Go to file
Peter Korsgaard 14cc349d26 package/python-bottle: security bump to version 0.12.19
Fixes the following security issue:

CVE-2020-28473: The package bottle from 0 and before 0.12.19 are vulnerable
to Web Cache Poisoning by using a vector called parameter cloaking.  When
the attacker can separate query parameters using a semicolon (;), they can
cause a difference in the interpretation of the request between the proxy
(running with default configuration) and the server.  This can result in
malicious requests being cached as completely safe ones, as the proxy would
usually not see the semicolon as a separator, and therefore would not
include it in a cache key of an unkeyed parameter.

In addition, bottle 0.12.18 fixed a compatibility issue with python 3.8+:

https://github.com/bottlepy/bottle/issues/1181

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-02-04 18:15:16 +01:00
arch ARC: Add support for generic HS48 processor 2021-01-16 09:58:26 +01:00
board configs/nexbox_a95x_defconfig: bump to kernel 5.10.12 2021-02-04 18:15:09 +01:00
boot boot/at91bootstrap3: add CPE variables 2021-01-23 21:34:38 +01:00
configs configs/nexbox_a95x_defconfig: bump to kernel 5.10.12 2021-02-04 18:15:09 +01:00
docs Replace LIBFOO_CPE_ID_VERSION_MINOR by LIBFOO_CPE_ID_UPDATE 2021-01-31 23:21:38 +01:00
fs fs/cpio: add zstd as compression option 2021-01-16 22:45:34 +01:00
linux {linux, linux-headers}: bump 4.19.x / 5.{4, 10}.x series 2021-01-30 11:31:09 +01:00
package package/python-bottle: security bump to version 0.12.19 2021-02-04 18:15:16 +01:00
support support/config-fragments/autobuild: update Buildroot toolchains to 2020.11.2 2021-02-03 22:47:02 +01:00
system system: support br2-external init systems 2020-10-14 22:48:42 +02:00
toolchain toolchain/toolchain-external: update Arm AArch64 BE toolchain 10.2-2020.11 2021-02-03 22:52:57 +01:00
utils package/perl: bump to version 5.32.1 2021-01-25 22:29:32 +01:00
.defconfig
.flake8 Revert ".flake8: fix check for 80/132 columns" 2021-01-02 17:38:20 +01:00
.gitignore
.gitlab-ci.yml
CHANGES Update for 2020.02.10 2021-01-31 22:48:51 +01:00
Config.in
Config.in.legacy Config.in.legacy: remove redundant empty line 2021-02-02 20:42:57 +01:00
COPYING
DEVELOPERS DEVELOPERS: add Gilles Talis for opusfile 2021-01-31 11:27:49 +01:00
Makefile Revert ".flake8: fix check for 80/132 columns" 2021-01-02 17:38:20 +01:00
Makefile.legacy
README

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on Freenode IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches