Peter Korsgaard
ea41a5faab
package/python-lxml: security bump to version 4.6.2
...
Fixes the following security issues:
* 4.6.2: A vulnerability (CVE-2020-27783) was discovered in the HTML Cleaner
by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner now
removes more sneaky "style" content.
* 4.6.1: A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry,
which allowed JavaScript to pass through. The cleaner now removes more
sneaky "style" content.
For more details, see the changes file:
https://github.com/lxml/lxml/blob/lxml-4.6.2/CHANGES.txt
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2020-12-14 15:44:31 +01:00
Peter Korsgaard
2af6d8a875
package/mosquitto: bump version to 2.0.0
...
A new major version, see the announcement for details:
https://mosquitto.org/blog/2020/12/version-2-0-0-released/
License has now changed to v2.0 of the Eclipse Public License, so update the
license info and hashes to match.
There is now optional cJSON support, so handle that.
Add upstream post-2.0.0 patches fixing build with cJSON and without TLS
support.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2020-12-14 15:44:22 +01:00
Fabrice Fontaine
f38893f8dd
package/sqlcipher: security bump to version 4.4.2
...
Fix CVE-2020-27207: Zetetic SQLCipher 4.x before 4.4.1 has a
use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in
sqlite3.c. A remote denial of service attack can be performed. For
example, a SQL injection can be used to execute the crafted SQL command
sequence. After that, some unexpected RAM data is read.
https://www.zetetic.net/blog/2020/11/25/sqlcipher-442-release
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2020-12-14 15:44:02 +01:00
Fabrice Fontaine
fe347897b8
package/mongoose: add mbedtls support
...
mbedtls is supported since version 6.7 and
65e01dbabc
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:47:10 +01:00
Peter Seiderer
eda1040762
package/kmsxx: fix fmt dependency (needs wchar)
...
Propagate the fmt dependency on wchar.
Fixes:
- http://autobuild.buildroot.net/results/814b0f9c3df0076791ca73579b844ef4d56f13c3
[ 66%] Building CXX object CMakeFiles/fmt.dir/src/os.cc.o
In file included from .../build/fmt-7.1.3/include/fmt/os.h:26,
from .../build/fmt-7.1.3/src/os.cc:13:
.../build/fmt-7.1.3/include/fmt/format.h:1139:8: error: 'wstring' in namespace 'std' does not name a type
std::wstring str() const { return {&buffer_[0], size()}; }
^~~~~~~
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:44:36 +01:00
Gilles Talis
c2b9ecb9bc
package/xapian: bump to version 1.4.17
...
Signed-off-by: Gilles Talis <gilles.talis@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:27:48 +01:00
Gilles Talis
c69568c0fa
package/libolm: bump to version 3.2.1
...
Signed-off-by: Gilles Talis <gilles.talis@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:27:46 +01:00
Gilles Talis
e9ae0267ae
package/iozone: bump to version 3_490
...
Also updated indentation in hash file (two spaces)
Signed-off-by: Gilles Talis <gilles.talis@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:27:45 +01:00
Zoltan Gyarmati
fdc43df6f4
package/proj: bump to 7.2.0
...
Signed-off-by: Zoltan Gyarmati <zgyarmati@zgyarmati.de >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:25:03 +01:00
Fabrice Fontaine
ed0ee4f5e8
package/qemu: fix build with kernel < 5.0
...
Fixes:
- http://autobuild.buildroot.org/results/e4ef13e8ca4ac634650ed80a72a0e1da59520628
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:24:20 +01:00
Fabrice Fontaine
b46f050475
DEVELOPERS: drop ti-sgx-libgbm
...
