Bernd Kuhls [Sun, 28 Feb 2016 20:18:26 +0000 (21:18 +0100)]
package/vlc: add optional support for minizip
When minizip was compiled before, vlc will use it as optional
dependency:
$ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/lib/vlc/plugins/access/libzip_plugin.so | grep NEEDED | sort
0x0000000000000001 (NEEDED) Shared library: [libc.so.1]
0x0000000000000001 (NEEDED) Shared library: [libdl.so.1]
0x0000000000000001 (NEEDED) Shared library: [libintl.so.8]
0x0000000000000001 (NEEDED) Shared library: [libminizip.so.1]
[...]
The build system offers no option to en-/disable minizip support,
the same is valid for zlib support:
https://git.videolan.org/?p=vlc.git;a=blob;f=configure.ac;h=
be658816bcda642090e1cff20d93e61b25299250;hb=HEAD#l831
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sun, 28 Feb 2016 20:18:25 +0000 (21:18 +0100)]
package/vlc: add optional support for libssh2
When libssh2 was compiled before, vlc will use it as optional
dependency:
$ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/lib/vlc/plugins/access/libsftp_plugin.so | grep NEEDED
0x0000000000000001 (NEEDED) Shared library: [libvlccore.so.8]
0x0000000000000001 (NEEDED) Shared library: [librt.so.1]
0x0000000000000001 (NEEDED) Shared library: [libintl.so.8]
0x0000000000000001 (NEEDED) Shared library: [libpthread.so.1]
0x0000000000000001 (NEEDED) Shared library: [libdl.so.1]
0x0000000000000001 (NEEDED) Shared library: [libm.so.1]
0x0000000000000001 (NEEDED) Shared library: [libssh2.so.1]
[...]
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sun, 28 Feb 2016 20:18:24 +0000 (21:18 +0100)]
package/vlc: add optional support for libvncserver
When libvncserver was compiled before, vlc will use it as optional
dependency:
$ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/lib/vlc/plugins/access/libvnc_plugin.so | grep NEEDED
0x0000000000000001 (NEEDED) Shared library: [libvlccore.so.8]
0x0000000000000001 (NEEDED) Shared library: [librt.so.1]
0x0000000000000001 (NEEDED) Shared library: [libintl.so.8]
0x0000000000000001 (NEEDED) Shared library: [libdl.so.1]
0x0000000000000001 (NEEDED) Shared library: [libvncclient.so.0]
[...]
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sun, 28 Feb 2016 20:18:23 +0000 (21:18 +0100)]
package/vlc: add optional support for libcddb
When libcddb was compiled before, vlc will use it as optional
dependency:
$ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/lib/vlc/plugins/access/libcdda_plugin.so | grep NEEDED | sort
0x0000000000000001 (NEEDED) Shared library: [libcddb.so.2]
[...]
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sun, 28 Feb 2016 20:18:22 +0000 (21:18 +0100)]
package/vlc: bump version to 2.2.2
Removed two patches applied upstream.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Waldemar Brodkorb [Sat, 5 Mar 2016 10:39:54 +0000 (11:39 +0100)]
ltp-testsuite: update to latest, fix uClibc-ng issues
Update to latest ltp-testsuite release, which resolves sparc64/sparc
autobuild failures:
http://autobuild.buildroot.net/results/
a6445df26514dfa9cd7e5b9d34b4687d46a8d19b/
Furthermore it should fix any other uClibc-ng related issues.
0001-fix-build-on-uClibc-exp10.patch removed, as uClibc-ng 1.0.12
contains exp10() implementation.
0001-fix-uClibc-build.patch suggested upstream.
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 5 Mar 2016 10:40:30 +0000 (11:40 +0100)]
package/gnuradio: bump version to 3.7.9.1
Rebased patch #0001.
Removed patch #0002, applied upstream:
https://github.com/gnuradio/gnuradio/commit/
3e2dc168467304212328abd061bf10f0c511f17f
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 5 Mar 2016 10:40:29 +0000 (11:40 +0100)]
package/omniorb: bump version to 4.2.1
Removed patch applied upstream:
https://sourceforge.net/p/omniorb/svn/6296/#diff-4
Please note that upstream also provides version 4.2.1-2
https://sourceforge.net/projects/omniorb/files/omniORB/omniORB-4.2.1/
This version was a follow-up to 4.2.1 to provide VS platform files:
https://sourceforge.net/p/omniorb/svn/6311/#diff-5
https://sourceforge.net/p/omniorb/svn/6313/#diff-2
Because they are not needed for buildroot we stick to version 4.2.1.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 5 Mar 2016 10:40:28 +0000 (11:40 +0100)]
package/transmission: bump version to 2.90
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 5 Mar 2016 10:40:27 +0000 (11:40 +0100)]
package/znc: bump version to 1.6.3
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Romain Naour [Sat, 5 Mar 2016 11:31:36 +0000 (12:31 +0100)]
package/gcc: 4.9.x: backport a fix for libcap-ng issue on nios2
The patch is part of gcc 5.3 release.
Fixes:
http://autobuild.buildroot.net/results/901/
90186d1fe134b804c0101554296b1235dc0ccbb0
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Sergio Prado <sergio.prado@e-labworks.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Fri, 4 Mar 2016 11:16:29 +0000 (08:16 -0300)]
linux: bump default to version 4.4.4
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Fri, 4 Mar 2016 11:16:28 +0000 (08:16 -0300)]
linux-headers: bump 3.{10, 14}.x and 4.4.x series
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Fri, 4 Mar 2016 10:47:40 +0000 (07:47 -0300)]
php: bump to version 5.6.19
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Fri, 4 Mar 2016 10:15:10 +0000 (11:15 +0100)]
glibc: backport patch to fix Microblaze build issue
This commit backports a glibc patch that fixes the build of glibc 2.22
on the Microblaze architecture.
Fixes:
http://autobuild.buildroot.org/results/673/
67348953fac469affd1965e04d61485ebb41e252/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Fri, 4 Mar 2016 15:47:38 +0000 (16:47 +0100)]
busybox: tweak IPv6/largefile handling
Fixes #8736
When IPv6 and largefile options were removed from Buildroot, the code to
force these options in busybox were still left in.
There's no strong reason to forcefully enable these options (only to disable
options if the system cannot support it like we do for nommu), so instead
enable the options in our default defconfig, allowing people to override
this if they use a custom config.
While we're at it, enable the prefer-ipv4 option so network applets like
ntpd doesn't fail when dual stacked hosts are resolved from a system without
IPv6 support enabled in the kernel.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 19:45:34 +0000 (16:45 -0300)]
sqlite: bump to version 3.11.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gary Bisson [Thu, 3 Mar 2016 14:57:18 +0000 (15:57 +0100)]
board/boundarydevices: rename folder and update readme
It didn't make sense to keep the U-Boot scripts and post build/image
scripts under the nitrogen6x folder since they apply for all our
platforms.
Also update the readme.txt to make it clearer which defconfig should
be used depending on the platform targeted.
Signed-off-by: Gary Bisson <gary.bisson@boundarydevices.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gary Bisson [Thu, 3 Mar 2016 14:57:17 +0000 (15:57 +0100)]
board/boundarydevices: update u-boot scripts for i.MX7 support
Also remove useless tfp410 enablement since a basic kernel driver has
been added.
Signed-off-by: Gary Bisson <gary.bisson@boundarydevices.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 13:57:26 +0000 (10:57 -0300)]
stunnel: bump to version 5.31
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 12:58:52 +0000 (09:58 -0300)]
clamav: bump to version 0.99.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 12:58:19 +0000 (09:58 -0300)]
exim: security bump to version 4.86.2
Fixes:
CVE-2016-1531 - All installations having Exim set-uid root and using
'perl_startup' are vulnerable to a local privilege escalation. Any user
who can start an instance of Exim (and this is normally *any* user) can
gain root privileges. If you do not use 'perl_startup' you *should* be
safe.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 12:58:05 +0000 (09:58 -0300)]
cpio: add security patch to fix CVE-2016-2037
Fixes:
CVE-2016-2037 - The cpio_safer_name_suffix function in util.c in cpio
2.11 allows remote attackers to cause a denial of service (out-of-bounds
write) via a crafted cpio file.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 12:31:22 +0000 (09:31 -0300)]
python-cryptography: bump to version 1.2.3
Is now compatible with openssl 1.0.2g+ hence fixes:
http://autobuild.buildroot.net/results/5fc/
5fc28bafa3cd7171ce6343d21f65af090536f443/
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 12:03:38 +0000 (09:03 -0300)]
attr: disable gettext for host variant
Otherwise it leads to build failure and we don't need it. Fixes:
http://autobuild.buildroot.net/results/59e/
59e7e1db122523b292d34405df6dca9faa616da2/
Signed-off-by: Gustavo Zacarias <gustavo.zacarias@free-electrons.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 12:03:03 +0000 (09:03 -0300)]
gnutls: bump to version 3.4.10
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Thu, 3 Mar 2016 06:18:25 +0000 (07:18 +0100)]
package/kodi-pvr-mediaportal-tvserver: remove patch applied upstream
The recent version bump forgot to remove the patch.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Thu, 3 Mar 2016 06:18:24 +0000 (07:18 +0100)]
package/kodi-pvr-argustv: remove patch applied upstream
The recent version bump forgot to remove the patch.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Thu, 3 Mar 2016 01:32:40 +0000 (22:32 -0300)]
graphite2: bump to version 1.3.6
Also change SOURCE since the tarball got renamed with the bump.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:21 +0000 (23:09 +0100)]
package/kodi-visualisation-shadertoy: bump version, add hash
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:20 +0000 (23:09 +0100)]
package/kodi-screensaver/visualisation-*: mass version bump, add hashes
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:19 +0000 (23:09 +0100)]
package/kodi-pvr-*: mass version bump, add hashes
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:18 +0000 (23:09 +0100)]
package/kodi-audio??coder-*: mass version bump, add hashes
This patch bumps all audio-en- and decoder addons.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Wed, 2 Mar 2016 22:35:00 +0000 (19:35 -0300)]
iputils: really remove patch
It seems the appropiate git rm was missing from
8461038f. Fixes:
http://autobuild.buildroot.net/results/1b1/
1b1f63e8c7ba10d4055fb422af6a15c044efc9a6/
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Wed, 2 Mar 2016 22:46:42 +0000 (23:46 +0100)]
nvme: fix legal-info
Fixes:
http://autobuild.buildroot.net/results/441/
441afa17dfd6f259642526850d92f1c9965d8353/
The license file is called LICENSE, not COPYING.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Wed, 2 Mar 2016 21:07:51 +0000 (18:07 -0300)]
lksctp-tools: new package
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Reviewed-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Wed, 2 Mar 2016 21:33:31 +0000 (18:33 -0300)]
x265: depends on BR2_TOOLCHAIN_HAS_SYNC_4
It uses __sync_fetch_and_add_4() and other 32-bit atomics, fixes:
http://autobuild.buildroot.net/results/6cf/
6cf4cdfdcd00f92176fd8a901884a3fd0c784f24/
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Wed, 2 Mar 2016 21:40:01 +0000 (18:40 -0300)]
sg3_utils: bump to version 1.42
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Wed, 2 Mar 2016 21:44:42 +0000 (18:44 -0300)]
lz4: fix legal info
It moved, and programs are GPLv2+. Fixes:
http://autobuild.buildroot.net/results/70a/
70a526b265bb16a6be9f25c5044c65070706171c/
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Wed, 2 Mar 2016 21:07:21 +0000 (18:07 -0300)]
cantarell: bump to version 0.0.24
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Wed, 2 Mar 2016 21:43:15 +0000 (22:43 +0100)]
webkitgtk24: fix gstreamer dependency
Fixes:
http://autobuild.buildroot.net/results/a28/
a280f23cc29f77ab440edbda05b4e58d6f4856e7/
The .mk file was checking for gst1-plugins-base but then adding
gst1-plugins-good to dependencies.
According to Source/autotools/FindDependencies.m4, the video and web audio
options need the .pc files provided by gst1-plugins-base, so use that.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Wed, 2 Mar 2016 20:35:12 +0000 (21:35 +0100)]
docs/website/news.html: add 2016.02 announcement link
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Wed, 2 Mar 2016 20:25:00 +0000 (21:25 +0100)]
Merge branch 'next'
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Danomi Manchego [Wed, 2 Mar 2016 02:56:07 +0000 (21:56 -0500)]
avahi: move libdns_sd compat hook definition inside conditional block
As directed in the buildroot manual, "Optional hooks: keep hook
definition and assignment together in one if block". And also
to be consistent with the rest of avahi.mk.
Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Peter Korsgaard [Wed, 2 Mar 2016 20:09:15 +0000 (21:09 +0100)]
Kickoff 2016.05 cycle
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Tue, 1 Mar 2016 20:47:30 +0000 (21:47 +0100)]
Update for 2016.02
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Baruch Siach [Tue, 1 Mar 2016 19:09:23 +0000 (21:09 +0200)]
slang: fix static link with readline
slang forgets to link with ncurses that is a dependency of readline when
linking the slsh binary. Correct this.
While at it, also make sure to use staging ncurses5-config script and not the
host one. slang uses ncurses5-config to find terminfo location, and only
staging ncurses5-config provides the correct run-time location.
Fixes:
http://autobuild.buildroot.net/results/1dc/
1dc52048254c32a24070fef1c1039cebb32e7ac1/
http://autobuild.buildroot.net/results/c17/
c176511cbb147c2d8cb0ec0ff3c1612ce8971cb8/
http://autobuild.buildroot.net/results/78d/
78dc2ba07b1d7f888aab94e223f3e0b1a1df3af5/
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 1 Mar 2016 18:46:09 +0000 (15:46 -0300)]
heirloom-mailx: disable SSLv2 support
Now that openssl has dropped SSLv2 support from the latest security bump
we need to patch it out here as well. Fixes:
http://autobuild.buildroot.net/results/dab/
dab1629cfcb5cb33706d0c762dba57baa43299a5/
Patch status: debian upstream.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Tue, 1 Mar 2016 18:52:49 +0000 (19:52 +0100)]
tn5250: don't reference SSLv2/v3 functions if openssl is built without them
Fixes:
http://autobuild.buildroot.net/results/83e/
83e29482cad6adef18a0e97bc8e75df302467dbb/
The recent openssl security bump disabled SSLv2 support, but tn5250 was
still referencing SSLv2 functions breaking the build.
Include a patch from OpenBSD to only reference the SSLv2 / SSLv3 symbols if
openssl is built with support for them.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Tue, 1 Mar 2016 17:13:58 +0000 (18:13 +0100)]
python-m2crypto: don't reference SSLv2 functions if openssl is built without SSLv2 support
Fixes:
http://autobuild.buildroot.net/results/018/
0183ba8c9fccc87f9e72279c49c2fdc1a9fcb556/
The recent openssl security bump disabled SSLv2 support, but python-m2crypto
was still referencing SSLv2 functions causing undefined symbols when the
module was imported. Backport an upstream patch to only reference these
symbols if openssl is built with SSLv2 support.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Antoine Ténart [Tue, 1 Mar 2016 12:39:46 +0000 (13:39 +0100)]
imx-gpu-viv: fix build dependencies when linking against libGAL.so
Packages like QT5 Base with OpenGL and X support link against libGAL.so
at build time. This results in an error because some X functions used
in libGAL.so aren't referenced as the libXdamage, libXext and libXfixes
packages aren't built and installed into sysroot at the time. Fix this
by adding these three packages as build dependencies of imx-gpu-viv.
Signed-off-by: Antoine Tenart <antoine.tenart@free-electrons.com>
Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 1 Mar 2016 14:38:36 +0000 (11:38 -0300)]
openssl: security bump to version 1.0.2g
Fixes:
CVE-2016-0800 - Cross-protocol attack on TLS using SSLv2 (DROWN)
CVE-2016-0705 - Double-free in DSA code
CVE-2016-0798 - Memory leak in SRP database lookups
CVE-2016-0797 - BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption
CVE-2016-0799 - Fix memory issues in BIO_*printf functions
CVE-2016-0702 - Side channel attack on modular exponentiation
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Sergio Prado [Tue, 1 Mar 2016 10:58:55 +0000 (07:58 -0300)]
mongodb: bump to version 3.3.2
Signed-off-by: Sergio Prado <sergio.prado@e-labworks.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Mon, 29 Feb 2016 21:46:50 +0000 (18:46 -0300)]
radvd: bump to version 2.12
musl build patch is upstream so it's no longer necessary.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 1 Mar 2016 11:47:28 +0000 (08:47 -0300)]
harfbuzz: bump to version 1.2.3
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Baruch Siach [Tue, 1 Mar 2016 11:34:55 +0000 (13:34 +0200)]
zsh: use the correct target pcre-config
zsh configure script mis-detects the location of pcre-config, and may use that
of host-pcre or that of the host instead of the target. Make configure use the
correct pcre-config.
Thanks to Thomas Petazzoni for pointing me at the right direction.
Fixes:
http://autobuild.buildroot.net/results/b12/
b12aadf3016dab0941cae780fa9ee7bf9be8fcda/
http://autobuild.buildroot.net/results/8e8/
8e8b12dbca4ef8cac2e5f33cd3cdcddd8e849840/
http://autobuild.buildroot.net/results/473/
473197ec8e323ea7ae0e29e6363525dc42f9da2c/
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Luca Ceresoli [Tue, 1 Mar 2016 11:01:04 +0000 (12:01 +0100)]
docs/manual: add section about patch licensing
Use the same text that is used in COPYING.
Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
Cc: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Cc: Peter Korsgaard <peter@korsgaard.com>
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Cc: Steve Calfee <stevecalfee@gmail.com>
Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Vicente Olivert Riera [Mon, 29 Feb 2016 16:39:42 +0000 (16:39 +0000)]
sox: disable SSP when using MIPS Codescape toolchains
MIPS Codescape toolchains don't support stack-smashing protection
despite of using glibc, therefore we see failures like this one:
mips-img-linux-gnu/bin/ld: cannot find -lssp
Fixes:
http://autobuild.buildroot.net/results/957/
95721f7b88c46a20202fb02e408817097df965c3/
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Luca Ceresoli [Tue, 1 Mar 2016 10:08:07 +0000 (11:08 +0100)]
CHANGES: fix typo
Cc: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
niranjan.reddy [Tue, 1 Mar 2016 06:21:56 +0000 (11:51 +0530)]
libfcgi:add security patch for CVE-2012-6687
Fix-CVE-2012-6687 - remote attackers cause a denial of service (crash)
via a large number of connections (http://www.cvedetails.com/cve/CVE-2012-6687/).
use poll in os_unix.c instead of select to avoid problem with > 1024 connections.
The patch libfcgi_2.4.0-8.3.debian.tar.xz is taken from the below link:
(https://launchpad.net/ubuntu/+source/libfcgi/2.4.0-8.3)
The next release of libfcgi is 2.4.1 which may have this fix is yet to be released
officially.
Signed-off-by: Niranjan Reddy <niranjan.reddy@rockwellcollins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Thomas Petazzoni [Wed, 24 Feb 2016 14:04:09 +0000 (15:04 +0100)]
linux-headers: fix circular dependency when HEADERS_AS_KERNEL is used
The linux-headers -> linux dependency causes a circular dependency, breaking
the source/legal-info/graph-depends/.. targets:
make graph-depends
Getting targets
Getting dependencies for ['toolchain-buildroot', 'toolchain', 'busybox',
'glibc', 'initscripts', 'linux-headers', 'skeleton', 'linux',
'host-fakeroot', 'host-makedevs', 'rootfs-cpio', 'rootfs-initramfs']
Getting dependencies for ['host-kmod', 'host-gcc-final',
'host-gcc-initial', 'host-gawk']
Getting dependencies for ['host-gmp', 'host-binutils', 'host-pkgconf',
'host-mpfr', 'host-mpc']
Getting dependencies for ['host-m4']
Recursion detected for : toolchain
which is a dependency of: linux
which is a dependency of: linux-headers
which is a dependency of: glibc
which is a dependency of: host-gcc-final
which is a dependency of: toolchain-buildroot
which is a dependency of: toolchain
Makefile:721: recipe for target 'graph-depends' failed
make: *** [graph-depends] Error 1
Fix it by instead duplicating in linux-headers the 10-20 lines of linux.mk
logic that infer the _SOURCE/_SITE/_VERSION from the BR2_LINUX_KERNEL_*
variables.
This does mean that we extract the kernel sources twice though.
[Peter: use same git/hg tarball as linux kernel to not clone twice, minor fixes]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:17 +0000 (23:09 +0100)]
package/ffmpeg: Remove patch not needed anymore for Kodi 16.0-Jarvis
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:16 +0000 (23:09 +0100)]
package/kodi: Remove dependency for BR2_TOOLCHAIN_GCC_AT_LEAST_4_7 from sub packages
Kodi itself already depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_7, there is
no need to duplicate this as reverse dependencies in sub options which
depend on Kodi.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:15 +0000 (23:09 +0100)]
package/kodi: Remove dependency for BR2_STATIC_LIBS from sub packages
Kodi itself already depends on !BR2_STATIC_LIBS, there is no need to
duplicate this as reverse dependencies in sub options which depend on
Kodi.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:14 +0000 (23:09 +0100)]
package/kodi: reorder select/depends
>From [1]:
"Even though the ordering has absolutely no consequences in Kconfig, it
is not logical (when reading). It is more logical and far easier to
understand when depends come first, followed by the selects."
Also, the Config.in example in the manual suggests to use this coding
style [2].
[1] http://lists.busybox.net/pipermail/buildroot/2015-October/142955.html
[2] http://buildroot.uclibc.org/downloads/manual/manual.html#writing-rules-config-in
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:13 +0000 (23:09 +0100)]
package/kodi: not available using a musl-based toolchain
The build stops with
configure: error: unsupported host (i586-buildroot-linux-musl)
due to musl not being supported in
https://github.com/xbmc/xbmc/blob/Isengard/m4/xbmc_arch.m4
Removing this obstacle will show that musl is really not being
supported, the build will fail:
In file included from emu_msvcrt.cpp:64:0:
emu_msvcrt.h:93:3: error: ‘__off64_t’ does not name a type
__off64_t dll_lseeki64(int fd, __off64_t lPos, int iWhence);
^
emu_msvcrt.h:94:3: error: ‘__off_t’ does not name a type
__off_t dll_lseek(int fd, __off_t lPos, int iWhence);
^
I know these problems are fixable and the voidlinux projects seems to
have done it already for 15.2-Isengard:
https://github.com/voidlinux/void-packages/tree/
99f74705bc6520297d689fae4bcc9606c71ad34f/srcpkgs/kodi/patches
For Jarvis-16.0 these patches have to be rebased at a later stage.
For now block the Kodi package with musl-based toolchains to avoid
build errors.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:12 +0000 (23:09 +0100)]
package/kodi: enable samba support with uClibc toolchain
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:11 +0000 (23:09 +0100)]
package/kodi: bump version to 16.0-Jarvis
Add two new hard dependencies:
- libdcadec
https://github.com/xbmc/xbmc/commit/
0997117a659a09e7b1c5bcb110f3526ea16698be
- libcrossguid
https://github.com/xbmc/xbmc/commit/
6f8171f53992fc2eaabf71f6fa47ebed1da0d43d
Kodi moved to C++11 so we need gcc >= 4.7:
https://github.com/xbmc/xbmc/pull/6412
wavpack support was removed in favour of ffmpeg:
https://github.com/xbmc/xbmc/commit/
7916902c9e6f7a523265594f3ad7f921f93f1cd4
Enabled giflib support by default.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:10 +0000 (23:09 +0100)]
package/kodi-platform: bump version, add hash
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:09 +0000 (23:09 +0100)]
package/libcec: bump version, add hash
Also remove patch committed upstream.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:08 +0000 (23:09 +0100)]
package/libplatform: bump version, add hash
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:07 +0000 (23:09 +0100)]
package/kodi-screensaver-rsxs: new package
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 20 Feb 2016 22:09:06 +0000 (23:09 +0100)]
package/kodi-visualisation-goom: new package
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Thomas Petazzoni [Mon, 29 Feb 2016 22:17:06 +0000 (23:17 +0100)]
package/lz4: only use PREFIX for host installation
As noted by Peter Korsgaard, using DESTDIR=$(HOST_DIR) and PREFIX=/usr
for the host installation is useless and actually incorrect (the
pkg-config file contains incorrect paths). Instead, using
PREFIX=$(HOST_DIR)/usr is simpler, and actually correct.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Thomas Petazzoni [Mon, 29 Feb 2016 22:11:38 +0000 (23:11 +0100)]
Config.in.legacy: fix separator for 2016.05 legacy options
Since we opened up the next branch, a number of options have been
added to Config.in.legacy. However, they are located under the "legacy
options removed in 2016.02", which is not correct. This commit fixes
that by adding the "legacy options removed in 2016.05" header, and
restoring the one related to 2016.02 at the right location.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Wed, 24 Feb 2016 12:43:23 +0000 (09:43 -0300)]
squid: security bump to version 3.5.15
Fixes:
SQUID-2016:2 - Multiple Denial of Service issues in HTTP Response
processing.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 22 Feb 2016 12:07:24 +0000 (09:07 -0300)]
glibc: remove version 2.21
Mask out glibc for sparc as well since it's no longer available.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:22 +0000 (21:55 +0000)]
package/systemd: add optional support for quotacheck
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
[Thomas: rewrap Config.in help text.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:21 +0000 (21:55 +0000)]
package/systemd: add optional support for bootchart
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
[Thomas: rewrap Config.in help text.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:20 +0000 (21:55 +0000)]
package/systemd: add optional support for vconsole
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
[Thomas: rewrap Config.in help text.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:19 +0000 (21:55 +0000)]
package/systemd: add optional support for binfmt
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
[Thomas: rewrap Config.in help text.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Thomas Petazzoni [Mon, 29 Feb 2016 21:51:57 +0000 (22:51 +0100)]
package/systemd: fix wrong capitalization
Reported-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:17 +0000 (21:55 +0000)]
package/systemd: remove networkd depends from timesyncd
systemd-timesyncd can function without systemd-networkd.
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:16 +0000 (21:55 +0000)]
package/systemd: explicitly --enable-microhttpd
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
[Thomas: fix commit title.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:15 +0000 (21:55 +0000)]
package/systemd: add --enable/disable-libcurl
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:14 +0000 (21:55 +0000)]
package/systemd: add --enable/disable-zlib
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:13 +0000 (21:55 +0000)]
package/systemd: add --enable/disable-lz4
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:12 +0000 (21:55 +0000)]
package/systemd: add --enable/disable-bzip2
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:11 +0000 (21:55 +0000)]
package/systemd: remove BR2_PACKAGE_SYSTEMD_ALL_EXTRAS
The option was a bit misleading since it only selected additional
libraries without --enable/disabling any features. Including all of them
here would add a lot of bloat so instead, it is replaced with notes
detailing which features each library enables.
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
[Thomas:
- slightly tweak Config.in help text, as suggested by Arnout.
- add Config.in.legacy handling for BR2_PACKAGE_SYSTEMD_ALL_EXTRAS,
as suggested by Arnout.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gabe Evans [Thu, 25 Feb 2016 21:55:10 +0000 (21:55 +0000)]
package/lz4: bump version to r131
systemd v228 requires lz4 >= 125
Signed-off-by: Gabe Evans <gabe@hashrabbit.co>
[Thomas: only pass PREFIX=/usr at install time instead of using
LZ4_MAKE_OPTS, and also pass it for the host installation.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Peter Korsgaard [Mon, 29 Feb 2016 21:00:43 +0000 (22:00 +0100)]
CHANGES: Add note about the recent linux timeconst.pl patch feature
This was added just before -rc1, but was forgotten in CHANGES.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Stanislav Vasic [Mon, 29 Feb 2016 10:19:23 +0000 (11:19 +0100)]
libasplib: bump version and change source location
Signed-off-by: Stanislav Vlasic <svlasic@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Schenk, Michael [Mon, 29 Feb 2016 05:46:06 +0000 (06:46 +0100)]
lirc-tools: also install to staging
This commit adds LIRC_TOOLS_INSTALL_STAGING = YES to the lirc-tools
package to get the library headers into sysroot, which is needed to
develop lirc based applications.
Signed-off-by: Michael Schenk <michael.schenk@albistechnologies.com>
[Thomas: rework commit log.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 29 Feb 2016 12:57:06 +0000 (09:57 -0300)]
powerpc-utils: needs dynamic toolchain
Fixes:
http://autobuild.buildroot.net/results/a12/
a1240ed6facb99518d71153c099dbd7d3d847af6/
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 29 Feb 2016 11:59:32 +0000 (08:59 -0300)]
openssh: bump to version 7.2p1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 29 Feb 2016 11:59:49 +0000 (08:59 -0300)]
lvm2: bump to version 2.02.144
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 29 Feb 2016 11:59:48 +0000 (08:59 -0300)]
cryptsetup: bump to version 1.7.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 29 Feb 2016 15:27:25 +0000 (12:27 -0300)]
xerces: enable parallel builds
It seems to be in place for historical reasons since it seems to build
just fine on my test rigs.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 29 Feb 2016 15:27:10 +0000 (12:27 -0300)]
xerces: security bump to version 3.1.3
Fixes:
CVE-2016-0729 - Apache Xerces-C XML Parser Crashes on Malformed Input
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Peter Seiderer [Sat, 20 Feb 2016 22:08:03 +0000 (23:08 +0100)]
qt5tools: new package
- host programs: lconvert, lrelease and lupdate
- target programs: pixeltool, qtdiag, qtpath and qtplugininfo
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
projects / buildroot.git / log