Matt Weber [Mon, 9 Sep 2019 16:58:42 +0000 (11:58 -0500)]
package/protobuf: bump to version 3.9.1
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Matt Weber [Mon, 9 Sep 2019 16:31:40 +0000 (11:31 -0500)]
package/protobuf-c: bump to version 1.3.2
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Joel Carlson [Mon, 9 Sep 2019 18:52:14 +0000 (12:52 -0600)]
package/capnproto: require GCC 5 for C++14
Adds dependency on at least GCC 5 to have C++14 language features that
are required starting in version 0.7.0 of capnproto.
Fixes:
http://autobuild.buildroot.org/results/
5c09e745cab822d830f73e33647f3b0e765c9181
(capnproto build failure)
Fixes:
http://autobuild.buildroot.org/results/
743c750e9932658c20965a25de89c3f21a1d43e9
(host-capnproto build failure)
This updated dependency is propagated to capnproto unique reverse
dependency, c-capnproto.
Signed-off-by: Koen Martens <gmc@sonologic.nl>
Signed-off-by: Joel Carlson <JoelsonCarl@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Matt Weber [Tue, 10 Sep 2019 03:07:09 +0000 (22:07 -0500)]
package/libqmi: bump to 1.22.6
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Mon, 9 Sep 2019 17:06:05 +0000 (20:06 +0300)]
package/libuv: bump to version 1.32.0
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Matt Weber [Mon, 9 Sep 2019 16:00:51 +0000 (11:00 -0500)]
package/smcroute: bump to 2.4.4
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Matt Weber [Mon, 9 Sep 2019 15:51:27 +0000 (10:51 -0500)]
package/tclap: bump to 1.2.2
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Oleksandr Zhadan [Mon, 26 Aug 2019 17:39:42 +0000 (13:39 -0400)]
configs/acturus_ucls1012a: bump kernel and u-boot version
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/
289126214
Signed-off-by: Oleksandr Zhadan <oleks@arcturusnetworks.com>
Signed-off-by: Michael Durrant <mdurrant@arcturusnetworks.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Petazzoni [Sun, 11 Aug 2019 12:07:31 +0000 (14:07 +0200)]
DEVELOPERS: add Gerome Burlats as contact for Qemu defconfigs
Gerome Burlats recently took care of the Qemu defconfigs, so it makes
sense to list him as a contact for the maintenance of these
defconfigs.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Cc: Gerome Burlats <gerome.burlats@smile.fr>
Cc: Romain Naour <romain.naour@smile.fr>
Acked-by: Gerome Burlats <gerome.burlats@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Petazzoni [Mon, 9 Sep 2019 07:46:21 +0000 (09:46 +0200)]
DEVELOPERS: remove Pranit Sirsat, e-mail bounces
<Pranit.Sirsat@imgtec.com>: host mxa-
00376f01.gslb.pphosted.com[91.207.212.86]
said: 550 5.1.1 User Unknown (in reply to RCPT TO command)
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:11:40 +0000 (09:11 -0700)]
package/openal: bump to version 1.19.1
Add hash for license file.
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:11:33 +0000 (09:11 -0700)]
package/nmap: bump to version 7.80
The hash of the license file changed due to this single change of the
copyright year:
- * The Nmap Security Scanner is (C) 1996-2018 Insecure.Com LLC ("The Nmap *
+ * The Nmap Security Scanner is (C) 1996-2019 Insecure.Com LLC ("The Nmap *
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:11:18 +0000 (09:11 -0700)]
package/libv4l: bump to version 1.16.6
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:11:12 +0000 (09:11 -0700)]
package/liblinear: bump to version 2.30
Update hash for license file (update in year).
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:10:54 +0000 (09:10 -0700)]
package/libdvbsi: bump to version 0.3.8
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:10:39 +0000 (09:10 -0700)]
package/less: bump to version 551
updated _SITE
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Petazzoni [Sun, 8 Sep 2019 22:38:30 +0000 (00:38 +0200)]
Revert "package/gperf: bump to version 3.1"
This reverts commit
3e29e1ed5bb5c9c6689ac9e78c46c2d458c00cfb, as it
breaks the build of host-libcap.
Fixes:
http://autobuild.buildroot.net/results/
4db6fcffd4f1432d2f2349ecb58992c6be568073/
Thanks to Ricardo Martincoski <ricardo.martincoski@gmail.com> for the
analysis of the problem.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:10:25 +0000 (09:10 -0700)]
package/haproxy: bump to version 2.0.5
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:10:03 +0000 (09:10 -0700)]
package/gperf: bump to version 3.1
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:09:53 +0000 (09:09 -0700)]
package/debianutils: bump to version 4.8.6.3
updated _SITE
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Sun, 8 Sep 2019 16:09:09 +0000 (09:09 -0700)]
package/cairo: bump to version 1.16.0
Changed _SITE to releases
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Thu, 5 Sep 2019 17:04:03 +0000 (19:04 +0200)]
package/lttng-tools: fix build with glibc 2.30
Fixes:
- http://autobuild.buildroot.org/results/
8680c5a355b226cf978397615cbe5df1c5f8c656
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Francois Perrad [Thu, 5 Sep 2019 08:00:52 +0000 (10:00 +0200)]
package/lua-messagepack: bump to version 0.5.2
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Sat, 7 Sep 2019 20:09:13 +0000 (22:09 +0200)]
package/augeas: bump to version 1.12.0
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Sat, 7 Sep 2019 20:09:12 +0000 (22:09 +0200)]
package/augeas: drop AUTORECONF
autoreconf is not needed since bump to version 1.10.1 in
commit
3cd6faa04cef1b1ebf5c5d47eeaf7e812ed02cb7
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Sat, 7 Sep 2019 20:17:21 +0000 (22:17 +0200)]
package/json-for-modern-cpp: fixup the 'v' prefix in the version
In order for the json-for-modern-cpp version to match what is given by
release-monitoring.org, the 'v' prefix should be encoded in
JSON_FOR_MODERN_CPP_SITE and not JSON_FOR_MODERN_CPP_VERSION.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Wed, 28 Aug 2019 16:13:26 +0000 (18:13 +0200)]
package/libglfw: bump version to 3.3
License file was renamed and whitespace was removed:
https://github.com/glfw/glfw/commits/master/LICENSE.md
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Wed, 28 Aug 2019 14:25:54 +0000 (16:25 +0200)]
package/libdvdread: bump version to 6.0.1
Release notes:
https://code.videolan.org/videolan/libdvdread/blob/master/NEWS
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Wed, 28 Aug 2019 14:23:56 +0000 (16:23 +0200)]
package/libebur128: bump version to 1.2.4
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Gergely Imreh [Tue, 27 Aug 2019 14:14:28 +0000 (15:14 +0100)]
{configs/raspberrypi,package/rpi-firmware}: bump kernel/firmware to
20190819 version
It's the latest original version. The defconfig and
package/rpi-firmware changes are done in a single patch, as they are
going together.
Signed-off-by: Gergely Imreh <imrehg@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Zoltan Gyarmati [Tue, 27 Aug 2019 10:46:23 +0000 (12:46 +0200)]
DEVELOPERS: add myself for libusb and libusb-compat
Signed-off-by: Zoltan Gyarmati <zgyarmati@zgyarmati.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sat, 7 Sep 2019 20:18:37 +0000 (22:18 +0200)]
package/libgpg-error: fix build with gawk 5.0
Fixes:
http://autobuild.buildroot.net/results/
e815bed0e7b3d9cbf50ebf605666a50e7032e5a1/
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Giulio Benetti [Tue, 3 Sep 2019 10:12:16 +0000 (12:12 +0200)]
package/libnss: security bump to version 3.46
Fixes the following security issues:
(3.44.1)
CVE-2019-11729: More thorough input checking
CVE-2019-11719: Don't unnecessarily strip leading 0's from key material
during PKCS11 import
CVE-2019-11727: Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
Note:
This version requires nspr 4.22 or newer provided by the previous patch.
Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Giulio Benetti [Tue, 3 Sep 2019 10:12:15 +0000 (12:12 +0200)]
package/libnspr: bump to version 4.22
Rework all 3 patches to make that applicable to 4.22 version.
Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
James Hilliard [Mon, 2 Sep 2019 19:03:04 +0000 (13:03 -0600)]
package/python-aioconsole: bump to version 0.1.15
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Pierre-Jean Texier [Thu, 5 Sep 2019 19:11:40 +0000 (21:11 +0200)]
package/lighttpd: bump to version 1.4.54
See http://www.lighttpd.net/2019/5/27/1.4.54/
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Petazzoni [Thu, 5 Sep 2019 21:50:52 +0000 (23:50 +0200)]
package/bitcoin: fixup the 'v' prefix in the version
In order for the bitcoin version to match what is given by
release-monitoring.org, the 'v' prefix should be encoded in
BITCOIN_SITE and not BITCOIN_VERSION.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Petazzoni [Fri, 6 Sep 2019 07:59:14 +0000 (09:59 +0200)]
DEVELOPERS: remove Kevin Joly, e-mail is bouncing
Kevin Joly (kevin.joly@sensefly.com)<mailto:kevin.joly@sensefly.com>
Your message couldn't be delivered to the recipient because you don't have permission to send to it.
Looking at his LinkedIn profile, he left SenseFly in January 2019,
which quite certainly explains why his @sensefly.com e-mail address is
no longer working.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Lubomir Rintel [Fri, 6 Sep 2019 09:25:09 +0000 (11:25 +0200)]
system/skeleton: drop PAGER from /etc/profile
We couldn't track down the reason why the profile sets $PAGER other
than that it has always been there.
However, it defeats pager autodetection by various tool (systemctl,
nmcli, etc.) that would otherwise prefer less to more, in case both
were available.
Let's drop it. My desktop Linux distro (Fedora) doesn't seem to set it
either and the universe doesn't seem to have collapsed yet.
Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Romain Naour [Fri, 6 Sep 2019 10:12:03 +0000 (12:12 +0200)]
configs/aarch64_efi: fix typo AARCH64 -> ARM64
There is no option BR2_TARGET_GRUB2_AARCH64_EFI but
BR2_TARGET_GRUB2_ARM64_EFI in grub2 package.
BR2_TARGET_GRUB2_ARM64_EFI was introduced by the commit [1].
[1]
273a27804a18c5e232907d5ef6bd01957cf090d7
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Cc: Erico Nunes <nunes.erico@gmail.com>
Reviewed-by: Erico Nunes <nunes.erico@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Sat, 7 Sep 2019 15:00:43 +0000 (17:00 +0200)]
package/agentpp: bump to version 4.1.2
Add hash for license file
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Sat, 7 Sep 2019 15:00:42 +0000 (17:00 +0200)]
package/snmppp: bump to version 3.3.11a
Update hash of license file (source file has been updated)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Alexander Mukhin [Sat, 7 Sep 2019 18:35:17 +0000 (21:35 +0300)]
package/pppd: use uclibc libcrypt instead of openssl
glibc since 2.28 dropped DES encryption routines setkey() and encrypt(),
but uclibc still provides them. So, if building with uclibc, we can
avoid using huge openssl library.
Signed-off-by: Alexander Mukhin <alexander.i.mukhin@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Lubomir Rintel [Fri, 6 Sep 2019 09:26:13 +0000 (11:26 +0200)]
package/network-manager: drop obsolete dependencies
Remove dependencies on libraries NetworkManager no longer uses.
Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
Acked-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Lubomir Rintel [Fri, 6 Sep 2019 09:25:53 +0000 (11:25 +0200)]
package/network-manager: bump to version 1.20.2
A straightforward bump. Tested.
Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
Acked-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Petazzoni [Sat, 7 Sep 2019 13:18:25 +0000 (15:18 +0200)]
package/network-manager: fix legal-info following the 1.20.0 bump
In commit
aee34c479a5f845ed84ca0fac60250843742bec6, network-manager
was bumped to 1.20.0. As part of this bump, the libnm-util/ subfolder
was removed, and therefore libnm-util/COPYING no longer exists,
breaking the legal-info of this package.
The only remaining COPYING file is at the top-level. However, it
documents only the GPL-2.0 license, while in fact many parts of
network-manager, especially libraries, are under LGPL-2.0. This is
well explained in the CONTRIBUTING file, which states:
"""
Legal
-----
NetworkManager is partly licensed under terms of GNU Lesser General Public License
version 2 or later (LGPL-2.0+). That is for example the case for libnm.
For historical reasons, the daemon itself is licensed under terms of GNU General
Public License, version 2 or later (GPL-2.0+). See the license comment in the source
files.
Note that all new contributions to NetworkManager MUST be made under terms of
LGPL-2.0+, that is also the case for parts that are currently licensed GPL-2.0+.
The reason for that is that we might eventually relicense everything as LGPL and
new contributions already must agree with that future change.
"""
So, we keep GPL-2.0 and LGPL-2.0 as license, drop libnm-util/COPYING
from the LICENSE_FILES variable, and instead add the CONTRIBUTING
file. We also add a comment above the LICENSE variable.
Fixes:
http://autobuild.buildroot.net/results/
44ce11d110a508821f76aae7ce996c1814c6a453/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Gwenhael Goavec-Merou [Thu, 5 Sep 2019 13:40:40 +0000 (15:40 +0200)]
package/gmp: enable C++ support when BR2_INSTALL_LIBSTDCPP=y
gmp has optional C++ support, which is disabled by default. Let's
enabled it conditionally depending on the BR2_INSTALL_LIBSTDCPP
option.
Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Thu, 5 Sep 2019 17:10:20 +0000 (19:10 +0200)]
package/lttng-babeltrace: bump to version 1.5.7
- Remove second patch (already in version)
- Add hash for license files
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Alexander Mukhin [Fri, 6 Sep 2019 10:21:01 +0000 (13:21 +0300)]
DEVELOPERS: remove myself from hostapd developers
Signed-off-by: Alexander Mukhin <alexander.i.mukhin@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Alexander Mukhin [Fri, 6 Sep 2019 10:21:00 +0000 (13:21 +0300)]
package/hostapd: remove support for Realtek drivers
After hostapd update to 2.9, the patch provided no longer works,
although applies. Moreover, AP support for Realtek chips is broken
anyway in kernels > 4.9.
Signed-off-by: Alexander Mukhin <alexander.i.mukhin@gmail.com>
[Thomas: add Config.in.legacy handling]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Adam Duskett [Fri, 6 Sep 2019 18:03:13 +0000 (11:03 -0700)]
package/libglib2: bump to version 2.60.7
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Peter Korsgaard [Fri, 6 Sep 2019 15:46:55 +0000 (17:46 +0200)]
package/asterisk: security bump to version 16.5.1
Fixes the following security issues:
AST-2019-004: Crash when negotiating for T.38 with a declined stream
When Asterisk sends a re-invite initiating T.38 faxing, and the endpoint
responds with a declined media stream a crash will then occur in Asterisk.
https://downloads.asterisk.org/pub/security/AST-2019-004.pdf
AST-2019-005: Remote Crash Vulnerability in audio transcoding
When audio frames are given to the audio transcoding support in Asterisk the
number of samples are examined and as part of this a message is output to
indicate that no samples are present. A change was done to suppress this
message for a particular scenario in which the message was not relevant. This
change assumed that information about the origin of a frame will always exist
when in reality it may not.
https://downloads.asterisk.org/pub/security/AST-2019-005.pdf
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Fri, 6 Sep 2019 12:05:00 +0000 (15:05 +0300)]
package/python-enum: bump to version 0.4.7
Also add hash for license file.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Fri, 6 Sep 2019 12:04:30 +0000 (15:04 +0300)]
package/monit: bump to version 5.26.0
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Peter Korsgaard [Fri, 6 Sep 2019 11:34:46 +0000 (13:34 +0200)]
package/exim: security bump to version 4.92.2
Fixes CVE-2019-15846: Local or remote attacker can execute programs with
root privileges
For details, see the advisory:
https://exim.org/static/doc/security/CVE-2019-15846.txt
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Christopher McCrory [Fri, 30 Aug 2019 18:44:13 +0000 (11:44 -0700)]
package/e2fsprogs: bump to version 1.45.3
Signed-off-by: Christopher McCrory <chrismcc@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Sat, 31 Aug 2019 10:49:30 +0000 (12:49 +0200)]
package/libdmtx: bump version to 0.7.5
According to https://sourceforge.net/projects/libdmtx the project was
moved to https://github.com/dmtx so update project URL in Config.in.
Updated license hash due to upstream commit
https://github.com/dmtx/libdmtx/commit/
b65ff367ad90ab29568a5719b2ec07a2c2a6d8e8
Added AUTORECONF because the github tarball does not include a
configure script.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Romain Naour [Sat, 31 Aug 2019 10:45:10 +0000 (12:45 +0200)]
package/aubio: bump to version 0.4.9
Remove upstream patch.
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Fri, 30 Aug 2019 13:50:04 +0000 (15:50 +0200)]
package/wireguard: bump version to 0.0.
20190702
For details of the changes, see the announcement:
https://lists.zx2c4.com/pipermail/wireguard/2019-July/004271.html
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Wed, 4 Sep 2019 18:40:43 +0000 (20:40 +0200)]
package/libogg: bump version to 1.3.4
Added all hashes provided by upstream.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Wed, 4 Sep 2019 18:12:21 +0000 (20:12 +0200)]
package/dav1d: disable tests and tools
Some tools need SDL2 which will break the build if SDL2 is found on host
Fixes:
- http://autobuild.buildroot.org/results/
4cea773805e62911019d0627dcdf5d17b71032b7
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Titouan Christophe [Tue, 3 Sep 2019 11:53:58 +0000 (13:53 +0200)]
package/less: bump to version 530
Signed-off-by: Titouan Christophe <titouan.christophe@railnova.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Titouan Christophe [Tue, 3 Sep 2019 11:38:37 +0000 (13:38 +0200)]
package/nano: bump to version 4.4
Signed-off-by: Titouan Christophe <titouan.christophe@railnova.eu>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Baruch Siach [Sat, 31 Aug 2019 20:03:59 +0000 (23:03 +0300)]
package/iw: bump to version 5.3
Cc: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Wed, 4 Sep 2019 17:47:47 +0000 (19:47 +0200)]
package/cups-filters: bump to version 1.25.4
Update hash of license file (year, authors, files have been updated)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Pierre-Jean Texier [Wed, 4 Sep 2019 17:10:55 +0000 (19:10 +0200)]
DEVELOPERS: add Pierre-Jean Texier for tree
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Pierre-Jean Texier [Wed, 4 Sep 2019 17:10:54 +0000 (19:10 +0200)]
package/tree: bump to version 1.8.0
See http://mama.indstate.edu/users/ice/tree/changes.html
Also add a hash for license file.
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Wed, 4 Sep 2019 17:02:02 +0000 (19:02 +0200)]
package/cups: security bump to version 2.2.12
- Remove fifth patch (already in version)
- Fix CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows
(rdar://
51685251)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Sergio Prado [Wed, 4 Sep 2019 01:22:03 +0000 (22:22 -0300)]
package/wolfssl: bump to version 4.1.0
Signed-off-by: Sergio Prado <sergio.prado@e-labworks.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Sergio Prado [Wed, 4 Sep 2019 00:51:28 +0000 (21:51 -0300)]
package/snort: bump to version 2.9.14.1
Since configure is using PKG_CHECK_MODULES macro, we need to
unconditionally depends on host-pkgconf.
Signed-off-by: Sergio Prado <sergio.prado@e-labworks.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Wed, 4 Sep 2019 17:58:48 +0000 (19:58 +0200)]
package/samba4: security bump version to 4.10.8
Release notes: https://www.samba.org/samba/history/samba-4.10.8.html
Fixes CVE-2019-10197
Combination of parameters and permissions can allow user
to escape from the share path definition.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Jörg Krause [Mon, 2 Sep 2019 19:34:59 +0000 (21:34 +0200)]
package/mpd: bump to version 0.21.14
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Sébastien Szymanski [Tue, 3 Sep 2019 09:20:24 +0000 (11:20 +0200)]
package/unzip: add security patch from Debian
Fix the URL and add a new patch. Quoting changelog [1]:
unzip (6.0-25) unstable; urgency=medium
* Apply one more patch by Mark Adler:
- Do not raise a zip bomb alert for a misplaced central directory.
This should allow Firefox to build again. Closes: #932404.
Reported by Peter Green. Hopefully CVE-2019-13232 is fixed now.
-- Santiago Vila <sanvila@debian.org> Sat, 27 Jul 2019 18:01:36 +0200
[1] https://sources.debian.org/data/main/u/unzip/6.0-25/debian/changelog
Signed-off-by: Sébastien Szymanski <sebastien.szymanski@armadeus.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Giulio Benetti [Tue, 3 Sep 2019 10:27:38 +0000 (12:27 +0200)]
DEVELOPERS: add Giulio Benetti to libnspr and libnss package
Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Ismael Luceno [Tue, 3 Sep 2019 19:07:03 +0000 (21:07 +0200)]
package/axel: bump to version 2.17.6
Signed-off-by: Ismael Luceno <ismael@iodev.co.uk>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Pierre-Jean Texier [Tue, 3 Sep 2019 20:32:48 +0000 (22:32 +0200)]
package/logrotate: bump to version 3.15.1
See https://github.com/logrotate/logrotate/releases/tag/3.15.1
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Tue, 3 Sep 2019 18:08:04 +0000 (20:08 +0200)]
package/libvips: remove unrecognized --enable-cxx
Remove --enable-cxx, this option has been removed since version 8.1 and
https://github.com/libvips/libvips/commit/
346a9e70c0b096f84127449488e7dce6968d91c7
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Tue, 3 Sep 2019 17:08:36 +0000 (19:08 +0200)]
package/micropython: remove unneeded patch
Remove patch which is already in version
Fixes:
- http://autobuild.buildroot.org/results/
01da2ad39ea01c522fc5b431c4544bd91f58ac4a
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Tue, 3 Sep 2019 16:57:49 +0000 (18:57 +0200)]
package/giflib: drop unneeded patches
Remove patches which are already included in version 5.2.1
Fixes:
- http://autobuild.buildroot.org/results/
a558f21cb1d9ad8618a1c64464e0cf1ccba7608b
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Tue, 3 Sep 2019 14:30:58 +0000 (16:30 +0200)]
package/qemu: fixup patches after 3.1.1 bump
Commit
a0b032ad859b2e6e8cd (package/qemu: security bump to version 3.1.1)
bumped the version but didn't update the patch subdirectory name, so the
patches are now ignored.
