Go to file
Peter Korsgaard 75057fe767 spice: security bump to version 0.12.8
Fixes the following security issues:

CVE-2016-0749: The smartcard interaction in SPICE allows remote attackers to
cause a denial of service (QEMU-KVM process crash) or possibly execute
arbitrary code via vectors related to connecting to a guest VM, which
triggers a heap-based buffer overflow.

CVE-2016-2150: SPICE allows local guest OS users to read from or write to
arbitrary host memory locations via crafted primary surface parameters, a
similar issue to CVE-2015-5261.

The pyparsing check has been dropped from configure, and the spice protocol
definition is again included, so the workarounds can be removed.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-06-22 23:25:30 +02:00
arch arch, linux, package: remove whitespaces 2017-03-29 23:30:37 +02:00
board configs/cubieboard2_defconfig: use U-Boot boot script generation logic 2017-06-22 13:06:51 +02:00
boot uboot: add support for generating U-Boot boot scripts 2017-06-22 13:02:47 +02:00
configs configs/cubieboard2_defconfig: use U-Boot boot script generation logic 2017-06-22 13:06:51 +02:00
docs docs/manual: drop mention of removed external toolchains 2017-06-20 22:12:54 +02:00
fs ext2: add help text for BR2_TARGET_ROOTFS_EXT2_BLOCKS 2017-05-04 17:15:13 +02:00
linux linux: bump default version to 4.11.6 2017-06-17 16:16:46 +02:00
package spice: security bump to version 0.12.8 2017-06-22 23:25:30 +02:00
support scanpypi: fix comment typo 2017-06-17 13:15:05 +02:00
system system: do not overwrite /bin/sh Busybox symlink 2017-03-29 23:28:58 +02:00
toolchain toolchain-external: update list of toolchains 2017-06-20 22:12:28 +02:00
.defconfig
.gitignore
.gitlab-ci.yml configs/olimex_a13_olinuxino: new defconfig 2017-06-21 23:06:11 +02:00
.gitlab-ci.yml.in gitlab-ci: add gcc-multilib to the docker image 2017-03-10 14:22:25 +01:00
CHANGES Update for 2017.02.3 2017-06-02 15:15:07 +02:00
Config.in
Config.in.legacy spice: security bump to version 0.12.6 2017-06-22 23:25:24 +02:00
COPYING
DEVELOPERS configs/olimex_a13_olinuxino: new defconfig 2017-06-21 23:06:11 +02:00
Makefile printvars: remove "Nothing to be done for 'printvars'." 2017-06-15 11:54:31 +02:00
Makefile.legacy
README

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on Freenode IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches