- Nov 24, 2019
-
-
Peter Korsgaard authored
Signed-off-by:Peter Korsgaard <peter@korsgaard.com>
-
Fabrice Fontaine authored
Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
- Nov 23, 2019
-
-
Thomas Petazzoni authored
As spotted in http://autobuild.buildroot.net/results/a61/a612cb7a85927d8cfe55c95c34d2901e7694fab0//diffoscope-results.txt , faifa installs a library symlink with an incorrect target, which was detected by the reproducible build logic, but is in fact wrong in any case: -lrwxrwxrwx 0 0 0 0 2019-11-07 19:38:04.000000 ./usr/lib/libfaifa.so -> /home/naourr/work/instance-3/output-1/target/usr/lib/libfaifa.so.0 +lrwxrwxrwx 0 0 0 0 2019-11-07 19:38:04.000000 ./usr/lib/libfaifa.so -> /home/naourr/work/instance-3/output-2/target/usr/lib/libfaifa.so.0 In practice, this is not a problem at runtime, as the .so symlink is not used: the library soname is libfaifa.so.0. However, it still makes sense to fix. It is fixed by backporting an upstream commit. We considered bumping to a newer version, but the latest version requires a new dependency (libevent), so we preferred the backporting approach. Signed-off-by:
Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by:
-
Jérémy Rosen authored
Upstream systemd-stable has started tagging point releses. The commit we currently used has now been tagged as v243.3, and this brings us to v243.4. Signed-off-by:
Jérémy Rosen <jeremy.rosen@smile.fr> [yann.morin.1998@free.fr: - expand commit log to explain previous version ] Signed-off-by:
-
Titouan Christophe authored
Changes announced upstream: Upgrade urgency HIGH: many issues fixed, some may have an impact. Redis 5.0.7 fixes a number of bugs, none is very critical, however there are a few that may have an impact. It's a good idea to upgrade. There are fixes in the area of replication from modules commands and callbacks, AOF fsync (non critical issue), memory leaks (very rare and small), streams beahvior (non critical), and a potential crash in commands processing multiple keys at the same time that is there for years, and happens very rarely, but is not impossible to trigger. Signed-off-by:
Titouan Christophe <titouan.christophe@railnova.eu> Signed-off-by:
-
Peter Korsgaard authored
Fixes the following security vulnerabilities: AST-2019-006: SIP request can change address of a SIP peer. A SIP request can be sent to Asterisk that can change a SIP peer’s IP address. A REGISTER does not need to occur, and calls can be hijacked as a result. The only thing that needs to be known is the peer’s name; authentication details such as passwords do not need to be known. This vulnerability is only exploitable when the “nat” option is set to the default, or “auto_force_rport”. https://downloads.asterisk.org/pub/security/AST-2019-006.pdf AST-2019-007: AMI user could execute system commands. A remote authenticated Asterisk Manager Interface (AMI) user without “system” authorization could use a specially crafted “Originate” AMI request to execute arbitrary system commands. https://downloads.asterisk.org/pub/security/AST-2019-007.pdf AST-2019-008: Re-invite with T.38 and malformed SDP causes crash. If Asterisk receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a crash will occur. https://downloads.asterisk.org/pub/security/AST-2019-008.pdf Signed-off-by:
-
Adam Duskett authored
Signed-off-by:
Adam Duskett <Aduskett@gmail.com> Signed-off-by:
-
Adam Duskett authored
Signed-off-by:
-
Fabrice Fontaine authored
- Fix CVE-2019-3813: fix off-by-one error in group/slot boundary check - Add license hash Signed-off-by:
-
Fabrice Fontaine authored
- This bump is needed for spice 0.14.2 - Add license hash Signed-off-by:
-
Bernd Kuhls authored
Release notes of this bugfix release: https://www.php.net/ChangeLog-7.php#7.3.12 Signed-off-by:
Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by:
-
Adrian Perez de Castro authored
This is a minor release which includes fixes for CVE-2019-8812 and CVE-2019-8814. This release also fixes the build with WebDriver disabled and without X11, so "0001-GTK-ANGLE-s-eglplatform.h-is-build-broken-with-DENAB.patch" and "0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch" are not needed anymore (and therefore removed). There is also a performance improvement for a regression related to fallback font selection, and a couple of small fixes. The full release notes are available at: https://webkitgtk.org/2019/11/06/webkitgtk2.26.2-released.html The detailed security advisory can be found at: https://webkitgtk.org/security/WSA-2019-0006.html Signed-off-by:
Adrian Perez de Castro <aperez@igalia.com> Signed-off-by:
-
Yegor Yefremov authored
This update fixes both the below mentioned build error when handling undefined baud rates, and makes the patch for MIPS obsolete. No other changes will be introduced with this update. Fixes: http://autobuild.buildroot.net/results/ef77cbe220619050eb9d46c78ae79a94eea8aa8b Signed-off-by:
Yegor Yefremov <yegorslists@googlemail.com> Signed-off-by:
-
Fabrice Fontaine authored
Fixes: - http://autobuild.buildroot.org/results/587fb44ea2272bd134262716870f5ad36a18661d Signed-off-by:
-
Bernd Kuhls authored
Release notes of the bugfix release: https://www.postgresql.org/about/news/1994/ https://www.postgresql.org/docs/current/release-12-1.html Signed-off-by:
-
- Nov 22, 2019
-
-
On x86_64, we use the host compiler instead of the target compiler to build kvm-unit-tests, because it is built with -m32 and our target compiler doesn't support that. However, the compiler on Arch Linux is broken: it *always* builds with -fstack-protector, even when -ffreestanding is passed. However, when -fnostdlib is passed at link time (which is normally the case when building with -ffreestanding), it is not linked with the stack-protector library. This leads to a link time error: /usr/bin/ld: x86/realmode.o: in function `print_serial_u32': .../x86/realmode.c:104: undefined reference to `__stack_chk_fail' Since the entire package is built with -ffreestanding, it doesn't support stack-protector at all. Therefore, simply pass -fno-stack-protector explicitly on x86_64 to work around the bug in Arch Linux. Commit c0ffd16e tried to do this, but got the condition wrong: -fno-stack-protector was passed in all cases *except* for x86_64. This commit fixes that, by inverting the condition and moving the --cross-prefix part to the else branch. Fixes: http://autobuild.buildroot.net/results/ca9576721214ecdce5622f2b7ec4fd4fc3699ac0/ Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> Cc: Matthew Weber <matthew.weber@rockwellcollins.com> Reviewed-by:
Matthew Weber <matthew.weber@rockwellcollins.com> Tested-by:
-
Bernd Kuhls authored
Signed-off-by:
-
Bernd Kuhls authored
Release notes of this bugfix release: https://lists.freedesktop.org/archives/mesa-announce/2019-November/000559.html Signed-off-by:
-
- Nov 21, 2019
-
-
Jörg Krause authored
This version fixes a runtime issue which crashes gerbera: https://github.com/gerbera/gerbera/issues/522 The issue has been reported upstream: https://github.com/mrjimenez/pupnp/pull/122 The fix for this issue is the only "useful" commit between 1.8.5 and 1.8.6: $ git --no-pager log --format=oneline release-1.8.5..release-1.8.6 71a47673795e9228775959ea23a984ff6c4d0a43 (tag: release-1.8.6) Adjust the library numbers for release 436aae7b617a4cd7bc1e1411d6882780699eb2ee Put the 1.8.6 release on README.md 90069231d83d2f365b76e2b15d918dfb06209970 Update README.md 7d6158d2c88245f2da4354a8bd0bc359eb15fac6 Update Changelog and THANKS 463f1cc025b27af35b0b73a05ba379d0051bcedf Fix format string for ExtraHeaders 8516da470bf32fa1f5c6f59aac3508378d5a85be Homekeeping for the next release Signed-off-by:
Jörg Krause <joerg.krause@embedded.rocks> Signed-off-by:
-
- Nov 20, 2019
-
-
Matt Weber authored
When systemd support is enabled, systemd should be built before, otherwise the build fails with: checking for SYSTEMD... no configure: error: libsystemd support requested but found package/pkg-generic.mk:228: recipe for target Signed-off-by:
-
Petr Vorel authored
* add upstream commit hash * renumber patches Signed-off-by:
Petr Vorel <petr.vorel@gmail.com> Signed-off-by:
-
Petr Vorel authored
0009-nfsv4-acl-Remove-unneeded-malloc-sizeof-FILE.patch is fixing following reports (other 2 has not been reported due previous) Fixes: http://autobuild.buildroot.net/results/a38a5d8deaa365f73db427911df68dd10c6930a6 http://autobuild.buildroot.net/results/dfa173caea08876ab69dd959da146b75750cdd28 http://autobuild.buildroot.net/results/1e602f1574e9134a44d5d66838e7851b38e8069a http://autobuild.buildroot.net/results/f1b4b129ec94795b2144b4501b4301fb20892e71 Signed-off-by:
-
Bernd Kuhls authored
Release notes: https://lists.clamav.net/pipermail/clamav-announce/2019/000043.html Fixes CVE-2019-15961. Signed-off-by:
-
Bernd Kuhls authored
Release notes of this bugfix release: https://lists.freedesktop.org/archives/mesa-announce/2019-November/000557.html Signed-off-by:
-
- Nov 19, 2019
-
-
Fabrice Fontaine authored
By disabling tests, we'll remove the optional gdk-pixbuf dependency Fixes: - http://autobuild.buildroot.org/results/96c786f85d35f33508e9c71778043d16b87f72cd Signed-off-by:
-
- Nov 18, 2019
-
-
Fabrice Fontaine authored
Fixes: - http://autobuild.buildroot.org/results/57945f54ffbc5c8764b6891a4516c4907e56ab97 Signed-off-by:
-
Avi Shukron authored
qemu requires python in its configre script. Yet host-python was not listed as one of the package's dependencies. If no other package requested host-python, then configuring this package will fail since it won't find any executable named python in the host dir. In order to reproduce this issue you must not have python2 installed on your host machine. Signed-off-by:
Avi Shukron <avraham.shukron@gmail.com> Signed-off-by:
-
Bartosz Bilas authored
Signed-off-by:
Bartosz Bilas <b.bilas@grinn-global.com> Signed-off-by:
-
Fabrice Fontaine authored
Add a patch to filter -Wl,--no-undefined as -Wl,-z,undefs was only added in binutils 2.30, and therefore is not available in some older toolchains, causing build failures such as: /home/naourr/work/instance-1/output-1/host/opt/ext-toolchain/bin/../lib/gcc/aarch64_be-linux-gnu/7.3.1/../../../../aarch64_be-linux-gnu/bin/ld: warning: -z undefs ignored. Fixes: - http://autobuild.buildroot.org/results/06a6d865b6b7d8ebd793bde214f4a4c40e0962e1 Signed-off-by:
-
Fabrice Fontaine authored
domoticz embeds its own version of jsoncpp that can clash with upstream jsoncpp so retrieve upstream commit that fix this issue Build failures started after jsoncpp bumps from 1.8.4 to 1.9.1 Fixes: - http://autobuild.buildroot.org/results/a73406eb780a454369ea997654b6b4c6b3757a41 Signed-off-by:
-
Fabrice Fontaine authored
TARGET_LDFLAGS which contains -static is not passed so build fails on: /home/buildroot/autobuild/instance-1/output-1/host/bin/xtensa-buildroot-linux-uclibc-gcc -o lsof dfile.o dmnt.o dnode.o dproc.o dsock.o dstore.o arg.o main.o misc.o node.o print.o proc.o store.o usage.o util.o -L./lib -llsof -ltirpc /home/buildroot/autobuild/instance-1/output-1/host/lib/gcc/xtensa-buildroot-linux-uclibc/8.3.0/../../../../xtensa-buildroot-linux-uclibc/bin/ld: /home/buildroot/autobuild/instance-1/output-1/host/lib/gcc/xtensa-buildroot-linux-uclibc/8.3.0/libgcc.a(unwind-dw2-fde-dip.o): in function `_Unwind_Find_registered_FDE': /home/buildroot/autobuild/instance-1/output-1/build/host-gcc-final-8.3.0/build/xtensa-buildroot-linux-uclibc/libgcc/../../../libgcc/unwind-dw2-fde.c:1040: undefined reference to `dl_iterate_phdr' collect2: error: ld returned 1 exit status Pass TARGET_LDFLAGS thanks to LSOF_CFGL Fixes: - http://autobuild.buildroot.org/results/0c228e0d3ea1ff2d728ddc906e242d40ed973222 Signed-off-by:
-
Fabrice Fontaine authored
Fix build with libupnp18 1.8.5 through https://github.com/gerbera/gerbera/commit/1476d7a90673a870091044fcc0307f5bcaeb24be Fixes: - http://autobuild.buildroot.org/results/e77839fad16caa5798cacb36a5a48b3dbb822ea6 Signed-off-by:
-
Titouan Christophe authored
The release notes at https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES say: == Upgrade urgency CRITICAL: Only in case of exposed instances to untrusted users. This Redis release, 5.0.6, is a bugfix and enhancement release. The most important bugfix is a corruption related to the HyperLogLog. A malformed HyperLogLog string could cause an invalid access to the memory. At a first glance the vulnerability appears to be not exploitable but just a DoS. The way to trigger the issue is complex, we'll not provide any information about how to do that for the users safety. == Signed-off-by:
-
Michael Drake authored
Update the documentation for the output/host/ directory to mention that it contains the sysroot for the target toolchain, as well as the host tools required for running buildroot. Update the staging/ documentation to reflect that it is a link to the target toolchain sysroot in the host/ directory. Signed-off-by:
Michael Drake <michael.drake@codethink.co.uk> Signed-off-by:
-
- Nov 16, 2019
-
-
Peter Korsgaard authored
Signed-off-by: -
Petr Vorel authored
Backported 4 fixes from upstream (2 of them require calling autoreconf). Fixes: http://autobuild.buildroot.net/results/7a29e3b767e3d23dd64c130daa735ca6c062baf8 Signed-off-by:
-
- Nov 15, 2019
-
-
Carlos Santos authored
Commit 68b5b79b has set the getty port to the default console but left "ttyO0" in bootargs, in the U-Boot environment. Use "ttyS0", instead. Also set loadaddr to 0x82000000 and fdtaddr to 0x88000000, replacing the values that were valid for the ancient U-Boot and Linux pre-installed on old boards but cause boot hangs with the current versions. Signed-off-by:
Carlos Santos <unixmania@gmail.com> Signed-off-by:
-
Thomas Petazzoni authored
The jailhouse package was added in commit ee499072 by Carlo Caione, but no entry in the DEVELOPERS file was added. Let's fix this to ensure we have a registered maintainer for the Jailhouse package. Signed-off-by:
-
Adrian Perez de Castro authored
This is a minor release which includes fixes for CVE-2019-8812 and CVE-2019-8814. This release also fixes the build with WebDriver disabled, making patch "0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch" unneeded (and therefore removed). There is also a performance improvement for a regression related to fallback font selection, and a couple of small fixes. The full release notes are available at: https://wpewebkit.org/release/wpewebkit-2.26.2.html The detailed security advisory can be found at: https://wpewebkit.org/security/WSA-2019-0006.html Signed-off-by:
-
Bernd Kuhls authored
Upstream provides two configure.ac versions, the default one does not use libtool. For libtool-enabled builds the default configure.ac calls https://gitlab.isc.org/isc-projects/dhcp/blob/master/configure.ac#L873 https://gitlab.isc.org/isc-projects/dhcp/blob/master/config+lt which copies configure.ac+lt to configure.ac and starts autoreconf. On host systems lacking autoreconf this causes a build error: configure: WARNING: legacy configure is used but libtool is enabled. Trying to recover... /home/buildroot/autobuild/instance-2/output-1/build/dhcp-4.4.1/config+lt: 20: /home/buildroot/autobuild/instance-2/output-1/build/dhcp-4.4.1/config+lt: autoreconf: not found autoreconf failed Fixes: http://autobuild.buildroot.net/results/16f/16f800dd844572336c2fbba3d123604405382a84/ http://autobuild.buildroot.net/results/eac/eac1e7b25128476eccf40aece612e13a1e0637dc/ http://autobuild.buildroot.net/results/8fc/8fcfe7b40af3ae42549351c70466b4dd388820e3/ http://autobuild.buildroot.net/results/7ff/7ff82708b9dea09f1447f0ef94b9bb21fca73196/ http://autobuild.buildroot.net/results/1c5/1c5f401ce7eef13f5ca4603ca8d7c67da249d7c9/ Signed-off-by:
-