Fix that by renaming the directory. Drop
0002-configure-improve-usbfs-check.patch as that is now upstream.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Tue, 3 Sep 2019 13:03:02 +0000 (15:03 +0200)]
Merge branch 'next'
Peter Korsgaard [Tue, 3 Sep 2019 11:16:32 +0000 (13:16 +0200)]
docs/website: update for 2019.05.2
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Tue, 3 Sep 2019 10:37:46 +0000 (12:37 +0200)]
Update for 2019.05.2
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Peter: drop Makefile changes]
(cherry picked from commit
b9e671a558f106d57ed3c7f0cd0b89359c6b1567)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Mon, 2 Sep 2019 21:02:44 +0000 (23:02 +0200)]
docs/website: update for 2019.02.5
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Mon, 2 Sep 2019 20:15:58 +0000 (22:15 +0200)]
Update for 2019.02.5
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Peter: drop Makefile changes]
(cherry picked from commit
b1408d04a383eacadf1518886d216325304569ae)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Mon, 2 Sep 2019 20:06:43 +0000 (22:06 +0200)]
CHANGES: Add missing issues header for 2019.02.3
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit
96502c2a46a440926c975711110e387ff226349f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Mon, 2 Sep 2019 20:54:38 +0000 (22:54 +0200)]
Kickoff 2019.11 cycle
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Sun, 1 Sep 2019 21:35:27 +0000 (23:35 +0200)]
docs/website/news.html: add 2019.08 announcement link
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Sun, 1 Sep 2019 21:06:01 +0000 (23:06 +0200)]
Update for 2019.08
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Thu, 29 Aug 2019 12:00:51 +0000 (14:00 +0200)]
configs/radxa_rock_pi4: remove defconfig
This defconfig tries to build an ARM Trusted Firmware version that
needs an ARM32 toolchain, which is not available as the platform is an
ARM64 one. The correct solution for this is to have a package in
Buildroot for an ARM32 bare-metal toolchain, but this wasn't done in
time for the 2019.08 release.
In order to not release 2019.08 with a broken defconfig, let's remove
it. It can be re-added later once the ARM32 bare-metal toolchain
problem has been resolved.
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/
278489410
Cc: Shyam Saini <shyam.saini@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Thu, 29 Aug 2019 12:00:50 +0000 (14:00 +0200)]
configs/pine64_rockpro64: remove defconfig
This defconfig tries to build an ARM Trusted Firmware version that
needs an ARM32 toolchain, which is not available as the platform is an
ARM64 one. The correct solution for this is to have a package in
Buildroot for an ARM32 bare-metal toolchain, but this wasn't done in
time for the 2019.08 release.
In order to not release 2019.08 with a broken defconfig, let's remove
it. It can be re-added later once the ARM32 bare-metal toolchain
problem has been resolved.
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/
278489367
Cc: Shyam Saini <shyam.saini@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Thu, 29 Aug 2019 12:00:49 +0000 (14:00 +0200)]
configs/nanopi_m4: remove defconfig
This defconfig tries to build an ARM Trusted Firmware version that
needs an ARM32 toolchain, which is not available as the platform is an
ARM64 one. The correct solution for this is to have a package in
Buildroot for an ARM32 bare-metal toolchain, but this wasn't done in
time for the 2019.08 release.
In order to not release 2019.08 with a broken defconfig, let's remove
it. It can be re-added later once the ARM32 bare-metal toolchain
problem has been resolved.
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/
278489328
Cc: Shyam Saini <shyam.saini@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Thu, 29 Aug 2019 12:00:48 +0000 (14:00 +0200)]
configs/nanopi_neo4: remove defconfig
This defconfig tries to build an ARM Trusted Firmware version that
needs an ARM32 toolchain, which is not available as the platform is an
ARM64 one. The correct solution for this is to have a package in
Buildroot for an ARM32 bare-metal toolchain, but this wasn't done in
time for the 2019.08 release.
