Commit Graph

51345 Commits

Author SHA1 Message Date
Thomas De Schampheleire
0e6c245f7a package/libglib2: correct upstream status for patch 0001
Patch '0001-fix-compile-time-atomic-detection.patch' claims to be Merged but
this is not true. The linked issue is closed with 'Needs information', and
the code itself is effectively not merged.

Clarify the 'Upstream-status' line to make this more clear.

Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 43021dfb77)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 14:46:14 +01:00
Peter Korsgaard
b7efd22e1d package/python-lxml: security bump to version 4.6.2
Fixes the following security issues:

* 4.6.2: A vulnerability (CVE-2020-27783) was discovered in the HTML Cleaner
  by Yaniv Nizry, which allowed JavaScript to pass through.  The cleaner now
  removes more sneaky "style" content.

* 4.6.1: A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry,
  which allowed JavaScript to pass through.  The cleaner now removes more
  sneaky "style" content.

For more details, see the changes file:
https://github.com/lxml/lxml/blob/lxml-4.6.2/CHANGES.txt

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ea41a5faab)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 14:42:17 +01:00
Asaf Kahlon
a727619768 package/python-lxml: bump to version 4.5.1
The options --with-xslt-config and --with-xml2-config were
renamed to --xslt-config and --xml2-config", respectively.

Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fac3cfc110)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 14:42:12 +01:00
James Hilliard
c65d237786 package/python-lxml: bump to version 4.5.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 36074cd3de)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 14:42:03 +01:00
Fabrice Fontaine
5543ec89bc package/sqlcipher: security bump to version 4.4.2
Fix CVE-2020-27207: Zetetic SQLCipher 4.x before 4.4.1 has a
use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in
sqlite3.c. A remote denial of service attack can be performed. For
example, a SQL injection can be used to execute the crafted SQL command
sequence. After that, some unexpected RAM data is read.

https://www.zetetic.net/blog/2020/11/25/sqlcipher-442-release

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f38893f8dd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 14:40:59 +01:00
Yann E. MORIN
76428d0f07 package/dtv-scan-tables: switch upstream location
The old git tree is unreachable now, switch to using the new one.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit c7bd3805bd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 14:13:41 +01:00
Yann E. MORIN
4d5e23d20b package/qt5base: fix build with TI SGX GL stack
qt5base FTBFS with TI SGX GL stack because it defines a type that is
incompatible with that expected by Qt.

Fix that by adapting a mix of upstream bug reports, upstream tentative
patch, and various comments on various Qt forums, none of which were
satisfying for various reasons explained in each resource:

  - https://bugreports.qt.io/browse/QTBUG-72567
  - https://codereview.qt-project.org/c/qt/qtbase/+/248270
  - https://forum.qt.io/topic/88588/qtbase-compilation-error-with-device-linux-rasp-pi3-g-qeglfskmsgbmwindow-cpp/8
  - https://forum.qt.io/topic/91596/raspberry-pi-3-compiling-qt-5-11-0-problem/6
  - https://patchwork.ozlabs.org/project/buildroot/patch/20200702201125.3639873-1-aduskett@gmail.com/#2579598

... which, mixed together with my little understanding of Qt, GL, and
C++, gave a relatively simple patch that overcomes the build failure on
TI's SGX, while at the same time keeping buildability and functionality
on other platforms.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Adam Duskett <aduskett@gmail.com>
Cc: Markus <zehnder@live.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit cf7f3112f6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d71fc330fe)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:48:56 +01:00
Peter Korsgaard
e8b2fcec13 package/qt5xmlpatterns: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 80dd5c98f4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:48:23 +01:00
Peter Korsgaard
bcfcd258f3 package/qt5x11extras: drop qt 5.6 support
And get rid of the 5.12.8 subdir now that the version selection is gone.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 83f8813d41)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:47:36 +01:00
Peter Korsgaard
15c57e1768 package/qt5webview: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 55e5b3464b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:46:51 +01:00
Peter Korsgaard
bd1881d1ec package/qt5websockets: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 9c59c74714)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:46:07 +01:00
Peter Korsgaard
09b287465f package/qt5webkit-examples: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1b15344f43)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:45:40 +01:00
Peter Korsgaard
6cf7b1dfb8 package/qt5webkit: drop qt 5.6 support
And get rid of the 5.9.1 subdir now that the version selection is gone.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 68917a6fe5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:45:10 +01:00
Peter Korsgaard
2ecafe6d10 package/qt5webengine: drop qt 5.6 support
And get rid of the 5.12.8 subdir now that the version selection is gone.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d2b562b5ff)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:43:59 +01:00
Peter Korsgaard
7caf208b08 package/qt5webchannel: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f57ab9d1d2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:42:11 +01:00
Peter Korsgaard
d3d75aed03 package/qt5wayland: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7a962dacdc)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:41:30 +01:00
Peter Korsgaard
608108df3f package/qt5virtualkeyboard: drop qt 5.6 support
And get rid of the 5.12.8 subdir now that the version selection is gone.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8f6092dbb6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:40:54 +01:00
Peter Korsgaard
5bf9a03252 package/qt5tools: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 86940ea633)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:40:12 +01:00
Peter Korsgaard
55e1da2290 package/qt5svg: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c99c2f7e6a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:39:39 +01:00
Peter Korsgaard
50556ade3b package/qt5serialport: drop qt 5.6 support
And get rid of the 5.12.8 subdir now that the version selection is gone.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit abdf3851e9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:38:58 +01:00
Peter Korsgaard
8180d61712 package/qt5serialbus: drop qt 5.6 support
And get rid of the 5.12.8 subdir now that the version selection is gone.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 061157fc7b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:37:46 +01:00
Peter Korsgaard
844ce63431 package/qt5sensors: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e4b6e4198a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:36:53 +01:00
Peter Korsgaard
698211f5be package/qt5scxml: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 57e30291c5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:36:23 +01:00
Peter Korsgaard
6134b5fe0c package/qt5script: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 051a2e7b1b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:36:10 +01:00
Peter Korsgaard
d43070a001 package/qt5quickcontrols2: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 6496afdcde)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:35:03 +01:00
Peter Korsgaard
79b03affb0 package/qt5quickcontrols: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 49bdf1763b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:33:12 +01:00
Peter Korsgaard
3152f3995a package/qt5multimedia: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit be8015ac6d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:32:30 +01:00
Peter Korsgaard
e3b230b391 package/qt5location: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7bc2eca708)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:31:53 +01:00
Peter Korsgaard
6a204ef35a package/qt5imageformats: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit fce260c8c0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:31:11 +01:00
Peter Korsgaard
556206d43c package/qt5graphicaleffects: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit bd75bdc762)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:30:36 +01:00
Peter Korsgaard
0df80d8969 package/qt5enginio: drop qt 5.6 support
And get rid of the now unused BR2_PACKAGE_QT5BASE_OPENSSL symbol.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 366b3bb39f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:30:05 +01:00
Peter Korsgaard
b99ba37135 package/qt5declarative: drop 5.6 support
And get rid of the 5.12.8 subdir now that the version selection is gone.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 17fafd712a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:29:00 +01:00
Peter Korsgaard
a2cd78333f package/qt5connectivity: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 29469b6452)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:12:32 +01:00
Peter Korsgaard
3e0af84a27 package/qt5charts: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4ccf0f8360)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:10:45 +01:00
Peter Korsgaard
65670e9e4e package/qt5canvas3d: drop qt 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 50a3409a91)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:08:39 +01:00
Peter Korsgaard
b31ec94b71 package/qt53d: drop 5.6 support
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 66afb27b9d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 12:07:40 +01:00
Peter Korsgaard
1c07cb49bf package/qt5base: drop 5.6 support
And get rid of the 5.12.8 subdir now that the version selection is gone.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7ef6ade0de)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 11:43:41 +01:00
Adam Duskett
796733bd2a package/ti-sgx-demos: use KMS-based demos
Weston does not work with the ti-sgx SDK, so switch to using the
KMS-based demos.

