Fabrice Fontaine
ce0e86b293
package/cifs-utils: security bump to version 6.11
...
Fix CVE-2020-14342: It was found that cifs-utils' mount.cifs was
invoking a shell when requesting the Samba password, which could be used
to inject arbitrary commands. An attacker able to invoke mount.cifs with
special permission, such as via sudo rules, could use this flaw to
escalate their privileges.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:06:04 +02:00
Bernd Kuhls
e56f54220e
package/samba4: security bump version to 4.11.13
...
Version 4.11.11 fixed
o CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC
LDAP Server with ASQ, VLV and paged_results.
o CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
excessive CPU
o CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
paged_results and VLV.
o CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.
Version 4.11.12 was a bugfix-only release.
Version 4.11.13 fixes CVE-2020-1472.
Release notes:
https://www.samba.org/samba/history/samba-4.11.11.html
https://www.samba.org/samba/history/samba-4.11.12.html
https://www.samba.org/samba/security/CVE-2020-1472.html
Rebased patches 0001 & 0002.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:06:02 +02:00
Bernd Kuhls
4ceefab178
package/tor: bump version to 0.4.4.5
...
Release notes: https://blog.torproject.org/node/1921
Rebased patch.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:06:01 +02:00
Bernd Kuhls
3b068b5509
package/znc: bump version to 1.8.2
...
Changelog: https://wiki.znc.in/ChangeLog/1.8.2
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:06:00 +02:00
Bernd Kuhls
97dcf21fb6
package/tvheadend: bump version
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:05:59 +02:00
Bernd Kuhls
c9d55310e3
package/clamav: bump version to 0.103.0
...
Release notes:
https://lists.clamav.net/pipermail/clamav-announce/2020/000050.html
Rebased patch 0002.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:05:58 +02:00
Bernd Kuhls
4fecbce953
package/php: bump version to 7.4.10
...
Changelog: https://www.php.net/ChangeLog-7.php#7.4.10
Rebased patches 0002 & 0003.
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:05:57 +02:00
Bernd Kuhls
44ec066067
package/{mesa3d, mesa3d-headers}: bump version to 20.1.8
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:05:56 +02:00
Bernd Kuhls
82b2b6d4e6
package/kodi-screensaver-pingpong: bump version to 2.1.3-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:51 +02:00
Bernd Kuhls
ec9f2ad752
package/kodi-visualisation-starburst: bump version to 2.0.3-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:50 +02:00
Bernd Kuhls
a9381eda28
package/kodi-visualisation-fishbmc: bump version to 5.1.3-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:49 +02:00
Bernd Kuhls
dd4576b369
package/kodi-screensaver-asteroids: bump version to 2.3.3-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:47 +02:00
Bernd Kuhls
895126c60f
package/kodi-visualisation-waveform: bump version to 3.1.2-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:46 +02:00
Bernd Kuhls
c211570904
package/kodi-visualisation-shadertoy: bump version to 1.2.4-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:45 +02:00
Bernd Kuhls
a3bb09a616
package/kodi-visualisation-goom: bump version to 2.2.3-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:44 +02:00
Bernd Kuhls
ba9660a725
package/kodi-vfs-rar: bump version to 2.3.2-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:43 +02:00
Bernd Kuhls
4f0c90d66f
package/kodi-screensaver-greynetic: bump version to 2.2.3-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:42 +02:00
Bernd Kuhls
d3986a63f3
package/kodi-screensaver-cpblobs: bump version to 3.0.5-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:41 +02:00
Bernd Kuhls
b989a19e27
package/kodi-screensaver-asterwave: bump version to 3.0.5-Leia
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:40 +02:00
James Hilliard
c42f8e6a11
package/python-brotli: bump to version 1.0.9
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 14:35:52 +02:00
James Hilliard
4d024ca2d3
package/python-aioconsole: bump to version 0.3.0
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 14:35:46 +02:00
James Hilliard
32c6aad14c
package/meson: bump to version 0.55.3
...
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 14:35:41 +02:00
Andy Shevchenko
8ba52666dc
package/acpica: bump version to 20200717
...
Fixes:
https://github.com/acpica/acpica/issues/630
Signed-off-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:23:43 +02:00
Fabrice Fontaine
9a0b2d3738
package/ympd: fix build with gcc 10
...
Fixes:
- http://autobuild.buildroot.org/results/ea4b96ba8d4a398515ed349e8304a656b684f718
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:22:59 +02:00
Fabrice Fontaine
7018cacaf8
package/ympd: renumber patch
...
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:22:49 +02:00
Jörg Krause
559d41ddfb
package/{bluez5_utils, bluez5_utils-headers}: bump to version 5.55
...
Add a config option to explicitly enable the hid2hci tool, which is not
build by default anymore.
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:22:17 +02:00
Joseph Kogut
ffd603ae7e
package/sentry-native: new package
...
Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
Tested-by: Titouan Christophe <titouan.christophe@railnova.eu>
Reviewed-by: Titouan Christophe <titouan.christophe@railnova.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:14:09 +02:00
Dagg Stompler
b70114eecd
package/meson-tools: fix build with older gcc versions
...
The meson-tools code uses C99 constructs without passing -std=c99,
which causes the build to fail with old gcc versions. Since there are
very few instances of C99 constructs, we simply patch them out.
Fixes:
- http://autobuild.buildroot.net/results/602d474a12cf2400e4f38ffad903758d7fd9f2f5
- http://autobuild.buildroot.net/results/65cfe582ce60fcff18afd008c3d469471ffb0e49
Signed-off-by: Dagg Stompler <daggs@gmx.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:03:04 +02:00
Joseph Kogut
28c28ba303
package/sentry-cli: new package
...
Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
Tested-by: Titouan Christophe <titouan.christophe@railnova.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:36:18 +02:00
Thomas Petazzoni
5ebc935bce
package/glibc: add license file hashes for RISC-V specific version
...
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:24:38 +02:00
Vineet Gupta
8f91556ccb
package/glibc: use upstream 2.32 for the ARC architecture
...
The ARC glibc port was merged upstream in 2.32, so use that instead of
the one available from Synosys's Github.
Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:19:35 +02:00
Fabrice Fontaine
a530ca6bd9
package/libxml2: fix CVE-2020-24977
...
GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow
vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c.
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:16:02 +02:00
Fabrice Fontaine
60cd158f0e
package/efl: needs host gcc >= 4.9
...
Commit dbe2d2e686
forgot to add a
host gcc >= 4.9 dependency on efl (because of host-efl)
Fixes:
- http://autobuild.buildroot.org/results/f627d44919c20e068e377d7fe113833e2d4d0ad3
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:10:50 +02:00
Peter Seiderer
1791bc30a5
package/libxkbcommon: bump version to 1.0.1
...
For details see [1].
- disable enable-xkbregistry (as suggested by documentation [3] and
to avoid libxml2 dependency)
[1] https://lists.freedesktop.org/archives/wayland-devel/2020-September/041596.html
[2] https://lists.freedesktop.org/archives/wayland-devel/2020-September/041609.html
[3] https://github.com/xkbcommon/libxkbcommon/blob/master/PACKAGING
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:09:59 +02:00
Peter Seiderer
8d567cce4f
package/orc: bump version to 0.4.32
...
For details see [1].
[1] https://lists.freedesktop.org/archives/gstreamer-devel/2020-September/076116.html
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:08:37 +02:00
Peter Seiderer
7f0c1a010b
package/wayland-utils: change download url to https
...
- change download url to https (as given by the original announcement [1]
and redirected by the http url)
Fixes:
- http://autobuild.buildroot.net/results/84ad38933e4f42b74c3185c8c5e777fd714c9601
>>> wayland-utils 1.0.0 Downloading[27m
--2020-09-14 13:53:35-- http://wayland.freedesktop.org/releases/wayland-utils-1.0.0.tar.xz
Resolving wayland.freedesktop.org (wayland.freedesktop.org)... 35.227.58.183
Connecting to wayland.freedesktop.org (wayland.freedesktop.org)|35.227.58.183|:80... connected.
HTTP request sent, awaiting response... 308 Permanent Redirect
2020-09-14 13:53:35 ERROR 308: Permanent Redirect.
[1] https://lists.freedesktop.org/archives/wayland-devel/2020-July/041565.html
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:00:16 +02:00
Peter Seiderer
79609dd78f
package/wayland-protocols: change download url to https
...
- change download url to https (as redirected by the original http url)
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:00:04 +02:00
Fabrice Fontaine
2cb057314a
package/popt: fix build without wchar
...
Commit 82442b54b6
removed
0001-no-wchar.patch but without importing an upstream patch that
"should" have been equivalent to our patch but resulted in a build
failure on toolchains with wchar but without mbsrtowcs
So add a bunch of upstream patches and a new patch to fix this build
failure
While at it, also put back 0003-glob-detection.patch which, again, has
been upstreamed but is not in version 1.18 ...
Fixes:
- http://autobuild.buildroot.org/results/27f184af35468941173628e5e847a284c0b80d73
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:55:35 +02:00
Francois Perrad
aaf909aa26
package/sunxi-tools: bump to version 1.4.2
...
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:55:14 +02:00
Francois Perrad
b299e96454
package/spi-tools: bump to version 0.8.5
...
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:55:09 +02:00
Fabrice Fontaine
cd9d7c55e2
package/wampcc: fix build with gcc 10
...
Fixes:
- http://autobuild.buildroot.org/results/5668ee2a81daba689cc16c520681cfd16a79dbd7
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:55:04 +02:00
Francois Perrad
a925b4ee14
package/prosody: bump to version 0.11.6
...
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:54:55 +02:00
Fabrice Fontaine
89d5020cd6
package/libcap: bump to version 2.43
...
Retrieve first patch from upstream
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:54:49 +02:00
Michael Nosthoff
31fca9592d
package/grpc: bump version to 1.32.0
...
- order dependencies alphabetically
- update hash
- alter patch offsets
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:53:14 +02:00
Michael Nosthoff
5890cd06a5
package/{protobuf, python-protobuf}: bump to version 3.13.0
...
- updated hashes
- explicitly advise to update hash in python-protobuf
- changed link in python-protobuf to point to the protobuf site
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:52:28 +02:00
Michael Nosthoff
d92b9efb6c
package/libabseil-cpp: bump to 20200225.2
...
patch release with two bugfixes
- fixes the list of dependencies of absl::Cord in the CMake build
- bug fix for absl::Status::ErasePayload
Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:51:38 +02:00
Michael Vetter
a108bbf38e
package/jasper: bump to version 2.0.20
...
Bump JasPer to 2.0.20
Signed-off-by: Michael Vetter <jubalh@iodoru.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:50:09 +02:00
Christian Stewart
ff14e08fe5
package/rtl8821au: fix build against 5.8.x kernel
...
Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:49:31 +02:00
Michael Fischer
587925d55e
package/gnuplot: add patch to fix 'undefined reference to gp_read_history'
...
Fixes:
- http://autobuild.buildroot.net/results/e09087f0afd323a220889e2c7827fd73c9025673
Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:40:39 +02:00
Francois Perrad
5e0a64e58d
package/mc: bump to version 4.8.25
...
The patch was merged upstream, so we drop it, and consequently drop
AUTORECONF = YES.
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:18:26 +02:00