In order to not release 2019.08 with a broken defconfig, let's remove
it. It can be re-added later once the ARM32 bare-metal toolchain
problem has been resolved.
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/
278489329
Cc: Shyam Saini <shyam.saini@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Thu, 29 Aug 2019 12:00:47 +0000 (14:00 +0200)]
configs/nanopc_t4: remove defconfig
This defconfig tries to build an ARM Trusted Firmware version that
needs an ARM32 toolchain, which is not available as the platform is an
ARM64 one. The correct solution for this is to have a package in
Buildroot for an ARM32 bare-metal toolchain, but this wasn't done in
time for the 2019.08 release.
In order to not release 2019.08 with a broken defconfig, let's remove
it. It can be re-added later once the ARM32 bare-metal toolchain
problem has been resolved.
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/
278489325
Cc: Shyam Saini <shyam.saini@amarulasolutions.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Thu, 29 Aug 2019 12:00:46 +0000 (14:00 +0200)]
boot/ts4800-mrboot: remove package
Since the ts4800_defconfig has been removed, the ts4800-mrboot package
is no longer useful, therefore we drop it.
Cc: Patrick Keroulas <patrick.keroulas@savoirfairelinux.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Thu, 29 Aug 2019 12:00:45 +0000 (14:00 +0200)]
configs/ts4800: remove defconfig
This defconfig has been failing to build since we switched the default
gcc version to gcc 8.x, as the Linux kernel version is too old and
doesn't contain the necessary fixes to build with gcc >= 8.x.
Despite several pings to the original submitter of the defconfig
(which is not listed in MAINTAINERS), no fix has been sent, so it is
time to drop this defconfig before the 2019.08 release.
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/
278489442
Cc: Patrick Keroulas <patrick.keroulas@savoirfairelinux.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Alexandre PAYEN [Thu, 8 Aug 2019 15:19:50 +0000 (17:19 +0200)]
package/python-numpy: add reverse dependency on packages using python-numpy
Since commit
1aa59097e61d524bb55ab1fcd4fbe5098b3e0bed[1] is merged, a
new build failure occurs when selecting packages which needs
python-numpy as dependency.
This fix a build issue[2] by adding the correct reverse dependencies
to the following packages :
- gnuradio (for python support)
- opencv3 (for python support)
- piglit
- python-matplotlib
So :
- adding to every listed packages
`depends on !(BR2_TOOLCHAIN_USES_GLIBC || BR2_TOOLCHAIN_USES_MUSL)`
and add a comment to explain what happend.
[1] https://git.buildroot.net/buildroot/commit/?id=
1aa59097e61d524bb55ab1fcd4fbe5098b3e0bed
[2] http://autobuild.buildroot.org/results/b76/
b76b6cf9602bcf5df69a7276762eab54cf74007b
Signed-off-by: Alexandre PAYEN <alexandre.payen@smile.fr>
Cc: Alexey Brodkin <Alexey.Brodkin@synopsys.com>
Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Cc: Damien DUVAL <damien.duval@smile.fr>
Cc: Romain Naour <romain.naour@smile.fr>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Fri, 30 Aug 2019 17:15:19 +0000 (19:15 +0200)]
package/php: security bump version to 7.3.9
Release notes: https://www.php.net/archive/2019.php#2019-08-29-1
Changelog: https://www.php.net/ChangeLog-7.php#7.3.9
Fixes CVE-2019-13224 & CVE-2019-13225:
https://bugs.mageia.org/show_bug.cgi?id=25380
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabio Estevam [Fri, 30 Aug 2019 16:38:26 +0000 (13:38 -0300)]
configs/mx53loco: Bump U-Boot and kernel versions
Bump to U-Boot 2019.07 and kernel 5.2.9 versions.
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Fri, 30 Aug 2019 17:00:53 +0000 (19:00 +0200)]
{linux, linux-headers}: bump 4.{4, 9, 14, 19}.x / 5.2.x series
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>