Go to file
Fabrice Fontaine b79d735139 package/strongswan: security bump to version 5.9.8
Fixed a vulnerability related to online certificate revocation checking
that was caused because the revocation plugin used potentially untrusted
OCSP URIs and CRL distribution points in certificates. This allowed a
remote attacker to initiate IKE_SAs and send crafted certificates that
contain URIs pointing to servers under their control, which could have
lead to a denial-of-service attack. This vulnerability has been
registered as CVE-2022-40617.

Drop patch (already in version)

https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-(cve-2022-40617).html
https://github.com/strongswan/strongswan/releases/tag/5.9.6
https://github.com/strongswan/strongswan/releases/tag/5.9.7
https://github.com/strongswan/strongswan/releases/tag/5.9.8

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2022-11-05 21:03:08 +01:00
arch arch/Config.in.arm: drop support for iwmmxt architecture variant 2022-09-25 14:06:08 +02:00
board configs/zynqmp_zcu10x_defconfig: use BR2_TARGET_UBOOT_CUSTOM_MAKEOPTS 2022-11-03 16:43:43 +01:00
boot boot/arm-trusted-firmware: don't enable SSP by default 2022-10-28 08:46:15 +02:00
configs configs/qemu_aarch64_ebbr: bump u-boot and linux versions 2022-11-03 22:27:16 +01:00
docs Update for 2022.11-rc1 2022-11-03 16:50:49 +01:00
fs fs/cpio: don't fail systems without /dev/null 2022-11-01 21:44:49 +01:00
linux package/linux: don't leak host timezone into linux version string 2022-11-05 15:09:33 +01:00
package package/strongswan: security bump to version 5.9.8 2022-11-05 21:03:08 +01:00
support support/testing/tests/package/test_gdb.py: drop version-specific tests 2022-11-03 23:08:10 +01:00
system package/systemd: add setting for systemd default.target 2022-05-02 22:58:44 +02:00
toolchain package/glibc: headers >= 5.4 needed on RISC-V 32-bit 2022-10-30 12:44:15 +01:00
utils utils/genrandconfig: handle a10disp 2022-10-31 13:20:03 +01:00
.clang-format
.defconfig
.flake8
.gitignore
.gitlab-ci.yml utils/checkpackagelib/lib_sysv: run shellcheck 2022-02-06 18:27:03 +01:00
.shellcheckrc utils/check-package: improve shellcheck reproducibility 2022-07-25 23:52:47 +02:00
CHANGES Update for 2022.11-rc1 2022-11-03 16:50:49 +01:00
Config.in Config.in: move toolchain menu before build options 2022-07-27 11:11:19 +02:00
Config.in.legacy package/libdcadec: remove package 2022-11-05 19:09:54 +01:00
COPYING COPYING: add exception about patch licensing 2016-02-26 19:50:13 +01:00
DEVELOPERS package/libdcadec: remove package 2022-11-05 19:09:54 +01:00
Makefile Update for 2022.11-rc1 2022-11-03 16:50:49 +01:00
Makefile.legacy
README

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on OFTC IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches