mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-10 00:04:06 -09:00
Code Issues Packages Projects Releases Wiki Activity
56,410 Commits 6 Branches 483 Tags
c63cec39008803c5bfc287c0ba5e033e5e875c9c
Commit Graph

56410 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Peter Korsgaard
c63cec3900 {linux, linux-headers}: bump 4.{4, 9, 14, 19}.x / 5.{4, 10, 11}.x series 
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit bcf5fba086)
[Peter: drop 5.11.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-05-01 13:14:43 +02:00
Fabrice Fontaine
c958b484f9 package/sconeserver: disable image 
Build of http::sconesite::image module was silently broken until commit
d3b818c3cf

However, sconeserver fails to build with ImageMagick because:
- it checks for ImageMagick++.pc instead of ImageMagick.pc
- it uses the transform function which has been removed from the public
  API since version 7.0.1-0 and
  06f590165f

As sconeserver does not seem to be maintained anymore, drop
BR2_PACKAGE_SCONESERVER_HTTP_SCONESITE_IMAGE.

Fixes:
 - http://autobuild.buildroot.org/results/895ab582d1140f7677fc1c6934fa2e0c47c49f20

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
[Arnout: add legacy symbol. It costs us exactly nothing, and if someone
actually had that selected, they know what's going on.]
(cherry picked from commit fdb6fc2b4a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:16:04 +02:00
Giulio Benetti
bb654efb07 package/libcamera: disable package affected by binutils bug 27597 
This package is affected by binutils bug 27597 and no work around has
been found, so let's disable it if
BR2_TOOLCHAIN_HAS_BINUTILS_BUG_27597=y.

Fixes:
http://autobuild.buildroot.net/results/8ac/8ac599392f773eecff4773393ef0d0232a22f372/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 479b09366c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:13:54 +02:00
Giulio Benetti
60b51e749b package/kf5-kcoreaddons: disable package affected by binutils bug 27597 
This package is affected by binutils bug 27597 and no work around has
been found, so let's disable it if
BR2_TOOLCHAIN_HAS_BINUTILS_BUG_27597=y.

Fixes:
http://autobuild.buildroot.net/results/0c1/0c1e7e094b0990970f28cda2be0e3fe7d82ce6a2/

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 73745ef03b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:13:48 +02:00
Giulio Benetti
ef39cf7c53 package/libgeos: use specific bug instead of BR2_nios2 to disable package 
Let's use the _BUG_ form for disabling this package instead of BR2_nios2
architecture as we already use it for other packages.

Propagate this dependency to postgis. Also add the missing dependency on
bug 21464 to postgis.

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
[Arnout:
 - put 27597 after 21464 instead of before it;
 - propagate dependency to postgis;
 - mention the bugs in the comments.
]
(cherry picked from commit 72eba37e52)
[Peter: drop postgis logic, not in 2021.02.x]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:12:47 +02:00
Giulio Benetti
47e6917c1c toolchain: introduce BR2_TOOLCHAIN_HAS_BINUTILS_BUG_27597 
On Nios II binutils it still present ld bug 27597 leading to a package
libgeos to fail building:
c053b9e191/

The bug was already reported and it's been updated:
https://sourceware.org/bugzilla/show_bug.cgi?id=27597

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit fada153130)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:11:07 +02:00
Fabrice Fontaine
01d92cac89 package/domoticz: select boost atomic 
domoticz does not use Boost::atomic but cmake is so "smart" that it
(wrongly) assumes that Boost::thread depends on Boost:date_time and
Boost::atomic since boost version 1.54:

set(_Boost_THREAD_DEPENDENCIES chrono date_time atomic)

Extracted from:
 - https://gitlab.kitware.com/cmake/cmake/-/blob/master/Modules/FindBoost.cmake#L1113

As we can't patch every cmake on the field, just select boost atomic

It should be noted that build failures are only raised since commit
8a46b41b4a as this commit drop the patch
that was decreasing cmake version but also removing:

target_link_libraries(domoticz Boost::thread Boost::system)

Fixes:
 - http://autobuild.buildroot.org/results/4306c0a725ed9a34bd55550df428866db6e4f052
 - http://autobuild.buildroot.org/results/2478e7a2ec1c63dcc2b36d29a39004468b230211

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 52ad97d00d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:06:51 +02:00
Fabrice Fontaine
312818c6d0 Revert "package/domoticz: drop boost date-time dependency" 
This reverts commit 4b4d98e2c5 as
Boost::date_time is still used by domoticz (in pmain/Scheduler.cpp and
push/BasePush.cpp)

Fixes:
 - http://autobuild.buildroot.org/results/493a2e93fe6121f118293a268f986ee51009b7e8

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 49b6578f88)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:06:01 +02:00
Romain Naour
41be519c09 package/localedef: bump to version 2.32-37 
resync the version with glibc package.

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
(cherry picked from commit 0dbf78bce1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:04:29 +02:00
Matt Weber
cf131eb7b0 package/libqmi: add _CPE_ID_VENDOR 
cpe:2.3:a:libqmi_project:libqmi:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:libqmi_project:libqmi

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 5793a9e7fd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 23:00:07 +02:00
Thomas Petazzoni
7a5074be8f package/numactl: make available on all architectures 
Since its introduction in commit
b05e74ff92 in 2013, numactl has had an
explicit list of architectures that it supports. Interestingly, this
list does not include ARM, and now that rt-tests unconditionally needs
numactl, it meant the rt-tests package was no longer available on ARM.

Further investigation revealed that there is nothing in recent
versions of numactl that appears to be architecture-specific. It does
build with all of Buildroot toolchains currently used in the
autobuilders.

The only necessary changes are:

 * Exclude no-MMU architectures, as madvise() is used in the code
   base, and this is not available on no-MMU architectures.

 * Make sure to use -latomic when needed, as some atomic operations
   are used.

 * Backport a patch that fixes the .symver usage, which only affects
   really old gcc versions: only the old ARM Sourcery toolchain was
   affected by this. Newer gcc versions support the gcc "symver"
   attribute, so that the code that directly emits the assembly
   .symver directive is not invoked.

With these changes, numactl builds successfully on all our supported
toolchains.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 4ed540ddf5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 22:52:50 +02:00
Fabrice Fontaine
eff6ef2aea package/pipewire: needs headers >= 3.18 
v4l2 plugin needs headers >= 3.18 since
4cb90f3b86
(so since its addition to buildroot in commit
75c86f90c7) because of
V4L2_PIX_FMT_ARGB555X which is only available since
fcc0d3db28

v4l2 plugin can't be disabled until
8d71d2dab8

Fixes:
 - http://autobuild.buildroot.org/results/b887b6ccd2c22bb3214c07d1281ad486438fb58e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 996942710a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 22:47:31 +02:00
Fabrice Fontaine
02078da363 package/libfreefare: drop threads dependency 
This dependency should have dropped by commit
1a49188a69 which removed threads
dependency from libnfc

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit b92c7a8527)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 22:46:35 +02:00
Fabrice Fontaine
2cf05f6fa4 package/libp11: bump to version 0.4.11 
Update indentation in hash file (two spaces)

https://github.com/OpenSC/libp11/releases/tag/libp11-0.4.11

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 281b11105a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 22:38:24 +02:00
Fabrice Fontaine
14dfd8eb17 package/usb_modeswitch: bump to version 2.6.1 
Update indentation in hash file (two spaces)

https://www.draisberghof.de/usb_modeswitch/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 9192f465ea)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 22:37:03 +02:00
Sébastien Szymanski
dc501be68b package/freescale-imx/imx-vpu: fix {EULA, COPYING} file hashes 
Commit a646cd27b1 (package/freescale-imx/imx-vpu: bump version to
5.4.39.3) somehow messed up when updating the hashes of the licene
files:

    >>> imx-vpu 5.4.39.3 Collecting legal info
    ERROR: EULA has wrong sha256 hash:
    ERROR: expected: a39da2e94bd8b99eaac4325633854620ea3a55145259c3a7748c610a80714cfc
    ERROR: got     : 7ffad92e72e5f6b23027e7cf93a770a4acef00a92dcf79f22701ed401c5478c0
    ERROR: Incomplete download, or man-in-the-middle (MITM) attack

    ERROR: COPYING has wrong sha256 hash:
    ERROR: expected: 69cbb76b3f10ac5a8c36f34df7bbdf50825815560c00a946fff2922365ef01a2
    ERROR: got     : 2ceab29de5ea533b86f570bcc4e9ddbfb5fe85a1da4978a8613ff3fd9bed781d
    ERROR: Incomplete download, or man-in-the-middle (MITM) attack

The most probable cause is some confusion with imx-vpu-hantro, as the
faulty hashes reported above are those found in imx-vpu-hantro.

Signed-off-by: Sébastien Szymanski <sebastien.szymanski@armadeus.com>
[yann.morin.1998@free.fr: rewrite commit log with a probably reason]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 96142a5426)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 22:32:37 +02:00
Matt Weber
ddd47a70a8 package/tar: ignore CVE-2007-4476 
https://security-tracker.debian.org/tracker/CVE-2007-4476

Currently NVD has this incorrectly tagged for all versions.
The bug trackers on different distros show it was generally
fixed in versions >= 1.16 but because the impacted source
code is in the GNU paxutils, it is hard to follow in what
cases tar has been fixed around that 1.16 version.

https://bugs.gentoo.org/196978

https://www.itsecdb.com/oval/definition/oval/org.mitre.oval/def/9336/Buffer-overflow-in-the-safer-name-suffix-function-in-GNU-tar.html

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9486774bbf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 22:27:30 +02:00
Matt Weber
ea5323f16a package/rsyslog: ignore CVE-2015-3243 
https://security-tracker.debian.org/tracker/CVE-2015-3243
 "Rsyslog uses weak permissions for generating log files."

Ignoring this CVE for Buildroot as normally there are not local
users and a build could customize the rsyslog.conf to be more
restrictive ($FileCreateMode 0640).

Example fix from Alpino Linux
 3cb5210cda

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit fb4402b516)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 22:27:19 +02:00
Matt Weber
3bf84c7ce0 package/ncurses: ignore CVE-2018-10754, CVE-2018-19211, CVE-2018-19217, CVE-2019-17594, CVE-2019-17595 
Commit 4b21273d71 added upstream (security) patches up to 20200118
and in the commit description it outlines these CVEs were patched.

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 675769791b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:55:17 +02:00
Matt Weber
4f329b0fba package/wpa_supplicant: ignore CVE-2021-30004 when using openssl 
The CVE can be ignored when the internal TLS impl isn't used.

https://security-tracker.debian.org/tracker/CVE-2021-30004
 "Issue only affects the "internal" TLS implementation
 (CONFIG_TLS=internal)"

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 2f6a6b8e50)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:54:48 +02:00
Matt Weber
1ad89a3471 package/hostapd: ignore CVE-2021-30004 when using openssl 
The CVE can be ignored when the internal TLS impl isn't used.

https://security-tracker.debian.org/tracker/CVE-2021-30004
 "Issue only affects the "internal" TLS implementation
 (CONFIG_TLS=internal)"

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 3d3348fd03)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:29:17 +02:00
Matt Weber
9d8f5a4712 package/flex: ignore CVE-2019-6293 
https://security-tracker.debian.org/tracker/CVE-2019-6293

https://github.com/NixOS/nixpkgs/issues/55386#issuecomment-683792976
 "But this bug does not cause stack overflows in the generated code.
 The function and file referred to in the bug (mark_beginning_as_normal
 in nfa.c) are part of the flex code generator, not part of the
 generated code. If flex crashes before generating any code, that
 can hardly be a vulnerability. If flex does not crash, the generated
 code is fine (or perhaps subject to other unreported bugs, who knows,
 but the NFA has been generated correctly)."

Upstream has chosen to not provide a fix
 https://github.com/westes/flex/issues/414

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr: use actual upstream URL]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 120d1241d8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:26:32 +02:00
Matt Weber
b88162d890 package/cmake: ignore CVE-2016-10642 
This is specific to the npm package that installs cmake, so isn't
relevant to Buildroot.
14241ed09f/meta/recipes-devtools/cmake/cmake.inc

https://nvd.nist.gov/vuln/detail/CVE-2016-10642#vulnCurrentDescriptionTitle
 "cmake installs the cmake x86 linux binaries. cmake downloads
 binary resources over HTTP, which leaves it vulnerable to
 MITM attacks. It may be possible to cause remote code
 execution (RCE) by swapping out the requested binary with
 an attacker controlled binary if the attacker is on the
 network or positioned in between the user and the remote server."

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 5ce1e773b9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:25:39 +02:00
Matt Weber
a5130ce356 package/bind: ignore CVE-2019-6470 
There had existed in one of the ISC BIND libraries a bug in a
function that was used by dhcpd when operating in DHCPv6 mode.
There was also a bug in dhcpd relating to the use of this function
per its documentation, but the bug in the library function
prevented this from causing any harm. All releases of dhcpd from
ISC contain copies of this, and other, BIND libraries in
combinations that have been tested prior to release and are known
to not present issues like this.

Affects: Builds of dhcpd versions prior to version 4.4.1 when
using BIND versions 9.11.2 or later.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6470

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 23fb8dd2d0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:10:53 +02:00
Matt Weber
f2fd0c8d54 package/coreutils: ignore CVE-2013-0221, CVE-2013-0222, CVE-2013-0223 
This CVE is only relevant to a build when the SUSE coreutils-i18n.patch
is included. The upstream codebase does not include this patch, nor
does Buildroot.

https://security-tracker.debian.org/tracker/CVE-2013-0221
https://security-tracker.debian.org/tracker/CVE-2013-0222
https://security-tracker.debian.org/tracker/CVE-2013-0223

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 8ae9156d8b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:09:46 +02:00
Matt Weber
5539ddc0c9 package/bind: ignore CVE-2017-3139 
This CVE is only relevant to the configuration of a specific
RHEL release (6.x).

https://bugzilla.redhat.com/show_bug.cgi?id=1447743

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 357dd51bbd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:09:20 +02:00
Thomas Petazzoni
3a88fb0307 package/bash: drop SHOBJ_STATUS from BASH_CONF_ENV 
SHOBJ_STATUS=unsupported was added in commit
4a2af11cba to work around a limitation
of the configure script that forgot to set this variable in
static-linking configurations.

It turns out that this issue has been fixed upstream as of bash 5.0:

  https://git.savannah.gnu.org/cgit/bash.git/diff/configure.ac?id=d233b485e83c3a784b803fb894280773f16f2deb

  (see hunk @@ -1151,6 +1179,9 @@)

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Cc: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 24656c23f9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:07:48 +02:00
Thomas Petazzoni
43bbf8311b package/bash: use --bindir instead of exec_prefix= 
We want bash to be installed as /bin/bash. For ages, Buildroot has
been doing this by overriding exec_prefix at install time. First of
all, it would be preferred to do this at configure time. But also,
overriding exec_prefix not only changes where "bash" goes, but also
where the pkgconfig file goes. Due to this, bash.pc goes into
/lib/pkgconfig/, and doesn't get removed by target-finalize.

Since all we want is to have 'bash' as /bin/bash, simply pass
--bindir=/bin at configure time. This allows to use the default target
installation logic for autotools-package. We keep a post-install
target hook to remove /bin/bashbug.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Cc: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 73aed53c82)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 21:01:17 +02:00
Jörg Krause
053b66cef5 package/libupnp: security bump to version 1.14.6 
The server part of pupnp (libupnp) appears to be vulnerable to DNS-rebinding
attacks because it does not check the value of the `Host` header.

Fixes CVE-2021-29462

https://github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhg

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0f23267bc2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 20:56:56 +02:00
Jörg Krause
dcf8b12ffd package/libnpupnp: security bump to version 4.1.4 
Fix vulnerability to DNS-rebind attacks.

This security fix addresses the same vulnerability isue which was reported
for libupnp (which libnpupnp is derived from) in CVE-2021-29462.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit adea5b316e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 20:41:03 +02:00
Jörg Krause
e373b9da97 package/libnpupnp: bump to version 4.1.3 
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 40ebac416b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 20:40:53 +02:00
Jörg Krause
a20c0234ec package/libnpupnp: bump to version 4.1.1 
From https://www.lesbonscomptes.com/upmpdcli/pages/releases.html:

2021-03-13 libnpupnp 4.1.1
 * Fix HEAD requests. Samsung TVs now work with Gerbera + libnpupnp

2021-03-13 libnpupnp 4.1.0
 * Send SERVER and USER-AGENT headers in misc places where mandated or useful.
 * Add API for the client code to set the user-agent and server string values
 * Fix building and running with --disable-ipv6
 * Misc portability fixes.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit e1fa1334d0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 20:40:16 +02:00
Peter Korsgaard
abf996ba5c package/{mesa3d, mesa3d-headers}: bump version to 20.3.5 
Bugfix release, fixing various issues:
https://lists.freedesktop.org/archives/mesa-announce/2021-March/000623.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 20:24:04 +02:00
Bernd Kuhls
d05f101e0f package/samba4: bump version to 4.14.3 
Release notes: https://www.samba.org/samba/history/samba-4.14.3.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 7df2611e9e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 20:06:15 +02:00
Bernd Kuhls
a26f6b8f90 package/samba4: add required python deps for AD DC support 
Needed due to upstream commit:
2420b7c6d2

Fixes:
http://autobuild.buildroot.net/results/12a/12a74665a2349eacb28c3035bb36a4dce1d740d1/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 0025d931f3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 20:06:01 +02:00
Bernd Kuhls
54227869c7 package/python-dnspython: enable host build 
Needed for Samba 4.14.x:
2420b7c6d2 (bc16f0673dfbb473658dfd16961cdbf12f02ea5a_8_15)

