buildroot.git
5 years agopackage/modem-manager: drop host-intltool
Fabrice Fontaine [Fri, 5 Jul 2019 21:48:09 +0000 (23:48 +0200)]
package/modem-manager: drop host-intltool

intltool is not needed since
https://gitlab.freedesktop.org/mobile-broadband/ModemManager/commit/984625165e09f02b4d6b8389092d5055fdbb0f03

So drop it and add TARGET_NLS_DEPENDENCIES

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Tested-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libqmi: bump to version 1.22.4
Fabrice Fontaine [Fri, 5 Jul 2019 21:08:00 +0000 (23:08 +0200)]
package/libqmi: bump to version 1.22.4

libqmi >= 1.22.4 is needed by modem-manager 1.10.2

Fixes:
 - http://autobuild.buildroot.org/results/14e11c6136db09b36d84246a7472b77bb4bfdd19

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Tested-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/iproute2: bump to version 5.2.0
Petr Vorel [Mon, 8 Jul 2019 22:01:00 +0000 (00:01 +0200)]
package/iproute2: bump to version 5.2.0

Removed patch which was accepted (slightly different version) upstream as
d0272f54 ("devlink: fix libc and kernel headers collision")

Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agoboard/freescale: Fix wrong config for u-boot.img
Joris Offouga [Wed, 10 Jul 2019 05:17:02 +0000 (07:17 +0200)]
board/freescale: Fix wrong config for u-boot.img

Signed-off-by: Joris Offouga <offougajoris@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agodocs/website: update for 2019.02.4
Peter Korsgaard [Wed, 10 Jul 2019 09:32:28 +0000 (11:32 +0200)]
docs/website: update for 2019.02.4

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoUpdate for 2019.02.4
Peter Korsgaard [Wed, 10 Jul 2019 08:02:18 +0000 (10:02 +0200)]
Update for 2019.02.4

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Peter: drop Makefile changes]
(cherry picked from commit 26bae8483231b23159c6b6c39e204c0eca76f0d4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoconfigs/imx7dpico: Bump U-Boot to 2019.07 and kernel to version 5.1.16.
Joris Offouga [Tue, 9 Jul 2019 09:57:03 +0000 (11:57 +0200)]
configs/imx7dpico: Bump U-Boot to 2019.07 and kernel to version 5.1.16.

Also
 - adjust the U-Boot binary name after DM conversion.
 - add missing notes about flashing U-Boot and SPL

Signed-off-by: Joris Offouga <offougajoris@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agoboard/freescale: Introduce UBOOTBIN in spl genimage templates
Joris Offouga [Tue, 9 Jul 2019 09:57:02 +0000 (11:57 +0200)]
board/freescale: Introduce UBOOTBIN in spl genimage templates

For boards like imx7d-pico, u-boot.img changes to u-boot-dtb.img in
U-Boot v2019.07. Therefore, we need to pick u-boot.img or u-boot-dtb.img
depending on the board configuration.

Just like was done in commit 52344e556fa03 for the generic genimage
template, replace the U-Boot file name with UBOOTBIN, which is set
according to the BR2_TARGET_UBOOT_FORMAT_* option. We also need to set
the correct value for this variable for the u-boot.img and
u-boot-dtb.img cases.

While we're at it, rename the partition from 'u-boot-img' to 'u-boot',
to stay consistent with the generic genimage template.

Signed-off-by: Joris Offouga <offougajoris@gmail.com>
[Arnout: correct u-boot.img condition, rework commit log]
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libgpgme: C++ binding requires gcc 5
Baruch Siach [Tue, 9 Jul 2019 10:23:24 +0000 (13:23 +0300)]
package/libgpgme: C++ binding requires gcc 5

libgpgme now use the -Wsuggest-override warning parameter when building
the C++ binding. This requires gcc 5 or newer.

Fixes:
http://autobuild.buildroot.net/results/6eed9cae57af445f53c9854e007815b882c5c65a/
http://autobuild.buildroot.net/results/75617aee53a6f2b009a0d4ddc5b9a8c4cd406895/
http://autobuild.buildroot.net/results/8191a732918c6987b84309df3dfd66ab54b43fb7/

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libarchive: fix build without zlib
Baruch Siach [Tue, 9 Jul 2019 10:33:47 +0000 (13:33 +0300)]
package/libarchive: fix build without zlib

Add upstream patch fixing build without zlib.

Fixes:
http://autobuild.buildroot.net/results/d116d3ace93784722a0914f73dc402746d04b439/

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agoconfigs/olimex_a20_olinuxino_lime*: bump Linux and U-Boot versions
Francois Perrad [Tue, 9 Jul 2019 16:42:44 +0000 (18:42 +0200)]
configs/olimex_a20_olinuxino_lime*: bump Linux and U-Boot versions

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agodocs/website: update for 2019.05.1
Peter Korsgaard [Sun, 7 Jul 2019 20:39:14 +0000 (22:39 +0200)]
docs/website: update for 2019.05.1

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoUpdate for 2019.05.1
Peter Korsgaard [Sun, 7 Jul 2019 20:09:08 +0000 (22:09 +0200)]
Update for 2019.05.1

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Peter: drop Makefile changes]
(cherry picked from commit 5b4e32cae812225fa909d755d7e09588ce0b92da)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/opkg: bump to version 0.4.1
Baruch Siach [Fri, 5 Jul 2019 04:32:14 +0000 (07:32 +0300)]
package/opkg: bump to version 0.4.1

tarball conf/ scripts no longer link to host files. Drop autoreconf.

Add license hash.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libarchive: bump to version 3.4.0
Baruch Siach [Fri, 5 Jul 2019 04:32:13 +0000 (07:32 +0300)]
package/libarchive: bump to version 3.4.0

Use a mirror download site.
https://github.com/libarchive/libarchive/issues/1216

Drop upstream patches.

Mention additional licenses for new RARv5 code. Update license file
hash.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libgpgme: bump to version 1.13.1
Baruch Siach [Fri, 5 Jul 2019 04:32:12 +0000 (07:32 +0300)]
package/libgpgme: bump to version 1.13.1

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/modem-manager: bump to version 1.10.2
Petr Vorel [Thu, 4 Jul 2019 16:23:24 +0000 (18:23 +0200)]
package/modem-manager: bump to version 1.10.2

Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/php: bump version to 7.3.7
Bernd Kuhls [Fri, 5 Jul 2019 05:37:26 +0000 (07:37 +0200)]
package/php: bump version to 7.3.7

Changelog: https://www.php.net/ChangeLog-7.php#7.3.7

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/freeswitch: bump version to 1.8.7
Bernd Kuhls [Fri, 5 Jul 2019 05:36:08 +0000 (07:36 +0200)]
package/freeswitch: bump version to 1.8.7

Switched _SITE to https.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libnftnl: drop obsolete patch
Baruch Siach [Fri, 5 Jul 2019 03:08:12 +0000 (06:08 +0300)]
package/libnftnl: drop obsolete patch

Patch #1 is obsolete since upstream commit 244d60de2f1 ("utils: define
xfree() as macro") in version 1.0.3. xfree is no longer a symbol, so it
can't conflict with symbols of the code libnftnl links with.

Cc: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libsecret: bump to version 0.18.8
Fabrice Fontaine [Thu, 4 Jul 2019 17:06:50 +0000 (19:06 +0200)]
package/libsecret: bump to version 0.18.8

host-intltool is not needed since version 0.18.7 and
https://github.com/GNOME/libsecret/commit/f25420d5aadc1449f78c9293d0b1ddf16f5d2eba

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/webkitgtk: bump to version 2.24.3
Adrian Perez de Castro [Thu, 4 Jul 2019 09:10:06 +0000 (12:10 +0300)]
package/webkitgtk: bump to version 2.24.3

Version 2.24.3 is a minor update which contains many bugfixes.
>From the announcement:

  - Fix previous/next gestures in RTL mode.
  - Fix rendering artifacts in popular sites (YouTube, GitHub, etc.)
  - Fix media playback annoyances (volume randomly changing, HLS streams
    starting too slowly, some audio streams would not play, etc.)
  - Fix build with audio and video disabled.

  https://webkitgtk.org/2019/07/02/webkitgtk2.24.3-released.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/cog: bump to version 0.3.1
Adrian Perez de Castro [Thu, 4 Jul 2019 09:01:48 +0000 (12:01 +0300)]
package/cog: bump to version 0.3.1

Update the package to version 0.3.1, which includes build improvements.
In particular, it now uses wayland-scanner to generate Wayland protocol
code instead of shipping pre-generated files.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/wpebackend-fdo: bump to version 1.2.1
Adrian Perez de Castro [Thu, 4 Jul 2019 08:36:17 +0000 (11:36 +0300)]
package/wpebackend-fdo: bump to version 1.2.1

Update the package to version 1.2.1, which includes build fixes.
Patch "0001-Improve-how-CMake-looks-for-wayland-scanner.patch" is
now included and therefore can be removed from Buildroot.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Acked-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years ago{linux, linux-headers}: bump 4.{14, 19}.x / 5.1.x series
Peter Korsgaard [Thu, 4 Jul 2019 06:32:18 +0000 (08:32 +0200)]
{linux, linux-headers}: bump 4.{14, 19}.x / 5.1.x series

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/samba4: bump version to 4.9.11
Bernd Kuhls [Thu, 4 Jul 2019 05:53:23 +0000 (07:53 +0200)]
package/samba4: bump version to 4.9.11

Release notes: https://www.samba.org/samba/history/samba-4.9.11.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libdrm: bump version to 2.4.99
Bernd Kuhls [Thu, 4 Jul 2019 05:52:31 +0000 (07:52 +0200)]
package/libdrm: bump version to 2.4.99

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libsecret: fix build with NLS
Fabrice Fontaine [Mon, 1 Jul 2019 16:58:51 +0000 (18:58 +0200)]
package/libsecret: fix build with NLS

Fixes:
 - http://autobuild.buildroot.org/results/1497d7c2485c4a107ab82c870d78744981efb6d3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/e2fsprogs: bump version to 1.45.2
Bernd Kuhls [Tue, 2 Jul 2019 18:59:48 +0000 (20:59 +0200)]
package/e2fsprogs: bump version to 1.45.2

Release notes:
http://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.45.2

Disabled crond support for host build.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libev: bump to version 4.27
Pierre-Jean Texier [Tue, 2 Jul 2019 20:36:07 +0000 (22:36 +0200)]
package/libev: bump to version 4.27

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/samba4: bump version to 4.9.10
Bernd Kuhls [Tue, 2 Jul 2019 18:57:51 +0000 (20:57 +0200)]
package/samba4: bump version to 4.9.10

Release notes: https://www.samba.org/samba/history/samba-4.9.10.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libinput: bump version to 1.13.4
Peter Seiderer [Tue, 2 Jul 2019 17:07:59 +0000 (19:07 +0200)]
package/libinput: bump version to 1.13.4

For details see [1].

[1] https://lists.freedesktop.org/archives/wayland-devel/2019-June/040675.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/tvheadend: bump version
Bernd Kuhls [Tue, 2 Jul 2019 18:58:05 +0000 (20:58 +0200)]
package/tvheadend: bump version

Removed patch which was applied upstream.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libssh: bump to version 0.9.0
Baruch Siach [Mon, 1 Jul 2019 05:52:55 +0000 (08:52 +0300)]
package/libssh: bump to version 0.9.0

Drop upstream patches.

Cc: Scott Fan <fancp2007@gmail.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/python-scandir: bump to version 1.10.0
Pierre-Jean Texier [Sun, 30 Jun 2019 17:58:45 +0000 (19:58 +0200)]
package/python-scandir: bump to version 1.10.0

See https://github.com/benhoyt/scandir/releases

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/python-libusb1: bump to version 1.7.1
Pierre-Jean Texier [Sun, 30 Jun 2019 17:57:39 +0000 (19:57 +0200)]
package/python-libusb1: bump to version 1.7.1

See https://pypi.org/project/libusb1/#id40

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/python-can: bump to version 3.3.0
Pierre-Jean Texier [Sun, 30 Jun 2019 17:56:31 +0000 (19:56 +0200)]
package/python-can: bump to version 3.3.0

See https://github.com/hardbyte/python-can/releases

Also add a patch removing the pytest-runner dependency.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/python-zeroconf: bump to version 0.23.0
Pierre-Jean Texier [Sun, 30 Jun 2019 17:52:15 +0000 (19:52 +0200)]
package/python-zeroconf: bump to version 0.23.0

See https://github.com/jstasiak/python-zeroconf#changelog

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/p11-kit: bump version to 0.23.16.1
Bernd Kuhls [Sat, 29 Jun 2019 14:46:30 +0000 (16:46 +0200)]
package/p11-kit: bump version to 0.23.16.1

Added license hash, switched _SITE to github, previous URL is broken.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/pcre2: bump version to 10.33
Bernd Kuhls [Sat, 29 Jun 2019 14:46:29 +0000 (16:46 +0200)]
package/pcre2: bump version to 10.33

Release notes:
https://lists.exim.org/lurker/message/20190304.181617.bc5235a2.en.html
http://www.pcre.org/news.txt
https://lists.exim.org/lurker/message/20190416.154043.a260ee6c.en.html

Updated license hash after update of copyright year in upstream commit
https://vcs.pcre.org/pcre2/code/tags/pcre2-10.33/LICENCE?r1=1087&r2=1001

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/pcre: bump version to 8.43
Bernd Kuhls [Sat, 29 Jun 2019 14:46:28 +0000 (16:46 +0200)]
package/pcre: bump version to 8.43

Release notes:
https://lists.exim.org/lurker/message/20190125.161413.ce45dfd2.en.html
https://lists.exim.org/lurker/message/20190223.165009.b0fb3c20.en.html

Updated license hash after update of copyright year in upstream commit
https://vcs.pcre.org/pcre/code/tags/pcre-8.43/LICENCE?r1=1749&r2=1734

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/gnutls: bump version to 3.6.8
Bernd Kuhls [Sat, 29 Jun 2019 14:46:27 +0000 (16:46 +0200)]
package/gnutls: bump version to 3.6.8

Release notes:
https://lists.gnupg.org/pipermail/gnutls-help/2019-May/004527.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/nettle: bump version to 3.5.1
Bernd Kuhls [Sat, 29 Jun 2019 14:46:26 +0000 (16:46 +0200)]
package/nettle: bump version to 3.5.1

Release notes:
http://lists.lysator.liu.se/pipermail/nettle-bugs/2019/007593.html

Removed patch which was applied upstream.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/mbedtls: bump version to 2.16.2
Joris Offouga [Thu, 27 Jun 2019 21:54:36 +0000 (23:54 +0200)]
package/mbedtls: bump version to 2.16.2

See changelog: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.2-and-2.7.11-released

Fixes:
 - http://autobuild.buildroot.net/results/7c0/7c09c80a376cf0c4c23a3cf48314806de9251544/

Also add a patch to fix the build issue by requiring at least
ARMv6 in addition to the DSP feature.

Signed-off-by: Joris Offouga <offougajoris@gmail.com>
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/python-django: security bump to version 2.1.10
Peter Korsgaard [Wed, 3 Jul 2019 18:15:07 +0000 (20:15 +0200)]
package/python-django: security bump to version 2.1.10

Fixes the following security vulnerabilities:

CVE-2019-12781: Incorrect HTTP detection with reverse-proxy connecting via
HTTPS

For more details, see the announcement:
https://www.djangoproject.com/weblog/2019/jul/01/security-releases/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xserver_xorg-server: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:34 +0000 (18:26 -0400)]
package/x11r7/xserver_xorg-server: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libXxf86vm: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:33 +0000 (18:26 -0400)]
package/x11r7/xlib_libXxf86vm: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libXv: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:32 +0000 (18:26 -0400)]
package/x11r7/xlib_libXv: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libXres: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:31 +0000 (18:26 -0400)]
package/x11r7/xlib_libXres: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libXrender: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:30 +0000 (18:26 -0400)]
package/x11r7/xlib_libXrender: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libXfont2: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:29 +0000 (18:26 -0400)]
package/x11r7/xlib_libXfont2: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libXfont: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:28 +0000 (18:26 -0400)]
package/x11r7/xlib_libXfont: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libXfixes: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:27 +0000 (18:26 -0400)]
package/x11r7/xlib_libXfixes: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xfont_font-util: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:26 +0000 (18:26 -0400)]
package/x11r7/xfont_font-util: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xfont_font-misc-misc: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:25 +0000 (18:26 -0400)]
package/x11r7/xfont_font-misc-misc: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xfont_font-cursor-misc: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:24 +0000 (18:26 -0400)]
package/x11r7/xfont_font-cursor-misc: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xfont_font-alias: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:23 +0000 (18:26 -0400)]
package/x11r7/xfont_font-alias: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xapp_bdftopcf: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:22 +0000 (18:26 -0400)]
package/x11r7/xapp_bdftopcf: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/wayland: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:21 +0000 (18:26 -0400)]
package/wayland: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/rpi-userland: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:20 +0000 (18:26 -0400)]
package/rpi-userland: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/rpi-firmware: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:19 +0000 (18:26 -0400)]
package/rpi-firmware: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
[Arnout: fix path to license file]
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/mtools: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:18 +0000 (18:26 -0400)]
package/mtools: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libtheora: add license hashes
Adam Duskett [Mon, 1 Jul 2019 22:26:17 +0000 (18:26 -0400)]
package/libtheora: add license hashes

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libsigc: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:16 +0000 (18:26 -0400)]
package/libsigc: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libsha1: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:15 +0000 (18:26 -0400)]
package/libsha1: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libpthread-stubs: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:14 +0000 (18:26 -0400)]
package/libpthread-stubs: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/dosfstools: add license hash
Adam Duskett [Mon, 1 Jul 2019 22:26:13 +0000 (18:26 -0400)]
package/dosfstools: add license hash

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libX11: don't require static libc on host
Adam Duskett [Mon, 1 Jul 2019 19:48:00 +0000 (15:48 -0400)]
package/x11r7/xlib_libX11: don't require static libc on host

As per: https://gitlab.freedesktop.org/xorg/lib/libx11/commit/4645e219133458781e3fb48eaea6a74cccb1b9aa

"For Windows targets, libtool uses a wrapper executable, not a wrapper
script (see [1]), which it compiles with the host compiler.  This
doesn't work when cross-compiling."

Because of this change, builds fail on Linux hosts without a static
libc. This patch reverts this change as we are guaranteed to build in a
Linux environment.

Fixes:
http://autobuild.buildroot.net/results/ac7c777e5fe31b6eda8b8b662881b07299e57ae9

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libX11: backport patch to detach makekeys from X headers.
Adam Duskett [Mon, 1 Jul 2019 19:47:59 +0000 (15:47 -0400)]
package/x11r7/xlib_libX11: backport patch to detach makekeys from X headers.

>From https://gitlab.freedesktop.org/xorg/lib/libx11/commit/0327c427d62f671eced067c6d9b69f4e216a8ca

With 1.6.8, there's no real reason to demand the X
headers be installed for both the build and target machines if cross-
compiling.

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/x11r7/xlib_libX11: drop post patch hooks
Adam Duskett [Mon, 1 Jul 2019 19:47:58 +0000 (15:47 -0400)]
package/x11r7/xlib_libX11: drop post patch hooks

X11_CFLAGS no longer exists in version 1.6.8 of libX11, making the
XLIB_LIBX11_DISABLE_MAKEKEYS_X11_CFLAGS post patch hook useless.

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agoStandardize Adam Duskett's email address
Adam Duskett [Mon, 1 Jul 2019 16:30:29 +0000 (12:30 -0400)]
Standardize Adam Duskett's email address

Globally change Adam Duskett's email address to aduskett@gmail.com.

Note that one or two of the patches may have been applied upstream with
the old email address, but in that case those patches will anyway be
removed when bumping.

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/glibmm: bump to version 2.60.0
Adam Duskett [Mon, 1 Jul 2019 16:21:52 +0000 (12:21 -0400)]
package/glibmm: bump to version 2.60.0

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/faad2: add upstream security fixes
Baruch Siach [Mon, 1 Jul 2019 12:43:26 +0000 (15:43 +0300)]
package/faad2: add upstream security fixes

CVE-2018-20194: Stack buffer overflow on invalid input

CVE-2018-20362: Null pointer dereference when processing crafted AAC
input

Add two more crash fixes from upstream.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/ipset: bump to version 7.2
Baruch Siach [Mon, 1 Jul 2019 12:12:56 +0000 (15:12 +0300)]
package/ipset: bump to version 7.2

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/iptables: bump to version 1.8.3
Baruch Siach [Mon, 1 Jul 2019 12:12:55 +0000 (15:12 +0300)]
package/iptables: bump to version 1.8.3

Drop upstream patches.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libnftnl: bump to version 1.1.3
Baruch Siach [Mon, 1 Jul 2019 12:12:54 +0000 (15:12 +0300)]
package/libnftnl: bump to version 1.1.3

Rebase patch #1.

Cc: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agoutils/check-package: Add a quiet flag
Brandon Maier [Tue, 2 Jul 2019 18:52:27 +0000 (13:52 -0500)]
utils/check-package: Add a quiet flag

When running in a CI system, stat messages become white noise. Introduce
an option to suppress non-error, non-warning, messages.

Signed-off-by: Brandon Maier <brandon.maier@rockwellcollins.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agoboot/barebox: needs host-{flex,bison}
Marcin Niestroj [Tue, 2 Jul 2019 20:13:41 +0000 (22:13 +0200)]
boot/barebox: needs host-{flex,bison}

Barebox starting from 2019.02 no longer ships flex/bison generated
parser. Add conditional kconfig dependencies, same as we did for kernel
and uboot.

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/irssi: security bump to version 1.0.8
Peter Korsgaard [Wed, 3 Jul 2019 15:52:13 +0000 (17:52 +0200)]
package/irssi: security bump to version 1.0.8

Fixes the following security vulnerability:

CVE-2019-13045: Use after free when sending SASL login to the server found
by ilbelkyr

For more details, see the advisory:
https://irssi.org/security/html/irssi_sa_2019_06/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agocore/pkg-infra: really build all dependencies of foo with foo-depends
Yann E. MORIN [Tue, 2 Jul 2019 20:12:50 +0000 (22:12 +0200)]
core/pkg-infra: really build all dependencies of foo with foo-depends

Currently, foo-depends only builds build dependencies. This means that
download and extract dependencies are not built.

First, but a minor point, this is inconsistent with foo-show-depends,
which does display all dependencies:

    $ make host-gzip-show-depends
    host-skeleton host-tar
    $ make host-gzip-depends
        # Only host-skeleton is built and installed

Second, and more important, it makes it more difficult to preapre a
debug build, like so:

    $ make foo-depends
    $ tar cf output.tar output
    $ make foo
        # bummer, broken
        # edit foo.mk to try and fix it
    $ rm -rf output; tar xf output.tar
        # rince and repeat

Change foo-depends so that it really builds all the dependencies for
foo, bringing it on-par with foo-show-depends.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libglib2: fix build on ARM in Thumb mode
Yann E. MORIN [Mon, 24 Jun 2019 20:25:50 +0000 (22:25 +0200)]
package/libglib2: fix build on ARM in Thumb mode

Commit 4102db0f7 (package/libglib2: bump to version 2.60.3) did convert
libglib2 over to meson. In doing so, it left a very corner-case along.

When the target is an ARM CPU and the build is in thumb mode, then we
want to ensure that libglib2 is still built in arm mode (because of
inline asm).

But with meson, CFLAGS from the environment are passed to the host
compiler, so the build breaks, and the meson log contains:

    Appending CFLAGS from environment: '-D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -Os   -marm'
    No LDFLAGS in the environment, not changing global flags.
    No CPPFLAGS in the environment, not changing global flags.
    Sanity testing C compiler: cc
    Is cross compiler: False.
    Sanity check compiler command line: cc -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -marm [...]/build/libglib2-2.60.4/build/meson-private/sanitycheckc.c -o [...]/build/libglib2-2.60.4/build/meson-private/sanitycheckc.exe
    Sanity check compile stdout:
    -----
    Sanity check compile stderr:
    cc: error: unrecognized command line option ‘-marm’; did you mean ‘-mabm’?
    -----
    meson.build:1:0: ERROR: Compiler cc can not compile programs.

Fix that by using the new per-package CFLAGS feature of the meson infra.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Eric Le Bihan <eric.le.bihan.dev@free.fr>
Cc: Adam Duskett <aduskett@gmail.com>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libglib2: fix NLS build on musl and uclibc
Yann E. MORIN [Mon, 24 Jun 2019 20:25:49 +0000 (22:25 +0200)]
package/libglib2: fix NLS build on musl and uclibc

libglib2 uses a very crude and error-prone way to detect the intl
functions, which basically fails when the C library is not glibc.

There is a bug report about this in upstream meson [1], but it doesn't
seem to get any progress. Fixing that properly in Buildroot looks
complicated.

Now that a meson package can specify its LDFLAGS, use that to pass the
infrastructure-provided TARGET_NLS_LIBS to link with.

Fixes:
    http://autobuild.buildroot.org/results/f0d/f0d85d76786343d767fba9c7c5c01f042ecfc018/
    [...]

[1] https://github.com/mesonbuild/meson/issues/3740

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Adam Duskett <aduskett@gmail.com>
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agoinfra/pkg-meson: allow packages to pass custom compiler/linker flags
Peter Seiderer [Mon, 24 Jun 2019 20:25:48 +0000 (22:25 +0200)]
infra/pkg-meson: allow packages to pass custom compiler/linker flags

Meson does not allow to pass CFLAGS/LDFLAGS/CXXFLAGS via the environment
or via command-line arguments or options (instead, those flags from the
environment are passed to the host compiler, which is seldom what we
need). The only way to pas those flags is via the cross-compilation.conf
file.

Add LIBFOO_CFLAGS, LIBFOO_LDFLAGS and LIBFOO_CXXFLAGS variables to allow
packages to provide their own flags, possibly overriding the generic
ones entirely, as we allow for other infras. Those per-package flags will
then be used to generate the per-package cross-compilation.conf.

This means that the meson infra is the first and only infra for which
FOO_CFLAGS, FOO_LDFLAGS, and FOO_CXXFLAGS are meaningful, while for the
other infras, they are just variables private to the package itself.
Instead of naming those variables after the meson infra (e.g.
FOO_MESON_CFLAGS), we name them with a generic name, as maybe, just
maybe, we could also change the other infras to also recognise those
variables.

Just like for the HOST_MESON_SED_CFLAGS etc., we need to add auxiliary
variables to do convert the shell-formatted argument list into the
JSON-formatted list that meson expects. We can't use a pure-make
construct because the CFLAGS can contain quoting that needs to be
expanded by the shell. Similarly, we need a condition on the strip'ed
variable to avoid passing empty arguments.

To mimic this feature for packages that are built from the SDK, we also
install a templatised version of cross-compilation.conf, with three new
placeholders for custom flags. If a user wants to build a package that
needs custom flags, they can use that template to generate a per-package
cross-compilation.conf.

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Adam Duskett <aduskett@gmail.com>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Tested-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/meson: fix empty arguments in cross-compilation.conf
Yann E. MORIN [Mon, 24 Jun 2019 20:25:47 +0000 (22:25 +0200)]
package/meson: fix empty arguments in cross-compilation.conf

When TARGET_CFLAGS (or _LDFLAGS or _CXXFLAGS) are empty, but were
constructed by appending other variables, like:

    TARGET_CFLAGS = $(SOMETHING) $(SOMETHING_ELSE)

and both variables are empty, then $(TARGET_CFLAGS) is _not_ the
null-string; it's value is a string made of a single space.

This means that the construct:

    $(if $(TARGET_CFLAGS),true,false)

will in fact return 'true'.

In our case, it means that we will call:

    `printf '"%s", ' `

which expands to just:

    "",

which we are then happy to insert as-is in the generated
cross-compilation.conf.

Then meson, will happily call the compiler with an empty argument.

The compiler is less happy, though:

    arm-none-linux-gnueabi-gcc: error: : No such file or directory

And this is not even trivial to debug either... The only clue being that
there seems to be something missing between ': :'

We fix that testing the $(strip)ed value. We can still pass the
non-$(strip) expansion, because the shell will just do it for us, and we
are then sure there is at least one non-blank word in there.

Thanks a lot to Adam for his invaluable help debugging this!

