we're at it, remove the comment which has been incorrect since 80d7b68167a5c8893e906ace6b5f0b0166336406 (7 years ago). Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Tested-by: Jan Kundrát <jan.kundrat@cesnet.cz> Tested-by: Adam Duskett <aduskett@gmail.com> Reviewed-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 4ed7246a597325cea2c5b4624b7c94c67ca8662d) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/linux-headers: fix support for -rc kernelsArnout Vandecappelle (Essensium/Mind)2019-03-251-13/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | -rc kernels after v3.x are no longer available in the testing subdirectory. Instead they should be fetched from cgit. Commit ff4cccbdcf5417a5a8c251ff302791a306023cc1 did this for linux itself, now we also do it for linux-headers. When fetched from cgit, .tar.xz can't be used. Adding this to the existing condition is not so simple, so refactor how _SOURCE is set: simply set it explicitly in each branch of the condition. While more verbose (it is repeated 4 times), it's easier to understand and to maintain. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 1b94e8dcb368cd71d8002427bf4a150a2f082aa2) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/libpcap: disable dbus to break circular dependencyBaruch Siach2019-03-251-7/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The optional dbus dependency of libpcap creates a circular dependency chain: $ make libpcap-show-recursive-depends Recursion detected for : systemd which is a dependency of: dbus which is a dependency of: libpcap which is a dependency of: iptables which is a dependency of: systemd make: *** [package/libpcap/libpcap.mk:55: libpcap-show-recursive-depends] Error 1 Of all these dependencies the one of libpcap on dbus seems to be less useful. Drop it. Fixes: http://autobuild.buildroot.net/results/0b5d18bff816cbcee11e8645449701722d956de5/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit b01d463c14060318743ce5d0a2da01a5b3a5e0e2) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/x11r7/xapp_xdm: security bump to version 1.1.12Bernd Kuhls2019-03-252-3/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2013-2179. Release notes: https://lists.x.org/archives/xorg-announce/2019-March/002959.html Added all license hashes provided by upstream and license hash. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 2776484107b8f8640e0771c3ffe45b62a78920fb) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/avahi: add upstream security fixArtem Panfilov2019-03-251-0/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2017-6519: avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. Signed-off-by: Artem Panfilov <panfilov.artyom@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 1e17adf1c5ee1cecd747f84fff8f6261c1e8a476) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/bash: add upstream patches up to patch level 23Peter Korsgaard2019-03-255-0/+417
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We unfortunately cannot easily download these because of the file names (not ending in patch) and patch format (p0), so convert to p1 format and include in package/bash with the following script: j=1; for i in 19 20 21 22 23; do file=$(printf '%04d-patch44-0%d.patch' $j $i) cat > $file << EOF >From https://ftp.gnu.org/gnu/bash/bash-4.4-patches/bash44-0$i Signed-off-by: Peter Korsgaard <peter@korsgaard.com> EOF curl https://ftp.gnu.org/gnu/bash/bash-4.4-patches/bash44-0$i | \ sed -e 's|^\*\*\* \.\./|*** |' -e 's|^--- |--- b/|' >> $file j=$(( j + 1 )) done Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 87a8f5f51c63fb9c9ff2cb907fd86f5ad0525617) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/kexec: update to 2.0.18Adrien Gallouët2019-03-252-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | This release fixes the following issue with new kernels: kexec --load bzImage --reuse-cmdline Unhandled rela relocation: R_X86_64_PLT32 Signed-off-by: Adrien Gallouët <adrien@gallouet.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 254384e7699d5c7a84b2b029099107046e3a6a5d) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/kexec: enable powerpc64le platformsArtem Senichev2019-03-251-1/+1
| | | | | | | | | | | | | | | | | | | | kexec has fully support of ppc64 platform: https://www.kernel.org/doc/Documentation/kdump/kdump.txt Signed-off-by: Artem Senichev <artemsen@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 46a4af5214ccafa6cca39e2d9136f4822f40f3a6) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/libdrm: amdgpu needs MMUFabrice Fontaine2019-03-253-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | amdgpu test uses fork() so disable amdgpu without MMU Fixes: - http://autobuild.buildroot.org/results/8d6194982c1080e173fcef8212fb06e6dc275d58 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 9972dc2e8295bbd0dba694bf970133ba99ad25f3) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/go: set GOCACHE to a host pathChristian Stewart2019-03-251-0/+4
| | | | | | | | | | | | | | | | | | | | | | Set the GOCACHE environment variable properly. It was previously unset, and defaults to $HOME/.cache/go-build. Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 3909423f1ccf186bd064e225ecb064ca1ece0310) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/openjpeg: security bump to latest git versionPeter Korsgaard2019-03-253-30/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Current git contains fixes for a number of post-2.3.0 security issues: git shortlog --no-merges -i --grep cve --grep overflow --grep zero v2.3.0.. Even Rouault (2): Avoid out-of-bounds write overflow due to uint32 overflow computation on images with huge dimensions. color_apply_icc_profile: avoid potential heap buffer overflow Hugo Lefeuvre (4): convertbmp: fix issues with zero bitmasks jp3d/jpwl convert: fix write stack buffer overflow jp2: convert: fix null pointer dereference convertbmp: detect invalid file dimensions early Karol Babioch (2): jp3d: Replace sprintf() by snprintf() in volumetobin() opj_mj2_extract: Check provided output prefix for length Stefan Weil (1): Fix some potential overflow issues (#1161) Young_X (5): [MJ2] To avoid divisions by zero / undefined behaviour on shift [JPWL] fix CVE-2018-16375 [JPWL] imagetotga(): fix read heap buffer overflow if numcomps < 3 (#987) [JPWL] opj_compress: reorder checks related to code block dimensions to avoid potential int overflow [JP3D] To avoid divisions by zero / undefined behaviour on shift (CVE-2018-14423 ichlubna (1): openjp3d: Int overflow fixed (#1159) setharnold (1): fix unchecked integer multiplication overflow Drop now upstreamed 0004-install-static-lib.patch. Add a hash for the LICENSE file. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit a5e8c81875a26551e780e409a0647916e626c969) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/mosquitto: bump version to 1.5.8Peter Korsgaard2019-03-252-2/+2
| | | | | | | | | | | | | | | | | | | | | | Bugfix release, fixing a number of issues discovered post-1.5.7 https://mosquitto.org/blog/2019/02/version-1-5-8-released/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 24cc2eaa335a34633b71a7db7c972ab64b5e7739) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/php: security bump to version 7.3.3Peter Korsgaard2019-03-254-84/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | php-7.3.3 fixes a number of security issues (no CVE known, bugtracker issues not yet public): https://secure.php.net/ChangeLog-7.php#7.3.3 Drop 0004-OPcache-flock-mechanism-is-obviously-linux-so-force-.patch as the flock detection has been removed since commit 9222702633 (Avoid dependency on "struct flock" fields order.) Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit b821ae3d63440258808e413b1ace53639066046a) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * ntp: security bump to version 4.2.8p13Baruch Siach2019-03-254-60/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2019-8936: Crafted null dereference attack in authenticated mode 6 packet. Drop upstream patches. Update COPYRIGHT file hash; text formatting (line width) changes. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 7ffdc08f04a87b0dd6f2bba250627389ce79a776) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/file: security bump to version 5.36Baruch Siach2019-03-252-6/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2019-8906: do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused. CVE-2019-8904: do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf. Update license files hashes; removal of trailing white spaces. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 14d6e6df7bcfd7d46811a812610ec87b0b249088) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/wireshark: add optional spandsp dependencyFabrice Fontaine2019-03-251-0/+7
| | | | | | | | | | | | | | Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit ee772dad7b76dcc49bc86b5a232ccdcedec60904) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/tpm2-abrmd: rename libsapi to libtss2-sys in the help textRomain Naour2019-03-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | libsapi was renamed to libtss2-sys in tpm2-tss library: https://github.com/tpm2-software/tpm2-tss/commit/5f0ab55d4e46077cb8f0c53a76c5ebd15a088d26 Signed-off-by: Romain Naour <romain.naour@smile.fr> Cc: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 8f297cc033c4a9a9d9f4b9b7b4872a73ab2b684e) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/tpm2-tss: rename tpm2-tss libraries in the help textRomain Naour2019-03-251-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since tpm2-tss version 2.0.0, tpm2 libraries have been renamed. libsapi renamed to libtss2-sys https://github.com/tpm2-software/tpm2-tss/commit/5f0ab55d4e46077cb8f0c53a76c5ebd15a088d26 libtcti-device renamed to libtss2-tcti-device libtcti-socket renamed to libtss2-tcti-mssim https://github.com/tpm2-software/tpm2-tss/commit/b8584accbd96e38eaea250e31ed3ea580d2bca27 Signed-off-by: Romain Naour <romain.naour@smile.fr> Cc: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit fb9c137660aaa8751d67862b3dd8ef14d80b7b08) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/xen: fix build with gcc 8.1Fabrice Fontaine2019-03-251-0/+79
| | | | | | | | | | | | | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/df5abe6ca8b4c8935f3d5c257aef816190771200 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 9b2bf1b7458891ae652e3493ae87d1f7c4776a8b) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/gnuradio: add optional log4cpp dependencyFabrice Fontaine2019-03-252-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | Currently, logger component is enabled if log4cpp is found Moreover, it should be noted that log4cpp is now mandatory in latest upstream: https://github.com/gnuradio/gnuradio/commit/d2428961205bf62e6b39966f040f98435e5cc2ed Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 50e1d12e073d2f042730fe6cf0b1915df5afb8af) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/mongodb: disable on powerpc64Fabrice Fontaine2019-03-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As stated in SConstruct, the altivec runtime test breaks cross-compilation: "This checks for an altivec optimization we use in full text search. Different versions of gcc appear to put output bytes in different parts of the output vector produced by vec_vbpermq. This configure check looks to see which format the compiler produces. NOTE: This breaks cross compiles, as it relies on checking runtime functionality for the environment we're in." Fixes: - http://autobuild.buildroot.org/results/162198617979a83b66f70ed6013251942ed04d67 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit f9fd1931410ec7f68e0f310efb9c5f616bb73ea8) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/mongodb: needs host-python2Fabrice Fontaine2019-03-251-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mongodb (like gnuradio) needs host-python2 however there is no way to enforce this so add a dependency on !BR2_PACKAGE_PYTHON3. Indeed, if BR2_PACKAGE_PYTHON3 is selected, then buildroot will only build and install host-python-typing for host-python3. This issue was not raised in the previous version of mongodb as host-scons was the only dependency however we now have host-python-typing and host-python-pyyaml dependencies and it does not seem right to enforce python2 on those packages Fixes: - http://autobuild.buildroot.org/results/693bdba2c01a1b69f56d6ee75094a6a0fc3f40b4 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> [Thomas: propagate dependency to Config.in comment] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit bf57446a0b7fbaa75f92d8c05357225846eebafe) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/log4cplus: add optional qt5 dependencyFabrice Fontaine2019-03-251-0/+7
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> [Thomas: test BR2_PACKAGE_QT5BASE instead of BR2_PACKAGE_QT5, just for consistency with the package we add to the DEPENDENCIES variable.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit d04b12d19e834c0e7aba52e78c46ff820b93ad69) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/sunxi-tools: fix build meminfo with muslVadim Kochan2019-03-251-0/+59
| | | | | | | | | | | | | | | | | | | | | | | | | | | | musl does not provide inx/outx API for ARM arch, so use io memory access via pointers which is actually done this way in glibc/ulibc. Fixes: http://autobuild.buildroot.net/results/bf10cbe40c0f672c34db72e4eea4c168d5932bd4/ Signed-off-by: Vadim Kochan <vadim4j@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit d12d3969d1d7501a1ebd8e642aa0f0a1098715de) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * qt5webkit: select leveldb package and memenvGaël PORTAY2019-03-252-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch fixes the build issue reported by autobuilder [0]. /home/naourr/work/instance-2/output/build/qt5webkit-5.9.1/Source/WebCore//.obj/platform/leveldb/LevelDBDatabase.o: In function `WebCore::LevelDBDatabase::openInMemory(WebCore::LevelDBComparator const*)': LevelDBDatabase.cpp.text._ZN7WebCore15LevelDBDatabase12openInMemoryEPKNS_17LevelDBComparatorE+0x34): undefined reference to `leveldb::NewMemEnv(leveldb::Env*)' collect2: error: ld returned 1 exit status make[3]: *** [Makefile.api:97: ../lib/libQt5WebKit.so.5.9.1] Error 1 The issue happens when both packages leveldb and qt5webkit are enabled. QtWebKit builds its own copy of leveldb [1] (as a third-party) if the system does not provided it (i.e. buildroot). It builds it differently and this is the origin of that issue. Instead of using the Makefile provided by leveldb [2], QtWebKit uses qmake to build that library [3]. The missing symbol issue happens because the symbol leveldb::NewMemEnv is bundled in the static library libmemenv.a (aside libleveldb.so). This static library consists of this single symbol which is like an extra that is built but *NOT* shipped by default at installation in the staging directory. Unfortunatly, that symbol is required later by WebCore [4]. The copy built by QtWebKit is an all-in-one library including both libleveldb and libmemenv; thus QtWebKit links against libleveldb only. Also, the linker finds the buildroot's copy first (not the third-party): that explains why it is complaining about a missing symbol. That copy does not have the symbol leveldb::NewMemEnv. Fortunatly, QtWebKit provides a facility to link against the system leveldb package. The qmake flag WEBKIT_CONFIG+=use_system_leveldb tells Qt5WebKit to link against libleveldb *AND* libmemenv [5]. To fix that issue, this commit selects the package leveldb that now installs the libmemenv static library and its header. It ensures that QtWebKit has everything it needs to be built. It also sets the appropriate qmake configure flags to tell QtWebKit to use the leveldb copy built by buildroot instead of the bundled one. [0]: http://autobuild.buildroot.net/results/46033e82adf592c3b92c6d50cfaf45bd58beeaa4 [1]: https://github.com/qt/qtwebkit/tree/5.9/Source/ThirdParty/leveldb [2]: https://github.com/qt/qtwebkit/blob/5.9/Source/ThirdParty/leveldb/Makefile#L167-L169 [3]: https://github.com/qt/qtwebkit/blob/5.9/Source/ThirdParty/leveldb/Target.pri#L80 [4]: https://github.com/qt/qtwebkit/blob/5.9/Source/WebCore/platform/leveldb/LevelDBDatabase.cpp#L185 [5]: https://github.com/qt/qtwebkit/blob/5.9/Source/WebCore/WebCore.pri#L254 [6]: https://github.com/google/leveldb/commit/739c25100e46576cdcdfff2d6f43f9f7008103c7 Signed-off-by: Gaël PORTAY <gael.portay@collabora.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> (cherry picked from commit 2d7c746ed8c89ad262ef0c6db5460ade1fc35973) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * leveldb: generate pic for static librariesGaël PORTAY2019-03-251-0/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The project's static libraries are not compiled with the -fPIC compiler flag. This prevents dynamic libraries to link against those libraries. This commit adds a patch that sets the -fPIC compiler flag to the list of CFLAGS/CXXFLAGS. The project now generates position independant code for all of its outputs (i.e. not limited anymore to its shared libraries). Fixes: /home/gportay/src/buildroot/output/host/opt/ext-toolchain/bin/../lib/gcc/x86_64-amd-linux-gnu/6.2.0/../../../../x86_64-amd-linux-gnu/bin/ld: /home/gportay/src/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libmemenv.a(memenv.o): relocation R_X86_64_32S against `.rodata' can not be used when making a shared object; recompile with -fPIC /home/gportay/src/buildroot/output/host/x86_64-buildroot-linux-gnu/sysroot/usr/lib/libmemenv.a: error adding symbols: Bad value collect2: error: ld returned 1 exit status Signed-off-by: Gaël PORTAY <gael.portay@collabora.com> [Arnout: renumber patch] Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> (cherry picked from commit 088f261dbb89bb48a918a3153f293b86708c8a58) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * leveldb: install memenv static library and headerGaël PORTAY2019-03-251-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The project builds a tiny static library that consists of a single symbol which creates an in-memory LevelDB database. That library is not installed by default and may be used by other projects. This commit installs in the staging directory the libmemenv.a static library and the memenv.h header file. Signed-off-by: Gaël PORTAY <gael.portay@collabora.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> (cherry picked from commit 16f847340d07dce620e4c3fc0a099aa79898d86a) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/gst-plugins-bad: remove apexsink supportFabrice Fontaine2019-03-193-11/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | apexsink does not build with OpenSSL 1.1.x so remove this option especially because there is no more apexsink option in gstreamer1 (since version 1.12) Fixes: - http://autobuild.buildroot.org/results/a29e8a8509190fc4b3c419dae2301cf72a601f62 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit c8421565b1c4c5edd94d0c65e4fad5cbcfd46e10) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/vsftpd: add patch to fix hangAbdelmalek Benelouezzane2019-03-191-0/+87
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes a hang due to SIGCHLD not being handled correctly by vsftpd. The patch comes from fedora and didn't make its way to upstream yet. More information about the bug can be found in: - https://bugzilla.redhat.com/show_bug.cgi?id=1198259 Signed-off-by: Abdelmalek Benelouezzane <abdelmalek.benelouezzane@savoirfairelinux.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 498dff7ea1ef7d975f09fd3d7f1cce8d40b47a8b) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/wireshark: fix build with uclibcFabrice Fontaine2019-03-191-0/+75
| | | | | | | | | | | | | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/c41d42fe3489bc63c42e7ce7a9eccb1b4ca7b9b2 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit e68fdaf4146000c5bf331171c719e353e3385aa9) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/wireshark: security bump to version 2.6.7Fabrice Fontaine2019-03-192-3/+3
| | | | | | | | | | | | | | | | | | Fixes CVE-2019-9208, CVE-2019-9209 and CVE-2019-9214 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 1de1fcb4d810cc9443c3fe4c1c108e649be83726) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/gst-plugins-bad: allow static build of zbar pluginFabrice Fontaine2019-03-191-3/+2
| | | | | | | | | | | | | | | | | | | | | | zbar can be built statically since commit fc4a6abfa6bbffeabefb9967dbf378c410fb6318 so remove the dynamic library dependency from BR2_PACKAGE_GST_PLUGINS_BAD_ZBAR Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit ec9b3aec53f55fd1aca99c42f737afafdf912a7f) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/busybox: udhcp CVE-2019-5747 patchJared Bents2019-03-192-0/+59
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Patch to resolve CVE-2019-5747 which affects versions prior to 1.30.0 More information can be found at: https://nvd.nist.gov/vuln/detail/CVE-2019-5747 This applies to both master and 2019.02 Signed-off-by: Jared Bents <jared.bents@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit a49e8f34fffffaa7839861049add77fe6f4d7967) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/busybox: udhcp CVE-2018-20679 patchJared Bents2019-03-191-0/+136
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Patch to resolve CVE-2018-20679 which affects versions prior to 1.30.0 More information can be found at: https://nvd.nist.gov/vuln/detail/CVE-2018-20679 This applies to both master and 2019.02 Signed-off-by: Jared Bents <jared.bents@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit d65d1d066ba895f3ccb277d24199019663801721) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/mender: add missing double quote in service fileAdam Duskett2019-03-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | There was a missing double quotes that would prevent the service from starting. Signed-off-by: Adam Duskett <Aduskett@gmail.com> Tested-by: Angelo Compagnucci <angelo@amarulasolutions.com> Acked-by: Angelo Compagnucci <angelo@amarulasolutions.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 93321e5f166d08426e38a14bce318e9807d7d45d) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/efl: fix build with mesaVadim Kochan2019-03-191-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | efl does not compile with mesa without OpenGL ES because it checks for GL_ES_VERSION_2_0 and declares own GLintptr and GLsizeiptr types if such version is not defined, but mesa declares them too for OpenGL version 1.5, so fix it by add check also for OpenGL 1.5 where these types are defined. Use patch from: https://git.enlightenment.org/core/efl.git/commit/?id=0d2b624f1e24240a1c4e651aa1cfe9a8dd10a573 Fixes: http://autobuild.buildroot.net/results/62ca120f1e54e8c3ae445f98b2624b526569f007 Signed-off-by: Vadim Kochan <vadim4j@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 579dfd94990449be719529f8b4c0589ddd060498) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * docs/website: download.html: correct version number in titlePeter Korsgaard2019-03-191-1/+1
| | | | | | | | | | | | | | | | | | | | Fixes #11716 Latest release is 2019.02. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 964d525970e8d6dfd7807dc965d07e0d2bcc49f7) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/flashrom: add BR2_PACKAGE_FLASHROM_ARCH_SUPPORTSFabrice Fontaine2019-03-191-1/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/22c72369cd5b7a8200bb03564bdc342ed026ccac - http://autobuild.buildroot.org/results/ef6869bc40382145fad1079b79107275c4973494 - http://autobuild.buildroot.org/results/09d857102c469ede1db0bff8aa0dcd82a4001eaf Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> [Thomas: change formatting of new option.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 10a95d545a9fb6cc00f076bd323cbc9ee352590f) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/flashrom: fix build on riscvFabrice Fontaine2019-03-191-0/+41
| | | | | | | | | | | | | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/fb95c22cbe1d19e73f0089103ed6da2f4b3081c8 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit cc366832f2b4268d77e2f367d4d059c318ba4e3c) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/flashrom: disable on microblaze and xtensaFabrice Fontaine2019-03-191-0/+1
| | | | | | | | | | | | | | | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/cdf0fb462eec143ea881d43cdd0c69c86122f66b - http://autobuild.buildroot.org/results/df4d9702959b610762e87cf21fac9de62365dae6 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 582448032d97b9dc6b196d838f57ec7f695048ba) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/flashrom: remove x86 dependencyFabrice Fontaine2019-03-191-1/+0
| | | | | | | | | | | | | | Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit c125d445b018cca576c8ab1c20244116f434ee30) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/flashrom: libusb is optional, not mandatoryFabrice Fontaine2019-03-192-7/+7
| | | | | | | | | | | | | | Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 276ddad9f4efe275af3887cd30ac1432f7e96a68) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/flashrom: libusb-compat is optional, not mandatoryFabrice Fontaine2019-03-192-2/+8
| | | | | | | | | | | | | | Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit b36054fc7ca55b73fa09d68b239b45d0e30364e9) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
OpenPOWER on IntegriCloud