Commit Graph

65279 Commits

Author SHA1 Message Date
Fabrice Fontaine
860b1b9587 package/libpam-radius-auth: bump to version 2.0.0
Switch site to get latest release

https://github.com/FreeRADIUS/pam_radius/blob/release_2_0_0/Changelog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:03 +01:00
Fabrice Fontaine
caf755999d package/kismet: bump to version 2022-08-R1
https://www.kismetwireless.net/release/kismet-2022-08-R1/

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:02 +01:00
Fabrice Fontaine
62e082ec4d package/lldpd: security bump to version 1.0.15
- Fix heap overflow when reading SONMP. CVE-2021-43612.
- https://vincentbernat.github.io/lldpd/ is redirecting to
  https://lldpd.github.io/

https://github.com/lldpd/lldpd/blob/1.0.15/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:54:01 +01:00
Fabrice Fontaine
29c0b4e6db package/makedumpfile: bump to version 1.7.2
Use official tarball

https://github.com/makedumpfile/makedumpfile/releases/tag/1.7.2
https://github.com/makedumpfile/makedumpfile/releases/tag/1.7.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:59 +01:00
Fabrice Fontaine
c321a08ad4 package/libidn2: bump to version 2.3.4
https://gitlab.com/libidn/libidn2/-/blob/v2.3.4/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:58 +01:00
Fabrice Fontaine
8ac75a9a21 package/minizip-zlib: bump to version 1.2.13
Use license file available since
352cb28d12

https://github.com/madler/zlib/blob/v1.2.13/ChangeLog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:56 +01:00
Fabrice Fontaine
3be3113b57 package/minissdpd: bump to version 1.6.0
Update hash of LICENSE file (license refined for github:
af812c8775)

http://miniupnp.free.fr/files/changelog.php?file=minissdpd-1.6.0.tar.gz

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:55 +01:00
Fabrice Fontaine
a92f29dae7 package/minizip: bump to version 3.0.7
https://github.com/zlib-ng/minizip-ng/releases/tag/3.0.7

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:53 +01:00
Fabrice Fontaine
bd474c43e3 package/gawk: bump to version 5.2.0
https://git.savannah.gnu.org/cgit/gawk.git/tree/NEWS?h=gawk-5.2.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:52 +01:00
Fabrice Fontaine
9cee628345 package/sedutil: bump to version 1.20.0
https://github.com/Drive-Trust-Alliance/sedutil/compare/1.15.1...1.20.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:50 +01:00
James Hilliard
8a5178293f package/python-wsaccel: bump to version 0.6.4
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:48 +01:00
Fabrice Fontaine
32602849a8 package/pps-tools: bump to version 1.0.3
https://github.com/ago/pps-tools is redirecting to
https://github.com/redlab-i/pps-tools

e2b25049df...v1.0.3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:47 +01:00
James Hilliard
17f2af56cc package/python-maturin: bump to version 0.13.7
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:45 +01:00
Fabrice Fontaine
f020e03ad9 package/hackrf: bump to version 2022.09.1
- Update site
- Drop patch (already in version)

https://github.com/greatscottgadgets/hackrf/releases/tag/v2022.09.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:53:44 +01:00
Fabrice Fontaine
c999e540dd package/f2fs-tools: fix build with lz4 1.9.4
Fix the following build failure raised since bump of lz4 to version
1.9.4 in commit 1f54af8c4f:

compress.c: In function 'lz4_compress_init':
compress.c:36:42: error: 'LZ4_STREAMSIZE_U64' undeclared (first use in this function); did you mean 'LZ4_STREAMSIZE'?
   36 | #define LZ4_STREAMSIZE                  (LZ4_STREAMSIZE_U64 * sizeof(long long))
      |                                          ^~~~~~~~~~~~~~~~~~

Fixes:
 - http://autobuild.buildroot.org/results/ca8b6646322a4cb911fad5fb9cb38046743609bf

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:51:38 +01:00
Fabrice Fontaine
952fa08764 package/f2fs-tools: add lz4 and lzo optional dependencies
lz4 and lzo are optional dependencies (enabled by default) since bump to
version 1.14.0 in commit cf566658f2 and
https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs-tools.git/commit/?id=b585244e726c1024f7b842033689992a383808cc

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:51:34 +01:00
Tan En De
1ce9af6ccf package/libkcapi: support enabling lib-asym and lib-kpp
Add Kconfig options to allow enabling asymmetric cipher support
(--enable-lib-asym) and key protocol primitives support
(--enable-lib-kpp) in library.

Signed-off-by: Tan En De <ende.tan@linux.starfivetech.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:41:39 +01:00
Tan En De
4ed6d61c03 package/libkcapi: support building kcapi-dgst application
Just add a new Kconfig option in order to support building kcapi-dgst
application.

Signed-off-by: Tan En De <ende.tan@linux.starfivetech.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:41:39 +01:00
Tan En De
06a9dc3528 package/libkcapi: bump version to 1.4.0
Removed patch applied upstream:
455c4938f5

Signed-off-by: Tan En De <ende.tan@linux.starfivetech.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-30 11:41:38 +01:00
Fabrice Fontaine
8268346d75 package/pcsc-lite: bump to version 1.9.9
https://github.com/LudovicRousseau/PCSC/releases/tag/1.9.9

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:22:45 +02:00
Fabrice Fontaine
4a65c3d9cd package/pinentry: bump to version 1.2.1
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=pinentry.git;a=blob;f=NEWS;h=c080b34e57d01a6ccca9d2996d7096c42b1a3f84

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:20:35 +02:00
Fabrice Fontaine
376203a34e package/conntrack-tools: bump to version 1.4.7
https://netfilter.org/pub/conntrack-tools/changes-conntrack-tools-1.4.7.txt

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:18:54 +02:00
Fabrice Fontaine
8acac82278 package/atftp: bump to version 0.8.0
- No configure script in official tarball
- pcre has been replaced by pcre2 since
  5739ed9507
  fdf479c31b

https://github.com/madmartin/atftp/blob/v0.8.0/Changelog

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:18:37 +02:00
Brandon Maier
5f779a2071 package/bats-core: bump to version 1.8.2
https://github.com/bats-core/bats-core/releases/tag/v1.5.0
https://github.com/bats-core/bats-core/releases/tag/v1.6.0
https://github.com/bats-core/bats-core/releases/tag/v1.6.1
https://github.com/bats-core/bats-core/releases/tag/v1.7.0
https://github.com/bats-core/bats-core/releases/tag/v1.8.0
https://github.com/bats-core/bats-core/releases/tag/v1.8.1
https://github.com/bats-core/bats-core/releases/tag/v1.8.2

Signed-off-by: Brandon Maier <brandon.maier@collins.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:15:24 +02:00
Bernd Kuhls
098db8b4d5 DEVELOPERS: add Bernd Kuhls to package rsync
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:10:13 +02:00
Bernd Kuhls
96db6a8ac9 package/rsync: bump version to 3.2.7
Release notes: https://download.samba.org/pub/rsync/NEWS

Switched _SITE and package URL to https.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:09:43 +02:00
Bernd Kuhls
66c05c24ba package/php: security bump version to 8.1.12
Changelog: https://www.php.net/ChangeLog-8.php#8.1.12

Fixes:
- CVE-2022-31630: http://bugs.php.net/81739
- CVE-2022-37454: http://bugs.php.net/81738

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:09:22 +02:00
Fabrice Fontaine
6905bbc143 package/dahdi-tools: bump to version 3.2.0
https://github.com/asterisk/dahdi-tools/compare/v3.1.0...v3.2.0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:08:41 +02:00
Fabrice Fontaine
6cbfed0dbf package/dahdi-linux: bump to version 3.2.0
- Use official tarball
- This bump will fix the following build failures with kernel >= 5.16:

/home/autobuild/autobuild/instance-6/output-1/build/dahdi-linux-5c840cf43838e0690873e73409491c392333b3b8/drivers/dahdi/wct4xxp/base.c:45:10: fatal error: stdbool.h: No such file or directory
   45 | #include <stdbool.h>
      |          ^~~~~~~~~~~

[...]

../dahdi-linux-5c840cf43838e0690873e73409491c392333b3b8/drivers/dahdi/xpp/xbus-core.c: In function ‘xbus_read_proc_open’:
../dahdi-linux-5c840cf43838e0690873e73409491c392333b3b8/drivers/dahdi/xpp/xbus-core.c:1845:43: error: implicit declaration of function ‘PDE_DATA’; did you mean ‘NODE_DATA’? [-Werror=implicit-function-declaration]
 1845 |  return single_open(file, xbus_proc_show, PDE_DATA(inode));
      |                                           ^~~~~~~~
      |                                           NODE_DATA

5c840cf438...v3.2.0

Fixes:
 - http://autobuild.buildroot.org/results/3f23559f01a7783d82ad4e0b2d6792171e6f2b79
 - http://autobuild.buildroot.org/results/f3f226fb661a6b1998381f5fb7cb306771c2ecc0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:08:18 +02:00
Fabrice Fontaine
7c7b4f88bc package/pahole: bump to version 1.24
https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tree/NEWS?h=v1.24

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:07:49 +02:00
Fabrice Fontaine
21531fa31a package/zsh: security bump to version 5.9
Security and bug fix release with several feature additions.

https://zsh.sourceforge.io/releases.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:07:15 +02:00
Bernd Kuhls
3383613ad3 package/fetchmail: bump version to 6.4.34
Switched _SITE to https.

