buildroot.git
5 years agopackage/iozone: bump to version 3_483
Gilles Talis [Sun, 13 Jan 2019 12:37:47 +0000 (13:37 +0100)]
package/iozone: bump to version 3_483

Signed-off-by: Gilles Talis <gilles.talis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/zbar: switch to linuxtv zbar fork
James Hilliard [Mon, 14 Jan 2019 13:27:00 +0000 (21:27 +0800)]
package/zbar: switch to linuxtv zbar fork

The zbar upstream previously used has been abandoned since 2012.
The linuxtv fork appears to be the most actively maintained fork.
Removed all patches which are merged upstream or fixed upstream.
Changed configure flags to match new upstream.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/hiredis: bump to version 0.14.0
Fabrice Fontaine [Mon, 14 Jan 2019 06:52:10 +0000 (07:52 +0100)]
package/hiredis: bump to version 0.14.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/i2pd: bump to version 2.22.0
Fabrice Fontaine [Mon, 14 Jan 2019 06:50:58 +0000 (07:50 +0100)]
package/i2pd: bump to version 2.22.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/fdk-aac: bump to version 2.0.0
Gilles Talis [Sun, 13 Jan 2019 12:37:46 +0000 (13:37 +0100)]
package/fdk-aac: bump to version 2.0.0

Signed-off-by: Gilles Talis <gilles.talis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackag/fdk-aac: enable for aarch64
Gilles Talis [Sun, 13 Jan 2019 12:37:45 +0000 (13:37 +0100)]
packag/fdk-aac: enable for aarch64

Support for this architecture was added in upstream commit
1d686c3a23f3ae286ef964ab62199be96e4ad1dc.

Take this opportunity to reformat how the
BR2_PACKAGE_FDK_AAC_ARCH_SUPPORTS option is described.

Signed-off-by: Gilles Talis <gilles.talis@gmail.com>
[Thomas: reformat BR2_PACKAGE_FDK_AAC_ARCH_SUPPORTS option.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/cryptopp: bump to version 8.0.0
Fabrice Fontaine [Sun, 13 Jan 2019 18:15:09 +0000 (19:15 +0100)]
package/cryptopp: bump to version 8.0.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/fwts: add optional bash-completion dependency
Fabrice Fontaine [Sun, 13 Jan 2019 17:58:21 +0000 (18:58 +0100)]
package/fwts: add optional bash-completion dependency

fwts uses the completionsdir variable from bash-completion.pc to decide
where to install things.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/haproxy: bump to version 1.9.1
Fabrice Fontaine [Sun, 13 Jan 2019 14:04:12 +0000 (15:04 +0100)]
package/haproxy: bump to version 1.9.1

Remove patch and tweak haproxy.mk to adapt pcre-config/pcre2-config
workaround with upstream solution.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/boinc: bump to version 7.14.2
Fabrice Fontaine [Sun, 13 Jan 2019 14:01:47 +0000 (15:01 +0100)]
package/boinc: bump to version 7.14.2

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/lxc: bump to version 3.1.0
Fabrice Fontaine [Sun, 13 Jan 2019 13:56:35 +0000 (14:56 +0100)]
package/lxc: bump to version 3.1.0

Remove both patches (already in version) and so drop
LXC_AUTORECONF = YES.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/boost: bump to version 1.69.0
Fabrice Fontaine [Sun, 13 Jan 2019 17:43:16 +0000 (18:43 +0100)]
package/boost: bump to version 1.69.0

- Remove fifth patch (already in version)
- Remove BR2_PACKAGE_BOOST_SIGNALS as signals is now removed. Its
  removal was announced in 1.68 and its deprecation was announced in
  1.54. Users are encouraged to use Signals2 instead.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/cc-tool: drop BR2_PACKAGE_BOOST_SIGNALS select
Fabrice Fontaine [Sun, 13 Jan 2019 17:43:15 +0000 (18:43 +0100)]
package/cc-tool: drop BR2_PACKAGE_BOOST_SIGNALS select

cc-tool depends on signals2 not signals, indeed only signals2 is used
in src/data/progress_watcher.h and BOOST_SIGNALS defined in
m4/boost.m4 is never used in configure.ac.

There is no need to select any sort of BR2_PACKAGE_BOOST_SIGNALS2
option, as signals2 is a header-only boost library, and such
header-only boost libraries do not have any Config.in options, as they
are all always installed with the base boost library.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[Thomas: tweak commit log]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/syslog-ng: depend on !BR2_STATIC_LIBS
Chris Packham [Sun, 13 Jan 2019 08:47:22 +0000 (21:47 +1300)]
package/syslog-ng: depend on !BR2_STATIC_LIBS

Upstream now unconditionally requires dlfcn.h:
- https://github.com/balabit/syslog-ng/commit/01258e56abc5804f8ea977ff9ab98cc8e2fd4702

Fixes:
- http://autobuild.buildroot.net/results/c0bca852e053cd0e021205b3a949e750ae602333

Signed-off-by: Chris Packham <judge.packham@gmail.com>
Reviewed-by: Carlos Santos <casantos@datacom.com.br>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/lxc: add optional dependency to bash-completion
Fabrice Fontaine [Sat, 12 Jan 2019 21:08:43 +0000 (22:08 +0100)]
package/lxc: add optional dependency to bash-completion

lxc uses the completionsdir variable from bash-completions.pc to decide
where to install things.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/geoip: bump to version 1.6.12
Fabrice Fontaine [Sat, 12 Jan 2019 19:52:42 +0000 (20:52 +0100)]
package/geoip: bump to version 1.6.12

Add hash for license file

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/Makefile.in: set -fno-dwarf2-cfi-asm for m68k_cf
Fabrice Fontaine [Sat, 12 Jan 2019 19:50:39 +0000 (20:50 +0100)]
package/Makefile.in: set -fno-dwarf2-cfi-asm for m68k_cf

Another package (libsquish) is affected by the
"Internal error in emit_expr_encoded at dw2gencfi.c:215".

This error already affects 5 packages and is due to binutils, see:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=79509

No report has been made to binutils yet however as suggested by Yann
during review of woff2 workaround
(https://patchwork.ozlabs.org/patch/911344/), remove the workarounds
from all these packages and put it in package/Makefile.in

Fixes:

 http://autobuild.buildroot.org/results/77e06c092f4e7804dc166e259b25e779e5f1e83a

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/zeromq: bump to version 4.3.1
Asaf Kahlon [Sat, 12 Jan 2019 19:02:30 +0000 (21:02 +0200)]
package/zeromq: bump to version 4.3.1

Remove the patches as they're already on upstream.
As a consequence, no need to autoreconf anymore.
Also added license hashes.

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/python-aiohttp: bump to version 3.5.4
Asaf Kahlon [Sat, 12 Jan 2019 18:40:47 +0000 (20:40 +0200)]
package/python-aiohttp: bump to version 3.5.4

License change - a year bump.

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/cjson: bump to version 1.7.10
Fabrice Fontaine [Sat, 12 Jan 2019 18:01:35 +0000 (19:01 +0100)]
package/cjson: bump to version 1.7.10

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/python-pyyaml: security bump to 4.2b4
Asaf Kahlon [Sat, 12 Jan 2019 17:42:27 +0000 (19:42 +0200)]
package/python-pyyaml: security bump to 4.2b4

Fixes CVE-2017-18342: In PyYAML before 4.1, the yaml.load() API
could execute arbitrary code.

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/python-engineio: bump to version 3.2.3
Asaf Kahlon [Sat, 12 Jan 2019 17:42:26 +0000 (19:42 +0200)]
package/python-engineio: bump to version 3.2.3

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/python-crossbar: bump to version 19.1.1
Asaf Kahlon [Sat, 12 Jan 2019 17:42:25 +0000 (19:42 +0200)]
package/python-crossbar: bump to version 19.1.1

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/python-autobahn: bump to version 19.1.1
Asaf Kahlon [Sat, 12 Jan 2019 17:42:24 +0000 (19:42 +0200)]
package/python-autobahn: bump to version 19.1.1

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/keepalived: fix if.h namespace collision
Fabrice Fontaine [Thu, 10 Jan 2019 16:43:28 +0000 (17:43 +0100)]
package/keepalived: fix if.h namespace collision

Fixes:
 - http://autobuild.buildroot.org/results/d229602f2e477499c86567e0e8a3535513d322e8

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agodocs/website/sponsors.html: Zillabit webserver does not support HTTPS
Peter Korsgaard [Sun, 13 Jan 2019 07:46:34 +0000 (08:46 +0100)]
docs/website/sponsors.html: Zillabit webserver does not support HTTPS

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agodocs/website/sponsors.html: add Zillabit as sponsor of the buildroot.org domain
Peter Korsgaard [Sat, 12 Jan 2019 22:58:50 +0000 (23:58 +0100)]
docs/website/sponsors.html: add Zillabit as sponsor of the buildroot.org domain

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/asterisk: needs threads
Fabrice Fontaine [Fri, 11 Jan 2019 17:31:58 +0000 (18:31 +0100)]
package/asterisk: needs threads

Fixes:
 - http://autobuild.buildroot.org/results/85d30a4f94efa868a9155f7dda593ba8079063b5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/systemd: fix build with older kernels
Fabrice Fontaine [Fri, 11 Jan 2019 16:50:18 +0000 (17:50 +0100)]
package/systemd: fix build with older kernels

Fixes:
 - http://autobuild.buildroot.org/results/699c078aa078240c6741da4dbd0871450ceeca92

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/rauc: version bump to 1.0
David J. Fogle [Mon, 7 Jan 2019 22:44:07 +0000 (22:44 +0000)]
package/rauc: version bump to 1.0

For details see [1].

This bump also deleted the two patch files for the RAUC package. These
were related to eMMC support being made optional, and workaround for
olde kernel. Both of these patch sets have been merged into upsteam in
the rauc git repos.

Older kernel workaound:
https://github.com/rauc/rauc/commit/993b698c48789baea51f8b7c47b1e057ba328033#diff-b3a0044e6a3b6a8b16933e72f416c8f1

Make eMMC selectable:
https://github.com/rauc/rauc/commit/f85d1cab07376c7680ef4d9e45a6baf345e24e37#diff-365367c8cde56aafd5cbad767e1c9738

[1] https://github.com/rauc/rauc/releases/tag/v1.0

Signed-off-by: David J Fogle <dave@exitstrategytech.com>
[Thomas: drop AUTORECONF = YES, no longer needed.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years ago{linux, linux-headers}: default to 4.19.x
Peter Korsgaard [Thu, 10 Jan 2019 14:45:08 +0000 (15:45 +0100)]
{linux, linux-headers}: default to 4.19.x

4.20.x is not a long term support kernel, but 4.19.x is (supported until end
2020):
https://www.kernel.org/category/releases.html

With the upcoming Buildroot 2019.02 release being a LTS release, default to
4.19.x instead.

Notice: The userspace API breakage in net_stamp.h causing build failures has
now been fixed in 4.19.14 by commit e4a2ffe9029fd (net: Use
__kernel_clockid_t in uapi net_stamp.h)

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Thomas: add comment in linux/Config.in and
package/linux-headers/Config.in.host so that we don't mistakenly bump
to 4.20+.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/atk: fix static build
Fabrice Fontaine [Thu, 10 Jan 2019 16:40:44 +0000 (17:40 +0100)]
package/atk: fix static build

Use library instead of shared_library to allow the user to build a
static libatk library

Fixes:
 - http://autobuild.buildroot.org/results/347a37dd2585974bdbf3bf99158e8ee9127d1202

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/php-ssh2: fix build with php 7.3.0
Fabrice Fontaine [Thu, 10 Jan 2019 16:38:52 +0000 (17:38 +0100)]
package/php-ssh2: fix build with php 7.3.0

Retrieve upstream patches to fix build with php 7.3.0

Fixes:
 - http://autobuild.buildroot.org/results/e3b2a72e1f7f776c30a52bb98bb47c04d0b4919b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/motion: bump to version 4.2.1
Fabrice Fontaine [Thu, 10 Jan 2019 16:47:11 +0000 (17:47 +0100)]
package/motion: bump to version 4.2.1

Remove patch (already in version)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/gnuchess: bump to version 6.2.5
Fabrice Fontaine [Thu, 10 Jan 2019 17:59:55 +0000 (18:59 +0100)]
package/gnuchess: bump to version 6.2.5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agoboot/shim: new package
Peter Korsgaard [Fri, 11 Jan 2019 10:01:11 +0000 (11:01 +0100)]
boot/shim: new package

This commit adds a package for 'shim', an EFI bootloader for secure
boot chain loading.

While gnu-efi supports 32bit ARM, this is currently broken in shim.

Patches to fix this have been submitted upstream but are not included
here for now.

https://github.com/rhboot/shim/pull/162

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Thomas: use BR2_PACKAGE_GNU_EFI_ARCH_SUPPORTS, add separate depends
on to exclude ARM32 build.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/gnu-efi: introduce BR2_PACKAGE_GNU_EFI_ARCH_SUPPORTS option
Thomas Petazzoni [Sat, 12 Jan 2019 16:32:58 +0000 (17:32 +0100)]
package/gnu-efi: introduce BR2_PACKAGE_GNU_EFI_ARCH_SUPPORTS option

This will be used in packages that depend on gnu-efi, and we take this
opportunity to propagate this dependency where it was missing in
gummiboot and syslinux. In practice, it was not a problem because
gummiboot and syslinux are only available on i386 and x86-64, which is
a subset of the architectures supported by gnu-efi.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/gnu-efi: bump version to 3.0.9
Peter Korsgaard [Fri, 11 Jan 2019 10:01:10 +0000 (11:01 +0100)]
package/gnu-efi: bump version to 3.0.9

Adds support for StrnCat, needed by shim.

Also add a hash for the license file.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/gnu-efi: get rid of patch
Peter Korsgaard [Fri, 11 Jan 2019 10:01:09 +0000 (11:01 +0100)]
package/gnu-efi: get rid of patch

Pass TARGET_CONFIGURE_OPTS in the environment instead of on the make command
line, so 'CFLAGS +=' does the right thing in the Makefile without patching.

TARGET_CONFIGURE_OPTS includes TARGET_MAKE_ENV, so drop that.

This does require us to pass CROSS_COMPILE to ensure the native tools are
not used though.

Add a GNU_EFI_MAKE_OPTS and use in both the build and install steps, instead
of repeating the various arguments.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agoboot/barebox: change download site to https
Peter Seiderer [Fri, 11 Jan 2019 21:52:35 +0000 (22:52 +0100)]
boot/barebox: change download site to https

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agoboot/barebox: bump version to 2018.12.0
Peter Seiderer [Fri, 11 Jan 2019 21:52:34 +0000 (22:52 +0100)]
boot/barebox: bump version to 2018.12.0

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/azure-iot-sdk-c: remove dummy value of CMAKE_SYSTEM_VERSION
Arnout Vandecappelle (Essensium/Mind) [Thu, 10 Jan 2019 23:05:29 +0000 (00:05 +0100)]
package/azure-iot-sdk-c: remove dummy value of CMAKE_SYSTEM_VERSION

Now CMAKE_SYSTEM_VERSION is properly set in toolchainfile.cmake, it is
no longer necessary to set a dummy value in azure-iot-sdk-c.

Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Cc: Nikita Sobolev <Nikita.Sobolev@synopsys.com>
Cc: André Hentschel <nerv@dawncrow.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/pkg-cmake: add CMAKE_SYSTEM_VERSION to toolchainfile.cmake
Arnout Vandecappelle (Essensium/Mind) [Thu, 10 Jan 2019 23:05:28 +0000 (00:05 +0100)]
package/pkg-cmake: add CMAKE_SYSTEM_VERSION to toolchainfile.cmake

Quoting the CMake documentation:

  When the CMAKE_SYSTEM_NAME variable is set explicitly to enable cross
  compiling then the value of CMAKE_SYSTEM_VERSION must also be set
  explicitly to specify the target system version.

Thus, we should also set CMAKE_SYSTEM_VERSION in toolchainfile.cmake. It
is supposed to be set to the value of `uname -r` on the target. We don't
have that exact value available (unless we build the kernel), but the
value of BR2_TOOLCHAIN_HEADERS_AT_LEAST contains the (minimum) version
of the kernel it will run on, so it should be OK for all practical
purposes.

Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Cc: Samuel Martin <s.martin49@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/readline: bump to version 8.0
Fabrice Fontaine [Fri, 11 Jan 2019 21:50:20 +0000 (22:50 +0100)]
package/readline: bump to version 8.0

- Remove first patch (already in version) and so remove
  READLINE_AUTOCONF as configure.ac is not patched anymore
- Use the new --disable-install-examples option and remove
  READLINE_PURGE_EXAMPLES
- Remove READLINE_INSTALL_PC_FILE as readline.pc is installed since:
  http://git.savannah.gnu.org/cgit/readline.git/commit/Makefile.in?id=8e6ccd0373d77b86ed37a9a7d232ccfea3d6670c
- Remove READLINE_INSTALL_FIXUPS_SHARED (libraries are installed with
  correct rights)
- Add hash for license file

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/libsquish: re-enable for BR2_STATIC_LIBS configuration
Thomas Petazzoni [Sat, 12 Jan 2019 14:34:32 +0000 (15:34 +0100)]
package/libsquish: re-enable for BR2_STATIC_LIBS configuration

Since the bump to version 1.15, libsquish can conditionally
build/install its shared library, which makes it possible to re-enable
this package for BR2_STATIC_LIBS configurations.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/libsquish: really install shared library
Romain Naour [Sat, 12 Jan 2019 12:10:24 +0000 (13:10 +0100)]
package/libsquish: really install shared library

While testing the new supertuxkart 0.10-beta1 version, the build
failed due to missing libsquash shared library.

Indeed, by default (see config file) the shared library is not build
and all symlinks created by LIBSQUISH_INSTALL_{STAGING,TARGET}_CMDS
are curently broken.

To fix that, add USE_SHARED=1 to LIBSQUISH_MAKE_ENV.

Also add a patch to allow reinstall the package.

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/libsquish: add license file hash
Romain Naour [Sat, 12 Jan 2019 12:10:23 +0000 (13:10 +0100)]
package/libsquish: add license file hash

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/php-amqp: bump to version 1.9.4
Fabrice Fontaine [Fri, 11 Jan 2019 15:02:55 +0000 (16:02 +0100)]
package/php-amqp: bump to version 1.9.4

Remove patch (already in version)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/php-yaml: bump to version 2.0.4
Fabrice Fontaine [Fri, 11 Jan 2019 14:36:18 +0000 (15:36 +0100)]
package/php-yaml: bump to version 2.0.4

This bump fix build with php 7.3.0
Also add hash for license file

Fixes:
 - http://autobuild.buildroot.org/results/8d23d9c1b30d104d44ab82475dd12f1c4ab1e125

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/php-memcached: bump to version 3.1.3
Fabrice Fontaine [Fri, 11 Jan 2019 14:35:26 +0000 (15:35 +0100)]
package/php-memcached: bump to version 3.1.3

This bump fix build with php 7.3.0
Also add hash for license files

Fixes:
 - http://autobuild.buildroot.org/results/57ce77fc1b99a72019dcfe8fe5d55aba315b9e79

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/swupdate: disable lua in static build
Fabrice Fontaine [Fri, 11 Jan 2019 14:33:12 +0000 (15:33 +0100)]
package/swupdate: disable lua in static build

Since version 2018.11 and
https://github.com/sbabic/swupdate/commit/624904cc18003fae413011563dac83a333f10509,
bindings for LUA is a shared library so disable lua if BR2_STATIC_LIBS
is set

Fixes:
 - http://autobuild.buildroot.org/results/55767e58c211656558af7916a4e0975089a2785b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/syslog-ng: bump to version 3.19.1
Carlos Santos [Fri, 11 Jan 2019 13:03:07 +0000 (11:03 -0200)]
package/syslog-ng: bump to version 3.19.1

Brings lots improvements and bug fixes, especially bug #1720[1], which
causes problems on some of our (DATACOM) products.

1. https://github.com/balabit/syslog-ng/issues/1720

Signed-off-by: Carlos Santos <casantos@datacom.com.br>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/php: fix building pcre extension
Adam Duskett [Fri, 28 Dec 2018 16:56:34 +0000 (11:56 -0500)]
package/php: fix building pcre extension

The configure option "--with-pcre-regex=$(STAGING_DIR)/usr" is broken.
PHP will  prepend $(STAGING_DIR)/usr to the paths, which will cause a
failure because it won't be able to find pcre, and will then fallback to
searching for pcre2, which won't be installed.

Removing "=$(STAGING_DIR)/usr" from --with-pcre-regex fixes the issue.

Fixes:
  http://autobuild.buildroot.net/results/586/586f56e8fcf2d2bbbd3bdf69b1c3befff7ce8bbf
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Tested-by: Mark Corbin <mark.corbin@embecosm.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libcpprestsdk: remove use of align_union
Adam Duskett [Tue, 8 Jan 2019 16:40:16 +0000 (11:40 -0500)]
package/libcpprestsdk: remove use of align_union

Taken from upstream commit 65267c6e83e7e29ed3bdddde13d2c4bbb10e1bff

Fixes:

  http://autobuild.buildroot.net/results/9085cbcc417aec1aeee7a317a32a0c4e5d7bb6d9

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/gnuchess: license is GPL-3.0+, not GPL-2.0+
Fabrice Fontaine [Thu, 10 Jan 2019 17:59:53 +0000 (18:59 +0100)]
package/gnuchess: license is GPL-3.0+, not GPL-2.0+

gnuchess is licensed under GPL-3.0+ not GPL-2.0+, also add hash for
license file

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agosupport/config-fragments: add RISC-V 32-bit to autobuild configs
Mark Corbin [Sun, 21 Oct 2018 19:12:03 +0000 (20:12 +0100)]
support/config-fragments: add RISC-V 32-bit to autobuild configs

Add a minimal RISC-V 32-bit autobuild configuration for the
internal toolchain with glibc.

