Gustavo Zacarias [Sat, 14 May 2016 15:29:11 +0000 (12:29 -0300)]
file: bump to version 5.27
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Sat, 14 May 2016 15:28:45 +0000 (12:28 -0300)]
mpg123: bump to version 1.23.4
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Tue, 3 May 2016 18:30:14 +0000 (15:30 -0300)]
lft: new package
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
[Thomas: use complete license name in <pkg>_LICENSE, i.e "VOSTROM Public
License for Open Source".]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Fabio Estevam [Fri, 13 May 2016 20:33:25 +0000 (17:33 -0300)]
post-image: Do not hardcode the genimage.cfg path
Instead of hardcoding the genimage.cfg path, let's add a BOARD_DIR
variable to improve readability.
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Sébastien Szymanski [Wed, 11 May 2016 14:07:48 +0000 (16:07 +0200)]
python-flask-jsonrpc: new package
Signed-off-by: Sébastien Szymanski <sebastien.szymanski@armadeus.com>
Reviewed-by: Yegor Yefremov <yegorslists@googlemail.com>
[Thomas:
- make python-flask a runtime dependency only, as noticed by Yegor
Yefremov.
- use setup.py as the license file.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Fabio Estevam [Fri, 13 May 2016 18:19:12 +0000 (15:19 -0300)]
configs: new configuration for NXP i.MX7 SabreSD
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Baruch Siach [Fri, 13 May 2016 14:01:26 +0000 (17:01 +0300)]
libinput: remove unneeded patch
The log_msg symbol conflict was fixed in libevdev commit
e4c315fc1603 (Rename
symbols leaking from static library to avoid name clashes, 2014-08-18) that
was included in version 1.3 of libevdev. Remove the patch that used to fix the
issue of log_msg symbol conflict with libevedev, which is a direct dependency
of libinput.
Cc: Romain Naour <romain.naour@openwide.fr>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Vicente Olivert Riera [Fri, 13 May 2016 12:21:13 +0000 (13:21 +0100)]
postgresql: bump version to 9.5.3
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Nathaniel Roach [Thu, 12 May 2016 07:17:20 +0000 (15:17 +0800)]
package/audit: Remove redundant mkdir
install -D creates the folder, so we don't need the mkdir command
Signed-off-by: Nathaniel Roach <nroach44@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Yegor Yefremov [Thu, 12 May 2016 07:55:20 +0000 (09:55 +0200)]
python-setproctitle: bump to version 1.1.10
Change download location.
Fixes:
http://autobuild.buildroot.net/results/dac/
dac6e291dae9f42d71f1e9de6cf0362d613b2d5a
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Yann E. MORIN [Sat, 7 May 2016 16:14:29 +0000 (18:14 +0200)]
core/legal-info: install source archives in their own sub-dir
Currently, we put all source archives side-by-side in the same
directory.
Since we're about to also save individual patches that were applied
on those sources, we don't want to make that directory a complete
mess of unassorted files.
So, we install each source archive in its own sub-directory, where
we'll later store the patches too. Store that location in a variable,
so it can be re-used later on (to install patches in a future commit).
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Luca Ceresoli <luca@lucaceresoli.net>
Acked-by: Luca Ceresoli <luca@lucaceresoli.net>
Tested-by: Luca Ceresoli <luca@lucaceresoli.net>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Reviewed-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yann E. MORIN [Sat, 7 May 2016 16:14:28 +0000 (18:14 +0200)]
core/pkg-generic: add variable to store the package rawname-version
Introduce a new per-package variable to store the 'rawname-version'
tuple, instead of computing it every time we need it.
Currently, it's only a single location, but follow-up patches will
introduce more use of it.
Reported-by: Luca Ceresoli <luca@lucaceresoli.net>
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Luca Ceresoli <luca@lucaceresoli.net>
Reviewed-by: Luca Ceresoli <luca@lucaceresoli.net>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yann E. MORIN [Sat, 7 May 2016 16:14:27 +0000 (18:14 +0200)]
core/legal-info: use the helper to install source archives
.. and use $(Q) instead of a hard-coded @.
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Luca Ceresoli <luca@lucaceresoli.net>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yann E. MORIN [Sat, 7 May 2016 16:14:26 +0000 (18:14 +0200)]
support/scripts: add helper to hardlink-or-copy
When preparing the legal-info, the source archives are copied in the
legal-info/ output directory. When the archives are big, it can take
quite a bit of time and unnecessarily uses disk space. When the
legal-info output directory is on the same filesystem as the BR2_DL_DIR,
we can easily reduce copy time and disk usage by just using hardlins
instead of copying. However, the BR2_DL_DIR may be on a different
filesystem, so we must fallback to copying in this case
Introduce a helper script that copies a source file into a destination
directory, by first attempting to hard-link, and falling back to a
plain copy in case the hardlink fails.
In case the destination already exists, it is forcibly removed first, to
avoid clobering any existing target file (and especially any hardlink to
it), since cp -f does not remove the destination file, but clobbers it.
In some situations, it will be necessary that the destination file is
named differently than the source, so if a third argument is specified,
it is treated as the basename of the destination file.
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Luca Ceresoli <luca@lucaceresoli.net>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Alexey Brodkin [Tue, 10 May 2016 21:05:04 +0000 (00:05 +0300)]
toolchain: bump ARC tools to arc-2016.03-rc2
This change switches ARC tools to RC2 of the most recent arc-2016.03
version.
Essentially once final release is ready version will be bumped again.
ARC GNU tools of version arc-2016.03 bring some quite significant
changes like:
* Binutils v2.26+ (upstream commit id
202ac19 with additional ARC patches)
* GCC v4.8.5
* GDB 7.10
More about changes, improvements and fixes could be found here:
https://github.com/foss-for-synopsys-dwc-arc-processors/toolchain/releases/tag/arc-2016.03-rc2
Also in this change we realign custom Buildroot patches for binutils and
gcc for ARC tools. Looks like earlier most of arch-independent patches
for binutils and gcc were either unintentionally removed or not even
added in patch folders for ARC's binutils and gcc. Now arch-independent
patches for binutils-2.26 and gcc-4.8.5 were added in
package/{binutils|gcc}/arc-2016.03-rc2 folders.
Build and run-tested in nSIM for both ARC700 and ARC HS38.
Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com>
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabio Estevam [Wed, 11 May 2016 20:59:28 +0000 (17:59 -0300)]
barebox: bump to version 2016.05.0
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard [Tue, 10 May 2016 21:23:00 +0000 (23:23 +0200)]
Update for 2016.05-rc1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 10 May 2016 18:25:46 +0000 (15:25 -0300)]
imagemagick: security bump to version 6.9.4-1
Fixes:
Fix GetNextToken() off by one error.
Check for buffer overflow in magick/draw.c/DrawStrokePolygon().
Remove support for internal ephemeral coder.
These are all related to the recent ImageTragick bundle that were
partially fixed in 6.9.3-10 as well.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 10 May 2016 13:15:31 +0000 (10:15 -0300)]
php-geoip: fix legal info
The LICENSE file is gone, so use the lone .c source fle. Fixes:
http://autobuild.buildroot.net/results/acd/
acd763e7eefb8be2bbd0bf973bb7855fceee7377/
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Tue, 10 May 2016 13:01:37 +0000 (10:01 -0300)]
libksba: security bump to version 1.3.4
Fixes:
CVE-2016-4356 - Fix encoding of invalid utf-8 strings in
dn.c" and "read access out of bounds".
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Vicente Olivert Riera [Tue, 10 May 2016 11:39:47 +0000 (12:39 +0100)]
qemu: bump version to 2.5.1.1
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Tue, 10 May 2016 11:34:44 +0000 (08:34 -0300)]
libglib2: bump to version 2.48.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yegor Yefremov [Tue, 10 May 2016 08:40:06 +0000 (10:40 +0200)]
lksctp-tools: bump to version 1.0.17
Remove upstreamed patch and autoreconf related hook. Add
--disable-tests config option to reduce build time.
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 9 May 2016 21:24:48 +0000 (18:24 -0300)]
smartmontools: bump to version 6.5
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 9 May 2016 21:24:14 +0000 (18:24 -0300)]
squid: bump to version 3.5.19
Fixes regression introduced in 3.5.18 (via CVE-2016-4554 patch/fix).
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 9 May 2016 21:23:37 +0000 (18:23 -0300)]
libgtk3: bump to version 3.20.4
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Mon, 9 May 2016 16:29:20 +0000 (18:29 +0200)]
package/ffmpeg: bump version to 2.8.7
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Mon, 9 May 2016 14:18:21 +0000 (15:18 +0100)]
package/nodejs: bump version to 0.10.45
See https://nodejs.org/en/blog/release/v0.10.45/
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Mon, 9 May 2016 14:18:20 +0000 (15:18 +0100)]
package/nodejs: bump version to 6.1.0
See https://nodejs.org/en/blog/release/v6.1.0/
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 9 May 2016 20:34:53 +0000 (17:34 -0300)]
glib-networking: bump to version 2.48.2
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Mon, 9 May 2016 16:48:38 +0000 (18:48 +0200)]
package/clamav: bump version to 0.99.2
Changed upstream URL to project site clamav.net, the tarball for the
new version is not available on sourceforge.net anymore.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Mon, 9 May 2016 16:46:53 +0000 (18:46 +0200)]
package/{mesa3d, mesa3d-headers}: bump version to 11.2.2
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Mon, 9 May 2016 16:44:42 +0000 (13:44 -0300)]
gvfs: bump to version 1.28.2
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Sun, 8 May 2016 14:37:09 +0000 (11:37 -0300)]
libglib2: remove gdbus-codegen from target
It requires python and it's normally used at build time, hence since we
don't support toolchain in the target it really doesn't make much sense.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yann E. MORIN [Sun, 8 May 2016 15:41:49 +0000 (17:41 +0200)]
legacy: i386 is legacy, inform the user
When we dropped support for i386, we added the corresponding opiton to
the legacy menu, but forgot to select BR2_LEGACY.
Fix that.
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Cc: Arnout Vandecappelle <arnout@mind.be>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 23 Apr 2016 20:59:49 +0000 (22:59 +0200)]
package/freeswitch: Fix added license
Noted by Thomas:
http://lists.busybox.net/pipermail/buildroot/2016-April/158864.html
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
[Thomas: add comma to separate the licenses.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Vicente Olivert Riera [Mon, 9 May 2016 09:04:41 +0000 (10:04 +0100)]
mc: bump version to 4.8.17
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Vicente Olivert Riera [Mon, 9 May 2016 09:04:40 +0000 (10:04 +0100)]
lvm2: bump version to 2.02.153
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Fabio Estevam [Sun, 8 May 2016 13:37:27 +0000 (10:37 -0300)]
configs: warpboard: Use the final U-boot release version
We should better use the final U-boot version rather than the release
candidate one.
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Yann E. MORIN [Sun, 8 May 2016 13:50:02 +0000 (15:50 +0200)]
boards/raspberrypi0: new board
Add support for the rpi-0, which is basically a rpi (model A+) in a
smaller form-factor.
This one does not have an ethernet port, so we just remove it from the
configuration (or we could use the existing rasbperrypi_defconfig and
suffer from a longer boot time because of the waiting for eth0).
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yann E. MORIN [Sun, 8 May 2016 13:50:01 +0000 (15:50 +0200)]
package/rpi-firmware: bump version for rpi0
Although the current version of rpi-firmware we use is working just fine
on the rpi-zero, the latest firmware provides a DTB overlay to use the
USB OTG device in either host or slave modes.
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Brian 'redbeard' Harrington [Sun, 8 May 2016 03:27:48 +0000 (20:27 -0700)]
fs/common: fix typo in comments
Fixed comment typos as to improve clarity.
Signed-off-by: Brian 'redbeard' Harrington <redbeard@coreos.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yann E. MORIN [Sun, 8 May 2016 07:44:42 +0000 (09:44 +0200)]
Revert "package/kodi: optimise for RPi2"
Optimised support for the RPi-2 was only introduced in Krypton, the next
release of Kodi. Jarvis, the current release, does not have this
support.
This reverts commit
ef37472b20894c99cad758397f3cd6b90f933df1.
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Cc: Benoît Mauduit <bmauduit@beneth.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Sun, 8 May 2016 13:14:28 +0000 (10:14 -0300)]
squid: security bump to version 3.5.18
Fixes:
CVE-2016-4553 - Cache Poisoning issue in HTTP Request handling
CVE-2016-4554 - Header Smuggling issue in HTTP Request processing
CVE-2016-4555 - Multiple Denial of Service issues in ESI Response
processing (client_side_request.cc)
CVE-2016-4556 - Multiple Denial of Service issues in ESI Response
processing (Esi.cc)
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Bernd Kuhls [Sat, 7 May 2016 12:39:16 +0000 (14:39 +0200)]
package/freeswitch: bump version to 1.6.8
Removed patches applied upstream:
https://freeswitch.org/stash/projects/FS/repos/freeswitch/commits/
eadb3f890f6e7ba3b3ca23c6feb144fb35d304ce
https://freeswitch.org/stash/projects/FS/repos/freeswitch/commits/
b024c752fb2e9789fdbaf769be9998f62bb5c483
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Thomas Petazzoni [Sun, 8 May 2016 13:05:14 +0000 (15:05 +0200)]
toolchain-external: fix registration of hook for Sourcery Aarch64 toolchain
As noticed by Romain Naour, commit
4d39ca1c2ab19766abf0430abe9b65ba0e16602b ("toolchain-external: fix
installation for CodeSourcery AArch64 toolchain") has a small bug where
a post-install hook doing fixups in TARGET_DIR was registered as a
staging installation hook while it should have been registered as a
target installation hook. This commit fixes this inconsistency.
Reported-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Fabio Estevam [Sat, 7 May 2016 14:32:18 +0000 (11:32 -0300)]
configs/imx6ulevk: Use ext4 as filesystem type
Extend the filesystem type to ext4.
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Christian Stewart [Fri, 6 May 2016 16:23:32 +0000 (12:23 -0400)]
package/go: bump version to 1.6.2
Golang has significant improvements to support for multiarch in later
versions. This bump is required to make many go programs functional
under arm64, for example.
Signed-off-by: Christian Stewart <christian@paral.in>
Acked-by: Geoff Levand <geoff@infradead.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Mike Williams [Fri, 6 May 2016 18:30:19 +0000 (14:30 -0400)]
bluez5_utils: start systemd service on boot
Signed-off-by: Mike Williams <mike@mikebwilliams.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Mike Williams [Fri, 6 May 2016 18:30:18 +0000 (14:30 -0400)]
bluez5_utils: bump to version 5.39
Drop upstreamed patch
Signed-off-by: Mike Williams <mike@mikebwilliams.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Jerzy Grzegorek [Sat, 7 May 2016 07:57:48 +0000 (09:57 +0200)]
imagemagick: bump to version 6.9.3-10
Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Jörg Krause [Fri, 6 May 2016 23:25:03 +0000 (01:25 +0200)]
taskd: add patch to fix musl build issue
taskd checks for `get_current_dir_name` but forgets to add a `cmakedefine`
in cmake.h.in, so `HAVE_GET_CURRENT_DIR_NAME` is always undefined.
CMake detects correctly that the musl C library defines `get_current_dir_name`.
However, as `HAVE_GET_CURRENT_DIR_NAME` is not set, the block of code evaluated
cannot be compiled as musl does not define `PATH_MAX`.
Reported upstream:
https://bug.tasktools.org/browse/TD-120
Fixes:
http://autobuild.buildroot.net/results/121/
121aa15235e06c80d65428626da5a2da9d11c9ba/
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Jörg Krause [Mon, 2 May 2016 11:16:55 +0000 (13:16 +0200)]
swupdate: bump to version 2016.04
Also:
* Update the .config file
* Update the help text:
- Lua support is not restricted to Lua 5.2
- U-Boot supports needs now BR2_PACKAGE_UBOOT_TOOLS additionally
* Remove comment about bundled lsqlite3, it has been removed.
* Remove upstream patches:
- "Kbuild: Fix link error for CONFIG_UBOUT and missing libz" [1]
- "Kbuild: Link with GCC instead of LD" [2]
* Add patch from upstream:
- "Fix build without MTD support" [3]
* Add optional dependency for libarchive
* Add optional dependency for uboot-tools
[1] https://github.com/sbabic/swupdate/commit/
5a5ef5909f5da5b2070d58ffaee924bb8e6a51e1
[2] https://github.com/sbabic/swupdate/commit/
f26577423eb65728fcd10f78f9978dd07d51dcb9
[3] https://github.com/sbabic/swupdate/commit/
69c0e66994f01ce1bf2299fbce86aee7a1baa37b
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
[Thomas: add host-pkgconf in the dependency when Lua is enabled, as it
is used to find Lua.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Jörg Krause [Mon, 2 May 2016 11:16:54 +0000 (13:16 +0200)]
uboot-tools: add patch to fix linking with libubootenv
Backport a patch from upstream [1] to fix linking with libubootenv:
fw_env.c:(.text+0x94): undefined reference to `common_args'
[1] http://git.denx.de/?p=u-boot.git;a=commit;h=
43cb65b7a00e4759427a6e4b8a02039e43dab5a5
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Jörg Krause [Mon, 2 May 2016 11:16:53 +0000 (13:16 +0200)]
uboot-tools: install libubootenv to staging
libubootenv is required by swupdate.
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
[Thomas: do the installation directly in <pkg>_INSTALL_STAGING_CMDS.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Fri, 6 May 2016 00:08:27 +0000 (21:08 -0300)]
xserver_xorg-server: use -O2 build optimization level
The xorg server is somewhat sensitive to certain gcc versions combined
with -Os, particularly for ARM and MIPS, typically in the form of the
following symptom/error:
(EE) Segmentation fault at address 0x0
(EE)
Fatal server error:
(EE) Caught signal 11 (Segmentation fault). Server aborting
Force -O2 to work around this problem - for a target rootfs that uses
X11 the tradeoff is minimal since a sample/test image for qemu vexpress
with X11 + xinit + xterm + twm + xclock + gtk2 with demos is 60+ MB.
And it's less complicated than trying to find all of the bad
combinations.
Fixes bug #8436.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
[Thomas: add comment in .mk file, add reference to bug.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yegor Yefremov [Fri, 6 May 2016 05:46:04 +0000 (07:46 +0200)]
barebox: add an option to embed environment image
Barebox provides an option to embed a custom environment image into
barebox binary. This image will be used, when the environment found in
the environment sector is invalid. Both embedded and external images
can be used together, so having both options at the same time is
justified.
This patch sets barebox Kconfig option CONFIG_DEFAULT_ENVIRONMENT_PATH
to user specified path. This way one can use such BR's variables like
BR2_EXTERNAL, TOPDIR etc. to provide paths to custom environment
folders.
Cc: Pieter Smith <pieter@boesman.nl>
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Jörg Krause [Fri, 6 May 2016 07:45:13 +0000 (09:45 +0200)]
macchanger: add patch to fix musl build
Add a patch to fix a build error with the musl C library.
caddr_t is defined in <sys/types.h>. This header file must be included to fix
build with the musl C library:
netinfo.c: In function 'mc_net_info_get_permanent_mac':
netinfo.c:116:28: error: 'caddr_t' undeclared (first use in this function)
req.ifr_data = (caddr_t)epa;
The project looks dead, the last commit dates Jan 1, 2014. So the fix is not
sent upstream.
Fixes:
http://autobuild.buildroot.net/results/796/
7966ad4f994d893918368891107f660295164f07/
http://autobuild.buildroot.net/results/177/
177db3c7cbb59e4388c6742e987f92df53a23fc3/
.. and many more
Replaces:
http://patchwork.ozlabs.org/patch/572195/
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Jörg Krause [Fri, 6 May 2016 07:45:12 +0000 (09:45 +0200)]
macchanger: bump to version 1.7.0
Switch to github repository to fetch latest version, which also added the
missing license file.
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yegor Yefremov [Fri, 6 May 2016 08:35:46 +0000 (10:35 +0200)]
python-cffi: bump to version 1.6.0
Change download location.
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yegor Yefremov [Fri, 6 May 2016 08:32:44 +0000 (10:32 +0200)]
python-twisted: bump to version 16.1.1
Add upstream md5 checksum.
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Julien BOIBESSOT [Fri, 15 Apr 2016 12:59:57 +0000 (14:59 +0200)]
board: add a readme for Armadeus boards
Common readme.txt for all supported Armadeus boards.
Signed-off-by: Julien BOIBESSOT <julien.boibessot@armadeus.com>
[Thomas: minor tweaks in the readme.txt]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Thu, 28 Apr 2016 13:20:18 +0000 (10:20 -0300)]
mpv: jack/sdl/sdl2 require 64-bit sync intrinsics
Fixes:
http://autobuild.buildroot.net/results/578/
578beb2f3b34fc83109e79d8db7de7219dd8340e/
http://autobuild.buildroot.net/results/21c/
21ce67041792d29082f5bba76299da19dd1856eb/
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Yegor Yefremov [Wed, 4 May 2016 08:44:43 +0000 (10:44 +0200)]
python-singledispatch: add missing runtime dependency
setup.py mentions python-six as required.
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Tue, 3 May 2016 09:36:57 +0000 (10:36 +0100)]
package/nginx: add debug logging support
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Tue, 3 May 2016 09:36:56 +0000 (10:36 +0100)]
package/nginx: add thread pool support
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Tue, 3 May 2016 09:36:55 +0000 (10:36 +0100)]
package/nginx: add support for stream proxy modules
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Tue, 3 May 2016 09:36:54 +0000 (10:36 +0100)]
package/nginx: bump version to 1.10.0
The ngx_http_spdy_module has been superseded by the ngx_http_v2_module
so BR2_PACKAGE_NGINX_HTTP_SPDY_MODULE has changed to
BR2_PACKAGE_NGINX_HTTP_V2_MODULE
Signed-off-by: Martin Bark <martin@barkynet.com>
[Thomas: rewrap Config.in.legacy help text.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Tue, 3 May 2016 09:36:53 +0000 (10:36 +0100)]
package/nginx: fix error is nginx.service
When using systemd nginx fails to start with the error
/usr/bin/mkdir: invalid option -- 't'
This is due to a missing space before the semicolon in nginx.service.
For systemd to handle multiple commands in ExecStartPre it requires the
semicolon to be a separate word or the use of multiple ExecStartPre.
This commit splits the multiple commands into two ExecStartPre lines
which fixes the error and improves readability.
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Tue, 3 May 2016 09:36:52 +0000 (10:36 +0100)]
package/nginx: fix mail modules not building
Add the missing --with-mail configure option
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Thu, 5 May 2016 18:47:19 +0000 (15:47 -0300)]
linux: bump defaut to version 4.5.3
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Thu, 5 May 2016 18:47:18 +0000 (15:47 -0300)]
linux-headers: bump 3.14.x and 4.{4, 5}.x series
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Thu, 5 May 2016 15:30:30 +0000 (12:30 -0300)]
configs/freescale_mpc8315erdb: bump to kernel 4.5.3
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Thu, 5 May 2016 15:30:29 +0000 (12:30 -0300)]
configs/freescale_p1010rdb_pa: lock down binutils version
The used U-Boot version (2014.01) isn't too happy with newer (>= 2.25)
binutils versions, so keep it locked down until the config is updated
for a newer version.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Thu, 5 May 2016 15:30:28 +0000 (12:30 -0300)]
configs/freescale_mpc8315erdb: lock down binutils version
The used U-Boot version (2014.04) isn't too happy with newer (>= 2.25)
binutils versions, so keep it locked down until the config is updated
for a newer version.
U-Boot 2016.03 in fact does work for mpc8315erdb - however it doesn't
yet support SPL which is necessary for NAND boot and would be a massive
defconfig revamp switching to NOR.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Martin Bark [Wed, 4 May 2016 14:17:54 +0000 (15:17 +0100)]
package/ca-certificates: depend on host-python or host-python3
The ca-certificates build process runs a Python script that needs at
least Python 2.7. While Buildroot requires Python as a hard dependency
on the build system, we don't require Python >= 2.7.
So in order to ensure that a Python >= 2.7 is installed, this commit
makes the ca-certificates package depend either on host-python or
host-python3.
Fixes:
http://autobuild.buildroot.net/results/
a2a4fed293c836b9cf63ff2aaa463b0704dec07e/
http://autobuild.buildroot.net/results/
bbed4afa8e30382b8892062f31ba64cbb0ea14e4/
http://autobuild.buildroot.net/results/
1af5562be3c0d233cea81834a898f7ac6ae48271/
Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Martin Bark <martin@barkynet.com>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
[Thomas: rewrite commit log.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Thu, 5 May 2016 11:30:57 +0000 (08:30 -0300)]
configs/qemu: bump to the latest version
Results table:
Defconfig Kernel Qemu Network Status
------------------------------------------------------------------
aarch64_virt 4.5.3 2.5.0 YES OK
arm_versatile 4.5.3 2.5.0 YES OK
arm_vexpress 4.5.3 2.5.0 YES OK
m68k_mcf5208 4.5.3 2.5.0 NO SO-SO (3)
m68k_q800 4.5.3 q800-v2.4.0 NO (4) OK
microblazebe 4.5.3 2.5.0 YES OK
microblazeel 4.5.3 2.5.0 YES OK
mips64el_malta 4.5.3 2.5.0 YES OK
mips64_malta 4.5.3 2.5.0 YES OK
mipsel_malta 4.5.3 2.5.0 YES OK
mips_malta 4.5.3 2.5.0 YES OK
ppc_g3beige 4.5.3 2.5.0 YES OK
ppc_mpc8544ds 4.5.3 2.5.0 YES OK
ppc_virtex_ml507 4.5.3 2.5.0 NO OK
ppc64_pseries 4.5.3 2.5.0 YES OK
sh4 4.5.3 2.5.0 YES OK
sh4eb 4.5.3 2.5.0 NO (1) OK
sparc_ss10 4.5.3 2.5.0 YES OK
sparc64_sun4u 4.5.3 2.5.0 YES OK
sparc_sun4u 4.5.3 2.5.0 YES OK
x86 4.5.3 2.5.0 YES OK
x86_64 4.5.3 2.5.0 YES OK
xtensa_lx60 4.4.9 2.5.0 YES (2) OK
xtensa_lx60_nommu 4.4.9 2.5.0 YES (2) OK
(1) - Probably an endian issue with 8139 emulation/driver
(2) - xtensa ethernet broken in 4.5
(3) - It boots, you can login, but apps exit/crash often
(4) - There's a network interface, but enabling it in qemu fails
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Thu, 5 May 2016 11:30:56 +0000 (08:30 -0300)]
configs/qemu: use zImage for sh4/sh4eb samples
The default for ARM was changed to zImage in
5c67cb1d, however the
sh4/sh4eb sample configs were updated to switch to uImage in error,
hence end up building uImage which doesn't work with Qemu.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
[Thomas: fix commit log.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Peter Korsgaard [Mon, 2 May 2016 21:26:52 +0000 (23:26 +0200)]
uboot: ensure u-boot-dtb.img gets built if enabled
u-boot-dtb.img only gets built by default (all target) if
CONFIG_OF_SEPARATE _AND_ CONFIG_SPL_FRAMEWORK are enabled.
Certain SoCs (E.G. Action Semi S500) use a proprietary first level
bootloader instead of u-boot SPL, but still use u-boot-dtb.img as the first
level bootloader parses the uImage header for size/loadaddr.
Ensure u-boot-dtb.img gets built if enabled by explicitly listing it as a
u-boot make target (next to all) to support such setups.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 3 May 2016 19:56:51 +0000 (16:56 -0300)]
gst1-plugins-bad: add rtmp support
As pointed by sonnex on the mailing list.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 3 May 2016 19:44:15 +0000 (16:44 -0300)]
gst1-plugins-bad: remove rtp plugin option
The plugin was moved from -bad to -good so remove the option.
Support in -good was added via
301e8ffb.
Add legacy entry to notify users of this, however we can't automatically
select the good variant since good might be disabled.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 3 May 2016 19:44:14 +0000 (16:44 -0300)]
gst1-plugins-bad: remove mpg123 plugin option
The plugin was moved from -bad to -ugly so remove the option.
Support in -ugly was added via
30cde9a3.
Add legacy entry to notify users of this, however we can't automatically
select the ugly variant since ugly might be disabled.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Romain Izard [Mon, 2 May 2016 08:36:39 +0000 (10:36 +0200)]
core/pkg-kconfig: Use olddefconfig when available
Using 'yes "" | make oldconfig' to regenerate a .config file from an
existing defconfig does not work reliably in all cases. Specifically, it
does not work well with tristate choice entries.
The correct way to do it is to use 'make olddefconfig', but this target
is not supported in projects that use an old version of kconfig. As
most projects do not use tristate entries, there is no need for them to
upgrade.
'oldnoconfig' is an alias for 'olddefconfig', but it also is the only
name for this target between Linux versions 2.6.36 and 3.6.
Check which targets are supported by the current project, and use the
appropriate method to regenerate the .config file.
Signed-off-by: Romain Izard <romain.izard.pro@gmail.com>
Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Tested-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Baruch Siach [Tue, 3 May 2016 12:00:15 +0000 (15:00 +0300)]
tiff: update homepage link
The current linked website is not up to date, since the libtiff.org domain was
apparently hijacked years ago. See
http://www.asmail.be/msg0055472296.html. Correct this.
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 3 May 2016 19:49:13 +0000 (16:49 -0300)]
wireless-regdb: bump to version 2016.05.02
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 3 May 2016 15:42:04 +0000 (12:42 -0300)]
bind: security bump to version 9.10.4
Fixes:
CVE-2016-2088 - Duplicate EDNS COOKIE options in a response could
trigger an assertion failure.
Drop libressl support patch since it's upstream now.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Vicente Olivert Riera [Tue, 3 May 2016 13:08:42 +0000 (14:08 +0100)]
vlc: bump version to 2.2.3
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Vicente Olivert Riera [Tue, 3 May 2016 13:08:41 +0000 (14:08 +0100)]
mutt: bump version to 1.6.1
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Vicente Olivert Riera [Tue, 3 May 2016 13:08:40 +0000 (14:08 +0100)]
lvm2: bump version to 2.02.152
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Vicente Olivert Riera [Tue, 3 May 2016 13:08:39 +0000 (14:08 +0100)]
git: bump version to 2.8.2
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Tue, 3 May 2016 14:39:33 +0000 (11:39 -0300)]
openssl: security bump to version 1.0.2h
Fixes:
CVE-2016-2105 - Fix EVP_EncodeUpdate overflow
CVE-2016-2106 - Fix EVP_EncryptUpdate overflow
CVE-2016-2107 - Prevent padding oracle in AES-NI CBC MAC check
CVE-2016-2109 - Prevent ASN.1 BIO excessive memory allocation
CVE-2016-2176 - EBCDIC overread
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Baruch Siach [Tue, 3 May 2016 06:40:19 +0000 (09:40 +0300)]
wpa_supplicant: add security fixes
Add upstream patching fixing CVE-2016-2447: psk configuration parameter update
allowing arbitrary data to be written.
See http://w1.fi/security/2016-1/psk-parameter-config-update.txt for details.
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Baruch Siach [Tue, 3 May 2016 06:40:18 +0000 (09:40 +0300)]
hostapd: add security fix
Add upstream patch fixing CVE-2016-2447: psk configuration parameter update
allowing arbitrary data to be written.
See http://w1.fi/security/2016-1/psk-parameter-config-update.txt for details.
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Mon, 2 May 2016 12:44:47 +0000 (09:44 -0300)]
x264: needs madvise(), disable for bfin external toolchain
x264 uses madvise() which is not available in the bfin external toolchain.
Fixes:
http://autobuild.buildroot.net/results/837/
837fd5a63d59b5c65818ec005a565cb7741a1cdd/
[Peter: Issue is specific to bfin toolchain, so only disable for that one]
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Mon, 2 May 2016 15:21:31 +0000 (12:21 -0300)]
harfbuzz: bump to version 1.2.7
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Mon, 2 May 2016 12:21:22 +0000 (09:21 -0300)]
ntp: security bump to version 4.2.8p7
Fixes:
CVE-2016-1551 - Refclock impersonation vulnerability, AKA:
refclock-peering
CVE-2016-1549 - Sybil vulnerability: ephemeral association attack, AKA:
ntp-sybil - MITIGATION ONLY
CVE-2016-2516 - Duplicate IPs on unconfig directives will cause an
assertion botch
CVE-2016-2517 - Remote configuration trustedkey/requestkey values are not
properly validated
CVE-2016-2518 - Crafted addpeer with hmode > 7 causes array wraparound
with MATCH_ASSOC
CVE-2016-2519 - ctl_getitem() return value not always checked
CVE-2016-1547 - Validate crypto-NAKs, AKA: nak-dos
CVE-2016-1548 - Interleave-pivot - MITIGATION ONLY
CVE-2015-7704 - KoD fix: peer associations were broken by the fix for
NtpBug2901, AKA: Symmetric active/passive mode is broken
CVE-2015-8138 - Zero Origin Timestamp Bypass, AKA: Additional KoD Checks
CVE-2016-1550 - Improve NTP security against buffer comparison timing
attacks, authdecrypt-timing, AKA: authdecrypt-timing
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Gustavo Zacarias [Mon, 2 May 2016 12:21:08 +0000 (09:21 -0300)]
samba4: bump to version 4.4.3
Fixes a few regressions from the previous security bump.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Waldemar Brodkorb [Tue, 5 Apr 2016 11:16:17 +0000 (13:16 +0200)]
opencv: fix compile issues
The first patch from Debian fixes following autobuild failure:
http://autobuild.buildroot.net/results/
eda5c6c43da40a342e0f545a348d2f865eb5ccf2/
Tested with ARM build without a regression.
The second patch fixes musl arm autobuild failure:
http://autobuild.buildroot.net/results/
6a397de789c809984b851a304078e26b2ac58974/
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Tested-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Gustavo Zacarias [Sun, 1 May 2016 21:47:30 +0000 (18:47 -0300)]
linux-headers: bump 3.2.x series
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Romain Naour [Sun, 1 May 2016 21:22:08 +0000 (23:22 +0200)]
luajit: fix host installation
Packages installed for the host should have their prefix set to
$(HOST_DIR)/usr, and therefore not use DESTDIR at installation time.
Using PREFIX=/usr DESTDIR=$(HOST_DIR) is wrong, and leads for example to
luajit.pc containing prefix=/usr, which means pkg-config returns
incorrect results for host-luajit.
This patch fixes the luajit package to conform to this rule.
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Gustavo Zacarias <gustavo@zacarias.com.ar>
[Thomas: rewrite commit log.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
projects / buildroot.git / log