aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* package/samba4: bump version to 4.8.5Gravatar Bernd Kuhls2018-12-034-15/+22
| | | | | | | | | | | Release notes: https://www.samba.org/samba/history/samba-4.8.5.html Rebased patches 0001 & 0004. Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 934d23bec79ca58a7c61239d5c4f64d26f8f5cd1) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* popt: add libiconv to popt.pc.inGravatar Fabrice Fontaine2018-12-031-0/+19
| | | | | | | | | | | | | Add ${LTLIBICONV} to popt.pc.in so applications such as shairport-sync will know that they must link with -liconv when building statically Fixes: - http://autobuild.buildroot.org/results/c5b0d1d2867e49c022a2ad971dd9f358ff0f3865 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> (cherry picked from commit 1209eb2dca71fe43e3742f81b43591f6b24ed51a) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* msgpack: disables testsGravatar Fabrice Fontaine2018-12-031-1/+1
| | | | | | | | | | | | | | | | | | | tests are enabled if gperf and zlib are found and they fail on: /home/buildroot/autobuild/run/instance-0/output/build/msgpack-2.1.5/include/msgpack/v1/object.hpp:652:34: error: 'void* memcpy(void*, const void*, size_t)' copying an object of non-trivial type 'struct msgpack::v2::object' from an array of 'const msgpack_object' {aka 'const struct msgpack_object'} [-Werror=class-memaccess] std::memcpy(&o, &v, sizeof(v)); So disable them. Fixes: - http://autobuild.buildroot.org/results/7d7aa9723f02f9bc78dbf6248674be4d402199bf Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Tested-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> (cherry picked from commit d2d75e07dbac023bcba7eb5957ae1d003ca1c69f) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/libid3tag: needs autoreconfGravatar Yann E. MORIN2018-12-032-1/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | libid3tag uses a very old configure script. When the toolchain lacks C++ and the build machine lacks /lib/cpp, this old configure script fails because it can't find a C++ preprocessor that is valid: checking for arm-buildroot-linux-uclibcgnueabi-g++... no checking whether we are using the GNU C++ compiler... no checking whether no accepts -g... no checking dependency style of no... none checking how to run the C++ preprocessor... /lib/cpp configure: error: C++ preprocessor "/lib/cpp" fails sanity check See `config.log' for more details. This is yet another case that was tentatively fixed by bd39d11d2e (core/infra: fix build on toolchain without C++), further amended by 4cd1ab15886 (core: alternate solution to disable C++). However, this only works on libtool scripts that are recent enough, and thus we need to autoreconf to get it. We also need to patch configure.ac so that it does not fail on the missing, GNU-specific files: NEWS, AUTHORS, and Changelog. Fixes: http://autobuild.buildroot.org/results/ac3/ac3870208aab6001db6b790b6c5dde64d08f7669/ http://autobuild.buildroot.org/results/cc1/cc18397f38dfd4f1e6605f7a6f58edab49b396ac/ Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> (cherry picked from commit 43274dd3e0daa3de09d32828e63e6608e8db1e5b) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/dante: needs autoreconfGravatar Yann E. MORIN2018-12-031-2/+2
| | | | | | | | | | | | | | | | | We have a patch that touches a .m4 file, so we need to regenerate the configure script. Otherwise, this is done during the build step, and some environment variables are thus missing and the build may fail when the host machine does not have the expected autostuff tools. Fixes: http://autobuild.buildroot.org/results/e37/e37e61bae1d81a7956e2843be70fea84b0bbb64b/ http://autobuild.buildroot.org/results/f96/f969718402cae71446d6280ec1f66d357a155293/ ... Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 83d19028126ffcad91913dd62d862809f743fd64) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* dante: disable pamGravatar Fabrice Fontaine2018-12-031-1/+1
| | | | | | | | | | Fixes: - http://autobuild.buildroot.org/results/5222592f2052e18c184fae42214c112e7f39be6e Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 982805a32ba210b5f68eec03e0181d9fdda569f1) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Update for 2018.02.82018.02.8Gravatar Peter Korsgaard2018-11-262-2/+49
| | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/webkitgtk: bump to version 2.22.4Gravatar Adrian Perez de Castro2018-11-262-5/+5
| | | | | | | | | | | | | | | | | | | | | | | This is a maintenance release of the current stable WebKitGTK+ version, which contains security fixes for CVE-2018-4345, CVE-2018-4372, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4386, CVE-2018-4392, and CVE-2018-4416. Additionally, it fixes a few build failures, and a crash when using certain version of Cairo. Release notes can be found in the announcement: https://webkitgtk.org/2018/11/21/webkitgtk2.22.4-released.html More details on the issues covered by security fixes can be found in the corresponding security advisory: https://webkitgtk.org/security/WSA-2018-0008.html Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 7a827a17dc03f2ab4affc63a27b32aa5ca573da3) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/samba4: fix install of systemd filesGravatar Fabrice Fontaine2018-11-261-6/+5
| | | | | | | | | | | | | | | | | | | Since version 4.8.0 and https://github.com/samba-team/samba/commit/080d590de1ff9f8ebc55aeffaea8d41991466549, the systemd files (nmd.service, ...) are not available in packaging/systemd Indeed, they are built in bin/default/packaging/systemd So use the new --systemd-install-services configure option to install these files Fixes: - http://autobuild.buildroot.org/results/a09a065c523931c1892e81a99c57521fbe095d8b Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit ea5280b889782e28b6bdf43e28b0e6a3a610f921) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/usb_modeswitch: disable parallel buildGravatar Fabrice Fontaine2018-11-261-0/+2
| | | | | | | | | | | | | | | | | | | | | | | Build of package will sometime fails because of the following issue: install-static target has two dependencies: dispatcher-static and install-common Because dispatcher-static is not a file but only a target, it will always be called to build usb_modeswitch_dispatcher. So, even if install-common depends on usb_modeswitch_dispatcher, in some rare cases, install-static won't be able to install usb_modeswitch_dispatcher because it is being rebuild by dispatcher-static To fix this issue, disable parallel build Fixes: - http://autobuild.buildroot.org/results/8297be35725b816ff5afaf909605ceb41223efb6 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit a554109af857b7b53598c5a9e0ee1d2729da73df) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* {linux, linux-headers}: bump 4.{4, 9, 14, 18}.x seriesGravatar Bernd Kuhls2018-11-261-3/+3
| | | | | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 0021a2a49f68a1405a8ba132dc9466c771ffc46e) [Peter: drop 4.18.x, linux / hash changes] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* support/graph-depends: fix package names starting with a non-alphaGravatar Yann E. MORIN2018-11-261-2/+3
| | | | | | | | | | | | | | | | | | Graphviz' dot utility does not like nodes which names does not start with an ^[[:alpha:]], i.e. 18xx-ti-utils would cause grievance: Warning: syntax ambiguity - badly delimited number '18x' in line 4 [...]/graph-depends.dot splits into two tokens Warning: syntax ambiguity - badly delimited number '18x' in line 5 [...]/graph-depends.dot splits into two tokens Warning: syntax ambiguity - badly delimited number '18x' in line 6 [...]/graph-depends.dot splits into two tokens Warning: syntax ambiguity - badly delimited number '18x' in line 7 [...]/graph-depends.dot splits into two tokens Prefix nodes with an underscore to fix that. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 020206ca5784ca60fd72c7ff0aea6557d1d9bf6e) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* linux: Make dtc install step more reliableGravatar Andreas Naumann2018-11-261-3/+1
| | | | | | | | | | | | | | | | | | | | Checking for the existence of the dtc binary built by the non-dependent dtc package may cause instable behaviour when giving more freedom on the order of how the packages are built (parallelization). In addidion, when moving to per-package host/target method, the check would always trigger in the isolated host, leading to linux-dtc always being installed as dtc. This in turn may lead to undesired overwriting of the real host-dtc binary when finally assembling the global host dir. Thus rework the linux-dtc install condition to be defined by configuration rather than compile time order. Signed-off-by: Andreas Naumann <anaumann@ultratronik.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 860906ee05fad3fe503786ec7c656ea0f25851fc) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* prosody: security bump to version 0.9.14Gravatar Peter Korsgaard2018-11-262-6/+3
| | | | | | | | | | | | | | | This fixes a cross-host authentication vulnerability, CVE-2018-10847. The issue affects Prosody instances that have multiple virtual hosts (including anonymous authenticated hosts): https://blog.prosody.im/prosody-0-10-2-security-release A full security advisory is available at https://prosody.im/security/advisory_20180531 Compute hashes locally as they are no more available on https://prosody.im/downloads/source/{MD5,SHA1,SHA256,SHA512}SUMS Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* configs/armadeus_apf27: fix U-Boot configurationGravatar Thomas Petazzoni2018-11-261-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | The U-Boot part of the defconfig was not specifying explicitly any U-Boot version. Since commit 21e3ae8a18bb77943c0a2492ab9ebf14cab333f9 ("boot/uboot: default to kconfig buildsystem for latest version"), we default to using the kconfig build system when the default U-Boot version is used. Following this change, the apf27 defconfig therefore started using kconfig, for which the BR2_TARGET_UBOOT_BOARDNAME Config.in option is not used. Due to this, the build fails with: boot/uboot/uboot.mk:411: *** No board defconfig name specified, check your BR2_TARGET_UBOOT_BOARD_DEFCONFIG setting. Stop. Indeed, when Kconfig is used, the board defconfig must be specified with BR2_TARGET_UBOOT_BOARD_DEFCONFIG. As part of fixing this, we also set a fixed U-Boot version for this defconfig, like we do in all other defconfigs. Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/123771003 Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit a8aaee72a7f1db5de8839eb3a5499046a38a4fac) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* configs/imx6-sabresd_qt5: add missing dependency on host-opensslGravatar Thomas Petazzoni2018-11-261-0/+1
| | | | | | | | | | | | | | | | host-openssl is needed to build the Linux kernel. This is the same issue that was fixed in commit 5dac3b9b8d72ea2b4aa264bfaa54e41f32595009 ("configs/imx6-sabresd: needs host-openssl for the Linux kernel build") for the minimal defconfig for the same board. Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/123771070 Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit c32608ba39ebd07dc992bde1380077d5c65a9870) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* configs/imx6sabre: Create distinct pre-processed mkimage config filesGravatar Fabio Estevam2018-11-262-55/+89
| | | | | | | | | | | | | | | | | | Commit 0c4bccf9e882 ("configs/imxsabre: Fix U-Boot parallel build issue") tried to fix the parallel build issue, but the real fix was developed later by Trent Piepho later, so add such commit to fix Buildroot build failures on rel_imx_4.9.x_1.0.0_ga NXP branch. Fixes: https://gitlab.com/buildroot.org/buildroot/-/jobs/123771053 https://gitlab.com/buildroot.org/buildroot/-/jobs/123771054 https://gitlab.com/buildroot.org/buildroot/-/jobs/123771055 Reported-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Fabio Estevam <festevam@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 1ad9c45a059deaaae65a78a9ed7f78b579fed422) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* gauche: fix parallel buildGravatar Fabrice Fontaine2018-11-261-0/+35
| | | | | | | | | | | | Add a patch to fix parallel build issue on ext/rfc Fixes: - http://autobuild.buildroot.org/results/f4935e29ce6aaebdaa47d46c56120b7e97145d1b Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit e00369fa84ecd32edf1738255d394b16785034ee) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* fs/tar: add support for xattrs (thus capabilties)Gravatar Yann E. MORIN2018-11-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | By default, tar will not include any extended attribute (xattr) when creating archives, and thus will not store capabilties either (as they are stored in the xattr 'security.capability'). Using option --xattrs is enough to create a tarball with all the xattrs attached to a file. However, extracting all xattrs from a tarball requires that --xattrs-include='*' be used. This is not symetric (but on purpose, as per the documentation), and so is confusing to some. So, we use --xattrs-include='*' to create the archive, so as to be explicit that we want all xattrs to be stored. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Ricardo Martincoski <ricardo.martincoski@gmail.com> Cc: Peter Korsgaard <peter@korsgaard.com> Cc: Arnout Vandecappelle <arnout@mind.be> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 6d688e2132f9feb63e325c2456d23edfc53f79a8) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/netplug: fix quoting of ${NETWORKING} in init scriptGravatar Thomas Claveirole2018-11-261-1/+1
| | | | | | | | | | | | | | | | | | | Since 4adaa581b27dc27298eb7cc421ee8f530f88e18e, S29netplug looks for /etc/default/network instead of /etc/sysconfig/network. When this file exists but does not define $NETWORKING, the script fails on line 29 with something like: /etc/init.d/S29netplug: 29: [: =: unexpected operator Fix quoting so this error no longer happens. Signed-off-by: Thomas Claveirole <thomas.claveirole@green-communications.fr> [Thomas: keep double quotes around "no", keep curly braces when referencing the variable.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 5682ba9363d262a67567ed9b0531a414e6aae1bb) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/pkg-generic.mk: fix show-build-order stdout pollutionGravatar Serj Kalichev2018-11-261-0/+1
| | | | | | | | | | | | | | | | | | | | | | The commands like "make show-build-order" or "make <package>-show-build-order" show the build order and then print "make[1]: Nothing to be done for 'show-build-order'" to stdout. It pollutes output. Technically this message is true but it's not true for user because he gets an information. The <package>-show-build-order targets use $(info) for package name printing. The make utility doesn't consider the internal directive as a command so it think that it's "Nothing to be done". The patch adds the empty command to <package>-show-build-order to inform make utility that taget makes some real actions. Signed-off-by: Serj Kalichev <serj.kalichev@gmail.com> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> [Thomas: invert $(info) and @:, as suggested by Yann.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 75c81a12f68f943af2966e737f882b3f4fc7a909) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* vtun: remove reference to start-stop-daemon from package helpGravatar Carlos Santos2018-11-261-3/+0
| | | | | | | | | None of the other 82 packages that use start-stop-daemon does this. Signed-off-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 11d96cdeb9d59e81973c49fb713fb5982f196110) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/webkitgtk: use proper USE_WOFF2 flag instead of ENABLE_WOFF2Gravatar Grzegorz Blach2018-11-261-2/+2
| | | | | | | Signed-off-by: Grzegorz Blach <grzegorz@blach.pl> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit ef3deade617769e6e2f509985cddf0958cda4a02) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* rpm: really take DEPENDENCIES into accountGravatar Thomas Petazzoni2018-11-261-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Commit e7af4033c32560594ddbd457b68f6d3713662a26 ("rpm: use the new gettext logic") introduced a really nasty bug: by adding $(TARGET_NLS_DEPENDENCIES) to RPM_DEPENDENCIES, it completely overwrote the existing value of RPM_DEPENDENCIES, entirely masking all mandatory RPM dependencies. rpm is fairly towards the end of the alphabet, and most other mandatory dependencies (berkeleydb, host-pkgconf, file and popt) appear earlier by alphabetic ordering. Only zlib was afterwards, but since file depends on zlib, it was always built before. This probably explains why our autobuilders haven't encountered a single build failure. However, a simple "make rpm" clearly exhibits the failure, and obviously the upcoming per-package folder mechanism makes such bugs even more obvious. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 36385f87f38e5efd9d678ce10d59bfe442277eb9) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* core: ensure we use the realpath(3) of DL_DIRGravatar Yann E. MORIN2018-11-261-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When $(TOPDIR)/dl is a symlink, checking out git submodules can fail, as reported by Michael in #11086. To reproduce a similarly-related mis-behaviour: $ mkdir -p foo/bar foo/buz $ cd foo/bar $ ln -s ../buz meh $ cd meh $ cd ../../foo The last command should not succeed, because, relative to meh, there is no ../../foo directory; we would expect it to be ../../../foo, instead. But since meh is a symlink to a directory, then a relative path from that symlink is interpreted as relative to the derefrenced directory, i.e. from buz in this case. But where this gets even weirder, is that, if the last command is replaced by: $ cd ../../../foo then it still works, too. And that is the root of Michael's issue: the dl directory in Buildroot's TOPDIR is a symlink to a similarly-named directory one directory higher, which then confuses relative paths, which gets especially and noticeably bad for git submodules. Avoid this strangeness, and just use so-called "physical" path, i.e. a path where all symlinks to directories have been dereferenced. Fixes: #11086 Reported-by: Michael Nosthoff <posted@heine.so> Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Michael Nosthoff <posted@heine.so> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 632e164a19fc3d1ce419c60eb85214d42a673b28) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* mosquitto: fix build on uClibcGravatar Peter Korsgaard2018-11-261-0/+7
| | | | | | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/c42/c425eb496cc5422ff1e2e51e59d4baf377bcbeed/ The memory tracking feature of mosquitto (which is enabled by default on systems defining __GLIBC__) uses malloc_usable_size() which was only added to uClibc-ng in 1.0.29. 2018.02.x still uses 1.0.28, so disable this feature when building on uClibc. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* fs/common.mk: Fix show-build-orderGravatar Serj Kalichev2018-11-261-1/+1
| | | | | | | | | | | | The command "make show-build-order" doesn't show dependencies of rootfs-common target. This patch adds $(ROOTFS_COMMON_DEPENDENCIES) to PACKAGES variable. Signed-off-by: Serj Kalichev <serj.kalichev@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 305e4487e5c18ed89bf2aa106b2068f9dce686fb) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* utils/genrandconfig: add missing new line when creating the configurationGravatar Thomas Petazzoni2018-11-261-1/+1
| | | | | | | | | | | | | | | | | | | | When adding the custom BR2_WGET value in the configuration, genrandconfig forgets to add a newline. Due to this, the next option that is added is printed on the same line as BR2_WGET="", which causes it to be ignored. Due to this, in all builds, the line right after BR2_WGET was ignored. It could have been BR2_ENABLE_DEBUG, BR2_INIT_BUSYBOX, BR2_INIT_SYSTEMD, BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV, BR2_STATIC_LIBS or BR2_PACKAGE_PYTHON_PY_ONLY depending on the randomization. Fix that by adding a proper newline at the end of the BR2_WGET option. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 3eb49f59d6804c452e784759d9b3869215a8098f) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* easydbus: fix build without C++Gravatar Fabrice Fontaine2018-11-261-0/+33
| | | | | | | | | | | | | Specify that easydbus is a C project file otherwise build will fail if no C++ compiler is found by cmake Fixes: - http://autobuild.buildroot.org/results/486c3cd98124e7415dee2fd1463bd5e0fcc9ba91 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit e8fc4364a40a518fa21fe5c830675c7f30ede8ff) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/openocd: add missing host-pkgconf dependencyGravatar Thomas Petazzoni2018-11-261-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | The configure.ac script uses PKG_CHECK_MODULES(), and we autoreconf the package, so host-pkgconf should be listed in the dependencies. This issue is seen either with per-package folders, or by doing a clean build with just "make openocd": >>> openocd 0.10.0 Configuring >>> openocd 0.10.0 Autoreconfiguring [...] configure.ac:12: error: possibly undefined macro: AC_MSG_WARN If this token and others are legitimate, please use m4_pattern_allow. See the Autoconf documentation. configure.ac:201: error: possibly undefined macro: AC_DEFINE configure.ac:582: error: possibly undefined macro: AC_MSG_NOTICE Even if the message seems unrelated, it's really the lack of pkg.m4 from host-pkgconf that causes the issue. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 915c136c5c9abeb683b59fad4a0e05a25c1a1cc2) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libsemanage: define installation location of semanage.conf for hostGravatar Thomas Petazzoni2018-11-261-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | When /etc/selinux/semanage.conf does not exist, libsemanage tries to overwrite it. For the target package, it works fine because $(DESTDIR) is taken into account. However, for the host package, $(DESTDIR) is empty, and the location used for /etc/selinux/semanage.conf is not affected by $(PREFIX). This causes host-libsemanage to try to install /etc/selinux/semanage.conf, which obviously fails with: test -f /etc/selinux/semanage.conf || install -m 644 -D semanage.conf /etc/selinux/semanage.conf install: cannot create directory '/etc/selinux': Permission denied To fix this, this commit passes DEFAULT_SEMANAGE_CONF_LOCATION in the make options when building/installing host-libsemanage, providing a path to semanage.conf that Buildroot can write to. Fixes: http://autobuild.buildroot.net/results/cd27e3c66274622d0c3dd5a601a36efb1bc45011/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Tested-by: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 4c9c70453cf495de170ad68e33baf81dd11bf114) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/x11r7/xlib_libfontenc: add missing dependency on host-pkgconfGravatar Thomas Petazzoni2018-11-261-2/+2
| | | | | | | | | | | | | The xlib_libfontenc configure.ac uses PKG_CHECK_MODULES(), but the Buildroot package does not have a dependency on host-pkgconf. This causes a build failure with per-package host/target folders, or if one builds just with "make xlib_libfontenc", which is why it was never detected by the autobuilders. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 7b1238055c2d369df335711c04cf8007c5b7edba) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* elfutils: security bump to version 0.174Gravatar Peter Korsgaard2018-11-262-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the following security issues: CVE-2018-16062: dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file. CVE-2018-16402: libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice. CVE-2018-16403: libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash. For more details, see the announcement: https://sourceware.org/ml/elfutils-devel/2018-q3/msg00116.html 0.172 and 0.173 also included fixes for crashes and hangs found by afl-fuzz (no CVEs assigned): https://sourceware.org/ml/elfutils-devel/2018-q2/msg00272.html https://sourceware.org/ml/elfutils-devel/2018-q2/msg00209.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 6a74acb6fb6b21a0a5c97cdfc73f0d20a9af2f75) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* elfutils: bump to version 0.171Gravatar Baruch Siach2018-11-267-59/+13
| | | | | | | | | | | | | | | | | | | | | | Drop the po/ disable patch; not needed anymore. Drop the __mempcpy compatibility patch; __mempcpy is not used anymore. Refresh the -Werror removal patch; still needed, unfortunately. Renumber the remaining patches. Add GPLv3 license file. Add license files hash. [Peter: drop security reference, was added post-release] Cc: Stefan Fröberg <stefan.froberg@petroprogram.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit f0335b0cf78dee43df93b9ee17d86f1443990cca) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: add upstream security fix for SQUID-2018_5 / CVE-2018-19132Gravatar Peter Korsgaard2018-11-262-1/+3
| | | | | | | | | | | | | >From the advisory: Due to a memory leak in SNMP query rejection code, Squid is vulnerable to a denial of service attack. http://www.squid-cache.org/Advisories/SQUID-2018_5.txt Add the patch from the 3.5 branch fixing this issue. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: add upstream security fix for SQUID-2018_4 / CVE-2018-19131Gravatar Peter Korsgaard2018-11-262-0/+3
| | | | | | | | | | | | | | >From the advisory: Due to incorrect input handling, Squid is vulnerable to a Cross-Site Scripting vulnerability when generating HTTPS response messages about TLS errors. http://www.squid-cache.org/Advisories/SQUID-2018_4.txt Add the patch from the 3.5 branch fixing this issue. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* squid: security bump to version 3.5.28Gravatar Peter Korsgaard2018-11-264-70/+4
| | | | | | | | | | | | Fixes SQUID-2018:3 / CVE-2018-1172: Crash in ESI Response processing For more details, see the advisory: http://www.squid-cache.org/Advisories/SQUID-2018_3.txt Drop patch 0003 / 0004 as these (security) fixes are now upstream. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: security bump to version 3.39Gravatar Peter Korsgaard2018-11-252-3/+3
| | | | | | | | | | | Fixes the following security issue: CVE-2018-12384: NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 1c32e4c298d02ce7ca3c3551be8c31051dde7801) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/libnss: fix aarch64_be buildGravatar Bernd Kuhls2018-11-251-1/+7
| | | | | | | | | | | | | libnss does not treat aarch64_be the same way as aarch64: https://hg.mozilla.org/projects/nss/file/fb3585458ac3/lib/freebl/Makefile#l523 Add code to translate "aarch64_be" into "aarch64" to fix http://autobuild.buildroot.net/results/4fca771980f9b049ce2690971ddd856652cd5b43/ Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 826981d45ddbb85a92c01869cb2eccc2fb260475) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: fix build with uClibcGravatar Baruch Siach2018-11-251-0/+22
| | | | | | | | | | | | | | | | | Add a patch defining AT_HWCAP2 locally since uClibc is missing this macro. Once uClibc updates its elf.h copy we can remove this patch. Fixes: http://autobuild.buildroot.net/results/06f/06f5ee4bc9e623fa08d77278acdcb447148ae997/ http://autobuild.buildroot.net/results/7cd/7cd7586f5854f9447c37adeedb9c113ba37ebea4/ http://autobuild.buildroot.net/results/335/335bee755fbec45a6d5336c2501dc2687859ec0e/ Cc: Joseph Kogut <joseph.kogut@gmail.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 1a9f539d97850ef1a53a3c64a31c24330a2bcd8f) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: drop obsolete patchGravatar Baruch Siach2018-11-251-20/+0
| | | | | | | | | | | uClibc implements RTLD_NOLOAD for quite some time now. Remove the patch adding a dummy definition of RTLD_NOLOAD. Cc: Joseph Kogut <joseph.kogut@gmail.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit cf9100d3f20dd87bbd8de473b0b0321db5f31f83) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: bump to version 3.38Gravatar Fabrice Fontaine2018-11-252-4/+3
| | | | | | | Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 902f537b14ffba28f65df299b32678aecd41d686) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: bump to version 3.37.3Gravatar Joseph Kogut2018-11-253-146/+4
| | | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/fd64ee3486f9045dfbd83908b8f06ef62c0d9781/ http://autobuild.buildroot.net/results/698500a92688c50e9cc71cf82c0848cb4adb81ad/ http://autobuild.buildroot.net/results/adaa2f79b202cb01ae57fa0cdb0eac9c07b22ea2/ Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 9a5c3d5bb40f31676cd9949e4e63d7f3d4f2f812) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: fix build without int128Gravatar Fabrice Fontaine2018-11-251-0/+143
| | | | | | | | | | | | | Patch retrieved from upstream, more info here: https://bugzilla.mozilla.org/show_bug.cgi?format=default&id=1459739 Fixes: - http://autobuild.buildroot.net/results/093113829d7ce19d578a920e76caa10822774139 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 46706ced359300b2cad65d630e8485c9f8136645) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: remove upstream patchGravatar Baruch Siach2018-11-251-33/+0
| | | | | | | | | | | | | | | The merge of the next branch failed to remove an upstream applied patch. Fixes: http://autobuild.buildroot.net/results/31f/31fe428584ada680f30d11e5d1abfbc533c0a70e/ http://autobuild.buildroot.net/results/bb2/bb25363497dfd7fd5f8a81c28110fab87d5c2dc8/ http://autobuild.buildroot.net/results/70a/70adacf85154d2a663808cf0db69849b6a490457/ Cc: Joseph Kogut <joseph.kogut@gmail.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 800aefb1822f8d9a30b5a116f523cd573744ea2d) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: bump to version 3.37Gravatar Joseph Kogut2018-11-253-40/+2
| | | | | | | Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit f36d4be02c262b4706ed05e0303feb3fbac3b435) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: add upstream patch fixing build on aarch64Gravatar Peter Korsgaard2018-11-251-0/+38
| | | | | | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/037/037c772a36762df8febd529b329743d18ffbf66a/ Build system forgets to compile a file on aarch64, breaking the build. For details, see the upstream bugreport: https://bugzilla.mozilla.org/show_bug.cgi?id=1432455 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 306242a47492439b493dabb5387f73aa43b08efc) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnss: bump version to 3.35Gravatar Peter Korsgaard2018-11-252-3/+3
| | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 0ccab9b0edaf6455b909f2f381790e9620f17354) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnspr: fix nios2 and microblaze support patchesGravatar Baruch Siach2018-11-252-4/+4
| | | | | | | | | | | | | | | | Commit c9e3d5b6c57 (libnspr: bump to version 4.20) did not refresh the hunks touching the _linux.cfg file. As a result, these hunk were applied to the wrong (x86 specific) place in that file, rendering them ineffective. Refresh the patches to fix that. Fixes: http://autobuild.buildroot.net/results/2d1/2d1288e98a6459d84c2599c99b5617a2fde81f62/ Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 56825a6518e46af5e0845760e20652426d6fe3b2) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* libnspr: bump to version 4.20Gravatar Fabrice Fontaine2018-11-254-9/+13
| | | | | | | | | | | | Support for riscv was added in this version Fixes: - http://autobuild.buildroot.org/results/a98db13ea105d627f2a4770969b31550926c2791 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit c9e3d5b6c578010ca8dfba0a43cc842519658d43) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>