Fabrice Fontaine
7da2b1ebf9
package/wireshark: security bump to version 3.2.8
...
- Fix CVE-2020-26575: In Wireshark through 3.2.7, the Facebook Zero
Protocol (aka FBZERO) dissector could enter an infinite loop. This was
addressed in epan/dissectors/packet-fbzero.c by correcting the
implementation of offset advancement.
https://www.wireshark.org/security/wnpa-sec-2020-14.html
- Fix GQUIC dissector crash:
https://www.wireshark.org/security/wnpa-sec-2020-15.html
https://www.wireshark.org/docs/relnotes/wireshark-3.2.8.html
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-11-01 10:01:11 +01:00
Bernd Kuhls
9d874c9051
package/mesa3d: bump version to 20.2.1
...
Rebased patch 0002 & 0003, added patch 0004 to fix build error.
Switched license file to license.rst due to upstream commit
https://cgit.freedesktop.org/mesa/mesa/commit/?id=4d066836e3cf307431a74eafcc8a404ce5ccea69
"No modification to the generated results have been done."
Switched true/false configure option values to enabled/disabled due to
upstream commit:
https://cgit.freedesktop.org/mesa/mesa/commit/?id=138c003d22739b0d1e6860ed398dd511a44cde04
Remove "MESA3D_PLATFORMS += drm", this platform is now automatically
selected:
https://cgit.freedesktop.org/mesa/mesa/commit/?id=e00adef34a5ce485e2c9216a268ca05e89a5fc98
Remove "MESA3D_PLATFORMS += surfaceless", this platform is now
automatically selected:
https://cgit.freedesktop.org/mesa/mesa/commit/?id=a38e21d6683aeecb51aea4f933a77c6e7f1a6179
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-11-01 10:01:06 +01:00
Michael Durrant
96e80ad214
package/gcc: re-enable gcc 8.x for PowerPC SPE
...
The GCC-7.x compiler series was the last to officially support PowerPC
SPE CPUs. Now that GCC-8.x is the default compiler used by Buildroot,
some defconfigs, notably the arcturus_ucp1020_defconfig and
freescale_p1025twr_defconfig ones started to fail building, as they
are PowerPC SPE platforms.
In fact, the GCC-8.x compiler series continues to support PowerPC SPE
CPU cores, but only as an --enable-obsoleted instruction set. This
patch enables the use of GCC-8.x and asserts the required option to
enable the PowerPC SPE instruction set.
This patch passes compilation and run tests with the
arcturus/ppc-ucp1020 board.
This patch should address a noted job failure on GitLab CI
https://gitlab.com/buildroot.org/buildroot/-/jobs/805461732
Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/805461732
Signed-off-by: Michael Durrant <mdurrant@ArcturusNetworks.com >
Signed-off-by: Oleksandr G Zhadan <Oleks@ArcturusNetworks.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:48:51 +01:00
Gary Bisson
25f2191ed2
package/qt5/qt5base: fix imx6 eglfs support with imx-gpu-viv
...
Last commit fixed eglfs_kms support for i.MX8 platforms that required to
declare imx-gpu-viv as the gbm provider.
However, this broke the eglfs "fbdev" imx6 support as gbm isn't provided
in this case. So limit the gbm option to imx-gpu-viv when wayland
backend is used only.
Fixes: 82fb51d3b5 ("package/qt5/qt5base: allow to use imx-gpu-viv as GBM
provider")
Signed-off-by: Gary Bisson <gary.bisson@boundarydevices.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:45:24 +01:00
Fabrice Fontaine
082d0fea3d
package/libraw: needs autoreconf
...
configure is older than configure.ac in official libraw 0.20.2 tarball:
https://github.com/LibRaw/LibRaw/issues/353
Fixes:
- http://autobuild.buildroot.org/results/abef2ac14a959093a6391cad28e738558e15ceec
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:44:06 +01:00
Alexander Egorenkov
38b2d0d641
package/s390-tools: bump to version 2.15.1
...
Signed-off-by: Alexander Egorenkov <egorenar@linux.ibm.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:43:49 +01:00
Jianhui Zhao
8436b05494
package/libuhttpd: bump version to 3.4.2
...
fix compile fail on riscv64
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:43:40 +01:00
Fabrice Fontaine
cc5089a9c9
package/sispmctl: fix build with gcc 4.8
...
Fixes:
- http://autobuild.buildroot.org/results/079f1454121d38a83c49529c0f6cc8ed61fd5abb
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:43:14 +01:00
Fabrice Fontaine
7aa40a3ac9
package/libressl: bump to version 3.2.2
...
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.2-relnotes.txt
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:42:34 +01:00
Fabrice Fontaine
72402616f2
package/util-linux: add file optional dependency
...
file is an optional dependency of more binary and is enabled by default
since version 2.36 and
09070e1a65
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:42:30 +01:00
Petr Vorel
d5f977439a
package/ima-evm-utils: bump to version 1.3.2
...
Signed-off-by: Petr Vorel <petr.vorel@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:41:19 +01:00
Fabrice Fontaine
3a42f6df15
package/lxc: bump to version 4.0.5
...
https://discuss.linuxcontainers.org/t/lxc-4-0-5-lts-has-been-released/9269
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 23:01:00 +01:00
Etienne Carriere
87e8a386b3
package/optee-test: bump to version 3.11.0
...
Bump OP-TEE Test package version to OP-TEE release 3.11.0.
Add dependency on BR2_INSTALL_LIBSTDCPP since C++ support is needed
to build some OP-TEE test trusted applications.
Remove local patch files since issues addressed since.
Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:58:18 +01:00
Etienne Carriere
833b37c79c
package/optee-benchmark: bump to version 3.11.0
...
Bump OP-TEE Benchmark package version to OP-TEE release 3.11.0.
Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:58:18 +01:00
Etienne Carriere
a53e43ff77
package/optee-examples: bump to version 3.11.0
...
Bump OP-TEE Exmaples package version to OP-TEE release 3.11.0.
Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:58:18 +01:00
Etienne Carriere
bc64b21d1e
package/optee-client: bump to version 3.11.0
...
Bump OP-TEE Client package version to OP-TEE release 3.11.0.
Remove local patch file since issue addressed since.
Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:58:18 +01:00
Etienne Carriere
ae102ee750
boot/optee-os: bump to version 3.11.0
...
Bump OP-TEE OS package version to OP-TEE release 3.11.0.
Remove patches since merged in OP-TEE OS 3.11.0
Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:58:17 +01:00
Etienne Carriere
57652e1ddb
configs/qemu_arm_vexpress_tz_defconfig: enable C++ in toolchain
...
As we are about to bump the optee-test package to 3.11.0, which
requires C++ support, let's enable C++ support in the
qemu_arm_vexpress_tz_defconfig, which uses optee-test.
Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:58:09 +01:00
Florian La Roche
32be344279
package/rt-tests: bump to version 1.9
...
Signed-off-by: Florian La Roche <Florian.LaRoche@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:22:57 +01:00
Fabrice Fontaine
148058a462
package/fastd: bump to version 21
...
- Switch to meson-package
- Drop first patch (not needed with meson)
- Drop second patch (already in version)
https://fastd.readthedocs.io/en/stable/releases/v20.html
https://fastd.readthedocs.io/en/stable/releases/v21.html
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:22:28 +01:00
Fabrice Fontaine
25ab2d8b11
package/fastd: libcap is optional not mandatory
...
libcap is an optional dependency which is available since version 7:
eaac494273
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:22:11 +01:00
Michael Nosthoff
e98610f039
package/libabseil-cpp: depend on (host) gcc >= 4.9
...
abseil depends on gcc >= 4.9 according to [0] and actually doesn't
compile anymore with the latest version bump.
This didn't show in the autobuilders as the C++11 issue fixed in the
previous commit shadowed it.
also update dependency in package/grpc.
fixes:
https://github.com/abseil/abseil-cpp/issues/795
[0] https://abseil.io/docs/cpp/platforms/platforms#linux
Signed-off-by: Michael Nosthoff <buildroot@heine.tech >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:21:13 +01:00
Michael Nosthoff
1d1390e6e3
package/libabseil-cpp: enforce C++11
...
Abseil needs at least c++11 but removed the fallback when not set in [0].
So we need to do this.
[0] c6954897f7
Fixes:
http://autobuild.buildroot.net/results/5780d5e21e5e9c0ba86cc422ef995f45dc83cc4c
http://autobuild.buildroot.net/results/8138c63fc13940e1b97f07f24752b199f88ccfa8
http://autobuild.buildroot.net/results/f8eda966c6400c242680db378c8944444d89d5c5
http://autobuild.buildroot.net/results/38e9427d995e16bc4876f9fdc890c42e4fd04c06
http://autobuild.buildroot.net/results/4e99415728a6f3c6b396a9872924262652f77996
http://autobuild.buildroot.net/results/1830577843772bdfd6e310b4d361aa1edf5969d6
Signed-off-by: Michael Nosthoff <buildroot@heine.tech >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:20:56 +01:00
Fabrice Fontaine
064251e292
package/libpam-tacplus: bump to version 1.6.1
...
- Drop all patches (already in version)
- Update indentation in hash file (two spaces)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:04:43 +01:00
Fabrice Fontaine
edb94d770b
package/collectd: fix build with amqp
...
collectd unconditionally uses amqp_ssl_socket.h since version 5.11.0 and
e4808ad138
Fixes:
- http://autobuild.buildroot.org/results/525abe0a5cca81ff517c9c07c092d85160c7eb62
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:04:32 +01:00
Fabrice Fontaine
3f38e3b86a
package/sshfs: fix build with gcc 4.8
...
Fix build of sshfs 3.7.0 and gcc 4.8
Fixes:
- http://autobuild.buildroot.org/results/2dbdc579c55543175716d5f739cabe2ad0864ed6
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:03:31 +01:00
Fabrice Fontaine
7e4af3ce3f
package/fastd: fix CVE-2020-27638
...
receive.c in fastd before v21 allows denial of service (assertion
failure) when receiving packets with an invalid type code.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Acked-by: Alexander Dahl <post@lespocky.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 22:03:23 +01:00
Marcin Niestroj
822c283edc
package/python-urllib3: bump to version 1.25.11
...
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 21:44:00 +01:00
Marcin Niestroj
6b34b1008d
package/python-idna: bump to version 2.10
...
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 21:43:55 +01:00
Marcin Niestroj
54a276f783
package/python-certifi: bump to version 2020.6.20
...
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 21:42:51 +01:00
Fabrice Fontaine
04739c78e6
package/pax-utils: needs wchar
...
pax-utils uses asprintf() since version 1.2.4 (commit
9c0ec154d782795daa3b7d2ae273bbda2b36ae83), and recent versions of
gnulib make use of wctomb() in their implementation of asprintf(),
causing a build failure.
While it seems to be an issue in gnulib, let's for now mark pax-utils
as being not available with !wchar toolchains.
Fixes:
http://autobuild.buildroot.org/results/613840edba8ea161bb900f3b56d8d3605961c78f
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 21:42:38 +01:00
Fabrice Fontaine
ec6598150f
package/libfuse3: fix build with sshfs 3.7.0
...
Fixes:
- http://autobuild.buildroot.org/results/f93972515ad09ab2ccbdc4cd976ed60702c5974a
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-10-31 18:28:17 +01:00
Bernd Kuhls
3adbb6d296
package/samba4: security bump version to 4.11.15
...
Fixes
o CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify.
o CVE-2020-14323: Unprivileged user can crash winbind.
o CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily
crafted records.
Release notes:
https://www.samba.org/samba/history/samba-4.11.14.html (bugfix-only)
https://www.samba.org/samba/history/samba-4.11.15.html
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:10:50 +01:00
Marcin Niestroj
0adb141d34
package/python-pyudev: bump to version 0.22.0
...
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:10:39 +01:00
Bernd Kuhls
69beb4dd98
package/php: security bump version to 7.4.12
...
Changelog: https://www.php.net/ChangeLog-7.php#7.4.12
According to the release notes this is a "security bug fix release":
https://news-web.php.net/php.announce/300
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:10:21 +01:00
Peter Seiderer
8487001ef2
package/gstreamer1/gst-omx: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:49 +01:00
Peter Seiderer
fc5925cad9
package/gstreamer1/gstreamer1-editing-services: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:47 +01:00
Peter Seiderer
1138076c00
package/gstreamer1/gst1-rtsp-server: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:44 +01:00
Peter Seiderer
7e9312ef09
package/gstreamer1/gst1-vaapi: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:41 +01:00
Peter Seiderer
0e123ab6fe
package/gstreamer1/gst1-libav: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:38 +01:00
Peter Seiderer
2c300571cd
package/gstreamer1/gst1-devtools: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:32 +01:00
Peter Seiderer
726c5ed5ba
package/gstreamer1/gst1-plugins-ugly: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:30 +01:00
Peter Seiderer
95b4163a3e
package/gstreamer1/gst1-plugins-bad: bump version to 1.18.1
...
Update license info:
- GPL-2.0+ text in COPYING was replaces with LGPL-2.0+ with
commit [1]
- COPYING.LIB was removed and LGPL-2.0 replaced with LGPL-2.1+
with commit [2]
- keep the license info to LGPL-2.0+ (as the source files state
('version 2 of the License, or (at your option) any later version')
[1] https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=daf8f65be1cccbe0b22c0734732816af4911dcb5
[2] https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=142c1e7a06301a92688830dcf04c04d21285a7e7
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:28 +01:00
Peter Seiderer
09f7ed6017
package/gstreamer1/gst1-plugins-good: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:26 +01:00
Peter Seiderer
c4c998f2eb
package/gstreamer1/gst1-plugins-base: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:24 +01:00
Peter Seiderer
0b42389ef6
package/gstreamer1/gstreamer1: bump version to 1.18.1
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:08:18 +01:00
André Hentschel
e9f0125bed
package/wine: update optional dependencies for 5.12
...
wine was bumped to 5.12 in commit
6daf15db41 , but a few changes in
optional dependencies were not taken into account:
- A new optional dependency on libusb exists
- The option name to use libv4l has been changed
Signed-off-by: André Hentschel <nerv@dawncrow.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-31 16:04:23 +01:00
Fabrice Fontaine
70499767e5
package/libpam-tacplus: fix CVE-2020-27743
...
libtac in pam_tacplus through 1.5.1 lacks a check for a failure of
RAND_bytes()/RAND_pseudo_bytes(). This could lead to use of a
non-random/predictable session_id.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-29 23:38:48 +01:00
Fabrice Fontaine
ef4f72aef7
package/pax-utils: bump to version 1.2.6
...
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-29 23:38:17 +01:00
Fabrice Fontaine
94b3a7ec73
package/memcached: security bump to version 1.6.8
...
Small security related release. A remote crash is possible if UDP is
enabled. The remediation is to upgrade or disable UDP. The crash was
introduced in the 1.6 series.
https://github.com/memcached/memcached/wiki/ReleaseNotes168
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-29 23:38:12 +01:00