Commit Graph

54168 Commits

Author SHA1 Message Date
Fabrice Fontaine
7da2b1ebf9 package/wireshark: security bump to version 3.2.8
- Fix CVE-2020-26575: In Wireshark through 3.2.7, the Facebook Zero
  Protocol (aka FBZERO) dissector could enter an infinite loop. This was
  addressed in epan/dissectors/packet-fbzero.c by correcting the
  implementation of offset advancement.
  https://www.wireshark.org/security/wnpa-sec-2020-14.html
- Fix GQUIC dissector crash:
  https://www.wireshark.org/security/wnpa-sec-2020-15.html

https://www.wireshark.org/docs/relnotes/wireshark-3.2.8.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-11-01 10:01:11 +01:00
Bernd Kuhls
9d874c9051 package/mesa3d: bump version to 20.2.1
Rebased patch 0002 & 0003, added patch 0004 to fix build error.

Switched license file to license.rst due to upstream commit
https://cgit.freedesktop.org/mesa/mesa/commit/?id=4d066836e3cf307431a74eafcc8a404ce5ccea69
"No modification to the generated results have been done."

Switched true/false configure option values to enabled/disabled due to
upstream commit:
https://cgit.freedesktop.org/mesa/mesa/commit/?id=138c003d22739b0d1e6860ed398dd511a44cde04

Remove "MESA3D_PLATFORMS += drm", this platform is now automatically
selected:
https://cgit.freedesktop.org/mesa/mesa/commit/?id=e00adef34a5ce485e2c9216a268ca05e89a5fc98

Remove "MESA3D_PLATFORMS += surfaceless", this platform is now
automatically selected:
https://cgit.freedesktop.org/mesa/mesa/commit/?id=a38e21d6683aeecb51aea4f933a77c6e7f1a6179

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-11-01 10:01:06 +01:00
Michael Durrant
96e80ad214 package/gcc: re-enable gcc 8.x for PowerPC SPE
The GCC-7.x compiler series was the last to officially support PowerPC
SPE CPUs. Now that GCC-8.x is the default compiler used by Buildroot,
some defconfigs, notably the arcturus_ucp1020_defconfig and
freescale_p1025twr_defconfig ones started to fail building, as they
are PowerPC SPE platforms.

In fact, the GCC-8.x compiler series continues to support PowerPC SPE
CPU cores, but only as an --enable-obsoleted instruction set. This
patch enables the use of GCC-8.x and asserts the required option to
enable the PowerPC SPE instruction set.

This patch passes compilation and run tests with the
arcturus/ppc-ucp1020  board.

This patch should address a noted job failure on GitLab CI
https://gitlab.com/buildroot.org/buildroot/-/jobs/805461732

Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/805461732
Signed-off-by: Michael Durrant <mdurrant@ArcturusNetworks.com>
Signed-off-by: Oleksandr G Zhadan <Oleks@ArcturusNetworks.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:48:51 +01:00
Gary Bisson
25f2191ed2 package/qt5/qt5base: fix imx6 eglfs support with imx-gpu-viv
Last commit fixed eglfs_kms support for i.MX8 platforms that required to
declare imx-gpu-viv as the gbm provider.
However, this broke the eglfs "fbdev" imx6 support as gbm isn't provided
in this case. So limit the gbm option to imx-gpu-viv when wayland
backend is used only.

Fixes: 82fb51d3b5 ("package/qt5/qt5base: allow to use imx-gpu-viv as GBM
provider")

Signed-off-by: Gary Bisson <gary.bisson@boundarydevices.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:45:24 +01:00
Fabrice Fontaine
082d0fea3d package/libraw: needs autoreconf
configure is older than configure.ac in official libraw 0.20.2 tarball:
https://github.com/LibRaw/LibRaw/issues/353

Fixes:
 - http://autobuild.buildroot.org/results/abef2ac14a959093a6391cad28e738558e15ceec

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:44:06 +01:00
Alexander Egorenkov
38b2d0d641 package/s390-tools: bump to version 2.15.1
Signed-off-by: Alexander Egorenkov <egorenar@linux.ibm.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:43:49 +01:00
Jianhui Zhao
8436b05494 package/libuhttpd: bump version to 3.4.2
fix compile fail on riscv64

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:43:40 +01:00
Fabrice Fontaine
cc5089a9c9 package/sispmctl: fix build with gcc 4.8
Fixes:
 - http://autobuild.buildroot.org/results/079f1454121d38a83c49529c0f6cc8ed61fd5abb

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:43:14 +01:00
Fabrice Fontaine
7aa40a3ac9 package/libressl: bump to version 3.2.2
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.2.2-relnotes.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:42:34 +01:00
Fabrice Fontaine
72402616f2 package/util-linux: add file optional dependency
file is an optional dependency of more binary and is enabled by default
since version 2.36 and
09070e1a65

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:42:30 +01:00
Petr Vorel
d5f977439a package/ima-evm-utils: bump to version 1.3.2
Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:41:19 +01:00
Fabrice Fontaine
3a42f6df15 package/lxc: bump to version 4.0.5
https://discuss.linuxcontainers.org/t/lxc-4-0-5-lts-has-been-released/9269

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 23:01:00 +01:00
Etienne Carriere
87e8a386b3 package/optee-test: bump to version 3.11.0
Bump OP-TEE Test package version to OP-TEE release 3.11.0.
Add dependency on BR2_INSTALL_LIBSTDCPP since C++ support is needed
to build some OP-TEE test trusted applications.
Remove local patch files since issues addressed since.

Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:58:18 +01:00
Etienne Carriere
833b37c79c package/optee-benchmark: bump to version 3.11.0
Bump OP-TEE Benchmark package version to OP-TEE release 3.11.0.

Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:58:18 +01:00
Etienne Carriere
a53e43ff77 package/optee-examples: bump to version 3.11.0
Bump OP-TEE Exmaples package version to OP-TEE release 3.11.0.

Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:58:18 +01:00
Etienne Carriere
bc64b21d1e package/optee-client: bump to version 3.11.0
Bump OP-TEE Client package version to OP-TEE release 3.11.0.
Remove local patch file since issue addressed since.

Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:58:18 +01:00
Etienne Carriere
ae102ee750 boot/optee-os: bump to version 3.11.0
Bump OP-TEE OS package version to OP-TEE release 3.11.0.

Remove patches since merged in OP-TEE OS 3.11.0

Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:58:17 +01:00
Etienne Carriere
57652e1ddb configs/qemu_arm_vexpress_tz_defconfig: enable C++ in toolchain
As we are about to bump the optee-test package to 3.11.0, which
requires C++ support, let's enable C++ support in the
qemu_arm_vexpress_tz_defconfig, which uses optee-test.

Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:58:09 +01:00
Florian La Roche
32be344279 package/rt-tests: bump to version 1.9
Signed-off-by: Florian La Roche <Florian.LaRoche@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:22:57 +01:00
Fabrice Fontaine
148058a462 package/fastd: bump to version 21
- Switch to meson-package
- Drop first patch (not needed with meson)
- Drop second patch (already in version)

https://fastd.readthedocs.io/en/stable/releases/v20.html
https://fastd.readthedocs.io/en/stable/releases/v21.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:22:28 +01:00
Fabrice Fontaine
25ab2d8b11 package/fastd: libcap is optional not mandatory
libcap is an optional dependency which is available since version 7:
eaac494273

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:22:11 +01:00
Michael Nosthoff
e98610f039 package/libabseil-cpp: depend on (host) gcc >= 4.9
abseil depends on gcc >= 4.9 according to [0] and actually doesn't
compile anymore with the latest version bump.
This didn't show in the autobuilders as the C++11 issue fixed in the
previous commit shadowed it.

also update dependency in package/grpc.

fixes:
 https://github.com/abseil/abseil-cpp/issues/795

[0] https://abseil.io/docs/cpp/platforms/platforms#linux

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:21:13 +01:00
Michael Nosthoff
1d1390e6e3 package/libabseil-cpp: enforce C++11
Abseil needs at least c++11 but removed the fallback when not set in [0].
So we need to do this.

[0] c6954897f7

Fixes:
  http://autobuild.buildroot.net/results/5780d5e21e5e9c0ba86cc422ef995f45dc83cc4c
  http://autobuild.buildroot.net/results/8138c63fc13940e1b97f07f24752b199f88ccfa8
  http://autobuild.buildroot.net/results/f8eda966c6400c242680db378c8944444d89d5c5
  http://autobuild.buildroot.net/results/38e9427d995e16bc4876f9fdc890c42e4fd04c06
  http://autobuild.buildroot.net/results/4e99415728a6f3c6b396a9872924262652f77996
  http://autobuild.buildroot.net/results/1830577843772bdfd6e310b4d361aa1edf5969d6

Signed-off-by: Michael Nosthoff <buildroot@heine.tech>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:20:56 +01:00
Fabrice Fontaine
064251e292 package/libpam-tacplus: bump to version 1.6.1
- Drop all patches (already in version)
- Update indentation in hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:04:43 +01:00
Fabrice Fontaine
edb94d770b package/collectd: fix build with amqp
collectd unconditionally uses amqp_ssl_socket.h since version 5.11.0 and
e4808ad138

Fixes:
 - http://autobuild.buildroot.org/results/525abe0a5cca81ff517c9c07c092d85160c7eb62

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:04:32 +01:00
Fabrice Fontaine
3f38e3b86a package/sshfs: fix build with gcc 4.8
Fix build of sshfs 3.7.0 and gcc 4.8

Fixes:
 - http://autobuild.buildroot.org/results/2dbdc579c55543175716d5f739cabe2ad0864ed6

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:03:31 +01:00
Fabrice Fontaine
7e4af3ce3f package/fastd: fix CVE-2020-27638
receive.c in fastd before v21 allows denial of service (assertion
failure) when receiving packets with an invalid type code.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Acked-by: Alexander Dahl <post@lespocky.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 22:03:23 +01:00
Marcin Niestroj
822c283edc package/python-urllib3: bump to version 1.25.11
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 21:44:00 +01:00
Marcin Niestroj
6b34b1008d package/python-idna: bump to version 2.10
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 21:43:55 +01:00
Marcin Niestroj
54a276f783 package/python-certifi: bump to version 2020.6.20
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 21:42:51 +01:00
Fabrice Fontaine
04739c78e6 package/pax-utils: needs wchar
pax-utils uses asprintf() since version 1.2.4 (commit
9c0ec154d782795daa3b7d2ae273bbda2b36ae83), and recent versions of
gnulib make use of wctomb() in their implementation of asprintf(),
causing a build failure.

While it seems to be an issue in gnulib, let's for now mark pax-utils
as being not available with !wchar toolchains.

Fixes:

  http://autobuild.buildroot.org/results/613840edba8ea161bb900f3b56d8d3605961c78f

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 21:42:38 +01:00
Fabrice Fontaine
ec6598150f package/libfuse3: fix build with sshfs 3.7.0
Fixes:
 - http://autobuild.buildroot.org/results/f93972515ad09ab2ccbdc4cd976ed60702c5974a

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-10-31 18:28:17 +01:00
Bernd Kuhls
3adbb6d296 package/samba4: security bump version to 4.11.15
Fixes
o CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify.
o CVE-2020-14323: Unprivileged user can crash winbind.
o CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily
                  crafted records.

Release notes:
https://www.samba.org/samba/history/samba-4.11.14.html (bugfix-only)
https://www.samba.org/samba/history/samba-4.11.15.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:10:50 +01:00
Marcin Niestroj
0adb141d34 package/python-pyudev: bump to version 0.22.0
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:10:39 +01:00
Bernd Kuhls
69beb4dd98 package/php: security bump version to 7.4.12
Changelog: https://www.php.net/ChangeLog-7.php#7.4.12

According to the release notes this is a "security bug fix release":
https://news-web.php.net/php.announce/300

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:10:21 +01:00
Peter Seiderer
8487001ef2 package/gstreamer1/gst-omx: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:49 +01:00
Peter Seiderer
fc5925cad9 package/gstreamer1/gstreamer1-editing-services: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:47 +01:00
Peter Seiderer
1138076c00 package/gstreamer1/gst1-rtsp-server: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:44 +01:00
Peter Seiderer
7e9312ef09 package/gstreamer1/gst1-vaapi: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:41 +01:00
Peter Seiderer
0e123ab6fe package/gstreamer1/gst1-libav: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:38 +01:00
Peter Seiderer
2c300571cd package/gstreamer1/gst1-devtools: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:32 +01:00
Peter Seiderer
726c5ed5ba package/gstreamer1/gst1-plugins-ugly: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:30 +01:00
Peter Seiderer
95b4163a3e package/gstreamer1/gst1-plugins-bad: bump version to 1.18.1
Update license info:

- GPL-2.0+ text in COPYING was replaces with LGPL-2.0+ with
  commit [1]
- COPYING.LIB was removed and LGPL-2.0 replaced with LGPL-2.1+
  with commit [2]
- keep the license info to LGPL-2.0+ (as the source files state
  ('version 2 of the License, or (at your option) any later version')

[1] https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=daf8f65be1cccbe0b22c0734732816af4911dcb5
[2] https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=142c1e7a06301a92688830dcf04c04d21285a7e7

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:28 +01:00
Peter Seiderer
09f7ed6017 package/gstreamer1/gst1-plugins-good: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:26 +01:00
Peter Seiderer
c4c998f2eb package/gstreamer1/gst1-plugins-base: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:24 +01:00
Peter Seiderer
0b42389ef6 package/gstreamer1/gstreamer1: bump version to 1.18.1
Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:08:18 +01:00
André Hentschel
e9f0125bed package/wine: update optional dependencies for 5.12
wine was bumped to 5.12 in commit
6daf15db41, but a few changes in
optional dependencies were not taken into account:

 - A new optional dependency on libusb exists

 - The option name to use libv4l has been changed

Signed-off-by: André Hentschel <nerv@dawncrow.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-31 16:04:23 +01:00
Fabrice Fontaine
70499767e5 package/libpam-tacplus: fix CVE-2020-27743
libtac in pam_tacplus through 1.5.1 lacks a check for a failure of
RAND_bytes()/RAND_pseudo_bytes(). This could lead to use of a
non-random/predictable session_id.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-29 23:38:48 +01:00
Fabrice Fontaine
ef4f72aef7 package/pax-utils: bump to version 1.2.6
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-29 23:38:17 +01:00
Fabrice Fontaine
94b3a7ec73 package/memcached: security bump to version 1.6.8
Small security related release. A remote crash is possible if UDP is
enabled. The remediation is to upgrade or disable UDP. The crash was
introduced in the 1.6 series.

https://github.com/memcached/memcached/wiki/ReleaseNotes168

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-29 23:38:12 +01:00