Fabrice Fontaine [Thu, 24 Oct 2019 18:10:12 +0000 (20:10 +0200)]
package/libnetconf2: fixup the 'v' prefix in the version
In order for the libnetconf2 version to match what is given by
release-monitoring.org, the 'v' prefix should be encoded in
LIBNETCONF2_SITE and not LIBNETCONF2_VERSION.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Thu, 24 Oct 2019 18:00:46 +0000 (20:00 +0200)]
package/mobile-broadband-provider-info: needs host-libxslt
xsltproc is needed to build apn-conf since version
20190618 and
https://github.com/GNOME/mobile-broadband-provider-info/commit/
6dd77065c3beb4aa32218d76ba27efb83d507f42
Fixes:
- http://autobuild.buildroot.org/results/
824c5d67f12fa1a9ce31f2698eae986f14ca69ae
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bartosz Bilas [Thu, 24 Oct 2019 17:29:43 +0000 (19:29 +0200)]
configs/stm32mp157_dk_defconfig: switch to mainline 2019.07 U-Boot version
Switch to the official U-Boot repository since
the board has been officially supported.
Signed-off-by: Bartosz Bilas <b.bilas@grinn-global.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bartosz Bilas [Thu, 24 Oct 2019 17:29:42 +0000 (19:29 +0200)]
configs/stm32mp157_dk_defconfig: switch to mainline 5.3.7 linux version
Switch to the official Linux repository since
the board has been officially supported.
Signed-off-by: Bartosz Bilas <b.bilas@grinn-global.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Thu, 24 Oct 2019 17:13:44 +0000 (19:13 +0200)]
package/php: security bump version to 7.3.11
Changelog: http://www.php.net/ChangeLog-7.php#7.3.11
Fixes CVE-2019-11043: https://bugs.php.net/bug.php?id=78599
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Nicolas Serafini [Thu, 24 Oct 2019 10:27:22 +0000 (10:27 +0000)]
DEVELOPERS: Add Nicolas Serafini for ofono
Signed-off-by: Nicolas Serafini <nicolas.serafini@sensefly.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gwenhael [Thu, 24 Oct 2019 10:12:56 +0000 (12:12 +0200)]
package/python-remi: bump version to 2019.9
* Release after 1.2.2 uses date instead of version, so suppress v character
appended before version
Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Tue, 22 Oct 2019 08:49:23 +0000 (10:49 +0200)]
package/libselinux: install Python modules to target
While LIBSELINUX_INSTALL_STAGING_CMDS uses
$(LIBSELINUX_MAKE_INSTALL_TARGETS), LIBSELINUX_INSTALL_TARGET_CMDS
does not use it. Due to this, the Python module is only installed to
$(STAGING_DIR) and not to $(TARGET_DIR).
Fix this by using $(LIBSELINUX_MAKE_INSTALL_TARGETS) in
LIBSELINUX_INSTALL_TARGET_CMDS.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Cc: James Hilliard <james.hilliard1@gmail.com>
Cc: Matt Weber <matthew.weber@rockwellcollins.com>
Cc: Adam Duskett <aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Carlos Santos [Tue, 22 Oct 2019 22:48:02 +0000 (19:48 -0300)]
package/numactl: fix URL in help text
SGI is gone (RIP). Use the github project as landing page.
Signed-off-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Nicolas Serafini [Wed, 23 Oct 2019 08:43:24 +0000 (08:43 +0000)]
package/ofono: use external ell library
Add comments to the dependencies that also come from ell. Note that the
BR2_TOOLCHAIN_HAS_SYNC_4 is coming both from ell and from internal sync
calls, so no comment is added.
While we're at it, also order the selects and DEPENDENCIES
alphabetically.
Signed-off-by: Nicolas Serafini <nicolas.serafini@sensefly.com>
[Arnout: extend "reason" comments to Config.in; alphabetical ordering]
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Bernd Kuhls [Wed, 23 Oct 2019 06:23:59 +0000 (08:23 +0200)]
DEVELOPERS: remove package/python-pysnmp-apps
Package was removed with commit
https://git.buildroot.net/buildroot/commit/?id=
ae2781d7d74af7b7b94a30d7a26826de8e1b304f
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Simon Rowe [Wed, 23 Oct 2019 08:44:19 +0000 (09:44 +0100)]
package/util-linux: fix licence definition formatting
Signed-off-by: Simon Rowe <simon.rowe@citrix.com>
Reviewed-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Giulio Benetti [Wed, 23 Oct 2019 10:23:29 +0000 (12:23 +0200)]
package/libnss: remove useless NSS_ENABLE_ECC variable
NSS_ENABLE_ECC is not supported anymore, then remove it from our
libnss.mk file.
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Evgeniy Didin [Wed, 23 Oct 2019 14:04:37 +0000 (17:04 +0300)]
configs/snps_hsdk: Switch to archs38_full CPU option
Lets switch CPU option to archs38_full for HSDK to
get an increase in performance by using FPU extensions.
Signed-off-by: Evgeniy Didin <Evgeniy.Didin@synopsys.com>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Cc: arc-buildroot@synopsys.com
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Nicolas Serafini [Wed, 23 Oct 2019 09:07:32 +0000 (09:07 +0000)]
package/mobile-broadband-provider-info: bump version to
20190618
Signed-off-by: Nicolas Serafini <nicolas.serafini@sensefly.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Wed, 23 Oct 2019 18:10:01 +0000 (20:10 +0200)]
package/python-pymodbus: fix typo in python-pymodbus.hash
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabrice Fontaine [Wed, 23 Oct 2019 18:09:19 +0000 (20:09 +0200)]
package/iwd: disable man pages
Fixes:
- http://autobuild.buildroot.org/results/
3f68bad231b18485871f24175001e1525501f35d
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Heiko Thiery [Fri, 11 Oct 2019 12:40:43 +0000 (14:40 +0200)]
package/libnetconf2: new package
libnetconf2 is a NETCONF library in C intended for building
NETCONF clients and servers.
Signed-off-by: Heiko Thiery <heiko.thiery@kontron.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Heiko Thiery [Fri, 11 Oct 2019 12:40:42 +0000 (14:40 +0200)]
package/libyang: new package
LibYANG processes YIN and YANG files. It's a dependency of sysrepo
which is a dependency of Netopeer, a NETCONF/YANG server.
Signed-off-by: Heiko Thiery <heiko.thiery@kontron.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Michael Walle [Fri, 11 Oct 2019 12:40:41 +0000 (14:40 +0200)]
package/libavl: new package
Signed-off-by: Michael Walle <michael@walle.cc>
Signed-off-by: Heiko Thiery <heiko.thiery@kontron.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Petazzoni [Tue, 22 Oct 2019 21:18:46 +0000 (23:18 +0200)]
package/nodejs: fix check-package warnings
Fixes:
package/nodejs/nodejs.mk:73: expected indent with tabs
package/nodejs/nodejs.mk:74: expected indent with tabs
package/nodejs/nodejs.mk:75: expected indent with tabs
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Wed, 9 Oct 2019 17:24:20 +0000 (20:24 +0300)]
package/python-pysnmp-apps: remove package
The package was renamed to snmpclitools and is no longer maintained.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Wed, 9 Oct 2019 17:24:21 +0000 (20:24 +0300)]
package/snmpclitools: new package
For now, we use PKG-INFO as license file, since LICENSE.rst isn't
provided with the tarball.
A pull request was sent upstream:
https://github.com/etingof/snmpclitools/pull/11
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sat, 12 Oct 2019 15:39:31 +0000 (17:39 +0200)]
package/libva: switch to virtual opengl provider
This allows to use libva without mesa3d.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
James Hilliard [Wed, 16 Oct 2019 16:57:05 +0000 (10:57 -0600)]
package/nodejs: bump version to 12.12.0
Removed libhttpparser dependency as nodejs now uses built in llhttp.
Installed additional build tools to host that are required for target build.
License file change is due to 3rd party dependency changes and date updates.
Dependencies still appear to have Apache and BSD family licenses.
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Tue, 22 Oct 2019 18:41:15 +0000 (20:41 +0200)]
package/python-pymodbus: switch back to github
pypi tarball does not contain the license file so switch back to github
until upstream fixes this issue, see
https://github.com/riptideio/pymodbus/issues/401
Fixes:
- http://autobuild.buildroot.org/results/
6701b1e038b58fcd49240ceb7f972885e2e037aa
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Carlos Santos [Tue, 22 Oct 2019 15:51:24 +0000 (12:51 -0300)]
package/util-linux: make wipefs depend on BR2_USE_MMU
It depends on libblkid and libsmartcols, which use fork().
Fixes:
http://autobuild.buildroot.net/results/
82f9712bc90377c625caeb5b175e83a03d5b9d75/
Signed-off-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Arnout Vandecappelle (Essensium/Mind) [Tue, 22 Oct 2019 20:12:20 +0000 (22:12 +0200)]
package/ofono: remove double empty line in .mk file
Detected by check-package.
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Nicolas Serafini [Tue, 22 Oct 2019 13:44:07 +0000 (13:44 +0000)]
package/ofono: remove autoreconf
The patch that required an autoreconf is no longer there since commit
a465dd54fc22423b4140441d8f29d55e249d5848 ("package/ofono: bump to
version 1.30")
Signed-off-by: Nicolas Serafini <nicolas.serafini@sensefly.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Philippe Proulx [Tue, 22 Oct 2019 14:48:05 +0000 (10:48 -0400)]
package/lttng-modules: bump version to 2.11.0
Signed-off-by: Philippe Proulx <eeppeliteloop@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Philippe Proulx [Tue, 22 Oct 2019 14:48:04 +0000 (10:48 -0400)]
package/lttng-tools: bump version to 2.11.0
Signed-off-by: Philippe Proulx <eeppeliteloop@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Philippe Proulx [Tue, 22 Oct 2019 14:48:03 +0000 (10:48 -0400)]
package/lttng-libust: bump version to 2.11.0
Remove
`0001-configure.ac-add-disable-examples-option-to-not-buil.patch` as
the `--disable-examples` option exists in LTTng-UST 2.11.0.
Also handle numactl as an optional dependency.
Signed-off-by: Philippe Proulx <eeppeliteloop@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Patrick Havelange [Tue, 22 Oct 2019 12:41:48 +0000 (14:41 +0200)]
package/lxc: fix compilation with stub memfd_create
This fixes compilation issue in case memfd_create is a stub in libc.
Patch already merged in lxc master branch
(
344b8ee293f4d3730a70a6ccaa03d7e4a516ae95).
Copy of the original commit log:
In case the internal memfd_create has to be used, make sure we don't
clash with the already existing memfd_create function from glibc.
This can happen if this glibc function is a stub. In this case, at
./configure time, the test for this function will return false, however
the declaration of that function is still available. This leads to
compilation errors.
Signed-off-by: Patrick Havelange <patrick.havelange@essensium.com>
Reviewed-by: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Nicolas Serafini [Tue, 22 Oct 2019 10:17:04 +0000 (10:17 +0000)]
package/iwd: bump version to 0.22
Signed-off-by: Nicolas Serafini <nicolas.serafini@sensefly.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Nicolas Serafini [Tue, 22 Oct 2019 10:16:30 +0000 (10:16 +0000)]
package/ell: bump version to 0.24
Signed-off-by: Nicolas Serafini <nicolas.serafini@sensefly.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Martin Kepplinger [Tue, 22 Oct 2019 09:19:49 +0000 (11:19 +0200)]
package/tslib: update to 1.21
The release page https://github.com/libts/tslib/releases has the short
changelog overview and we include the added plugin when building statically
linked.
Signed-off-by: Martin Kepplinger <martink@posteo.de>
Tested-by: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Claveirole [Tue, 22 Oct 2019 09:17:40 +0000 (11:17 +0200)]
DEVELOPERS: add Thomas Claveirole for openlayers
Signed-off-by: Thomas Claveirole <thomas.claveirole@green-communications.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Matt Weber [Tue, 22 Oct 2019 18:17:32 +0000 (13:17 -0500)]
package/rng-tools: bump to 6.7
* Switch to new site and add license file hash
* Add new libsysfs dependency for rng available check
* Remove patch adding special return code when no RNG module is available.
