From 9223c210d4fdddf474135e25c86bbf8eacba3bc0 Mon Sep 17 00:00:00 2001
From: jbnadal <jbnadal@awox.com>
Date: Thu, 4 Jan 2018 18:52:18 +0100
Subject: [PATCH] Update Buildroot From 17.02.8 -> 17.02.9

---
 bsp/buildroot/CHANGES                         |  15 +++++
 bsp/buildroot/Makefile                        |  10 ++--
 bsp/buildroot/VERSION                         |   2 +-
 bsp/buildroot/docs/manual/manual.html         |  18 +++---
 bsp/buildroot/docs/manual/manual.pdf          | Bin 499436 -> 499448 bytes
 bsp/buildroot/docs/manual/manual.text         |   4 +-
 ...le.patch => 0001-bind-cross-compile.patch} |   0
 ...gs-a-socket-descriptor-leak-in-OMAPI.patch |  51 +++++++++++++++++
 bsp/buildroot/package/dhcp/dhcp.hash          |   6 +-
 bsp/buildroot/package/dhcp/dhcp.mk            |   2 +-
 ...rsion-check-and-symlink-installation.patch |  11 ++--
 bsp/buildroot/package/exim/0004-glibc.patch   |  27 +++++++++
 bsp/buildroot/package/exim/exim.hash          |   4 +-
 bsp/buildroot/package/exim/exim.mk            |   6 +-
 bsp/buildroot/package/flann/flann.mk          |   3 +-
 bsp/buildroot/package/gdb/gdb.mk              |   4 +-
 bsp/buildroot/package/gstreamer/gstreamer.mk  |   2 +-
 .../package/gstreamer1/gstreamer1.mk          |   2 +-
 bsp/buildroot/package/heimdal/heimdal.hash    |   2 +-
 bsp/buildroot/package/heimdal/heimdal.mk      |   2 +-
 bsp/buildroot/package/libcue/libcue.mk        |   2 +
 bsp/buildroot/package/libcurl/libcurl.hash    |   4 +-
 bsp/buildroot/package/libcurl/libcurl.mk      |   2 +-
 bsp/buildroot/package/libevent/libevent.mk    |   1 +
 ...x-broken-sed-call-in-configure.ac.in.patch |  31 +++++++++++
 bsp/buildroot/package/libpqxx/libpqxx.mk      |   3 +
 bsp/buildroot/package/libsoxr/Config.in       |   2 +-
 bsp/buildroot/package/linphone/linphone.mk    |   7 +++
 .../package/linux-headers/Config.in.host      |   6 +-
 ...nfigure-remove-check-on-CXX-compiler.patch |  35 ++++++++++++
 bsp/buildroot/package/lldpd/lldpd.mk          |   2 +-
 bsp/buildroot/package/mariadb/mariadb.hash    |   4 +-
 bsp/buildroot/package/mariadb/mariadb.mk      |   2 +-
 bsp/buildroot/package/mfgtools/Config.in.host |   2 +-
 bsp/buildroot/package/mfgtools/mfgtools.hash  |   4 +-
 bsp/buildroot/package/mfgtools/mfgtools.mk    |   6 +-
 bsp/buildroot/package/mtools/mtools.mk        |   4 ++
 ...01-gyp-force-link-command-to-use-CXX.patch |   0
 ..._OPENSSL-directive-to-openssl_config.patch |   0
 bsp/buildroot/package/nodejs/Config.in        |   2 +-
 bsp/buildroot/package/nodejs/nodejs.hash      |   4 +-
 bsp/buildroot/package/nut/nut.mk              |   3 +
 bsp/buildroot/package/openssl/openssl.hash    |   5 +-
 bsp/buildroot/package/openssl/openssl.mk      |   2 +-
 ...001-Check-fname-in-recv_files-sooner.patch |  45 +++++++++++++++
 ...Sanitize-xname-in-read_ndx_and_attrs.patch |  39 +++++++++++++
 ...ilter-against-fnamecmp-in-recv_files.patch |  28 ++++++++++
 ...g-0-when-receiving-xattr-name-values.patch |  33 +++++++++++
 bsp/buildroot/package/samba4/samba4.mk        |   2 +-
 bsp/buildroot/package/tor/tor.hash            |   2 +-
 bsp/buildroot/package/tor/tor.mk              |   2 +-
 ...-avcodec-check-avcodec-visible-sizes.patch |  33 -----------
 ...ck-visible-size-when-creating-buffer.patch |  33 -----------
 bsp/buildroot/package/vlc/vlc.hash            |  10 +++-
 bsp/buildroot/package/vlc/vlc.mk              |   4 +-
 .../package/webkitgtk/webkitgtk.hash          |  12 ++--
 bsp/buildroot/package/webkitgtk/webkitgtk.mk  |   2 +-
 .../package/wireshark/wireshark.hash          |   4 +-
 bsp/buildroot/package/wireshark/wireshark.mk  |   2 +-
 .../xlib_libXcursor/xlib_libXcursor.hash      |   7 ++-
 .../x11r7/xlib_libXcursor/xlib_libXcursor.mk  |   2 +-
 ...-string-in-PatternMatch-CVE-2017-137.patch |  34 ------------
 ...-Check-string-boundaries-CVE-2017-13.patch |  52 ------------------
 .../x11r7/xlib_libXfont/xlib_libXfont.hash    |   7 ++-
 .../x11r7/xlib_libXfont/xlib_libXfont.mk      |   2 +-
 ...-string-in-PatternMatch-CVE-2017-137.patch |  34 ------------
 ...-Check-string-boundaries-CVE-2017-13.patch |  52 ------------------
 .../x11r7/xlib_libXfont2/xlib_libXfont2.hash  |   7 ++-
 .../x11r7/xlib_libXfont2/xlib_libXfont2.mk    |   2 +-
 bsp/buildroot/package/xfsprogs/Config.in      |   2 +-
 bsp/buildroot/support/scripts/size-stats      |  12 +++-
 .../toolchain-external/toolchain-external.mk  |   2 +-
 72 files changed, 446 insertions(+), 324 deletions(-)
 rename bsp/buildroot/package/dhcp/{0002-bind-cross-compile.patch => 0001-bind-cross-compile.patch} (100%)
 create mode 100644 bsp/buildroot/package/dhcp/0002-v4_3-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
 create mode 100644 bsp/buildroot/package/exim/0004-glibc.patch
 create mode 100644 bsp/buildroot/package/libpqxx/0001-Fix-broken-sed-call-in-configure.ac.in.patch
 create mode 100644 bsp/buildroot/package/lldpd/0003-configure-remove-check-on-CXX-compiler.patch
 rename bsp/buildroot/package/nodejs/{6.11.5 => 6.12.2}/0001-gyp-force-link-command-to-use-CXX.patch (100%)
 rename bsp/buildroot/package/nodejs/{6.11.5 => 6.12.2}/0002-src-add-HAVE_OPENSSL-directive-to-openssl_config.patch (100%)
 create mode 100644 bsp/buildroot/package/rsync/0001-Check-fname-in-recv_files-sooner.patch
 create mode 100644 bsp/buildroot/package/rsync/0002-Sanitize-xname-in-read_ndx_and_attrs.patch
 create mode 100644 bsp/buildroot/package/rsync/0003-Check-daemon-filter-against-fnamecmp-in-recv_files.patch
 create mode 100644 bsp/buildroot/package/rsync/0004-Enforce-trailing-0-when-receiving-xattr-name-values.patch
 delete mode 100644 bsp/buildroot/package/vlc/0013-codec-avcodec-check-avcodec-visible-sizes.patch
 delete mode 100644 bsp/buildroot/package/vlc/0014-decoder-check-visible-size-when-creating-buffer.patch
 delete mode 100644 bsp/buildroot/package/x11r7/xlib_libXfont/0001-Check-for-end-of-string-in-PatternMatch-CVE-2017-137.patch
 delete mode 100644 bsp/buildroot/package/x11r7/xlib_libXfont/0002-pcfGetProperties-Check-string-boundaries-CVE-2017-13.patch
 delete mode 100644 bsp/buildroot/package/x11r7/xlib_libXfont2/0001-Check-for-end-of-string-in-PatternMatch-CVE-2017-137.patch
 delete mode 100644 bsp/buildroot/package/x11r7/xlib_libXfont2/0002-pcfGetProperties-Check-string-boundaries-CVE-2017-13.patch

diff --git a/bsp/buildroot/CHANGES b/bsp/buildroot/CHANGES
index 63874350..a632a936 100644
--- a/bsp/buildroot/CHANGES
+++ b/bsp/buildroot/CHANGES
@@ -1,3 +1,18 @@
+2017.02.9, Released January 1st, 2018
+
+	Important / security related fixes.
+
+	Fix divide by zero issue in size-stats script.
+
+	Fix makefile include ordering issue with certain make versions
+	in the external toolchain handling.
+
+	Updated/fixed packages: dhcp, exim, flann, gdb, heimdal,
+	libcue, libcurl, libevent, libpqxx, libsoxr, linphone, lldpd,
+	mariadb, mfgtools, mtools, nodejs, nut, openssl, rsync,
+	samba4, tor, vlc, webkitgtk, wireshark, xfsprogs,
+	xlib_libXcursor, xlib_libXfont, xlib_libXfont2
+
 2017.02.8, Released November 27th, 2017
 
 	Important / security related fixes.
diff --git a/bsp/buildroot/Makefile b/bsp/buildroot/Makefile
index 4dac404a..067453eb 100644
--- a/bsp/buildroot/Makefile
+++ b/bsp/buildroot/Makefile
@@ -86,9 +86,9 @@ else # umask / $(CURDIR) / $(O)
 all:
 
 # Set and export the version string
-export BR2_VERSION := 2017.02.8
+export BR2_VERSION := 2017.02.9
 # Actual time the release is cut (for reproducible builds)
-BR2_VERSION_EPOCH = 1511823000
+BR2_VERSION_EPOCH = 1514805000
 
 # Save running make version since it's clobbered by the make package
 RUNNING_MAKE_VERSION := $(MAKE_VERSION)
@@ -483,8 +483,8 @@ include support/dependencies/dependencies.mk
 
 PACKAGES += $(DEPENDENCIES_HOST_PREREQ)
 
-include toolchain/*.mk
-include toolchain/*/*.mk
+include $(sort $(wildcard toolchain/*.mk))
+include $(sort $(wildcard toolchain/*/*.mk))
 
 # Include the package override file if one has been provided in the
 # configuration.
@@ -1074,7 +1074,7 @@ print-version:
 	@echo $(BR2_VERSION_FULL)
 
 include docs/manual/manual.mk
--include $(foreach dir,$(BR2_EXTERNAL_DIRS),$(dir)/docs/*/*.mk)
+-include $(foreach dir,$(BR2_EXTERNAL_DIRS),$(sort $(wildcard $(dir)/docs/*/*.mk)))
 
 .PHONY: $(noconfig_targets)
 
diff --git a/bsp/buildroot/VERSION b/bsp/buildroot/VERSION
index dc0f3dab..97d6333b 100644
--- a/bsp/buildroot/VERSION
+++ b/bsp/buildroot/VERSION
@@ -1 +1 @@
-buildroot 2017_02_8
+buildroot 2017_02_9
diff --git a/bsp/buildroot/docs/manual/manual.html b/bsp/buildroot/docs/manual/manual.html
index 60329114..8d1aca0b 100644
--- a/bsp/buildroot/docs/manual/manual.html
+++ b/bsp/buildroot/docs/manual/manual.html
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>The Buildroot user manual</title><link rel="stylesheet" type="text/css" href="docbook-xsl.css" /><meta name="generator" content="DocBook XSL Stylesheets V1.79.1" /></head><body><div xml:lang="en" class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a id="idm45850074078368"></a>The Buildroot user manual</h1></div></div><hr /></div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="preface"><a href="#idm45850074934640"></a></span></dt><dt><span class="part"><a href="#_getting_started">I. Getting started</a></span></dt><dd><dl><dt><span class="chapter"><a href="#_about_buildroot">1. About Buildroot</a></span></dt><dt><span class="chapter"><a href="#requirement">2. System requirements</a></span></dt><dd><dl><dt><span class="section"><a href="#requirement-mandatory">2.1. Mandatory packages</a></span></dt><dt><span class="section"><a href="#requirement-optional">2.2. Optional packages</a></span></dt></dl></dd><dt><span class="chapter"><a href="#getting-buildroot">3. Getting Buildroot</a></span></dt><dt><span class="chapter"><a href="#_buildroot_quick_start">4. Buildroot quick start</a></span></dt><dt><span class="chapter"><a href="#community-resources">5. Community resources</a></span></dt></dl></dd><dt><span class="part"><a href="#_user_guide">II. User guide</a></span></dt><dd><dl><dt><span class="chapter"><a href="#configure">6. Buildroot configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#_cross_compilation_toolchain">6.1. Cross-compilation toolchain</a></span></dt><dt><span class="section"><a href="#_dev_management">6.2. /dev management</a></span></dt><dt><span class="section"><a href="#_init_system">6.3. init system</a></span></dt></dl></dd><dt><span class="chapter"><a href="#_configuration_of_other_components">7. Configuration of other components</a></span></dt><dt><span class="chapter"><a href="#_general_buildroot_usage">8. General Buildroot usage</a></span></dt><dd><dl><dt><span class="section"><a href="#make-tips">8.1. <span class="emphasis"><em>make</em></span> tips</a></span></dt><dt><span class="section"><a href="#full-rebuild">8.2. Understanding when a full rebuild is necessary</a></span></dt><dt><span class="section"><a href="#rebuild-pkg">8.3. Understanding how to rebuild packages</a></span></dt><dt><span class="section"><a href="#_offline_builds">8.4. Offline builds</a></span></dt><dt><span class="section"><a href="#_building_out_of_tree">8.5. Building out-of-tree</a></span></dt><dt><span class="section"><a href="#env-vars">8.6. Environment variables</a></span></dt><dt><span class="section"><a href="#_dealing_efficiently_with_filesystem_images">8.7. Dealing efficiently with filesystem images</a></span></dt><dt><span class="section"><a href="#_graphing_the_dependencies_between_packages">8.8. Graphing the dependencies between packages</a></span></dt><dt><span class="section"><a href="#_graphing_the_build_duration">8.9. Graphing the build duration</a></span></dt><dt><span class="section"><a href="#_graphing_the_filesystem_size_contribution_of_packages">8.10. Graphing the filesystem size contribution of packages</a></span></dt><dt><span class="section"><a href="#_integration_with_eclipse">8.11. Integration with Eclipse</a></span></dt><dt><span class="section"><a href="#_advanced_usage">8.12. Advanced usage</a></span></dt></dl></dd><dt><span class="chapter"><a href="#customize">9. Project-specific customization</a></span></dt><dd><dl><dt><span class="section"><a href="#customize-dir-structure">9.1. Recommended directory structure</a></span></dt><dt><span class="section"><a href="#outside-br-custom">9.2. Keeping customizations outside of Buildroot</a></span></dt><dt><span class="section"><a href="#customize-store-buildroot-config">9.3. Storing the Buildroot configuration</a></span></dt><dt><span class="section"><a href="#customize-store-package-config">9.4. Storing the configuration of other components</a></span></dt><dt><span class="section"><a href="#rootfs-custom">9.5. Customizing the generated target filesystem</a></span></dt><dt><span class="section"><a href="#customize-users">9.6. Adding custom user accounts</a></span></dt><dt><span class="section"><a href="#_customization_emphasis_after_emphasis_the_images_have_been_created">9.7. Customization <span class="emphasis"><em>after</em></span> the images have been created</a></span></dt><dt><span class="section"><a href="#customize-patches">9.8. Adding project-specific patches</a></span></dt><dt><span class="section"><a href="#customize-packages">9.9. Adding project-specific packages</a></span></dt><dt><span class="section"><a href="#_quick_guide_to_storing_your_project_specific_customizations">9.10. Quick guide to storing your project-specific customizations</a></span></dt></dl></dd><dt><span class="chapter"><a href="#_frequently_asked_questions_amp_troubleshooting">10. Frequently Asked Questions &amp; Troubleshooting</a></span></dt><dd><dl><dt><span class="section"><a href="#faq-boot-hang-after-starting">10.1. The boot hangs after <span class="emphasis"><em>Starting network…</em></span></a></span></dt><dt><span class="section"><a href="#faq-no-compiler-on-target">10.2. Why is there no compiler on the target?</a></span></dt><dt><span class="section"><a href="#faq-no-dev-files-on-target">10.3. Why are there no development files on the target?</a></span></dt><dt><span class="section"><a href="#faq-no-doc-on-target">10.4. Why is there no documentation on the target?</a></span></dt><dt><span class="section"><a href="#faq-why-not-visible-package">10.5. Why are some packages not visible in the Buildroot config menu?</a></span></dt><dt><span class="section"><a href="#faq-why-not-use-target-as-chroot">10.6. Why not use the target directory as a chroot directory?</a></span></dt><dt><span class="section"><a href="#faq-no-binary-packages">10.7. Why doesn’t Buildroot generate binary packages (.deb, .ipkg…)?</a></span></dt><dt><span class="section"><a href="#faq-speeding-up-build">10.8. How to speed-up the build process?</a></span></dt></dl></dd><dt><span class="chapter"><a href="#_known_issues">11. Known issues</a></span></dt><dt><span class="chapter"><a href="#legal-info">12. Legal notice and licensing</a></span></dt><dd><dl><dt><span class="section"><a href="#_complying_with_open_source_licenses">12.1. Complying with open source licenses</a></span></dt><dt><span class="section"><a href="#legal-info-list-licenses">12.2. License abbreviations</a></span></dt><dt><span class="section"><a href="#legal-info-buildroot">12.3. Complying with the Buildroot license</a></span></dt></dl></dd><dt><span class="chapter"><a href="#_beyond_buildroot">13. Beyond Buildroot</a></span></dt><dd><dl><dt><span class="section"><a href="#_boot_the_generated_images">13.1. Boot the generated images</a></span></dt><dt><span class="section"><a href="#_chroot">13.2. Chroot</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#_developer_guide">III. Developer guide</a></span></dt><dd><dl><dt><span class="chapter"><a href="#_how_buildroot_works">14. How Buildroot works</a></span></dt><dt><span class="chapter"><a href="#_coding_style">15. Coding style</a></span></dt><dd><dl><dt><span class="section"><a href="#writing-rules-config-in">15.1. <code class="literal">Config.in</code> file</a></span></dt><dt><span class="section"><a href="#writing-rules-mk">15.2. The <code class="literal">.mk</code> file</a></span></dt><dt><span class="section"><a href="#_the_documentation">15.3. The documentation</a></span></dt></dl></dd><dt><span class="chapter"><a href="#adding-board-support">16. Adding support for a particular board</a></span></dt><dt><span class="chapter"><a href="#adding-packages">17. Adding new packages to Buildroot</a></span></dt><dd><dl><dt><span class="section"><a href="#_package_directory">17.1. Package directory</a></span></dt><dt><span class="section"><a href="#_config_files">17.2. Config files</a></span></dt><dt><span class="section"><a href="#_the_literal_mk_literal_file">17.3. The <code class="literal">.mk</code> file</a></span></dt><dt><span class="section"><a href="#adding-packages-hash">17.4. The <code class="literal">.hash</code> file</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_packages_with_specific_build_systems">17.5. Infrastructure for packages with specific build systems</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_autotools_based_packages">17.6. Infrastructure for autotools-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_cmake_based_packages">17.7. Infrastructure for CMake-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_python_packages">17.8. Infrastructure for Python packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_luarocks_based_packages">17.9. Infrastructure for LuaRocks-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_perl_cpan_packages">17.10. Infrastructure for Perl/CPAN packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_virtual_packages">17.11. Infrastructure for virtual packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_packages_using_kconfig_for_configuration_files">17.12. Infrastructure for packages using kconfig for configuration files</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_rebar_based_packages">17.13. Infrastructure for rebar-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_waf_based_packages">17.14. Infrastructure for Waf-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_packages_building_kernel_modules">17.15. Infrastructure for packages building kernel modules</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_asciidoc_documents">17.16. Infrastructure for asciidoc documents</a></span></dt><dt><span class="section"><a href="#linux-kernel-specific-infra">17.17. Infrastructure specific to the Linux kernel package</a></span></dt><dt><span class="section"><a href="#hooks">17.18. Hooks available in the various build steps</a></span></dt><dt><span class="section"><a href="#_gettext_integration_and_interaction_with_packages">17.19. Gettext integration and interaction with packages</a></span></dt><dt><span class="section"><a href="#_tips_and_tricks">17.20. Tips and tricks</a></span></dt><dt><span class="section"><a href="#_conclusion">17.21. Conclusion</a></span></dt></dl></dd><dt><span class="chapter"><a href="#patch-policy">18. Patching a package</a></span></dt><dd><dl><dt><span class="section"><a href="#_providing_patches">18.1. Providing patches</a></span></dt><dt><span class="section"><a href="#patch-apply-order">18.2. How patches are applied</a></span></dt><dt><span class="section"><a href="#_format_and_licensing_of_the_package_patches">18.3. Format and licensing of the package patches</a></span></dt><dt><span class="section"><a href="#_integrating_patches_found_on_the_web">18.4. Integrating patches found on the Web</a></span></dt></dl></dd><dt><span class="chapter"><a href="#download-infra">19. Download infrastructure</a></span></dt><dt><span class="chapter"><a href="#debugging-buildroot">20. Debugging Buildroot</a></span></dt><dt><span class="chapter"><a href="#_contributing_to_buildroot">21. Contributing to Buildroot</a></span></dt><dd><dl><dt><span class="section"><a href="#_reproducing_analyzing_and_fixing_bugs">21.1. Reproducing, analyzing and fixing bugs</a></span></dt><dt><span class="section"><a href="#_analyzing_and_fixing_autobuild_failures">21.2. Analyzing and fixing autobuild failures</a></span></dt><dt><span class="section"><a href="#_reviewing_and_testing_patches">21.3. Reviewing and testing patches</a></span></dt><dt><span class="section"><a href="#_work_on_items_from_the_todo_list">21.4. Work on items from the TODO list</a></span></dt><dt><span class="section"><a href="#submitting-patches">21.5. Submitting patches</a></span></dt><dt><span class="section"><a href="#reporting-bugs">21.6. Reporting issues/bugs or getting help</a></span></dt></dl></dd><dt><span class="chapter"><a href="#DEVELOPERS">22. DEVELOPERS file and get-developers</a></span></dt></dl></dd><dt><span class="part"><a href="#_appendix">IV. Appendix</a></span></dt><dd><dl><dt><span class="chapter"><a href="#makedev-syntax">23. Makedev syntax documentation</a></span></dt><dt><span class="chapter"><a href="#makeuser-syntax">24. Makeusers syntax documentation</a></span></dt><dt><span class="chapter"><a href="#br2-external-converting">25. Converting old br2-external trees</a></span></dt></dl></dd></dl></div><div class="list-of-examples"><p><strong>List of Examples</strong></p><dl><dt>17.1. <a href="#idm45850067845360">Config script: <span class="emphasis"><em>divine</em></span> package</a></dt><dt>17.2. <a href="#idm45850067842432">Config script: <span class="emphasis"><em>imagemagick</em></span> package:</a></dt></dl></div><div class="preface"><div class="titlepage"><div><div><h1 class="title"><a id="idm45850074934640"></a></h1></div></div></div><p>Buildroot 2017.02.8 manual generated on 2017-11-27
-23:07:46 UTC from git revision d745e94683</p><p>The Buildroot manual is written by the Buildroot developers.
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>The Buildroot user manual</title><link rel="stylesheet" type="text/css" href="docbook-xsl.css" /><meta name="generator" content="DocBook XSL Stylesheets V1.79.1" /></head><body><div xml:lang="en" class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a id="idm46005312227344"></a>The Buildroot user manual</h1></div></div><hr /></div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="preface"><a href="#idm46005312226144"></a></span></dt><dt><span class="part"><a href="#_getting_started">I. Getting started</a></span></dt><dd><dl><dt><span class="chapter"><a href="#_about_buildroot">1. About Buildroot</a></span></dt><dt><span class="chapter"><a href="#requirement">2. System requirements</a></span></dt><dd><dl><dt><span class="section"><a href="#requirement-mandatory">2.1. Mandatory packages</a></span></dt><dt><span class="section"><a href="#requirement-optional">2.2. Optional packages</a></span></dt></dl></dd><dt><span class="chapter"><a href="#getting-buildroot">3. Getting Buildroot</a></span></dt><dt><span class="chapter"><a href="#_buildroot_quick_start">4. Buildroot quick start</a></span></dt><dt><span class="chapter"><a href="#community-resources">5. Community resources</a></span></dt></dl></dd><dt><span class="part"><a href="#_user_guide">II. User guide</a></span></dt><dd><dl><dt><span class="chapter"><a href="#configure">6. Buildroot configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#_cross_compilation_toolchain">6.1. Cross-compilation toolchain</a></span></dt><dt><span class="section"><a href="#_dev_management">6.2. /dev management</a></span></dt><dt><span class="section"><a href="#_init_system">6.3. init system</a></span></dt></dl></dd><dt><span class="chapter"><a href="#_configuration_of_other_components">7. Configuration of other components</a></span></dt><dt><span class="chapter"><a href="#_general_buildroot_usage">8. General Buildroot usage</a></span></dt><dd><dl><dt><span class="section"><a href="#make-tips">8.1. <span class="emphasis"><em>make</em></span> tips</a></span></dt><dt><span class="section"><a href="#full-rebuild">8.2. Understanding when a full rebuild is necessary</a></span></dt><dt><span class="section"><a href="#rebuild-pkg">8.3. Understanding how to rebuild packages</a></span></dt><dt><span class="section"><a href="#_offline_builds">8.4. Offline builds</a></span></dt><dt><span class="section"><a href="#_building_out_of_tree">8.5. Building out-of-tree</a></span></dt><dt><span class="section"><a href="#env-vars">8.6. Environment variables</a></span></dt><dt><span class="section"><a href="#_dealing_efficiently_with_filesystem_images">8.7. Dealing efficiently with filesystem images</a></span></dt><dt><span class="section"><a href="#_graphing_the_dependencies_between_packages">8.8. Graphing the dependencies between packages</a></span></dt><dt><span class="section"><a href="#_graphing_the_build_duration">8.9. Graphing the build duration</a></span></dt><dt><span class="section"><a href="#_graphing_the_filesystem_size_contribution_of_packages">8.10. Graphing the filesystem size contribution of packages</a></span></dt><dt><span class="section"><a href="#_integration_with_eclipse">8.11. Integration with Eclipse</a></span></dt><dt><span class="section"><a href="#_advanced_usage">8.12. Advanced usage</a></span></dt></dl></dd><dt><span class="chapter"><a href="#customize">9. Project-specific customization</a></span></dt><dd><dl><dt><span class="section"><a href="#customize-dir-structure">9.1. Recommended directory structure</a></span></dt><dt><span class="section"><a href="#outside-br-custom">9.2. Keeping customizations outside of Buildroot</a></span></dt><dt><span class="section"><a href="#customize-store-buildroot-config">9.3. Storing the Buildroot configuration</a></span></dt><dt><span class="section"><a href="#customize-store-package-config">9.4. Storing the configuration of other components</a></span></dt><dt><span class="section"><a href="#rootfs-custom">9.5. Customizing the generated target filesystem</a></span></dt><dt><span class="section"><a href="#customize-users">9.6. Adding custom user accounts</a></span></dt><dt><span class="section"><a href="#_customization_emphasis_after_emphasis_the_images_have_been_created">9.7. Customization <span class="emphasis"><em>after</em></span> the images have been created</a></span></dt><dt><span class="section"><a href="#customize-patches">9.8. Adding project-specific patches</a></span></dt><dt><span class="section"><a href="#customize-packages">9.9. Adding project-specific packages</a></span></dt><dt><span class="section"><a href="#_quick_guide_to_storing_your_project_specific_customizations">9.10. Quick guide to storing your project-specific customizations</a></span></dt></dl></dd><dt><span class="chapter"><a href="#_frequently_asked_questions_amp_troubleshooting">10. Frequently Asked Questions &amp; Troubleshooting</a></span></dt><dd><dl><dt><span class="section"><a href="#faq-boot-hang-after-starting">10.1. The boot hangs after <span class="emphasis"><em>Starting network…</em></span></a></span></dt><dt><span class="section"><a href="#faq-no-compiler-on-target">10.2. Why is there no compiler on the target?</a></span></dt><dt><span class="section"><a href="#faq-no-dev-files-on-target">10.3. Why are there no development files on the target?</a></span></dt><dt><span class="section"><a href="#faq-no-doc-on-target">10.4. Why is there no documentation on the target?</a></span></dt><dt><span class="section"><a href="#faq-why-not-visible-package">10.5. Why are some packages not visible in the Buildroot config menu?</a></span></dt><dt><span class="section"><a href="#faq-why-not-use-target-as-chroot">10.6. Why not use the target directory as a chroot directory?</a></span></dt><dt><span class="section"><a href="#faq-no-binary-packages">10.7. Why doesn’t Buildroot generate binary packages (.deb, .ipkg…)?</a></span></dt><dt><span class="section"><a href="#faq-speeding-up-build">10.8. How to speed-up the build process?</a></span></dt></dl></dd><dt><span class="chapter"><a href="#_known_issues">11. Known issues</a></span></dt><dt><span class="chapter"><a href="#legal-info">12. Legal notice and licensing</a></span></dt><dd><dl><dt><span class="section"><a href="#_complying_with_open_source_licenses">12.1. Complying with open source licenses</a></span></dt><dt><span class="section"><a href="#legal-info-list-licenses">12.2. License abbreviations</a></span></dt><dt><span class="section"><a href="#legal-info-buildroot">12.3. Complying with the Buildroot license</a></span></dt></dl></dd><dt><span class="chapter"><a href="#_beyond_buildroot">13. Beyond Buildroot</a></span></dt><dd><dl><dt><span class="section"><a href="#_boot_the_generated_images">13.1. Boot the generated images</a></span></dt><dt><span class="section"><a href="#_chroot">13.2. Chroot</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#_developer_guide">III. Developer guide</a></span></dt><dd><dl><dt><span class="chapter"><a href="#_how_buildroot_works">14. How Buildroot works</a></span></dt><dt><span class="chapter"><a href="#_coding_style">15. Coding style</a></span></dt><dd><dl><dt><span class="section"><a href="#writing-rules-config-in">15.1. <code class="literal">Config.in</code> file</a></span></dt><dt><span class="section"><a href="#writing-rules-mk">15.2. The <code class="literal">.mk</code> file</a></span></dt><dt><span class="section"><a href="#_the_documentation">15.3. The documentation</a></span></dt></dl></dd><dt><span class="chapter"><a href="#adding-board-support">16. Adding support for a particular board</a></span></dt><dt><span class="chapter"><a href="#adding-packages">17. Adding new packages to Buildroot</a></span></dt><dd><dl><dt><span class="section"><a href="#_package_directory">17.1. Package directory</a></span></dt><dt><span class="section"><a href="#_config_files">17.2. Config files</a></span></dt><dt><span class="section"><a href="#_the_literal_mk_literal_file">17.3. The <code class="literal">.mk</code> file</a></span></dt><dt><span class="section"><a href="#adding-packages-hash">17.4. The <code class="literal">.hash</code> file</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_packages_with_specific_build_systems">17.5. Infrastructure for packages with specific build systems</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_autotools_based_packages">17.6. Infrastructure for autotools-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_cmake_based_packages">17.7. Infrastructure for CMake-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_python_packages">17.8. Infrastructure for Python packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_luarocks_based_packages">17.9. Infrastructure for LuaRocks-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_perl_cpan_packages">17.10. Infrastructure for Perl/CPAN packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_virtual_packages">17.11. Infrastructure for virtual packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_packages_using_kconfig_for_configuration_files">17.12. Infrastructure for packages using kconfig for configuration files</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_rebar_based_packages">17.13. Infrastructure for rebar-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_waf_based_packages">17.14. Infrastructure for Waf-based packages</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_packages_building_kernel_modules">17.15. Infrastructure for packages building kernel modules</a></span></dt><dt><span class="section"><a href="#_infrastructure_for_asciidoc_documents">17.16. Infrastructure for asciidoc documents</a></span></dt><dt><span class="section"><a href="#linux-kernel-specific-infra">17.17. Infrastructure specific to the Linux kernel package</a></span></dt><dt><span class="section"><a href="#hooks">17.18. Hooks available in the various build steps</a></span></dt><dt><span class="section"><a href="#_gettext_integration_and_interaction_with_packages">17.19. Gettext integration and interaction with packages</a></span></dt><dt><span class="section"><a href="#_tips_and_tricks">17.20. Tips and tricks</a></span></dt><dt><span class="section"><a href="#_conclusion">17.21. Conclusion</a></span></dt></dl></dd><dt><span class="chapter"><a href="#patch-policy">18. Patching a package</a></span></dt><dd><dl><dt><span class="section"><a href="#_providing_patches">18.1. Providing patches</a></span></dt><dt><span class="section"><a href="#patch-apply-order">18.2. How patches are applied</a></span></dt><dt><span class="section"><a href="#_format_and_licensing_of_the_package_patches">18.3. Format and licensing of the package patches</a></span></dt><dt><span class="section"><a href="#_integrating_patches_found_on_the_web">18.4. Integrating patches found on the Web</a></span></dt></dl></dd><dt><span class="chapter"><a href="#download-infra">19. Download infrastructure</a></span></dt><dt><span class="chapter"><a href="#debugging-buildroot">20. Debugging Buildroot</a></span></dt><dt><span class="chapter"><a href="#_contributing_to_buildroot">21. Contributing to Buildroot</a></span></dt><dd><dl><dt><span class="section"><a href="#_reproducing_analyzing_and_fixing_bugs">21.1. Reproducing, analyzing and fixing bugs</a></span></dt><dt><span class="section"><a href="#_analyzing_and_fixing_autobuild_failures">21.2. Analyzing and fixing autobuild failures</a></span></dt><dt><span class="section"><a href="#_reviewing_and_testing_patches">21.3. Reviewing and testing patches</a></span></dt><dt><span class="section"><a href="#_work_on_items_from_the_todo_list">21.4. Work on items from the TODO list</a></span></dt><dt><span class="section"><a href="#submitting-patches">21.5. Submitting patches</a></span></dt><dt><span class="section"><a href="#reporting-bugs">21.6. Reporting issues/bugs or getting help</a></span></dt></dl></dd><dt><span class="chapter"><a href="#DEVELOPERS">22. DEVELOPERS file and get-developers</a></span></dt></dl></dd><dt><span class="part"><a href="#_appendix">IV. Appendix</a></span></dt><dd><dl><dt><span class="chapter"><a href="#makedev-syntax">23. Makedev syntax documentation</a></span></dt><dt><span class="chapter"><a href="#makeuser-syntax">24. Makeusers syntax documentation</a></span></dt><dt><span class="chapter"><a href="#br2-external-converting">25. Converting old br2-external trees</a></span></dt></dl></dd></dl></div><div class="list-of-examples"><p><strong>List of Examples</strong></p><dl><dt>17.1. <a href="#idm46005305137504">Config script: <span class="emphasis"><em>divine</em></span> package</a></dt><dt>17.2. <a href="#idm46005305134576">Config script: <span class="emphasis"><em>imagemagick</em></span> package:</a></dt></dl></div><div class="preface"><div class="titlepage"><div><div><h1 class="title"><a id="idm46005312226144"></a></h1></div></div></div><p>Buildroot 2017.02.9 manual generated on 2018-01-01
+11:25:52 UTC from git revision 8f03647169</p><p>The Buildroot manual is written by the Buildroot developers.
 It is licensed under the GNU General Public License, version 2. Refer to the
 <a class="ulink" href="http://git.buildroot.org/buildroot/tree/COPYING" target="_top">COPYING</a> file in the Buildroot
 sources for the full text of this license.</p><p>Copyright © 2004-2017 The Buildroot developers</p><div class="informalfigure"><div class="mediaobject"><img src="logo.png" alt="logo.png" /></div></div></div><div class="part"><div class="titlepage"><div><div><h1 class="title"><a id="_getting_started"></a>Part I. Getting started</h1></div></div></div><div class="chapter"><div class="titlepage"><div><div><h2 class="title"><a id="_about_buildroot"></a>Chapter 1. About Buildroot</h2></div></div></div><p>Buildroot is a tool that simplifies and automates the process of
@@ -16,8 +16,8 @@ processors everyone is used to having in his PC. They can be PowerPC
 processors, MIPS processors, ARM processors, etc.</p><p>Buildroot supports numerous processors and their variants; it also
 comes with default configurations for several boards available
 off-the-shelf. Besides this, a number of third-party projects are based on,
-or develop their BSP <a href="#ftn.idm45850070437504" class="footnote" id="idm45850070437504"><sup class="footnote">[1]</sup></a> or
-SDK <a href="#ftn.idm45850071030832" class="footnote" id="idm45850071030832"><sup class="footnote">[2]</sup></a> on top of Buildroot.</p><div class="footnotes"><br /><hr style="width:100; text-align:left;margin-left: 0" /><div id="ftn.idm45850070437504" class="footnote"><p><a href="#idm45850070437504" class="simpara"><sup class="simpara">[1] </sup></a>BSP: Board Support Package</p></div><div id="ftn.idm45850071030832" class="footnote"><p><a href="#idm45850071030832" class="simpara"><sup class="simpara">[2] </sup></a>SDK: Software Development Kit</p></div></div></div><div class="chapter"><div class="titlepage"><div><div><h2 class="title"><a id="requirement"></a>Chapter 2. System requirements</h2></div></div></div><p>Buildroot is designed to run on Linux systems.</p><p>While Buildroot itself will build most host packages it needs for the
+or develop their BSP <a href="#ftn.idm46005308909984" class="footnote" id="idm46005308909984"><sup class="footnote">[1]</sup></a> or
+SDK <a href="#ftn.idm46005309601984" class="footnote" id="idm46005309601984"><sup class="footnote">[2]</sup></a> on top of Buildroot.</p><div class="footnotes"><br /><hr style="width:100; text-align:left;margin-left: 0" /><div id="ftn.idm46005308909984" class="footnote"><p><a href="#idm46005308909984" class="simpara"><sup class="simpara">[1] </sup></a>BSP: Board Support Package</p></div><div id="ftn.idm46005309601984" class="footnote"><p><a href="#idm46005309601984" class="simpara"><sup class="simpara">[2] </sup></a>SDK: Software Development Kit</p></div></div></div><div class="chapter"><div class="titlepage"><div><div><h2 class="title"><a id="requirement"></a>Chapter 2. System requirements</h2></div></div></div><p>Buildroot is designed to run on Linux systems.</p><p>While Buildroot itself will build most host packages it needs for the
 compilation, certain standard Linux utilities are expected to be
 already installed on the host system. Below you will find an overview of
 the mandatory and optional packages (note that package names may vary
@@ -272,7 +272,7 @@ processor. Under most Linux systems, the compilation toolchain uses
 the GNU libc (glibc) as the C standard library. This compilation
 toolchain is called the "host compilation toolchain". The machine on
 which it is running, and on which you’re working, is called the "host
-system" <a href="#ftn.idm45850069277616" class="footnote" id="idm45850069277616"><sup class="footnote">[3]</sup></a>.</p><p>The compilation toolchain is provided by your distribution, and
+system" <a href="#ftn.idm46005306570000" class="footnote" id="idm46005306570000"><sup class="footnote">[3]</sup></a>.</p><p>The compilation toolchain is provided by your distribution, and
 Buildroot has nothing to do with it (other than using it to build a
 cross-compilation toolchain and other tools that are run on the
 development host).</p><p>As said above, the compilation toolchain that comes with your system
@@ -551,7 +551,7 @@ The third solution is <span class="strong"><strong>systemd</strong></span>. <cod
    <a class="ulink" href="http://www.freedesktop.org/wiki/Software/systemd" target="_top">http://www.freedesktop.org/wiki/Software/systemd</a>.
 </li></ul></div><p>The solution recommended by Buildroot developers is to use the
 <span class="strong"><strong>BusyBox init</strong></span> as it is sufficient for most embedded
-systems. <span class="strong"><strong>systemd</strong></span> can be used for more complex situations.</p></div><div class="footnotes"><br /><hr style="width:100; text-align:left;margin-left: 0" /><div id="ftn.idm45850069277616" class="footnote"><p><a href="#idm45850069277616" class="simpara"><sup class="simpara">[3] </sup></a>This terminology differs from what is used by GNU
+systems. <span class="strong"><strong>systemd</strong></span> can be used for more complex situations.</p></div><div class="footnotes"><br /><hr style="width:100; text-align:left;margin-left: 0" /><div id="ftn.idm46005306570000" class="footnote"><p><a href="#idm46005306570000" class="simpara"><sup class="simpara">[3] </sup></a>This terminology differs from what is used by GNU
 configure, where the host is the machine on which the application will
 run (which is usually the same as target)</p></div></div></div><div class="chapter"><div class="titlepage"><div><div><h2 class="title"><a id="_configuration_of_other_components"></a>Chapter 7. Configuration of other components</h2></div></div></div><p>Before attempting to modify any of the components below, make sure you
 have already configured Buildroot itself, and have enabled the
@@ -2673,7 +2673,7 @@ flags.
 The argument to be given to <code class="literal">LIBFOO_CONFIG_SCRIPTS</code> is the file name(s)
 of the shell script(s) needing fixing. All these names are relative to
 <span class="emphasis"><em>$(STAGING_DIR)/usr/bin</em></span> and if needed multiple names can be given.</p><p>In addition, the scripts listed in <code class="literal">LIBFOO_CONFIG_SCRIPTS</code> are removed
-from <code class="literal">$(TARGET_DIR)/usr/bin</code>, since they are not needed on the target.</p><div class="example"><a id="idm45850067845360"></a><p class="title"><strong>Example 17.1. Config script: <span class="emphasis"><em>divine</em></span> package</strong></p><div class="example-contents"><p>Package divine installs shell script <span class="emphasis"><em>$(STAGING_DIR)/usr/bin/divine-config</em></span>.</p><p>So its fixup would be:</p><pre class="screen">DIVINE_CONFIG_SCRIPTS = divine-config</pre></div></div><br class="example-break" /><div class="example"><a id="idm45850067842432"></a><p class="title"><strong>Example 17.2. Config script: <span class="emphasis"><em>imagemagick</em></span> package:</strong></p><div class="example-contents"><p>Package imagemagick installs the following scripts:
+from <code class="literal">$(TARGET_DIR)/usr/bin</code>, since they are not needed on the target.</p><div class="example"><a id="idm46005305137504"></a><p class="title"><strong>Example 17.1. Config script: <span class="emphasis"><em>divine</em></span> package</strong></p><div class="example-contents"><p>Package divine installs shell script <span class="emphasis"><em>$(STAGING_DIR)/usr/bin/divine-config</em></span>.</p><p>So its fixup would be:</p><pre class="screen">DIVINE_CONFIG_SCRIPTS = divine-config</pre></div></div><br class="example-break" /><div class="example"><a id="idm46005305134576"></a><p class="title"><strong>Example 17.2. Config script: <span class="emphasis"><em>imagemagick</em></span> package:</strong></p><div class="example-contents"><p>Package imagemagick installs the following scripts:
 <span class="emphasis"><em>$(STAGING_DIR)/usr/bin/{Magick,Magick++,MagickCore,MagickWand,Wand}-config</em></span></p><p>So it’s fixup would be:</p><pre class="screen">IMAGEMAGICK_CONFIG_SCRIPTS = \
    Magick-config Magick++-config \
    MagickCore-config MagickWand-config Wand-config</pre></div></div><br class="example-break" /><p>On line 14, we specify the list of dependencies this package relies
@@ -4601,7 +4601,7 @@ large number of commits in the series;
 </li><li class="listitem">
 deep impact of the changes in the rest of the project;
 </li><li class="listitem">
-RFC <a href="#ftn.idm45850066611568" class="footnote" id="idm45850066611568"><sup class="footnote">[4]</sup></a>;
+RFC <a href="#ftn.idm46005303907696" class="footnote" id="idm46005303907696"><sup class="footnote">[4]</sup></a>;
 </li><li class="listitem">
 whenever you feel it will help presenting your work, your choices,
   the review process, etc.
@@ -4683,7 +4683,7 @@ pastebin service. Note that not all available pastebin services will
 preserve Unix-style line terminators when downloading raw pastes.
 Following pastebin services are known to work correctly:
 - <a class="ulink" href="https://gist.github.com/" target="_top">https://gist.github.com/</a>
-- <a class="ulink" href="http://code.bulix.org/" target="_top">http://code.bulix.org/</a></p></div><div class="footnotes"><br /><hr style="width:100; text-align:left;margin-left: 0" /><div id="ftn.idm45850066611568" class="footnote"><p><a href="#idm45850066611568" class="simpara"><sup class="simpara">[4] </sup></a>RFC: (Request for comments) change proposal</p></div></div></div><div class="chapter"><div class="titlepage"><div><div><h2 class="title"><a id="DEVELOPERS"></a>Chapter 22. DEVELOPERS file and get-developers</h2></div></div></div><p>The main Buildroot directory contains a file named <code class="literal">DEVELOPERS</code> that
+- <a class="ulink" href="http://code.bulix.org/" target="_top">http://code.bulix.org/</a></p></div><div class="footnotes"><br /><hr style="width:100; text-align:left;margin-left: 0" /><div id="ftn.idm46005303907696" class="footnote"><p><a href="#idm46005303907696" class="simpara"><sup class="simpara">[4] </sup></a>RFC: (Request for comments) change proposal</p></div></div></div><div class="chapter"><div class="titlepage"><div><div><h2 class="title"><a id="DEVELOPERS"></a>Chapter 22. DEVELOPERS file and get-developers</h2></div></div></div><p>The main Buildroot directory contains a file named <code class="literal">DEVELOPERS</code> that
 lists the developers involved with various areas of Buildroot. Thanks
 to this file, the <code class="literal">get-developer</code> tool allows to:</p><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
 Calculate the list of developers to whom patches should be sent, by
diff --git a/bsp/buildroot/docs/manual/manual.pdf b/bsp/buildroot/docs/manual/manual.pdf
index 792746e8fc30489f1ac8d292b38077cf198c9495..d03ffc300d6b09195308fad3da585e92cd495519 100644
GIT binary patch
delta 7547
zcmc(E2T&Bt*Dn%Wa#AuZut?51h=`JO1<65)3m1{NfJ+VoEIA1xL86KzNsCC1OH@=q
zkn9p9EICUKZ_#`2=l`qk)vJ2-s$TVUPoFct^E+p1dQNxGtTurUn!qSAp-VDJ;zEMJ
zJ@|wedGoRH;$wnJ=-rgRevVpEj8mA`)J1TvamLLXq}kX8maMeoIPrgZmd7ZjjCVKc
z<e*<e*^%%u*!=3(u{?u2Fz!NSwXoXO+v3-flb*eNtr}D7J#ZH)-@$+^`ZPQ~nW0i(
zTJD_k1yzz1@#AP!0`&a49GXXt!vwng4A8oBGma_i^}gCJ7i68DdaU4$oE>Ya%-0{6
zbe1N|Xr?vi7k#$BbKJ+%=gG9lE&qxoJ{t<h3+JX$I@JAnHL^pwLg6uNV5I)*+PjfF
zS?3+*!~*5-TQZzjgG_>*VRP{v=+L-Ut2n1|@s%F){j4$AJe^o#-S{^->Jhc&x4J;=
zsk|FEm4oMkV<NO8f5)q@bjc6nJ-gNUX_6q)CTM`+88vui+{I&J=GqszsPZF~Z{sD1
zL9HvU!~M?(jW-f)6<g|dICtzHR<$&-fz1m?Zu-W0-R<F^x;r6;zpuIFxI!q{8?a)D
zsIoDHBN6->!?AxcMQyUJy{Dpis3`(eYS&Daxh$Z+R6-On1pNxsqf&ky`myV){bdM-
zv#-?}lS4Y7@Lk{41!LmMq28~dqhd<_%TMe)GpHjiA65pE;_W|AV(aF(r{UncQ#y2f
z%ue+XxCiOEw(uZaPoN@HN5^@D9-i^@Qb!Tpm+#fedpB8*SmHaGIY@0?{(6Ey8j3_1
zid@1~d|V~KRYF`P!qv+)h9V#zJw7=xaWQdmaS0i5iHH28qFV63RAC5P4n9={2{G|M
zF4pV?fh_U$#MPw5Zru`-mb@h?r6MLJFMnG_OhQ~rQbIyZOj1={O^HMC{|GTB71gwL
zu|quOkdYS`Pnz-M1K1|)3%Se#r`*`gF%!o}yUiPznxU1ofT`4p<K_)#Yl#<f#LP$=
ziHf+qge87OG(C*CLq^<pmNPK16JHWc#F|0PtBL5;gajusg)w%^@%3p&C#Y)f9=061
zFB=u5?3`xl8)Cl+UnLF8p(hKo=A=tGJq^)=h9P*Nc?NudP_$l!N!r9i(iow5e&HZn
zdR{B~&*Ac73=3#~6Ff3bPZVQHtKI>=wecqyQAwyFig~#8p$RAhM&=aejH2n%e|7Lh
z4*L^@zAF;^ReS(TSP7#M3Qk6mP_}V-Q*O-65+e^$)JCo9qvU>8q?GN_wPgD<6_TTr
z*R6P0L+%2j6t<%TelYgc2m)8?{Ap^|a4y%Y@n|=>OT05zGs7ia>3h*WwRj9Ov}WOg
zu5@K+kF@X!*DEr4Z5>{@_u+*feahBUDs=oGhRCBxW!hXu367`nGJ^$OLEzYaA!QmK
z^!S2}H!0U88+{_awmV}c&h(#y^H5CH7trn*fVDAngll&#Z^Q1?2ZcwEri~261UI-+
zt+x|+6F=oJQwlEFB+qUq^Cl^umTnBL*`%Co2QlUq^&2K(2-O&ow6VypZ$oMI%=*SQ
z%MP06r3J-55mnh`!-H|v9)fiAXTGaaB09;tUctUgmLVCgEZ|lyZ+uZJghQUBjTj3+
z-)3z>Rx`t?h-BC#RX2X%AOsCNof6?I4b~ls(-sLcL|u|WQ_5Y+jf^)o3R?B_z%yr4
zHU{+%T|)fore>E>zAPqKT*j+c2r3)KVDQodysj)>tyc&uyZ@?Kf6*b({7ZT9p@(!!
z*}}-sNqxGd@y^P>O5jgzm%Jm~e66&&$)l>KjAzU|fs_TfDiB}Wn&ip=Zs(JqZE`aq
ze_K?;M%n6COA+{$CG3&4FL@VkT!c}eNcLKFYw>GlNMfyJbaN=4z-~B&esN_yDN%Ar
zy;7&;-q7d#Y$LqkB@@Df%N%pZSax724&ed((f_lHVR^~2G>P8?HTGL^xCn{`G%#5|
zZu*b-JI1}?p<hb<74W^VwHA75rJlJGZ9&`s2(NSnm$gc#g-2|%TC_QOljS<(41tk8
zD2lx{PE_%pS}i$MtHn4Rm}ZM*9$cM&VkKP?mf^~t-MW}iS$vNJza)2Y8C(z7gY_-f
zGM=jMH%)rhHRvF&vg^a9`fBw7Fs1}J^U5^{adUloq?kg=dk!(uY!yl)cyg=zRDK<q
zo0)wqQT@dDxREjCHmkF=(7muv4K`Qy8~ci_giDY=QDnn!+7`Eg=iljXHV6k!;+w))
zoFdpzS7cgU_>g{!*d`R!UOQ8oW|&_Klb;fvOJxpKu-_W?&$q(}aNEO9<7aAxVJEB$
zu(($wxOn>VnGdr|t5z*h%?xF26VMD=-^yWcy;7S-%1+;z&E95HOFl9~q^K2Ee!?N+
z16;ls)^7KN1)4O&%FAN3CflwbSe3R=sP{br4)5tg0+mmKmM#qvP{|O~gAi0EY_YUk
zUI1%L<isBS=BngNKNNW(o6y}bxW91qmEhp#<VJ6AKGi@<x1I$ZT&hA26>XMobchnO
zd5186=n6W$geB+&=}C;HkWQUJorLfKf;}9o`m^)-PbQq?1oDjiH>@5hk68f%{@6a7
zD^!n>D!l^WE>$ZId;%KA$W~>-%MdZ@V6=TgKKeld^3oQ81BlBOc;1~I#ry%SOnLb^
z#heuf2*;{Qp}s%<qP$x)6o!*&7+sY%SLLX~(fS-d)4J}hXVct`?t8kx><Q(h51160
zTYcW{P08-P&g%cZO>$t65d1tl9_<Ys0VIutkPnJBleSDUaibdiIf4j9O^>!V!M`^{
zW^!o)<^x^I=`1s9b1)%rgt3)G;9dopcKT7$2`gUKa5jG7gU-<$-o^skQ6fKBOLQ86
zTQ3MkN{QB$yF4;|2Y?ozyR9zEWd<b$vM>aY-fw>(2g1(an}yzUWh!fv`W~d=dLu9E
zT+*{#(9f65rQN(1v_JDoMZKvpqMM&>jQ*w{KG-Zr35ngrw`dderhrciQ%}WWu~ht7
z#}=z$J3N>#70;XZAlV5|TR$9PTCT)g5hFA68LafuKb4k;1MZV^jURoIc6hK_y&0LZ
z@^I+=C-SJNHw{Z9%}e9y7n<LY!JUAl1D-9d9~m98QScs}C!k2>q^11SV4Mz4h*MjT
zr5~dkZv72<Hh8W1BSO-GE<S(vhw<!o6g->o!a<XnR1}<c>RR(%{|hAWi!ZOphfVb*
zKmOk#_^R3ejp$lve||RpMULW?z5C>whL4EBhAsnx(c<R<H{;h9T?R1ZnA?N9Kfawj
zo+Y%=32{rq6IIZkG|68GDL5)RoW|HXaC!&7ct}2Jo!>~U6>#a3m3&E1GK$owo!LaN
z(^2mT&^U)!pne!S20&YmB<N*v^AzFayZq{){pccR6q{%3{mn9QX%Y*${GMrNCkN40
z<f$tjW!qKOkakzX_%`uPT3HYL`)&Mk6n4`>-kli=R1DJ)@2@ZF$&IH4%#bT$6tb-i
z{ojN)Z%cWA*4u8>QdvC92ZzY!6?IR0*e~+~ib(Gka!FCWqpF;!w|+#4NZC#LNwnVq
zUdM=&nN7>Wd^HcgG)-ZYvKFDkR@-&iyq1I0(X<2RE$JVQ9V2OFU$mEM04143<T%5(
zXlUFi^Re`v<Lbz0d1;sj3cOhM)qM7yy0bHa>!2woE-P9&?sQy+s;peGvg?y9R+<@b
zEE!feKV=8UTYk8Ob8%r=VVT>Y?iIJrjFEor0Mb7iEboSomD5;qHLLr_{q~$WB3JHa
zG27@lrq*q{Wz>*90K}%A{p-8J(x#;=@ZVs5W4nCfcG6P@c;B*5s-L2%QoDj1)kc8P
z{~$i*r+a#aWqfK?--ocY*>J2s)h#%m4>tJ}XgRU*WQ@1D&&Lw8U$w5(62N?1vX`2-
z3*>ae<u?W~*qT0gPS@GELFRr;1qmh~|2RY6?d#zI%g0k^2MNy}Q$RyN<aocrNapC<
zUeTH(CLr*5b-xN&Y8KnQyPou&w@%wVXQ){QQ&6q#oHMRe72t6EZLewx=PB@b?&rsq
zdv^gqz~#g~lWZ$st+CG`r}1pa;5(CW9?ov+jLqiiR*hd#?FPGQ)KqggE}RRNz`~*Y
zW2rrx>Bvt?sR1I#W_vgDe;A)7&BRM`Gm_lc|5RaR5?Uvg9gRI#IdR5+bW0IiVw_H;
zo1PjycrH+FiWg%=A`~WS#UvC#hoUt?JBUrYKVs8tmmW=s-e>5zFWbg5N^WW;=!9HD
z5qP$Vq=jO1!f&7$_RxWHc)zj?EOjgt1O_gD4{dP0L6-yE5ZR;;ojcxSRL{4ZjH#lU
zPUPgbc^Id&b&c*OYgCo?j67~V^lJo0-l}*S$dYSHa>s>{&k;4n_~I<9ylY%uS<S{s
z!01f<M2nGmCuryLM+z0kizA;!Q#Q>-3}aP~Mj)3i58@PV-IFipd|3ouQ_O6$tmtn!
zo=e5kJIbeS#Dlm}H{(H&i-rnNt#f0$*1(BRLGxH=xHc;q*yx*my>V%fVm2wRUl<g}
ztL)yMX4~#+JF6yec9eU-gpFftnrlS+Aa^cf<DOpTCrfxqY@>tU?v;egZI9Yn)5vzL
zl!Su9P{ia1TH(<nMF*u`702A0L_)}UD>H;UcS*Q3ihdaFJ4%dO#{!u$?-m)7^@|QP
zj@Rnksj`{W5cxN{7ny?A9(+BXw$p%_3Y@L8choV4XMQJXu%h);VcKi87zG`p)8^-H
zrG==tGFs0`din~{0p}oHiE4R!Da1B;X4n%~ut=*~En(^msacq#D_i~y?lG8JwIa4D
z8Ktuj!Aau8r+DBtfJ+ST`XOO#+x@qhAOA?>jmUlKsy$tm?`d5kigCV=swC<`ClhrQ
zd;)a3MUhZ70|7z<)jY_*(rZ1M<mf`2%G#v%_5(E`fmP#_H`ZQStSV4}u3<rZy$3d*
z2e=LX%7w5bdlVf^0WvZ&Cl)lx0M4koP3C0-godtH5MeBn_v8F9@I;ePz|6?Apu%S=
zw&mk3HA(?@okV0btHIn$2#8L;@WU;&T7g}I_%{{OH8!B`RzhWNTEV|B{14dQsva$+
z&!PrtWz?2+SzVs~vXuPvO@+WQ$bNM*_aH+I$K4jl{WkuT^q6i>aMgIU9Ayb>X$w^A
z>#t1B&VHrg^>p2WKh7|<i!{*h+uoysij~w^IAZ_Kdg6Ee*``DL)vaukPd?hl{kaX@
zaBb24!F)f>{j~KZQs1`zLAu?=^{t87#sW&;3#B;5re4GO={qohY%;fBJx!Lwt)6o$
z3V8hd21ch&l1<PKPy4~IZrt|6*`jdnYFFLHaD<N#z9oAmYZc=*RoxCxhrq=*jQsvf
z0Z;!_8(N6XuwP|x=^!D|6E)kOz*!^qYgg?@aa`g}v`yfu8xA<W!ZqEA+-ePHU?a=t
z8Da6ugf1l(*o!og+ax?z^l8u+*#tcI^0B{mVYn?-I5+BQbC4~H)hNGW0VCH%Z<5t@
zHbZ6YMo~f_DLt4E%m4CCQ@edwYEL^*q<Z4=1PrtqYA!~?<C6dBkAx5`|8j}Tl{~(k
zM2@6jS}Kh*T?rt=PAi%P#ki7)v>Vo59+}A>%S)@NPwZ;O#8tKsd9|(%?BeDvs%cKe
zknYW^+2|+Umqcgi8pCBb>Dz2Srv|v1X%y?5V&Az?mMS^C0*0dKieZqr)0sSzxtjaV
zSwjlN9!4uA!w*U;AKF#*I{dA8)VnMQOUBbT<(Jhqw##qki95~M=m<V2&1fjb9o?R$
z!T(qu7Ha2LY@EBLiYI}%030=n?)v-%^|(Tnhr`OZ;i6J~Q`s65Y)vmbYpULA7_OX_
zU+r>KaUm+Scm%GT3?G*6m||;O(%;>8&ze*C=<#gj+Q{9qBs1Q+--@3JPSJz?r>eb(
zUW8H#bb_*DN(z%XZZ`NuzOQ?5^l1x&<5KTM0e+wUY+v+xFv)+EFRnAn$k6$sQ4iFM
z#iMaNW!zZAALaEk#||9qzm+=mOv$X`S0^R{U)Va(oxCHNPxf|D+Fsx*&6(K$p#cA(
zL|`@lHwFGayO8tQ4i(tR`u35zKxyQo1YoxY{~BLN(YQ7@V+2VWQ6-G>Gf`z-&O$rB
z32}^-xKME3uN;ZGm}(-sORG?n!|mY)zDM0|Mz}<&iOx3=C<h|xOwk701%J*sRy~J<
zN~2UDbmLBeN)h6*qNguod@F8++dV^=8LIDkxfe}TOO~p)v?^;Ox=?Y`JZ#04z@<&N
zmcnaVNip272yrU7WjZ*O14io;-_X`uTCXxWCb!m`oIBu6n$1y4V12SoUTtX7kN_<Q
z&OeKehgR1)JsDeg_r*5jlT50!$b?k2z0=@meub7zMwd*SGxIOSvCzwZ0cO7}Ch=Hc
z*EUQ=f0U%z!|&#`oN>_C{b^S{K5uZeoYT=|hU1eQT__CTNDg$dD@lI#H|a-5AZdiB
zd`&Q12I-t5@jjrnUnv`!<I+WG;#@i2OxW!9_{rE_oXW4T;>SnymmH@eb95*2tF@d>
zA>;c&bDo;+okX~=3YP<8bV5eavj#`%(X=1e7^bgB%V3<@_1_0*evPMMZ2R18aCG)D
zge|t6@N<Z5g5FZinZ$5!xH#}%vl~59n=eH)OmzAZZc*z>m{KsX(G+{5JVg59xn0Ih
zZdQ^`!KKtHlm8@xhF7?cF#oZJ{WlY223NXL{ykmEuxjPqJkT{8rmH0#nO4wjr>G^u
z&WI?6UN71$2S&Q!8@CPuo<jj&&a=I=ceRsGH-(bVFe5gdxXe&KL(v%KwF&k=(&K)s
z;4lb0O0e;i4n8n=P}-woNca|_Ll-Q7HMIO}AYblok(C2IKW^!yTrAr*HBW<{|Mc6E
z-77XTO3fQMmtzA=DOZih$_LDU65UT;7f2ndD%za~&ST=n%4sdRo1y;62Lf9|i92;!
z2TB@h23`+iRo+=<y=S!J#vgj8hA!#3<x$>QNB}ELpI;|-HH5qc33m}is|^*9XVpF)
zD+E_C(z#uYe-PV~n7T|7qYJyOf5TQ>K-c}PosfEGwD!-;&O)cXVg{jbJo~p6?-=z|
z-}-i11Cg|EmZf8KwFV4+TF7vb8z#Q>ozEs2Y%^?fPCQ*^t98_cyu}G{UFch8JHrtP
zF8Lu14o68G{DHyGqRupH-^+c%T?Kl2#sT)?(29?aF%l2rPMfM2Z^j^3ydPa_V77A@
zebgl$o@;gX?LBrCwq4T=6|i1RT41u1HgE*m-D1)|>CjQxJwTACD20db*!lNKUxUl_
zy<TCHxUmb{jop*E8Z!fl5wPP^QDNumd)%RNW28S86PwPuOcL=)_{hwOuSdml`g7sl
zD@7_}({J?=Z8xQa6x+Y*bVaNPFB63yRn4f!gi_l2*N(lOwB}oEFQp%2cVJdY%=!8e
zAXf|I+m?JSarN-khrY$waLCQ8hfH<M(I+}{cDu$ZiR{rQvDB2mKu1-tK2WIzs#{0=
z0-a9j%;9=mlfOZM?u@{d!xttr*QpPgPM5^udA21hQstx*bKIyHyF4OKG+8A?9^y!Q
z+6y@obE0-)mSaDx08J6P`!t8OY1DLyBcG_+9aNRd6d}}!Ub2kp7LaXSEt;~(#)dAj
zAB>4l6_PP9)k%yk?hYdTiK!29g85^<ZJaPldm&&PE`*aiYnfAgZ?@bd?Vbd3L0Sxp
zh-nUmq1=%l;6~{|ktaNPW7LULg;ETVZI<T?fQo8h)4=V>59Rs~$!QL&p!YZ-E$a46
zs&mGIr8u-ep0a9Sp56%r!amWt&b9q1`G*-~yJApoEAoT^>XuA%D2FUejXa^vW1~)d
zI*1{nIaGr-a6;HeszH!#vgdoZRFwpN;Hl1G`L%Fehcz)=myazh(%)dqE%HMjpr=4W
zbGYfo4B4KA+TrZBdvOtIE<sf1+IMXuKk()i<9JQXA{YaX3lRj?RzHyg!qkVuetFk9
zwoARB`^s~s@MN&EqH?pYFX5Kz*25)|NdJ}O0ZAO_ULFGu#Mj9Kner{WdVJ;3=tPJT
z{4`ZN`G=;BYak-FZXVE`1Ll%q>ueL@^2m1pjKBM4nWCOR@Q0dA7ax4p=AX*;G97P9
z9R>S{65$yAbgHclQGwTu)T+%M8usEHEt!Q?@6OZtyS<odo~Pif4BUK(I=oWOs$M%0
z7YS_(EA=>X@SK+kmJ%ew6OH#;gmI3{4aW%~Q`Ys3M5@ie{Bh*FqSJRDYC2vw65v>M
z?HMBd?}hg?+?q4RChrA(s39zCr24VbR0##)?secncF2MHAhu?{onu>ASA-oG)}ep7
zKdWjp(fmQi+QSNnr&WP)3t#uw%v*wcv;_+YQ%}qI6<6m{xxdWbM?aQNb^n&|(6RGS
z%|m@I%R99z1H=T}yXW3R^M=@%P~;ik+Podd;yeS#tnE~AN@v3fPh4LE8!RBB%j;x^
zuj$?_13;a(Z+`-xiW`WKI^)Hix~0yH8Im7{Nv&)i-cBFgC96mq=y*Y)E07;G!JaFX
z!ZW!MqsOmx(p$k7R}hus^z_;H8VCr|A5Dy!B0csSC;@iP9TBlBlYLlE)jF;oHvaWH
zZW=+?@xLcx;#WO8s=2D!qSo#>X_#DZ8&4dJ&-7G%&-I#ZX|=<q#>(?Y)C7sg57<Q`
zZ%TW8D^g31H@l2~r2{ElmF1mJAADc&ehid1`;FS$D^y>thoi7|Br6@cm98E?iXN0H
zY_$sM0a@NgDf#ymdC2s5vlDC!xm4J;mLjz^+!dY;(xk`tBj)nBMA>wg?%dUYD(DR)
zK8t^jc=Lvfn~nb;mAK;Y*K?1_;IeWXsXWQ$p9^cu^1idjsXh&~S7GE(G0OkGm7{N`
zH6gWZl`x?cwBiOzLWWS6huaiPs93DHoI<{!h;Un&e|{?b-~3ZxalPV#cCIDxngM^0
z0Bur((Kg=r+A~aw5e%EO7HCIr0{9GDV+575zYOhp4RA)b#q|HN0RQitTgG>szoWW~
z4Y+%f+5zC2JgJq`-q_)@9&OTdc8I&x=I<YB?zS-JiyqwCf%Hl0a5jjNSca6FTTNS?
G^nU>t@4bWo

delta 7497
zcmc&YXH-*Lv-Hr53L>3Qr3UE;C<sWC-g`hqkP_)gIZ`5#dJzy6yeJTgw183+B?(;-
zBE1=@DoB%J=<p8e{qFtN``&tg-db<%v-jH5=VVW2W}odhd`oZmFfb`{`Aj(}NuWD$
z0CtMFC;8%q7v@=_h`qDYC3$J%vr{q;UL-5rw`59Vzna^Ry<9&>lNkH}j*cvfBt-KH
zVyJ1Q3X`E~O{Y%ii>ppQDJ7fz!-zg1xCHk^94{gBr`5d^cV?1ZM$n4I8<>FXAH)8{
z%|*2c@hXB$5LMvi&ISEM*r~Y2t3tqlX(gm&KAP<Sg=x|y<F`2Rz>-F(>H3e`7Z*NN
zk;grJkKdSoNy#XrFCG@k)U1~;v{|jBQeft`lF4sv%F4m|GVeKuUSv6!=g4CT4TT;-
zXuFCC)a_PUo9Zkdk)0vHYIunvo%v;jA#D(`;ns|VZb#PpaFfK?Mi~p+)S^v*aMwt#
zd<;JV6-f_ST>Z0hMQtej`}Pc>_vCkvxc<}k+&Id|m$Lof_pUK^+7k2XhPj7c%u?}u
z%MEn;5o_PpoqL|YmZ!veZ(`!G4|!{^@N0NZ(W%dZWlTZ{0#$Q;+S9A=8xD1?GoPuQ
zG|34x>k+uGMLUVV8jZsF1lvcw0uDk$o-_Kpuum`W30gqN7r)@b4f`q=mi6l3=^cC#
zw$Z$&`pcf?x(dFx$}D8Afk%BG3_N`;-|ZCE?oBj3)mFl^frq#e<Y~nA@W@_d`t#vQ
zHS(tvwNjKOt!7Wm%>3$UR&tk9W(H69&}ND6<@4`yyV`JFqxbZ`8WbGp36FP_NpzGU
z2PXwMDZxnvPHJ${G&ssYLM_CV<>byOpOc5Fz!V(L(#u{6xT*sW_7o7;Q9B2d`v<XM
z=QhNZ!dzDYrm7;Rqy$saQczV<l-H7z*U?j!*HO`u*H+TLq^l{Q{=c#~)5{ur`g;Xm
z7f@1#<$MsMI17kOc&7*vV@7WBH#9|(q9?Z=@)5?LukIOdE$ua%W~GwVa_S1AxG6@{
z3k=wb+O%!oGO%V)8y1miyCLWLEo8LCU+OnjGSu4N+orFXr`ZsesCk%t0r(UZ@~qsc
zd*`sX>{-w=2Bh{hq+R=|oj#KNf~}ch*&i!<Wm)vdc5^_2gJI*^eY|_JkRbyc*)GSK
zs0us%1s`Qc#sFt)W4@2Gu%qb~46Qq1gZHtcyaDH}NMypW*W*J+$#dZf>`8z|Z-kI<
z;5{RFc*>>-p2v>S2(IWG+xnf;1qazy&;iJ$;;b=e>RU7)BorbjSMZeKGmN1vGNVk9
zZWJVK#xo>*j0zcKnw95{K@MLUgb(0yO5}!74<I1^`1@9zdnM*2%0qKeBcvKTaZO3Q
zlO1I)Ty`m*5<%OGS8QZpNxaVSg!ZJH-v*s}{L|YRZz)c}OMQ!!n1kSFe38qT(<Hn>
zBU$xS535Gx!j64_rc^>Z<`fhjHqG}j5%Qgt5AQ*nV>*3CJ@NGS6E650;Q(d8H1F#~
zmhWtLyd{DMuZn50={=z;d?FX3P@L8=*!Mt<%kuK#!gUSa%96q#!3BOq6QnMd^L#3U
zmB<^7CoZ>ar#L>wCVuDqv&D$>Pltt%wC`heF;v5?yx~-YX_41=rmgRDC0kBUO-hSb
z#>0nFO{C%#F?97f85QbQRGJN76T1`|OvcN5@iOE?A9?W4ZQ`G4%ufm_=jX}P)NZE@
z6UV3?MSC&KpHfpprkOk~w4A>l!`o9`xD%p)P5Uy^x3Bid_43Bze?+#a-U#4bt}J{L
z@}eP4bj<z%eeMy=iYF+xWSUPs79I%bH5Fp0tSrOCc;Ye<ko|)5j6I{9v?(nTb}YGW
z3`_B|2&NUBC1;0kg(l<+UT>7qaaw%aK6+H9Gcb29G=D;Pl40wj{QSJ0+N+E-|Dr<f
zh5vD@tfk!llId1<8fm!iliIkW7<17Z;MlL<@a4$G>wi02Jgk~Qe;yF@iF)vMjZi+t
znupv#uvOui9^AS7ox%mr9S&*r;SWf~MU9g0P1BBAFP?KkCc4R1Hhky1lj`03?j?p}
zxK%ow%oHBpr8<OWB_B2q4rY1WP=*Qcb4rOR+|UYW>Ia;~)sjrh5L5Bzf8<Q}?1~+k
zWEsNfSIk}YET%Vs6m}077+ZYvjo7wm#Df8bBkB4e+r3(<`&vAH(iQs1@+OayTd!qr
zxM}#_PQ^fm(JejvZK3|jt{*wDzVXW#%AdiX>n59p*Vyd-8T&lOMJ)%ecQyDa8pdRS
z%eXhBZaEcZu_@uaxB&!B?=!5*9s`1|x1=SxvSuI|L0yFpK~Nr@V^W^x_;}|$;`GN)
z*pHB{ZCRG-vrZ<+bOv`q`V^fL@@zOA!D6~|qULQ-I8(q>rK6Aeg0;kc+xX}l7~tu{
zyN<xNFUj@DJqxvZa?<M+A$T(WN<OfnNsPAHYt`9*e{|&cvHo<NSH33kfc>H$;4QJg
z?}}R1c_J%vF!YTuYYy;YCdHaf{Qy6Ss14=W(+MOEtskC+gqZvd&9BjC7gqI=u16W8
zc2v7dTMH{JB1eT^YqU9c13#2B5sdR|5Ajyp%d738d>?i%=UJ<#+`Z^ZwF^K$oQ`d#
z-PC;|OL6dA;L5><03>>5Z;+JuuKA#|#;X7n&xzOcj8>iR*2+K7G(VVr6G|%IM#45f
zgCfzrdw=rowR`|*gts&dNn@+nxRG8>pS;P#NWvvJVw3~`tdXRTV@Fq!UPWGX>f##Q
zv3*&^F(Nh<x7Vz;Gu;8H-q;8jKL<|Rjw%^WCx!IH@Yvu@>>gU|M%I)MfgyyyHA=<}
zKj|A=iD9a5Wgca^47W9803=9X=~nH}kZ>_7rO+?hc^mKt2|@@S6C9Ju{r+*+H0Q?&
zmWc6y*#ZL2UWMiK6x1oM8$8RFkOy~izjGE_j2~RC*>gky+$%VZMi!Q-j7xfNqHc?w
z<(=TV5J}JHl&|quiaO3vtdl8Uzowsc-Zoi6Zio_lGP0W4NV%PE^ZTDnJ7+jk;w1xa
zk^G-wMZaF@&COF*4G8=+_xf!_<_3s(>s>`f$_-Z5z$-gD{>1!Zxz!wSViFK;Hi*jH
z7G1k?#%G0s?fN<5=D82T%?qhd459{ZXl)3DD_=h`dCX)P_^3_!p?^nt%UYJpp|6wX
zTF(Fuv{0Or3`)=Bwkh8Q_5D&;te{wOk?Ilj!!IX_ZL@x}c>8J^E+m%BC?phv-mQoZ
z09RJIGR@)Dmd`dl&c6b^ywvbP;f;#og)tR8ZI;`q4qS3?k@Eew5mRL`f#l&~51pu7
z+(dJ3H#{(q)yeFJQ&%KdW4MNK4t9`5bhxu2cAsU2TGFLXsd&>izjH<u%vU(a;W?%6
zE^;q_{TDweii+VFI<KC2oqA;@5uik{GUI=q-KjMEO%-yN8BtTbw+f}#G*2F+Iz03A
z^a&>#S+z{tX|CUu>f~#NE1zgU>%WT1l!*5_Te#(;C<>Px(R_RmYO5QzaSrXe&1${H
z1%>=oUQpFzjU6#P-F{c7e4u70V;|8D&LG2F0K=ml{*I2e5mYsst59=Cu%DJ8ut;bZ
z4K#B!sVp5Ft*&wPz;?u>9*iHyVeASQQBmf`;P4&gxXJCOqh+)p$MW~7-EsLFucLxo
z3Trxi{6>d>MZ~@~Gic|RC@AylM)1gd6`S?>y#Cc_cC05>FDiALYfTZDxp8d!rpxT>
zj)>HaaqH8(Iqi<iw+xTIY<U1nBY)fH+EXOm_=Whz%k@>U_lAREdZ|k|Hwgk@RG8<a
zUxA(;tNo>wZPKVLe1EbdoN7R$IFc*UbYPk3{6Y0rrvoW+JSM%HZ%qT}jr`VJ60)_u
z+&Ah`*8oKy9Vo<fN2IUtVKrhR6-dJ+GyC~TSLRpbh!c;Jk_qjT`YX$3nKhQ5ZZ%ol
zY+vng7@IerD6IdfqGocSII`t~(96q#>2rK<HEbfsgVV?P>NI>J2T7&N<`W=!pR~Q4
zF(OngCh{h}tZ@f8YJ15#InWzfLF!s`Hf<;NS=<r^y&)><u>no_NsvQ_tnFp*QP7!V
z6-WoaSC>6xY0?^(ZjQ~?c6zQ_N*r#7F@@zx;?3rf0d4MVU+~u@T=sL;8o=f%ymzeh
z1zCZ@1@;mw`-JpyFLECrXh$vyXRo-Uh~Z#tl+K$V8$eJhp=aVFY6f~R)b%Y&qs-^s
z#FpZS7>FoXH{kqBiGKxYPS#_H0MJO+FvVw#o=L8rp$NF7A46v9c71o~vE3dkANRd;
z#Y430rj~27S1Y1vWT)6)$A*39)4a%-6umydNi@6|*m}`E{-EQ-X7!<6#bX95g$~P_
z^};n}`1SXYUT$G!#!5x-dEgHty1l{&$1l(fFcotfD?jjW<BiO`x9C@jV!G2E;A`9-
zu<yVlJsg;GkOtw;VMvFt{k;Gx0jNL^df_HP3MRJeX2Xq{Nv_edGP{~EB206PmKgXU
zoL*Qt#a@ZgR>`G!MphG*fAbTn&#0F>Pgx}Z@oD?&AGKt3NiYf#Sd_9H%`6P^rA7S#
z3xk`WR9w3oE&yuv+Mqq4`7Tiw`58lD6L+)k?%$bO-WLh@A%?pOT&;SGW*WA}f<9}i
zD<{nxH>LF{l1<bV?DY}STGOod>#pS`!@KVO`_G(WZvwWaDioIm^)x+7#4OhM8w#)b
z2DMzDZ&Uqe8dq#&R(7K=o)-NWH{pg0o{`~He2j=aDMx$2%7+I$U}WdlPNlS%l;++2
z-Dn<Xaj?&1ts@y+`k1FDqmg#&THU$Vko}c#sU$;PD~SRNwrqNGcJngSUr<u1l@1yz
z0irlLs?2QIlIi!d(Pg9dyq$mCORD*iblYn9%=2J6_Oa3~J<m%LhdKO7sZ3Z~9W(%y
z$Oc=F`6_)K<OV%4Te@r;du`SWYBpV4tDO3tFcT1HmJy%CV>R~#3Sn0*?b6a^mIyRs
ztD@J)_VB(+>>0(=!N|?-w!QmB_z%3lQGv-U8w~8ll5MstMH$Xm_QX@k{(}cVt3u$W
z*8UYvP$?XH!n!jCc|gC%PLf=*9j(T=!m$Nj^W#Rggb(N@qp*f7y=TcD)L3Vqrl9_=
zLG(5^(fMAJaM)0Im=;&WiO0q{8&y?LjKXpzt6ZLxUkQ7-a*jB}9*lfiE;-*%{M^tT
zVapqQjP!if9h@^R<LOKTG)4AzC3fF*s%$dyu)Pwxh0eHeAYT(VB=gi+yD1?Ql!b?t
zEeDQ$t_2nL%m>>q*N%JEb^GKD$&@?WG*yKDjaX60xk+bEXz1_C$FhkD>k|=g18iGY
zK+CnD61wG%O~cJwgP~>178B@tBR|lAIwG+3#o$CmtTxw<dxEF$D_RlG_?xioa~h|O
z?;8^msWGe^cy~JrBlsDqM0U&xo05z#%PJj8cDZ_odgnPt@H8+>c|Wde<HkLk3cjX7
zz@BM)=)W=ouB|8d45^h|g*I^tX57LCgD6BZn&1pns7t09^Qh%@2EI-M6ix|7h%;3<
z>z`5T|Ij%pqCD4oZsaH=@4&B-;aX1dYAa<pZTgg)daT!X9v7TZICb?j(`#fHtBgnU
zQsJzc!{c$aoRFaFKi~`phu9?c8*r)As6}_Fb;pwWUZ2N9YULp|ixtE6mCqf#>V6~S
zy?zW~^lq0`p3N;Om$!7y(K~Dp=!o5}%xx+MpU%*U*uUg<N==J0Ru4^bG%_JVfJEv(
zKA_WNr_vJCZsG@;t_$&5931YE9^R?kaQxaJ^WaA=YjIg+ZcN27*c<S8QVkmtv$zk^
zbBil7oy1<61U{ZqdmD0ZQFz3l>K8&oICti~^X1;)-eApphUZD0lM2MVai@VERl?<g
zE`C64xc~70IDq5j--rC;#dCr8f^32+m6V@8VhK5Ni{Xi1$XjqS>RtH9&=na$1>O5^
zBUQyq&GypHU8_f12P%!*bB}_0WB5o5y&f$&8+reI0RN6!$pa1jr?Fo-d{R*-@USob
zim^V{6m8wdxNdrAbDK&RX1({4su1=&Q^IohBFLo@bTOR2?(@e@(h!DbSX<q{61>i{
zDWUtHPu_h#PCwyxqQ1x?0*I&>WiGyVVKu=S!%f0bEg{b>QCjxqv*5H;7{5Hez;7Tj
zJJ;H8u0qo}O_c|>wOqY8)kd<MDLy9y^oIRXyE^IXB8>X4`w1WJWMjUe<%JVi#e;(#
zIraDt8w%Mg&Z%_-LDA1w(f}pZ!yTcwawWZPM#wt)vds>_awt6c14oXujH6S1qwmeJ
znc8;G<PMHhX)Z^F`s==ZqXjj(9zPNJ)Gz+U(EU>)*G-=BbM%IN9=m*{U)iR|mU~9`
zKP27DtxeGR+o8Vik2S_ir#U2AED)AZbr$`<l}1Pd>ke~uQSBexF`q5(+-Ko*5VKs^
zuv)r3#8F-;ImMj_+L=`OWw%r@+i-IG<@T96X&=YIdf|c)etrLTVOysu%kXPc4YVRC
zUUdVs?2)peaDz+Ss<=aNLzHpfx}2`0rW>t%zQsb57=0*=9=uda3ZVNZ_f2a;nNtAV
zzls}%DoVR15X=jS7<!vlIlG63*fn+1Ynov^%_uGSs=sa_mlz}dc~<cU2r}jtK^4YK
z1XWrKoeEvaltNzYa|Cm5D|I7P&NRIf@;pL4`|vG*>V8EtGEHNQSNNDPfnZy~3pM5%
z9s#~r_DPxvlbvOokzZ#6OvRHI52y&13+G+ilfdfr3FjCNS)Hcb-b5Q(g^U&-z0pcj
z9ip1C^sJM(WX)EZbkUmXS)OgQoaN`&?;=99Bo5MDmTs>|V25<eHs7qaO^#Lv+B;_$
z0>Ki8^(RKFYhBSz-x%^Fh}JUYi<S$EN5C2G=dL2nhEdtu5^L5o<(Iy0jITwfC6%t!
zb0%KJs=?)Y4XK`aCdb)l$A61SHixvBDRvV%rk?3ou{fqMoJxLXdS?7)U#+>uH93hH
zl{^e*wvg<QB}ZXPLh-E*cdLRqD}sGW5_|qP>SXh=C0kj0M)H2EH|}ypD61cj+F1b+
z{UL6S!be4A-`@Dza6W@t|9GdtU5qTh)d}4jYC;eSbgYo&ySRcZE5+VtRh~A1&(gJq
zuc6DnJum$xpDfqD$>U;|Vu~)R+I{Dq<({d`;aSVI7wIJz!vPstdv6%3*gJ^nsqkRD
zgWr$!CaA{G1(;@8wc*5ip7;7Z8KwaWITUkZCHPVtgXt(WY3^)zMH3VS0$`H`i@Y$6
z@9@nEk`ik&_|Z<nOW+bEzYxKvjZ$L-mqM&~#4}F^k(Azb@)dYT={oiP87WqsW!Pcx
z6{O_?OiI1G?_vjpTlyO{&2An3T5<yO)hNtR!6$ct`S@jyG5+gZlo|O$Zy5od7=iWY
z1?O0IV!H_6QfQzTSa<ASa-sGw&UyW?rOe<*?N_ie|76;&i|u03iLr5q{A4<qyf_E$
zBtQLPiV0)|PVS7^v7HAM94rW=iLO7d$x%_v$PZ!RYzsl{`|_NVaR8ORi!T+-$WPr!
z{+80U_y&NOZ?Ww(K44|f80ltd@zK$&Qirl;gei0CxIov<udr32UN?0J%y4F;t7Q|l
zbUqP1!8brf(X#G<fb(^Mbr2XmaSRZBj)8r%<&UlsMSbS-UO~WFDAu`*mTkw+Pz2Q#
zV9f=RInb)C8Iu(XEYS7bERKud`xo{@L86%h1>4RK!)^g6*2J4yXKqBIG7h!Rg}$g0
zQ)jUch4N3duL!M6X3sc5*J}n;)=>L_=*D-bs64GfBb}JCei>9(=fX-XYTq6GhBYJo
z#sq|I2Wbcqfbz57q=l|;WQz(y`RhVYLDz$_(=O>~KHC=7nd{63Ou&6q9ul=*+8=@H
zN_?Hnn!#`Wiji#x7R?S_H&{^9nG@o$WGxKH&+^x1tcbCC#RR>up|v1`+J7I3-V<1t
zU(MpvR=?P6eT#8TXH9S6EJ(P4{t6PRvs~i32s&q#*mfSCHmtdjk$*S89Y4Fa{?H=N
zo3WQAU9MUkNZIG#74~qkpYzJo8pC3;X8CRTB(uTO&-0I9)QS1>w4VoM;5cIQCwSID
zuHNKrSZpb39m=}%u*uL!;PA6fW%j{{v1)U7W9179oftj#99yj@uLW1hcX$4H2ffgG
zIfA!sZZfN%hIQx6`n$shwA8x%NOt}0E&|N?6Acu&FuRAUEjy^~BA|35PJ_OCqBTI@
z&slw901cXZg8`U=%VxP4)g0!szzPDv_r(O8`!;v{cEmwQJSRQAi?AJ49d$w{hUVRx
z@<dNt(rE1C-fdmgv@eX;++}b2n1pq#bl>Ey@)Kn~bGj0GEzd~RN58VCZAUjmFXw$O
zga_zOnadK=XRD%h5;h<2CTM-=meuO$Zl;t@4%_kLdJM?7?8>CB?CzQ0%GZ-^DBKiG
zJ=|Otk2Wqm+HWY>JewMG6xVMon98qVtMB0$bB@E3>wJTzVY@=;*XS(0{?Ww1EJN=l
z+jKo|h17$$_2O?2jOQ*=U4v3A5fTofz4w8ckya1mhzt269G~mO8_<o??SAC`3<$^2
ziP{N{iTcrck$UMGKe!*m4M&rSz;TYgdQ?67Id3{KZY)jAUu-Zf(GOg{`WpCl3MsKK
zhrcSW;AI&ete<`8KsCOmA}z5TevhLpR9z?8{`{Z$A{D&py)8p&CD&g1bW%RouLEZ7
z?H`S=J&@904%fc_w4Sl9y+m5m@2$6yiR1Ng?ScC_^{-#(qNPRr&UzaeI2w*y^xwZ%
zpY;M=^cywt-Oll7B!=ZxbA4YH2{V$5^_rirTy_1jYG9VYCXN?R!K=KFeF<av(n?`R
zo9reh6^q6&-fyM1qbqk)tN>!`FwDcP|15Lh$2PhqH|3>Rx={wtQOMpj8Bf9`1gGdU
zEf3P;_*0v~ucj9ngy56G>HaQtHxRu3xKqZhR~o4srkOt?BN6<3xJ%(w>C<%T$bWBk
z!HY5OvVbOc($VuHAZ<J4|8sc%Ul|X7vraf<pTUYA-Z)+sEx3-1N)m4ztpl?A7Z^{w
UOXd*%gb32g(~F4cn(ER27s(FKq5uE@

diff --git a/bsp/buildroot/docs/manual/manual.text b/bsp/buildroot/docs/manual/manual.text
index 6060cc5b..ceeeaf5b 100644
--- a/bsp/buildroot/docs/manual/manual.text
+++ b/bsp/buildroot/docs/manual/manual.text
@@ -155,8 +155,8 @@ List of Examples
 
 ---------------------------------------------------------------------
 
-Buildroot 2017.02.8 manual generated on 2017-11-27 23:07:51 UTC from
-git revision d745e94683
+Buildroot 2017.02.9 manual generated on 2018-01-01 11:25:58 UTC from
+git revision 8f03647169
 
 The Buildroot manual is written by the Buildroot developers. It is
 licensed under the GNU General Public License, version 2. Refer to
diff --git a/bsp/buildroot/package/dhcp/0002-bind-cross-compile.patch b/bsp/buildroot/package/dhcp/0001-bind-cross-compile.patch
similarity index 100%
rename from bsp/buildroot/package/dhcp/0002-bind-cross-compile.patch
rename to bsp/buildroot/package/dhcp/0001-bind-cross-compile.patch
diff --git a/bsp/buildroot/package/dhcp/0002-v4_3-Plugs-a-socket-descriptor-leak-in-OMAPI.patch b/bsp/buildroot/package/dhcp/0002-v4_3-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
new file mode 100644
index 00000000..df294651
--- /dev/null
+++ b/bsp/buildroot/package/dhcp/0002-v4_3-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
@@ -0,0 +1,51 @@
+From 5097bc0559f592683faac1f67bf350e1bddf6ed4 Mon Sep 17 00:00:00 2001
+From: Thomas Markwalder <tmark@isc.org>
+Date: Thu, 7 Dec 2017 11:39:30 -0500
+Subject: [PATCH] [v4_3] Plugs a socket descriptor leak in OMAPI
+
+        Merges in rt46767.
+
+[baruch: drop RELNOTES hunk]
+Signed-off-by: Baruch Siach <baruch@tkos.co.il>
+---
+Patch status: upstream commit 5097bc0559f
+
+ omapip/buffer.c  | 9 +++++++++
+ omapip/message.c | 2 +-
+
+diff --git a/omapip/buffer.c b/omapip/buffer.c
+index f7fdc3250e82..809034d1317b 100644
+--- a/omapip/buffer.c
++++ b/omapip/buffer.c
+@@ -566,6 +566,15 @@ isc_result_t omapi_connection_writer (omapi_object_t *h)
+ 			omapi_buffer_dereference (&buffer, MDL);
+ 		}
+ 	}
++
++	/* If we had data left to write when we're told to disconnect,
++	* we need recall disconnect, now that we're done writing.
++	* See rt46767. */
++	if (c->out_bytes == 0 && c->state == omapi_connection_disconnecting) {
++		omapi_disconnect (h, 1);
++		return ISC_R_SHUTTINGDOWN;
++	}
++
+ 	return ISC_R_SUCCESS;
+ }
+ 
+diff --git a/omapip/message.c b/omapip/message.c
+index 59ccdc2c05cf..21bcfc3822e7 100644
+--- a/omapip/message.c
++++ b/omapip/message.c
+@@ -339,7 +339,7 @@ isc_result_t omapi_message_unregister (omapi_object_t *mo)
+ }
+ 
+ #ifdef DEBUG_PROTOCOL
+-static const char *omapi_message_op_name(int op) {
++const char *omapi_message_op_name(int op) {
+ 	switch (op) {
+ 	case OMAPI_OP_OPEN:    return "OMAPI_OP_OPEN";
+ 	case OMAPI_OP_REFRESH: return "OMAPI_OP_REFRESH";
+-- 
+2.15.1
+
diff --git a/bsp/buildroot/package/dhcp/dhcp.hash b/bsp/buildroot/package/dhcp/dhcp.hash
index 7898aa45..ce5f995a 100644
--- a/bsp/buildroot/package/dhcp/dhcp.hash
+++ b/bsp/buildroot/package/dhcp/dhcp.hash
@@ -1,2 +1,4 @@
-# Verified from https://ftp.isc.org/isc/dhcp/4.3.5/dhcp-4.3.5.tar.gz.sha256.asc
-sha256 eb95936bf15d2393c55dd505bc527d1d4408289cec5a9fa8abb99f7577e7f954  dhcp-4.3.5.tar.gz
+# Verified from https://ftp.isc.org/isc/dhcp/4.3.6/dhcp-4.3.6.tar.gz.sha256.asc
+sha256 a41eaf6364f1377fe065d35671d9cf82bbbc8f21207819b2b9f33f652aec6f1b  dhcp-4.3.6.tar.gz
+# Locally calculated
+sha256 dd7ae2201c0c11c3c1e2510d731c67b2f4bc8ba735707d7348ddd65f7b598562  LICENSE
diff --git a/bsp/buildroot/package/dhcp/dhcp.mk b/bsp/buildroot/package/dhcp/dhcp.mk
index 45cae087..4e1b24b7 100644
--- a/bsp/buildroot/package/dhcp/dhcp.mk
+++ b/bsp/buildroot/package/dhcp/dhcp.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-DHCP_VERSION = 4.3.5
+DHCP_VERSION = 4.3.6
 DHCP_SITE = http://ftp.isc.org/isc/dhcp/$(DHCP_VERSION)
 DHCP_INSTALL_STAGING = YES
 DHCP_LICENSE = ISC
diff --git a/bsp/buildroot/package/exim/0003-Skip-version-check-and-symlink-installation.patch b/bsp/buildroot/package/exim/0003-Skip-version-check-and-symlink-installation.patch
index 94d21ae1..a342d6ed 100644
--- a/bsp/buildroot/package/exim/0003-Skip-version-check-and-symlink-installation.patch
+++ b/bsp/buildroot/package/exim/0003-Skip-version-check-and-symlink-installation.patch
@@ -9,6 +9,8 @@ Inspired by:
 http://patch-tracker.debian.org/patch/series/view/exim4/4.76-2/35_install.dpatch
 
 Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
+(rebased against exim 4.89)
+Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
 ---
  scripts/exim_install |    7 +++++--
  1 files changed, 5 insertions(+), 2 deletions(-)
@@ -17,7 +19,7 @@ diff --git a/scripts/exim_install b/scripts/exim_install
 index e68e7d5..487a4e1 100755
 --- a/scripts/exim_install
 +++ b/scripts/exim_install
-@@ -59,6 +59,8 @@ while [ $# -gt 0 ] ; do
+@@ -58,6 +58,8 @@
    shift
  done
  
@@ -26,15 +28,14 @@ index e68e7d5..487a4e1 100755
  # Get the values of BIN_DIRECTORY, CONFIGURE_FILE, INFO_DIRECTORY, NO_SYMLINK,
  # SYSTEM_ALIASES_FILE, and EXE from the global Makefile (in the build
  # directory). EXE is empty except in the Cygwin environment. In each case, keep
-@@ -218,8 +220,9 @@ while [ $# -gt 0 ]; do
+@@ -217,9 +219,7 @@
    # The exim binary is handled specially
  
    if [ $name = exim${EXE} ]; then
--    version=exim-`./exim -bV -C /dev/null | \
+-    exim="./exim -bV -C /dev/null"
+-    version=exim-`$exim 2>/dev/null | \
 -      awk '/Exim version/ { OFS=""; print $3,"-",substr($4,2,length($4)-1) }'`${EXE}
 +    version=exim
-+#    version=exim-`./exim -bV -C /dev/null | \
-+#      awk '/Exim version/ { OFS=""; print $3,"-",substr($4,2,length($4)-1) }'`${EXE}
  
      if [ "${version}" = "exim-${EXE}" ]; then
        echo $com ""
diff --git a/bsp/buildroot/package/exim/0004-glibc.patch b/bsp/buildroot/package/exim/0004-glibc.patch
new file mode 100644
index 00000000..7ae2ef8c
--- /dev/null
+++ b/bsp/buildroot/package/exim/0004-glibc.patch
@@ -0,0 +1,27 @@
+uClibc does not contain gnu/libc-version.h
+
+Patch sent upstream: https://bugs.exim.org/show_bug.cgi?id=2070
+
+Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
+
+diff -uNr exim-4.88.org/src/exim.c exim-4.88/src/exim.c
+--- exim-4.88.org/src/exim.c	2016-12-18 15:02:28.000000000 +0100
++++ exim-4.88/src/exim.c	2016-12-26 12:12:57.000000000 +0100
+@@ -12,7 +12,7 @@
+ 
+ #include "exim.h"
+ 
+-#ifdef __GLIBC__
++#if defined(__GLIBC__) && !defined(__UCLIBC__)
+ # include <gnu/libc-version.h>
+ #endif
+ 
+@@ -1044,7 +1044,7 @@
+   fprintf(f, "Compiler: <unknown>\n");
+ #endif
+ 
+-#ifdef __GLIBC__
++#if defined(__GLIBC__) && !defined(__UCLIBC__)
+   fprintf(f, "Library version: Glibc: Compile: %d.%d\n",
+ 	       	__GLIBC__, __GLIBC_MINOR__);
+   if (__GLIBC_PREREQ(2, 1))
diff --git a/bsp/buildroot/package/exim/exim.hash b/bsp/buildroot/package/exim/exim.hash
index ef2d03ba..41f51b15 100644
--- a/bsp/buildroot/package/exim/exim.hash
+++ b/bsp/buildroot/package/exim/exim.hash
@@ -1,2 +1,2 @@
-# Locally calculated
-sha256	d4b7994c89240d2f9a9fcd7a2dffa4b72f14379001a24266f4dbb0fbe5131514	exim-4.87.1.tar.bz2
+# Locally calculated after checking pgp signature
+sha256 1a21322a10e2da9c0bd6a2a483b6e7ef8fa7f16efcab4c450fd73e7188f5fa94  exim-4.89.1.tar.xz
diff --git a/bsp/buildroot/package/exim/exim.mk b/bsp/buildroot/package/exim/exim.mk
index a9f4685e..7cba8f3d 100644
--- a/bsp/buildroot/package/exim/exim.mk
+++ b/bsp/buildroot/package/exim/exim.mk
@@ -4,9 +4,9 @@
 #
 ################################################################################
 
-EXIM_VERSION = 4.87.1
-EXIM_SOURCE = exim-$(EXIM_VERSION).tar.bz2
-EXIM_SITE = ftp://ftp.exim.org/pub/exim/exim4/old
+EXIM_VERSION = 4.89.1
+EXIM_SOURCE = exim-$(EXIM_VERSION).tar.xz
+EXIM_SITE = ftp://ftp.exim.org/pub/exim/exim4
 EXIM_LICENSE = GPLv2+
 EXIM_LICENSE_FILES = LICENCE
 EXIM_DEPENDENCIES = pcre berkeleydb host-pkgconf
diff --git a/bsp/buildroot/package/flann/flann.mk b/bsp/buildroot/package/flann/flann.mk
index af86a02f..90d2ddcb 100644
--- a/bsp/buildroot/package/flann/flann.mk
+++ b/bsp/buildroot/package/flann/flann.mk
@@ -15,6 +15,7 @@ FLANN_CONF_OPTS = \
 	-DBUILD_MATLAB_BINDINGS=OFF \
 	-DBUILD_EXAMPLES=$(if $(BR2_PACKAGE_FLANN_EXAMPLES),ON,OFF) \
 	-DUSE_OPENMP=$(if $(BR2_GCC_ENABLE_OPENMP),ON,OFF) \
-	-DPYTHON_EXECUTABLE=OFF
+	-DPYTHON_EXECUTABLE=OFF \
+	-DCMAKE_DISABLE_FIND_PACKAGE_HDF5=TRUE
 
 $(eval $(cmake-package))
diff --git a/bsp/buildroot/package/gdb/gdb.mk b/bsp/buildroot/package/gdb/gdb.mk
index 618111dd..e52f42b0 100644
--- a/bsp/buildroot/package/gdb/gdb.mk
+++ b/bsp/buildroot/package/gdb/gdb.mk
@@ -61,9 +61,11 @@ endif
 
