Commit Graph

61458 Commits

Author SHA1 Message Date
James Hilliard
b844a3679a package/python-fonttools: bump to version 4.28.5
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:23:08 +01:00
James Hilliard
b8b56565c2 package/python-pillow: bump to verison 9.0.0
License hash change due to copyright year update:
0bb3f87dcc

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:23:06 +01:00
James Hilliard
81527c3165 package/python-msgpack: bump to version 1.0.3
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:23:03 +01:00
James Hilliard
67db399099 package/python-autobahn: bump to version 21.11.1
Drop patches that are now upstream.

Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
[yann.morin.1998@free.fr: don't duplicate _SETUP_TYPE]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:21:32 +01:00
James Hilliard
ea135ccb7a package/python-aiorwlock: bump to version 1.3.0
Signed-off-by: James Hilliard <james.hilliard1@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:20:53 +01:00
Fabrice Fontaine
0bd2ae3b4f package/python-itsdangerous: bump to version 2.0.1
- python 2 support has been dropped since version 2.0.0 and
  e085f3eedf
- Update hash of license file (license standardized:
  c880f85ccd)
- Update indentation in hash file (two spaces)

https://itsdangerous.palletsprojects.com/en/2.0.x/changes/#version-2-0-1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:20:51 +01:00
Fabrice Fontaine
4a5fd47c1e package/python-pathlib2: bump to version 2.3.6
- Update hash of LICENSE.rst (LF replaced by CRLF)
- Update indentation in hash file (two spaces)

https://github.com/jazzband/pathlib2/blob/2.3.6/CHANGELOG.rst

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:20:48 +01:00
Fabrice Fontaine
4211a933a3 package/python-pyftpdlib: bump to version 1.5.6
- Update hash of LICENSE file (license updated to make it recognizable
  by github:
  a3016e7d69)
- Update indentation in hash file (two spaces)

https://github.com/giampaolo/pyftpdlib/blob/release-1.5.6/HISTORY.rst

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:20:46 +01:00
Fabrice Fontaine
b603f2a1e8 package/python-pytz: bump to version 2021.3
- Update hash of LICENSE.txt (year updated)
- Update indentation in hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:20:43 +01:00
Uladzimir Bely
be89d78a0f package/python-mpd2: bump to version 3.0.5
Signed-off-by: Uladzimir Bely <wiselord1983@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 19:17:28 +01:00
Thomas Petazzoni
206ce35161 arch/Config.in.x86: indicate how the CPU variants are ordered
They are loosely ordered according to the ordering of the gcc
documentation. It is not entirely correct as the generic x86-64,
x86-64-v2, x86-64-v3 and x86-64-v4 are listed before i386 in the gcc
documentation, but this nevertheless gives a good explanation for the
overall ordering of the list.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:33 +01:00
Thomas Petazzoni
e7b9413056 arch/Config.in.x86: add sapphirerapids, alderlake, rocketlake
These were added in gcc 11.x.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:30 +01:00
Thomas Petazzoni
0b84dcf968 arch/Config.in.x86: add cooperlake CPU variant
It was added in gcc 10.x.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:28 +01:00
Thomas Petazzoni
ffcefb3a75 arch/Config.in.x86: add goldmont, goldmont-plus, tremont, cascadelake, tigerlake CPU variants
These were added in gcc 9.x. The goldmont, goldmont-plus and tremont
are for the low-power CPUs. While cascadelake and tigerlake are for
the high-end ones.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:26 +01:00
Thomas Petazzoni
86a70de48e arch/Config.in.x86: add cannonlake, icelake-client, icelake-server CPU variants
These were added in gcc 8.x.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:24 +01:00
Thomas Petazzoni
82879ada2b toolchain/toolchain-external/toolchain-external-bootlin: regenerate with AVX512 condition for x86-64-v4 toolchain
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:22 +01:00
Thomas Petazzoni
7ed58f94ee support/scripts/gen-bootlin-toolchains: add missing BR2_X86_CPU_HAS_AVX512 condition for x86-64-v4
The x86-64-v4 toolchain assumes availability of AVX512, as per the
definition of the x86-64-v4 "standard".

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:19 +01:00
Thomas Petazzoni
4fa073c65f arch/Config.in.x86: x86-64-v4 implies AVX512
Now that we have BR2_X86_CPU_HAS_AVX512, we can use it to fix the
x86-64-v4 definition, which implies AVX512 support according to
https://gitlab.com/x86-psABIs/x86-64-ABI/-/blob/master/x86-64-ABI/low-level-sys-info.tex

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:17 +01:00
Thomas Petazzoni
4c0088718e arch/Config.in.x86: add skylake CPU variants
Both skylake and skylake-avx512 were added in gcc 6.x. According to
https://en.wikipedia.org/wiki/Skylake_(microarchitecture) the early
Skylake processors indeed did not have AVX512 support, while the later
ones did, hence the separate gcc options.

Due to this being the first CPU we support with AVX512, this commit
adds BR2_X86_CPU_HAS_AVX512.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:14 +01:00
Thomas Petazzoni
3702977799 arch/Config.in.x86: add broadwell Intel CPU variant
It was added in gcc 4.9.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:12 +01:00
Thomas Petazzoni
1a21705e73 arch/Config.in.x86: westmere and silvermont were added in gcc 4.9
These were added in gcc commit
d3c11974032e21121a051d423a1d71097edf752f ("Use proper Intel processor
names for -march=/-mtune=") which was merged in gcc 4.9.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:10 +01:00
Thomas Petazzoni
653fa001f3 arch/Config.in.x86: add "newer" names for several Intel x86 CPU variants
In gcc commit d3c11974032e21121a051d423a1d71097edf752f ("Use proper
Intel processor names for -march=/-mtune="), which was merged in gcc
4.9, the following replacements were made:

 * corei7     -> nehalem
 * corei7-avx -> sandybridge
 * core-avx-i -> ivybridge
 * core-avx2  -> haswell
 * atom       -> bonnel
 * slm        -> silvermont

So this commit marks the Buildroot options BR2_x86_corei7,
BR2_x86_corei7_avx, BR2_x86_core_avx2 and BR2_x86_atom as deprecated,
and adds the four corresponding options with the newer names.

Note that the older options are still kept because the new option
names are only supported starting gcc 4.9, and we theoretically still
supports targets gcc as old as gcc 4.3.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:08 +01:00
Thomas Petazzoni
73d135a695 arch/Config.in.x86: drastically simplify the BR2_ARCH definition
The BR2_ARCH definition is like this:

 * i486 for the i486 platform
 * i586 for a small number of platforms
 * i686 for all other x86 platforms when used in 32-bit, but we
   enumerate their entire list
 * x86_64 for all x86 64-bit platforms

The list for i686 is long and needs to be extended everytime a new
platform is added, with no added value.

So this commit simplifies that by replacing this long list with just:

   default "i686"	  if BR2_i386

This works because Kconfig guarantees us that if an i386 platform
matches an earlier case (i486 or one of the i586 platforms), the i486
and i586 earlier in the list will match.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:06 +01:00
Thomas Petazzoni
7df632905f toolchain/toolchain-external/toolchain-external-bootlin: update with new x86-64 toolchains
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:41:02 +01:00
Thomas Petazzoni
93cb793181 support/scripts/gen-bootlin-toolchains: add support for new x86-64 toolchains
Following the merge of
d6ce2a1681 ("arch/Config.in.x86: add
option for -march=x86-64") and
eeace1cc13 ("arch/Config.in.x86: add support for
x86-64-v2, x86-64-v3, x86-64-v4"), bootlin.toolchains.com now provides
toolchains targetting the x86-64, x86-64-v2, x86-64-v3 and x86-64-v4
architecture variants.

This commits modifies gen-bootlin-toolchains to support these
toolchains. It should be noted that the description for the x86-64-v3
and x86-64-v4 toolchains are for now the same, as Buildroot doesn't
yet have the options to describe the extra features that x86-64-v4
expects to find on the hardware platform.

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:40:59 +01:00
Thomas Petazzoni
7910b5e72d toolchain/toolchain-external/toolchain-external-bootlin: re-update OpenRISC toolchains
The OpenRISC toolchains have been rebuilt once again, this time with
the _REENTRANT fixed merged in commit
98e39dc80e ("package/gcc: define
_REENTRANT for OpenRISC when -pthread is passed")

Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-25 08:40:57 +01:00
Thomas Petazzoni
9887615eda Revert "package/util-linux: bump version to 2.37.3 (fixes CVE-2021-3996, CVE-2021-3995)"
This reverts commit 12dcad48f6, as it
causes massive build breakage.

Fixes:

  http://autobuild.buildroot.net/results/c2edca241e754566add0fd6b3f049c7945723cfc/
  http://autobuild.buildroot.net/results/27d4aaef1fcffb51fa82b6ad6b0fe303a6d7be33/
2022-01-25 00:10:19 +01:00
Francois Perrad
4b9d6162a6 package/sqlite: bump to version 3.37.2
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:16:14 +01:00
Peter Seiderer
0872ac72b7 package/gst1-interpipe: bump version to 1.1.8
Changelog (since 1.1.7):

  8b70f08 Add definition of new event GstAppSinkCallbacks for interpipesink element
  ddaa9b5 Add conditional build according to GST_VERSION_MINOR
  730dea6 Bump project version
  8718b12 Add initialization for the GstAppSinkCallbacks struct
  f015ff7 Remove redundant initialization of new_event callback
  530da92 Update copyright year in README file
  e8ce826 Add explanatory comment on the memset of GstAppSinkCallbacks struct
  f0f3b8e Fix README copyright date to 2016-2022
  814982e Merge branch 'hotfix/add-new-event-callback'

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:15:40 +01:00
Peter Seiderer
12dcad48f6 package/util-linux: bump version to 2.37.3 (fixes CVE-2021-3996, CVE-2021-3995)
For details see [1].

[1] https://www.spinics.net/lists/util-linux-ng/msg17037.html

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:06:54 +01:00
Julien Olivain
506ad7f7e3 package/fluidsynth: bump to version 2.2.5
For change log since v2.2.4, see:
- https://github.com/FluidSynth/fluidsynth/releases/tag/v2.2.5

Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:06:36 +01:00
Fabrice Fontaine
0fb9b70238 package/lvm2: bump to version 2.03.14
Update indentation in hash file (two spaces)

https://github.com/lvmteam/lvm2/blob/v2_03_14/WHATS_NEW

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:06:08 +01:00
Fabrice Fontaine
c4f8b89687 package/xvisor: bump to version 0.3.1
- Drop first patch (already in version)
- Send second patch upstream

http://xhypervisor.org/index.php?page=news/20211220

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:05:54 +01:00
Fabrice Fontaine
b23ef21029 package/tinyxml: fix CVE-2021-42260
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in
tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by
a crafted XML message and leads to a denial of service.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:05:00 +01:00
Fabrice Fontaine
6e46157821 package/tinyxml: add TINYXML_CPE_ID_VENDOR
cpe:2.3🅰️tinyxml_project:tinyxml is a valid CPE identifier for this
package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Atinyxml_project%3Atinyxml

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:04:50 +01:00
Fabrice Fontaine
63245fcf9b package/vte: needs gcc >= 10
vte needs C++20 since
eec33cce0b
to avoid the following build failure raised since bump to version 0.66.2
in commit 53c0c7dd01:

../output-1/build/vte-0.66.2/meson.build:144:0: ERROR: Assert failed: option -std=gnu++20 not supported by gcc

Fixes:
 - http://autobuild.buildroot.org/results/c0d1adeffbf97805a0f669d01929a56ccc66a835

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:03:33 +01:00
Fabrice Fontaine
3edc9055c2 package/libev: bump to version 4.33
Update indentation in hash file (two spaces)

https://github.com/xorangekiller/libev-git/blob/rel-4_33/Changes

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 22:03:09 +01:00
Fabrice Fontaine
27d08083ed package/xml-security-c: bump to version 2.0.4
Version 2.0.4 of the Apache XML Security for C++ has been released,
correcting support for OpenSSL earlier than 1.1.

Version 2.0.3 of the Apache XML Security for C++ has been released,
adding support for OpenSSL 3.0.0.

Drop patch (already in version) and so autoreconf

https://santuario.apache.org/cindex.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-01-24 21:58:58 +01:00
Fabrice Fontaine
2c7ad667ec package/libpjsip: security bump to version 2.11.1
Security update. This version is recommended for all users to improve
the security of applications using PJSIP.

Fix CVE-2020-15260, CVE-2021-21375 and CVE-2021-32686

Update indentation in hash file (two spaces)

https://github.com/pjsip/pjproject/security/advisories/GHSA-8hcp-hm38-mfph
https://github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvp
https://github.com/pjsip/pjproject/security/advisories/GHSA-cv8x-p47p-99wr
https://github.com/pjsip/pjproject/releases/tag/2.11
https://github.com/pjsip/pjproject/releases/tag/2.11.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 20:49:34 +01:00
Fabrice Fontaine
038d7d685f package/lft: bump to version 3.91
lft 3.91 / WhoB 3.91
----------------------
- Fixed bugs.debian.org/cgi-bin/bugreport.cgi?bug=922430
- Updated date

lft 3.9 / WhoB 3.9
----------------------
- Fixed a bug that could indicate a target was closed when it was open
- Improved support for DLT_NULL interfaces on BSD-like operating systems
- Improved deprecated pcap device enumeration method
- Improved GraphViz output format appearance

Update indentation in hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 20:49:31 +01:00
Fabrice Fontaine
6a42e34722 package/nmon: bump to version 16n
Update indentation in hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 20:49:27 +01:00
Fabrice Fontaine
4b44e7d988 package/collectl: bump to version 4.3.2
4.3.2	 Oct 7, 2021
 - very minor bug. the last command in perfquery is not in a loop and
   prevents the collectl daemon from starting via the service.

Update indentation in hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 20:49:25 +01:00
Fabrice Fontaine
029a6dc3e3 package/neon: bump to version 0.32.2
- Switch site to get latest version
- README has been renamed to README.md
- Update indentation in hash file (two spaces)

https://github.com/notroj/neon/blob/0.32.2/NEWS

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 20:49:23 +01:00
Fabrice Fontaine
aa1a33027f package/xl2tp: bump to version 1.3.17
https://github.com/xelerance/xl2tpd/releases/tag/v1.3.17

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 20:49:21 +01:00
Fabrice Fontaine
d824fc1145 package/cereal: bump to version 1.3.1
- Drop patch (already in version)
- Update hash of LICENSE file (license updated to match BSD template:
  8291f44e05)
- Update indentation in hash file (two spaces)

https://github.com/USCiLab/cereal/releases/tag/v1.3.1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 10:11:06 +01:00
Fabrice Fontaine
653dc2e710 package/lighttpd: replace mod_compress by mod_deflate
mod_compress has been subsumed by mod_deflate since version 1.4.56 and
dab212b5f5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 09:32:19 +01:00
Fabrice Fontaine
694189ffa3 package/lighttpd: switch to pcre2
Switch to pcre2 which is supported since version 1.4.62 and
7512d82ca4
and enabled by default since version 1.4.64 and
750414d3bb

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-23 09:32:17 +01:00
Fabrice Fontaine
bbb3e46158 package/ksmbd-tools: bump to version 3.4.4
This bump will fix build failure with libkrb5 raised since the addition
of the package in commit 6be9913a7e:

management/spnego.c:25:10: fatal error: spnego_mech.h: No such file or directory
   25 | #include "spnego_mech.h"
      |          ^~~~~~~~~~~~~~~

https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.4.4

Fixes:
 - http://autobuild.buildroot.org/results/b4c3dba395327ab6ae28337efb962c99b2d5b922

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-22 23:35:13 +01:00
Fabrice Fontaine
d91f454117 package/luajit: add LUAJIT_CPE_ID_VENDOR
cpe:2.3🅰️luajit:luajit is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aluajit%3Aluajit

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-22 23:34:45 +01:00
Fabrice Fontaine
e043719c97 package/lighttpd: security bump to version 1.4.64
Fix CVE-2022-22707: In lighttpd 1.4.46 through 1.4.63, the
mod_extforward_Forwarded function of the mod_extforward plugin has a
stack-based buffer overflow (4 bytes representing -1), as demonstrated
by remote denial of service (daemon crash) in a non-default
configuration. The non-default configuration requires handling of the
Forwarded header in a somewhat unusual manner. Also, a 32-bit system is
much more likely to be affected than a 64-bit system.

gdbm, geoip and memcached options have been dropped with
86c2d30936

https://www.lighttpd.net/2022/1/19/1.4.64/

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-22 23:26:16 +01:00