Fabrice Fontaine
553d09b967
package/bind: add SELinux module
...
Support for bind is added by the services/bind module in the SELinux
refpolicy.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit c7fd40c7d8 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 19:49:33 +02:00
Fabrice Fontaine
68aa77bf52
package/apache: add SELinux module
...
Support for apache is added by the services/apache module in the
SELinux refpolicy.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit bd91d7826e )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 19:48:54 +02:00
Fabrice Fontaine
fc6cb3caf8
package/tor: add SELinux module
...
Support for tor is added by the services/tor module in the SELinux
refpolicy.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 1f9090b6b4 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 19:48:48 +02:00
Fabrice Fontaine
ced68e50a2
package/avahi: add SELinux module
...
Support for avahi is added by the services/avahi module in the SELinux
refpolicy.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 952c42e3e7 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 19:47:50 +02:00
Fabrice Fontaine
6a02b01f74
package/dnsmasq: add SELinux module
...
Support for dnsmasq is added by the services/dnsmasq module in the
SELinux refpolicy.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 68d886c4ea )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 19:46:41 +02:00
Fabrice Fontaine
9d8a996ad5
package/bird: add SELinux module
...
Support for bird is added by the services/bird module in the SELinux
refpolicy.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 459d725db0 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 19:45:37 +02:00
John Keeping
7ac3f1675a
package/cryptsetup: fix tmpfiles.d setup
...
The configure script uses pkg-config to detect the location of
tmpfiles.d but imposes an unspecified ordering dependency with systemd.
Instead of relying on systemd being built before cryptsetup, set the
directory path explcitly, and ensure it is not set when systemd-tmpfiles
is disabled.
Signed-off-by: John Keeping <john@metanate.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit a2e93a802c )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 17:17:00 +02:00
Raphaël Mélotte
472a3ffe4a
DEVELOPERS: update email address for Raphaël Mélotte
...
Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit fade40dfc3 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 16:36:01 +02:00
Fabrice Fontaine
ce1eb3f907
package/granite: link with -lintl if needed
...
Link with TARGET_NLS_LIBS if needed to avoid the following build
failure:
/home/buildroot/autobuild/run/instance-2/output-1/host/opt/ext-toolchain/bin/../lib/gcc/xtensa-buildroot-linux-uclibc/9.3.0/../../../../xtensa-buildroot-linux-uclibc/bin/ld: lib/libgranite.so.5.4.0.p/meson-generated_Application.c.o: in function `_vala_array_free.constprop.0':
Application.c:(.text+0x340): undefined reference to `libintl_bindtextdomain'
Fixes:
- http://autobuild.buildroot.org/results/d754cb776a1e11031cef4e66d45619aad5c4575d
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 82a5ffca28 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 16:30:19 +02:00
Peter Seiderer
ba1da14621
package/linux-firmware: remove duplicated entries for brcmfmac4366b-pcie.bin and brcmfmac4366c-pcie.bin
...
Remove duplicated entries for brcmfmac4366b-pcie.bin and
brcmfmac4366c-pcie.bin (present since addition with
commit ca6e3f4b90 )
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 1ba6a30905 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 16:28:20 +02:00
Fabrice Fontaine
6bf89eb14b
package/ripgrep: add RIPGREP_CPE_ID_VENDOR
...
cpe:2.3:a:ripgrep_project:ripgrep is a valid CPE identifier for this
package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aripgrep_project%3Aripgrep
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 28d198c0b8 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 16:05:16 +02:00
Fabrice Fontaine
cbd09bce7a
package/lrzsz: add LRZSZ_CPE_ID_VENDOR
...
cpe:2.3:a:lrzsz_project:lrzsz is a valid CPE identifier for this
package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alrzsz_project%3Alrzsz
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 2352c82731 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 16:04:42 +02:00
Bernd Kuhls
75649cef02
package/hdparm: bump version to 9.62
...
Updated project site (old site was not updated since 2010) and package
help text.
Removed md5 hash.
Switched _SITE to https.
Release notes:
https://sourceforge.net/p/hdparm/news/2021/04/hdparm-961-is-released/
https://sourceforge.net/p/hdparm/news/2021/05/hdparm-962-is-released/
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit ad0267f1a8 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 16:00:56 +02:00
Bernd Kuhls
39666e0626
package/gptfdisk: bump version to 1.0.8
...
Release notes:
https://sourceforge.net/p/gptfdisk/code/ci/master/tree/NEWS
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit e8085cc813 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 15:59:11 +02:00
James Hilliard
1847e17688
package/nodejs: bump to version 12.22.3
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit e5db5a472e )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 15:51:07 +02:00
Bernd Kuhls
1824f3b134
package/mpv: fix reproducible build issues
...
