Go to file
Peter Korsgaard aaa9438b96 package/libcurl: security bump to version 8.5.0
Fixes the following security issues:

- CVE-2023-46218: cookie mixed case PSL bypass

  This flaw allows a malicious HTTP server to set "super cookies" in curl
  that are then passed back to more origins than what is otherwise allowed
  or possible.  This allows a site to set cookies that then would get sent
  to different and unrelated sites and domains.

  https://curl.se/docs/CVE-2023-46218.html

- CVE-2023-46219: HSTS long file name clears contents

  When saving HSTS data to an excessively long file name, curl could end up
  removing all contents, making subsequent requests using that file unaware
  of the HSTS status they should otherwise use.

  https://curl.se/docs/CVE-2023-46219.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-09 21:56:32 +01:00
arch arch/powerpc: drop ABI selection 2023-08-20 23:22:27 +02:00
board board/zynq/readme.txt: update doc for zc702 2023-12-09 18:35:21 +01:00
boot boot/arm-trusted-firmware: fix the RPATH of fiptool 2023-12-08 22:24:18 +01:00
configs configs/zynqmp_zcu104_defconfig: new defconfig 2023-12-09 18:33:57 +01:00
docs docs/website/news.html: add Talos security vulnerabilities info 2023-12-06 13:59:16 +01:00
fs fs/cpio: allow users to provide their own dracut modules 2023-02-06 22:46:35 +01:00
linux {linux, linux-headers}: bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.{1, 5, 6}.x series 2023-11-28 23:56:50 +01:00
package package/libcurl: security bump to version 8.5.0 2023-12-09 21:56:32 +01:00
support support/testing: TestDtbocfg: bump kernel to 5.10.202 2023-12-09 21:35:37 +01:00
system package/openrc: fix uclibc handling 2023-11-29 10:00:43 +01:00
toolchain toolchain/toolchain-external/toolchain-external-arm-aarch64-be: bump to version 13.2-rel1 2023-12-08 22:34:44 +01:00
utils utils/scanpypi: add flit package support 2023-11-25 12:47:10 +01:00
.checkpackageignore package/tesseract-ocr: bump to version 5.3.3 2023-12-09 15:54:28 +01:00
.clang-format
.defconfig
.editorconfig .editorconfig: add editor-agnostic configuration 2023-11-01 22:53:16 +01:00
.flake8
.gitignore
.gitlab-ci.yml support/misc/gitlab-ci.yml.in: retry a job only if it failed due to a runner issue 2023-08-27 10:09:37 +02:00
.shellcheckrc utils/check-package: improve shellcheck reproducibility 2022-07-25 23:52:47 +02:00
CHANGES Update for 2023.02.8 2023-12-04 15:03:23 +01:00
Config.in pkg-download: add option to enforce hash checking 2023-11-07 11:48:46 +01:00
Config.in.legacy package/python-pyxb: Drop package 2023-11-09 22:49:45 +01:00
COPYING
DEVELOPERS configs/zynqmp_zcu104_defconfig: new defconfig 2023-12-09 18:33:57 +01:00
Makefile Kickoff 2024.02 cycle 2023-12-04 15:25:25 +01:00
Makefile.legacy
README

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on OFTC IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches