buildroot.git
3 years agoconfigs/kontron_smarc_sal28: use kernel 5.11
Michael Walle [Tue, 16 Feb 2021 10:47:23 +0000 (11:47 +0100)]
configs/kontron_smarc_sal28: use kernel 5.11

Signed-off-by: Michael Walle <michael@walle.cc>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years ago{linux, linux-headers}: add version 5.11
Michael Walle [Tue, 16 Feb 2021 10:47:22 +0000 (11:47 +0100)]
{linux, linux-headers}: add version 5.11

Signed-off-by: Michael Walle <michael@walle.cc>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agosupport/scripts/cpedb.py: remove import pickle
Arnout Vandecappelle (Essensium/Mind) [Tue, 16 Feb 2021 20:12:33 +0000 (21:12 +0100)]
support/scripts/cpedb.py: remove import pickle

pickle is no longer used since 09a71e6a75636

Fixes:
support/scripts/cpedb.py:7:1: F401 'pickle' imported but unused

Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 74cfd3aeb7350a7be39f2d43b35273beba57f9c7)

3 years agopackage/{wlroots,cage}: change mesa3d dependency to virtual libegl/libgles
Gilles Talis [Sat, 13 Feb 2021 12:33:53 +0000 (13:33 +0100)]
package/{wlroots,cage}: change mesa3d dependency to virtual libegl/libgles

Since commits:
https://github.com/swaywm/wlroots/commit/c2288a7b88240e4377bfc1c67b44efb58f704a42
https://github.com/swaywm/wlroots/commit/e18599b05e0f0cbeba11adbd489e801285470eab

Mesa dependency is no longer required. Wlroots is able to run on
drivers that provide EGL and GLES2.0 support, and with specific EGL
wayland extensions.  (thus the BR2_PACKAGE_HAS_LIBEGL_WAYLAND
dependency)

This was verified on NXP's i.MX8MMini using imx-gpu-viv driver.

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Gilles Talis <gilles.talis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/collectd: add 'synproxy' option
Thomas De Schampheleire [Tue, 16 Feb 2021 13:54:32 +0000 (14:54 +0100)]
package/collectd: add 'synproxy' option

The synproxy plugin exists since 5.8.0 and is enabled by default in
collectd.

Add an option in Buildroot, disabled by default.

Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/collectd: add 'logparser' option
Thomas De Schampheleire [Tue, 16 Feb 2021 13:54:31 +0000 (14:54 +0100)]
package/collectd: add 'logparser' option

The logparser plugin is new since 5.11.0 and enabled by default in
collectd.

Add an option in Buildroot, disabled by default.

Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/collectd: add 'mdevents' option
Thomas De Schampheleire [Tue, 16 Feb 2021 13:54:30 +0000 (14:54 +0100)]
package/collectd: add 'mdevents' option

The mdevents plugin is new since 5.12.0 and enabled by default in
collectd.

Add an option in Buildroot, disabled by default.

Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/collectd: add 'infiniband' option
Thomas De Schampheleire [Tue, 16 Feb 2021 13:54:28 +0000 (14:54 +0100)]
package/collectd: add 'infiniband' option

The infiniband plugin is new since 5.12.0 and enabled by default in
collectd.

Add an option in Buildroot, disabled by default.

Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agoDEVELOPERS: drop Rahul Jain, user no longer exists
Thomas Petazzoni [Tue, 16 Feb 2021 08:44:16 +0000 (09:44 +0100)]
DEVELOPERS: drop Rahul Jain, user no longer exists

<rahul.jain@imgtec.com>: host mxa-00376f01.gslb.pphosted.com[185.132.180.163]
    said: 550 5.1.1 User Unknown (in reply to RCPT TO command)

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agoDEVELOPERS: drop Guillaume Gardet, domain no longer exists
Thomas Petazzoni [Tue, 16 Feb 2021 08:30:21 +0000 (09:30 +0100)]
DEVELOPERS: drop Guillaume Gardet, domain no longer exists

The oliseo.fr domain no longer responds to SMTP requests:

smtplib.SMTPRecipientsRefused: {'Guillaume Gardet <guillaume.gardet@oliseo.fr>': (550, b'5.1.2 <guillaume.gardet@oliseo.fr>: Recipient address rejected: Domain not found')}

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/x11r7/xdriver_xf86-video-nouveau: bump version to 1.0.17
Bernd Kuhls [Sun, 14 Feb 2021 08:31:03 +0000 (09:31 +0100)]
package/x11r7/xdriver_xf86-video-nouveau: bump version to 1.0.17

Release notes:
https://lists.freedesktop.org/archives/nouveau/2021-January/037766.html

Reformatted hashes.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agosupport/scripts/cpedb.py: drop CPE XML database caching
Thomas Petazzoni [Sat, 13 Feb 2021 22:19:48 +0000 (23:19 +0100)]
support/scripts/cpedb.py: drop CPE XML database caching

Currently, the CPE XML database is parsed into a Python dict, which is
then pickled into a local file, to speed up the processing of further
invocations.

However, it turns out that since the initial implementation, we have
switched the XML parsing from the out of tree xmltodict module to the
standard ElementTree one, which has made the parsing much faster. The
pickle caching only saves 6 seconds, on something that takes more than
13 minutes total.

In addition, this pickle caching consumes a significant amount of RAM,
causing the Python process to be OOM-killed on a server with 4 GB of
RAM.

So let's just drop this caching entirely.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
3 years agopackage/python-uvloop: bump to version 0.15.0
Asaf Kahlon [Thu, 11 Feb 2021 15:20:39 +0000 (17:20 +0200)]
package/python-uvloop: bump to version 0.15.0

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/dnsmasq: bump version to 2.84
Peter Seiderer [Wed, 10 Feb 2021 23:16:40 +0000 (00:16 +0100)]
package/dnsmasq: bump version to 2.84

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/uhttpd: bump version to f53a639
Peter Seiderer [Wed, 10 Feb 2021 23:16:39 +0000 (00:16 +0100)]
package/uhttpd: bump version to f53a639

- change download url to https

- update license file hash (uhttpd.h - license unrelated source
  code changes only)

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/ustream-ssl: bump version to 68d0924
Peter Seiderer [Wed, 10 Feb 2021 23:16:38 +0000 (00:16 +0100)]
package/ustream-ssl: bump version to 68d0924

- change download url to https

- change hash of ustream-ssl.h, which is used as license file. There
  are no changes to the license text, only changes in the code.

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/odhcp6c: bump version to 53f07e9
Peter Seiderer [Wed, 10 Feb 2021 23:16:37 +0000 (00:16 +0100)]
package/odhcp6c: bump version to 53f07e9

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/libuci: bump version to 52bbc99
Peter Seiderer [Wed, 10 Feb 2021 23:16:36 +0000 (00:16 +0100)]
package/libuci: bump version to 52bbc99

- change download url to https

- update homepage url (the old one redirects to legacy read only
  OpenWrt wiki system)

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/ubus: bump version to d1d9ddf
Peter Seiderer [Wed, 10 Feb 2021 23:16:35 +0000 (00:16 +0100)]
package/ubus: bump version to d1d9ddf

- change download url to https

- update homepage url (the old one redirects to legacy read only
  OpenWrt wiki system)

- update license file hash (ubusd_acl.h - license unrelated source
  code changes only)

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/libubox: bump version to 5bc0146a
Peter Seiderer [Wed, 10 Feb 2021 23:16:34 +0000 (00:16 +0100)]
package/libubox: bump version to 5bc0146a

- change download url to https

- update homepage url (the old one returns 404 - No projects found)

- add hash file

- delete 0001-blobmsg-fix-array-out-of-bounds-GCC-10-warning.patch
  (from upstream [1])

[1] https://git.openwrt.org/?p=project/libubox.git;a=commit;h=eb7eb6393d47a918c420f5b287946dbd6c0d5f57

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/util-linux: bump version to 2.36.2
Peter Seiderer [Sat, 13 Feb 2021 13:53:13 +0000 (14:53 +0100)]
package/util-linux: bump version to 2.36.2

For details see [1].

[1] http://lkml.iu.edu/hypermail/linux/kernel/2102.1/07236.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
3 years agopackage/wpa_supplicant: Simplify D-Bus support.
Nicolas Cavallari [Wed, 10 Feb 2021 18:50:17 +0000 (19:50 +0100)]
package/wpa_supplicant: Simplify D-Bus support.

wpa_supplicant 2.8 dropped support for the old D-Bus interface, so
remove mentions of it and rename DBUS_NEW variables to just DBUS.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
3 years agopackage/wpa_supplicant: Add options to disable more features.
Nicolas Cavallari [Wed, 10 Feb 2021 18:50:16 +0000 (19:50 +0100)]
package/wpa_supplicant: Add options to disable more features.

Together, they increase the size of the binary by a bit less than a
megabyte.

As a result, make the wpa_supplicant option a menuconfig.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
3 years agopackage/wpa_supplicant: Fix options to actually disable features.
Nicolas Cavallari [Wed, 10 Feb 2021 18:50:15 +0000 (19:50 +0100)]
package/wpa_supplicant: Fix options to actually disable features.

Since wpa_supplicant 2.8, most features are now enabled by default,
instead of being disabled by default. Remove setting of options that are
already enabled by default, and turn ENABLE into DISABLE where
appropriate.

This also makes the existing options disable more features, otherwise,
it would still include dead code or even fail to compile.

Als correct/update some help texts.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
3 years agopackage/eudev: bump version to 3.2.10
Bernd Kuhls [Fri, 12 Feb 2021 17:39:26 +0000 (18:39 +0100)]
package/eudev: bump version to 3.2.10

Removed patch which was applied upstream:
https://github.com/gentoo/eudev/commit/799591c57368bbe47667f5b696050247a766b117

Reformatted hashes.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agoconfigs/olimex_a20_olinuxino_lime*: bump Linux and U-Boot versions
Francois Perrad [Fri, 12 Feb 2021 19:47:50 +0000 (20:47 +0100)]
configs/olimex_a20_olinuxino_lime*: bump Linux and U-Boot versions

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agoconfigs/mx6cubox: bump Linux and U-Boot versions
Francois Perrad [Fri, 12 Feb 2021 18:49:51 +0000 (19:49 +0100)]
configs/mx6cubox: bump Linux and U-Boot versions

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agoUpdate for 2021.02-rc1
Peter Korsgaard [Tue, 9 Feb 2021 21:55:10 +0000 (22:55 +0100)]
Update for 2021.02-rc1

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/ngircd: bump to version 26.1
Fabrice Fontaine [Tue, 9 Feb 2021 20:39:13 +0000 (21:39 +0100)]
package/ngircd: bump to version 26.1

https://github.com/ngircd/ngircd/releases/tag/rel-26.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/gnuradio: add gr-uhd option
Gwenhael Goavec-Merou [Mon, 8 Feb 2021 15:19:15 +0000 (16:19 +0100)]
package/gnuradio: add gr-uhd option

GNURadio has a block to use USRP, through UHD, to receive or transmit RF
signals.

Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/uhd: add missing support
Gwenhael Goavec-Merou [Mon, 8 Feb 2021 15:19:14 +0000 (16:19 +0100)]
package/uhd: add missing support

Complete uhd package with the rest of USRP, octoclock and python support.

Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libostree: libfuse is optional, not mandatory
Fabrice Fontaine [Tue, 9 Feb 2021 20:07:57 +0000 (21:07 +0100)]
package/libostree: libfuse is optional, not mandatory

libfuse is optional since its addition in version 2016.2 with
https://github.com/ostreedev/ostree/commit/e9ccdd2d007801ef25cc7283188942d791889c27

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Marcus Folkesson <marcus.folkesson@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/attr: set ATTR_CPE_ID_VALID
Fabrice Fontaine [Mon, 8 Feb 2021 20:09:24 +0000 (21:09 +0100)]
package/attr: set ATTR_CPE_ID_VALID

cpe:2.3:a:attr_project:attr is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aattr_project%3Aattr

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/freerdp: add FREERDP_CPE_ID_VENDOR
Fabrice Fontaine [Tue, 9 Feb 2021 20:27:19 +0000 (21:27 +0100)]
package/freerdp: add FREERDP_CPE_ID_VENDOR

cpe:2.3:a:freerdp:freerdp is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Afreerdp%3Afreerdp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/waf: bump to v2.0.22
Titouan Christophe [Tue, 9 Feb 2021 10:05:46 +0000 (11:05 +0100)]
package/waf: bump to v2.0.22

Signed-off-by: Titouan Christophe <titouanchristophe@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
3 years agopackage/intel-microcode: security bump to version 20201118
Peter Korsgaard [Tue, 9 Feb 2021 16:36:40 +0000 (17:36 +0100)]
package/intel-microcode: security bump to version 20201118

Fixes the following security issues:

- CVE-2020-8694: Insufficient access control in the Linux kernel driver for
  some Intel(R) Processors may allow an authenticated user to potentially
  enable information disclosure via local access.

  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html

- CVE-2020-8695: Observable discrepancy in the RAPL interface for some
  Intel(R) Processors may allow a privileged user to potentially enable
  information disclosure via local access.

  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html

- CVE-2020-8698: Improper removal of sensitive information before storage or
  transfer in some Intel(R) Processors may allow an authenticated user to
  potentially enable information disclosure via local access.

  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
3 years agopackage/connman: bump version to 1.39
Heiko Thiery [Tue, 9 Feb 2021 07:45:24 +0000 (08:45 +0100)]
package/connman: bump version to 1.39

Drop patches that are upstream now and fix hash file indentation.

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/bison: add BISON_CPE_ID_VENDOR
Fabrice Fontaine [Mon, 8 Feb 2021 20:10:38 +0000 (21:10 +0100)]
package/bison: add BISON_CPE_ID_VENDOR

cpe:2.3:a:gnu:bison is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Agnu%3Abison

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/c-icap: set C_ICAP_CPE_ID_VALID
Fabrice Fontaine [Mon, 8 Feb 2021 20:05:19 +0000 (21:05 +0100)]
package/c-icap: set C_ICAP_CPE_ID_VALID

cpe:2.3:a:c-icap_project:c-icap is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ac-icap_project%3Ac-icap

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/exfat(-utils): change license to GPL-2.0+
Pieter Ronsijn [Thu, 4 Feb 2021 21:57:22 +0000 (22:57 +0100)]
package/exfat(-utils): change license to GPL-2.0+

The license is specified in https://github.com/relan/exfat/blob/master/COPYING and indicates GPL-2.0+
The license changed from from GPL-3.0+ to GPL-2.0+ in 2013 but was never updated in buildroot.

https://github.com/relan/exfat/commit/48573fff5d070863e3279769e8a95d5c15a5c77d

Signed-off-by: Pieter Ronsijn <pieterronsijn@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/fetchmail: bump version to 6.4.16
Bernd Kuhls [Mon, 8 Feb 2021 18:53:21 +0000 (19:53 +0100)]
package/fetchmail: bump version to 6.4.16

Release notes:
https://sourceforge.net/p/fetchmail/mailman/message/37215482/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/c-icap: bump to version 0.5.7
Fabrice Fontaine [Mon, 8 Feb 2021 20:05:18 +0000 (21:05 +0100)]
package/c-icap: bump to version 0.5.7

https://sourceforge.net/p/c-icap/news/2020/10/the-c-icap-057-is-released

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/bluez5_utils: add CPE variables
Fabrice Fontaine [Mon, 8 Feb 2021 20:08:25 +0000 (21:08 +0100)]
package/bluez5_utils: add CPE variables

cpe:2.3:a:bluez:bluez is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Abluez%3Abluez

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[Peter: fix s/BLUEZ5_CPE/BLUEZ5_UTILS_CPE/ typo]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/berkeleydb: add CPE variables
Fabrice Fontaine [Mon, 8 Feb 2021 20:06:58 +0000 (21:06 +0100)]
package/berkeleydb: add CPE variables

cpe:2.3:a:oracle:berkeley_db is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aoracle%3Aberkeley_db

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/python: clarify that this refers to the deprecated 2.7 series
Peter Korsgaard [Mon, 8 Feb 2021 13:24:11 +0000 (14:24 +0100)]
package/python: clarify that this refers to the deprecated 2.7 series

Python 2.7 is EOL, so people should use the python3 package instead if
possible.  Make it a bit more obvious that 'python' is not the right package
to use by explicitly mentioning that this is about python 2.7 and that it is
deprecated.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Reviewed-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/connman: add upstream security fixes for CVE-2021-2667{5, 6}
Peter Korsgaard [Mon, 8 Feb 2021 09:39:21 +0000 (10:39 +0100)]
package/connman: add upstream security fixes for CVE-2021-2667{5, 6}

Fixes the following security issues:

- CVE-2021-26675: Remote (adjacent network) code execution flaw
- CVE-2021-26676: Remote stack information leak

For details, see the advisory:
https://www.openwall.com/lists/oss-security/2021/02/08/2

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agoCHANGES: update with recent changes
Peter Korsgaard [Mon, 8 Feb 2021 21:05:36 +0000 (22:05 +0100)]
CHANGES: update with recent changes

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/at-spi2-atk: add AT_SPI2_ATK_CPE_ID_VENDOR
Fabrice Fontaine [Sun, 7 Feb 2021 20:39:34 +0000 (21:39 +0100)]
package/at-spi2-atk: add AT_SPI2_ATK_CPE_ID_VENDOR

cpe:2.3:a:gnome:at-spi2-atk is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Agnome%3Aat-spi2-atk

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agoconfigs/avenger96_defconfig: add support for Arrow Avenger96 board
Peter Korsgaard [Sun, 7 Feb 2021 21:52:27 +0000 (22:52 +0100)]
configs/avenger96_defconfig: add support for Arrow Avenger96 board

Very similar to the other stm32mp157-based boards, except that we use the
multi_v7 defconfig for ease of maintenance.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/memtester: fix compile and link flags
Baruch Siach [Mon, 8 Feb 2021 09:04:34 +0000 (11:04 +0200)]
package/memtester: fix compile and link flags

The memtester build system does not use CFLAGS/LDFLAGS variables.
Everything should be written to conf-cc and conf-ld.

Use '%' as sed expression delimiter because comma might appear in
LDFLAGS.

Cc: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/x11r7/xlib_libXrandr: add CPE variables
Fabrice Fontaine [Mon, 8 Feb 2021 07:46:35 +0000 (08:46 +0100)]
package/x11r7/xlib_libXrandr: add CPE variables

cpe:2.3:a:x.org:libxrandr is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ax.org%3Alibxrandr

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/connman: set CONNMAN_CPE_ID_VENDOR
Heiko Thiery [Mon, 8 Feb 2021 10:10:35 +0000 (11:10 +0100)]
package/connman: set CONNMAN_CPE_ID_VENDOR

cpe:2.3:a:intel:connman is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/702658?namingFormat=2.3&orderBy=CPEURI&keyword=connman&status=FINAL

Cc: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agoconfigs/kontron_smarc_sal28_defconfig: use Python 3.x for U-Boot build
Heiko Thiery [Mon, 8 Feb 2021 08:04:50 +0000 (09:04 +0100)]
configs/kontron_smarc_sal28_defconfig: use Python 3.x for U-Boot build

New U-Boot versions need Python 3.x for pylibfdt.

Fixes:
 - https://gitlab.com/buildroot.org/buildroot/-/jobs/1006924823

Cc: Michael Walle <michael@walle.cc>
Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/brotli: add BROTLI_CPE_ID_VENDOR
Fabrice Fontaine [Sun, 7 Feb 2021 12:57:37 +0000 (13:57 +0100)]
package/brotli: add BROTLI_CPE_ID_VENDOR

cpe:2.3:a:google:brotli is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Agoogle%3Abrotli

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/audiofile: drop package
Fabrice Fontaine [Sun, 7 Feb 2021 20:27:18 +0000 (21:27 +0100)]
package/audiofile: drop package

The audiofile package is affected by multiple CVEs and is not maintained
anymore (no release since 2013):

  https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&seach_type=all&query=cpe:2.3:a:audio_file_library_project:audio_file_library:0.3.6:*:*:*:*:*:*:*

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/avahi: add AVAHI_CPE_ID_VENDOR
Fabrice Fontaine [Sun, 7 Feb 2021 20:35:15 +0000 (21:35 +0100)]
package/avahi: add AVAHI_CPE_ID_VENDOR

cpe:2.3:a:avahi:avahi is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aavahi%3Aavahi

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/augeas: add AUGEAS_CPE_ID_VENDOR
Fabrice Fontaine [Sun, 7 Feb 2021 20:31:18 +0000 (21:31 +0100)]
package/augeas: add AUGEAS_CPE_ID_VENDOR

cpe:2.3:a:augeas:augeas is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aaugeas%3Aaugeas

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/x11r7/xlib_libXi: add CPE variables
Fabrice Fontaine [Sun, 7 Feb 2021 13:34:37 +0000 (14:34 +0100)]
package/x11r7/xlib_libXi: add CPE variables

cpe:2.3:a:x.org:libxi is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ax.org%3Alibxi

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/x11r7/xlib_libXvMC: add CPE variables
Fabrice Fontaine [Sun, 7 Feb 2021 13:52:26 +0000 (14:52 +0100)]
package/x11r7/xlib_libXvMC: add CPE variables

cpe:2.3:a:x.org:libxvmc is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ax.org%3Alibxvmc

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libsigsegv: bump version to 2.13
Bernd Kuhls [Sun, 7 Feb 2021 13:16:16 +0000 (14:16 +0100)]
package/libsigsegv: bump version to 2.13

Removed patches applied upstream:

0001-Improve-support-for-Linux-RISC-V.patch
https://github.com/roswell/libsigsegv/commit/671b2528b55c57eda1a8fe5872ff1ef61014235f

0002-m4-stack-direction-RISC-V-stack-grows-downward.patch
https://github.com/roswell/libsigsegv/commit/fd0e3d99d109b46d73ef37f38a23076f5acd1053

0003-Improve-support-for-Linux-nds32.patch
0004-m4-stack-direction-NDS32-stack-grows-downward.patch
https://github.com/roswell/libsigsegv/commit/51a03192a3e024931309bdf11a9c055985de0ddf

Reformatted hashes.

Release notes: https://github.com/roswell/libsigsegv/blob/master/NEWS

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/gnupg: add CPE variables
Fabrice Fontaine [Sun, 7 Feb 2021 13:03:28 +0000 (14:03 +0100)]
package/gnupg: add CPE variables

cpe:2.3:a:gnupg:gnupg is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Agnupg%3Agnupg

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libshout: bump version to 2.4.5
Bernd Kuhls [Sun, 7 Feb 2021 13:06:01 +0000 (14:06 +0100)]
package/libshout: bump version to 2.4.5

Added sha512 hash provided by upstream, reformatted hashes.

Changelog:
https://gitlab.xiph.org/xiph/icecast-libshout/-/blob/master/NEWS

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libgsm: bump version to 1.0.19
Bernd Kuhls [Sun, 7 Feb 2021 12:58:18 +0000 (13:58 +0100)]
package/libgsm: bump version to 1.0.19

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/msmtp: bump version to 1.8.14
Bernd Kuhls [Sun, 7 Feb 2021 12:52:45 +0000 (13:52 +0100)]
package/msmtp: bump version to 1.8.14

Release notes:
https://github.com/marlam/msmtp-mirror/blob/master/NEWS

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libgsasl: bump version to 1.10.0
Bernd Kuhls [Sun, 7 Feb 2021 12:52:44 +0000 (13:52 +0100)]
package/libgsasl: bump version to 1.10.0

Added hashes provided by upstream, updated license hash due to various
upstream commits:
https://git.savannah.gnu.org/gitweb/?p=gsasl.git;a=history;f=README

Release notes:
https://lists.gnu.org/archive/html/help-gsasl/2021-01/msg00007.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libgphoto2: bump version to 2.5.26
Bernd Kuhls [Sun, 7 Feb 2021 12:43:04 +0000 (13:43 +0100)]
package/libgphoto2: bump version to 2.5.26

Removed md5 hash, reformatted remaining hashes.
Added optional support for libcurl available since version 2.5.24.

Release notes: https://github.com/gphoto/libgphoto2/blob/master/NEWS

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libraw: add LIBRAW_CPE_ID_VENDOR
Fabrice Fontaine [Sun, 7 Feb 2021 12:39:19 +0000 (13:39 +0100)]
package/libraw: add LIBRAW_CPE_ID_VENDOR

cpe:2.3:a:libraw:libraw is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alibraw%3Alibraw

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/memcached: add MEMCACHED_CPE_ID_VENDOR
Fabrice Fontaine [Sun, 7 Feb 2021 12:31:54 +0000 (13:31 +0100)]
package/memcached: add MEMCACHED_CPE_ID_VENDOR

cpe:2.3:a:memcached:memcached is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Amemcached%3Amemcached

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libgpg-error: bump version to 1.41
Bernd Kuhls [Sun, 7 Feb 2021 12:29:12 +0000 (13:29 +0100)]
package/libgpg-error: bump version to 1.41

Release notes:
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgpg-error.git;a=blob;f=NEWS;

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libass: set LIBASS_CPE_ID_VALID
Fabrice Fontaine [Sun, 7 Feb 2021 12:26:55 +0000 (13:26 +0100)]
package/libass: set LIBASS_CPE_ID_VALID

cpe:2.3:a:libass_project:libass is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alibass_project%3Alibass

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/liberation: bump version to 2.1.2
Bernd Kuhls [Sun, 7 Feb 2021 12:17:53 +0000 (13:17 +0100)]
package/liberation: bump version to 2.1.2

Changelog:
https://github.com/liberationfonts/liberation-fonts/blob/master/ChangeLog

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libedit: bump version to 20191231-3.1
Bernd Kuhls [Sun, 7 Feb 2021 12:14:08 +0000 (13:14 +0100)]
package/libedit: bump version to 20191231-3.1

Reformatted hashes.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/ccid: bump version to 1.4.34
Bernd Kuhls [Sun, 7 Feb 2021 12:02:31 +0000 (13:02 +0100)]
package/ccid: bump version to 1.4.34

Release notes:
http://lists.infradead.org/pipermail/pcsclite-muscle/2021-January/001170.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/pigz: bump version to 2.6
Bernd Kuhls [Sun, 7 Feb 2021 11:56:37 +0000 (12:56 +0100)]
package/pigz: bump version to 2.6

Updated license hash due to various commits bumping the version number:
https://github.com/madler/pigz/commits/master/README

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libdvbsi: bump version to 0.3.9
Bernd Kuhls [Sun, 7 Feb 2021 12:09:31 +0000 (13:09 +0100)]
package/libdvbsi: bump version to 0.3.9

Switched _SITE to github, removed md5 hash, reformatted hashes.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/x11r7/xlib_libX11: add CPE variables
Fabrice Fontaine [Sun, 7 Feb 2021 13:13:02 +0000 (14:13 +0100)]
package/x11r7/xlib_libX11: add CPE variables

cpe:2.3:a:x.org:libx11 is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ax.org%3Alibx11

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/x11r7/xlib_libXrender: add CPE variables
Fabrice Fontaine [Sun, 7 Feb 2021 13:45:10 +0000 (14:45 +0100)]
package/x11r7/xlib_libXrender: add CPE variables

cpe:2.3:a:x.org:libxrender is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ax.org%3Alibxrender

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/x11r7/xlib_libXv: add CPE variables
Fabrice Fontaine [Sun, 7 Feb 2021 13:47:50 +0000 (14:47 +0100)]
package/x11r7/xlib_libXv: add CPE variables

cpe:2.3:a:x.org:libxv is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ax.org%3Alibxv

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/cryptsetup: set CRYPTSETUP_CPE_ID_VALID
Fabrice Fontaine [Sun, 7 Feb 2021 12:35:51 +0000 (13:35 +0100)]
package/cryptsetup: set CRYPTSETUP_CPE_ID_VALID

cpe:2.3:a:cryptsetup_project:cryptsetup is a valid CPE identifier for
this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Acryptsetup_project%3Acryptsetup

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libfastjson: bump version to 0.99.9
Bernd Kuhls [Sun, 7 Feb 2021 12:21:06 +0000 (13:21 +0100)]
package/libfastjson: bump version to 0.99.9

Changelog: https://github.com/rsyslog/libfastjson/blob/master/ChangeLog

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/mosquitto: add MOSQUITTO_CPE_ID_VENDOR
Fabrice Fontaine [Sun, 7 Feb 2021 13:07:46 +0000 (14:07 +0100)]
package/mosquitto: add MOSQUITTO_CPE_ID_VENDOR

cpe:2.3:a:eclipse:mosquitto is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aeclipse%3Amosquitto

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/webp: bump to version 1.2.0
Gilles Talis [Sun, 7 Feb 2021 10:48:36 +0000 (11:48 +0100)]
package/webp: bump to version 1.2.0

Also fixed indentation in hash file

Signed-off-by: Gilles Talis <gilles.talis@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/sox: fix static build with id3tag
Fabrice Fontaine [Sat, 6 Feb 2021 10:30:56 +0000 (11:30 +0100)]
package/sox: fix static build with id3tag

This build failure is raised since bump to
7524160b29a476f7e87bc14fddf12d349f9a3c5e

Fixes:
 - http://autobuild.buildroot.org/results/73efdacf237e3d567fa66f3b3f68e624f5e35bc7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/tpm2-pkcs11: add p11-kit optional dependency
Fabrice Fontaine [Sun, 7 Feb 2021 09:19:29 +0000 (10:19 +0100)]
package/tpm2-pkcs11: add p11-kit optional dependency

Fixes:
 - http://autobuild.buildroot.org/results/fee607da7226a92cceab2bbfd4c5d031016dfa3d

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/lua-http: bump to version 0.4
Francois Perrad [Sat, 6 Feb 2021 11:36:40 +0000 (12:36 +0100)]
package/lua-http: bump to version 0.4

diff LICENSE.md
- Copyright (c) 2015-2019 Daurnimator
+ Copyright (c) 2015-2021 Daurnimator

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libblockdev: bump version to 2.25
Bernd Kuhls [Sat, 6 Feb 2021 19:03:59 +0000 (20:03 +0100)]
package/libblockdev: bump version to 2.25

Release notes:
https://github.com/storaged-project/libblockdev/blob/2.x-branch/NEWS.rst

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libbytesize: bump version to 2.5
Bernd Kuhls [Sat, 6 Feb 2021 19:03:58 +0000 (20:03 +0100)]
package/libbytesize: bump version to 2.5

Release notes:
https://github.com/storaged-project/libbytesize/releases/tag/2.4
https://github.com/storaged-project/libbytesize/releases/tag/2.5

Removed patch which was applied upstream:
https://github.com/storaged-project/libbytesize/commit/f2b6600f5483fc68c46d596d578be10546f5ac43

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/libabseil-cpp: bump version to 20200923.3
Bernd Kuhls [Sat, 6 Feb 2021 18:43:45 +0000 (19:43 +0100)]
package/libabseil-cpp: bump version to 20200923.3

Release notes:
https://github.com/abseil/abseil-cpp/releases/tag/20200923.3

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/openrc: set OPENRC_CPE_ID_VALID
Fabrice Fontaine [Sat, 6 Feb 2021 16:14:15 +0000 (17:14 +0100)]
package/openrc: set OPENRC_CPE_ID_VALID

cpe:2.3:a:openrc_project:openrc is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aopenrc_project%3Aopenrc

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/jsoncpp: set JSONCPP_CPE_ID_VALID
Fabrice Fontaine [Sat, 6 Feb 2021 16:54:53 +0000 (17:54 +0100)]
package/jsoncpp: set JSONCPP_CPE_ID_VALID

cpe:2.3:a:jsoncpp_project:jsoncpp is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ajsoncpp_project%3Ajsoncpp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/unbound: add UNBOUND_CPE_ID_VENDOR
Fabrice Fontaine [Sat, 6 Feb 2021 15:50:11 +0000 (16:50 +0100)]
package/unbound: add UNBOUND_CPE_ID_VENDOR

cpe:2.3:a:nlnetlabs:unbound is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Anlnetlabs%3Aunbound

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/mariadb: set MARIADB_CPE_ID_VENDOR
Fabrice Fontaine [Sat, 6 Feb 2021 16:04:30 +0000 (17:04 +0100)]
package/mariadb: set MARIADB_CPE_ID_VENDOR

cpe:2.3:a:mariadb:mariadb is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Amariadb%3Amariadb

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/gnuplot: set GNUPLOT_CPE_ID_VALID
Fabrice Fontaine [Sat, 6 Feb 2021 15:59:52 +0000 (16:59 +0100)]
package/gnuplot: set GNUPLOT_CPE_ID_VALID

cpe:2.3:a:gnuplot_project:gnuplot is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Agnuplot_project%3Agnuplot

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/pkg-utils: escape \ in generated legal-info
Yann E. MORIN [Sat, 6 Feb 2021 08:51:02 +0000 (09:51 +0100)]
package/pkg-utils: escape \ in generated legal-info

In the output of legal-info, which is JSON-formatted, we include the
CPI_ID (when it is valid).

For xerces, the CPE_ID contains two sequences of \+ (which is exactly
what is present in the NIST DB, [0]).

However, in JSON, like in C, \ escapes the following character; only a
very limited set of characters are valid to escape: " \ / b f n r t u.
Escaping any other character is invalid. Conformant JSON parser will
choke on invalid sequences, and so does not the json python module:

      File "/usr/lib/python2.7/json/decoder.py", line 380, in raw_decode
        obj, end = self.scan_once(s, idx)
    ValueError: Invalid \escape: line 1 column 608554 (char 608553)

We fix that be globally escaping \ in our json output, in the generic
sanitising macro.

[0] https://nvd.nist.gov/products/cpe/detail/645?namingFormat=2.3&orderBy=CPEURI&keyword=xerces&status=FINAL

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/cryptopp: add CPE variables
Fabrice Fontaine [Sat, 6 Feb 2021 15:43:48 +0000 (16:43 +0100)]
package/cryptopp: add CPE variables

cpe:2.3:a:cryptopp:crypto\+\+ is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&orderBy=2.3&keyword=cpe%3A2.3%3Aa%3Acryptopp%3Acrypto%5C%2B%5C%2B

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/slirp: add CPE variables
Fabrice Fontaine [Sat, 6 Feb 2021 16:11:22 +0000 (17:11 +0100)]
package/slirp: add CPE variables

cpe:2.3:a:libslirp_project:libslirp is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alibslirp_project%3Alibslirp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/rtty: bump version to 7.3.2
Jianhui Zhao [Sat, 6 Feb 2021 14:33:59 +0000 (22:33 +0800)]
package/rtty: bump version to 7.3.2

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/redis: add REDIS_CPE_ID_VENDOR
Fabrice Fontaine [Sat, 6 Feb 2021 16:29:37 +0000 (17:29 +0100)]
package/redis: add REDIS_CPE_ID_VENDOR

cpe:2.3:a:redislabs:redis is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aredislabs%3Aredis

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/mosquitto: bump version to 2.0.7
Peter Korsgaard [Sat, 6 Feb 2021 16:31:39 +0000 (17:31 +0100)]
package/mosquitto: bump version to 2.0.7

Includes a number of bugfixes.  For details, see the announcement:
https://mosquitto.org/blog/2021/02/version-2-0-7-released/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
3 years agopackage/python-flask-cors: bump to version 3.0.10
Fabrice Fontaine [Sat, 6 Feb 2021 09:59:39 +0000 (10:59 +0100)]
package/python-flask-cors: bump to version 3.0.10

https://github.com/corydolphin/flask-cors/releases/tag/3.0.10

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>