Removed patch which was applied upstream:
28c476ec45

Release notes:
https://sourceforge.net/p/fetchmail/mailman/message/37721221/
https://sourceforge.net/p/fetchmail/mailman/message/37699234/
https://sourceforge.net/p/fetchmail/mailman/message/37687601/
https://sourceforge.net/p/fetchmail/mailman/message/37681775/
https://sourceforge.net/p/fetchmail/mailman/message/37645690/

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:06:24 +02:00
Fabrice Fontaine
18b5d6205d package/wolfssl: security bump to version 5.5.2
In the case that the WOLFSSL_CALLBACKS macro is set when building
wolfSSL, there is a potential heap over read of 5 bytes when handling
TLS 1.3 client connections. This heap over read is limited to wolfSSL
builds explicitly setting the macro WOLFSSL_CALLBACKS, the feature does
not get turned on by any other build options. The macro
WOLFSSL_CALLBACKS is intended for debug use only, but if having it
enabled in production, users are recommended to disable
WOLFSSL_CALLBACKS. Users enabling WOLFSSL_CALLBACKS are recommended to
update their version of wolfSSL. CVE 2022-42905

https://github.com/wolfSSL/wolfssl/releases/tag/v5.5.2-stable

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:05:45 +02:00
Bernd Kuhls
8941d02bf1 package/samba4: security bump version to 4.15.11
Added patch from Gentoo to fix uClibc build:
access.c:(.text+0x1e8): undefined reference to `innetgr'

Release notes:
https://www.samba.org/samba/history/samba-4.15.8.html

https://www.samba.org/samba/history/samba-4.15.9.html
o CVE-2022-2031:  Samba AD users can bypass certain restrictions associated with
                  changing passwords.
                  https://www.samba.org/samba/security/CVE-2022-2031.html

o CVE-2022-32744: Samba AD users can forge password change requests for any user.
                  https://www.samba.org/samba/security/CVE-2022-32744.html

o CVE-2022-32745: Samba AD users can crash the server process with an LDAP add
                  or modify request.
                  https://www.samba.org/samba/security/CVE-2022-32745.html

o CVE-2022-32746: Samba AD users can induce a use-after-free in the server
                  process with an LDAP add or modify request.
                  https://www.samba.org/samba/security/CVE-2022-32746.html

o CVE-2022-32742: Server memory information leak via SMB1.
                  https://www.samba.org/samba/security/CVE-2022-32742.html

https://www.samba.org/samba/history/samba-4.15.10.html

https://www.samba.org/samba/history/samba-4.15.11.html
o CVE-2022-3437:  There is a limited write heap buffer overflow in the GSSAPI
                  unwrap_des() and unwrap_des3() routines of Heimdal (included
                  in Samba).
                  https://www.samba.org/samba/security/CVE-2022-3437.html

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-29 18:05:34 +02:00
James Hilliard
014ec19dfe package/python-aiojobs: bump to version 1.1.0
Add new python-async-timeout runtime dependency.

License hash changed due to removal of full license text:
db3e047550

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:58:33 +02:00
Fabrice Fontaine
a5faa07794 package/empty: bump to version 0.6.22b
- Drop EMPTY_STRIP_COMPONENTS (not needed anymore)
- Update hash of COPYRIGHT (update in year with
  c308663530)

10.08.2022 0.6.22b
--------------------------------------------------------------------------------
* Man pages directory parameterization
* Tarball clenup, repacking

https://sourceforge.net/p/empty/code/ci/master/tree/CHANGELOG

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:56:57 +02:00
Fabrice Fontaine
123fa2d801 package/libffi: bump to version 3.4.4
3.4.4 Oct-23-2022
    Important aarch64 fixes, including support for linux builds
      with Link Time Optimization (-flto).
    Fix x86 stdcall stack alignment.
    Fix x86 Windows msvc assembler compatibility.
    Fix moxie and or1k small structure args.