Do not include the build date when creating reproducible builds.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 083b48194f )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 15:43:23 +02:00
Fabrice Fontaine
da13f7e99f
package/spice: drop duplicated opus handling
...
opus dependency is handled twice since commit
f33f7a4f64
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 929c977afb )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 14:34:24 +02:00
Fabrice Fontaine
49281d10e3
package/spice: security bump to version 0.15.0
...
Fix CVE-2021-20201: A flaw was found in spice in versions before
0.14.92. A DoS tool might make it easier for remote attackers to cause a
denial of service (CPU consumption) by performing many renegotiations
within a single connection.
https://gitlab.freedesktop.org/spice/spice/-/tags/v0.15.0
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit b784f1bc0f )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 14:33:46 +02:00
Peter Seiderer
29fd7523fb
package/wireless-regdb: bump version to 2021.04.21
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit e93cf29a70 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 14:32:53 +02:00
Geoff Levand
9d46c05d1d
package/flannel: update project URL
...
Update flannel project URL.
from: github.com/coreos/flannel
to: github.com/flannel-io/flannel
Signed-off-by: Geoff Levand <geoff@infradead.org >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 2f6cd888f4 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 14:31:49 +02:00
Fabrice Fontaine
7e52c8e625
package/libndp: drop patch
...
Patch is not needed since bump to version 1.7 in commit
6274f41913 and
94e9a082d7
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit f6461f6fc8 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 14:30:36 +02:00
Gwenhael Goavec-Merou
659514808c
package/gqrx: fix comment dependency in Config.in
...
comment message for gqrx is always displayed. This is due to an invert
dependency: GQRX depends on !BR2_STATIC_LIBS so comment must depends
on BR2_STATIC_LIBS.
Signed-off-by: Gwenhael Goavec-Merou <gwenhael.goavec-merou@trabucayre.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit d9512b08a4 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 14:28:57 +02:00
Giulio Benetti
5ea8c852df
package/binutils: fix building or1k with host gcc version < 5
...
Add patches to fix building on hosts that provide gcc version < 5
(i.e. 4.9), otherwise they fail due to missing default '-std=gnu11' option
on variable declaration inside for loops.
The patch is pending upstream:
https://sourceware.org/pipermail/binutils/2021-June/116884.html
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com >
Reviewed-by: Romain Naour <romain.naour@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 747e2eed88 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 14:24:26 +02:00
Thomas Petazzoni
cbb7134a4f
package/exiv2: fix patch with stack protector flag
...
One of the files have CRLF line endings, which have been lost in the
process, causing build issues. Also, we update the upstream status of
the patch.
Fixes:
http://autobuild.buildroot.net/results/31744f8476819c725f8c0024529515bb8059582d/
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit a6a1810711 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 13:04:26 +02:00
Fabrice Fontaine
9eb4f576e7
package/exiv2: fix build without SSP
...
Build without SSP fails since bump to version 0.27.4 in commit
bcace42942
This is due to the fact that
bbe0b70840
removed the wrong GCC_ prefix from HAS_FSTACK_PROTECTOR_STRONG variable
Fixes:
- http://autobuild.buildroot.org/results/ae4635899124c602c70d2b342a76f95c34aa4a3d
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit b18d9d6191 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 13:04:16 +02:00
Mirza Kapetanovic
44ea3c1fff
package/uboot-tools: concat files before passing to env image tool
...
Fix BR2_PACKAGE_HOST_UBOOT_TOOLS_ENVIMAGE_SOURCE so that files are actually concatenated
as described in the help text.
Signed-off-by: Mirza Kapetanovic <mirza.kapetanovic@gmail.com >
Reviewed-by: Matthew Weber <matthew.weber@collins.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit d8f5a017b8 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-04 13:01:18 +02:00
Fabrice Fontaine
0c5202ae04
package/dovecot: ignore CVE-2016-4983
...
CVE-2016-4983 is an issue in a postinstall script in the dovecot rpm,
which is part of the Red Hat packaging and not part of upstream dovecot
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
(cherry picked from commit 948e71689a )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 22:45:06 +02:00
Fabrice Fontaine
88e7d6a6c0
package/libuci: ignore CVE-2019-15513
...
CVE-2019-15513 was fixed upstream in 2015 with commit
19e29ffc15dbd958e8e6a648ee0982c68353516f, which is older than the commit
we currently use in LIBUCI_VERSION.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
[yann.morin.1998@free.fr: reword comment and commit log]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 46273a8eb9 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 22:42:35 +02:00
Fabrice Fontaine
8cbd691478
package/libuci: add LIBUCI_CPE_ID_VENDOR
...
cpe:2.3:a:openwrt:libuci is a valid CPE identifier for this package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aopenwrt%3Alibuci
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
(cherry picked from commit 9852113fcd )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 22:41:08 +02:00
Fabrice Fontaine
46c475f3f4
package/feh: add FEH_CPE_ID_VENDOR
...
cpe:2.3:a:feh_project:feh is a valid CPE identifier for this package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Afeh_project%3Afeh
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
(cherry picked from commit 74adec4f3a )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 22:40:07 +02:00
Yann E. MORIN
b148bafd37
boot/uboot: add missing dependency to host-pkgconf
...
Commit 2eaa6d0f36 (boot/uboot: fix uboot building host tools on x86
architecture) added use of $(PKG_CONFIG_HOST_BINARY), but forgot to add
the corresponding build-ordr dependency.
Add this missing depenency now.
Additionally, the associated test had an explicit host pkgconf enbled in
its configuration. This is superfluous now that uboot properly depends
on host-pkgconf, so drop that from the test.
Note: it hapenned to work, because host-pkgconf, when explicitly enabled
in the configuration, and without per-package directories, would build
before uboot and thus be available. This would fail with PPD, though,
and thus would break for TLPB.
Reported-by: Peter Korsgaard <peter@korsgaard.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
Cc: Kory Maincent <kory.maincent@bootlin.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
(cherry picked from commit d0edfec1e2 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 22:10:22 +02:00
Kory Maincent
e0b7a279bd
boot/uboot: fix uboot building host tools on x86 architecture
...
The make all command run the tools/makefile on the process.
This makefile use "pkg-config" command to support static link.
The issue is the use of pkg-config configured for crosscompiling
to build binaries tools for host architecture.
To fix it, I add pkg-config environment variable to configure it for host.
Add a test to avoid future regress on the build of U-boot.
Signed-off-by: Kory Maincent <kory.maincent@bootlin.com >
[yann.morin.1998@free.fr:
- fix mixed space-TAB indentation
- fix check-package
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2eaa6d0f36 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 22:10:02 +02:00
Fabrice Fontaine
d8887c5c58
package/avahi: fix CVE-2021-36217
...
Avahi 0.8 allows a local denial of service (NULL pointer dereference and
daemon crash) against avahi-daemon via the D-Bus interface or a "ping
.local" command.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
(cherry picked from commit dd7b9fa02b )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 21:56:39 +02:00
Fabrice Fontaine
08f9aeefe5
package/putty: fix CVE-2021-36367
...
PuTTY through 0.75 proceeds with establishing an SSH session even if it
has never sent a substantive authentication response. This makes it
easier for an attacker-controlled SSH server to present a later spoofed
authentication prompt (that the attacker can use to capture credential
data, and use that data for purposes that are undesired by the client
user).
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
(cherry picked from commit 1352b59eb2 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 21:54:01 +02:00
Peter Korsgaard
75f37e2b64
Revert "package/putty: Ignore CVE-2021-33500"
...
This reverts commit 01063c4291 .
With putty now bumped to 0.75, this can be dropped.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 21:53:07 +02:00
Fabrice Fontaine
76a1d3b6e8
package/putty: fix build on uclibc
...
Fix build failure on uclibc raised since bump to version 0.75 in commit
d562009f7b
Fixes:
- http://autobuild.buildroot.org/results/726f7c5ce13e78ed91e827b872e9d7ccfa13f298
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
(cherry picked from commit aea9376acc )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 21:51:47 +02:00
Alexander Dahl
216902567f
package/putty: bump to version 0.75
...
Upstream does not set -Werror in its build files anymore. License file
just changed copyright years and holders. PGP signatures of source
tarball and hashes were checked.
Link: https://www.chiark.greenend.org.uk/~sgtatham/putty/releases/0.75.html
Link: https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
Signed-off-by: Alexander Dahl <post@lespocky.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
(cherry picked from commit d562009f7b )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 21:51:40 +02:00
Fabrice Fontaine
71f5e2e92f
package/pcre2: add PCRE2_CPE_ID_VENDOR
...
cpe:2.3:a:pcre:pcre2 is a valid CPE identifier for this package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Apcre%3Apcre2
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
(cherry picked from commit c9bfe7b19e )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 21:43:47 +02:00
Fabrice Fontaine
525b98fd11
package/trinity: add TRINITY_CPE_ID_VENDOR
...
cpe:2.3:a:trinity_project:trinity is a valid CPE identifier for this
package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Atrinity_project%3Atrinity
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
(cherry picked from commit 60ef5ab910 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 21:39:35 +02:00
Bruno Marie
a75b0ffd89
package/mpg123: remove --disable-lfs-alias option
...
Commit 56b28d3ee1 (mpg123: bump to version 1.13.1) added the
--disable-lfs-alias option, without explaining why it was needed.
However, this causes undefined references for apps that want to link
against mpg123.
The help for that option is pretty explicit that this is a dangerous
option to use:
disable alias wrappers for largefile bitness (mpg123_seek_32 or
mpg123_seek_64 in addition to mpg123_seek, or the other way around;
It is a mess, do not play with this!)
The default is that it is enabled, so leave it at it.
Signed-off-by: Bruno Marie <gameblabla@protonmail.com >
[yann.morin.1998@free.fr: rework commit log]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 49e436f482 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 17:13:40 +02:00
Fabrice Fontaine
4e2ffdef88
package/libnice: add gobject-introspection optional dependency
...
gobject-introspection is an optional dependency which is enabled by
default since version 0.1.8 and
0388646bdb
Fixes:
- http://autobuild.buildroot.org/results/1cba7aa233e19472a69ffc2d8f7324d363a22deb
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit aade2fd293 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 17:08:16 +02:00
Fabrice Fontaine
04cd33ab53
package/keepalived: fix build with kernel >= 5.13
...
Fixes:
- http://autobuild.buildroot.org/results/9a93d7d76b0a4319c29fbf7b5986bcc78539ae8b
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Tested-by: Maxim Kochetkov <fido_max@inbox.ru >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit db67c4fcff )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 17:05:23 +02:00
Fabrice Fontaine
f2263ab187
package/libtipc: renumber patches
...
Commit 883a33ece5 forgot to renumber
remaining patches
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit bdad2d09e3 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 16:32:35 +02:00
Fabrice Fontaine
63f326f860
package/tpm2-tools: add TPM2_TOOLS_CPE_ID_VENDOR
...
cpe:2.3:a:tpm2-tools_project:tpm2-tools is a valid CPE identifier for
this package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Atpm2-tools_project%3Atpm2-tools
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 7e913bf36e )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 16:30:08 +02:00
Fabrice Fontaine
89c0282e43
package/linuxptp: add LINUXPTP_CPE_ID_VENDOR
...
cpe:2.3:a:linuxptp_project:linuxptp is a valid CPE identifier for this
package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alinuxptp_project%3Alinuxptp
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 9d3dd83058 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 16:28:56 +02:00
Fabrice Fontaine
14e08599bb
package/suricata: security bump to version 6.0.3
...
Various security, performance, accuracy and stability issues have been
fixed, including a critical evasion assigned CVE-2021-35063.
https://forum.suricata.io/t/suricata-6-0-3-and-5-0-7-released/1489
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 4c429c3f8c )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 16:27:53 +02:00
Fabrice Fontaine
001dfcd898
package/libhtp: bump to version 0.5.38
...
https://github.com/OISF/libhtp/releases/tag/0.5.38
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 48c9adbe70 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 16:27:41 +02:00
Fabrice Fontaine
fd1492363c
package/mbedtls: security bump to version 2.16.11
...
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-07-1
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-07-2
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.11
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 0683ab9fca )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 16:26:47 +02:00
Heiko Thiery
0376fc9373
package/linuxptp: security bump version to 3.1.1
...
This fixes the following CVEs:
- CVE-2021-3570 linuxptp: missing length check of forwarded messages
- CVE-2021-3571 linuxptp: wrong length of one-step follow-up in transparent clock
See mailing list post for details: https://sourceforge.net/p/linuxptp/mailman/message/37315519/
Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit a7f3dc0a02 )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 16:25:15 +02:00
Fabrice Fontaine
f87a20a9a4
package/python-urllib3: security bump to version 1.26.6
...
Fix CVE-2021-33503: An issue was discovered in urllib3 before 1.26.5.
When provided with a URL containing many @ characters in the authority
component, the authority regular expression exhibits catastrophic
backtracking, causing a denial of service if a URL were passed as a
parameter or redirected to via an HTTP redirect.
https://github.com/urllib3/urllib3/blob/1.26.6/CHANGES.rst
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
(cherry picked from commit 56a105f9fb )
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2021-08-03 16:23:41 +02:00