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Adam Duskett <aduskett@gmail.com>
Cc: Eric Le Bihan <eric.le.bihan.dev@free.fr>
Cc: Arnout Vandecappelle <arnout@mind.be>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agosupport/testing: openjdk JNI test cases
Daniel J. Leach [Thu, 25 Apr 2019 19:40:45 +0000 (14:40 -0500)]
support/testing: openjdk JNI test cases

This test case builds a native library and ensures a Java class can load
and interact with the native library. The test also verifies Java code
can make system calls via the native library.

Signed-off-by: Daniel J. Leach <dleach@belcan.com>
Acked-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Tested-by: Adam Duskett <aduskett@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/openjdk and package/openjdk-bin: bump to version 12.0.1+12
Adam Duskett [Fri, 26 Apr 2019 19:32:54 +0000 (15:32 -0400)]
package/openjdk and package/openjdk-bin: bump to version 12.0.1+12

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
[Arnout: rebase after change of version formatting]
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopython-inflection: new package
John Faith [Mon, 24 Jun 2019 15:45:41 +0000 (15:45 +0000)]
python-inflection: new package

A string transformation library that singularizes and pluralizes English
words, and transforms strings from CamelCase to underscored string.
Inflection is a port of Ruby on Rails' inflector to Python.

https://github.com/jpvanhal/inflection

Signed-off-by: John Faith <jfaith@impinj.com>
[Arnout: select unicodedata, add hash for license file]
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/rtmpdump: Add patch to include limits.h
Bernd Kuhls [Mon, 24 Jun 2019 19:20:14 +0000 (21:20 +0200)]
package/rtmpdump: Add patch to include limits.h

Fixes:
http://autobuild.buildroot.net/results/8fd/8fd65149bdbbaf5dcb8e6a9d543f4224875bb156/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/eudev: remove patches
Bernd Kuhls [Mon, 24 Jun 2019 20:19:41 +0000 (22:19 +0200)]
package/eudev: remove patches

Both were committed upstream:
https://github.com/gentoo/eudev/commit/2cb6b734de901dda6e631de5dffbd4cb8e165cbb
https://github.com/gentoo/eudev/commit/906654a0ab73dd488b101a2047c3c6a1205f7548

Reported-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/dialog: fix build with NLS
Fabrice Fontaine [Fri, 28 Jun 2019 20:32:09 +0000 (22:32 +0200)]
package/dialog: fix build with NLS

Fixes:
 - http://autobuild.buildroot.org/results/9287ffbb86a7dc09cda5f99f87445fa884e77625

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/expat: security bump to version 2.2.7
Peter Korsgaard [Fri, 28 Jun 2019 13:26:13 +0000 (15:26 +0200)]
package/expat: security bump to version 2.2.7

Fixes the following security vulnerabilites:

CVE-2018-20843: In libexpat in Expat before 2.2.7, XML input including XML
names that contain a large number of colons could make the XML parser
consume a high amount of RAM and CPU resources while processing (enough to
be usable for denial-of-service attacks).

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/docker-cli: security bump to version 18.09.7
Peter Korsgaard [Fri, 28 Jun 2019 06:32:46 +0000 (08:32 +0200)]
package/docker-cli: security bump to version 18.09.7

Fixes CVE-2018-15664: API endpoints behind the 'docker cp' command are
vulnerable to a symlink-exchange attack with Directory Traversal, giving
attackers arbitrary read-write access to the host filesystem with root
privileges, because daemon/archive.go does not do archive operations on a
frozen filesystem (or from within a chroot).

And includes additional post-18.09.6 fixes:

Builder
- Fixed a panic error when building dockerfiles that contain only comments.
  moby/moby#38487
- Added a workaround for GCR authentication issue. moby/moby#38246
- Builder-next: Fixed a bug in the GCR token cache implementation
  workaround.  moby/moby#39183

Runtime
- Added performance optimizations in aufs and layer store that helps in
  massively parallel container creation and removal.  moby/moby#39107,
  moby/moby#39135
- daemon: fixed a mirrors validation issue. moby/moby#38991
- Docker no longer supports sorting UID and GID ranges in ID maps.
  moby/moby#39288

Logging
- Added a fix that now allows large log lines for logger plugins.
  moby/moby#39038

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/docker-engine: security bump to version 18.09.7
Peter Korsgaard [Fri, 28 Jun 2019 06:32:45 +0000 (08:32 +0200)]
package/docker-engine: security bump to version 18.09.7

Fixes CVE-2018-15664: API endpoints behind the 'docker cp' command are
vulnerable to a symlink-exchange attack with Directory Traversal, giving
attackers arbitrary read-write access to the host filesystem with root
privileges, because daemon/archive.go does not do archive operations on a
frozen filesystem (or from within a chroot).

And includes additional post-18.09.6 fixes:

Builder
- Fixed a panic error when building dockerfiles that contain only comments.
  moby/moby#38487
- Added a workaround for GCR authentication issue. moby/moby#38246
- Builder-next: Fixed a bug in the GCR token cache implementation
  workaround.  moby/moby#39183

Runtime
- Added performance optimizations in aufs and layer store that helps in
  massively parallel container creation and removal.  moby/moby#39107,
  moby/moby#39135
- daemon: fixed a mirrors validation issue. moby/moby#38991
- Docker no longer supports sorting UID and GID ranges in ID maps.
  moby/moby#39288

Logging
- Added a fix that now allows large log lines for logger plugins.
  moby/moby#39038

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
5 years agopackage/libcamera: bump to version caf25dc5cfd11b965316f02610d49ae3d886716b
Kieran Bingham [Tue, 25 Jun 2019 21:56:17 +0000 (22:56 +0100)]
package/libcamera: bump to version caf25dc5cfd11b965316f02610d49ae3d886716b

Buildroots autobuild identified a failure on GCC v6.2 and GCC v6.3,
producing the following warning (reported as error due to -Werror):

  event_dispatcher_poll.cpp:231:13: error: types may not be defined
      in a for-range-declaration [-Werror]

              for (const struct pollfd &pfd : pollfds) {
                         ^~~~~~
              cc1plus: all warnings being treated as errors

A fix has been integrated upstream, bump the package to incorporate it.

Fixes: http://autobuild.buildroot.net/results/f6dd4c60c04892c8b1669e6000fce7edb2b6349e/
Signed-off-by: Kieran Bingham <kieran.bingham@ideasonboard.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libinput: bump version to 1.13.3
Peter Seiderer [Tue, 25 Jun 2019 20:20:27 +0000 (22:20 +0200)]
package/libinput: bump version to 1.13.3

For details see [1].

[1] https://lists.freedesktop.org/archives/wayland-devel/2019-June/040650.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/libevdev: bump version to 1.7.0
Peter Seiderer [Tue, 25 Jun 2019 20:17:34 +0000 (22:17 +0200)]
package/libevdev: bump version to 1.7.0

For details see [1] and [2].

[1] https://lists.freedesktop.org/archives/input-tools/2019-May/001511.html
[2] https://lists.freedesktop.org/archives/input-tools/2019-June/001512.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/bzip2: add upstream security fix for CVE-2019-12900
Jared Bents [Wed, 26 Jun 2019 14:20:42 +0000 (09:20 -0500)]
package/bzip2: add upstream security fix for CVE-2019-12900

Patch to resolve cve-2019-12900 which affects bzip2 versions 1.0.6 and older

More information can be found at
https://nvd.nist.gov/vuln/detail/CVE-2019-12900

Signed-off-by: Jared Bents <jared.bents@rockwellcollins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years ago{linux, linux-headers}: bump 4.{4, 9, 14, 19}.x / 5.1.x series
Peter Korsgaard [Thu, 27 Jun 2019 06:57:21 +0000 (08:57 +0200)]
{linux, linux-headers}: bump 4.{4, 9, 14, 19}.x / 5.1.x series

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agoboard/qemu: ensure root is available before mounting it
Yann E. MORIN [Sat, 22 Jun 2019 16:51:20 +0000 (18:51 +0200)]
board/qemu: ensure root is available before mounting it

On my machine, it happens once in a while that the virtualised machine
boots too fast for the rootfs to be available at the time the kernel
tries to mount it.

For example, board/qemu/arm-vexpress/readme.txt suggested changing
"-smp 1" up to "-smp 4". But doing so here causes a kernel panic:

    VFS: Cannot open root device "mmcblk0" or unknown-block(0,0): error -6
    Please append a correct "root=" boot option; here are the available partitions:
    1f00          131072 mtdblock0
     (driver?)
    1f01           32768 mtdblock1
     (driver?)
    Kernel panic - not syncing: VFS: Unable to mount root fs on
    unknown-block(0,0)

So, add the oh-so-useful 'rootwait' option to all kernel command lines
for qemu defconfigs.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Joel Stanley <joel@jms.id.au>
Cc: Mark Corbin <mark.corbin@embecosm.com>
Cc: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
5 years agopackage/icu: adjust version information
Thomas Petazzoni [Mon, 24 Jun 2019 04:23:33 +0000 (06:23 +0200)]
package/icu: adjust version information

The icu upstream developers have a strange way of labelling their versions:

 - The Github tags are named release-XX-Y, and therefore the versions
   referenced by by Release Monitoring look like 60-2 or 64-1.

 - The tarballs contain the version with an underscore separator, i.e
   60_2 or 64_1.

 - The directories on http://download.icu-project.org/files/icu4c/
   contain the version with a dot separator, i.e 60.2 or 64.1.

In order to have our <pkg>_VERSION match the one on Release
Monitoring, we adjust it to use the underscore separator, and then
further tweak the ICU_SOURCE and ICU_SITE definitions to keep
everything working.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>