Signed-off-by: Mark Corbin <mark.corbin@embecosm.com>
Reviewed-by: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopatchelf: update _SITE to new location
Arnout Vandecappelle (Essensium/Mind) [Thu, 10 Jan 2019 12:31:46 +0000 (13:31 +0100)]
patchelf: update _SITE to new location

releases.nixos.org gives some weird XML pages. The upstream location is
nixos.org/releases.

This side uses HSTS, so switch to https to avoid a needless redirect.

Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/lighttpd: adjust hash comment after 1.4.52 bump
Peter Korsgaard [Thu, 10 Jan 2019 10:06:43 +0000 (11:06 +0100)]
package/lighttpd: adjust hash comment after 1.4.52 bump

Commit ec69d3820f (package/lighttpd: bump to version 1.4.52) bumped the
lighttpd version but forgot to adjust the upstream hash comment.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/lighttpd: bump to version 1.4.52
Peter Korsgaard [Wed, 9 Jan 2019 21:30:54 +0000 (22:30 +0100)]
package/lighttpd: bump to version 1.4.52

Fixes location header parsing regression introduced in 1.4.51:
https://redmine.lighttpd.net/issues/2918

Fixes header setting regression introduced in 1.4.51:
https://redmine.lighttpd.net/issues/2919

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/xenomai: drop consecutive empty lines
Peter Korsgaard [Thu, 10 Jan 2019 07:33:19 +0000 (08:33 +0100)]
package/xenomai: drop consecutive empty lines

Commit 4219c58c (xenomai: remove unnecessary autoreconf) introduced a
check-package warning:

1 warnings generated
package/xenomai/xenomai.mk:27: consecutive empty lines

https://gitlab.com/buildroot.org/buildroot/-/jobs/143155797

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years ago{linux, linux-headers}: bump 4.{9, 14, 19, 20}.x series
Peter Korsgaard [Wed, 9 Jan 2019 21:38:59 +0000 (22:38 +0100)]
{linux, linux-headers}: bump 4.{9, 14, 19, 20}.x series

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoDEVELOPERS: add Thomas De Schampheleire for xenomai
Thomas De Schampheleire [Tue, 8 Jan 2019 20:38:54 +0000 (21:38 +0100)]
DEVELOPERS: add Thomas De Schampheleire for xenomai

Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoxenomai: remove unnecessary autoreconf
Thomas De Schampheleire [Tue, 8 Jan 2019 20:38:53 +0000 (21:38 +0100)]
xenomai: remove unnecessary autoreconf

As xenomai release tarballs ship with a configure script, there is only a
need for autoreconfiguring when patches are applied.

The last patch was removed with git commit
de993bc23aab100e16026cb4cabebed48b9e1989 but the AUTORECONF line remained.

Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/valijson: bump to version 0.1
Thomas Petazzoni [Tue, 1 Jan 2019 17:33:24 +0000 (18:33 +0100)]
package/valijson: bump to version 0.1

The v0.1 tag is the first (and only) tag of the project, and has been
done after commit 424b706f990a9eb96dfc19cc8e54f2cd6ce5e186 that we
currently use as a valijson version.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/grpc: fix build on non-NPTL systems
Thomas Petazzoni [Mon, 31 Dec 2018 16:11:23 +0000 (17:11 +0100)]
package/grpc: fix build on non-NPTL systems

uClibc-ng in non-NPTL configurations doesn't implement
pthread_setname_np(). Unfortunately grpc assumes that as soon as
__GLIBC__ is defined, pthread_setname_np() is available. It is
particularly sad, because grpc build system uses CMake, so it is
trivial to do such a check.

This commit adds a patch that does just this: check for the
availability of pthread_setname_np(), and use it only if
available. The patch has been submitted upstream.

Fixes:

  http://autobuild.buildroot.org/results/47991306abbcd80fb8e6baad0bd7490fa74f696c/

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/strace: fix build for mips
Baruch Siach [Tue, 8 Jan 2019 18:08:08 +0000 (20:08 +0200)]
package/strace: fix build for mips

Upstream changes in mips specific code of the last release broke build
for that target. Add a patch that restores build.

Fixes:
http://autobuild.buildroot.net/results/858/8585e75df6462b6d07476a81982e88ec81655c8b/
http://autobuild.buildroot.net/results/b2f/b2f24976ddda1adc9b9ba3d9bfb7167721814f78/
http://autobuild.buildroot.net/results/031/0313245fe555e0c0890c3f475bf6586db23535ed/

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/strace: fix build for no-MMU targets
Baruch Siach [Tue, 8 Jan 2019 16:47:03 +0000 (18:47 +0200)]
package/strace: fix build for no-MMU targets

The latest strace version bump added a call to fork() which breaks build
for no-MMU. Add a patch that removes the unneeded fork() call on no-MMU.

Fixes:
http://autobuild.buildroot.net/results/4a0/4a0e2872b27be93f73137c7550eae1c1f479c160/
http://autobuild.buildroot.net/results/747/74711084a54dfc17ad0d4d1e5faabf6d8a605dca/

Cc: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agotcpreplay: security bump to version 4.3.1
Baruch Siach [Tue, 8 Jan 2019 16:13:58 +0000 (18:13 +0200)]
tcpreplay: security bump to version 4.3.1

Upstream CHANGELOG entry for 4.3.0 lists these fixes:

    - CVE-2018-18408 use-after-free in post_args (#489)
    - CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488)
    - CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486)
    - CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485)
    - CVE-2018-17582 heap-buffer-overflow in get_next_packet (#484)
    - CVE-2018-13112 heap-buffer-overflow in get_l2len (#477 dup #408)

Drop tr_cv_libpcap_version and ac_cv_have_bpf; unused in current
configure script.

Make configure script use pcap-config to list library dependencies.
Unfortunately, pcap-config is not entirely correct, so we still need to
set the LIBS variable for static linking.

Use the smaller tar.xz archive.

Add license file hash.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopython-pytz: bump to version 2018.9
Asaf Kahlon [Mon, 7 Jan 2019 19:16:53 +0000 (21:16 +0200)]
python-pytz: bump to version 2018.9

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agolibinput: bump version to 1.12.5
Peter Seiderer [Mon, 7 Jan 2019 18:12:43 +0000 (19:12 +0100)]
libinput: bump version to 1.12.5

For details see [1].

[1] https://lists.freedesktop.org/archives/wayland-devel/2019-January/039804.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agox11vnc: update to 0.9.16
Martin Kepplinger [Mon, 7 Jan 2019 11:32:27 +0000 (12:32 +0100)]
x11vnc: update to 0.9.16

Update x11vnc from 0.9.15 to 0.9.16. For the changes, see
https://github.com/LibVNC/x11vnc/compare/0.9.15...0.9.16

Signed-off-by: Martin Kepplinger <martink@posteo.de>
[Peter: add hash for COPYING]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoefibootmgr: drop unneeded include path workaround
Peter Korsgaard [Mon, 7 Jan 2019 08:57:02 +0000 (09:57 +0100)]
efibootmgr: drop unneeded include path workaround

The hard coded -I/usr/include/efivar has been dropped from the Makefile in
commit 000eb0020c02 (Set pkg-config binary as variable) which is part of
v13, so drop the unneeded (misnamed) EFIBOOTMSR_PATCH_HEADER_PATH workaround.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/liburiparser: security bump to version 0.9.1
Carlos Santos [Sun, 6 Jan 2019 23:41:31 +0000 (21:41 -0200)]
package/liburiparser: security bump to version 0.9.1

Fixes an out-of-bounds read, the parsing of some a malformed URIs and a
function that reported 1 more byte than actually needed for IPv4 address
URIs. For additional datails, see

    https://github.com/uriparser/uriparser/blob/uriparser-0.9.1/ChangeLog

Signed-off-by: Carlos Santos <casantos@datacom.com.br>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoMakefile, manual, website: Bump copyright year
Peter Korsgaard [Sun, 6 Jan 2019 20:30:34 +0000 (21:30 +0100)]
Makefile, manual, website: Bump copyright year

Happy 2019!

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoexempi: fix comment entry quote
Peter Korsgaard [Sun, 6 Jan 2019 20:25:06 +0000 (21:25 +0100)]
exempi: fix comment entry quote

Fixes the following warning:
package/exempi/Config.in:14:warning: multi-line strings not supported

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoexempi: add dependency on threads
Ilya Averyanov [Sat, 5 Jan 2019 22:47:27 +0000 (01:47 +0300)]
exempi: add dependency on threads

Fixes:
http://autobuild.buildroot.net/results/96b/96bf4f0ddd88233b9604056d83bb3d7ea97d2046/
http://autobuild.buildroot.net/results/d92/d92c8eb3004165033c22cc98b153cf547a352fd7/

Signed-off-by: Ilya Averyanov <averyanovin@gmail.com>
[Peter: add autobuilder references]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agorpi-userland: bump version to 7cbfbd38d9
Peter Seiderer [Sat, 5 Jan 2019 19:50:58 +0000 (20:50 +0100)]
rpi-userland: bump version to 7cbfbd38d9

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agorpi-firmware: bump version to fbad6408c4
Peter Seiderer [Sat, 5 Jan 2019 19:50:57 +0000 (20:50 +0100)]
rpi-firmware: bump version to fbad6408c4

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoconfigs/raspberrypi*: bump kernel version to 4c5aec7827
Peter Seiderer [Sat, 5 Jan 2019 19:50:56 +0000 (20:50 +0100)]
configs/raspberrypi*: bump kernel version to 4c5aec7827

Now based on 4.14.91 (from 4.14.74).

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/ed: bump to version 1.15
Baruch Siach [Sun, 6 Jan 2019 17:57:36 +0000 (19:57 +0200)]
package/ed: bump to version 1.15

Drop ED_CONF_OPTS; unused since commit 2a37b625e2 ("ed: Convert to
generic package infrastructure").

Add license file hash.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/solarus: update license.txt file hash and remove license_gpl.txt hash.
Romain Naour [Wed, 2 Jan 2019 23:10:25 +0000 (00:10 +0100)]
package/solarus: update license.txt file hash and remove license_gpl.txt hash.

The license.txt file has been updated with Solarus Free Resource Pack URL.

Before version 1.6.0, the archive was downloaded from github and license_gpl.txt
file which is present in the git repository.
Since version 1.6.0, the archive is downloaded from [1] but the license_gpl.txt
file is missing.

This has been reported upstream [2].

[1] http://www.solarus-games.org
[2] https://gitlab.com/solarus-games/solarus/issues/1328

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/php_zmq: fix build with php 7.3.0
Frank Hunleth [Fri, 4 Jan 2019 04:47:16 +0000 (23:47 -0500)]
package/php_zmq: fix build with php 7.3.0

This includes an patch that fixes the following error:

```
/home/buildroot/build/instance-0/output/build/php-zmq-1.1.3/zmq.c: In function 'php_zmq_context_get':
/home/buildroot/build/instance-0/output/build/php-zmq-1.1.3/zmq.c:238:20: error: lvalue required as left operand of assignment
   GC_REFCOUNT(&le) = 1;
                    ^
/home/buildroot/build/instance-0/output/build/php-zmq-1.1.3/zmq.c: In function 'php_zmq_socket_store':
/home/buildroot/build/instance-0/output/build/php-zmq-1.1.3/zmq.c:538:19: error: lvalue required as left operand of assignment
  GC_REFCOUNT(&le) = 1;
```

The patch was created from the PR at:

https://github.com/mkoppanen/php-zmq/pull/195

Upstream has not merged the PR. Fixes:

http://autobuild.buildroot.org/results/3f2/3f258fbc7352c3d7205bc6402145be1102d69683

Signed-off-by: Frank Hunleth <fhunleth@troodon-software.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/irqbalance: bump to version 1.5.0
Florian La Roche [Fri, 4 Jan 2019 10:53:41 +0000 (11:53 +0100)]
package/irqbalance: bump to version 1.5.0

>From the upstream changelog:

New Features in irqbalance 1.5.0
* file based socket ipc mechanism
* support for multiple policy scripts
* add some sandboxing support
* enhanced debug output
* Imroved irq type determination for ARM
Bugs fixed:
* Fixed xen event interrupt detection
* Fix node parsing in sysfs
* Covscan fixes
* Fix use on systems without a pci bus
* Various other cleanups

Signed-off-by: Florian La Roche <F.LaRoche@pilz.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agostrace: bump to version 4.26
Nicolas Cavallari [Fri, 4 Jan 2019 15:46:27 +0000 (16:46 +0100)]
strace: bump to version 4.26

The licence changed from BSD to LGPL 2.1 or later, update this
accordingly.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoconfigs/qemu_riscv32_virt: new defconfig
Mark Corbin [Sun, 21 Oct 2018 19:12:02 +0000 (20:12 +0100)]
configs/qemu_riscv32_virt: new defconfig

Add RISC-V 32-bit defconfig for QEMU virt machine.

Tested with QEMU 2.12.1

Signed-off-by: Mark Corbin <mark.corbin@embecosm.com>
Reviewed-by: Matt Weber <matthew.weber@rockwellcollins.com>
[Thomas: regenerate .gitlab-ci.yml, update DEVELOPERS file]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agoarch: add support for RISC-V 32-bit (riscv32) architecture
Mark Corbin [Sun, 21 Oct 2018 19:12:01 +0000 (20:12 +0100)]
arch: add support for RISC-V 32-bit (riscv32) architecture

This enables a riscv32 system to be built with a Buildroot generated
toolchain (gcc >= 7.x, binutils >= 2.30, glibc only).

This requires a custom version of glibc 2.26 from the riscv-glibc
repository. Note that there are no tags in this repository, so the
glibc version just consists of the 40 character commit id string.

Thanks to Fabrice Bellard for pointing me towards the 32-bit glibc
repository and for providing the necessary patch to get it to build.

Signed-off-by: Mark Corbin <mark.corbin@embecosm.com>
Reviewed-by: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
5 years agopackage/python-django: security bump to version 2.1.5
Asaf Kahlon [Fri, 4 Jan 2019 14:11:08 +0000 (16:11 +0200)]
package/python-django: security bump to version 2.1.5

Fixes CVE-2019-3498: Content spoofing possibility in the default 404 page

For more details, see the announcement:
https://www.djangoproject.com/weblog/2019/jan/04/security-releases/

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
[Peter: mention that bump fixes security issues]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoutils/get-developers: really make it callable from elsewhere than the toplevel directory
Peter Korsgaard [Thu, 3 Jan 2019 10:56:56 +0000 (11:56 +0100)]
utils/get-developers: really make it callable from elsewhere than the toplevel directory

Commit 62d5558f76a (utils/get-developers: make it callable from elsewhere
than the toplevel directory) tried to fix this by passing in the toplevel
directory when the DEVELOPERS file is parsed.

Unfortunately this is not enough, as E.G.  also the paths listed in the
patches are relative to the toplevel directory, causing it to not match the
entries in the DEVELOPERS file.

In concept this can be fixed by also passing the toplevel directory to the
Developers class, but the simplest solution is just to chdir to the toplevel
Buildroot directory before calling any of the getdeveloperlib functions.

This does require us to finish parsing command line arguments (which opens
the provided patch files) to not get into trouble with relative paths to
patches before chdir'ing / initializing getdeveloperlib.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoRevert "utils/get-developers: make it callable from elsewhere than the toplevel direc...
Peter Korsgaard [Thu, 3 Jan 2019 10:56:55 +0000 (11:56 +0100)]
Revert "utils/get-developers: make it callable from elsewhere than the toplevel directory"

This reverts commit 62d5558f76a790d1c1b3a1834f1736dc86b6e34f.

This actually does not work, as patches contain paths relative to the
toplevel directory as well.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agotoolchain-external: update Arm AArch64 toolchain 8.2-2018.11
Romain Naour [Wed, 2 Jan 2019 22:14:07 +0000 (23:14 +0100)]
toolchain-external: update Arm AArch64 toolchain 8.2-2018.11

>From [1]:
* All GCC 8.2 features. For details on GCC 8 release series.
* Linaro specific pre-processor macros to ensure that this is a
  continuation from the Linaro releases.
* Spectre v1 mitigation backport from upstream FSF trunk include the
  revisions. This is an initial backport of those mitigations in
  the GNU toolchain and should be regarded as support for prototyping
  and early access only. Moreover, while the backports include support
  for the other architectures, they are included for completeness and
  all issues regarding these patches must be taken up upstream in the
  https://gcc.gnu.org/bugzilla by reproducing the same with upstream
  FSF trunk.
  Arm is interested in feedback regarding these workarounds for
  Spectre v1.
  A description of the mitigation has been published on LWN.net.

See "Release Note":
[1] https://developer.arm.com/open-source/gnu-toolchain/gnu-a/downloads#

Tested with qemu_aarch64_virt_defconfig.

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agotoolchain-external: update Arm AArch64-BE toolchain 8.2-2018.11
Romain Naour [Wed, 2 Jan 2019 22:14:06 +0000 (23:14 +0100)]
toolchain-external: update Arm AArch64-BE toolchain 8.2-2018.11

>From [1]:
* All GCC 8.2 features. For details on GCC 8 release series.
* Linaro specific pre-processor macros to ensure that this is a
  continuation from the Linaro releases.
* Spectre v1 mitigation backport from upstream FSF trunk include the
  revisions. This is an initial backport of those mitigations in
  the GNU toolchain and should be regarded as support for prototyping
  and early access only. Moreover, while the backports include support
  for the other architectures, they are included for completeness and
  all issues regarding these patches must be taken up upstream in the
  https://gcc.gnu.org/bugzilla by reproducing the same with upstream
  FSF trunk.
  Arm is interested in feedback regarding these workarounds for
  Spectre v1.
  A description of the mitigation has been published on LWN.net.

See "Release Note":
[1] https://developer.arm.com/open-source/gnu-toolchain/gnu-a/downloads#

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agotoolchain-external: update Arm ARM toolchain 8.2-2018.11
Romain Naour [Wed, 2 Jan 2019 22:14:05 +0000 (23:14 +0100)]
toolchain-external: update Arm ARM toolchain 8.2-2018.11

>From [1]:
* All GCC 8.2 features. For details on GCC 8 release series.
* Linaro specific pre-processor macros to ensure that this is a
  continuation from the Linaro releases.
* Spectre v1 mitigation backport from upstream FSF trunk include the
  revisions. This is an initial backport of those mitigations in
  the GNU toolchain and should be regarded as support for prototyping
  and early access only. Moreover, while the backports include support
  for the other architectures, they are included for completeness and
  all issues regarding these patches must be taken up upstream in the
  https://gcc.gnu.org/bugzilla by reproducing the same with upstream
  FSF trunk.
  Arm is interested in feedback regarding these workarounds for
  Spectre v1.
  A description of the mitigation has been published on LWN.net.

See "Release Note":
[1] https://developer.arm.com/open-source/gnu-toolchain/gnu-a/downloads#

Tested with qemu_arm_vexpress_defconfig.

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopython-lxml: bump to version 4.2.6
Asaf Kahlon [Fri, 4 Jan 2019 07:00:50 +0000 (09:00 +0200)]
python-lxml: bump to version 4.2.6

Update site to files.pythonhosted.org.

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/nodejs: bump version to v8.15.0
Peter Korsgaard [Thu, 3 Jan 2019 14:44:22 +0000 (15:44 +0100)]
package/nodejs: bump version to v8.15.0

Fixes regressions introduced by the v8.14.0 security release.  From the
announcement:

The 8.14.0 security release introduced some unexpected breakages on the 8.x
release line.  This is a special release to fix a regression in the HTTP
binary upgrade response body and add a missing CLI flag to adjust the max
header size of the http parser.

https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.15.0

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libhttpparser: bump version to v2.9.0
Peter Korsgaard [Thu, 3 Jan 2019 14:44:21 +0000 (15:44 +0100)]
package/libhttpparser: bump version to v2.9.0

Needed by nodejs v8.15.0+

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/enlightenment: bump to version 0.22.4
Romain Naour [Thu, 3 Jan 2019 18:21:49 +0000 (19:21 +0100)]
package/enlightenment: bump to version 0.22.4

See:
https://www.enlightenment.org/news/e0.22.4_release

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoconfigs/bananapro: bump Linux and U-Boot version
Jörg Krause [Thu, 3 Jan 2019 20:08:15 +0000 (21:08 +0100)]
configs/bananapro: bump Linux and U-Boot version

Bump Linux to version 4.14.91 and U-Boot to version 2018.11.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/terminology: bump to version 1.3.2
Romain Naour [Wed, 2 Jan 2019 23:10:26 +0000 (00:10 +0100)]
package/terminology: bump to version 1.3.2

See:
https://sourceforge.net/p/enlightenment/mailman/message/36497308/

This version contain a fix [1] for newer meson (0.49.0) [2]:

[1] https://git.enlightenment.org/apps/terminology.git/commit/?id=80e36857a28bb2a0b0fdd58b0cd86b110a180efc
[2] https://github.com/mesonbuild/meson/issues/3600

This affect terminology build system since data/themes/meson.build
use "in" which is now a reserved keyword.

Fixes:
http://autobuild.buildroot.net/results/6e4/6e445e8f0c973fad58937824452aac9b593b3e8d/build-end.log

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/efivar: bump version to 35
Peter Korsgaard [Thu, 3 Jan 2019 09:58:41 +0000 (10:58 +0100)]
package/efivar: bump version to 35

Fixes:
http://autobuild.buildroot.net/results/545/545013d3977b3eddd27ca0fc21cc1248f3bb0dbb/
http://autobuild.buildroot.net/results/695/6952b99eb0b0e85b2f5408accdca2b4dd17d14c0/

Includes a workaround for -Werror=stringop-overflow= erroring out on strncpy
on some toolchains:

https://github.com/rhboot/efivar/commit/7461d47cddf1cb27b1aeb646e1cdc9f7ecc6219a

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoconfigs/clearfog: update U-Boot and kernel
Baruch Siach [Wed, 2 Jan 2019 10:28:10 +0000 (12:28 +0200)]
configs/clearfog: update U-Boot and kernel

Bump U-Boot and kernel to their latest releases.

Remove the documented limitations. Recent kernels added support for the
SOM SPI flash, and the carrier SFP port.

Mention the 'dd' command in the warning text. No script is involved.

Cc: Jan Kundrát <jan.kundrat@cesnet.cz>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>