Commit Graph

53653 Commits

Author SHA1 Message Date
Fabrice Fontaine
ce0e86b293 package/cifs-utils: security bump to version 6.11
Fix CVE-2020-14342: It was found that cifs-utils' mount.cifs was
invoking a shell when requesting the Samba password, which could be used
to inject arbitrary commands. An attacker able to invoke mount.cifs with
special permission, such as via sudo rules, could use this flaw to
escalate their privileges.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:06:04 +02:00
Bernd Kuhls
e56f54220e package/samba4: security bump version to 4.11.13
Version 4.11.11 fixed
o CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC
		  LDAP Server with ASQ, VLV and paged_results.
o CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
		  excessive CPU
o CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
		  paged_results and VLV.
o CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.

Version 4.11.12 was a bugfix-only release.

Version 4.11.13 fixes CVE-2020-1472.

Release notes:
https://www.samba.org/samba/history/samba-4.11.11.html
https://www.samba.org/samba/history/samba-4.11.12.html
https://www.samba.org/samba/security/CVE-2020-1472.html

Rebased patches 0001 & 0002.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:06:02 +02:00
Bernd Kuhls
4ceefab178 package/tor: bump version to 0.4.4.5
Release notes: https://blog.torproject.org/node/1921

Rebased patch.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:06:01 +02:00
Bernd Kuhls
3b068b5509 package/znc: bump version to 1.8.2
Changelog: https://wiki.znc.in/ChangeLog/1.8.2

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:06:00 +02:00
Bernd Kuhls
97dcf21fb6 package/tvheadend: bump version
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:05:59 +02:00
Bernd Kuhls
c9d55310e3 package/clamav: bump version to 0.103.0
Release notes:
https://lists.clamav.net/pipermail/clamav-announce/2020/000050.html

Rebased patch 0002.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:05:58 +02:00
Bernd Kuhls
4fecbce953 package/php: bump version to 7.4.10
Changelog: https://www.php.net/ChangeLog-7.php#7.4.10

Rebased patches 0002 & 0003.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:05:57 +02:00
Bernd Kuhls
44ec066067 package/{mesa3d, mesa3d-headers}: bump version to 20.1.8
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:05:56 +02:00
Bernd Kuhls
82b2b6d4e6 package/kodi-screensaver-pingpong: bump version to 2.1.3-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:51 +02:00
Bernd Kuhls
ec9f2ad752 package/kodi-visualisation-starburst: bump version to 2.0.3-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:50 +02:00
Bernd Kuhls
a9381eda28 package/kodi-visualisation-fishbmc: bump version to 5.1.3-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:49 +02:00
Bernd Kuhls
dd4576b369 package/kodi-screensaver-asteroids: bump version to 2.3.3-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:47 +02:00
Bernd Kuhls
895126c60f package/kodi-visualisation-waveform: bump version to 3.1.2-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:46 +02:00
Bernd Kuhls
c211570904 package/kodi-visualisation-shadertoy: bump version to 1.2.4-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:45 +02:00
Bernd Kuhls
a3bb09a616 package/kodi-visualisation-goom: bump version to 2.2.3-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:44 +02:00
Bernd Kuhls
ba9660a725 package/kodi-vfs-rar: bump version to 2.3.2-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:43 +02:00
Bernd Kuhls
4f0c90d66f package/kodi-screensaver-greynetic: bump version to 2.2.3-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:42 +02:00
Bernd Kuhls
d3986a63f3 package/kodi-screensaver-cpblobs: bump version to 3.0.5-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:41 +02:00
Bernd Kuhls
b989a19e27 package/kodi-screensaver-asterwave: bump version to 3.0.5-Leia
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 15:01:40 +02:00
James Hilliard
c42f8e6a11 package/python-brotli: bump to version 1.0.9
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 14:35:52 +02:00
James Hilliard
4d024ca2d3 package/python-aioconsole: bump to version 0.3.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 14:35:46 +02:00
James Hilliard
32c6aad14c package/meson: bump to version 0.55.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-20 14:35:41 +02:00
Andy Shevchenko
8ba52666dc package/acpica: bump version to 20200717
Fixes:
	https://github.com/acpica/acpica/issues/630

Signed-off-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:23:43 +02:00
Fabrice Fontaine
9a0b2d3738 package/ympd: fix build with gcc 10
Fixes:
 - http://autobuild.buildroot.org/results/ea4b96ba8d4a398515ed349e8304a656b684f718

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:22:59 +02:00
Fabrice Fontaine
7018cacaf8 package/ympd: renumber patch
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:22:49 +02:00
Jörg Krause
559d41ddfb package/{bluez5_utils, bluez5_utils-headers}: bump to version 5.55
Add a config option to explicitly enable the hid2hci tool, which is not
build by default anymore.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:22:17 +02:00
Joseph Kogut
ffd603ae7e package/sentry-native: new package
Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
Tested-by: Titouan Christophe <titouan.christophe@railnova.eu>
Reviewed-by: Titouan Christophe <titouan.christophe@railnova.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:14:09 +02:00
Dagg Stompler
b70114eecd package/meson-tools: fix build with older gcc versions
The meson-tools code uses C99 constructs without passing -std=c99,
which causes the build to fail with old gcc versions. Since there are
very few instances of C99 constructs, we simply patch them out.

Fixes:

 - http://autobuild.buildroot.net/results/602d474a12cf2400e4f38ffad903758d7fd9f2f5
 - http://autobuild.buildroot.net/results/65cfe582ce60fcff18afd008c3d469471ffb0e49

Signed-off-by: Dagg Stompler <daggs@gmx.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 23:03:04 +02:00
Joseph Kogut
28c28ba303 package/sentry-cli: new package
Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
Tested-by: Titouan Christophe <titouan.christophe@railnova.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:36:18 +02:00
Thomas Petazzoni
5ebc935bce package/glibc: add license file hashes for RISC-V specific version
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:24:38 +02:00
Vineet Gupta
8f91556ccb package/glibc: use upstream 2.32 for the ARC architecture
The ARC glibc port was merged upstream in 2.32, so use that instead of
the one available from Synosys's Github.

Signed-off-by: Vineet Gupta <vgupta@synopsys.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:19:35 +02:00
Fabrice Fontaine
a530ca6bd9 package/libxml2: fix CVE-2020-24977
GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow
vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:16:02 +02:00
Fabrice Fontaine
60cd158f0e package/efl: needs host gcc >= 4.9
Commit dbe2d2e686 forgot to add a
host gcc >= 4.9 dependency on efl (because of host-efl)

Fixes:
 - http://autobuild.buildroot.org/results/f627d44919c20e068e377d7fe113833e2d4d0ad3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:10:50 +02:00
Peter Seiderer
1791bc30a5 package/libxkbcommon: bump version to 1.0.1
For details see [1].

- disable enable-xkbregistry (as suggested by documentation [3] and
  to avoid libxml2 dependency)

[1] https://lists.freedesktop.org/archives/wayland-devel/2020-September/041596.html
[2] https://lists.freedesktop.org/archives/wayland-devel/2020-September/041609.html
[3] https://github.com/xkbcommon/libxkbcommon/blob/master/PACKAGING

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:09:59 +02:00
Peter Seiderer
8d567cce4f package/orc: bump version to 0.4.32
For details see [1].

[1] https://lists.freedesktop.org/archives/gstreamer-devel/2020-September/076116.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:08:37 +02:00
Peter Seiderer
7f0c1a010b package/wayland-utils: change download url to https
- change download url to https (as given by the original announcement [1]
    and redirected by the http url)

Fixes:

  - http://autobuild.buildroot.net/results/84ad38933e4f42b74c3185c8c5e777fd714c9601
  >>> wayland-utils 1.0.0 Downloading[27m
  --2020-09-14 13:53:35--  http://wayland.freedesktop.org/releases/wayland-utils-1.0.0.tar.xz
  Resolving wayland.freedesktop.org (wayland.freedesktop.org)... 35.227.58.183
  Connecting to wayland.freedesktop.org (wayland.freedesktop.org)|35.227.58.183|:80... connected.
  HTTP request sent, awaiting response... 308 Permanent Redirect
  2020-09-14 13:53:35 ERROR 308: Permanent Redirect.

[1] https://lists.freedesktop.org/archives/wayland-devel/2020-July/041565.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:00:16 +02:00
Peter Seiderer
79609dd78f package/wayland-protocols: change download url to https
- change download url to https (as redirected by the original http url)

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 22:00:04 +02:00
Fabrice Fontaine
2cb057314a package/popt: fix build without wchar
Commit 82442b54b6 removed
0001-no-wchar.patch but without importing an upstream patch that
"should" have been equivalent to our patch but resulted in a build
failure on toolchains with wchar but without mbsrtowcs

So add a bunch of upstream patches and a new patch to fix this build
failure

While at it, also put back 0003-glob-detection.patch which, again, has
been upstreamed but is not in version 1.18 ...

Fixes:
 - http://autobuild.buildroot.org/results/27f184af35468941173628e5e847a284c0b80d73

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:55:35 +02:00
Francois Perrad
aaf909aa26 package/sunxi-tools: bump to version 1.4.2
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:55:14 +02:00
Francois Perrad
b299e96454 package/spi-tools: bump to version 0.8.5
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:55:09 +02:00
Fabrice Fontaine
cd9d7c55e2 package/wampcc: fix build with gcc 10
Fixes:
 - http://autobuild.buildroot.org/results/5668ee2a81daba689cc16c520681cfd16a79dbd7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:55:04 +02:00
Francois Perrad
a925b4ee14 package/prosody: bump to version 0.11.6
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:54:55 +02:00
Fabrice Fontaine
89d5020cd6 package/libcap: bump to version 2.43
Retrieve first patch from upstream

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:54:49 +02:00
Michael Nosthoff
31fca9592d package/grpc: bump version to 1.32.0
- order dependencies alphabetically
- update hash
- alter patch offsets

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:53:14 +02:00
Michael Nosthoff
5890cd06a5 package/{protobuf, python-protobuf}: bump to version 3.13.0
- updated hashes
- explicitly advise to update hash in python-protobuf
- changed link in python-protobuf to point to the protobuf site

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:52:28 +02:00
Michael Nosthoff
d92b9efb6c package/libabseil-cpp: bump to 20200225.2
patch release with two bugfixes
- fixes the list of dependencies of absl::Cord in the CMake build
- bug fix for absl::Status::ErasePayload

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:51:38 +02:00
Michael Vetter
a108bbf38e package/jasper: bump to version 2.0.20
Bump JasPer to 2.0.20

Signed-off-by: Michael Vetter <jubalh@iodoru.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:50:09 +02:00
Christian Stewart
ff14e08fe5 package/rtl8821au: fix build against 5.8.x kernel
Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:49:31 +02:00
Michael Fischer
587925d55e package/gnuplot: add patch to fix 'undefined reference to gp_read_history'
Fixes:
 - http://autobuild.buildroot.net/results/e09087f0afd323a220889e2c7827fd73c9025673

Signed-off-by: Michael Fischer <mf@go-sys.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:40:39 +02:00
Francois Perrad
5e0a64e58d package/mc: bump to version 4.8.25
The patch was merged upstream, so we drop it, and consequently drop
AUTORECONF = YES.

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-09-19 21:18:26 +02:00