 # When gdb sources are fetched from the binutils-gdb repository, they
 # also contain the binutils sources, but binutils shouldn't be built,
-# so we disable it.
+# so we disable it (additionally the option --disable-install-libbfd
+# prevents the un-wanted installation of libobcodes.so and libbfd.so).
 GDB_DISABLE_BINUTILS_CONF_OPTS = \
 	--disable-binutils \
+	--disable-install-libbfd \
 	--disable-ld \
 	--disable-gas
 
diff --git a/bsp/buildroot/package/gstreamer/gstreamer.mk b/bsp/buildroot/package/gstreamer/gstreamer.mk
index bc886c78..22240bce 100644
--- a/bsp/buildroot/package/gstreamer/gstreamer.mk
+++ b/bsp/buildroot/package/gstreamer/gstreamer.mk
@@ -1 +1 @@
-include package/gstreamer/*/*.mk
+include $(sort $(wildcard package/gstreamer/*/*.mk))
diff --git a/bsp/buildroot/package/gstreamer1/gstreamer1.mk b/bsp/buildroot/package/gstreamer1/gstreamer1.mk
index 5b748e33..8530ff02 100644
--- a/bsp/buildroot/package/gstreamer1/gstreamer1.mk
+++ b/bsp/buildroot/package/gstreamer1/gstreamer1.mk
@@ -1 +1 @@
-include package/gstreamer1/*/*.mk
+include $(sort $(wildcard package/gstreamer1/*/*.mk))
diff --git a/bsp/buildroot/package/heimdal/heimdal.hash b/bsp/buildroot/package/heimdal/heimdal.hash
index a0e0f3f1..ac26aa60 100644
--- a/bsp/buildroot/package/heimdal/heimdal.hash
+++ b/bsp/buildroot/package/heimdal/heimdal.hash
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256 3de14ecd36ad21c1694a13da347512b047f4010d176fe412820664cb5d1429ad  heimdal-7.4.0.tar.gz
+sha256 c5a2a0030fcc728022fa2332bad85569084d1c3b9a59587b7ebe141b0532acad  heimdal-7.5.0.tar.gz
diff --git a/bsp/buildroot/package/heimdal/heimdal.mk b/bsp/buildroot/package/heimdal/heimdal.mk
index 2d4b826a..0dbb151d 100644
--- a/bsp/buildroot/package/heimdal/heimdal.mk
+++ b/bsp/buildroot/package/heimdal/heimdal.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-HEIMDAL_VERSION = 7.4.0
+HEIMDAL_VERSION = 7.5.0
 HEIMDAL_SITE = https://github.com/heimdal/heimdal/releases/download/heimdal-$(HEIMDAL_VERSION)
 HOST_HEIMDAL_DEPENDENCIES = host-e2fsprogs host-ncurses host-pkgconf
 HEIMDAL_INSTALL_STAGING = YES
diff --git a/bsp/buildroot/package/libcue/libcue.mk b/bsp/buildroot/package/libcue/libcue.mk
index 70124538..ba559a7f 100644
--- a/bsp/buildroot/package/libcue/libcue.mk
+++ b/bsp/buildroot/package/libcue/libcue.mk
@@ -12,6 +12,8 @@ LIBCUE_DEPENDENCIES = host-bison host-flex flex
 LIBCUE_INSTALL_STAGING = YES
 LIBCUE_AUTORECONF = YES
 
+LIBCUE_MAKE = $(MAKE1)
+
 # Needed for autoreconf
 define LIBCUE_MAKE_CONFIG_DIR
 	mkdir $(@D)/config
diff --git a/bsp/buildroot/package/libcurl/libcurl.hash b/bsp/buildroot/package/libcurl/libcurl.hash
index 49292dfb..275a5a37 100644
--- a/bsp/buildroot/package/libcurl/libcurl.hash
+++ b/bsp/buildroot/package/libcurl/libcurl.hash
@@ -1,4 +1,4 @@
 # Locally calculated after checking pgp signature
-# https://curl.haxx.se/download/curl-7.56.1.tar.xz.asc
-sha256 8eed282cf3a0158d567a0feaa3c4619e8e847970597b5a2c81879e8f0d1a39d1  curl-7.56.1.tar.xz
+# https://curl.haxx.se/download/curl-7.57.0.tar.xz.asc
+sha256 f5f6fd3c72b7b8389969f4fb671ed8532fa9b5bb7a5cae7ca89bc1cea45c7878  curl-7.57.0.tar.xz
 sha256 cbcf511f5702f7baf5424193a792bc9c18fab22bcbec2e6a587598389dc632c2  COPYING
diff --git a/bsp/buildroot/package/libcurl/libcurl.mk b/bsp/buildroot/package/libcurl/libcurl.mk
index 57b9c2cb..0aab58a7 100644
--- a/bsp/buildroot/package/libcurl/libcurl.mk
+++ b/bsp/buildroot/package/libcurl/libcurl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBCURL_VERSION = 7.56.1
+LIBCURL_VERSION = 7.57.0
 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.xz
 LIBCURL_SITE = https://curl.haxx.se/download
 LIBCURL_DEPENDENCIES = host-pkgconf \
diff --git a/bsp/buildroot/package/libevent/libevent.mk b/bsp/buildroot/package/libevent/libevent.mk
index 5458ce31..50e48915 100644
--- a/bsp/buildroot/package/libevent/libevent.mk
+++ b/bsp/buildroot/package/libevent/libevent.mk
@@ -12,6 +12,7 @@ LIBEVENT_LICENSE_FILES = LICENSE
 # For 0001-Disable-building-test-programs.patch
 LIBEVENT_AUTORECONF = YES
 LIBEVENT_CONF_OPTS = --disable-samples
+HOST_LIBEVENT_CONF_OPTS = --disable-samples --disable-openssl
 
 define LIBEVENT_REMOVE_PYSCRIPT
 	rm $(TARGET_DIR)/usr/bin/event_rpcgen.py
diff --git a/bsp/buildroot/package/libpqxx/0001-Fix-broken-sed-call-in-configure.ac.in.patch b/bsp/buildroot/package/libpqxx/0001-Fix-broken-sed-call-in-configure.ac.in.patch
new file mode 100644
index 00000000..672133a5
--- /dev/null
+++ b/bsp/buildroot/package/libpqxx/0001-Fix-broken-sed-call-in-configure.ac.in.patch
@@ -0,0 +1,31 @@
+From d5120738a9b6b90d19e742f3c591727d16d76c9c Mon Sep 17 00:00:00 2001
+From: Romain Naour <romain.naour@gmail.com>
+Date: Tue, 26 Dec 2017 14:09:46 +0100
+Subject: [PATCH] Fix broken sed call in configure.ac.in
+
+Upstream fix from commit [1][2]
+
+[1] 80a9d5386641ac67d4ea1b602c786b45b40b252f
+[2] 85e9336740475be25ed19924cca0961f7d844c4b
+
+Signed-off-by: Romain Naour <romain.naour@gmail.com>
+---
+ configure.ac | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/configure.ac b/configure.ac
+index 32cf5cb5..77cf7edd 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -480,7 +480,7 @@ occurring in the file.
+ ])], -L${with_postgres_lib})
+ 
+ # Remove redundant occurrances of -lpq
+-LIBS="`echo "$LIBS" | sed -e 's/-lpq[[:space:]]*[[:space:]]-lpq\>/-lpq/g'`"
++LIBS=[`echo "$LIBS" | sed -e 's/-lpq * -lpq\>/-lpq/g'`]
+ 
+ AC_LANG_POP(C)
+ 
+-- 
+2.14.3
+
diff --git a/bsp/buildroot/package/libpqxx/libpqxx.mk b/bsp/buildroot/package/libpqxx/libpqxx.mk
index 05871903..89a35202 100644
--- a/bsp/buildroot/package/libpqxx/libpqxx.mk
+++ b/bsp/buildroot/package/libpqxx/libpqxx.mk
@@ -11,6 +11,9 @@ LIBPQXX_DEPENDENCIES = postgresql
 LIBPQXX_LICENSE = BSD-3c
 LIBPQXX_LICENSE_FILES = COPYING
 
+# 0001-Fix-broken-sed-call-in-configure.ac.in.patch
+LIBPQXX_AUTORECONF = YES
+
 LIBPQXX_CONF_ENV += ac_cv_path_PG_CONFIG=$(STAGING_DIR)/usr/bin/pg_config
 
 $(eval $(autotools-package))
diff --git a/bsp/buildroot/package/libsoxr/Config.in b/bsp/buildroot/package/libsoxr/Config.in
index a218ae99..ae1ea102 100644
--- a/bsp/buildroot/package/libsoxr/Config.in
+++ b/bsp/buildroot/package/libsoxr/Config.in
@@ -2,7 +2,7 @@ config BR2_PACKAGE_LIBSOXR
 	bool "libsoxr"
 	help
 	  The SoX Resampler library `libsoxr' performs one-dimensional
-	  sample-rate conversion—it may be used, for example, to
+	  sample-rate conversion. It may be used, for example, to
 	  resample PCM-encoded audio.
 
 	  It aims to give fast and high quality results for any constant
diff --git a/bsp/buildroot/package/linphone/linphone.mk b/bsp/buildroot/package/linphone/linphone.mk
index df804907..5c678d4c 100644
--- a/bsp/buildroot/package/linphone/linphone.mk
+++ b/bsp/buildroot/package/linphone/linphone.mk
@@ -50,4 +50,11 @@ else
 LINPHONE_CONF_OPTS += --disable-libv4l1 --disable-libv4l2
 endif
 
+ifeq ($(BR2_PACKAGE_LIBUPNP),y)
+LINPHONE_DEPENDENCIES += libupnp
+LINPHONE_CONF_OPTS += --enable-upnp
+else
+LINPHONE_CONF_OPTS += --disable-upnp
+endif
+
 $(eval $(autotools-package))
diff --git a/bsp/buildroot/package/linux-headers/Config.in.host b/bsp/buildroot/package/linux-headers/Config.in.host
index bb516df2..ee9f0e9f 100644
--- a/bsp/buildroot/package/linux-headers/Config.in.host
+++ b/bsp/buildroot/package/linux-headers/Config.in.host
@@ -221,8 +221,8 @@ config BR2_DEFAULT_KERNEL_HEADERS
 	default "3.18.72"	if BR2_KERNEL_HEADERS_3_18
 	default "3.19.8"	if BR2_KERNEL_HEADERS_3_19
 	default "4.0.9"		if BR2_KERNEL_HEADERS_4_0
-	default "4.1.46"	if BR2_KERNEL_HEADERS_4_1
-	default "4.4.102"	if BR2_KERNEL_HEADERS_4_4
+	default "4.1.48"	if BR2_KERNEL_HEADERS_4_1
+	default "4.4.108"	if BR2_KERNEL_HEADERS_4_4
 	default "4.8.17"	if BR2_KERNEL_HEADERS_4_8
-	default "4.9.65"	if BR2_KERNEL_HEADERS_4_9
+	default "4.9.73"	if BR2_KERNEL_HEADERS_4_9
 	default BR2_DEFAULT_KERNEL_VERSION if BR2_KERNEL_HEADERS_VERSION
diff --git a/bsp/buildroot/package/lldpd/0003-configure-remove-check-on-CXX-compiler.patch b/bsp/buildroot/package/lldpd/0003-configure-remove-check-on-CXX-compiler.patch
new file mode 100644
index 00000000..880f603f
--- /dev/null
+++ b/bsp/buildroot/package/lldpd/0003-configure-remove-check-on-CXX-compiler.patch
@@ -0,0 +1,35 @@
+From d28b3bfa1b224f7770004dddf4dfaf10ad7ad6c9 Mon Sep 17 00:00:00 2001
+From: Damien Riegel <damien.riegel@savoirfairelinux.com>
+Date: Mon, 18 Dec 2017 14:37:08 -0500
+Subject: [PATCH] configure: remove check on CXX compiler
+
+lldpd fails to build if the toolchain doesn't have a C++ compiler
+because configure fails with the following error:
+
+  checking how to run the C++ preprocessor... /lib/cpp
+  configure: error: in `/home/dkc/src/buildroot/build-zii/build/lldpd-0.9.4':
+  configure: error: C++ preprocessor "/lib/cpp" fails sanity check
+
+Since "8d92800b: build: cleaner way to not alter CFLAGS/CPPFLAGS/LDFLAGS",
+it seems that the dependency on C++ is not required anymore, so there
+is no reason to keep this restriction. Dropping AC_PROG_CXX allows to
+build with a toolchain that doesn't have C++ just fine.
+---
+ configure.ac | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/configure.ac b/configure.ac
+index 0edceb1..5afe8f2 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -48,7 +48,6 @@ AC_PROG_CC_C99
+ if test x"$ac_cv_prog_cc_c99" = x"no"; then
+   AC_MSG_FAILURE([*** C99 support is mandatory])
+ fi
+-AC_PROG_CXX
+ AM_PROG_CC_C_O
+ AC_PROG_LIBTOOL
+ AC_PROG_LN_S
+-- 
+2.15.1
+
diff --git a/bsp/buildroot/package/lldpd/lldpd.mk b/bsp/buildroot/package/lldpd/lldpd.mk
index 349c556c..2bdda021 100644
--- a/bsp/buildroot/package/lldpd/lldpd.mk
+++ b/bsp/buildroot/package/lldpd/lldpd.mk
@@ -9,7 +9,7 @@ LLDPD_SITE = http://media.luffy.cx/files/lldpd
 LLDPD_DEPENDENCIES = host-pkgconf libevent
 LLDPD_LICENSE = ISC
 LLDPD_LICENSE_FILES = README.md
-# 0002-configure-do-not-check-for-libbsd.patch
+# 0002-configure-do-not-check-for-libbsd.patch / 0003-configure-remove-check-on-CXX-compiler.patch
 LLDPD_AUTORECONF = YES
 
 ifeq ($(BR2_PACKAGE_CHECK),y)
diff --git a/bsp/buildroot/package/mariadb/mariadb.hash b/bsp/buildroot/package/mariadb/mariadb.hash
index fd5625c8..fcca9be6 100644
--- a/bsp/buildroot/package/mariadb/mariadb.hash
+++ b/bsp/buildroot/package/mariadb/mariadb.hash
@@ -1,5 +1,5 @@
-# From https://downloads.mariadb.org/mariadb/10.1.26/
-sha256 ba88b1cb9967dea2909938a34ba89373b162b0d83e5c98a0f1c94540156bf73d  mariadb-10.1.26.tar.gz
+# From https://downloads.mariadb.org/mariadb/10.1.29/
+sha256 73bbd5602f52ab5aa4d83f465134871b6c87bda25371d098f6da5a3d98517ed4  mariadb-10.1.29.tar.gz
 
 # Hash for license files
 sha256 69ce89a0cadbe35a858398c258be93c388715e84fc0ca04e5a1fd1aa9770dd3a  README
diff --git a/bsp/buildroot/package/mariadb/mariadb.mk b/bsp/buildroot/package/mariadb/mariadb.mk
index 86b3a23f..97a1b034 100644
--- a/bsp/buildroot/package/mariadb/mariadb.mk
+++ b/bsp/buildroot/package/mariadb/mariadb.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-MARIADB_VERSION = 10.1.26
+MARIADB_VERSION = 10.1.29
 MARIADB_SITE = https://downloads.mariadb.org/interstitial/mariadb-$(MARIADB_VERSION)/source
 MARIADB_LICENSE = GPLv2 (server), GPLv2 with FLOSS exception (GPL client library), LGPLv2 (LGPL client library)
 # Tarball no longer contains LGPL license text
diff --git a/bsp/buildroot/package/mfgtools/Config.in.host b/bsp/buildroot/package/mfgtools/Config.in.host
index 1cb5a7f0..4bbdde38 100644
--- a/bsp/buildroot/package/mfgtools/Config.in.host
+++ b/bsp/buildroot/package/mfgtools/Config.in.host
@@ -11,4 +11,4 @@ config BR2_PACKAGE_HOST_MFGTOOLS
 	  production. The communication is done over USB using the
 	  Freescale UTP protocol.
 
-	  https://github.com/NXPmicro/mfgtools
+	  https://github.com/codeauroraforum/mfgtools
diff --git a/bsp/buildroot/package/mfgtools/mfgtools.hash b/bsp/buildroot/package/mfgtools/mfgtools.hash
index e73a7fa1..4932a80d 100644
--- a/bsp/buildroot/package/mfgtools/mfgtools.hash
+++ b/bsp/buildroot/package/mfgtools/mfgtools.hash
@@ -1,2 +1,4 @@
 # locally computed
-sha256  6ce93a33c269282df305cf7e517d2d14fde78203537d8ea75b064966afe48464  mfgtools-b219fc219a35c365010897ed093c40750f8cdac6.tar.gz
+sha256  055d71227d18883d6e8bc9e854c076015f9a7749820a94272e19071bf0b25c89  mfgtools-v0.02.tar.gz
+sha256  2655559a6bb1179eae514f5c7166f4ede4f2453efa9cf4dc3c045cab5d57dede  LICENSE
+sha256  0963b6e5086bf454265b0f57821a02b681d1211e40ad74c310231cb4d94815c9  README.txt
diff --git a/bsp/buildroot/package/mfgtools/mfgtools.mk b/bsp/buildroot/package/mfgtools/mfgtools.mk
index cc243524..99a72cb2 100644
--- a/bsp/buildroot/package/mfgtools/mfgtools.mk
+++ b/bsp/buildroot/package/mfgtools/mfgtools.mk
@@ -4,11 +4,11 @@
 #
 ################################################################################
 
-MFGTOOLS_VERSION = b219fc219a35c365010897ed093c40750f8cdac6
-MFGTOOLS_SITE = $(call github,NXPmicro,mfgtools,$(MFGTOOLS_VERSION))
+MFGTOOLS_VERSION = v0.02
+MFGTOOLS_SITE = $(call github,codeauroraforum,mfgtools,$(MFGTOOLS_VERSION))
 MFGTOOLS_SUBDIR = MfgToolLib
 MFGTOOLS_LICENSE = BSD-3c or CPOL
-MFGTOOLS_LICENSE_FILES = LICENSE CPOL.htm
+MFGTOOLS_LICENSE_FILES = LICENSE README.txt
 HOST_MFGTOOLS_DEPENDENCIES = host-libusb
 
 HOST_MFGTOOLS_CFLAGS = \
diff --git a/bsp/buildroot/package/mtools/mtools.mk b/bsp/buildroot/package/mtools/mtools.mk
index adba1fc4..1ba1e986 100644
--- a/bsp/buildroot/package/mtools/mtools.mk
+++ b/bsp/buildroot/package/mtools/mtools.mk
@@ -13,9 +13,13 @@ MTOOLS_CONF_OPTS = --without-x
 # info documentation not needed
 MTOOLS_CONF_ENV = \
 	ac_cv_func_setpgrp_void=yes \
+	ac_cv_lib_bsd_gethostbyname=no \
+	ac_cv_lib_bsd_main=no \
 	ac_cv_path_INSTALL_INFO=
 
 HOST_MTOOLS_CONF_ENV = \
+	ac_cv_lib_bsd_gethostbyname=no \
+	ac_cv_lib_bsd_main=no \
 	ac_cv_path_INSTALL_INFO=
 
 # link with iconv if enabled
diff --git a/bsp/buildroot/package/nodejs/6.11.5/0001-gyp-force-link-command-to-use-CXX.patch b/bsp/buildroot/package/nodejs/6.12.2/0001-gyp-force-link-command-to-use-CXX.patch
similarity index 100%
rename from bsp/buildroot/package/nodejs/6.11.5/0001-gyp-force-link-command-to-use-CXX.patch
rename to bsp/buildroot/package/nodejs/6.12.2/0001-gyp-force-link-command-to-use-CXX.patch
diff --git a/bsp/buildroot/package/nodejs/6.11.5/0002-src-add-HAVE_OPENSSL-directive-to-openssl_config.patch b/bsp/buildroot/package/nodejs/6.12.2/0002-src-add-HAVE_OPENSSL-directive-to-openssl_config.patch
similarity index 100%
rename from bsp/buildroot/package/nodejs/6.11.5/0002-src-add-HAVE_OPENSSL-directive-to-openssl_config.patch
rename to bsp/buildroot/package/nodejs/6.12.2/0002-src-add-HAVE_OPENSSL-directive-to-openssl_config.patch
diff --git a/bsp/buildroot/package/nodejs/Config.in b/bsp/buildroot/package/nodejs/Config.in
index 9ce02306..c88baaff 100644
--- a/bsp/buildroot/package/nodejs/Config.in
+++ b/bsp/buildroot/package/nodejs/Config.in
@@ -43,7 +43,7 @@ config BR2_PACKAGE_NODEJS_V8_ARCH_SUPPORTS
 
 config BR2_PACKAGE_NODEJS_VERSION_STRING
 	string
-	default "6.11.5"		if BR2_PACKAGE_NODEJS_V8_ARCH_SUPPORTS
+	default "6.12.2"		if BR2_PACKAGE_NODEJS_V8_ARCH_SUPPORTS
 	default "0.10.48"
 
 config BR2_PACKAGE_NODEJS_NPM
diff --git a/bsp/buildroot/package/nodejs/nodejs.hash b/bsp/buildroot/package/nodejs/nodejs.hash
index 319774c6..f82ce1e3 100644
--- a/bsp/buildroot/package/nodejs/nodejs.hash
+++ b/bsp/buildroot/package/nodejs/nodejs.hash
@@ -1,5 +1,5 @@
 # From upstream URL: http://nodejs.org/dist/v0.10.48/SHASUMS256.txt
 sha256  365a93d9acc076a0d93f087d269f376abeebccad599a9dab72f2f6ed96c8ae6e  node-v0.10.48.tar.xz
 
-# From upstream URL: http://nodejs.org/dist/v6.11.5/SHASUMS256.txt
-sha256  1c6de415216799fbaeca82304b3fef87accc7101ebf2ead7d5c545e0779e8aaf  node-v6.11.5.tar.xz
+# From upstream URL: http://nodejs.org/dist/v6.12.2/SHASUMS256.txt
+sha256  33677c1fcf6a2f35d2718834fd0afdb36166b0cc68349820e05d8f9316b1dafc  node-v6.12.2.tar.xz
diff --git a/bsp/buildroot/package/nut/nut.mk b/bsp/buildroot/package/nut/nut.mk
index 7136e834..adc64c90 100644
--- a/bsp/buildroot/package/nut/nut.mk
+++ b/bsp/buildroot/package/nut/nut.mk
@@ -14,6 +14,9 @@ NUT_DEPENDENCIES = host-pkgconf
 # Our patch changes m4 macros, so we need to autoreconf
 NUT_AUTORECONF = YES
 
+# Race condition in tools generation
+NUT_MAKE = $(MAKE1)
+
 # Put the PID files in a read-write place (/var/run is a tmpfs)
 # since the default location (/var/state/ups) maybe readonly.
 NUT_CONF_OPTS = \
diff --git a/bsp/buildroot/package/openssl/openssl.hash b/bsp/buildroot/package/openssl/openssl.hash
index c6226c30..e3d3da75 100644
--- a/bsp/buildroot/package/openssl/openssl.hash
+++ b/bsp/buildroot/package/openssl/openssl.hash
@@ -1,7 +1,8 @@
-# From https://www.openssl.org/source/openssl-1.0.2m.tar.gz.sha256
-sha256	8c6ff15ec6b319b50788f42c7abc2890c08ba5a1cdcd3810eb9092deada37b0f	openssl-1.0.2m.tar.gz
+# From https://www.openssl.org/source/openssl-1.0.2n.tar.gz.sha256
+sha256	370babb75f278c39e0c50e8c4e7493bc0f18db6867478341a832a982fd15a8fe	openssl-1.0.2n.tar.gz
 # Locally computed
 sha256	eddd8a5123748052c598214487ac178e4bfa4e31ba2ec520c70d59c8c5bfa2e9	openssl-1.0.2a-parallel-install-dirs.patch?id=c8abcbe8de5d3b6cdd68c162f398c011ff6e2d9d
 sha256	147c3eeaad614c044749ea527cb433eae5e2d5cad34a78c6ba61cd967bfbe01f	openssl-1.0.2a-parallel-obj-headers.patch?id=c8abcbe8de5d3b6cdd68c162f398c011ff6e2d9d
 sha256	30cb49489de5041841a74da9155cd4fabfbce33237262ba7cd23974314ae2956	openssl-1.0.2a-parallel-symlinking.patch?id=c8abcbe8de5d3b6cdd68c162f398c011ff6e2d9d
 sha256	deaf6f3af41874ecc6d63841ea14b8e6c71cea81d4a511a754bc90c9a993147f	openssl-1.0.2d-parallel-build.patch?id=c8abcbe8de5d3b6cdd68c162f398c011ff6e2d9d
+sha256	9ee37d72966bb4a841343f0606ce44d41b3eae4df4285200c5a8ddc2b935992a	LICENSE
diff --git a/bsp/buildroot/package/openssl/openssl.mk b/bsp/buildroot/package/openssl/openssl.mk
index c7ff59f0..ef838770 100644
--- a/bsp/buildroot/package/openssl/openssl.mk
+++ b/bsp/buildroot/package/openssl/openssl.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-OPENSSL_VERSION = 1.0.2m
+OPENSSL_VERSION = 1.0.2n
 OPENSSL_SITE = http://www.openssl.org/source
 OPENSSL_LICENSE = OpenSSL or SSLeay
 OPENSSL_LICENSE_FILES = LICENSE
diff --git a/bsp/buildroot/package/rsync/0001-Check-fname-in-recv_files-sooner.patch b/bsp/buildroot/package/rsync/0001-Check-fname-in-recv_files-sooner.patch
new file mode 100644
index 00000000..36169603
--- /dev/null
+++ b/bsp/buildroot/package/rsync/0001-Check-fname-in-recv_files-sooner.patch
@@ -0,0 +1,45 @@
+From 3e06d40029cfdce9d0f73d87cfd4edaf54be9c51 Mon Sep 17 00:00:00 2001
+From: Jeriko One <jeriko.one@gmx.us>
+Date: Thu, 2 Nov 2017 23:44:19 -0700
+Subject: [PATCH] Check fname in recv_files sooner.
+
+Signed-off-by: Baruch Siach <baruch@tkos.co.il>
+---
+Patch status: upstream commit 3e06d40029c
+
+ receiver.c | 12 ++++++------
+ 1 file changed, 6 insertions(+), 6 deletions(-)
+
+diff --git a/receiver.c b/receiver.c
+index baae3a919cdd..9fdafa152cb3 100644
+--- a/receiver.c
++++ b/receiver.c
+@@ -574,6 +574,12 @@ int recv_files(int f_in, int f_out, char *local_name)
+ 			file = dir_flist->files[cur_flist->parent_ndx];
+ 		fname = local_name ? local_name : f_name(file, fbuf);
+ 
++		if (daemon_filter_list.head
++		    && check_filter(&daemon_filter_list, FLOG, fname, 0) < 0) {
++			rprintf(FERROR, "attempt to hack rsync failed.\n");
++			exit_cleanup(RERR_PROTOCOL);
++		}
++
+ 		if (DEBUG_GTE(RECV, 1))
+ 			rprintf(FINFO, "recv_files(%s)\n", fname);
+ 
+@@ -645,12 +651,6 @@ int recv_files(int f_in, int f_out, char *local_name)
+ 
+ 		cleanup_got_literal = 0;
+ 
+-		if (daemon_filter_list.head
+-		    && check_filter(&daemon_filter_list, FLOG, fname, 0) < 0) {
+-			rprintf(FERROR, "attempt to hack rsync failed.\n");
+-			exit_cleanup(RERR_PROTOCOL);
+-		}
+-
+ 		if (read_batch) {
+ 			int wanted = redoing
+ 				   ? we_want_redo(ndx)
+-- 
+2.15.0
+
diff --git a/bsp/buildroot/package/rsync/0002-Sanitize-xname-in-read_ndx_and_attrs.patch b/bsp/buildroot/package/rsync/0002-Sanitize-xname-in-read_ndx_and_attrs.patch
new file mode 100644
index 00000000..1e5d3717
--- /dev/null
+++ b/bsp/buildroot/package/rsync/0002-Sanitize-xname-in-read_ndx_and_attrs.patch
@@ -0,0 +1,39 @@
+From 70aeb5fddd1b2f8e143276f8d5a085db16c593b9 Mon Sep 17 00:00:00 2001
+From: Jeriko One <jeriko.one@gmx.us>
+Date: Thu, 16 Nov 2017 17:05:42 -0800
+Subject: [PATCH] Sanitize xname in read_ndx_and_attrs.
+
+Signed-off-by: Baruch Siach <baruch@tkos.co.il>
+---
+Patch status: upstream commit 70aeb5fddd
+
+ rsync.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+diff --git a/rsync.c b/rsync.c
+index b82e59881018..a0945ba4e7f5 100644
+--- a/rsync.c
++++ b/rsync.c
+@@ -49,6 +49,7 @@ extern int flist_eof;
+ extern int file_old_total;
+ extern int keep_dirlinks;
+ extern int make_backups;
++extern int sanitize_paths;
+ extern struct file_list *cur_flist, *first_flist, *dir_flist;
+ extern struct chmod_mode_struct *daemon_chmod_modes;
+ #ifdef ICONV_OPTION
+@@ -396,6 +397,11 @@ int read_ndx_and_attrs(int f_in, int f_out, int *iflag_ptr, uchar *type_ptr,
+ 	if (iflags & ITEM_XNAME_FOLLOWS) {
+ 		if ((len = read_vstring(f_in, buf, MAXPATHLEN)) < 0)
+ 			exit_cleanup(RERR_PROTOCOL);
++
++		if (sanitize_paths) {
++			sanitize_path(buf, buf, "", 0, SP_DEFAULT);
++			len = strlen(buf);
++		}
+ 	} else {
+ 		*buf = '\0';
+ 		len = -1;
+-- 
+2.15.0
+
diff --git a/bsp/buildroot/package/rsync/0003-Check-daemon-filter-against-fnamecmp-in-recv_files.patch b/bsp/buildroot/package/rsync/0003-Check-daemon-filter-against-fnamecmp-in-recv_files.patch
new file mode 100644
index 00000000..b19921c3
--- /dev/null
+++ b/bsp/buildroot/package/rsync/0003-Check-daemon-filter-against-fnamecmp-in-recv_files.patch
@@ -0,0 +1,28 @@
+From 5509597decdbd7b91994210f700329d8a35e70a1 Mon Sep 17 00:00:00 2001
+From: Jeriko One <jeriko.one@gmx.us>
+Date: Thu, 16 Nov 2017 17:26:03 -0800
+Subject: [PATCH] Check daemon filter against fnamecmp in recv_files().
+
+Signed-off-by: Baruch Siach <baruch@tkos.co.il>
+---
+Patch status: upstream commit 5509597dec
+
+ receiver.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/receiver.c b/receiver.c
+index 9fdafa152cb3..9c46242e013c 100644
+--- a/receiver.c
++++ b/receiver.c
+@@ -722,7 +722,7 @@ int recv_files(int f_in, int f_out, char *local_name)
+ 				break;
+ 			}
+ 			if (!fnamecmp || (daemon_filter_list.head
+-			  && check_filter(&daemon_filter_list, FLOG, fname, 0) < 0)) {
++			  && check_filter(&daemon_filter_list, FLOG, fnamecmp, 0) < 0)) {
+ 				fnamecmp = fname;
+ 				fnamecmp_type = FNAMECMP_FNAME;
+ 			}
+-- 
+2.15.0
+
diff --git a/bsp/buildroot/package/rsync/0004-Enforce-trailing-0-when-receiving-xattr-name-values.patch b/bsp/buildroot/package/rsync/0004-Enforce-trailing-0-when-receiving-xattr-name-values.patch
new file mode 100644
index 00000000..be904001
--- /dev/null
+++ b/bsp/buildroot/package/rsync/0004-Enforce-trailing-0-when-receiving-xattr-name-values.patch
@@ -0,0 +1,33 @@
+From 47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1 Mon Sep 17 00:00:00 2001
+From: Wayne Davison <wayned@samba.org>
+Date: Sun, 5 Nov 2017 11:33:15 -0800
+Subject: [PATCH] Enforce trailing \0 when receiving xattr name values. Fixes
+ bug 13112.
+
+Fixes CVE-2017-16548
+
+Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
+---
+Patch status: upstream commit 47a63d90e7
+
+ xattrs.c | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/xattrs.c b/xattrs.c
+index 68305d75..4867e6f5 100644
+--- a/xattrs.c
++++ b/xattrs.c
+@@ -824,6 +824,10 @@ void receive_xattr(int f, struct file_struct *file)
+ 			out_of_memory("receive_xattr");
+ 		name = ptr + dget_len + extra_len;
+ 		read_buf(f, name, name_len);
++		if (name_len < 1 || name[name_len-1] != '\0') {
++			rprintf(FERROR, "Invalid xattr name received (missing trailing \\0).\n");
++			exit_cleanup(RERR_FILEIO);
++		}
+ 		if (dget_len == datum_len)
+ 			read_buf(f, ptr, dget_len);
+ 		else {
+-- 
+2.11.0
+
diff --git a/bsp/buildroot/package/samba4/samba4.mk b/bsp/buildroot/package/samba4/samba4.mk
index c8b1e5ad..4e7dc5b7 100644
--- a/bsp/buildroot/package/samba4/samba4.mk
+++ b/bsp/buildroot/package/samba4/samba4.mk
@@ -80,7 +80,7 @@ endef
 SAMBA4_POST_INSTALL_TARGET_HOOKS += SAMBA4_REMOVE_CTDB_TESTS
 
 define SAMBA4_CONFIGURE_CMDS
-	cp package/samba4/samba4-cache.txt $(@D)/cache.txt;
+	$(INSTALL) -m 0644 package/samba4/samba4-cache.txt $(@D)/cache.txt;
 	echo 'Checking uname machine type: $(BR2_ARCH)' >>$(@D)/cache.txt;
 	(cd $(@D); \
 		PYTHON_CONFIG="$(STAGING_DIR)/usr/bin/python-config" \
diff --git a/bsp/buildroot/package/tor/tor.hash b/bsp/buildroot/package/tor/tor.hash
index ba0b47af..8b5a3958 100644
--- a/bsp/buildroot/package/tor/tor.hash
+++ b/bsp/buildroot/package/tor/tor.hash
@@ -1,2 +1,2 @@
 # Locally computed
-sha256 6e7466625d53812f23c2ad60a873c5855f63f756fde0fc5cbeda8d32cee1086b  tor-0.2.9.12.tar.gz
+sha256 44d9ddca1479f517b74067fe55e919d8d3643645618d5a1f6a5e033765781979  tor-0.2.9.14.tar.gz
diff --git a/bsp/buildroot/package/tor/tor.mk b/bsp/buildroot/package/tor/tor.mk
index 4cc5c483..f87b10f3 100644
--- a/bsp/buildroot/package/tor/tor.mk
+++ b/bsp/buildroot/package/tor/tor.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-TOR_VERSION = 0.2.9.12
+TOR_VERSION = 0.2.9.14
 TOR_SITE = https://dist.torproject.org
 TOR_LICENSE = BSD-3c
 TOR_LICENSE_FILES = LICENSE
diff --git a/bsp/buildroot/package/vlc/0013-codec-avcodec-check-avcodec-visible-sizes.patch b/bsp/buildroot/package/vlc/0013-codec-avcodec-check-avcodec-visible-sizes.patch
deleted file mode 100644
index 41a5e25d..00000000
--- a/bsp/buildroot/package/vlc/0013-codec-avcodec-check-avcodec-visible-sizes.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-From 6cc73bcad19da2cd2e95671173f2e0d203a57e9b Mon Sep 17 00:00:00 2001
-From: Francois Cartegnie <fcvlcdev@free.fr>
-Date: Thu, 29 Jun 2017 09:45:20 +0200
-Subject: [PATCH] codec: avcodec: check avcodec visible sizes
-
-refs #18467
-
-Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
----
- modules/codec/avcodec/video.c | 6 ++++--
- 1 file changed, 4 insertions(+), 2 deletions(-)
-
-diff --git a/modules/codec/avcodec/video.c b/modules/codec/avcodec/video.c
-index 1bcad21..ce52544 100644
---- a/modules/codec/avcodec/video.c
-+++ b/modules/codec/avcodec/video.c
-@@ -137,9 +137,11 @@ static inline picture_t *ffmpeg_NewPictBuf( decoder_t *p_dec,
-     }
- 
- 
--    if( width == 0 || height == 0 || width > 8192 || height > 8192 )
-+    if( width == 0 || height == 0 || width > 8192 || height > 8192 ||
-+        width < p_context->width || height < p_context->height )
-     {
--        msg_Err( p_dec, "Invalid frame size %dx%d.", width, height );
-+        msg_Err( p_dec, "Invalid frame size %dx%d. vsz %dx%d",
-+                 width, height, p_context->width, p_context->height );
-         return NULL; /* invalid display size */
-     }
-     p_dec->fmt_out.video.i_width = width;
--- 
-2.1.4
-
diff --git a/bsp/buildroot/package/vlc/0014-decoder-check-visible-size-when-creating-buffer.patch b/bsp/buildroot/package/vlc/0014-decoder-check-visible-size-when-creating-buffer.patch
deleted file mode 100644
index a16dcf0e..00000000
--- a/bsp/buildroot/package/vlc/0014-decoder-check-visible-size-when-creating-buffer.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-From a38a85db58c569cc592d9380cc07096757ef3d49 Mon Sep 17 00:00:00 2001
-From: Francois Cartegnie <fcvlcdev@free.fr>
-Date: Thu, 29 Jun 2017 11:09:02 +0200
-Subject: [PATCH] decoder: check visible size when creating buffer
-
-early reject invalid visible size
-mishandled by filters.
-
-refs #18467
-
-Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
----
- src/input/decoder.c | 4 +++-
- 1 file changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/src/input/decoder.c b/src/input/decoder.c
-index 2c0823f..a216165 100644
---- a/src/input/decoder.c
-+++ b/src/input/decoder.c
-@@ -2060,7 +2060,9 @@ static picture_t *vout_new_buffer( decoder_t *p_dec )
-         vout_thread_t *p_vout;
- 
-         if( !p_dec->fmt_out.video.i_width ||
--            !p_dec->fmt_out.video.i_height )
-+            !p_dec->fmt_out.video.i_height ||
-+            p_dec->fmt_out.video.i_width < p_dec->fmt_out.video.i_visible_width ||
-+            p_dec->fmt_out.video.i_height < p_dec->fmt_out.video.i_visible_height )
-         {
-             /* Can't create a new vout without display size */
-             return NULL;
--- 
-2.1.4
-
diff --git a/bsp/buildroot/package/vlc/vlc.hash b/bsp/buildroot/package/vlc/vlc.hash
index 628dad74..02b70ef9 100644
--- a/bsp/buildroot/package/vlc/vlc.hash
+++ b/bsp/buildroot/package/vlc/vlc.hash
@@ -1,2 +1,8 @@
-# From http://download.videolan.org/pub/videolan/vlc/2.2.6/vlc-2.2.6.tar.xz.sha256
-sha256 c403d3accd9a400eb2181c958f3e7bc5524fe5738425f4253d42883b425a42a8  vlc-2.2.6.tar.xz
+# From http://download.videolan.org/pub/videolan/vlc/2.2.8/vlc-2.2.8.tar.xz.sha256
+sha256 9bf046848fb56d93518881b39099b8288ee005d5ba0ddf705b6f6643b8d562ec vlc-2.2.8.tar.xz
+# From http://download.videolan.org/pub/videolan/vlc/2.2.8/vlc-2.2.8.tar.xz.sha1
+sha1 b960ec5bdb9a51da285430fc68962927ccc87187 vlc-2.2.8.tar.xz
+# From http://download.videolan.org/pub/videolan/vlc/2.2.8/vlc-2.2.8.tar.xz.md5
+md5 b721fddf65aaf64eeee5629aa9bf7c9e vlc-2.2.8.tar.xz
+sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
+sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551  COPYING.LIB
diff --git a/bsp/buildroot/package/vlc/vlc.mk b/bsp/buildroot/package/vlc/vlc.mk
index 47fb3e80..dfa84c3f 100644
--- a/bsp/buildroot/package/vlc/vlc.mk
+++ b/bsp/buildroot/package/vlc/vlc.mk
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-VLC_VERSION = 2.2.6
-VLC_SITE = http://get.videolan.org/vlc/$(VLC_VERSION)
+VLC_VERSION = 2.2.8
+VLC_SITE = https://get.videolan.org/vlc/$(VLC_VERSION)
 VLC_SOURCE = vlc-$(VLC_VERSION).tar.xz
 VLC_LICENSE = GPLv2+, LGPLv2.1+
 VLC_LICENSE_FILES = COPYING COPYING.LIB
diff --git a/bsp/buildroot/package/webkitgtk/webkitgtk.hash b/bsp/buildroot/package/webkitgtk/webkitgtk.hash
index 669bb1cc..3d64b6f5 100644
--- a/bsp/buildroot/package/webkitgtk/webkitgtk.hash
+++ b/bsp/buildroot/package/webkitgtk/webkitgtk.hash
@@ -1,4 +1,8 @@
-# From https://webkitgtk.org/releases/webkitgtk-2.18.3.tar.xz.sums
-md5 264a22d7467deae606e42b6eb5dd65af webkitgtk-2.18.3.tar.xz
-sha1 164cad34281ef597a3d4ad214e8037c3ddef4d17 webkitgtk-2.18.3.tar.xz
-sha256 e15420e1616a6f70f321541d467af5ca285bff66b1e0fa68a01df3ccf1b18f9e webkitgtk-2.18.3.tar.xz
+# From https://webkitgtk.org/releases/webkitgtk-2.18.4.tar.xz.sums
+md5 c4686971eac2760bab685e21ac8849be webkitgtk-2.18.4.tar.xz
+sha1 709616b445158dc3163a64bb59e95aadbe58949c webkitgtk-2.18.4.tar.xz
+sha256 87b6bb9a6065b949ecbe6191313c43e57ad28efdf1f2b5e763405093520632b8 webkitgtk-2.18.4.tar.xz
+
+# Hashes for license files:
+sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE
+sha256 f2b3bd09663381deb99721109d22b47af1213bb43007a8b56a06c6375c8050ce Source/WebCore/LICENSE-LGPL-2.1
diff --git a/bsp/buildroot/package/webkitgtk/webkitgtk.mk b/bsp/buildroot/package/webkitgtk/webkitgtk.mk
index 43e9aa05..00f7920a 100644
--- a/bsp/buildroot/package/webkitgtk/webkitgtk.mk
+++ b/bsp/buildroot/package/webkitgtk/webkitgtk.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WEBKITGTK_VERSION = 2.18.3
+WEBKITGTK_VERSION = 2.18.4
 WEBKITGTK_SITE = http://www.webkitgtk.org/releases
 WEBKITGTK_SOURCE = webkitgtk-$(WEBKITGTK_VERSION).tar.xz
 WEBKITGTK_INSTALL_STAGING = YES
diff --git a/bsp/buildroot/package/wireshark/wireshark.hash b/bsp/buildroot/package/wireshark/wireshark.hash
index 3494f2e5..cffdab2a 100644
--- a/bsp/buildroot/package/wireshark/wireshark.hash
+++ b/bsp/buildroot/package/wireshark/wireshark.hash
@@ -1,2 +1,2 @@
-# From: https://www.wireshark.org/download/src/all-versions/SIGNATURES-2.2.10.txt
-sha256 8574a5e1fdec7affae640924bd46c1aed1bd866e02632fa5625e1450e4a50707  wireshark-2.2.10.tar.bz2
+# From: https://www.wireshark.org/download/src/all-versions/SIGNATURES-2.2.11.txt
+sha256 a9f11621e85d7e1d72259157edd94825e72af3fd72e184b8474459f92ad5fc40  wireshark-2.2.11.tar.bz2
diff --git a/bsp/buildroot/package/wireshark/wireshark.mk b/bsp/buildroot/package/wireshark/wireshark.mk
index 0b781a23..76c0db38 100644
--- a/bsp/buildroot/package/wireshark/wireshark.mk
+++ b/bsp/buildroot/package/wireshark/wireshark.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WIRESHARK_VERSION = 2.2.10
+WIRESHARK_VERSION = 2.2.11
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.bz2
 WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license
diff --git a/bsp/buildroot/package/x11r7/xlib_libXcursor/xlib_libXcursor.hash b/bsp/buildroot/package/x11r7/xlib_libXcursor/xlib_libXcursor.hash
index 0135ac9d..7da9eb8c 100644
--- a/bsp/buildroot/package/x11r7/xlib_libXcursor/xlib_libXcursor.hash
+++ b/bsp/buildroot/package/x11r7/xlib_libXcursor/xlib_libXcursor.hash
@@ -1,2 +1,5 @@
-# From http://lists.x.org/archives/xorg-announce/2013-May/002229.html
-sha256	9bc6acb21ca14da51bda5bc912c8955bc6e5e433f0ab00c5e8bef842596c33df	libXcursor-1.1.14.tar.bz2
+# From https://lists.x.org/archives/xorg-announce/2017-November/002823.html
+md5  58fe3514e1e7135cf364101e714d1a14  libXcursor-1.1.15.tar.bz2
+sha1 3e19f991f244b7fa31566adce7ead078424296cf  libXcursor-1.1.15.tar.bz2
+sha256 294e670dd37cd23995e69aae626629d4a2dfe5708851bbc13d032401b7a3df6b  libXcursor-1.1.15.tar.bz2
+sha512 53ad0fa2afd7b4cf1108b560e44ea71abdf5c55a18df243d7123942513589c927f5c105395f790d8769959e0129db54264e6aac7efd51a5f1aec270379b1f2f5  libXcursor-1.1.15.tar.bz2
diff --git a/bsp/buildroot/package/x11r7/xlib_libXcursor/xlib_libXcursor.mk b/bsp/buildroot/package/x11r7/xlib_libXcursor/xlib_libXcursor.mk
index c59c01a5..b27aa653 100644
--- a/bsp/buildroot/package/x11r7/xlib_libXcursor/xlib_libXcursor.mk
+++ b/bsp/buildroot/package/x11r7/xlib_libXcursor/xlib_libXcursor.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-XLIB_LIBXCURSOR_VERSION = 1.1.14
+XLIB_LIBXCURSOR_VERSION = 1.1.15
 XLIB_LIBXCURSOR_SOURCE = libXcursor-$(XLIB_LIBXCURSOR_VERSION).tar.bz2
 XLIB_LIBXCURSOR_SITE = http://xorg.freedesktop.org/releases/individual/lib
 XLIB_LIBXCURSOR_LICENSE = MIT
diff --git a/bsp/buildroot/package/x11r7/xlib_libXfont/0001-Check-for-end-of-string-in-PatternMatch-CVE-2017-137.patch b/bsp/buildroot/package/x11r7/xlib_libXfont/0001-Check-for-end-of-string-in-PatternMatch-CVE-2017-137.patch
deleted file mode 100644
index 3795179a..00000000
--- a/bsp/buildroot/package/x11r7/xlib_libXfont/0001-Check-for-end-of-string-in-PatternMatch-CVE-2017-137.patch
+++ /dev/null
@@ -1,34 +0,0 @@
-From d1e670a4a8704b8708e493ab6155589bcd570608 Mon Sep 17 00:00:00 2001
-From: Michal Srb <msrb@suse.com>
-Date: Thu, 20 Jul 2017 13:38:53 +0200
-Subject: [PATCH] Check for end of string in PatternMatch (CVE-2017-13720)
-
-If a pattern contains '?' character, any character in the string is skipped,
-even if it is '\0'. The rest of the matching then reads invalid memory.
-
-Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
-Signed-off-by: Julien Cristau <jcristau@debian.org>
-Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
----
- src/fontfile/fontdir.c | 4 +++-
- 1 file changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/src/fontfile/fontdir.c b/src/fontfile/fontdir.c
-index 4ce2473..996b7d1 100644
---- a/src/fontfile/fontdir.c
-+++ b/src/fontfile/fontdir.c
-@@ -400,8 +400,10 @@ PatternMatch(char *pat, int patdashes, char *string, int stringdashes)
- 		}
- 	    }
- 	case '?':
--	    if (*string++ == XK_minus)
-+	    if ((t = *string++) == XK_minus)
- 		stringdashes--;
-+	    if (!t)
-+		return 0;
- 	    break;
- 	case '\0':
- 	    return (*string == '\0');
--- 
-2.11.0
-
diff --git a/bsp/buildroot/package/x11r7/xlib_libXfont/0002-pcfGetProperties-Check-string-boundaries-CVE-2017-13.patch b/bsp/buildroot/package/x11r7/xlib_libXfont/0002-pcfGetProperties-Check-string-boundaries-CVE-2017-13.patch
deleted file mode 100644
index 709e446e..00000000
--- a/bsp/buildroot/package/x11r7/xlib_libXfont/0002-pcfGetProperties-Check-string-boundaries-CVE-2017-13.patch
+++ /dev/null
@@ -1,52 +0,0 @@
-From 672bb944311392e2415b39c0d63b1e1902905bcd Mon Sep 17 00:00:00 2001
-From: Michal Srb <msrb@suse.com>
-Date: Thu, 20 Jul 2017 17:05:23 +0200
-Subject: [PATCH] pcfGetProperties: Check string boundaries (CVE-2017-13722)
-
-Without the checks a malformed PCF file can cause the library to make
-atom from random heap memory that was behind the `strings` buffer.
-This may crash the process or leak information.
-
-Signed-off-by: Julien Cristau <jcristau@debian.org>
-Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
----
- src/bitmap/pcfread.c | 13 +++++++++++--
- 1 file changed, 11 insertions(+), 2 deletions(-)
-
-diff --git a/src/bitmap/pcfread.c b/src/bitmap/pcfread.c
-index dab1c44..ae34c28 100644
---- a/src/bitmap/pcfread.c
-+++ b/src/bitmap/pcfread.c
-@@ -45,6 +45,7 @@ from The Open Group.
- 
- #include <stdarg.h>
- #include <stdint.h>
-+#include <string.h>
- 
- void
- pcfError(const char* message, ...)
-@@ -311,11 +312,19 @@ pcfGetProperties(FontInfoPtr pFontInfo, FontFilePtr file,
-     if (IS_EOF(file)) goto Bail;
-     position += string_size;
-     for (i = 0; i < nprops; i++) {
-+	if (props[i].name >= string_size) {
-+	    pcfError("pcfGetProperties(): String starts out of bounds (%ld/%d)\n", props[i].name, string_size);
-+	    goto Bail;
-+	}
- 	props[i].name = MakeAtom(strings + props[i].name,
--				 strlen(strings + props[i].name), TRUE);
-+				 strnlen(strings + props[i].name, string_size - props[i].name), TRUE);
- 	if (isStringProp[i]) {
-+	    if (props[i].value >= string_size) {
-+		pcfError("pcfGetProperties(): String starts out of bounds (%ld/%d)\n", props[i].value, string_size);
-+		goto Bail;
-+	    }
- 	    props[i].value = MakeAtom(strings + props[i].value,
--				      strlen(strings + props[i].value), TRUE);
-+				      strnlen(strings + props[i].value, string_size - props[i].value), TRUE);
- 	}
-     }
-     free(strings);
--- 
-2.11.0
-
diff --git a/bsp/buildroot/package/x11r7/xlib_libXfont/xlib_libXfont.hash b/bsp/buildroot/package/x11r7/xlib_libXfont/xlib_libXfont.hash
index 6db8339c..ea043487 100644
--- a/bsp/buildroot/package/x11r7/xlib_libXfont/xlib_libXfont.hash
+++ b/bsp/buildroot/package/x11r7/xlib_libXfont/xlib_libXfont.hash
@@ -1,2 +1,5 @@
-# From https://lists.x.org/archives/xorg-announce/2016-August/002702.html
-sha256 02945ea68da447102f3e6c2b896c1d2061fd115de99404facc2aca3ad7010d71  libXfont-1.5.2.tar.bz2
+# From https://lists.x.org/archives/xorg-announce/2017-November/002825.html
+md5  16eaf156edd79b68038b6a7c44aa9e9b  libXfont-1.5.4.tar.bz2
+sha1 9db050f63b9c4cb19e0dbb40575558ccb95719ca  libXfont-1.5.4.tar.bz2
+sha256 1a7f7490774c87f2052d146d1e0e64518d32e6848184a18654e8d0bb57883242  libXfont-1.5.4.tar.bz2
+sha512 864edbaff45c44bd92bc4b06275c73fdf584a9b88bc523a297d4c75c01ca253f438463e929af70d753ddecfa648bb0b9bcf0ec72267db9f2b1704f7afa906cb3  libXfont-1.5.4.tar.bz2
diff --git a/bsp/buildroot/package/x11r7/xlib_libXfont/xlib_libXfont.mk b/bsp/buildroot/package/x11r7/xlib_libXfont/xlib_libXfont.mk
index 422c01d1..30163eec 100644
--- a/bsp/buildroot/package/x11r7/xlib_libXfont/xlib_libXfont.mk
+++ b/bsp/buildroot/package/x11r7/xlib_libXfont/xlib_libXfont.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-XLIB_LIBXFONT_VERSION = 1.5.2
+XLIB_LIBXFONT_VERSION = 1.5.4
 XLIB_LIBXFONT_SOURCE = libXfont-$(XLIB_LIBXFONT_VERSION).tar.bz2
 XLIB_LIBXFONT_SITE = http://xorg.freedesktop.org/releases/individual/lib
 XLIB_LIBXFONT_LICENSE = MIT
diff --git a/bsp/buildroot/package/x11r7/xlib_libXfont2/0001-Check-for-end-of-string-in-PatternMatch-CVE-2017-137.patch b/bsp/buildroot/package/x11r7/xlib_libXfont2/0001-Check-for-end-of-string-in-PatternMatch-CVE-2017-137.patch
deleted file mode 100644
index 3795179a..00000000
--- a/bsp/buildroot/package/x11r7/xlib_libXfont2/0001-Check-for-end-of-string-in-PatternMatch-CVE-2017-137.patch
+++ /dev/null
@@ -1,34 +0,0 @@
-From d1e670a4a8704b8708e493ab6155589bcd570608 Mon Sep 17 00:00:00 2001
-From: Michal Srb <msrb@suse.com>
-Date: Thu, 20 Jul 2017 13:38:53 +0200
-Subject: [PATCH] Check for end of string in PatternMatch (CVE-2017-13720)
-
-If a pattern contains '?' character, any character in the string is skipped,
-even if it is '\0'. The rest of the matching then reads invalid memory.
-
-Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
-Signed-off-by: Julien Cristau <jcristau@debian.org>
-Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
----
- src/fontfile/fontdir.c | 4 +++-
- 1 file changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/src/fontfile/fontdir.c b/src/fontfile/fontdir.c
-index 4ce2473..996b7d1 100644
---- a/src/fontfile/fontdir.c
-+++ b/src/fontfile/fontdir.c
-@@ -400,8 +400,10 @@ PatternMatch(char *pat, int patdashes, char *string, int stringdashes)
- 		}
- 	    }
- 	case '?':
--	    if (*string++ == XK_minus)
-+	    if ((t = *string++) == XK_minus)
- 		stringdashes--;
-+	    if (!t)
-+		return 0;
- 	    break;
- 	case '\0':
- 	    return (*string == '\0');
--- 
-2.11.0
-
diff --git a/bsp/buildroot/package/x11r7/xlib_libXfont2/0002-pcfGetProperties-Check-string-boundaries-CVE-2017-13.patch b/bsp/buildroot/package/x11r7/xlib_libXfont2/0002-pcfGetProperties-Check-string-boundaries-CVE-2017-13.patch
deleted file mode 100644
index 709e446e..00000000
--- a/bsp/buildroot/package/x11r7/xlib_libXfont2/0002-pcfGetProperties-Check-string-boundaries-CVE-2017-13.patch
+++ /dev/null
@@ -1,52 +0,0 @@
-From 672bb944311392e2415b39c0d63b1e1902905bcd Mon Sep 17 00:00:00 2001
-From: Michal Srb <msrb@suse.com>
-Date: Thu, 20 Jul 2017 17:05:23 +0200
-Subject: [PATCH] pcfGetProperties: Check string boundaries (CVE-2017-13722)
-
-Without the checks a malformed PCF file can cause the library to make
-atom from random heap memory that was behind the `strings` buffer.
-This may crash the process or leak information.
-
-Signed-off-by: Julien Cristau <jcristau@debian.org>
-Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
----
- src/bitmap/pcfread.c | 13 +++++++++++--
- 1 file changed, 11 insertions(+), 2 deletions(-)
-
-diff --git a/src/bitmap/pcfread.c b/src/bitmap/pcfread.c
-index dab1c44..ae34c28 100644
---- a/src/bitmap/pcfread.c
-+++ b/src/bitmap/pcfread.c
-@@ -45,6 +45,7 @@ from The Open Group.
- 
- #include <stdarg.h>
- #include <stdint.h>
-+#include <string.h>
- 
- void
- pcfError(const char* message, ...)
-@@ -311,11 +312,19 @@ pcfGetProperties(FontInfoPtr pFontInfo, FontFilePtr file,
-     if (IS_EOF(file)) goto Bail;
-     position += string_size;
-     for (i = 0; i < nprops; i++) {
-+	if (props[i].name >= string_size) {
-+	    pcfError("pcfGetProperties(): String starts out of bounds (%ld/%d)\n", props[i].name, string_size);
-+	    goto Bail;
-+	}
- 	props[i].name = MakeAtom(strings + props[i].name,
--				 strlen(strings + props[i].name), TRUE);
-+				 strnlen(strings + props[i].name, string_size - props[i].name), TRUE);
- 	if (isStringProp[i]) {
-+	    if (props[i].value >= string_size) {
-+		pcfError("pcfGetProperties(): String starts out of bounds (%ld/%d)\n", props[i].value, string_size);
-+		goto Bail;
-+	    }
- 	    props[i].value = MakeAtom(strings + props[i].value,
--				      strlen(strings + props[i].value), TRUE);
-+				      strnlen(strings + props[i].value, string_size - props[i].value), TRUE);
- 	}
-     }
-     free(strings);
--- 
-2.11.0
-
diff --git a/bsp/buildroot/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash b/bsp/buildroot/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
index 81a3c9f1..1816b4bf 100644
--- a/bsp/buildroot/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
+++ b/bsp/buildroot/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
@@ -1,2 +1,5 @@
-# From https://lists.x.org/archives/xorg-announce/2015-December/002663.html
-sha256 e9fbbb475ddd171b3a6a54b989cbade1f6f874fc35d505ebc5be426bc6e4db7e  libXfont2-2.0.1.tar.bz2
+# From https://lists.x.org/archives/xorg-announce/2017-November/002824.html
+md5  b7ca87dfafeb5205b28a1e91ac3efe85  libXfont2-2.0.3.tar.bz2
+sha1 1110f1ad4061d9e8131ecb941757480e3e32bca0  libXfont2-2.0.3.tar.bz2
+sha256 0e8ab7fd737ccdfe87e1f02b55f221f0bd4503a1c5f28be4ed6a54586bac9c4e  libXfont2-2.0.3.tar.bz2
+sha512 648b664e2aa58cbc7366a1b05873aa06bd4a38060f64085783043388244af8ceced77b29a22c3ac8b6d34cd226e093bbbcc785ea1748ea65720fe7ea05b4b44b  libXfont2-2.0.3.tar.bz2
diff --git a/bsp/buildroot/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk b/bsp/buildroot/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
index fef1e683..3f1bdee4 100644
--- a/bsp/buildroot/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
+++ b/bsp/buildroot/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-XLIB_LIBXFONT2_VERSION = 2.0.1
+XLIB_LIBXFONT2_VERSION = 2.0.3
 XLIB_LIBXFONT2_SOURCE = libXfont2-$(XLIB_LIBXFONT2_VERSION).tar.bz2
 XLIB_LIBXFONT2_SITE = http://xorg.freedesktop.org/releases/individual/lib
 XLIB_LIBXFONT2_LICENSE = MIT
diff --git a/bsp/buildroot/package/xfsprogs/Config.in b/bsp/buildroot/package/xfsprogs/Config.in
index 9f0d2509..78c1aa90 100644
--- a/bsp/buildroot/package/xfsprogs/Config.in
+++ b/bsp/buildroot/package/xfsprogs/Config.in
@@ -13,4 +13,4 @@ config BR2_PACKAGE_XFSPROGS
 	help
 	  The XFS file system utilities and libraries
 
-	  http://oss.sgi.com/projects/xfs/
+	  http://xfs.org
diff --git a/bsp/buildroot/support/scripts/size-stats b/bsp/buildroot/support/scripts/size-stats
index af450003..3ff2a1ce 100755
--- a/bsp/buildroot/support/scripts/size-stats
+++ b/bsp/buildroot/support/scripts/size-stats
@@ -178,9 +178,17 @@ def gen_files_csv(filesdict, pkgsizes, outputf):
                      "File size in system (%)"])
         for f, (pkgname, filesize) in filesdict.items():
             pkgsize = pkgsizes[pkgname]
+
+            if pkgsize == 0:
+                percent_pkg = 0
+            else:
+                percent_pkg = float(filesize) / pkgsize * 100
+
+            percent_total = float(filesize) / total * 100
+
             wr.writerow([f, pkgname, filesize, pkgsize,
-                         "%.1f" % (float(filesize) / pkgsize * 100),
-                         "%.1f" % (float(filesize) / total * 100)])
+                         "%.1f" % percent_pkg,
+                         "%.1f" % percent_total])
 
 
 #
diff --git a/bsp/buildroot/toolchain/toolchain-external/toolchain-external.mk b/bsp/buildroot/toolchain/toolchain-external/toolchain-external.mk
index 48de1e71..dd07884c 100644
--- a/bsp/buildroot/toolchain/toolchain-external/toolchain-external.mk
+++ b/bsp/buildroot/toolchain/toolchain-external/toolchain-external.mk
@@ -25,4 +25,4 @@ $(error No prefix selected for external toolchain package $(BR2_PACKAGE_PROVIDES
 endif
 endif
 
-include toolchain/toolchain-external/*/*.mk
+include $(sort $(wildcard toolchain/toolchain-external/*/*.mk))