- Sep 04, 2021
-
-
Fabrice Fontaine authored
Fix the following build failures with gcc 11: /home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/arm-buildroot-linux-gnueabihf/11.1.0/../../../../arm-buildroot-linux-gnueabihf/bin/ld: /home/buildroot/autobuild/instance-3/output-1/build/xvisor-0.3.0/build/drivers/drivers.o: in function `psmouse_extensions': /home/buildroot/autobuild/instance-3/output-1/build/xvisor-0.3.0/drivers/input/mouse/psmouse-base.c:783: undefined reference to `lifebook_detect' /home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/arm-buildroot-linux-gnueabihf/11.1.0/../../../../arm-buildroot-linux-gnueabihf/bin/ld: /home/buildroot/autobuild/instance-3/output-1/build/xvisor-0.3.0/drivers/input/mouse/psmouse-base.c:783: undefined reference to `alps_detect' /home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/arm-buildroot-linux-gnueabihf/11.1.0/../../../../arm-buildroot-linux-gnueabihf/bin/ld: /home/buildroot/autobuild/instance-3/output-1/build/xvisor-0.3.0/drivers/input/mouse/psmouse-base.c:783: undefined reference to `ps2pp_init' /home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/arm-buildroot-linux-gnueabihf/11.1.0/../../../../arm-buildroot-linux-gnueabihf/bin/ld: /home/buildroot/autobuild/instance-3/output-1/build/xvisor-0.3.0/drivers/input/mouse/psmouse-base.c:783: undefined reference to `trackpoint_detect' /home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/arm-buildroot-linux-gnueabihf/11.1.0/../../../../arm-buildroot-linux-gnueabihf/bin/ld: /home/buildroot/autobuild/instance-3/output-1/build/xvisor-0.3.0/drivers/input/mouse/psmouse-base.c:783: undefined reference to `fsp_detect' Fixes: - http://autobuild.buildroot.org/results/69062b9c80567d135edd48890165e69881cf7295 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
Fabrice Fontaine authored
Build with python 2 is broken since bump to version 0.22.0 in commit 0adb141d: error: File "/usr/lib/python2.7/site-packages/pyudev/_ctypeslib/utils.py", line 54 lib = cdll.LoadLibrary(f'lib{name}.so') ^ SyntaxError: invalid syntax Fixes: - http://autobuild.buildroot.org/results/8b35ca6910dfd881953968f8d88ac842d57c9262 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
- Sep 03, 2021
-
-
Fabrice Fontaine authored
Fix the following uclibc build failure raised since at least bump to version 0.11.0 in commit 0bc9c896: In file included from ../include/wlr/types/wlr_data_device.h:13, from ../types/data_device/wlr_drag.c:7: ../include/wlr/types/wlr_seat.h:221:18: error: field 'last_event' has incomplete type 221 | struct timespec last_event; | ^~~~~~~~~~ Fixes: - http://autobuild.buildroot.org/results/3501ceb4290638b2f6d70aaa4d8ce74feec3a525 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com>
-
Fabrice Fontaine authored
Fix the following build failure on riscv32: In file included from thread/qmutex_linux.cpp:45, from thread/qmutex.cpp:804: thread/qfutex_p.h: In function 'int QtLinuxFutex::_q_futex(int*, int, int, quintptr, int*, int)': thread/qfutex_p.h:116:30: error: '__NR_futex' was not declared in this scope; did you mean '_q_futex'? 116 | int result = syscall(__NR_futex, addr, op | FUTEX_PRIVATE_FLAG, val, val2, addr2, val3); | ^~~~~~~~~~ | _q_futex Fixes: - http://autobuild.buildroot.org/results/ffedfc000029072d5d724e98ab4551fe973658ce Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com>
-
Fabrice Fontaine authored
Fix the following build failure raised since bump of libglib2 to version 2.68.1 in commit c72524fb: ../gstreamer/gstreamermm/register.h: In function 'GType Gst::register_mm_type(const gchar*)': /home/buildroot/autobuild/run/instance-2/output-1/host/bin/../arm-buildroot-linux-gnueabihf/sysroot/usr/include/glib-2.0/glib/gatomic.h:117:19: error: argument 2 of '__atomic_load' must not be a pointer to a 'volatile' type 117 | __atomic_load (gapg_temp_atomic, &gapg_temp_newval, __ATOMIC_SEQ_CST); \ | ~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Fixes: - http://autobuild.buildroot.org/results/1c75cdcc183642fd4c15d56825848b83f2ad11a5 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com>
-
Baruch Siach authored
The configure script fails to detect libpcap in static build because it does not take into account the libnl dependency on link. As a result the configure script silently disables mausezahn build even when BR2_PACKAGE_NETSNIFF_NG_MAUSEZAHN is enabled. Add upstream patch to use pkg-config for libpcap link flags. Cc: Joris Lijssens <joris.lijssens@gmail.com> Signed-off-by:
Baruch Siach <baruch@tkos.co.il> Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
Peter Korsgaard authored
Fixes the following security issues: - bpo-42278: Replaced usage of tempfile.mktemp() with TemporaryDirectory to avoid a potential race condition. - bpo-41180: Add auditing events to the marshal module, and stop raising code.__init__ events for every unmarshalled code object. Directly instantiated code objects will continue to raise an event, and audit event handlers should inspect or collect the raw marshal data. This reduces a significant performance overhead when loading from .pyc files. - bpo-44394: Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 “Billion Laughs” vulnerability. This copy is most used on Windows and macOS. - bpo-43124: Made the internal putcmd function in smtplib sanitize input for presence of \r and \n characters to avoid (unlikely) command injection. https://www.python.org/downloads/release/python-397/ Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
Fabrice Fontaine authored
Fix the following build failure with fortran raised since bump to version 4.0.0 in commit 366e7f1e and https://github.com/open-mpi/ompi/commit/99730f798b7aef4c87d282aa24b98916fea45bb6: checking size of Fortran type(test_mpi_handle)... (cached) 4 checking alignment of Fortran type(test_mpi_handle)... configure: error: Can not determine alignment of type(test_mpi_handle) when cross-compiling Fixes: - http://autobuild.buildroot.org/results/86ffde2f67ffc0bfaeebe72fe742a5c241bc580b Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
- Sep 02, 2021
-
-
Nevo Hed authored
Though several cross-compilation patches exist in buildroot's nginx package dir they do not seem to address endianness. The test program generated by the configure script compiles but fails to run (as it is built for another architecture) but the script does not distinguish between the failure to run the program and an indication of certain endianness. As such the fallback of big-endian is used. This setting then causes http2 headers (anything not in the static dictionary) to come out as undecipherable trash on 64bit targets (see ngx_http_v2_huff_encode_buf()). This commit includes a patch to the configure script to allow a `--force-endianness=big|little` flag as well as setting that flag in buildroot's package makefile. Signed-off-by:
Nevo Hed <nhed+buildroot@starry.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
- Sep 01, 2021
-
-
Peter Korsgaard authored
Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
- Aug 31, 2021
-
-
Fabrice Fontaine authored
Find libxcryt through pkg-config to avoid the following build failure: /home/buildroot/autobuild/run/instance-3/output-1/host/opt/ext-toolchain/bin/../lib/gcc/riscv64-buildroot-linux-musl/10.2.0/../../../../riscv64-buildroot-linux-musl/bin/ld: .libs/passverify.o: in function `.L30': passverify.c:(.text+0x368): undefined reference to `crypt_checksalt' Fixes: - http://autobuild.buildroot.org/results/20b14e222b35c2d1269960075832b784ba81aa1a Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
Bernd Kuhls authored
Release notes: https://sourceforge.net/p/fetchmail/mailman/message/37333073/ "It contains the security fix for CVE-2021-36386 of 6.4.20, and fixes a regression/a bug that causes log message truncation/run-together prominently visible with --logfile that was introduced into 6.4.20." Updated note for CVE-2021-36386: https://sourceforge.net/p/fetchmail/mailman/message/37333078/ Signed-off-by:
Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
Bernd Kuhls authored
Quoting https://www.php.net/ "This is a security fix release." Changelog: https://www.php.net/ChangeLog-8.php#8.0.10 CVE-ID were not mentioned in any of the fixed bugs. Signed-off-by:
Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
Bernd Kuhls authored
Release notes of this bugfix release: https://www.samba.org/samba/history/samba-4.14.7.html Signed-off-by:
Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
-
- Aug 29, 2021
-
-
Fabrice Fontaine authored
cpe:2.3:a:c-ares_project:c-ares is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ac-ares_project%3Ac-ares Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
Fabrice Fontaine authored
Fix the following build failure with nodejs raised since bump to version 12.22.5 in commit 7038b029: ../src/cares_wrap.cc:42:11: fatal error: ares_nameser.h: No such file or directory 42 | # include <ares_nameser.h> | ^~~~~~~~~~~~~~~~ Fixes: - http://autobuild.buildroot.org/results/a0f867d5e765fc1aa052de5e53ed350b3b20743f Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
Fabrice Fontaine authored
- NodeJS passes NULL for addr and 0 for addrlen to ares_parse_ptr_reply() on systems where malloc(0) returns NULL. This would cause a crash. - If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause a crash - Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response - Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing follow-up - Perform validation on hostnames to prevent possible XSS due to applications not performing valiation themselves https://c-ares.haxx.se/changelog.html#1_17_2 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
- Aug 28, 2021
-
-
Yann E. MORIN authored
Since commit 39d334fa (package/pkg-qmake: add <pkg>_SYNC_QT_HEADERS support), the qmake-package infra recognises said variable but the manual has the wrong variable name, which is missing the "_QT" part. We fix that by amending the manual to document the proper variable name. Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
Fabrice Fontaine authored
Fix build of xen with 64 bites time_t: /tmp/instance-0/output-1/build/xen-4.14.2/tools/qemu-xen/hw/input/virtio-input-host.c: In function 'virtio_input_host_handle_status': /tmp/instance-0/output-1/build/xen-4.14.2/tools/qemu-xen/hw/input/virtio-input-host.c:198:28: error: 'struct input_event' has no member named 'time' 198 | if (gettimeofday(&evdev.time, NULL)) { | ^ Fixes: - http://autobuild.buildroot.org/results/136ce42f44bf48d3db4eda7b1548bf7ac1b97d51 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Fabrice Fontaine authored
Commit c4e1a075 forgot to add --enable-nls to patch resulting in the following build failure: Unknown option "--enable-nls". Fixes: - http://autobuild.buildroot.org/results/6ab2555b419355f01310f230fe612f2a3699bbfd Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Romain Naour authored
This version bump is needed to pass the ATF test with hardening option enabled (-fstack-protector-strong) With the version v2.2, ATF fail due to undefined references: ./build/juno/release/bl2u/arm_tzc400.o: In function `arm_tzc400_setup': arm_tzc400.c:(.text.arm_tzc400_setup+0x10): undefined reference to `__stack_chk_guard' arm_tzc400.c:(.text.arm_tzc400_setup+0x18): undefined reference to `__stack_chk_guard' arm_tzc400.c:(.text.arm_tzc400_setup+0xb8): undefined reference to `__stack_chk_guard' arm_tzc400.c:(.text.arm_tzc400_setup+0xcc): undefined reference to `__stack_chk_fail' Since commit ccac9a5b, Buildroot no longer forces ENABLE_STACK_PROTECTOR. However, we rely on the ATF build system to handle it correctly, and this wasn't the case in v2.2. Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/1524842591 Signed-off-by:
Romain Naour <romain.naour@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Conrad Ratschan authored
When BR2_REPRODUCIBLE is set and host-coreutils needs to be built, the fakedate script installed to 'host/bin/date' will be overwritten by host-coreutils. Besides, we do not need our host-coreutils for 'date' at all; we really rely on the host system to provide it. Unconditionally disable installing the 'date' binary in host-coreutils. Note that we explicitly request only ln and realpath to be installed, but the coreutils buildsystem does not strictly obey to that, as was already noticed in 885e6fdb (package/coreutils: introduce a host variant), which added that comment above HOST_COREUTILS_CONF_OPTS: # Explicitly install ln and realpath, which we *are* insterested in. # A lot of other programs still get installed, however, but disabling # them does not gain much at build time, and is a loooong list that is # difficult to maintain... So, we also update that comment to explain why we still anyway disable installation of 'date'. Signed-off-by:
Conrad Ratschan <conrad.ratschan@collins.com> [yann.morin.1998@free.fr: - unconditionally disable installing date - extend comment and commit log to explain why we need --enable-no-install-program=date despite the existing --enable-install-program=ln,realpath ] Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
- Aug 27, 2021
-
-
Fabrice Fontaine authored
Commit 42a3fee3 forgot to add comment on headers 3.17+ Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
Baruch Siach authored
Since version 2.1.3 ubihealthd can be enabled without of ubifs-utils. This also fixes usability of enabling BR2_PACKAGE_MTD_UBIHEALTHD. BR2_PACKAGE_MTD_UBIFS_UTILS is a blind option. The only way to enable it is to enable BR2_PACKAGE_MTD_MKFSUBIFS that selects it. ubihealthd dependency on BR2_PACKAGE_MTD_UBIFS_UTILS makes enabling it unintuitive. Cc: Markus Mayer <mmayer@broadcom.com> Cc: Matt Weber <matthew.weber@collins.com> Signed-off-by:
Baruch Siach <baruch@tkos.co.il> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
Fabrice Fontaine authored
Build fails since bump to version 3.1.7 in commit 011f31ee because config.h.in is older than aclocal.m4: make[1]: Entering directory '/tmp/instance-4/output-1/build/ipmiutil-3.1.7' (CDPATH="${ZSH_VERSION+.}:" && cd . && autoheader) /bin/bash: autoheader: command not found Fixes: - http://autobuild.buildroot.org/results/2005af881726473f2cda176e90c1e41e4baea67c Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
Fabrice Fontaine authored
Fix CVE-2021-22931, CVE-2021-22940 and CVE-2021-22939: https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
Edgar Bonet authored
On the Aria and the Arietta AT91Bootstrap builds, the file name of the bootloader embeds its version number, and the genimage configuration needs this filename in order to build the boot filesystem image. Commit 0614f435 bumped the AT91Bootstrap version of all acmesystems' boards but failed to update genimage.cfg accordingly, which broke the builds. The Acqua board is not affected by this issue. Update the affected genimage.cfg with the correct filenames. Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/1515521690 https://gitlab.com/buildroot.org/buildroot/-/jobs/1515521691 https://gitlab.com/buildroot.org/buildroot/-/jobs/1515521692 https://gitlab.com/buildroot.org/buildroot/-/jobs/1515521694 Signed-off-by:
Edgar Bonet <bonet@grenoble.cnrs.fr> Signed-off-by:
Yann E. MORIN <yann.morin.1998@free.fr>
-
- Aug 26, 2021
-
-
Michael Nosthoff authored
the nabble.com link is dead and lore has a good search. So use lore for the search form. Signed-off-by:
Michael Nosthoff <buildroot@heine.tech> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Baruch Siach authored
ubihealthd requires getrandom(2) that was introduced in kernel version 3.17. ubihealthd does not build when getrandom(2) is not detected, so the following installation step fails. Technically the dependency should also be on glibc version 2.25+. But we have no way to depend on glibc versions of external toolchains. Toolchain built with kernel headers older than 3.17 can build ubihealthd, but it will fail at run-time. So this is a pretty close approximation of the actual dependency. Fixes: http://autobuild.buildroot.net/results/2d42b0a626367e4051d0e2aadcce39e974fe09d4/ http://autobuild.buildroot.net/results/a2b6dbf707275e3f8262479c0650cfc7cb9abc8d/ Cc: Matt Weber <matthew.weber@collins.com> Signed-off-by:
Baruch Siach <baruch@tkos.co.il> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Fabrice Fontaine authored
Fix the following build failure without /usr/bin/msgfmt raised since the addition of ushare in commit 74097fd6: make[3]: Entering directory `/home/buildroot/autobuild/run/instance-3/output-1/build/ushare-2.1/po' /usr/bin/msgfmt -c --statistics -o fr.gmo fr.po make[3]: /usr/bin/msgfmt: Command not found To fix this build failure, set GMSGFMT to $(HOST_DIR)/bin/msgfmt and don't build po files if NLS is disabled Fixes: - http://autobuild.buildroot.org/results/9f6b5b8f38386135bacd2d8f6e97c1fea77bbe69 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Fabrice Fontaine authored
Fixes: - Fix potential core dumped for strrchr - Fix null pointer crash in cJSON_CreateXxArray - Fix several null pointer problems on allocation failure - Fix a possible dereference of null pointer https://github.com/DaveGamble/cJSON/releases/tag/v1.7.15 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
This breaks some existing external toolchains. Since we're very close to a release, don't try to fix it, but instead simply revert. This reverts commit 6f911a17. Fixes: http://autobuild.buildroot.net/results/afe/afe44f4b6a3c53e5864cfb10b04529011e72cf5c/ Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
- Aug 25, 2021
-
-
Romain Naour authored
gcc 10.x is now used by default but the kernel 4.18.10 used by pc_x86_64_{efi,bios}_defconfig doesn't build with it. Bump the kernel to 4.19.204 release that contains a lot of fixes for newer gcc. Fixes: https://gitlab.com/kubu93/buildroot/-/jobs/1525741062 https://gitlab.com/kubu93/buildroot/-/jobs/1525741060 Signed-off-by:
Romain Naour <romain.naour@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Romain Naour authored
The beaglev kernel is based on the 5.13 branch, update the expected linux-headers version to 5.13. This has been wrong ever since the bump of the kernel version in commit 9a1bd7cc: the headers were bumped to 5.12 instead of 5.13. Fixes: https://gitlab.com/kubu93/buildroot/-/jobs/1525740895 Signed-off-by:
Romain Naour <romain.naour@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Gleb Mazovetskiy authored
Previously, alsa-plugins would not work if alsa-utils was installed after it. This happened because: 1. alsa-plugins copies some files $(TARGET_DIR)/usr/share/alsa/alsa.conf.d 2. alsa-utils removes these files during installation ( rm -rf $(TARGET_DIR)/usr/share/alsa/;) The `rm -rf` command was originally added as part of the fix for https://bugs.buildroot.org/show_bug.cgi?id=1573 11 years ago. The intention might have been to allow for unconfiguring some options and then rebuilding alsa-utils. However, this is a scenario that does not work anyway. The simplest fix for the `alsa-plugins` compatibility issue appears to be to remove the `rm -rf` command. Signed-off-by:
Gleb Mazovetskiy <glex.spb@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Michael Fischer authored
Signed-off-by:
Michael Fischer <mf@go-sys.de> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Thomas Petazzoni authored
Maxime has not been contributing to Buildroot for several years, so it doesn't make sense to keep him in the DEVELOPERS file and make us think that those packages are being maintained and to Cc: him on patches affecting those packages. Signed-off-by:
Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Jonah Petri authored
Some 3rd party vendor toolchains have multiple files which match these glob patterns. In this case, the shell script failed. Switching to use find and xargs solves the issue. Signed-off-by:
Jonah Petri <jonah@petri.us> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Fabrice Fontaine authored
Fix CVE-2021-36976: libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block). https://github.com/libarchive/libarchive/releases/tag/v3.5.2 Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-
Fabrice Fontaine authored
cpe:2.3:a:linphone:belle-sip is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alinphone%3Abelle-sip Signed-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by:
Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
-