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
[yann.morin.1998@free.fr: split off into its own patch]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 29ff603f08)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 10:57:03 +01:00
Adam Duskett
4ee7723e76 configs/beaglebone_qt5: switch to using KMS instead of wayland+weston
weston does not work on the ti-sgx SDK, so switch to using KMS directly,
and drop the wayland-related config options.

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
[yann.morin.1998@free.fr: split into its own patch]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8efc5dce98)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-21 10:56:39 +01:00
Peter Korsgaard
90588ad893 package/ruby: add upstream security fix for CVE-2020-25613
For details, see the advisory:
https://www.ruby-lang.org/en/news/2020/09/29/http-request-smuggling-cve-2020-25613/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-19 08:37:05 +01:00
Peter Korsgaard
69614ac90f package/libressl: security bump to version 3.1.5
Fixes the following security issues:

    * Malformed ASN.1 in a certificate revocation list or a timestamp
      response token can lead to a NULL pointer dereference.

https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.1.5-relnotes.txt

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 23:39:54 +01:00
Fabrice Fontaine
420fa7ecc7 package/libressl: bump to version 3.1.4
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.1.4-relnotes.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d226d30286)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 23:39:49 +01:00
Adam Duskett
67f4c95b03 package/libressl: bump version to 3.1.3
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7c8910e095)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 23:39:44 +01:00
Adam Duskett
43887867ca package/libresslL: bump version to 3.1.2
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit e976958563)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 23:39:38 +01:00
Fabrice Fontaine
e179ef2193 package/mbedtls: security bump to version 2.16.9
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 455387fa3a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 11:21:08 +01:00
Marcin Niestroj
53b53b01ae package/python-pyparsing: update link to project
Old link no longer works, so replace that with link to GitHub.

Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1cec1e3f7f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 11:17:30 +01:00
Julien Grossholtz
c9b60fb1b7 package/paho-mqtt-c: bump to version 1.3.7
Paho-mqtt-c maintainance release. It fixes some bugs including client
times out and buffer overflow:

https://github.com/eclipse/paho.mqtt.c/milestone/9?closed=1

Signed-off-by: Julien Grossholtz <julien.grossholtz@openest.io>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 71e0d12ed1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 11:14:30 +01:00
Fabrice Fontaine
0ad49b4144 package/paho-mqtt-c: bump to version 1.3.6
Update LICENSE hash, EDL version has been fixed with
34ec96cac5

https://github.com/eclipse/paho.mqtt.c/milestone/11?closed=1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 6eba48124e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 11:14:27 +01:00
Michael Vetter
e3d92a854b package/jasper: security bump to 2.0.23
Changes:
* Fix CVE-2020-27828, heap-overflow in cp_create() in jpc_enc.c

Signed-off-by: Michael Vetter <jubalh@iodoru.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit ac9f50f204)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 11:12:04 +01:00
Fabrice Fontaine
a9cd449546 package/jasper: fix tarball name in hash file
tarball name was not updated by commit
0ca16ace62

While at it also update indentation in hash file (two spaces)

Fixes:
 - http://autobuild.buildroot.org/results/1356d309d45b5eedeec375e2fdc0cf2ad7839a55

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 245c643fc7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-13 11:11:56 +01:00