Commit 814bfc5ec1 forgot to drop
ti-sgx-libgbm from DEVELOPERS
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:17:18 +01:00
Fabrice Fontaine
5271fa2778
package/upmpdcli: bump to version 1.5.5
...
https://www.lesbonscomptes.com/upmpdcli/pages/releases.html#UPMPDCLI-1.5.5
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:13:50 +01:00
Fabrice Fontaine
28a6a2b7be
package/libupnpp: bump to version 0.20.1
...
https://www.lesbonscomptes.com/upmpdcli/pages/releases.html#_2020_11_26_libupnpp_0_20_1
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:13:40 +01:00
Fabrice Fontaine
affc398f1b
package/libnpupnp: bump to version 4.0.14
...
https://www.lesbonscomptes.com/upmpdcli/pages/releases.html#_2020_11_15_libnpupnp_4_0_14
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:13:35 +01:00
Fabrice Fontaine
1e4652c36c
package/libgpg-error: bump to version 1.39
...
https://dev.gnupg.org/T5031
https://dev.gnupg.org/T4859
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:10:13 +01:00
Fabrice Fontaine
5fb29077c4
package/usbutils: bump to version 013
...
Update indentation in hash file (two spaces)
https://github.com/gregkh/usbutils/blob/v013/NEWS
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:04:54 +01:00
Fabrice Fontaine
867c01cbc5
package/i2pd: bump to version 2.35.0
...
Update hash of license file (update in year:
bc330ff0ea )
https://github.com/PurpleI2P/i2pd/releases/tag/2.34.0
https://github.com/PurpleI2P/i2pd/releases/tag/2.35.0
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:04:16 +01:00
Fabrice Fontaine
8a26801c9f
package/libusb: needs gcc >= 4.9
...
libusb depends on gcc >= 4.9 because of _Thread_local since version
1.0.24 and
9a1bc8cafb
Fixes:
- http://autobuild.buildroot.org/results/7b7f4b31095f8a7eecb347b574391003a2def8bc
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 22:01:59 +01:00
Yann E. MORIN
c7bd3805bd
package/dtv-scan-tables: switch upstream location
...
The old git tree is unreachable now, switch to using the new one.
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
2020-12-13 21:09:59 +01:00
Adam Duskett
814bfc5ec1
package/ti-sgx-{km, um}: bump to SDK 06.01.00.08 versions
...
Currently, the ti-sgx packages and the beaglebone_qt5_defconfig do
not work with KMS nor Weston. What's worse, is the latest SDK version
06.03.00.106 (as of this commit) of these packages is broken and does
not correctly support KMS, and attempting to run KMS applications
results in eglfs initialization failures. As such, bumping these
packages to the version before 06.03.00.106 is the best option.
Because of the above problems, several packages must change at the
same time to ensure this patch does not break any other packages:
- ti-sgx-libgbm
- dropped, merged into ti-sgx-um, see below
- ti-sgx-um:
- bump the version that matches TI SDK 06.01.00.08.
- demove select BR2_PACKAGE_TI_SGX_LIBGBM in Config.in, as the libgbm
package merges ti-sgx-libgbm with this package.
- ti-sgx-km:
- bump the version that matches TI SDK 06.01.00.08.
Signed-off-by: Adam Duskett <Aduskett@gmail.com >
Tested-by: Markus <zehnder@live.com >
[yann.morin.1998@free.fr:
- actually switch qt5base to use ti-sgx-um
- split the beaglebone config changes to their own patch
- split the ti-sgx-demos changes to their own patch
]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-12-13 14:51:48 +01:00
Yann E. MORIN
cf7f3112f6
package/qt5base: fix build with TI SGX GL stack
...
qt5base FTBFS with TI SGX GL stack because it defines a type that is
incompatible with that expected by Qt.
Fix that by adapting a mix of upstream bug reports, upstream tentative
patch, and various comments on various Qt forums, none of which were
satisfying for various reasons explained in each resource:
- https://bugreports.qt.io/browse/QTBUG-72567
- https://codereview.qt-project.org/c/qt/qtbase/+/248270
- https://forum.qt.io/topic/88588/qtbase-compilation-error-with-device-linux-rasp-pi3-g-qeglfskmsgbmwindow-cpp/8
- https://forum.qt.io/topic/91596/raspberry-pi-3-compiling-qt-5-11-0-problem/6
- https://patchwork.ozlabs.org/project/buildroot/patch/20200702201125.3639873-1-aduskett@gmail.com/#2579598
... which, mixed together with my little understanding of Qt, GL, and
C++, gave a relatively simple patch that overcomes the build failure on
TI's SGX, while at the same time keeping buildability and functionality
on other platforms.
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr >
Cc: Adam Duskett <aduskett@gmail.com >
Cc: Markus <zehnder@live.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 14:51:47 +01:00
Adam Duskett
29ff603f08
package/ti-sgx-demos: use KMS-based demos
...
Weston does not work with the ti-sgx SDK, so switch to using the
KMS-based demos.
Signed-off-by: Adam Duskett <Aduskett@gmail.com >
[yann.morin.1998@free.fr: split off into its own patch]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-12-13 14:51:46 +01:00
Adam Duskett
8efc5dce98
configs/beaglebone_qt5: switch to using KMS instead of wayland+weston
...
weston does not work on the ti-sgx SDK, so switch to using KMS directly,
and drop the wayland-related config options.
Signed-off-by: Adam Duskett <Aduskett@gmail.com >
[yann.morin.1998@free.fr: split into its own patch]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-12-13 14:51:45 +01:00
Fabrice Fontaine
2109c5862a
package/libgcrypt: bump to version 1.8.7
...
https://dev.gnupg.org/T5113
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 14:49:44 +01:00
Fabrice Fontaine
1cf646780a
package/libassuan: bump to version 2.5.4
...
Update indentation in hash file
https://dev.gnupg.org/T5112
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 14:49:43 +01:00
Fabrice Fontaine
c4c58de3b5
package/libksba: bump to version 1.5.0
...
- Update hash of AUTHORS file (update in year and URL)
- Update indentation in hash file
https://dev.gnupg.org/T5146
https://dev.gnupg.org/T4943
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 14:49:42 +01:00
Peter Seiderer
4e8b5f9bee
package/qt5/qt5mqtt: bump version to 5.15.2 (and fix download)
...
- bump version to 5.15.2
- change download url to original site
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 14:49:13 +01:00
Peter Seiderer
6cfbd51d98
package/qt5/qt5coap: bump version to 5.15.2 (and fix download)
...
- bump version to 5.15.2
- change download url to original site
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 14:49:11 +01:00
Peter Seiderer
d838a416c4
package/qt5/qt5knx: bump version to 5.15.2 (and fix download)
...
- bump version to 5.15.2
- change download url to original site
Fixes:
- http://autobuild.buildroot.net/results/a043bb991a827880d6c743e63f070fc6a3b72a2f
>>> qt5knx 5.15.2 Downloading[27m
--2020-12-12 13:42:47-- https://github.com/qt/qtknx/archive/v5.15.2/qt5knx-5.15.2.tar.gz
Resolving github.com (github.com)... 140.82.114.3
Connecting to github.com (github.com)|140.82.114.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://codeload.github.com/qt/qtknx/tar.gz/v5.15.2/qt5knx-5.15.2 [following]
--2020-12-12 13:42:47-- https://codeload.github.com/qt/qtknx/tar.gz/v5.15.2/qt5knx-5.15.2
Resolving codeload.github.com (codeload.github.com)... 140.82.114.10
Connecting to codeload.github.com (codeload.github.com)|140.82.114.10|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2020-12-12 13:42:47 ERROR 404: Not Found.
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 14:49:07 +01:00
Fabrice Fontaine
67ed81fc5d
package/botan: bump to version 2.17.2
...
https://botan.randombit.net/news.html#version-2-17-2-2020-11-13
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:36:44 +01:00
Fabrice Fontaine
87b23b380d
package/libressl: security bump to version 3.2.3
...
It includes the following security fix:
* Malformed ASN.1 in a certificate revocation list or a timestamp
response token can lead to a NULL pointer dereference.
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.3-relnotes.txt
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:36:42 +01:00
Romain Naour
b5351d8b7f
package/qemu: bump to version 5.2.0
...
From [1]:
"The build system is now partly based on Meson. However, building is
still done with configure and make as in previous versions of QEMU."
Qemu requires meson >= 0.55.3, Buildroot use the latest version 0.56.0.
In order to add host-meson dependency we have to remove --python option
since it requires to use the meson bundled into Qemu sources [2].
Even without --python, python3 is used. See config-host.mak:
PYTHON=output/host/bin/python3 -B
See config-host.mak to check if meson and ninja from HOST_DIR are used:
MESON=output/host/bin/meson
NINJA=output/host/bin/ninja
Since the switch to meson is partial and still requires using the
configure script, keep using generic-package infra.
Disable new options introduced in Qemu 5.2.0:
--disable-virtiofsd
--disable-vhost-user-blk-server
Runtime tested on gitlab [3]
[1] https://wiki.qemu.org/ChangeLog/5.2#Build_Information
[2] https://git.qemu.org/?p=qemu.git;a=blob;f=configure;h=18c26e0389741643748c70ac7788a996ef006834;hb=553032db17440f8de011390e5a1cfddd13751b0b#l1895
[3] https://gitlab.com/kubu93/buildroot/-/pipelines/228214205
Signed-off-by: Romain Naour <romain.naour@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:36:41 +01:00
Francois Perrad
b2364df837
package/luarocks: bump to version 3.5.0
...
Signed-off-by: Francois Perrad <francois.perrad@gadz.org >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:36:40 +01:00
Fabrice Fontaine
ff030934fd
package/libusb: bump to version 1.0.24
...
Update indentation in hash file (two spaces)
https://github.com/libusb/libusb/blob/v1.0.24/ChangeLog
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Acked-by: Zoltan Gyarmati <zgyarmati@zgyarmati.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:36:39 +01:00
Fabrice Fontaine
455387fa3a
package/mbedtls: security bump to version 2.16.9
...
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:36:37 +01:00
Bernd Kuhls
b96459216c
package/libva: bump version to 2.10.0
...
Release notes: https://github.com/intel/libva/blob/master/NEWS
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:36:36 +01:00
Peter Seiderer
067a1fa122
package/qt5/qt5xmlpatterns: format hash file according to two spaces guideline
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:19 +01:00
Peter Seiderer
faf987eda6
package/qt5/qt5x11extras: format hash file according to two spaces guideline
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:17 +01:00
Peter Seiderer
81797dc3de
package/qt5/qt5websockets: format hash file according to two spaces guideline
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:15 +01:00
Peter Seiderer
9d104c8fda
package/qt5/qt5webkit: format hash file according to two spaces guideline
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:13 +01:00
Peter Seiderer
f27d32f8c0
package/qt5/qt5webkit-examples: change hash file license marker
...
Chnage hash file license marker to the more usual 'Hashes for
license files' text.
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:10 +01:00
Peter Seiderer
5dd16559c3
package/qt5/qt5webengine: format hash file according to two spaces guideline
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:08 +01:00
Peter Seiderer
97f3c01d08
package/qt5/qt5webchannel: format hash file according to two spaces guideline
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:06 +01:00
Peter Seiderer
080214febe
package/qt5/qt5wayland: format hash file according to two spaces guideline
...
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:04 +01:00
Peter Seiderer
c8cb5bf5f1
package/qt5/qt5virtualkeyboard: format hash file according to two spaces guideline
...
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:02 +01:00
Peter Seiderer
95ec5ac4e3
package/qt5/qt5remoteobjects: format hash file according to two spaces guideline
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:35:00 +01:00
Peter Seiderer
969d394ec6
package/qt5/qt5webview: format hash file according to two spaces guideline
...
Signed-off-by: Peter Seiderer <ps.report@gmx.net >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:34:56 +01:00
Marcin Niestroj
6b9dc3d937
package/python-urllib3: bump to version 1.26.2
...
The hash of the license file is changed due to:
-Copyright (c) 2008-2019 Andrey Petrov and contributors (see CONTRIBUTORS.txt)
+Copyright (c) 2008-2020 Andrey Petrov and contributors (see CONTRIBUTORS.txt)
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:30:16 +01:00
Marcin Niestroj
b4406031cc
package/python-pytest: bump to version 6.1.2
...
python-more-itertools was removed as dependency starting from
[1] (release 6.1.0).
XML module is now a hard requirement.
[1] 96a48f0c66
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:21:28 +01:00
Marcin Niestroj
26bd4c9062
package/python-pyparsing: bump to version 2.4.7
...
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-12-13 10:21:26 +01:00