This has been replaced by using the jitter library to always have a
source (new jitterentropy dependency)
* Change to a autotools build and add patch to allow README file to not be
found during autoreconfig
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Tested-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Matt Weber [Tue, 22 Oct 2019 18:17:31 +0000 (13:17 -0500)]
package/jitterentropy-library: new package
New library to support rng-tools using a CPU source as a backup entropy
source when a kernel provided rng isn't present.
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Pierre-Jean Texier [Tue, 22 Oct 2019 17:38:22 +0000 (19:38 +0200)]
boot/at91bootstrap3: bump to version 3.9.0
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Pierre-Jean Texier [Tue, 22 Oct 2019 17:38:21 +0000 (19:38 +0200)]
configs/atmel_sama5d27_som1: bump to linux4sam_6.2
This commit :
- bumps Linux & U-Boot to linux4sam_6.2
- bumps at91bootstrap to v3.9.0
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Angelo Compagnucci [Fri, 11 Oct 2019 21:32:19 +0000 (23:32 +0200)]
package/sunwait: new package
Sunwait calculates sunrise or sunset times with civil, nautical,
astronomical and custom twilights.
Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com>
[Thomas:
- add dependency on C++
- improve the build logic to pass cflags/ldflags properly]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Pierre-Jean Texier [Mon, 21 Oct 2019 20:09:14 +0000 (22:09 +0200)]
package/python-asgiref: properly order "depends on" vs. bool
This fixes a check-package warning introduced by commit
9b746f8 ("package/python-asgiref: drop Python 2 support")
Fixes:
$: ./utils/check-package package/python-asgiref/*
package/python-asgiref/Config.in:3: attributes order: type, default, depends on, select, help (http://nightly.buildroot.org/#_config_files)
34 lines processed
1 warnings generated
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Gilles Talis [Sun, 13 Oct 2019 09:30:49 +0000 (11:30 +0200)]
package/libolm: new package
libolm is an implementation of the Double Ratchet cryptographic ratchet
described by:
https://whispersystems.org/docs/specifications/doubleratchet/
Signed-off-by: Gilles Talis <gilles.talis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 29 Sep 2019 15:34:36 +0000 (17:34 +0200)]
package/apr: Fix PATH_MAX detection by including sys/param.h if available
Fixes subversion build error.
Fixes:
http://autobuild.buildroot.net/results/d42/
d42be423c1c6fe7e7c419976ff35a04e18dfb8dd/
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 1 Sep 2019 20:36:02 +0000 (22:36 +0200)]
package/ffmpeg: broken on or1k with gcc < 9.x
Fixes:
http://autobuild.buildroot.net/results/961/
9618aeffa7d72162d6643a89470c4a01d044a2dc/
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Sun, 20 Oct 2019 18:33:36 +0000 (20:33 +0200)]
package/libtorrent: add Libs.Private to libtorrent.pc.in
This will fix a static build failure with rtorrent
Fixes:
- http://autobuild.buildroot.org/results/
075598e1699c2ac20a4dfbcb5695bbb7343f9a86
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Vivien Didelot [Wed, 16 Oct 2019 19:54:44 +0000 (15:54 -0400)]
docs/manual: clarify the reinstallation of a package
Since <package>-rebuild implies <package>-reinstall and
<package>-reconfigure implies <package>-rebuild, it is confusing
to mention the make and make <package> commands when describing
the restart of the configuration, compilation and installation of
the package.
Therefore remove the ", followed by +make+ or +make <package>+"
portions in the "8.3. Understanding how to rebuild packages" section,
and add a new paragraph clarifying how to include the rebuilt package
in the filesystem image, if that is necessary.
Signed-off-by: Vivien Didelot <vivien.didelot@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Wed, 16 Oct 2019 20:41:28 +0000 (22:41 +0200)]
package/libwebsockets: fix static build with openssl
Fixes:
- http://autobuild.buildroot.org/results/
65d0528b208c0a470264f7e2433be89425971dd7
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Claveirole [Thu, 17 Oct 2019 13:18:50 +0000 (15:18 +0200)]
package/openlayers: new package
Signed-off-by: Thomas Claveirole <thomas.claveirole@green-communications.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
James Hilliard [Thu, 17 Oct 2019 15:17:11 +0000 (09:17 -0600)]
package/python{3}-setuptools: bump to version 41.4.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Peter Korsgaard [Sun, 20 Oct 2019 09:05:10 +0000 (11:05 +0200)]
package/gd: add post-2.2.5 security fixes from upstream
Fixes the following security vulnerablities:
- CVE-2018-
1000222: Libgd version 2.2.5 contains a Double Free Vulnerability
vulnerability in gdImageBmpPtr Function that can result in Remote Code
Execution . This attack appear to be exploitable via Specially Crafted
Jpeg Image can trigger double free
- CVE-2018-5711: gd_gif_in.c in the GD Graphics Library (aka libgd), as used
in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x
before 7.2.1, has an integer signedness error that leads to an infinite
loop via a crafted GIF file, as demonstrated by a call to the
imagecreatefromgif or imagecreatefromstring PHP function
- CVE-2019-11038: When using the gdImageCreateFromXbm() function in the GD
Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP
versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it
is possible to supply data that will cause the function to use the value
of uninitialized variable. This may lead to disclosing contents of the
stack that has been left there by previous code
- CVE-2019-6978: The GD Graphics Library (aka LibGD) 2.2.5 has a double free
in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Petr Vorel [Thu, 17 Oct 2019 22:18:27 +0000 (00:18 +0200)]
package/ltp-testsuite: enable build under musl
This requires to remove a lot of broken code until it's fixed in upstream.
Added 2 patches from upcoming release.
Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Fabrice Fontaine [Sun, 20 Oct 2019 16:56:08 +0000 (18:56 +0200)]
package/boost: fix build with python 3.8
Fixes:
- http://autobuild.buildroot.org/results/
81489f92ceb6287a4d6c52b2bb16a80e8c5c430a
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Mon, 21 Oct 2019 17:14:54 +0000 (19:14 +0200)]
package/tvheadend: bump version
Rebased patch.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Peter Seiderer [Mon, 21 Oct 2019 18:45:10 +0000 (20:45 +0200)]
package/libv4l: bump version to 1.18.0
- remove 0001-fixup-lfs-mismatch-in-preload-libraries.patch
(Upstream applied [1])
- remove 0002-keytable-fix-EVIOCSCLOCKID-related-compile-failure.patch
(Upstream applied [2])
- remove 0003-Build-sdlcam-only-if-jpeg-is-enabled.patch
(Upstream applied [3])
- remove 0004-v4l2-compliance-needs-fork.patch
(Upstream applied [4])
Despite all patches (specially the ones touching
configure.ac/Makefile.am) keep LIBV4L_AUTORECONF = YES to get correct
utils/qv4l linker flags (seems the original debian based libtool sets
a wrong link_all_deplibs parameter), see [5] for details.
[1] https://git.linuxtv.org/v4l-utils.git/commit/?id=
9f0354c3320f3cc62983f726bfed66e1d0c21f83
[2] https://git.linuxtv.org/v4l-utils.git/commit/?id=
a3367e92f4b06667a36fb9485f22f7df52891a2f
[3] https://git.linuxtv.org/v4l-utils.git/commit/?id=
692c2f0f35dd663e84d363867f2841d387726154
[4] https://git.linuxtv.org/v4l-utils.git/commit/?id=
577ab225929c4e8dce7d2b911eeed38469a559bb
[5] http://lists.busybox.net/pipermail/buildroot/2019-October/261558.html
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Mon, 21 Oct 2019 18:00:11 +0000 (20:00 +0200)]
package/nano: bump version to 4.5
Release notes:
https://lists.gnu.org/archive/html/info-gnu/2019-10/msg00001.html
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Mon, 21 Oct 2019 17:51:40 +0000 (19:51 +0200)]
package/screen: bump version to 4.7.0
Release notes:
https://lists.gnu.org/archive/html/info-gnu/2019-10/msg00000.html
Removed patches applied upstream:
- 0001-compiler-sanity-checks.patch
https://git.savannah.gnu.org/cgit/screen.git/commit/?h=v.4.7.0&id=
6b320186db7df1e58fdd2c836af54c86cc596981
- 0003-cross-compilation-AC_TRY_RUN.patch
https://git.savannah.gnu.org/cgit/screen.git/commit/?h=v.4.7.0&id=
abba47ce4206506c49858d944e904fff86ae65cc
- 0004-cross-compilation-ignore-host-fs.patch
https://git.savannah.gnu.org/cgit/screen.git/commit/?h=v.4.7.0&id=
c573b89139e7a068f5573abd565605bed60f293f
- 0005-avoid-identifying-as-SVR4.patch
https://git.savannah.gnu.org/cgit/screen.git/commit/?h=v.4.7.0&id=
ec90292592dd2c9d5c108390841e3df24e377ed5
Rebased 0001-no-memcpy-fallback.patch
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Mon, 21 Oct 2019 17:28:49 +0000 (19:28 +0200)]
package/libmicrohttpd: bump version to 0.9.67
Release notes:
https://lists.gnu.org/archive/html/libmicrohttpd/2019-10/msg00014.html
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Mon, 21 Oct 2019 17:21:20 +0000 (19:21 +0200)]
package/x11r7/xkeyboard-config: bump version to 2.28
Changelog: https://cgit.freedesktop.org/xkeyboard-config/log/
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Mon, 21 Oct 2019 18:07:22 +0000 (20:07 +0200)]
DEVELOPERS: remove myself from asterisk
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Mon, 21 Oct 2019 18:07:21 +0000 (20:07 +0200)]
package/asterisk: bump version to 16.6.1
Release notes:
https://www.asterisk.org/downloads/asterisk-news/asterisk-1660-now-available
https://www.asterisk.org/downloads/asterisk-news/asterisk-1661-now-available
Updated license hash after upstream commit, no license changes:
https://github.com/asterisk/asterisk/commit/
b096389660027365efe893077b24482f84ba31ac
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Peter Seiderer [Mon, 21 Oct 2019 18:08:46 +0000 (20:08 +0200)]
package/libinput: bump version to 1.14.2
For details see [1].
[1] https://lists.freedesktop.org/archives/wayland-devel/2019-October/040936.html
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Reviewed-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 21:26:44 +0000 (23:26 +0200)]
package/gqrx: bump version to 2.11.5
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 21:17:33 +0000 (23:17 +0200)]
package/gnuradio: bump version to 3.7.13.5
The hash for the tarball is not present in
http://gnuradio.org/releases/gnuradio/sha256sums so we provide a self-
computed hash.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 21:15:32 +0000 (23:15 +0200)]
package/gnutls: bump version to 3.6.10
Release notes:
https://lists.gnupg.org/pipermail/gnutls-help/2019-September/004574.html
Removed patch applied upstream, also removed autoreconf.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Thomas Petazzoni [Mon, 21 Oct 2019 19:07:14 +0000 (21:07 +0200)]
package/python-keyring: fix syntax error in Config.in
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 19:01:41 +0000 (22:01 +0300)]
package/python-flask: bump version to 1.1.1
LICENSE was renamed to LICENSE.rst with little rephrasing.
In addition, statements about the documentation licensing were
moved from LICENSE to docs/license.rst so this file was added
to _LICENSE_FILES (plus hash).
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 15:11:26 +0000 (18:11 +0300)]
package/python-secretstorage: drop Python 2 support
Since version 3.0.0, secretstorage doesn't support Python 2 anymore.
Update its reverese dependency (python-keyring) as well.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 15:11:25 +0000 (18:11 +0300)]
package/python-asgiref: drop Python 2 support
Asgiref doesn't support Python 2 since version 2.0.0.
All the recursive reverse dependencies already support Python 3 only.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 13:42:03 +0000 (16:42 +0300)]
package/python-more-itertools: drop Python 2 support
Since version 6.0.0, the package supports only Python 3, and will
lead to syntax errors when in use with Python 2.
In addition, the dependency of python-six is no longer needed.
The reursive reverse dependencies were updated accordingly.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Giulio Benetti [Mon, 21 Oct 2019 14:30:45 +0000 (16:30 +0200)]
package/libnss: security bump to version 3.47
Fixes the following security issues:
CVE-2019-11756: Remove refcounting from sftk_FreeSession
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Giulio Benetti [Mon, 21 Oct 2019 14:30:44 +0000 (16:30 +0200)]
package/libnspr: bump to version 4.23
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Carlos Santos [Mon, 21 Oct 2019 17:03:59 +0000 (14:03 -0300)]
package/sysvinit: bump to version 2.96
Signed-off-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Mon, 21 Oct 2019 13:40:28 +0000 (16:40 +0300)]
package/python-xlsxwriter: bump to version 1.2.2
And fix indentation in hash file.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Mon, 21 Oct 2019 13:40:27 +0000 (16:40 +0300)]
package/python-pymodbus: bump to version 2.2.0
* Update dependency list.
* Take tarball from PyPI.
* Add hash for license file.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Mon, 21 Oct 2019 13:40:26 +0000 (16:40 +0300)]
package/python-flup: bump to version 1.0.3
License isn't shipped with the tarball so we take
PKG-INFO as license file.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Mon, 21 Oct 2019 13:40:25 +0000 (16:40 +0300)]
package/python-flask-sqlalchemy: bump to version 2.4.1
License is provided with the tarball, so there's no need to
use PKG-INFO.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Mon, 21 Oct 2019 13:40:23 +0000 (16:40 +0300)]
package/python-docker: bump to version 4.1.0
python-docker-pycreds is no longer needed as a dependency.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Mon, 21 Oct 2019 13:40:22 +0000 (16:40 +0300)]
package/python-cheroot: bump to version 8.2.1
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Mon, 21 Oct 2019 13:40:21 +0000 (16:40 +0300)]
package/python-asn1crypyo: bump to version 1.2.0
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Carlos Santos [Mon, 21 Oct 2019 12:41:39 +0000 (09:41 -0300)]
package/qemu: move patch 3 to the 3.1.1.1 subdir
Required since the bump from 3.1.1.
Signed-off-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Carlos Santos [Sat, 19 Oct 2019 02:09:28 +0000 (23:09 -0300)]
package/qemu: fix crash with uClibc-ng
On uClibc-ng sysconf(_SC_LEVEL1_{I,D}CACHE_LINESIZE) returns -1, which
is a valid result, meaning that the limit is indeterminate. Add a patch
that handles this situation using fallback values instead of crashing
due to an assertion failure.
Upstream status:
https://lists.nongnu.org/archive/html/qemu-devel/2019-10/msg04115.html
Signed-off-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Romain Naour [Sat, 19 Oct 2019 22:31:07 +0000 (00:31 +0200)]
package/gcc: or1k allow gcc 9.2 with uClibc-ng
Binutils 2.32 and GCC 9.2 are now fixed thanks to Stafford Horne.
https://mailman.uclibc-ng.org/pipermail/devel/2019-August/001895.html
Fixes:
https://mailman.uclibc-ng.org/pipermail/devel/2019-August/001885.html
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Romain Naour [Sat, 19 Oct 2019 22:31:06 +0000 (00:31 +0200)]
package/binutils/2.32: backport or1k upstream patch
Without this patch, the system build using qemu_or1k_defconfig
(gcc 9.2, binutils 2.32 and uClibc 1.0.32) doesn't boot.
https://mailman.uclibc-ng.org/pipermail/devel/2019-August/001895.html
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Romain Naour [Sat, 19 Oct 2019 22:31:05 +0000 (00:31 +0200)]
package/gcc/9.2.0: backport or1k upstream patch
Without this patch, the system build using qemu_or1k_defconfig
(gcc 9.2, binutils 2.33.1 and uClibc 1.0.32) doesn't boot.
https://mailman.uclibc-ng.org/pipermail/devel/2019-August/001895.html
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 13:42:02 +0000 (16:42 +0300)]
package/python-cffi: bump to version 1.13.0
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Pierre-Jean Texier [Sun, 20 Oct 2019 13:53:43 +0000 (15:53 +0200)]
DEVELOPERS: add Pierre-Jean Texier for sbc
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Pierre-Jean Texier [Sun, 20 Oct 2019 13:53:42 +0000 (15:53 +0200)]
package/sbc: bump to version 1.4
Also add hashes for license files
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 08:15:42 +0000 (11:15 +0300)]
package/python-dialog: bump to version 3.4.0
* Verify .asc file from sourceforge.
* Add hash for license file.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 08:15:41 +0000 (11:15 +0300)]
package/python: security bump to version 2.7.17
This release fixes CVE-2019-9740, CVE-2019-9948, CVE-2019-15903.
Adjust 0002-Fix-get_python_inc-for-cross-compilation.patch for 2.7.17.
Remove the following patches (now on upstream):
* 0035-bpo-35907-CVE-2019-9948-urllib-rejects-local_file-sc.patch
* 0036-bpo-36216-Add-check-for-characters-in-netloc-that-no.patch
* 0037-3.7-bpo-36216-Only-print-test-messages-when-verbose-.patch
* 0038-bpo-36742-Fixes-handling-of-pre-normalization-charac.patch
* 0039-bpo-36742-Corrects-fix-to-handle-decomposition-in-us.patch
* 0040-2.7-bpo-36742-Fix-urlparse.urlsplit-error-message-fo.patch
* 0041-bpo-30458-Disallow-control-chars-in-http-URLs-GH-127.patch
Full release details at:
https://github.com/python/cpython/blob/v2.7.17/Misc/NEWS.d/2.7.17rc1.rst
run-tests results:
10:30:20 TestPython2 Starting
10:30:21 TestPython2 Building
10:37:37 TestPython2 Building done
10:37:47 TestPython2 Cleaning up
.
----------------------------------------------------------------------
Ran 1 test in 448.616s
OK
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 08:15:40 +0000 (11:15 +0300)]
package/python-automat: bump to version 0.8.0
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 08:15:39 +0000 (11:15 +0300)]
package/libuv: bump to version 1.33.1
Fixes:
- http://autobuild.buildroot.net/results/
017ce1062a61b25f949c0b8c4b73cac128037901
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Asaf Kahlon [Sun, 20 Oct 2019 12:17:55 +0000 (15:17 +0300)]
package/python-psycopg2: bump to version 2.8.4
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 11:18:12 +0000 (13:18 +0200)]
package/ghostscript: security bump version to 9.50
Fixes CVE-2019-10216:
https://security-tracker.debian.org/tracker/CVE-2019-10216
Removed patch applied upstream.
Release notes:
https://ghostscript.com/pipermail/gs-devel/2019-October/010232.html
Changelog:
https://www.ghostscript.com/doc/9.50/News.htm
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 11:15:25 +0000 (13:15 +0200)]
package/cups-filters: bump version to 1.25.11
Removed patch applied upstream:
https://github.com/OpenPrinting/cups-filters/commit/
1fa09312860cdee342a0afc9423c9d3c411bbbae
Drop CUPS_FILTERS_MAKE_LN_SRF_EXECUTABLE which is no longer needed now
that the ln-srf script is part of the tarball and not added through a
patch.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 10:16:00 +0000 (12:16 +0200)]
package/expat: bump version to 2.2.9
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 10:11:45 +0000 (12:11 +0200)]
package/elfutils: bump version to 0.177
Removed patched applied upstream, rebased remaining patches.
Added md5 hash provided by upstream.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 09:53:48 +0000 (11:53 +0200)]
package/dialog: bump version to 1.3-
20190808
Added license hash, switched _SITE to https.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Bernd Kuhls [Sun, 20 Oct 2019 09:46:13 +0000 (11:46 +0200)]
package/dav1d: bump version to 0.5.0
Fixes:
http://autobuild.buildroot.net/results/c2e/
c2e5b1d8c59d9ca37f06efc67c0928f7df1096ce/
due to upstream commit
https://code.videolan.org/videolan/dav1d/commit/
e65abadff6872d319ece76c8617604c628c3126e
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>