Go to file
Fabrice Fontaine 88cb451446 package/libssh: security bump to version 0.9.6
Fix CVE-2021-3634: A flaw has been found in libssh in versions prior to
0.9.6. The SSH protocol keeps track of two shared secrets during the
lifetime of the session. One of them is called secret_hash and the other
session_id. Initially, both of them are the same, but after key
re-exchange, previous session_id is kept and used as an input to new
secret_hash. Historically, both of these buffers had shared length
variable, which worked as long as these buffers were same. But the key
re-exchange operation can also change the key exchange method, which can
be based on hash of different size, eventually creating "secret_hash" of
different size than the session_id has. This becomes an issue when the
session_id memory is zeroed or when it is used again during second key
re-exchange.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-09-13 22:36:57 +02:00
arch arch: add BR2_ARCH_NEEDS_GCC_AT_LEAST_11 2021-06-20 18:46:51 +02:00
board configs/stm32mp157c_odyssey: new defconfig 2021-09-11 18:15:55 +02:00
boot boot/uboot: fix check-package 2021-09-12 14:03:03 +02:00
configs configs/stm32mp157c_odyssey: new defconfig 2021-09-11 18:15:55 +02:00
docs docs/website/news.html: add 2021.08 announcement link 2021-09-04 13:45:29 +02:00
fs fs: new OCI filesystem type 2021-09-11 14:52:41 +02:00
linux {linux, linux-headers}: bump 4.{4, 9, 14, 19}.x / 5.{4, 10, 13, 14}.x series 2021-09-12 13:43:16 +02:00
package package/libssh: security bump to version 0.9.6 2021-09-13 22:36:57 +02:00
support support/testing/tests/fs: test OCI format 2021-09-11 14:52:41 +02:00
system system: support br2-external init systems 2020-10-14 22:48:42 +02:00
toolchain toolchain/toolchain-external: update Arm AArch64 BE toolchain 10.3-2021.07 2021-09-11 18:23:06 +02:00
utils utils/getdeveloperlib.py: force foward-slash for pattern matching 2021-09-11 22:33:42 +02:00
.defconfig arch: remove support for sh64 2016-09-08 22:15:15 +02:00
.flake8 Revert ".flake8: fix check for 80/132 columns" 2021-01-02 17:38:20 +01:00
.gitignore
.gitlab-ci.yml utils/test-pkg: add gitlab-ci support 2021-08-28 17:03:13 +02:00
CHANGES Update for 2021.08 2021-09-04 11:53:24 +02:00
Config.in Config.in: disable Fortify Source for microblaze 2021-08-23 23:08:05 +02:00
Config.in.legacy package/linux-headers: drop 5.11.x / 5.12.x headers 2021-09-12 09:41:38 +02:00
COPYING
DEVELOPERS configs/stm32mp157c_odyssey: new defconfig 2021-09-11 18:15:55 +02:00
Makefile Kickoff 2021.11 cycle 2021-09-04 13:46:21 +02:00
Makefile.legacy Remove BR2_DEPRECATED 2016-10-15 23:14:45 +02:00
README docs: move the IRC channel away from Freenode 2021-05-29 22:16:23 +02:00

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on OFTC IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches