Commit Graph

32053 Commits

Author SHA1 Message Date
Gustavo Zacarias
063338c8cb guile: security bump to version 2.0.13
Fixes:
CVE-2016-8606 - REPL server now protects against HTTP inter-protocol
attacks.
CVE-2016-8605 - 'mkdir' procedure no longer calls umask(2).

Remove upstream patch.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 12:35:27 +02:00
Peter Korsgaard
521aaf5554 imagemagick: bump version to 7.0.3-4
7.0.3-3 is no longer available upstream and has instead been replaced by -4,
so use that instead.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 10:52:37 +02:00
Yegor Yefremov
e54540ec71 python-pytablewriter: add missing python-xlwt dependency
Since version 0.6.0 pytablewriter requires xlwt package too.

Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:07:13 +02:00
Yegor Yefremov
0dcdf20683 mxml: bump to version 2.10
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:06:42 +02:00
Matt Kraai
0b0434437a system: fix typo
Signed-off-by: Matt Kraai <kraai@ftbfs.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:06:11 +02:00
Gustavo Zacarias
881b7bd31e gnutls: bump to version 3.4.16
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:05:51 +02:00
Gustavo Zacarias
e2dbdb8a32 dhcpcd: bump to version 6.11.5
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:05:38 +02:00
Gustavo Zacarias
618fa6da21 imagemagick: security bump to version 7.0.3-3
Fixes:
memory allocate failure in AcquireQuantumPixels (quantum.c)
heap-based buffer overflow in IsPixelMonochrome (pixel-accessor.h)

No CVEs assigned yet.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:05:13 +02:00
Gustavo Zacarias
420bfabf47 dbus: security bump to version 1.10.12
Fixes:
Format string vulnerability processing ActivationFailure messages

See:
https://bugs.freedesktop.org/show_bug.cgi?id=98157

CVE not assigned yet.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:04:45 +02:00
Gustavo Zacarias
3ccdc270ee libnss: bump to version 3.27.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:04:33 +02:00
Gustavo Zacarias
1cf00eb00c libnspr: bump to version 4.13
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:04:13 +02:00
Jörg Krause
9f03a7aeec package/hostapd: bump to version 2.6
Remove all patches as they are applied to or were fetched from upstream.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:03:37 +02:00
Jörg Krause
e8d04791ff package/jsoncpp: bump to version 1.7.7
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:03:15 +02:00
Vicente Olivert Riera
fda6f9f7fb mutt: bump version to 1.7.1
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:02:50 +02:00
Vicente Olivert Riera
091a2e9ef6 dhcp: bump version to 4.3.5
- 0001-dhcp-cross-compile.patch is now upstream:
  https://source.isc.org/cgi-bin/gitweb.cgi?p=dhcp.git;a=commit;h=e2f36ff16f7de5fb6e028354a2cc04a181e887b4

- 0003-bind-host-cc.patch is now upstream:
  https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commit;h=118394ef2ec7cef253c55359a3d70d202ddc2fa0

- --with-randomdev configure option can now be used normally.

Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:02:27 +02:00
Vicente Olivert Riera
917bf769db git: bump version to 2.10.1
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 08:01:55 +02:00
Romain Naour
cf53e7d1f9 package/enlightenment: bump to 0.21.3
Signed-off-by: Romain Naour <romain.naour@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:48:01 +02:00
Gustavo Zacarias
0debadb4f6 libsigc: bump gcc version requirement to 4.8
It now uses C++11 features that aren't available in 4.7. Fixes:
http://autobuild.buildroot.net/results/405/40563404e2612590a6ad19cbb39df14074fe160e/

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:46:21 +02:00
Gustavo Zacarias
41850b2897 libgpgme: bump to version 1.7.0
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:44:59 +02:00
Gustavo Zacarias
dbf7f6d3de btrfs-progs: bump to version 4.8.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:44:35 +02:00
Gustavo Zacarias
4db9bc1541 unrar: bump to version 5.4.5
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:41:56 +02:00
Gustavo Zacarias
5454e25a69 postgresql: security bump to version 9.5.4
Fixes:
CVE-2016-5423 - CASE/WHEN with inlining can cause untrusted pointer
dereference (bsc#993454).
CVE-2016-5424 - Fix client programs' handling of special characters in
database and role names (bsc#993453).

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:41:19 +02:00
Gustavo Zacarias
2d199dcff0 c-ares: security bump to version 1.12.0
Fixes:
CVE-2016-5180 - ares_create_query single byte out of buffer write

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:39:46 +02:00
Jerzy Grzegorek
3b1fe96904 package/tinydtls: indentation cleanup
Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:39:28 +02:00
Jerzy Grzegorek
f32c2d96a4 package/iozone: indentation cleanup
Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:38:55 +02:00
Jerzy Grzegorek
1bd7c73a43 package/vde2: indentation cleanup
Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:38:49 +02:00
Jerzy Grzegorek
fde62c31a3 package/systemd-bootchart: indentation cleanup
Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-13 07:38:24 +02:00
Jörg Krause
05eef0d796 package/shairport-sync: bump to version 2.8.5
Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-12 22:29:23 +02:00
Bernd Kuhls
fff5039b3a package/freeswitch: bump version to 1.6.12
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-12 22:29:16 +02:00
Gustavo Zacarias
d3b22a64fb libgee: bump to version 0.18.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-12 22:28:22 +02:00
Gustavo Zacarias
36b52da5a2 linux-headers: bump 3.18.x and 4.1.x series
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2016-10-12 22:27:38 +02:00
Jörg Krause
cad565d424 package/wpa_supplicant: enable interface matching option
The new wpa_supplicant command line argument -M can be used to describe
matching rules with a wildcard interface name (e.g., "wlan*").

This is very useful for systems without udev.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-12 13:59:16 +02:00
Jörg Krause
6c5d0032fd package/wpa_supplicant: bump to version 2.6
Remove all patches as they are applied to or were fetched from upstream.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-12 13:59:15 +02:00
Jörg Krause
d3e0249711 package/upmpdcli: bump to version 1.2.8
Remove patches applied upstream. As we are not touching configure.ac or
Makefile.am anymore there is no need for AUTORECONF.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-12 13:57:53 +02:00
Jörg Krause
5abf7b5f40 package/libupnpp: bump to version 0.15.1
Remove patches applied upstream. No need to set AUTORECONF anymore.

Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-12 13:57:52 +02:00
Gustavo Zacarias
59fe141496 gvfs: bump to version 1.30.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-12 13:56:00 +02:00
Gustavo Zacarias
2ef67797e1 vala: bump to version 0.34.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-12 13:55:58 +02:00
Gustavo Zacarias
52d1fe236d libglib2: bump to version 2.50.1
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-12 13:55:57 +02:00
Gustavo Zacarias
0b193980f3 xterm: bump to version 327
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 12:28:52 +02:00
Gustavo Zacarias
d99a717d95 shared-mime-info: bump to version 1.7
Switch URLs to avoid 301s.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 12:23:48 +02:00
Gustavo Zacarias
4ed51b3982 busybox: bump to version 1.25.1
Drop upstream patches.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 12:17:27 +02:00
Gustavo Zacarias
053e21def2 webkitgtk: add upstream patch for failed gcc6 builds
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
[Thomas: add upstream patch description in the patch.]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 12:14:36 +02:00
Bernd Kuhls
92310c993f DEVELOPERS: add myself for mwscrape-related python packages
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 11:27:20 +02:00
Gustavo Zacarias
c6bb41c4ed start-stop-daemon: bump to version 1.8.10
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 11:23:00 +02:00
Gustavo Zacarias
f962221f0e ifupdown: bump to version 0.8.16
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 11:22:58 +02:00
Gustavo Zacarias
f774209210 debianutils: bump to version 4.8
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 11:22:56 +02:00
Gustavo Zacarias
d74e5975da util-linux: fix crc32 function collision
When linking both zlib and libblkid statically in the same target a
collision occurs. Fix this by prefixing publicly-visible crc32 library
functions. Fixes:

http://autobuild.buildroot.net/results/25e/25efb79dd6ff1d93b5775baeccda23194d68c711/

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 11:22:00 +02:00
Gustavo Zacarias
bec4e518be Revert "Revert "libglib2: add host-util-linux for host variant""
This reverts commit 2f556ab99f.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 11:21:59 +02:00
Gustavo Zacarias
6bce311efc Revert "Revert "libglib2: bump to version 2.50.0""
This reverts commit 40da5b434d.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-11 11:21:58 +02:00
Bernd Kuhls
24a688857a package/python-mwscrape2slob: new package
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-10-09 23:09:15 +02:00