Commit Graph

57250 Commits

Author SHA1 Message Date
Romain Naour
e1cc453149 support/testing: test_openssh: use Bootlin stable toolchain
The commit backported by [1] enabled the Bootlin bleeding-edge
toolchain providing 5.4 kernel headers but the openssh test
still use a 4.19 prebuilt kernel. Indeed the prebuilt kernel
has been updated to 5.10 in Buildroot 2021.08 [2].

Fixes:
https://gitlab.com/kubu93/buildroot/-/jobs/1780867274

[1] 8d4939c9e0
[2] https://git.buildroot.net/buildroot/commit/?id=3cf2782906d5cc05a3966c25518d2ce01f11afc8

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 22:09:01 +01:00
Fabrice Fontaine
f1f1a0fd9b package/binutils: zlib is mandatory
As found out by Yann [1], binutils will use its bundled copy of zlib,
whether it is already provided by the system or not, and unless
explicitly told to use the system zlib with --with-system-zlib, which
is available since version 2.21 and
700d40ca16

This will fix the following build failure with oprofile when compiling
in a static configuration where zlib is not enabled:

    checking for bfd_openr in -lbfd... no
    checking for compress in -lz... no
    configure: error: libz library not found; required by libbfd

As found out by Arnout [1], this fails infrequently because static is
already pretty rare, but in addition zlib is almost always selected by
some other package.

Fixes:
 - http://autobuild.buildroot.org/results/0e1d16dfbb455a08db80ac5d35613908c3b4163f

[1] https://patchwork.ozlabs.org/project/buildroot/patch/20211030214734.2154583-1-fontaine.fabrice@gmail.com/

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[yann.morin.1998@free.fr:
  - reword the explanations about the system zlib
  - extend the oprofile example with static and !zlib
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a3c1ba68f4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:37:22 +01:00
James Hilliard
13398092df package/meson: disable meson wrap downloads
We don't want to allow meson to download wrap dependencies as this
bypasses buildroot's dependency resolution.

This is badly documented in the meson manual, but there is at least
an FAQ that refers to it:

    https://mesonbuild.com/FAQ.html#does-wrap-download-sources-behind-my-back

    Meson has a option called wrap-mode which can be used to disable
    wrap downloads altogether with --wrap-mode=nodownload.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[yann.morin.1998@free.fr: add pointer to FAQ]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 12ba356365)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:25:09 +01:00
Fabrice Fontaine
c48d1af3f5 package/libdnet: don't override dependencies
Don't override LIBDNET_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit ea21670ee8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:04:57 +01:00
Fabrice Fontaine
c4756b5d9f package/glog: don't override dependencies
Don't override GLOG_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 1f9e65b2f3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:04:22 +01:00
Fabrice Fontaine
65f4cfec2c boot/uboot: don't override dependencies
Don't override UBOOT_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 9de2c792e1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:04:08 +01:00
Fabrice Fontaine
04c5b72118 package/rcw-smarc-sal28: don't override dependencies
Don't override RCW_SMARC_SAL28_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7d653a7abd)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:02:59 +01:00
Fabrice Fontaine
d0222b4e89 package/freescale-imx/gpu-amd-bin-mx51: don't override dependencies
Don't override GPU_AMD_BIN_MX51_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 7c9e88120d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:01:46 +01:00
Fabrice Fontaine
cfa225ea10 package/freescale-imx/imx-vpuwrap: don't override dependencies
Don't override IMX_VPUWRAP_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[yann.morin.1998@free.fr: keep multi-line conditional blocks]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 8e86c81418)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:01:43 +01:00
Fabrice Fontaine
48ef67212d package/alsa-lib: don't override dependencies
Don't override ALSA_LIB_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit 5a3165e097)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-17 16:01:41 +01:00
Peter Korsgaard
6e0019f9ca Update for 2021.02.7
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021.02.7
2021-11-10 14:20:12 +01:00
Peter Korsgaard
0fe38150f9 package/docker-containerd: security bump to version 1.4.11
Fixes the following security issues:

- CVE-2021-41103: Insufficiently restricted permissions on plugin
  directories
  https://github.com/advisories/GHSA-c2h3-6mxw-7mvq

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 11:42:52 +01:00
Peter Seiderer
996616bb39 package/olsr: add upstream patch to fix compile with gpsd-3.23.1
- add upstream patch ([1]) to fix compile with gpsd-3.23.1

Fixes:

  - http://autobuild.buildroot.org/results/53b06e72fb2d8b4c8b6ba41baf775ff33654cd18
  - http://autobuild.buildroot.net/results/54cae924711e26f04045f8208db0d772292a3933

  src/gpsdclient.c: In function 'nmeaInfoFromGpsd':
  src/gpsdclient.c:374:30: error: 'STATUS_NO_FIX' undeclared (first use in this function); did you mean 'STATUS_PPS_FIX'?
    374 |   if (gpsdata->fix.status == STATUS_NO_FIX) {
        |                              ^~~~~~~~~~~~~
        |                              STATUS_PPS_FIX

[1] 665051a845

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit cc54ac17f8)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:57:31 +01:00
Fabrice Fontaine
4a2a410d24 package/lua: don't override dependencies
Don't override LUA_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit bb0ca7f32e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:55:50 +01:00
Fabrice Fontaine
a36c47b56f package/kexec: don't override dependencies
Don't override KEXEC_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7f1fa3b615)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:54:53 +01:00
Fabrice Fontaine
7a2c94540d package/iucode-tool: don't override dependencies
Don't override IUCODE_TOOL_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0be1b16269)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:54:46 +01:00
Fabrice Fontaine
1b593d9efa package/dvb-apps: don't override dependencies
Don't override DVB_APPS_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e2b6861fe0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:54:38 +01:00
Fabrice Fontaine
bc3da522ed package/socketcand: don't override dependencies
Don't override SOCKETCAND_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2bb820cb9e)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:54:36 +01:00
Fabrice Fontaine
f177ad5ae9 package/suricata: add SURICATA_CPE_ID_VENDOR
cpe:2.3:a:oisf:suricata is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aoisf%3Asuricata

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 839ae75192)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:52:17 +01:00
Bernd Kuhls
c851689e8b package/samba4: security bump version to 4.14.9
Fixes CVE-2020-17049:
https://www.samba.org/samba/history/samba-4.14.9.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 825bf86529)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:51:40 +01:00
Peter Seiderer
fc7cf09fd2 package/gdb: fix gdb-10.2 compile for uclibc < v1.0.35 (getrandom related)
- fix getrandom compile for uclibc < v1.0.35, add missing stddef.h
  include (fixed in uclibc since v1.0.35, see [1])

Fixes:

  - http://autobuild.buildroot.net/results/6d4a62c703c85dd993ddb2d90ebe1f6cad24e0b0

  .../host/x86_64-buildroot-linux-uclibc/sysroot/usr/include/sys/random.h:27:35: error: unknown type name ‘size_t’
     27 | extern int getrandom(void *__buf, size_t count, unsigned int flags)
        |                                   ^~~~~~

[1] https://cgit.uclibc-ng.org/cgi/cgit/uclibc-ng.git/commit/?id=00972c02c2b6e0a95d5def4a71bdfb188e091782t

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 2f7598034c)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 10:40:51 +01:00
Romain Naour
e8231e5b88 package/systemd: enable selinux xdg module for refpolicy
Without the selinux xgd module enabled by systemd package, refpolicy
fail to build due to policy/modules/system/systemd.te [1]

policy/modules/system/systemd.te:288:ERROR 'attribute xdg_config_type is not declared' at token ';' on line 508447:

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/1710552468
https://gitlab.com/buildroot.org/buildroot/-/jobs/1710552470

[1] https://github.com/SELinuxProject/refpolicy/blob/RELEASE_2_20210908/policy/modules/system/systemd.te#L288

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Adam Duskett <aduskett@gmail.com>
Cc: Antoine Tenart <atenart@kernel.org>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d51189ffe5)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 09:07:36 +01:00
Romain Naour
c5dbfa0f83 support/testing: test_jffs2.py: update logical eraseblock size for qemu >= 2.9
The test_jffs2 test fail for the same reason as test_ubi test with qemu >= 2.9
due to a qemu 2.8 bug. See commit d8447c38f5.

Divide the erase block size by two.

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/1687590514

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit d2f92512f6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-09 08:59:10 +01:00
Peter Korsgaard
b506db5748 package/jack1/Config.in: fix wiki link
The entry seems to have been renamed slightly.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit eb2a5cc9e6)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 17:02:19 +01:00
Fabrice Fontaine
455a9fe82e package/netdata: disable unit tests
Disable unit tests which are enabled by default if cmocka is found since
the addition of the package in commit
1d2bb46907

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ab721dc460)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 17:01:22 +01:00
Fabrice Fontaine
8e01b96982 package/netdata: add libcap optional dependency
libcap is an optional dependency which is enabled by default since the
addition of the package in commit
1d2bb46907

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 33160aeeb4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 17:01:15 +01:00
Fabrice Fontaine
4485878980 package/rsh-redone: don't override dependencies
Don't override RSH_REDONE_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit d525300021)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 16:10:23 +01:00
Fabrice Fontaine
b5da4e719e package/espeak: don't override dependencies
Don't override ESPEAK_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 70195ea004)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 16:10:14 +01:00
Fabrice Fontaine
8a47f7522b package/apcupsd: don't override dependencies
Don't override APCUPSD_DEPENDENCIES in a conditional

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Alexander Dahl <post@lespocky.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4c82676211)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 16:10:12 +01:00
Fabrice Fontaine
957c0e2e19 package/dahdi-linux: bump to 5c840cf43838e0690873e73409491c392333b3b8
- Fix build with kernel >= 5.4 thanks to
  https://git.asterisk.org/gitweb/?p=dahdi/linux.git;a=commit;h=45ac6a30f922f4eef54c0120c2a537794b20cf5c
- Fix build with kernel >= 5.6 thanks to
  https://git.asterisk.org/gitweb/?p=dahdi/linux.git;a=commit;h=34b9c77c9ab2794d4e912461e4c1080c4b1f6184
- Fix typo in dahdi-linux.mk
- Remove deprecated note about kernel >= 4.0 in Config.in
- Add patch to fix build failure with 32-bits kernels raised since
  https://git.asterisk.org/gitweb/?p=dahdi/linux.git;a=commit;h=ffcd08205c71dcb0e060836359418bef20f07ffa
- Update indentation in hash file (two spaces)

Fixes:
 - https://bugs.buildroot.org/show_bug.cgi?id=14311

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8402b5263f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 16:07:15 +01:00
Fabrice Fontaine
7aad3812c3 package/dahdi-linux: fix hotplug build
Fix hotplug build which fails since the addition of the package in
commit d959966b41

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit ae4198abf4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 16:05:47 +01:00
Fabrice Fontaine
cbe28a841d package/dahdi-linux: needs CRC CCITT
dahdi-linux needs a linux with CRC CCITT since the addition of the
package in commit d959966b41 as stated in
the README:

- CONFIG_CRC_CCITT must be enabled ('y' or 'm'). On 2.6 kernels this can
  be selected These can be selected from the "Library Routines" submenu
  during kernel configuration via "make menuconfig".

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit b22ec4bd95)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 16:05:37 +01:00
Fabrice Fontaine
c6a0652f0a package/dahdi-linux: fix typo in Config.in
Fix typo added with commit d959966b41

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 6ae74b57ae)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 16:05:27 +01:00
Fabrice Fontaine
dc71e6f642 package/snort: security bump to version 2.9.18.1
Fix CVE-2021-40114: Multiple Cisco products are affected by a
vulnerability in the way the Snort detection engine processes ICMP
traffic that could allow an unauthenticated, remote attacker to cause a
denial of service (DoS) condition on an affected device. The
vulnerability is due to improper memory resource management while the
Snort detection engine is processing ICMP packets. An attacker could
exploit this vulnerability by sending a series of ICMP packets through
an affected device. A successful exploit could allow the attacker to
exhaust resources on the affected device, causing the device to reload.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-dos-s2R7W9UU
https://www.snort.org/downloads/snort/changelog_2.9.18.1.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5afa2320ec)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 16:04:05 +01:00
Adam Duskett
f8eb447022 package/openjdk{-bin}: bump version to 17.0.1+12
OpenJDK 17 is a new LTS release, which leaves the Buildroot Config option of
"LTS" and "LATEST" as a misnomer because both 11 and 17 are LTS releases.

There are two options in this case:

1) Remove "LATEST" and update OpenJDK 11 to 17, and only support 17.
2) Change "LTS" to "11" and "LATEST" to "17" and only support the latest 2 LTS
OpenJDK releases.

After some discussion with Thomas Petazzoni and Peter Korsgaard, and testing,
option 2 is the best course of action for a few reasons:

  - OpenJDK 11 and 17 have very long support cycles:
  - OpenJDK 11 has two years of Active and five years of security support left.
  - OpenJDK 17 has five years of Active and ten years of security support left.
  - Both OpenJDK versions build with the same parameters.
  - The maintenance cost of both versions is meager.
  - Both versions pass tests.package.test_openjdk without issue.

Changes:
  - Change BR2_OPENJDK_VERSION_LATEST -> BR2_OPENJDK_VERSION_17
  - Change BR2_OPENJDK_VERSION_LTS -> BR2_OPENJDK_VERSION_11
Signed-off-by: Adam Duskett <aduskett@gmail.com>
[Peter: add Config.in.legacy, use BR2_PACKAGE_OPENJDK_ prefix]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit a610bf9967)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 15:04:56 +01:00
Peter Korsgaard
22bf059f43 package/go: security bump to version 1.16.10
go1.16.10 (released 2021-11-04) includes security fixes to the archive/zip
and debug/macho packages, as well as bug fixes to the compiler, linker,
runtime, the misc/wasm directory, and to the net/http package.

https://golang.org/doc/devel/release#go1.16.minor

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 14:40:39 +01:00
Fabrice Fontaine
4f4d21358c package/vim: fix build with uclibc
Fix the following build failure with uclibc raised since bump to version
8.2.3565 in commit 5650439b92 and
0a7984af56:

In file included from vim.h:27,
                 from fileio.c:14:
fileio.c: In function 'time_differs':
auto/config.h:149:22: error: 'stat_T' {aka 'struct stat'} has no member named 'st_mtim'; did you mean 'st_mtime'?
  149 | #define ST_MTIM_NSEC st_mtim.tv_nsec
      |                      ^~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/2132f9aa1b0bc618c91f7bf44fbd1b71b9d6ba05

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 0b518033e2)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 14:18:57 +01:00
Thomas Petazzoni
eda43794bc DEVELOPERS: drop Mirza Krak
His e-mail is no longer responding:

** Address not found **

Your message wasn't delivered to mirza.krak@northern.tech because the address couldn't be found, or is unable to receive mail.

Learn more here: https://support.google.com/mail/?p=NoSuchUser

The response from the remote server was:
550 5.1.1 The email account that you tried to reach does not exist. Please try double-checking the recipient's email address for typos or unnecessary spaces. Learn more at https://support.google.com/mail/?p=NoSuchUser bi21si292758edb.0 - gsmtp

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2b2478dfdb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 14:15:30 +01:00
Fabrice Fontaine
486ff457b6 package/exiv2: security bump to version 0.27.5
Fix CVE-2021-32815, CVE-2021-34334, CVE-2021-34335, CVE-2021-37615,
CVE-2021-37616, CVE-2021-37618, CVE-2021-37619, CVE-2021-37620,
CVE-2021-37621, CVE-2021-37622 and CVE-2021-37623

https://github.com/Exiv2/exiv2/releases/tag/v0.27.5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 2bffe699cb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-08 14:15:06 +01:00
Peter Korsgaard
76d7b6991c {linux, linux-headers}: bump 4.{4, 9, 14, 19}.x / 5.{4, 10, 14}.x series
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 377aa3b117)
[Peter: drop 5.14.x bump]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-04 13:01:12 +01:00
Giulio Benetti
f730716590 DEVELOPERS: add Giulio Benetti to all Olimex Allwinner boards' defconfigs
Add Giulio Benetti to all Olimex Allwinner boards' defconfigs since I've
recently updated and tested them all and I'd like to receive possible
build failure from gitlab CI/CD.

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 1b31b4b9ce)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:19:28 +01:00
Joachim Wiberg
9efe3d7cd9 DEVELOPERS: add Joachim Wiberg as co-maintainer for mrouted
Since I'm the upstream maintainer, it'd be nice to get Cc:ed on any
issues with the package.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 6e3c73bcaf)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:18:27 +01:00
Thomas Petazzoni
2e7548be3a utils/getdeveloperlib.py: call Developer.hasfile() with relative path
In commit
40bb37bd70 ("utils/getdeveloperlib.py:
use relative paths for files"), the Developer class was changed to use
relative paths, including for its .hasfile() method.

However the check_developers() function of getdeveloperlib.py was not
updated accordingly, and continued to pass absolute paths. This caused
"get-developers -c" to return the entire list of files in Buildroot as
being unmaintained, as none of them were matching the file listed in
the DEVELOPERS file.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 79cba4056b)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:14:06 +01:00
Thomas Petazzoni
a7d33fb53d utils/getdeveloperlib.py: fix check_output() return value decoding
In Python 3.x, check_output() returns a "bytes" array, and not a
string. Its result needs to be decoded to be turned into a
string. Without this fix, "get-developers -c" bails out with:

Traceback (most recent call last):
  File "/home/thomas/projets/buildroot/./utils/get-developers", line 105, in <module>
    __main__()
  File "/home/thomas/projets/buildroot/./utils/get-developers", line 53, in __main__
    files = getdeveloperlib.check_developers(devs)
  File "/home/thomas/projets/buildroot/utils/getdeveloperlib.py", line 280, in check_developers
    files = subprocess.check_output(cmd).strip().split("\n")
TypeError: a bytes-like object is required, not 'str'

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 53da6a7c05)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:13:51 +01:00
Peter Korsgaard
ea1d65f9da package/openjdk{-bin}: security bump LTS to version 11.0.13+8
Fixes the following security issues:

  - JDK-8163326, CVE-2021-35550: Update the default enabled cipher suites preference
  - JDK-8254967, CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close
  - JDK-8263314: Enhance XML Dsig modes
  - JDK-8265167, CVE-2021-35556: Richer Text Editors
  - JDK-8265574: Improve handling of sheets
  - JDK-8265580, CVE-2021-35559: Enhanced style for RTF kit
  - JDK-8265776: Improve Stream handling for SSL
  - JDK-8266097, CVE-2021-35561: Better hashing support
  - JDK-8266103: Better specified spec values
  - JDK-8266109: More Resilient Classloading
  - JDK-8266115: More Manifest Jar Loading
  - JDK-8266137, CVE-2021-35564: Improve Keystore integrity
  - JDK-8266689, CVE-2021-35567: More Constrained Delegation
  - JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic
  - JDK-8267712: Better LDAP reference processing
  - JDK-8267729, CVE-2021-35578: Improve TLS client handshaking
  - JDK-8267735, CVE-2021-35586: Better BMP support
  - JDK-8268193: Improve requests of certificates
  - JDK-8268199: Correct certificate requests
  - JDK-8268205: Enhance DTLS client handshake
  - JDK-8268506: More Manifest Digests
  - JDK-8269618, CVE-2021-35603: Better session identification
  - JDK-8269624: Enhance method selection support
  - JDK-8270398: Enhance canonicalization
  - JDK-8270404: Better canonicalization

For more details, see the announcement:
https://mail.openjdk.java.net/pipermail/jdk-updates-dev/2021-October/009368.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 7662fb76f0)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:07:50 +01:00
Peter Korsgaard
77ebc36d3e package/bind: security bump to version 9.11.36
Fixes the following security issues:

- CVE-2021-25219: Lame cache can be abused to severely degrade resolver
  performance

For details, see the advisory:
https://kb.isc.org/docs/cve-2021-25219

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 4e4bf1cf09)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:07:15 +01:00
Peter Korsgaard
d7e925f13f package/wireguard-linux-compat: bump version to 1.0.20210606
For details, see the announcement:
https://lists.zx2c4.com/pipermail/wireguard/2021-June/006781.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit f3da5bdf71)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:06:42 +01:00
Peter Korsgaard
a130d7c002 package/wireguard-linux-compat: bump version to 1.0.20210219
Includes various compat fixes and lowers memory requirements.  For details,
see the announcement:

https://lists.zx2c4.com/pipermail/wireguard/2021-February/006404.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 5211e74894)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:06:34 +01:00
Peter Korsgaard
9ced43bf98 configs/sheevaplug_defconfig: bump linux kernel to 4.14.253
Fixes https://gitlab.com/buildroot.org/buildroot/-/jobs/1723730198

To correct a build breakage after the move to a gcc 10.x based host
compiler, as the updated kernel contains a fix for:

HOSTLD  scripts/dtc/dtc
/usr/bin/ld: scripts/dtc/dtc-parser.tab.o:(.bss+0x10): multiple definition of `yylloc'; scripts/dtc/dtc-lexer.lex.o:(.bss+0x0): first defined here

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=88f7a6aa7fb9aa5076b65489146045dac865f1d3

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 297f2220a1)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:01:04 +01:00
Peter Korsgaard
88d1f261d5 configs/openblocks_a6_defconfig: bump linux kernel to 4.14.253
Fixes https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=88f7a6aa7fb9aa5076b65489146045dac865f1d3

To correct a build breakage after the move to a gcc 10.x based host
compiler, as the updated kernel contains a fix for:

HOSTLD  scripts/dtc/dtc
/usr/bin/ld: scripts/dtc/dtc-parser.tab.o:(.bss+0x10): multiple definition of `yylloc'; scripts/dtc/dtc-lexer.lex.o:(.bss+0x0): first defined here

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=88f7a6aa7fb9aa5076b65489146045dac865f1d3

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 3eb7c4d3c4)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-03 22:00:48 +01:00