https://github.com/libffi/libffi/releases/tag/v3.4.4

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:56:03 +02:00
Fabrice Fontaine
a30e31a05e package/sratom: bump to version 0.6.14
- Update hash of COPYING (standard ISC licence used since
  145ed2fe97)
- meson must be used since
  75e647def0

https://github.com/lv2/sratom/blob/v0.6.14/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:55:15 +02:00
Fabrice Fontaine
5fe9ae335f package/lv2: bump to version 1.18.10
- Update hash of COPYING (standard ISC text used since
  0030682770)
- meson must be used since
  d4a970f696

https://github.com/lv2/lv2/blob/v1.18.10/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:55:04 +02:00
Fabrice Fontaine
1f54af8c4f package/lz4: bump to version 1.9.4
LZ4 v1.9.4 is a maintenance release, featuring a substantial amount
(~350 commits) of minor fixes and improvements, making it a recommended
upgrade. The stable portion of liblz4 API is unmodified, making this
release a drop-in replacement for existing features.

- Drop patch (already in version)
- Update hash of lib/LICENSE (update in year with
  87a80acbe7)

https://github.com/lz4/lz4/releases/tag/v1.9.4

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:53:52 +02:00
Fabrice Fontaine
ae29bb2880 package/lz4: fix LZ4_CPE_ID_VENDOR
cpe:2.3🅰️yann_collet:lz4, which was added by commit
63332c33aa, was never a valid CPE
identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ayann_collet%3Alz4

cpe:2.3🅰️lz4_project:lz4 is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alz4_project%3Alz4

While at it, also drop the note added by commit
45db4bb08e

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:53:13 +02:00
Francois Perrad
8ab39ac65e package/luajit: bump to 6c4826f12c4d33b8b978004bc681eb1eef2be977
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:52:36 +02:00
James Hilliard
488055eb58 package/python-pyzmq: bump to version 24.0.1
Migrate to setuptools infrastructure.

Add new host-python-packaging dependency.

Refresh zmq version override patch.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:49:48 +02:00
James Hilliard
32d8e23b97 package/python-numpy: bump to version 1.23.4
License hash changed due to date update:
4fc42f99b7

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:49:47 +02:00
James Hilliard
671af46426 package/python-greenlet: bump to version 1.1.3.post0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:49:46 +02:00
James Hilliard
aff25f871a package/python-bottle: bump to version 0.12.23
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:49:45 +02:00
Baruch Siach
f03ae60451 boot/arm-trusted-firmware: don't enable SSP by default
SSP support requires support in ATF platform code. Not all platforms
implement plat_get_stack_protector_canary() hook. The result is build
failure:

(.text.asm.update_stack_protector_canary+0x4): undefined reference to `plat_get_stack_protector_canary'

Commit cf176128ec ("boot/arm-trusted-firmware: add SSP option")
originally introduces this issue. But then commit ccac9a5bbb
("boot/arm-trusted-firmware: don't force ENABLE_STACK_PROTECTOR") hid
the problem by effectively disabling SSP for all platforms. So only
after commit 09acc7cbc9 ("boot/arm-trusted-firmware: fix SSP
support") the issue showed up.

Make SSP an opt-in for platform that actually provide the
plat_get_stack_protector_canary() hook.

Cc: Sergey Matyukevich <geomatsi@gmail.com>
Cc: Dick Olsson <hi@senzilla.io>
Tested-by: Heiko Thiery <heiko.thiery@gmail.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:46:15 +02:00
David Johnson
ce2e91bdc5 package/tzdata: install leap-seconds.list into results
add leap-seconds.list to installed files so it can be used by other packages

specifically, ntpd's ntp.conf can now include:
leapfile /usr/share/zoneinfo/leap-seconds.list

Signed-off-by: David Johnson <dave-git@centerclick.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:45:40 +02:00
Baruch Siach
400b63432e libcurl: security bump to version 7.86.0
Version 7.85.0 fixes CVE-2022-35252: When curl retrieves and parses
cookies from an HTTP(S) server, it accepts cookies using control codes
(byte values below 32). When cookies that contain such control codes are
later sent back to an HTTP(S) server, it might make the server return a
400 response. Effectively allowing a "sister site" to deny service to
siblings.

Drop upstream patches and autoreconf.

Cc: Matt Weber <matthew.weber@collins.com>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-28 08:45:07 +02:00
Fabrice Fontaine
9f69217158 package/libgee: bump to version 0.20.6
https://gitlab.gnome.org/GNOME/libgee/-/blob/0.20.6/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-10-27 12:49:30 +02:00