Fixes:
http://autobuild.buildroot.net/results/7dc/7dc7e304cb4e9afb157326dd5e4ae38711e91cad/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 90bb7b6765)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 20:05:41 +02:00
Bernd Kuhls
95ae35a114 package/openvpn: security bump version to 2.5.2 
Fixes CVE-2020-15078:
https://forums.openvpn.net/viewtopic.php?f=20&t=32179

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 258b372c3e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 16:37:20 +02:00
Fabrice Fontaine
91d3e2ae45 package/kismet: fix static build with uclibc 
Fix static build with uclibc which is raised since bump to version
2020-12-R3 in commit 14522a8f9d

Fixes:
 - http://autobuild.buildroot.org/results/69dcb7ac99e63fca342e4d52d9311d1ee1931911

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 72bb0380da)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 16:33:25 +02:00
Jared Bents
5358858ac9 package/python-flup: update dependency to python3 
Since version flup-1.0.3.dev20151210, flup needs Python 3. This was
apparently missed in Buildroot commit
ff0f53c04d, which bumped flup from
1.0.3.dev-20110405 to 1.0.3.dev20161029.

Signed-off-by: Jared Bents <jared.bents@rockwellcollins.com>
Signed-off-by: Ryan Barnett <ryan.barnett@rockwellcollins.com>
Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1d1c092542)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 16:08:55 +02:00
Fabrice Fontaine
8c85ceccaa package/librsync: bump to version 2.3.2 
This is a patch release that fixes some minor bugs, tidies the code for
many compiler warnings, and improves windows compatibility. Upgrading
from v2.3.1 is recommended for most people, and essential for people
using platforms experiencing bugs #214 or #207.

https://github.com/librsync/librsync/releases/tag/v2.3.2

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1ab117d35a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 16:07:19 +02:00
Fabrice Fontaine
e4f23b5dbc package/python-mbstrdecoder: bump to version 1.0.1 
https://github.com/thombashi/mbstrdecoder/releases/tag/v1.0.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit d07dc9660d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 16:03:45 +02:00
Fabrice Fontaine
0007797471 package/python-mbstrdecoder: add python-chardet dependency 
chardet is a mandatory runtime dependency since version 0.8.2 and
e9344a0916

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 8a74eaaaa9)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 16:03:12 +02:00
Matt Weber
2960953b0a package/libtool: add _CPE_ID_VENDOR 
cpe:2.3:a:gnu:libtool:2.4.6:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:gnu:libtool

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr: drop version from reference URL]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 8c9724026c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 15:18:15 +02:00
Matt Weber
1784aa80eb package/sysvinit: add _CPE_ID_VENDOR 
cpe:2.3:a:sysvinit_project:sysvinit:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:sysvinit_project:sysvinit

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 281f0d90cb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 15:18:09 +02:00
Matt Weber
bde607aee4 package/sysstat: add _CPE_ID_VENDOR 
cpe:2.3:a:sysstat_project:sysstat:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:sysstat_project:sysstat

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9b3ea504db)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 15:18:00 +02:00
Matt Weber
d1e49b0b77 package/rp-pppoe: add _CPE_ID_VENDOR 
cpe:2.3:a:rp-pppoe_project:rp-pppoe:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:rp-pppoe_project:rp-pppoe

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr: move up, right after license]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 912342f833)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 15:17:50 +02:00
Matt Weber
b41ed4b42b package/rng-tools: add _CPE_ID_VENDOR 
cpe:2.3:a:rng-tools_project:rng-tools:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:rng-tools_project:rng-tools

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr: move up, right after license]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit c44be545f6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 15:17:32 +02:00
Matt Weber
f24a371d92 package/python3-setuptools: add _CPE_ID_VENDOR and_CPE_ID_PRODUCT 
cpe:2.3:a:python:setuptools:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:python:setuptools

Note: 63332c33aa already added those for the python(2) variant.

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr:
  - add reference to 63332c33aa
  - move up, right after license
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit c819d20834)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 15:13:12 +02:00
Matt Weber
1641466662 package/python3-decorator: add _CPE_ID_VENDOR and _CPE_ID_PRODUCT 
cpe:2.3:a:python:decorator:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:python:decorator

Note: 4783e5fd8c already added those for the python(2) variant.

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr:
  - add reference to 4783e5fd8c
  - move up, right after license
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 8b154320f0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 15:12:55 +02:00
Matt Weber
c5e0da8f04 package/pugixml: add _CPE_ID_VENDOR 
cpe:2.3:a:pugixml_project:pugixml:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:pugixml_project:pugixml

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr: move up, right after license]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 12e88b0d60)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-26 15:12:43 +02:00